$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft File: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft (raw, json) Hash identifier: M1EhDfSjYfBPiKdjmW78gbvp16jQlvPhvwynLB5++/U= Subject key identifier: C3:5F:33:92:3A:B7:62:9A:30:C2:2C:3E:65:14:5C:CC:FE:1A:D0:DB Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB Certificate issuer: /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Certificate serial: 144D4D56EEC03DE0C725D26E264DDADA84F7AC21 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft Manifest number: 03AD Signing time: Tue 12 May 2026 14:55:25 +0000 Manifest this update: Tue 12 May 2026 14:50:25 +0000 Manifest next update: Wed 13 May 2026 15:59:25 +0000 Files and hashes: 1: 326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa (hash: sGk7ACRgj2xUOc33oWusMkib/NoqUeSQmBUzgrM/Pzk=) 2: 326131343a373538313a643330303a3a2f34302d3430203d3e2037353435.roa (hash: wItkpJymrUCqPyPQxmidR50wXi9vPRRLUnb7cZMe6Lc=) 3: 326131343a373538313a643230303a3a2f34302d3430203d3e203533363637.roa (hash: uQ6YdX5/WUQ6EE4b+PyH9fVZLMZegSMvb7FY+FXaqfI=) 4: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl (hash: y26K4YZXmfEQDSBzSbRrsCCAY6b/zAQH5jfbNBk3DWg=) 5: 326131343a373538313a643130303a3a2f34302d3430203d3e203533363637.roa (hash: KwLIWCSeFKTrv4VaOW0JjqLpPgihB6aRK4CEWI2xsJA=) 6: 326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa (hash: w6hSAZV2VtLUk8Lcxp15MhyaA5GCxf2u983hjysiB3o=) 7: 326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa (hash: 8MoYL/dCbo6NYCzCa70zhAMqC8Td9hN9QuTr1/49Ea8=) 8: 326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa (hash: Kd+QOrRraURrnm7DiXTAoMIjS5JdQwzRrqoABDmfXRA=) 9: 326131343a373538313a643130303a3a2f34302d3438203d3e203533363637.roa (hash: AlY5Z1AihWSFAtcBObR2iby3i12VIhHyXxVUpZHdoc0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 15:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:4d:4d:56:ee:c0:3d:e0:c7:25:d2:6e:26:4d:da:da:84:f7:ac:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Validity Not Before: May 12 14:50:25 2026 GMT Not After : May 13 15:59:25 2026 GMT Subject: CN=C35F33923AB7629A30C22C3E65145CCCFE1AD0DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1e:42:fa:ae:92:47:c8:49:44:81:fd:19:92: 5c:2d:48:7e:9a:a1:cc:29:68:bd:e4:96:a2:5a:f4: ef:77:a1:2a:40:ae:6d:14:2f:5f:12:8b:13:d4:a8: 87:91:b2:e5:18:1e:b3:49:8f:71:2a:75:bc:c9:71: 03:9a:16:9b:5e:4d:75:1c:8a:3c:31:61:8f:e5:b1: 17:dd:94:09:bf:70:7d:12:c8:cd:63:c2:6d:54:a7: d4:17:b2:66:6e:b3:bc:a5:66:c5:bb:b1:9c:49:7f: 88:f2:76:8e:bc:6e:c7:1a:bb:cc:59:56:5c:ad:0f: 0c:f3:fb:33:02:9f:a4:de:01:60:19:47:ab:0b:57: b1:79:b0:9b:33:56:94:4f:40:fb:bf:69:0b:66:c9: 13:c4:52:44:2a:56:0c:7a:64:55:2d:e9:f8:06:0d: 3f:5f:c5:69:0d:14:b5:f7:26:3d:72:2e:6f:b6:64: 6b:42:3c:df:bc:7c:cb:00:c8:de:04:3b:ef:15:04: ea:10:e9:a4:5d:8f:95:52:22:76:9f:c7:60:5f:40: 