$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft File: C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft (raw, json) Hash identifier: psqnRom/jZsF5u0JWipu9w6jRhJNekJCUtmaLSbQKxQ= Subject key identifier: 9C:BF:85:1A:7F:7B:99:CB:DE:15:FD:A9:9A:59:FB:8D:33:92:0D:7B Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf Certificate serial: 79BCCE44F07A33D20A8C370AD01676795F397A67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft Manifest number: 0617 Signing time: Wed 25 Mar 2026 18:01:21 +0000 Manifest this update: Wed 25 Mar 2026 17:56:21 +0000 Manifest next update: Thu 26 Mar 2026 19:26:21 +0000 Files and hashes: 1: 3139332e3234362e3130332e302f32342d3234203d3e20323032373336.roa (hash: 25OCay2OV/7fsFzlQCaWuZFV/8gtz5r77rm0KuzYhQc=) 2: C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl (hash: RxVEZMDx3PcYlZ+HSX/AFMr5KaOiYj+qkPQxOszUCbI=) 3: 3139332e3234362e352e302f32342d3234203d3e20313939343135.roa (hash: lvghBplCcmXtQEEJ3nC5HmHIcxgk88drnBMjhNzmX2g=) 4: 3231372e3139382e3138372e302f32342d3234203d3e20323131343135.roa (hash: I5EY6cn+MqUeM13Ic2acCtvjkzpr7UgV9E8MpknrsP0=) 5: 3139332e3234362e3130322e302f32342d3234203d3e203630373831.roa (hash: 9YIjshhRHJCTBV0dIP18GlVU8/qr9siO7bVSgJFYoAw=) 6: 3139332e3234362e3130332e302f32342d3234203d3e20323136313338.roa (hash: fdALPGopwtGvbJEhx+/96pp78JBOCpIXPSPl4+ufmoE=) 7: 3231372e3139382e3138372e302f32342d3234203d3e20323132363039.roa (hash: DHsuIdClDCk2AbtF+6NodfNI3JEU6gbRKvoUSbt4bMQ=) 8: 3231372e3139382e3138372e302f32342d3234203d3e20323131343430.roa (hash: 1b5s7twDP9sp8gcJ29rXGkFdvEaLedS6c1Dcd8xTFyM=) 9: 3139332e3234362e342e302f32342d3234203d3e20313335343032.roa (hash: x5G3aikxww4wLRaoWnz2KkIIppe2I2SZAi3PiElvQpI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 19:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:bc:ce:44:f0:7a:33:d2:0a:8c:37:0a:d0:16:76:79:5f:39:7a:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf Validity Not Before: Mar 25 17:56:21 2026 GMT Not After : Mar 26 19:26:21 2026 GMT Subject: CN=9CBF851A7F7B99CBDE15FDA99A59FB8D33920D7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:de:7d:59:35:4e:fa:2f:f3:8b:4c:a9:8b:71: de:58:07:3c:32:c3:a5:1d:8a:90:da:e8:6a:03:f6: 21:f0:81:c4:88:34:2a:75:b3:52:08:ae:4e:f3:98: 2e:fb:d0:f6:c9:4c:0b:5f:14:23:12:6d:cc:a8:4a: 02:20:94:22:21:9b:68:78:5f:5d:8e:f7:12:f4:70: 49:25:ad:b7:e3:10:e7:f6:c6:02:b0:e7:ff:aa:cb: 51:de:23:50:0e:4e:ab:d5:92:cb:83:4d:fa:61:45: 11:a1:f0:d1:79:ff:e3:8a:9d:50:e2:29:91:ce:71: 3b:88:b1:1b:d5:7f:e9:2f:be:66:24:38:55:0f:ee: 5b:ea:e7:60:51:76:79:67:e3:1d:b2:2f:9d:d5:51: 25:32:0c:6a:fe:18:4f:96:46:ac:48:fe:e9:e2:be: d6:90:b9:df:8b:21:c3:76:46:9b:26:82:65:57:c4: b2:ef:eb:9b:90:1d:77:3b:2c:a0:20:09:bb:4f:93: 07:86:73:ae:9a:ae:c0:05:9e:56:b4:ca:90:ac:52: 9c:77:99:c8:c9:2d:5d:04:53:b9:28:3d:17:a1:21: 