$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json) Hash identifier: H2F5drQwlB2xH4i7IMlcLALR6BQQXYN/0t4znAoAKB0= Subject key identifier: 73:D2:A8:C9:25:53:2F:30:B3:DB:11:2E:62:ED:80:F5:EF:37:8B:AA Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: 2841A614CBC75CBA67B8CB356ECEDBC2ECB164B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft Manifest number: 046E Signing time: Wed 25 Mar 2026 20:36:40 +0000 Manifest this update: Wed 25 Mar 2026 20:31:40 +0000 Manifest next update: Thu 26 Mar 2026 21:05:40 +0000 Files and hashes: 1: 3138352e31332e3232362e302f32342d3234203d3e20313532313739.roa (hash: kbUfx2g7/W6xr6BcRBqigrahrWSKqlZaZ80tT5+SQUk=) 2: 3138352e31332e3232372e302f32342d3234203d3e2039333034.roa (hash: K2jdp87W7OWk11i68RJYc6WUM+0fdCVTP9+PN22bU6U=) 3: 3135392e3235332e372e302f32342d3234203d3e20323134313433.roa (hash: 8/3XzRXXjmYpSthB/PqRmvioB+R4a98BuFhtWRNYmtk=) 4: 3135392e3235332e352e302f32342d3234203d3e203533333536.roa (hash: 9QDAlicDZU2dKA/slyHao02LhaPY7/2iCnESN6BbiqA=) 5: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: WedmFf2QIQuuVKf/1QK4DuIi+i1j87BtcRZVJGzgY68=) 6: 3138352e31332e3232352e302f32342d3234203d3e20323132323338.roa (hash: aEdAeNisTHp0DrhGmu6wes4iqejlgHHMcCeDYK0A3FQ=) 7: 3135392e3235332e332e302f32342d3234203d3e203533333536.roa (hash: uV5gP669aq0NtuCXuZBm6wWsNYwP/024H/522nPjCx8=) 8: 3135392e3235332e362e302f32342d3234203d3e20323134313433.roa (hash: ium02BtB+GfbIHn2YGUt7i7of/NJnXnez2EEtYL+duE=) 9: 3138352e31332e3232342e302f32342d3234203d3e20313337323335.roa (hash: jnZiGfbEu8z6NlJ5TJoew5fxaWLyymqCZpmvsdzl5qs=) 10: 3135392e3235332e342e302f32342d3234203d3e20323134313433.roa (hash: JO9eMRAwPS+hZf1UF8eYFlm1nYrsRkC7Oj1Lhed/bAU=) 11: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: zsBejqIEW0ykfQxmAmWNzruVR+jV4bpZsGHbNQQgavw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 21:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:41:a6:14:cb:c7:5c:ba:67:b8:cb:35:6e:ce:db:c2:ec:b1:64:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: Mar 25 20:31:40 2026 GMT Not After : Mar 26 21:05:40 2026 GMT Subject: CN=73D2A8C925532F30B3DB112E62ED80F5EF378BAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e4:07:d4:bd:e9:25:30:33:92:bd:ac:ad:bd: 14:18:16:cc:98:cc:f0:0b:24:89:d8:bc:83:2b:83: 9f:3a:37:39:62:86:ef:00:99:0a:e4:12:a6:6c:22: 26:95:52:14:67:9a:81:db:bc:32:69:8f:5a:31:c4: 95:24:3d:c7:49:54:e5:8e:a8:e6:0b:ee:e2:53:14: 88:87:6e:40:99:87:0c:21:52:be:8f:aa:5d:41:ac: 08:a2:1d:74:76:8a:2b:da:6f:6c:f9:e4:57:6a:7f: 2d:05:c1:42:55:94:6d:04:ba:33:1a:a3:3c:2e:57: 