41:91:a5:5a:5e:29:48:ee:a5:aa:e0:be:52:24:e6: ec:04:e8:19:09:18:e8:ef:47:0c:be:0a:2c:d1:e4: bc:fe:11:a2:0d:7c:a5:c6:ed:48:27:df:aa:5b:73: 73:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5F:33:92:3A:B7:62:9A:30:C2:2C:3E:65:14:5C:CC:FE:1A:D0:DB X509v3 Authority Key Identifier: keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:a5:d8:7e:4b:c7:42:1d:eb:b2:a9:68:01:e5:fd:ee:3a:64: c1:8d:bb:11:6f:fc:90:6c:50:5f:51:0b:0a:db:3d:57:ee:f3: 42:3c:7c:d6:81:80:61:63:e3:65:cd:37:ca:20:49:ab:d5:85: 01:52:a0:ca:79:95:fa:32:49:8c:9c:97:6a:78:33:11:11:3b: 8f:f1:b3:65:00:68:fe:01:8f:9f:cd:83:06:a5:6b:b9:28:7d: 19:ee:21:03:2c:98:a2:e5:fe:9c:d4:4b:5f:ba:3c:8a:2d:47: 17:ec:99:1d:f5:58:0f:f7:d1:31:be:8e:47:a8:e2:5c:37:ba: 09:5d:7b:84:f3:2c:84:5b:fc:87:26:6d:a8:52:e6:5e:3d:3e: c3:15:c4:5d:d6:1e:af:68:f6:8b:1c:fa:d4:e0:13:31:e0:1f: a1:7e:1b:22:b6:46:f2:80:83:b6:f1:e4:bb:f8:a9:df:99:94: f4:79:8e:64:e0:b7:e2:c2:12:29:e2:dd:c2:36:9a:bf:3b:58: 88:67:d3:2c:f9:bb:df:ca:97:e0:eb:98:62:63:9c:63:43:1b: b5:35:bf:89:46:b5:2d:79:8f:4e:48:a8:e1:cf:62:2b:73:9f: 05:7d:49:d0:35:b1:e5:52:d7:25:a2:1d:92:55:cd:50:83:54: 81:64:c6:af -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUFE1NVu7APeDHJdJuJk3a2oT3rCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFC RUM4OTBCQjAeFw0yNjA1MTIxNDUwMjVaFw0yNjA1MTMxNTU5MjVaMDMxMTAvBgNV BAMTKEMzNUYzMzkyM0FCNzYyOUEzMEMyMkMzRTY1MTQ1Q0NDRkUxQUQwREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClHkL6rpJHyElEgf0ZklwtSH6a ocwpaL3klqJa9O93oSpArm0UL18SixPUqIeRsuUYHrNJj3EqdbzJcQOaFpteTXUc ijwxYY/lsRfdlAm/cH0SyM1jwm1Up9QXsmZus7ylZsW7sZxJf4jydo68bscau8xZ VlytDwzz+zMCn6TeAWAZR6sLV7F5sJszVpRPQPu/aQtmyRPEUkQqVgx6ZFUt6fgG DT9fxWkNFLX3Jj1yLm+2ZGtCPN+8fMsAyN4EO+8VBOoQ6aRdj5VSInafx2BfQEGR pVpeKUjupargvlIk5uwE6BkJGOjvRwy+CizR5Lz+EaINfKXG7Ugn36pbc3N9AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUw18zkjq3Ypowwiw+ZRRczP4a0NswHwYDVR0j BBgwFoAUH0yCgnaplmhlqytZUz0csb7IkLswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjU5YzEwNmMtNTNiNC00ZTkyLTlmYmEtZDYwODI3YjVi ZGI4LzAvMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFCRUM4OTBCQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xRjRDODI4Mjc2QTk5NjY4NjVBQjJCNTk1 MzNEMUNCMUJFQzg5MEJCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I1OWMxMDZjLTUzYjQtNGU5Mi05ZmJhLWQ2MDgyN2I1YmRiOC8wLzFGNEM4Mjgy NzZBOTk2Njg2NUFCMkI1OTUzM0QxQ0IxQkVDODkwQkIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAUpdh+ S8dCHeuyqWgB5f3uOmTBjbsRb/yQbFBfUQsK2z1X7vNCPHzWgYBhY+NlzTfKIEmr 1YUBUqDKeZX6MkmMnJdqeDMRETuP8bNlAGj+AY+fzYMGpWu5KH0Z7iEDLJii5f6c 1EtfujyKLUcX7Jkd9VgP99Exvo5HqOJcN7oJXXuE8yyEW/yHJm2oUuZePT7DFcRd 1h6vaPaLHPrU4BMx4B+hfhsitkbygIO28eS7+KnfmZT0eY5k4LfiwhIp4t3CNpq/ O1iIZ9Ms+bvfypfg65hiY5xjQxu1Nb+JRrUteY9OSKjhz2Irc58FfUnQNbHlUtcl oh2SVc1Qg1SBZMav -----END CERTIFICATE-----Generated at Wed May 13 04:49:59 2026 by rpki-client