$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft File: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json) Hash identifier: BWoZP7yaMxfFlgWKDPKQ7xUVNJxFGJLR1Qssx6C5hpM= Subject key identifier: 5E:2F:4D:78:C9:AB:7C:BF:2C:29:93:95:A8:78:E3:CC:3E:CA:15:8F Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Certificate serial: 6322E045AAE4F78CCBAC6AA9EF740984D976A938 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft Manifest number: 0310 Signing time: Wed 25 Mar 2026 12:42:55 +0000 Manifest this update: Wed 25 Mar 2026 12:37:55 +0000 Manifest next update: Thu 26 Mar 2026 13:55:55 +0000 Files and hashes: 1: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: JAmgJM2VGcbQzWkOuFvV1aRU7IhMtvcEw/0vm9hTp3I=) 2: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: S10o6lJcne+SfvZMZmd0ndSNpfqn8OsjAJw8rNDdBSw=) 3: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: jCFWapAcSAL9ciWMikQNoNWJEA+G6RFzEYAyKbOa3n0=) 4: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: V4bF3gDy6FE6zlNg9r0xUvpdAXLZEuLnN1FQtQz0KTM=) 5: 326130643a623238373a646430303a3a2f34302d3430203d3e20323136333039.roa (hash: mpzPSr1CBW6Ka5Te0DE52rLBHWk7ArDQlInbkbsiPzA=) 6: 326130643a623238373a656330303a3a2f34302d3430203d3e20323038333238.roa (hash: eT5l/HEUwKyeWtm/1X7rr0MrwygNo9k95lPs1zLe884=) 7: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: Qmo3MoWwkKBWouocBexituyWf2OsxX6PDMEUO8aReSw=) 8: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: UtcmwgPmmxIsh/ra+btug0leCQZCVTQekME41LiPWtU=) 9: 326130643a623238373a646164303a3a2f34342d3434203d3e20323038343337.roa (hash: Lh+NThTArglnDdFNJgAbksxydedvZ3VhoYilxW6dgHQ=) 10: AS41720.asa (hash: 4An44TkWkAj35xBt6Xef84p/tUjH5ZEGoqkH2/CZIMo=) 11: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: JNRd26hu5UclLm2ralvA5Swgz/zS0HyqV27DJFHZj6c=) 12: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: m2CiuFBjrlRavusUidV8mkbKXKHzyUUUhDYGNFwtBAs=) 13: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: PivPGN9xNNuplOmy9E3nfw1TUinsGI+X07yLclSfZdw=) 14: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: Q6Io7mv8dNkJZap1oGvqDaJWxZcBIoRNlU5W1SfkDVo=) 15: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: BOfTSY7wWayFslIYZyC++f09YnW0ZvOoQVsy6AzQanA=) 16: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: gAYzs7DeTkU9g1RDUiQKlOcpyqQALQV1LLqH3P6H/bU=) 17: 326130643a623238373a656230303a3a2f34302d3430203d3e20323133373039.roa (hash: Nk6ANHp8DkJz6kDCL9bvYoWgqeyO4UOw/aVOiTsobgk=) 18: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: BJe1bO6YYCEXeriSlULaZwS25Q4hRdnweRF5hyXEuDY=) 19: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: WORn2ZO+s8g7yf6OBG+EW/mdOOZdoxMfmhr8UrPpx1o=) 20: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: ItyIHbG/IJlKjOf6vhLnjpZ9k/lt97Z65upW37DdGzA=) 21: 3139352e3138322e3231312e302f32342d3234203d3e203431373230.roa (hash: fKLQTu0IVvtIU1j1ED5jisbzx/ixZ3gIYrA73t09dNU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 13:55:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:22:e0:45:aa:e4:f7:8c:cb:ac:6a:a9:ef:74:09:84:d9:76:a9:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Validity Not Before: Mar 25 12:37:55 2026 GMT Not After : Mar 26 13:55:55 2026 GMT Subject: CN=5E2F4D78C9AB7CBF2C299395A878E3CC3ECA158F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5f:ab:20:b5:fa:69:a5:d9:64:e3:64:3a:c9: a1:54:28:1f:f2:92:55:c4:23:bf:60:ef:1f:21:0b: 