8a:7f:a4:62:64:50:36:b2:09:61:9e:44:c8:30:46: 04:b4:f5:01:dd:c1:be:d9:f4:3b:06:78:f3:00:2c: 0c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:BF:85:1A:7F:7B:99:CB:DE:15:FD:A9:9A:59:FB:8D:33:92:0D:7B X509v3 Authority Key Identifier: keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:36:9c:9c:c0:c9:71:86:dd:32:b5:12:d8:fd:58:61:e1:fd: d5:86:84:e7:41:34:cc:74:18:c6:91:3e:b3:72:67:e2:5f:31: fc:42:c2:61:15:e7:72:99:98:89:b4:26:90:55:50:57:76:83: 78:f1:e3:1f:43:75:49:98:fa:3b:8d:ef:12:2d:dc:a5:54:01: 04:1f:71:8a:7e:5e:7a:28:19:3b:1a:13:d0:ad:b0:84:7d:0a: 63:db:ec:dc:47:83:83:72:ec:28:f5:31:ec:49:e9:0f:d6:a2: 9a:e0:1d:06:2f:0e:5a:c6:43:06:ff:4d:e0:4f:8a:e3:82:1e: 92:2e:3b:84:71:6f:3c:18:50:bd:ef:0c:b9:5d:39:2d:9e:8a: 7e:99:83:70:df:ee:fe:a6:aa:56:c1:e9:5a:08:28:d5:32:15: b7:da:61:b5:36:12:be:aa:c8:83:db:bc:f0:72:c2:46:b9:3d: 7e:39:16:58:7a:1d:f2:62:18:18:58:81:55:ca:c7:6c:91:e5: 0f:4f:a1:e7:1f:8e:81:fc:de:7d:19:13:47:62:6c:11:49:f2: 1c:f7:2b:1f:6f:05:cf:0d:84:d9:6f:d2:03:57:07:eb:e0:c6: 48:3b:b2:92:96:f8:ad:dc:bd:99:35:9a:1e:0f:53:0a:18:da: d1:7f:7e:fe -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUebzORPB6M9IKjDcK0BZ2eV85emcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc5ZDAyYzYxODg2MWFkNDViYWY3OGNlMzkwMjNjYmNi NDk0YTdiZjAeFw0yNjAzMjUxNzU2MjFaFw0yNjAzMjYxOTI2MjFaMDMxMTAvBgNV BAMTKDlDQkY4NTFBN0Y3Qjk5Q0JERTE1RkRBOTlBNTlGQjhEMzM5MjBEN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC23n1ZNU76L/OLTKmLcd5YBzwy w6UdipDa6GoD9iHwgcSINCp1s1IIrk7zmC770PbJTAtfFCMSbcyoSgIglCIhm2h4 X12O9xL0cEklrbfjEOf2xgKw5/+qy1HeI1AOTqvVksuDTfphRRGh8NF5/+OKnVDi KZHOcTuIsRvVf+kvvmYkOFUP7lvq52BRdnln4x2yL53VUSUyDGr+GE+WRqxI/uni vtaQud+LIcN2RpsmgmVXxLLv65uQHXc7LKAgCbtPkweGc66arsAFnla0ypCsUpx3 mcjJLV0EU7koPRehIYp/pGJkUDayCWGeRMgwRgS09QHdwb7Z9DsGePMALAzVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUnL+FGn97mcveFf2pmln7jTOSDXswHwYDVR0j BBgwFoAUx50CxhiGGtRbr3jOOQI8vLSUp78wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDkwYTkzNWEtYTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0 ZjI4LzAvQzc5RDAyQzYxODg2MUFENDVCQUY3OENFMzkwMjNDQkNCNDk0QTdCRi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3g1MEN4aGlHR3RSYnIzak9PUUk4dkxT VXA3OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOTBhOTM1YS1h NzRkLTRiOTgtOTQzMC1iYzdhZTVjMjRmMjgvMC9DNzlEMDJDNjE4ODYxQUQ0NUJB Rjc4Q0UzOTAyM0NCQ0I0OTRBN0JGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDacnMDJcYbdMrUS2P1Y YeH91YaE50E0zHQYxpE+s3Jn4l8x/ELCYRXncpmYibQmkFVQV3aDePHjH0N1SZj6 O43vEi3cpVQBBB9xin5eeigZOxoT0K2whH0KY9vs3EeDg3LsKPUx7EnpD9aimuAd Bi8OWsZDBv9N4E+K44Ieki47hHFvPBhQve8MuV05LZ6KfpmDcN/u/qaqVsHpWggo 1TIVt9phtTYSvqrIg9u88HLCRrk9fjkWWHod8mIYGFiBVcrHbJHlD0+h5x+Ogfze fRkTR2JsEUnyHPcrH28Fzw2E2W/SA1cH6+DGSDuykpb4rdy9mTWaHg9TChja0X9+ /g== -----END CERTIFICATE-----Generated at Thu Mar 26 07:14:44 2026 by rpki-client