$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft File: FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft (raw, json) Hash identifier: 5dBpEVRmgQPd3veKW2H4Dh/91FDkcxJCSN8EMoV2ye8= Subject key identifier: 0A:4A:E2:A0:62:2A:68:BE:88:F6:2E:63:9C:20:B9:05:88:66:07:38 Authority key identifier: FF:FD:2C:A3:C4:6B:64:07:94:6F:63:A1:A0:13:F7:DF:D6:CF:B5:D5 Certificate issuer: /CN=FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5 Certificate serial: 4D5F4E78E88D4DF8DE7C3A766713020FF5A59995 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft Manifest number: 66 Signing time: Fri 27 Mar 2026 18:51:16 +0000 Manifest this update: Fri 27 Mar 2026 18:46:16 +0000 Manifest next update: Sat 28 Mar 2026 19:20:16 +0000 Files and hashes: 1: 326131343a373538333a653161303a3a2f34382d3438203d3e2038303735.roa (hash: DtH6ggeM+QpcLTSnypx16kTF/whmDCaM1D1kKsa6LfQ=) 2: FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.crl (hash: T7CeAkR1ePzPngjxZydpRVXPeTCqvKRvB5/BsajUigo=) 3: 326131343a373538333a653130303a3a2f34302d3438203d3e20323135373630.roa (hash: r5SF/IAqPnaNOGhyHYvdkt7SQYVpGblYVakiPdSBcUI=) 4: 326131343a373538333a653131313a3a2f34382d3438203d3e20323034303835.roa (hash: c3kPPYnSQV80aMrr47eONKPd5ax5+aswl4vdJH2ZP/E=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.crl rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 28 Mar 2026 19:20:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:5f:4e:78:e8:8d:4d:f8:de:7c:3a:76:67:13:02:0f:f5:a5:99:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5 Validity Not Before: Mar 27 18:46:16 2026 GMT Not After : Mar 28 19:20:16 2026 GMT Subject: CN=0A4AE2A0622A68BE88F62E639C20B90588660738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4f:51:13:ea:c1:dc:13:ee:9a:29:b9:0d:fc: 42:2a:9d:df:76:84:72:f6:78:1a:64:13:6b:e6:b4: b8:3b:a2:92:84:18:24:72:90:0e:77:b1:78:5c:a0: 68:3c:7a:de:3e:39:fc:9d:bb:7a:ad:4d:d1:c7:43: 74:98:dc:a9:a8:57:f1:33:f8:8d:53:1a:03:3b:4a: db:4b:80:c8:46:f0:ca:01:41:28:50:eb:73:d4:a6: c0:9d:88:ce:a2:3c:ac:4d:c9:87:e9:44:5c:82:59: 87:f2:9e:94:84:24:7a:0b:c4:2b:ca:98:52:5d:8d: b6:5c:10:ca:1a:75:25:2b:bd:82:00:a7:7c:c4:3f: b1:c4:7c:b5:c1:68:24:cb:07:00:c8:8a:bd:c4:da: e7:a6:08:7c:43:3b:0d:c5:a5:3f:66:2a:83:82:ac: ca:1c:65:fe:6a:97:db:84:0c:85:0f:90:07:ae:b8: 3c:3f:d6:c0:da:2b:7a:4d:1f:08:16:20:4d:35:32: ef:6f:65:87:94:ad:42:02:78:10:52:0a:b9:e3:3f: 86:cd:23:25:23:1e:e9:35:e9:f5:43:fc:11:ed:9c: 8c:e4:8f:2b:79:fa:c0:40:45:4d:6f:f4:0c:dc:d8: dc:d5:59:c1:6d:bc:44:63:a5:09:cd:81:1d:9b:ea: b9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:4A:E2:A0:62:2A:68:BE:88:F6:2E:63:9C:20:B9:05:88:66:07:38 