0f:3f:8a:17:88:1d:90:29:e5:b9:34:0c:d8:5f:9e: af:38:12:c4:9c:ed:73:1a:8c:51:b4:1b:46:12:53: 27:00:77:42:65:bd:7f:93:9d:ef:a6:8a:3d:58:b8: 90:52:a0:87:3e:f0:9d:90:05:a1:bf:2a:ce:25:a7: 60:60:d7:ad:f3:63:64:44:2a:ac:db:a3:6b:2c:9c: 25:3b:79:e7:42:9e:0d:0c:40:60:09:bd:02:1f:e8: 48:75:9b:33:da:56:8c:27:63:19:09:09:05:7b:09: b0:9b:79:19:6b:58:b6:45:99:18:7b:9e:6b:a2:73: 76:45:bc:a9:24:8e:5b:ea:ba:af:09:1c:c5:ba:4b: 72:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D2:A8:C9:25:53:2F:30:B3:DB:11:2E:62:ED:80:F5:EF:37:8B:AA X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:32:fa:fd:aa:16:04:9f:f1:18:0d:39:ff:c3:1d:32:bb:bf: 35:41:33:df:ef:f5:34:0e:15:ff:34:22:5d:a0:6e:99:cb:55: 48:70:fc:bc:8d:f8:ce:93:87:88:e2:92:63:ed:ba:3d:2b:2c: da:e5:87:88:ee:71:b2:cf:34:d7:cd:4a:3c:7c:82:75:c2:54: 11:1c:b6:1c:7b:0d:7a:c6:25:b4:5a:09:72:b7:50:5e:8d:0e: db:de:70:41:88:e6:18:12:e2:54:fe:33:3c:04:68:76:12:08: 2a:1e:5c:bb:de:ef:ac:94:c1:04:d5:ee:54:a2:96:a4:ee:eb: ec:fb:0d:bc:d1:ed:8a:f6:a9:9b:51:61:1c:ea:a7:28:de:b8: 76:29:0a:02:c4:92:6b:0a:f8:3d:65:e8:0c:63:04:58:15:25: 26:08:c2:db:a6:7c:84:de:49:ee:c9:e8:ef:7e:07:72:03:52: 45:5e:17:0d:fb:18:3c:17:00:45:88:e4:e4:af:18:df:c1:83: 1e:67:05:54:4c:be:1e:c3:a4:05:de:8e:f9:60:95:d3:ef:69: 51:2a:73:d5:03:ef:05:6a:95:d2:47:35:1b:87:e5:f6:09:39: 21:e7:d5:fc:59:bb:05:2d:5d:7a:b6:48:5d:5d:7b:ec:ca:9c: a9:ea:67:01 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKEGmFMvHXLpnuMs1bs7bwuyxZLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNjAzMjUyMDMxNDBaFw0yNjAzMjYyMTA1NDBaMDMxMTAvBgNV BAMTKDczRDJBOEM5MjU1MzJGMzBCM0RCMTEyRTYyRUQ4MEY1RUYzNzhCQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU5AfUveklMDOSvaytvRQYFsyY zPALJInYvIMrg586Nzlihu8AmQrkEqZsIiaVUhRnmoHbvDJpj1oxxJUkPcdJVOWO qOYL7uJTFIiHbkCZhwwhUr6Pql1BrAiiHXR2iivab2z55Fdqfy0FwUJVlG0EujMa ozwuVw8/iheIHZAp5bk0DNhfnq84EsSc7XMajFG0G0YSUycAd0JlvX+Tne+mij1Y uJBSoIc+8J2QBaG/Ks4lp2Bg163zY2REKqzbo2ssnCU7eedCng0MQGAJvQIf6Eh1 mzPaVownYxkJCQV7CbCbeRlrWLZFmRh7nmuic3ZFvKkkjlvquq8JHMW6S3LVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUc9KoySVTLzCz2xEuYu2A9e83i6owHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjL6/aoWBJ/xGA05/8Md Mru/NUEz3+/1NA4V/zQiXaBumctVSHD8vI34zpOHiOKSY+26PSss2uWHiO5xss80 181KPHyCdcJUERy2HHsNesYltFoJcrdQXo0O295wQYjmGBLiVP4zPARodhIIKh5c u97vrJTBBNXuVKKWpO7r7PsNvNHtivapm1FhHOqnKN64dikKAsSSawr4PWXoDGME WBUlJgjC26Z8hN5J7sno734HcgNSRV4XDfsYPBcARYjk5K8Y38GDHmcFVEy+HsOk Bd6O+WCV0+9pUSpz1QPvBWqV0kc1G4fl9gk5IefV/Fm7BS1derZIXV177Mqcqepn AQ== -----END CERTIFICATE-----Generated at Thu Mar 26 06:59:21 2026 by rpki-client