$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft File: E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft (raw, json) Hash identifier: XKr9FYZ1pULIEUYbs5mv+Vwild0mNcpu+exMxBYPgp4= Subject key identifier: 2B:86:84:B3:EC:21:7B:92:9E:CD:D6:71:3C:C7:62:50:A6:9A:70:CF Authority key identifier: E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C Certificate issuer: /CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C Certificate serial: 5F4638DE267781557F56A40EB087AD3B2A49E944 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft Manifest number: 0129 Signing time: Wed 25 Mar 2026 18:14:18 +0000 Manifest this update: Wed 25 Mar 2026 18:09:17 +0000 Manifest next update: Thu 26 Mar 2026 19:26:17 +0000 Files and hashes: 1: E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl (hash: 8ihbwVreVrh3Qr8ju96oNh7aW3nKyWojzf+NwCYCvAY=) 2: 326131343a373538313a333966663a3a2f34382d3634203d3e20313939373633.roa (hash: aCq/jKA1GGay4DL6ZU284taMNq3/9u17cmIYZEHZP9Y=) 3: 326131343a373538313a333936323a3a2f34382d3634203d3e20313939373633.roa (hash: oCjl7TQd0xhHJ9B8MSi48PHfMmMZri62JgNd0y5lz+I=) 4: 326131343a373538313a333937373a3a2f34382d3634203d3e20313939373633.roa (hash: 6W8xvuJxWbwP3DdLZ6e8Sa+pGsBO2lzU710UJC28MHg=) 5: 326131343a373538313a333936363a3a2f34382d3634203d3e20313939373633.roa (hash: +BDNAKrmKMibTT2xQwMz+K+qOmE3P6UuU3BvjMVQ0iI=) 6: 326131343a373538313a333936313a3a2f34382d3634203d3e20313939373633.roa (hash: V25LiWzxXAuXeQVJTbroIsiNYHCj/akr9IIXebvCE7Q=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 19:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:46:38:de:26:77:81:55:7f:56:a4:0e:b0:87:ad:3b:2a:49:e9:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C Validity Not Before: Mar 25 18:09:17 2026 GMT Not After : Mar 26 19:26:17 2026 GMT Subject: CN=2B8684B3EC217B929ECDD6713CC76250A69A70CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f7:6f:65:7a:e5:75:88:d1:53:7e:1e:1b:03: 79:49:d2:32:19:ef:55:8d:32:73:5b:c3:ed:b3:9b: d4:a9:b3:11:77:c6:9b:7d:94:1a:7e:43:b2:ca:88: bf:a6:94:bb:b4:8a:23:cf:8d:34:66:3c:ff:e6:ea: bc:a2:4d:6d:4a:a6:2a:54:07:39:49:d3:4f:c7:b3: ad:b6:d3:e2:20:f2:f5:f8:a0:59:be:33:0b:a9:35: c2:f2:45:55:25:4f:2b:09:f2:b4:9d:1b:c7:42:43: ab:52:1b:7d:36:5e:93:39:e1:29:db:5e:7d:48:c6: 06:43:0e:ad:b7:54:00:60:24:d5:b1:28:8a:aa:1f: 7e:2b:09:5a:65:ec:e5:1a:82:b7:c0:e4:09:c3:0d: 7d:8a:38:d0:40:97:03:1d:a8:77:44:ed:85:66:83: 84:fe:2f:af:51:88:f2:36:d7:a5:a5:1f:20:e7:a2: 8c:b3:d6:0a:b6:33:02:e1:13:af:8d:b0:6b:59:af: 59:93:1e:39:92:18:c2:63:e4:af:87:30:17:c5:56: d4:b0:df:b1:8c:91:25:b5:6a:55:5e:41:be:47:b1: f9:f3:4d:ef:e5:d0:dd:ea:29:0f:d8:5a:b2:23:67: c5:c7:26:bb:5d:3e:db:0c:56:f5:10:71:e1:e0:09: a0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:86:84:B3:EC:21:7B:92:9E:CD:D6:71:3C:C7:62:50:A6:9A:70:CF X509v3 Authority Key Identifier: keyid:E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:e1:b0:1f:43:39:7b:3d:af:f2:a1:31:a2:07:9a:25:71:ed: 2f:e5:a4:dd:1a:b2:fb:ee:f3:23:12:73:70:00:69:3e:ff:f0: b1:d7:26:c8:0f:cf:75:e0:f0:56:13:fc:e2:7e:02:89:29:61: 72:0c:97:fb:8d:e7:d0:00:b9:24:b1:61:39:a5:6b:c1:5e:6a: d3:fb:38:07:c3:dc:17:d7:e3:56:6f:ca:4f:7b:5b:50:7a:09: 1d:4c:67:da:64:1d:51:30:b4:42:7d:33:a5:eb:0f:33:52:13: 1e:5f:23:32:9a:75:6a:30:8a:a6:e9:7a:80:1c:37:9f:89:90: 0f:a6:b5:e0:d0:c0:3c:f7:a6:dc:32:aa:60:9d:47:86:27:da: 70:08:f6:68:ad:9e:02:dc:7d:44:8a:95:a8:5b:22:3f:ea:05: 92:ee:a2:1d:bf:e8:a6:06:5c:a9:1c:17:cb:a1:27:d2:f0:39: 8f:42:cd:28:28:99:f1:65:bc:e5:ed:41:4e:4e:84:33:88:9d: 92:9c:62:d7:94:65:81:26:33:c2:f3:f9:f0:02:2b:3b:d9:2f: 4c:fd:48:6d:21:19:ad:c3:d3:04:f2:6b:b3:d5:7f:06:2d:94: 56:16:24:05:99:ab:2c:92:7f:3b:ad:cf:3a:2c:6f:25:6d:d8: 08:76:ae:45 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUX0Y43iZ3gVV/VqQOsIetOypJ6UQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5RjkxNUQ4NkJCOUYxM0QwRjIyOUNBNzhDRDZEOUYz RUFCQ0Y3QzAeFw0yNjAzMjUxODA5MTdaFw0yNjAzMjYxOTI2MTdaMDMxMTAvBgNV BAMTKDJCODY4NEIzRUMyMTdCOTI5RUNERDY3MTNDQzc2MjUwQTY5QTcwQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd929leuV1iNFTfh4bA3lJ0jIZ 71WNMnNbw+2zm9SpsxF3xpt9lBp+Q7LKiL+mlLu0iiPPjTRmPP/m6ryiTW1KpipU BzlJ00/Hs6220+Ig8vX4oFm+MwupNcLyRVUlTysJ8rSdG8dCQ6tSG302XpM54Snb Xn1IxgZDDq23VABgJNWxKIqqH34rCVpl7OUagrfA5AnDDX2KONBAlwMdqHdE7YVm g4T+L69RiPI216WlHyDnooyz1gq2MwLhE6+NsGtZr1mTHjmSGMJj5K+HMBfFVtSw 37GMkSW1alVeQb5HsfnzTe/l0N3qKQ/YWrIjZ8XHJrtdPtsMVvUQceHgCaBzAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUK4aEs+whe5KezdZxPMdiUKaacM8wHwYDVR0j BBgwFoAU6J+RXYa7nxPQ8inKeM1tnz6rz3wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzU4MzZlNjAtNmE5Mi00N2VmLTliOWItOTJhODRkNmQz NWJhLzEvRTg5RjkxNUQ4NkJCOUYxM0QwRjIyOUNBNzhDRDZEOUYzRUFCQ0Y3Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9FODlGOTE1RDg2QkI5RjEzRDBGMjI5Q0E3 OENENkQ5RjNFQUJDRjdDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M1ODM2ZTYwLTZhOTItNDdlZi05YjliLTkyYTg0ZDZkMzViYS8xL0U4OUY5MTVE ODZCQjlGMTNEMEYyMjlDQTc4Q0Q2RDlGM0VBQkNGN0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAT4bAf Qzl7Pa/yoTGiB5olce0v5aTdGrL77vMjEnNwAGk+//Cx1ybID8914PBWE/zifgKJ KWFyDJf7jefQALkksWE5pWvBXmrT+zgHw9wX1+NWb8pPe1tQegkdTGfaZB1RMLRC fTOl6w8zUhMeXyMymnVqMIqm6XqAHDefiZAPprXg0MA896bcMqpgnUeGJ9pwCPZo rZ4C3H1EipWoWyI/6gWS7qIdv+imBlypHBfLoSfS8DmPQs0oKJnxZbzl7UFOToQz iJ2SnGLXlGWBJjPC8/nwAis72S9M/UhtIRmtw9ME8muz1X8GLZRWFiQFmasskn87 rc86LG8lbdgIdq5F -----END CERTIFICATE-----Generated at Thu Mar 26 04:18:31 2026 by rpki-client