X509v3 Authority Key Identifier: keyid:FF:FD:2C:A3:C4:6B:64:07:94:6F:63:A1:A0:13:F7:DF:D6:CF:B5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:bf:13:ea:58:5d:61:ba:83:fd:ad:1c:d5:ad:c1:b3:03:27: f0:54:6b:8f:6d:31:cc:c6:72:a3:35:2f:be:89:5c:d8:c3:c9: 41:24:9b:97:86:54:ad:a8:cb:5a:5d:e3:4a:37:8e:c7:00:94: 80:8d:b5:cc:45:89:22:73:76:0b:54:c2:67:fa:f7:2c:cf:f3: ff:74:25:7c:a4:31:b0:ea:29:0f:e4:9c:73:d3:c8:8b:9a:46: 21:ad:9a:bb:2b:c7:cd:ee:42:a2:e8:8a:ee:81:0f:f3:b9:7b: 59:56:17:10:42:54:10:3f:5e:78:c1:a3:2c:c2:60:14:de:59: a8:6e:f8:ed:db:b0:86:af:53:48:8e:16:d4:82:3b:03:2b:6e: 18:f7:4c:2d:5f:2a:a8:f1:cf:ac:59:b2:78:29:2e:0e:3a:85: a0:df:bd:b8:9c:74:0d:29:1a:2f:3c:4c:5c:2c:ce:1e:2e:72: 06:b2:7b:59:55:c3:3a:b6:e3:c7:16:77:61:b7:5a:51:6e:1b: 56:48:ea:58:f0:52:3f:9b:1c:b6:c7:81:17:28:a6:87:99:7a: 82:f2:10:c1:f7:18:bb:b5:8b:0e:61:73:b6:01:c1:81:2e:8e: 8a:e0:7e:6f:f7:da:7b:50:e8:0e:2c:54:b6:7a:f0:21:81:e2: 0c:af:8f:42 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUTV9OeOiNTfjefDp2ZxMCD/WlmZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZGRDJDQTNDNDZCNjQwNzk0NkY2M0ExQTAxM0Y3REZE NkNGQjVENTAeFw0yNjAzMjcxODQ2MTZaFw0yNjAzMjgxOTIwMTZaMDMxMTAvBgNV BAMTKDBBNEFFMkEwNjIyQTY4QkU4OEY2MkU2MzlDMjBCOTA1ODg2NjA3MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6T1ET6sHcE+6aKbkN/EIqnd92 hHL2eBpkE2vmtLg7opKEGCRykA53sXhcoGg8et4+Ofydu3qtTdHHQ3SY3KmoV/Ez +I1TGgM7SttLgMhG8MoBQShQ63PUpsCdiM6iPKxNyYfpRFyCWYfynpSEJHoLxCvK mFJdjbZcEMoadSUrvYIAp3zEP7HEfLXBaCTLBwDIir3E2uemCHxDOw3FpT9mKoOC rMocZf5ql9uEDIUPkAeuuDw/1sDaK3pNHwgWIE01Mu9vZYeUrUICeBBSCrnjP4bN IyUjHuk16fVD/BHtnIzkjyt5+sBARU1v9Azc2NzVWcFtvERjpQnNgR2b6rkFAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUCkrioGIqaL6I9i5jnCC5BYhmBzgwHwYDVR0j BBgwFoAU//0so8RrZAeUb2OhoBP339bPtdUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2 ZDAzLzIvRkZGRDJDQTNDNDZCNjQwNzk0NkY2M0ExQTAxM0Y3REZENkNGQjVENS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GRkZEMkNBM0M0NkI2NDA3OTQ2RjYzQTFB MDEzRjdERkQ2Q0ZCNUQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y3ZDkyNTU4LTI1OGUtNGI0NC1hZDE2LThjMTAyMmM0NmQwMy8yL0ZGRkQyQ0Ez QzQ2QjY0MDc5NDZGNjNBMUEwMTNGN0RGRDZDRkI1RDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDRvxPq WF1huoP9rRzVrcGzAyfwVGuPbTHMxnKjNS++iVzYw8lBJJuXhlStqMtaXeNKN47H AJSAjbXMRYkic3YLVMJn+vcsz/P/dCV8pDGw6ikP5Jxz08iLmkYhrZq7K8fN7kKi 6IrugQ/zuXtZVhcQQlQQP154waMswmAU3lmobvjt27CGr1NIjhbUgjsDK24Y90wt Xyqo8c+sWbJ4KS4OOoWg3724nHQNKRovPExcLM4eLnIGsntZVcM6tuPHFndht1pR bhtWSOpY8FI/mxy2x4EXKKaHmXqC8hDB9xi7tYsOYXO2AcGBLo6K4H5v99p7UOgO LFS2evAhgeIMr49C -----END CERTIFICATE-----Generated at Sat Mar 28 10:40:36 2026 by rpki-client