$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft File: E19302BE91C9D4211CDF4AFF091055A173B3593B.mft (raw, json) Hash identifier: ybS8MkhmQ3nwkPzS7ypQMg2XSdBRUREYLOPPCTNtdlU= Subject key identifier: 9D:00:8F:22:EF:B6:F8:C9:A3:2A:F3:27:77:4B:40:BF:5E:CC:82:C0 Authority key identifier: E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B Certificate issuer: /CN=E19302BE91C9D4211CDF4AFF091055A173B3593B Certificate serial: 6D5DF926BF10E900690C2D5614530F2804DC206D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft Manifest number: 0169 Signing time: Thu 26 Mar 2026 06:06:16 +0000 Manifest this update: Thu 26 Mar 2026 06:01:16 +0000 Manifest next update: Fri 27 Mar 2026 08:48:16 +0000 Files and hashes: 1: E19302BE91C9D4211CDF4AFF091055A173B3593B.crl (hash: jp4NCOpQl92Q+FEs7PF0JKX2ZmD3a+hyaNj9iB4mW9Y=) 2: 326130373a353463313a343236313a3a2f34382d3438203d3e203436373636.roa (hash: 7m4uBl7pjkxamzWCFShzOT8dP3zXIx3Ew/sIEJmrOk4=) 3: 326130373a353463313a343234323a3a2f34382d3438203d3e20313939353138.roa (hash: BOG3fQtugkiXpKS/p2fTg16ei6qBO6dg8xuWYfodSgU=) 4: 326130373a353463313a343230303a3a2f34302d3430203d3e20313939353138.roa (hash: p0V0EhuR94jsdFZ1UsjzKoR4Va7GATjKkx+PVQ3cRs4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 05:50:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:5d:f9:26:bf:10:e9:00:69:0c:2d:56:14:53:0f:28:04:dc:20:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E19302BE91C9D4211CDF4AFF091055A173B3593B Validity Not Before: Mar 26 06:01:16 2026 GMT Not After : Mar 27 08:48:16 2026 GMT Subject: CN=9D008F22EFB6F8C9A32AF327774B40BF5ECC82C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:83:5e:09:c7:13:b9:23:d2:79:e2:24:b0:7f: 0a:f2:f9:54:46:e4:5b:62:e0:8e:22:e0:5d:c6:b3: b5:15:db:b6:2b:4b:c8:ec:bd:6d:cf:5f:37:8b:8b: d0:07:b5:1f:a4:3f:27:b0:18:4b:23:c7:cd:27:2c: f6:6c:3f:95:a5:a1:2a:1d:d1:5f:90:bb:ef:be:7b: 4d:e9:b2:d7:b8:0a:ba:7b:49:11:34:dd:65:14:31: c6:61:cf:80:3c:99:54:7e:c0:db:7b:99:85:6e:64: e0:5f:17:b4:da:6e:87:2e:7e:08:0b:d8:57:26:92: 88:7d:8b:48:85:02:be:55:18:72:1e:14:c5:7c:54: be:41:24:22:1f:2c:ae:e0:f7:cd:5f:34:09:ba:a5: fd:53:a3:9e:2d:25:83:b2:8d:03:58:ba:a0:f5:f0: 2e:ca:42:6d:59:5d:55:56:d4:1f:fa:6b:67:2a:52: 4a:91:04:72:c2:7a:bf:2d:36:65:68:6f:01:82:66: e7:b3:22:39:fb:b2:83:5c:19:73:0a:3c:11:63:a0: a4:99:a7:07:48:2f:da:60:fc:3a:f7:ea:18:4b:65: 14:62:cf:6d:e0:cf:3d:95:8e:c6:90:19:8f:ba:1c: 9e:79:a3:31:a8:f3:10:5a:8d:90:33:d7:df:f4:da: 8d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:00:8F:22:EF:B6:F8:C9:A3:2A:F3:27:77:4B:40:BF:5E:CC:82:C0 X509v3 Authority Key Identifier: keyid:E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:34:ec:4e:1f:1a:27:ef:fa:cb:bc:07:6e:cb:98:49:24:a1: f8:0e:2a:05:53:36:fc:bc:da:33:ed:e8:91:19:44:92:b7:91: d7:8f:20:91:b8:d4:dd:64:9a:87:15:9f:32:a5:16:6b:64:9f: 1c:bd:4b:46:f9:c6:93:79:71:47:8d:99:a1:07:12:b8:6a:66: d2:77:99:7a:be:41:fe:da:0e:72:c3:76:5d:25:72:71:7e:81: 70:9f:65:f1:16:a9:64:35:9d:9e:00:6c:3a:80:b1:62:dd:89: ad:0c:a1:14:17:9a:f2:39:71:4d:59:a2:0e:5c:cf:71:2d:a8: 85:e8:a1:d5:7d:38:1d:f8:7c:b8:58:2f:94:cb:0c:9e:cb:25: 75:a2:d8:a1:63:4b:67:17:e8:a6:44:89:69:58:96:48:b1:4e: 81:fe:5d:93:ce:a6:07:4e:00:bd:5f:0d:54:1f:aa:14:39:a9: 70:2e:79:7e:ca:a7:7b:3c:0d:5d:fb:e6:e9:e6:77:e0:78:f8: af:c1:58:e5:ab:c3:2b:5a:7b:6b:36:1d:54:56:e4:4c:1e:84: fd:65:53:05:0d:0e:d8:89:8a:2b:09:8f:11:52:79:8d:cc:b7: 81:20:bd:40:f7:18:cc:26:b7:f0:e3:36:19:40:41:d1:f9:48: 3d:4e:e1:9b -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIUbV35Jr8Q6QBpDC1WFFMPKATcIG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE5MzAyQkU5MUM5RDQyMTFDREY0QUZGMDkxMDU1QTE3 M0IzNTkzQjAeFw0yNjAzMjYwNjAxMTZaFw0yNjAzMjcwODQ4MTZaMDMxMTAvBgNV BAMTKDlEMDA4RjIyRUZCNkY4QzlBMzJBRjMyNzc3NEI0MEJGNUVDQzgyQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSg14JxxO5I9J54iSwfwry+VRG 5Fti4I4i4F3Gs7UV27YrS8jsvW3PXzeLi9AHtR+kPyewGEsjx80nLPZsP5WloSod 0V+Qu+++e03pste4Crp7SRE03WUUMcZhz4A8mVR+wNt7mYVuZOBfF7TabocufggL 2Fcmkoh9i0iFAr5VGHIeFMV8VL5BJCIfLK7g981fNAm6pf1To54tJYOyjQNYuqD1 8C7KQm1ZXVVW1B/6a2cqUkqRBHLCer8tNmVobwGCZuezIjn7soNcGXMKPBFjoKSZ pwdIL9pg/Dr36hhLZRRiz23gzz2VjsaQGY+6HJ55ozGo8xBajZAz19/02o15AgMB AAGjggKGMIICgjAdBgNVHQ4EFgQUnQCPIu+2+MmjKvMnd0tAv17MgsAwHwYDVR0j BBgwFoAU4ZMCvpHJ1CEc30r/CRBVoXOzWTswDgYDVR0PAQH/BAQDAgeAMIGXBgNV HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNm NTBlOC8xMC9FMTkzMDJCRTkxQzlENDIxMUNERjRBRkYwOTEwNTVBMTczQjM1OTNC LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0UxOTMwMkJFOTFDOUQ0MjExQ0RGNEFG RjA5MTA1NUExNzNCMzU5M0IuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYB BQUHMAuGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC8xMC9FMTkz MDJCRTkxQzlENDIxMUNERjRBRkYwOTEwNTVBMTczQjM1OTNCLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA TDTsTh8aJ+/6y7wHbsuYSSSh+A4qBVM2/LzaM+3okRlEkreR148gkbjU3WSahxWf MqUWa2SfHL1LRvnGk3lxR42ZoQcSuGpm0neZer5B/toOcsN2XSVycX6BcJ9l8Rap ZDWdngBsOoCxYt2JrQyhFBea8jlxTVmiDlzPcS2oheih1X04Hfh8uFgvlMsMnssl daLYoWNLZxfopkSJaViWSLFOgf5dk86mB04AvV8NVB+qFDmpcC55fsqnezwNXfvm 6eZ34Hj4r8FY5avDK1p7azYdVFbkTB6E/WVTBQ0O2ImKKwmPEVJ5jcy3gSC9QPcY zCa38OM2GUBB0flIPU7hmw== -----END CERTIFICATE-----Generated at Thu Mar 26 16:02:15 2026 by rpki-client