$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: I/ymQWR8DHO1B93hGetlswKU4iyFvZImHY0yW2Dxrw0= Subject key identifier: 96:7A:40:26:09:9A:5D:79:F9:55:3A:98:28:3C:E3:60:2E:9B:85:8F Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: D543514F4B7BF635CDCC346A9B75BD667C19F9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 03AC Signing time: Thu 26 Mar 2026 13:33:21 +0000 Manifest this update: Thu 26 Mar 2026 13:28:21 +0000 Manifest next update: Fri 27 Mar 2026 15:18:21 +0000 Files and hashes: 1: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=) 2: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=) 3: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=) 4: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: q6pUV6zyLgy5iz4rBp0u/JDvv3Mq/ssZO9Kfj4UGPPc=) 5: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: mYNfTuj9jFpay8yWulA5RYL5CaHVvZSr/ehyF3VjchI=) 6: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=) 7: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=) 8: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=) 9: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=) 10: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=) 11: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=) 12: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=) 13: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=) 14: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=) 15: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=) 16: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=) 17: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 15:18:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: d5:43:51:4f:4b:7b:f6:35:cd:cc:34:6a:9b:75:bd:66:7c:19:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Mar 26 13:28:21 2026 GMT Not After : Mar 27 15:18:21 2026 GMT Subject: CN=967A4026099A5D79F9553A98283CE3602E9B858F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a0:ba:c4:0d:d0:42:09:94:5c:7f:3e:ae:e4: ca:b5:21:e0:22:ba:2f:40:2f:ff:68:02:da:42:72: 23:ef:0f:e9:8d:db:bd:35:b4:07:69:91:9b:7a:4e: 09:92:01:c8:2e:ba:9f:1c:c8:9f:97:e7:b7:43:53: e6:d2:08:40:54:89:2b:67:39:b5:3b:fe:5e:c2:ee: b2:97:24:43:34:3b:9d:32:a8:2b:b1:97:17:27:45: 9b:b7:a1:09:0a:a1:f2:73:f8:9b:e7:1d:6a:4e:f1: cd:d7:57:a6:eb:5a:58:25:98:6a:07:ff:b0:d1:e4: 62:b4:23:e0:60:ed:a2:6b:62:c4:83:89:cf:98:a4: e6:28:26:96:ca:40:d4:05:7c:c3:fd:ad:c6:3f:97: de:1e:df:30:39:79:1d:2c:c0:17:ff:d5:57:5e:50: 61:48:84:dc:39:4a:b6:92:0d:73:3f:c8:e7:1e:55: b5:d0:fd:e8:cf:57:1a:af:4c:4f:dc:22:03:92:c9: 4e:60:fa:ff:12:91:4f:a9:fd:70:17:48:b3:83:66: 93:87:88:54:c3:04:38:63:a4:59:18:30:fa:25:91: a7:26:a2:b4:5c:9b:62:3e:5a:f7:fe:8b:3d:fb:96: 98:ea:8a:d0:fd:05:00:32:3d:27:c4:f5:3f:e0:18: e8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:7A:40:26:09:9A:5D:79:F9:55:3A:98:28:3C:E3:60:2E:9B:85:8F X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:08:39:1f:63:70:13:f8:e9:8e:17:11:4c:ce:15:b0:b2:a3: 7b:82:86:2b:74:75:ef:2b:97:a5:9f:13:62:50:24:d4:26:41: 20:8a:fa:77:d4:ef:7c:4c:61:ce:02:57:a8:66:96:b0:28:e4: 0e:45:86:2d:89:43:0b:73:99:11:b3:10:97:81:3c:a9:bb:5e: 93:16:40:a5:69:62:f9:9d:9f:43:17:b9:be:6a:b0:de:8f:1c: 18:68:c7:a7:2e:69:05:4d:d2:2f:f0:fd:3e:be:f6:f5:2a:80: d2:30:b9:c9:b3:13:bd:5b:b7:bf:e2:14:a3:3e:a6:3b:dc:7a: b1:91:ff:57:7a:99:a9:72:9b:e0:2f:11:54:56:46:33:18:c9: 86:36:af:e8:86:d1:2f:32:d7:02:3e:77:31:6f:2a:de:4e:83: 09:28:19:5e:6c:d3:50:24:68:c9:e8:55:67:50:21:53:22:a7: 38:f6:0a:d7:fa:ff:6d:2a:97:e2:6d:4f:e1:68:50:c3:9b:61: 1a:45:da:64:57:d4:55:12:1b:47:9b:c7:64:23:c7:00:83:b0: e8:d4:77:e2:bb:81:e9:1f:ad:f5:ff:f8:71:2b:fe:94:e7:a1: cf:ca:5b:b1:96:74:ba:4f:6f:79:45:81:68:5b:18:bc:0a:8e: 7b:d4:cd:95 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUANVDUU9Le/Y1zcw0apt1vWZ8GfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNjAzMjYxMzI4MjFaFw0yNjAzMjcxNTE4MjFaMDMxMTAvBgNV BAMTKDk2N0E0MDI2MDk5QTVENzlGOTU1M0E5ODI4M0NFMzYwMkU5Qjg1OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzoLrEDdBCCZRcfz6u5Mq1IeAi ui9AL/9oAtpCciPvD+mN2701tAdpkZt6TgmSAcguup8cyJ+X57dDU+bSCEBUiStn ObU7/l7C7rKXJEM0O50yqCuxlxcnRZu3oQkKofJz+JvnHWpO8c3XV6brWlglmGoH /7DR5GK0I+Bg7aJrYsSDic+YpOYoJpbKQNQFfMP9rcY/l94e3zA5eR0swBf/1Vde UGFIhNw5SraSDXM/yOceVbXQ/ejPVxqvTE/cIgOSyU5g+v8SkU+p/XAXSLODZpOH iFTDBDhjpFkYMPolkacmorRcm2I+Wvf+iz37lpjqitD9BQAyPSfE9T/gGOhBAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUlnpAJgmaXXn5VTqYKDzjYC6bhY8wHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBnCDkf Y3AT+OmOFxFMzhWwsqN7goYrdHXvK5elnxNiUCTUJkEgivp31O98TGHOAleoZpaw KOQORYYtiUMLc5kRsxCXgTypu16TFkClaWL5nZ9DF7m+arDejxwYaMenLmkFTdIv 8P0+vvb1KoDSMLnJsxO9W7e/4hSjPqY73Hqxkf9XepmpcpvgLxFUVkYzGMmGNq/o htEvMtcCPncxbyreToMJKBlebNNQJGjJ6FVnUCFTIqc49grX+v9tKpfibU/haFDD m2EaRdpkV9RVEhtHm8dkI8cAg7Do1Hfiu4HpH631//hxK/6U56HPyluxlnS6T295 RYFoWxi8Co571M2V -----END CERTIFICATE-----Generated at Thu Mar 26 20:59:20 2026 by rpki-client