$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: In79kKWDKqQ41ErorjBACxMiGvawKLXT/7FPnxI6Rl0= Subject key identifier: 6A:E2:9B:96:D3:0C:88:2F:DA:70:FE:66:1E:49:5E:6A:20:5C:1F:1E Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 2E9455F57DCE5B7B8D2421916B6BDB88828F8FBE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 03AB Signing time: Wed 25 Mar 2026 18:51:10 +0000 Manifest this update: Wed 25 Mar 2026 18:46:10 +0000 Manifest next update: Thu 26 Mar 2026 21:33:10 +0000 Files and hashes: 1: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=) 2: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=) 3: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=) 4: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=) 5: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=) 6: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=) 7: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: qHW35izhoeqg2pMbr7ey3eUV/ZGq8T1kXNRPim5fJjc=) 8: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=) 9: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=) 10: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=) 11: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: q6pUV6zyLgy5iz4rBp0u/JDvv3Mq/ssZO9Kfj4UGPPc=) 12: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=) 13: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=) 14: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=) 15: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=) 16: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=) 17: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 21:33:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:94:55:f5:7d:ce:5b:7b:8d:24:21:91:6b:6b:db:88:82:8f:8f:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Mar 25 18:46:10 2026 GMT Not After : Mar 26 21:33:10 2026 GMT Subject: CN=6AE29B96D30C882FDA70FE661E495E6A205C1F1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fe:1f:fc:a5:74:8c:cf:03:19:5b:00:17:6c: 8a:08:49:03:d9:3a:16:32:fd:ee:c9:4e:c4:3a:f3: 35:14:fe:de:db:31:af:a5:72:d1:39:b6:50:4b:c2: 29:f7:7d:35:8c:2c:d3:d9:7b:77:35:71:6c:da:e3: 9d:5f:6a:3f:47:0c:fb:66:18:ce:05:82:44:34:17: 5d:56:ab:75:be:55:3b:1d:bf:c8:eb:0f:47:d1:ea: 4e:cf:52:27:b4:87:df:cc:34:bd:1e:58:28:e4:8d: 3c:9d:c3:70:46:fe:a3:05:50:3d:eb:01:40:f1:2f: 1a:b3:43:94:5c:44:23:ef:15:5e:a9:f2:43:1d:b9: d8:43:8f:9f:d8:0e:fe:b9:4b:0f:25:3c:36:9b:98: ab:ca:ab:95:21:e9:a6:a4:b3:d3:00:43:75:71:9c: 68:0e:52:99:74:2a:99:00:46:c7:19:66:a2:98:3d: 85:e3:07:52:f0:ac:e1:f3:98:3f:ea:8c:da:d9:a2: 7d:e7:ec:40:84:be:04:fa:3d:b3:ac:d2:1f:71:3e: f9:ed:ee:8f:6e:85:4c:75:a8:e7:8f:4e:93:68:c3: f5:97:70:ca:92:56:7e:1f:16:47:ff:86:bb:08:9b: 1f:7f:4f:a3:0b:e9:76:68:d0:20:44:c6:ec:0b:cd: a8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E2:9B:96:D3:0C:88:2F:DA:70:FE:66:1E:49:5E:6A:20:5C:1F:1E X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:e9:86:3e:cf:1f:9e:97:0c:4f:58:c8:6f:e6:3c:0b:57:4f: a1:87:84:83:d7:82:6c:f0:80:9e:2e:90:24:e2:96:85:19:82: 27:d2:4b:0f:a0:fc:ad:6e:a0:1f:71:f9:db:66:79:fa:70:fe: 74:a3:ad:28:bd:8d:5a:20:80:98:ae:60:31:9b:d9:0c:33:bd: 4c:5d:a2:7b:87:a7:f4:2e:c2:e5:33:4c:29:49:68:81:be:26: ba:cf:ca:4f:f3:6b:1e:22:b5:47:1f:2e:4b:32:55:f4:24:3d: de:3d:35:9a:f8:ad:4d:65:07:66:74:21:5b:48:d6:a3:6c:66: 7c:4d:a1:90:fa:57:01:fa:14:12:b8:2a:ab:4f:c6:1c:50:30: 24:92:37:f4:75:e1:fa:01:a9:f8:aa:9f:3c:16:02:c2:22:5b: d0:46:9e:6f:54:b7:89:85:19:ac:9a:1a:fa:27:9f:ef:ca:8e: f5:3d:6d:8f:db:90:5d:a1:39:ca:56:a9:0e:64:96:03:1b:ff: 69:20:48:f5:fd:d8:dc:6e:50:7a:02:e5:bc:94:8b:c1:72:f4: 62:28:90:76:7f:81:bc:22:7f:aa:5a:fc:c5:d3:3c:4a:ab:06: 6b:7f:64:be:90:01:23:f6:1a:e4:f7:a2:a8:f8:c4:3b:9f:94: a5:37:f8:1b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULpRV9X3OW3uNJCGRa2vbiIKPj74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNjAzMjUxODQ2MTBaFw0yNjAzMjYyMTMzMTBaMDMxMTAvBgNV BAMTKDZBRTI5Qjk2RDMwQzg4MkZEQTcwRkU2NjFFNDk1RTZBMjA1QzFGMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB/h/8pXSMzwMZWwAXbIoISQPZ OhYy/e7JTsQ68zUU/t7bMa+lctE5tlBLwin3fTWMLNPZe3c1cWza451faj9HDPtm GM4FgkQ0F11Wq3W+VTsdv8jrD0fR6k7PUie0h9/MNL0eWCjkjTydw3BG/qMFUD3r AUDxLxqzQ5RcRCPvFV6p8kMdudhDj5/YDv65Sw8lPDabmKvKq5Uh6aaks9MAQ3Vx nGgOUpl0KpkARscZZqKYPYXjB1LwrOHzmD/qjNrZon3n7ECEvgT6PbOs0h9xPvnt 7o9uhUx1qOePTpNow/WXcMqSVn4fFkf/hrsImx9/T6ML6XZo0CBExuwLzahfAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUauKbltMMiC/acP5mHkleaiBcHx4wHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/6YY+ zx+elwxPWMhv5jwLV0+hh4SD14Js8ICeLpAk4paFGYIn0ksPoPytbqAfcfnbZnn6 cP50o60ovY1aIICYrmAxm9kMM71MXaJ7h6f0LsLlM0wpSWiBvia6z8pP82seIrVH Hy5LMlX0JD3ePTWa+K1NZQdmdCFbSNajbGZ8TaGQ+lcB+hQSuCqrT8YcUDAkkjf0 deH6Aan4qp88FgLCIlvQRp5vVLeJhRmsmhr6J5/vyo71PW2P25BdoTnKVqkOZJYD G/9pIEj1/djcblB6AuW8lIvBcvRiKJB2f4G8In+qWvzF0zxKqwZrf2S+kAEj9hrk 96Ko+MQ7n5SlN/gb -----END CERTIFICATE-----Generated at Thu Mar 26 11:26:54 2026 by rpki-client