68:b3:a9:1f:18:b9:53:43:dd:51:3d:8f:16:89:b8: 93:76:db:37:91:a8:69:b7:9d:40:a3:07:8a:67:7b: 5f:3d:57:dc:0e:50:94:a6:ef:53:ca:39:8d:97:5d: 4b:1e:68:eb:6e:1c:a2:bc:f9:90:dd:c4:b5:91:ba: 45:27:42:6b:3b:82:00:09:33:f2:df:e5:e7:16:a0: b4:a2:f9:60:5d:8e:f9:29:e7:91:d1:06:79:1b:06: 22:78:51:96:31:02:7a:8f:b8:8e:e5:9f:ff:ff:97: ea:08:9a:af:d8:6e:da:b0:84:ee:cf:06:4d:9f:25: 04:bd:d3:54:7a:3f:3f:ce:96:1e:5e:aa:f9:bc:f4: 9c:af:3d:2a:1c:0e:eb:49:19:b2:58:14:f6:23:9c: 68:af:8e:74:7f:05:b0:3e:fa:a6:f8:4b:20:44:97: 33:ef:83:3d:1d:34:3d:9c:81:f9:1b:ae:27:07:f3: 0a:cc:c5:69:cc:88:c5:24:80:53:71:01:91:52:f7: b3:35:90:4e:48:60:0c:10:34:06:67:40:42:87:e3: 32:ce:f8:d8:b7:d4:6d:92:72:19:ad:b6:85:aa:17: 39:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2F:4D:78:C9:AB:7C:BF:2C:29:93:95:A8:78:E3:CC:3E:CA:15:8F X509v3 Authority Key Identifier: keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:e0:a4:6b:41:2e:d2:3e:a4:26:8e:5e:08:79:a9:75:ba:3e: a6:c8:11:b5:60:30:f9:ec:c5:61:04:f7:e2:13:42:26:0a:e6: 01:a2:ce:d8:94:d0:4a:46:c0:38:16:0d:13:4f:ef:19:27:5a: f8:c1:cc:38:98:0d:8e:3e:ff:f1:e5:6f:f6:fb:02:08:d2:83: ec:8e:24:49:45:09:27:ae:97:c3:82:34:ae:a3:6c:7e:3c:e2: 16:f0:14:1d:96:ba:a1:dc:dd:5e:a8:8d:b9:da:c8:7d:f1:ce: e5:38:01:0f:7f:0e:e2:63:d3:59:db:79:c8:9b:4e:23:ff:33: 38:b4:c7:4a:17:6d:44:d1:5b:f4:c1:fe:57:0d:81:f0:b9:2f: 63:5b:1f:01:1a:73:de:8f:92:7c:87:b9:d5:5f:64:aa:59:86: 79:15:6c:3b:d9:49:da:52:66:83:22:3f:ba:08:77:1e:1f:1b: 8d:0b:19:70:5e:76:4a:c9:dc:2f:49:cb:c8:d8:dc:24:b0:7f: 1c:b6:16:20:6a:a5:b1:40:96:8f:01:c5:61:76:56:6f:35:b7: b1:f5:2f:a6:53:fb:30:3f:fe:bd:2b:f4:83:dd:29:5f:b6:7c: d2:6a:b3:57:ca:ff:6b:82:aa:39:8d:4c:2b:14:5e:d1:3f:38: 46:16:ca:e4 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYyLgRark94zLrGqp73QJhNl2qTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjZGQ5YzE5M2RhOTE4NWE0YWMxNWIyYWRlODc1ZmU5 N2I2ZjQ5MTAeFw0yNjAzMjUxMjM3NTVaFw0yNjAzMjYxMzU1NTVaMDMxMTAvBgNV BAMTKDVFMkY0RDc4QzlBQjdDQkYyQzI5OTM5NUE4NzhFM0NDM0VDQTE1OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOX6sgtfpppdlk42Q6yaFUKB/y klXEI79g7x8hC2izqR8YuVND3VE9jxaJuJN22zeRqGm3nUCjB4pne189V9wOUJSm 71PKOY2XXUseaOtuHKK8+ZDdxLWRukUnQms7ggAJM/Lf5ecWoLSi+WBdjvkp55HR BnkbBiJ4UZYxAnqPuI7ln///l+oImq/YbtqwhO7PBk2fJQS901R6Pz/Olh5eqvm8 9JyvPSocDutJGbJYFPYjnGivjnR/BbA++qb4SyBElzPvgz0dND2cgfkbricH8wrM xWnMiMUkgFNxAZFS97M1kE5IYAwQNAZnQEKH4zLO+Ni31G2SchmttoWqFzmBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUXi9NeMmrfL8sKZOVqHjjzD7KFY8wHwYDVR0j BBgwFoAUiM3ZwZPakYWkrBWyreh1/pe29JEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTZhZmYyMzQtNjFjNS00MjkwLThhNmQtNWYyYjkwMjcz MjJmLzAvODhDREQ5QzE5M0RBOTE4NUE0QUMxNUIyQURFODc1RkU5N0I2RjQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNM1p3WlBha1lXa3JCV3lyZWgxX3Bl MjlKRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lNmFmZjIzNC02 MWM1LTQyOTAtOGE2ZC01ZjJiOTAyNzMyMmYvMC84OENERDlDMTkzREE5MTg1QTRB QzE1QjJBREU4NzVGRTk3QjZGNDkxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ+Cka0Eu0j6kJo5eCHmp dbo+psgRtWAw+ezFYQT34hNCJgrmAaLO2JTQSkbAOBYNE0/vGSda+MHMOJgNjj7/ 8eVv9vsCCNKD7I4kSUUJJ66Xw4I0rqNsfjziFvAUHZa6odzdXqiNudrIffHO5TgB D38O4mPTWdt5yJtOI/8zOLTHShdtRNFb9MH+Vw2B8LkvY1sfARpz3o+SfIe51V9k qlmGeRVsO9lJ2lJmgyI/ugh3Hh8bjQsZcF52SsncL0nLyNjcJLB/HLYWIGqlsUCW jwHFYXZWbzW3sfUvplP7MD/+vSv0g90pX7Z80mqzV8r/a4KqOY1MKxRe0T84RhbK 5A== -----END CERTIFICATE-----Generated at Wed Mar 25 23:11:59 2026 by rpki-client