$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft File: 1DB41D8CB909418AA27BBDED06CFB5857401E676.mft (raw, json) Hash identifier: ACxCQy3ljOdp8m/fd0wHvc4huIoAZ4qiDHsd4SA31zE= Subject key identifier: A1:AE:E3:26:0F:FF:31:40:01:9A:83:E2:3C:5E:90:51:69:52:70:8F Authority key identifier: 1D:B4:1D:8C:B9:09:41:8A:A2:7B:BD:ED:06:CF:B5:85:74:01:E6:76 Certificate issuer: /CN=1DB41D8CB909418AA27BBDED06CFB5857401E676 Certificate serial: 78EE57266B7FCBDC6D2EA53287276AE6023ECA2A Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft Manifest number: 24 Signing time: Fri 27 Mar 2026 19:16:16 +0000 Manifest this update: Fri 27 Mar 2026 19:11:16 +0000 Manifest next update: Sat 28 Mar 2026 22:24:16 +0000 Files and hashes: 1: 326130363a613030323a3a2f33322d3438203d3e20323135373630.roa (hash: B2caQKU5/hAAuwc57KOaYg2QivgfXC87ZBxhpnuBwec=) 2: 326130363a613030323a613030323a3a2f34382d3438203d3e20323034303835.roa (hash: l3HYulpvOKCiOuLe10nJcYG8DkTaBY5HNMplHWMB7TA=) 3: 1DB41D8CB909418AA27BBDED06CFB5857401E676.crl (hash: i19FTKZkrS7Ucqn+s6TyKg+TLof2iInP0r3Xt/jWwKU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.crl rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 28 Mar 2026 22:24:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:ee:57:26:6b:7f:cb:dc:6d:2e:a5:32:87:27:6a:e6:02:3e:ca:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DB41D8CB909418AA27BBDED06CFB5857401E676 Validity Not Before: Mar 27 19:11:16 2026 GMT Not After : Mar 28 22:24:16 2026 GMT Subject: CN=A1AEE3260FFF3140019A83E23C5E90516952708F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:10:34:36:0d:e6:19:6d:24:0f:5a:b6:81:12: ac:68:24:c9:cb:4d:5f:1d:eb:34:7b:48:59:35:cc: d0:9b:ed:31:20:29:82:36:5d:81:00:ae:83:f1:14: 9b:1e:ee:73:da:c6:80:cd:ac:73:43:b1:ff:53:ad: fb:04:12:c1:06:04:49:24:4e:fd:94:c7:d3:19:e4: 6c:6f:00:01:7c:a2:53:f0:a9:81:0a:02:e6:15:30: b3:37:db:16:2f:5a:b3:5a:c1:fe:de:11:2a:c6:de: 8d:b4:a1:f4:e2:ac:a3:76:d8:04:29:5e:4d:46:6a: 33:bc:62:85:ff:d2:c8:49:0e:4f:e4:17:87:48:87: 5a:0d:fe:8b:e3:cb:67:04:f0:5c:48:d2:93:bd:e4: c0:83:3e:1e:69:29:ee:ba:45:40:51:a8:cc:9f:3d: 4d:ea:69:86:55:af:0c:f7:d9:84:60:8c:1b:9c:1c: 40:4e:dd:79:68:4c:8b:f5:77:cd:96:38:37:9c:47: 19:7e:8c:dc:7f:3e:1b:6d:7f:ce:13:7e:8c:e8:05: 29:0c:ec:c1:67:bb:35:dd:7d:e5:b4:59:ab:82:b3: 10:8c:f6:92:d7:2a:62:27:77:ca:e8:fe:19:15:df: 54:a2:6b:aa:84:2d:75:b1:85:3e:ca:9c:3e:40:23: f6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:AE:E3:26:0F:FF:31:40:01:9A:83:E2:3C:5E:90:51:69:52:70:8F X509v3 Authority Key Identifier: