$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft File: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft (raw, json) Hash identifier: cokBU6oDBnWrNrb9lruJIeCsJ5hxEksQVW6EM+WgGXw= Subject key identifier: D5:D3:EF:9C:C7:1C:B4:00:AD:4F:61:AB:33:18:86:95:CD:D6:BC:FA Authority key identifier: AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96 Certificate issuer: /CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96 Certificate serial: 34C9A6F63E8529AAAA4361EACA0F2BC28884F164 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft Manifest number: 4F Signing time: Wed 25 Mar 2026 09:05:13 +0000 Manifest this update: Wed 25 Mar 2026 09:00:13 +0000 Manifest next update: Thu 26 Mar 2026 12:33:13 +0000 Files and hashes: 1: 34352e3133362e33372e302f32342d3234203d3e20323136313338.roa (hash: JZ1L2KQs0f2eXdqI4to3PHDMlAV/dVTRle8eNzjpil8=) 2: 3138352e33382e32362e302f32342d3234203d3e20323033303736.roa (hash: sDu6cSq1jkixXmJL543CieEIPCSsRynaX7T0t0iTsp4=) 3: 34352e3133362e33382e302f32342d3234203d3e203232343237.roa (hash: DVZekNAuwA3ip9E2oJI8N7TO3EANrn8mc568ZgMFs/g=) 4: 3138352e33382e32372e302f32342d3234203d3e20323031303738.roa (hash: ukyrW3OkENdui2e2lMLTPGtAVU5Vow3lLLqAXhAKFmY=) 5: 3138352e33382e32352e302f32342d3234203d3e203133333335.roa (hash: 8Dov3dsVRdYA9hssq4paEGEc00JaP1eCascbI1uHeu4=) 6: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl (hash: S63t7dfgaM30P9pUHQoe0cNASiUHidae8ez3L0D1kBY=) 7: 34352e3133362e33362e302f32342d3234203d3e203633303235.roa (hash: +pP+6RG5Xk+om9nXzvq6WKJqnS83TS8lI7ERhzFqThI=) 8: 34352e3133362e33372e302f32342d3234203d3e203233353332.roa (hash: lQ482c7dNPnq+b2J23abNSxD06d725wZrRqBuqXdD1I=) 9: 34352e3133362e33392e302f32342d3234203d3e20313337323335.roa (hash: UhTypQACgX/qose3+Rz5crr8U0o2FSTLVVAcLhIaRXU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 12:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:c9:a6:f6:3e:85:29:aa:aa:43:61:ea:ca:0f:2b:c2:88:84:f1:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96 Validity Not Before: Mar 25 09:00:13 2026 GMT Not After : Mar 26 12:33:13 2026 GMT Subject: CN=D5D3EF9CC71CB400AD4F61AB33188695CDD6BCFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:09:da:29:d5:33:c8:11:4d:0f:e2:2b:c5:95: 2e:d9:c2:1e:08:84:8a:22:24:61:47:89:02:fc:8f: 13:69:10:c0:46:82:62:10:95:70:14:d2:1e:ed:78: 2e:34:9c:59:45:87:f6:3d:62:60:33:52:61:63:c1: 44:3c:f0:d9:2c:e7:4a:23:ce:40:92:f8:fa:19:20: 4a:1b:cc:bf:f1:23:25:17:67:19:2b:1a:80:7b:a5: 41:1b:dc:30:52:d5:92:cd:e4:61:c4:06:73:71:bd: 3a:5d:b5:71:0b:ef:39:db:c4:15:60:8b:23:01:55: a3:1a:41:73:13:67:24:fc:dc:94:d6:ea:a8:36:36: a5:bc:46:63:6d:3b:c1:e4:bd:b5:41:7b:0f:a8:47: b5:9f:24:e7:cd:97:16:da:5e:4d:22:68:22:13:ef: 11:55:7b:24:97:c6:f1:b5:c2:d6:5b:01:cc:9e:43: 11:18:90:2e:5f:e0:22:07:46:9c:71:8d:de:91:73: f9:33:8f:ba:96:9c:da:99:56:b4:51:dd:a2:4c:68: e9:4a:48:81:6b:ec:35:b2:39:3f:7e:7b:4d:e9:c6: e3:2c:a6:dd:cd:d2:6e:bf:8f:ce:f2:f9:45:f1:9e: c2:1c:8d:9b:76:bd:1e:65:db:98:2b:99:8f:08:9b: ed:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D3:EF:9C:C7:1C:B4:00:AD:4F:61:AB:33:18:86:95:CD:D6:BC:FA X509v3 Authority Key Identifier: keyid:AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:11:cb:52:ed:ed:e4:4c:37:4e:07:de:9f:cb:21:d2:a1:54: 20:12:04:da:2a:91:4b:e9:2e:e4:a9:24:28:bd:f9:a6:c2:ae: e8:e7:74:21:71:ed:43:32:6a:8a:a1:91:1b:49:9b:61:ad:28: 56:a2:5b:5c:67:08:e8:51:6a:6c:2c:6d:09:9a:d8:9c:33:9f: ce:8d:ea:fe:95:ff:8e:ff:77:24:60:d6:87:e5:31:fa:03:f0: c1:5e:4c:fa:ac:66:95:c2:14:2a:4a:d5:00:e8:60:ab:0f:3a: b9:a4:b3:20:a6:ce:fe:65:99:b1:a1:5a:df:bf:35:20:fe:ef: 43:05:d0:15:b6:70:1e:4a:0b:58:b0:26:86:e1:f3:5a:bc:00: ac:38:8d:6e:8c:aa:8e:ee:03:fe:97:5e:27:74:7d:4f:0e:0f: ac:00:62:ba:82:c6:9f:6d:87:53:04:c7:1c:63:1b:ca:c2:e7: b4:c9:20:2e:4a:eb:1d:6c:ed:80:3d:52:bd:6a:e0:8f:85:03: f9:57:b7:6f:33:1a:ab:41:9b:39:99:a1:68:c7:99:6c:12:11: 6f:9b:f6:51:e8:11:8f:ae:e8:ee:50:34:54:b1:2e:fd:05:d2: eb:f1:ad:79:99:5c:b0:ae:81:9c:33:b8:aa:5c:5c:0d:40:40: 3e:cd:95:6e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUNMmm9j6FKaqqQ2Hqyg8rwoiE8WQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyRTFERUZBRDgxRkYzOUUwMjgzRUQ2MUJDOUY5REM2 REE5QkU5NjAeFw0yNjAzMjUwOTAwMTNaFw0yNjAzMjYxMjMzMTNaMDMxMTAvBgNV BAMTKEQ1RDNFRjlDQzcxQ0I0MDBBRDRGNjFBQjMzMTg4Njk1Q0RENkJDRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2Cdop1TPIEU0P4ivFlS7Zwh4I hIoiJGFHiQL8jxNpEMBGgmIQlXAU0h7teC40nFlFh/Y9YmAzUmFjwUQ88Nks50oj zkCS+PoZIEobzL/xIyUXZxkrGoB7pUEb3DBS1ZLN5GHEBnNxvTpdtXEL7znbxBVg iyMBVaMaQXMTZyT83JTW6qg2NqW8RmNtO8HkvbVBew+oR7WfJOfNlxbaXk0iaCIT 7xFVeySXxvG1wtZbAcyeQxEYkC5f4CIHRpxxjd6Rc/kzj7qWnNqZVrRR3aJMaOlK SIFr7DWyOT9+e03pxuMspt3N0m6/j87y+UXxnsIcjZt2vR5l25grmY8Im+25AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU1dPvnMcctACtT2GrMxiGlc3WvPowHwYDVR0j BBgwFoAUri4d762B/zngKD7WG8n53G2pvpYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjA3YzkzZWQtYjgxOS00NWU4LTk0NWQtNDI2MzZkNDcx NzEwLzAvQUUyRTFERUZBRDgxRkYzOUUwMjgzRUQ2MUJDOUY5REM2REE5QkU5Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDkwNjJkZS1mNTM2LTQ0 NWQtYmE3MS0wMzVmYmZlY2FhZDgvMC9BRTJFMURFRkFEODFGRjM5RTAyODNFRDYx QkM5RjlEQzZEQTlCRTk2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2YwN2M5M2VkLWI4MTktNDVlOC05NDVkLTQyNjM2ZDQ3MTcxMC8wL0FFMkUxREVG QUQ4MUZGMzlFMDI4M0VENjFCQzlGOURDNkRBOUJFOTYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAUEctS 7e3kTDdOB96fyyHSoVQgEgTaKpFL6S7kqSQovfmmwq7o53Qhce1DMmqKoZEbSZth rShWoltcZwjoUWpsLG0JmticM5/Ojer+lf+O/3ckYNaH5TH6A/DBXkz6rGaVwhQq StUA6GCrDzq5pLMgps7+ZZmxoVrfvzUg/u9DBdAVtnAeSgtYsCaG4fNavACsOI1u jKqO7gP+l14ndH1PDg+sAGK6gsafbYdTBMccYxvKwue0ySAuSusdbO2APVK9auCP hQP5V7dvMxqrQZs5maFox5lsEhFvm/ZR6BGPrujuUDRUsS79BdLr8a15mVywroGc M7iqXFwNQEA+zZVu -----END CERTIFICATE-----Generated at Thu Mar 26 00:21:00 2026 by rpki-client