keyid:1D:B4:1D:8C:B9:09:41:8A:A2:7B:BD:ED:06:CF:B5:85:74:01:E6:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:9d:76:67:8a:37:c0:7a:d9:7d:51:e6:bd:c5:c6:e6:a6:62: 9e:ec:25:21:67:71:ef:90:93:a6:0b:fe:71:9e:4a:c3:f6:1e: d8:cd:89:55:eb:5a:ce:40:6b:63:ac:79:94:53:50:2c:be:a0: 94:0c:47:4d:39:2b:07:41:de:43:e4:9c:21:c7:be:3d:60:4b: 39:5b:fe:de:77:62:aa:dd:82:a2:04:b2:e6:b9:da:ad:cb:fe: 23:60:e4:86:5c:6f:3c:0e:ed:bc:21:70:a3:b4:70:ff:fb:cd: 3d:bf:a3:76:b4:71:f7:fc:a2:41:17:60:7e:38:53:bb:e3:80: e7:64:0c:80:43:60:9b:29:5e:c5:09:85:43:99:d6:5b:ff:42: 1d:b4:f6:40:d1:cd:b3:da:82:9a:4b:e1:1c:d1:00:b4:2f:16: 23:d0:23:18:ae:f4:e5:2d:ab:8e:8d:32:23:17:23:62:0b:de: 99:25:66:bd:1c:c6:1e:73:ea:59:b2:c0:9d:9b:10:96:ab:42: 16:56:5e:30:be:7d:89:50:c2:68:18:79:26:bc:09:f6:36:64: b1:a4:51:23:1b:5d:2a:ae:fa:21:bf:6d:f5:1e:bc:38:d9:e2: f1:75:33:94:05:89:06:f2:7a:3a:66:43:83:e8:a8:7f:e7:a5: 7f:eb:a9:d0 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUeO5XJmt/y9xtLqUyhydq5gI+yiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCNDFEOENCOTA5NDE4QUEyN0JCREVEMDZDRkI1ODU3 NDAxRTY3NjAeFw0yNjAzMjcxOTExMTZaFw0yNjAzMjgyMjI0MTZaMDMxMTAvBgNV BAMTKEExQUVFMzI2MEZGRjMxNDAwMTlBODNFMjNDNUU5MDUxNjk1MjcwOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkEDQ2DeYZbSQPWraBEqxoJMnL TV8d6zR7SFk1zNCb7TEgKYI2XYEAroPxFJse7nPaxoDNrHNDsf9TrfsEEsEGBEkk Tv2Ux9MZ5GxvAAF8olPwqYEKAuYVMLM32xYvWrNawf7eESrG3o20ofTirKN22AQp Xk1GajO8YoX/0shJDk/kF4dIh1oN/ovjy2cE8FxI0pO95MCDPh5pKe66RUBRqMyf PU3qaYZVrwz32YRgjBucHEBO3XloTIv1d82WODecRxl+jNx/Phttf84TfozoBSkM 7MFnuzXdfeW0WauCsxCM9pLXKmInd8ro/hkV31Sia6qELXWxhT7KnD5AI/YpAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUoa7jJg//MUABmoPiPF6QUWlScI8wHwYDVR0j BBgwFoAUHbQdjLkJQYqie73tBs+1hXQB5nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2 ZDAzLzMvMURCNDFEOENCOTA5NDE4QUEyN0JCREVEMDZDRkI1ODU3NDAxRTY3Ni5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMURCNDFEOENCOTA5NDE4QUEyN0JCREVEMDZDRkI1ODU3NDAx RTY3Ni5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mN2Q5MjU1OC0y NThlLTRiNDQtYWQxNi04YzEwMjJjNDZkMDMvMy8xREI0MUQ4Q0I5MDk0MThBQTI3 QkJERUQwNkNGQjU4NTc0MDFFNjc2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ512Z4o3wHrZfVHmvcXG 5qZinuwlIWdx75CTpgv+cZ5Kw/Ye2M2JVetazkBrY6x5lFNQLL6glAxHTTkrB0He Q+ScIce+PWBLOVv+3ndiqt2CogSy5rnarcv+I2DkhlxvPA7tvCFwo7Rw//vNPb+j drRx9/yiQRdgfjhTu+OA52QMgENgmylexQmFQ5nWW/9CHbT2QNHNs9qCmkvhHNEA tC8WI9AjGK705S2rjo0yIxcjYgvemSVmvRzGHnPqWbLAnZsQlqtCFlZeML59iVDC aBh5JrwJ9jZksaRRIxtdKq76Ib9t9R68ONni8XUzlAWJBvJ6OmZDg+iof+elf+up 0A== -----END CERTIFICATE-----Generated at Sat Mar 28 12:17:04 2026 by rpki-client