$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft File: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft (raw, json) Hash identifier: /knUFfGwmY3SQOxPZAR850p1zgdD1u1Jd+8WvDBNzLg= Subject key identifier: 06:08:E8:FA:87:9D:D3:AC:99:A1:0F:F9:57:40:98:65:EA:F5:C8:E1 Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Certificate serial: 6C251744546D93EB345424D266E878C8D74615A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft Manifest number: 050F Signing time: Sun 01 Mar 2026 07:39:36 +0000 Manifest this update: Sun 01 Mar 2026 07:34:36 +0000 Manifest next update: Mon 02 Mar 2026 10:54:36 +0000 Files and hashes: 1: 3138352e3134392e3135332e302f32342d3234203d3e203133313934.roa (hash: DudKC7EbN/x1z3E3UcohZZDxNJCJJwujdDPss+8DrkI=) 2: 326130323a323633303a3a2f33322d3332203d3e203135343139.roa (hash: qWp9paAJXWyG6T4NlWTD/O+mrcUKf+wb2OOSJ/RUTQM=) 3: 3231372e392e3235342e302f32332d3233203d3e203135343139.roa (hash: iksl6QO5bGAwqBp6Vth9mckUoVZxpFnDxq6gmgw5QDs=) 4: 38392e3131362e312e302f32342d3234203d3e203135343139.roa (hash: QlNtxapPtCDVmKsd/rR7Y2Bq1QIkmg64gwg6mpWc9ZY=) 5: 38322e3134302e3138392e302f32342d3234203d3e203135343139.roa (hash: q/tmnbq1kdd2hUMwbcuSKcZt7pux1EaGGpLbn7IfofI=) 6: 38322e3134302e3133312e302f32342d3234203d3e203135343139.roa (hash: YcmyLeFBQ+WK9MxW4qT13yT/CsdMqFWcCNcHges7cNY=) 7: 38362e33382e382e302f32312d3231203d3e203135343139.roa (hash: uWYPVYjRnhouz2kB1gip220mm9ixJ1+yxtSXIITlxEw=) 8: 326130323a323633303a3a2f32392d3239203d3e203135343139.roa (hash: 8htEN27nXC1XFUYvScmaKLGazPRUUosEipnSlN6XgBk=) 9: 38392e3131362e34322e302f32332d3233203d3e203135343139.roa (hash: dqiC7sfkexEdY4bNAfWo7TkIe5GTWHX5uIAGfupS9Ro=) 10: 38392e3131362e322e302f32332d3233203d3e203135343139.roa (hash: twheygdBU9M/hWK8PwEKS7vel1IBGYLsGKuF6NDPdmA=) 11: 3138352e3134392e3135332e302f32342d3234203d3e203434373731.roa (hash: 3LQCLtbZ2cAzmsqD8inTKmHS0+b4RIJVefCUUonuvB0=) 12: 38392e3131362e31352e302f32342d3234203d3e203135343139.roa (hash: /LejqbWiFUxs1DgkjzVItnmcQXCtVjOkQxj/fIk9rAQ=) 13: 38392e3131362e342e302f32322d3232203d3e203135343139.roa (hash: S7PYQmgyaS+nUukOrNi+7gU0SVsm2vupfOTXwPtPOXM=) 14: 38392e3131362e3131362e302f32322d3232203d3e203135343139.roa (hash: +6pKiWIr1xfpXpXCXiVMVMi0tFetJIO1JWmpuLH4c10=) 15: 38392e3131362e31392e302f32342d3234203d3e203135343139.roa (hash: 4JL3Gtu7UsX3IaHs3LaQwmdxUfCfFV6YWJerzJoc+wE=) 16: 3138352e3134392e3135342e302f32342d3234203d3e203434373731.roa (hash: Pgs5ueHQXHOzRUAnFpUKAel9Ig4WE+HMpXX4wHeR3SY=) 17: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl (hash: jgBxsQg0y4zSOLts1rSN5+8sia8BZoYdUM8eQLiQLxI=) 18: 3231372e392e3234322e302f32342d3234203d3e203135343139.roa (hash: mOAttZBNx/CTeO/Z3xtwFj9TNAzOHD7wWSzttDopHBY=) 19: 38392e3131362e31322e302f32332d3233203d3e203135343139.roa (hash: vCrLMX0eSFK/WsSjH4NPI6BnYmwIN7ZEFJbozFxO6uE=) 20: 38392e3131362e31362e302f32332d3233203d3e203135343139.roa (hash: 7gdiZpTYF4VKwdmEsTHKuwi6oAiZC6mVLx4cpcdl/GE=) 21: 3231372e392e3234312e302f32342d3234203d3e203135343139.roa (hash: hFAW06mmhAPSV/HJ4B8aC2PvIR5CrcKx3FcqsTikSiM=) 22: 38362e33382e332e302f32342d3234203d3e203135343139.roa (hash: 1jWpw+W9zeIRwNdxwEeWvA1uKZ5XVqeLW/yed0hU+d4=) 23: 3138352e3134392e3135352e302f32342d3234203d3e203434373731.roa (hash: W9T8aPnkMAlNbGOA+isd3U8U+YdKRxlDW0/+vHw4iGg=) 24: D34606949D385DB42714FE71274FAC9948EF279C.cer (hash: TQCZQkzK1CqgemnKR/erluvTKMYq58W//DcXZ16FiAE=) 25: 38322e3134302e3137382e302f32342d3234203d3e203135343139.roa (hash: kVZlSJSrWOIFgbVyyqSUiD6jECTpvfhx5mx8hRL1cGE=) 26: 38392e3131362e34312e302f32342d3234203d3e203135343139.roa (hash: nrTdofG3QiyT59ifvXqBtX8pF4lYbmqFJc6mO1yyOW0=) 27: 3138352e3134392e3135322e302f32322d3232203d3e203135343139.roa (hash: yiPh36TU1+o+jLX45pyYr1yhJEOI86BPrMUwrS94mMI=) 28: 3138352e3134392e3135332e302f32342d3234203d3e203135343430.roa (hash: ld9bmw/lU5ViE7fFfnUAARe92vzpSXeZ47xTrIGHE2Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 06:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:25:17:44:54:6d:93:eb:34:54:24:d2:66:e8:78:c8:d7:46:15:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Validity Not Before: Mar 1 07:34:36 2026 GMT Not After : Mar 2 10:54:36 2026 GMT Subject: CN=0608E8FA879DD3AC99A10FF957409865EAF5C8E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:09:fb:9a:ca:53:e7:4c:dc:b2:ac:2c:e1:28: cb:7e:d7:60:08:ce:84:62:14:86:0d:ff:82:f6:72: 2d:44:c7:22:d1:ef:75:27:c1:00:05:8e:f5:39:91: bc:dc:04:7c:79:c3:60:bd:1b:19:de:38:2e:6b:ac: 0a:f7:22:77:40:25:bd:18:45:d3:13:6d:e9:22:cd: ad:f7:f3:46:a4:17:ae:b7:09:62:bb:c5:2b:12:36: 0f:a6:7e:58:cc:1a:e3:1b:5a:fa:b4:fb:69:59:96: e0:ce:41:9b:a0:b6:08:55:2d:af:09:d2:4a:71:78: c0:27:5d:c8:ec:f6:50:ee:f7:5c:08:34:f4:01:e9: 9e:ce:2b:56:ad:18:4b:18:b7:bd:60:d8:90:a6:5b: ed:09:08:95:50:1e:1e:bc:45:55:0f:93:42:b0:4d: c9:7d:e0:05:73:e7:f3:4e:ba:b9:c0:bd:05:1d:09: 4a:98:db:9c:f6:d2:05:52:e5:87:6e:fc:09:1a:ca: 6d:48:16:21:84:41:2d:ce:a3:55:50:b9:76:3a:ea: ef:b2:d0:6b:d6:5e:4b:91:ed:6a:f9:5b:fa:4f:68: b3:ed:3b:85:aa:14:3d:aa:7d:e0:9e:72:94:4f:c0: 12:03:c5:43:c9:2c:ff:51:e9:d2:9e:c8:68:9b:c8: 79:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:08:E8:FA:87:9D:D3:AC:99:A1:0F:F9:57:40:98:65:EA:F5:C8:E1 X509v3 Authority Key Identifier: keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:96:cd:93:30:dc:9a:69:55:07:8a:eb:9e:8f:3c:0b:4f:43: 67:d6:81:ae:20:27:d4:87:7b:24:be:de:33:16:4d:6a:4b:70: 55:13:b9:8f:2d:03:5d:b9:d8:12:8a:e6:c7:70:00:46:08:d0: 32:da:84:4f:0e:7d:d6:45:e5:c5:54:bc:b5:9b:d6:ec:fc:aa: b1:f3:d5:b9:4e:b2:ea:13:77:72:92:5b:e8:7f:69:49:a8:19: 28:cf:94:56:e6:df:74:bb:c0:ee:ef:b9:97:6e:bc:66:d7:06: fb:cf:70:dd:92:a4:35:49:04:6b:83:06:9b:d5:a0:fa:92:74: d4:08:84:17:6b:5e:34:d5:8b:de:dc:2f:9a:2e:6b:3b:e7:3a: ba:b0:ac:26:14:51:e7:fa:c6:04:84:9d:08:69:92:e0:8f:fb: 71:76:9b:27:29:a8:f6:3b:7f:37:b0:b3:99:19:7d:55:29:d2: 93:5b:cb:81:7f:ff:e1:46:be:46:11:c3:ee:f0:44:75:78:76: d1:9f:31:32:39:d7:43:e5:8c:39:d7:15:5d:ae:41:08:a1:23: 54:8b:f2:9a:93:3b:16:fa:b7:ca:0d:10:c0:6a:9a:dc:ad:b3: 74:3b:3a:29:e0:d1:3a:65:8c:6e:e1:6e:80:30:31:da:0a:94: 87:e0:eb:4c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUbCUXRFRtk+s0VCTSZuh4yNdGFaYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmODU5OTdiMWI5YjM1OGUxYzQzZjM2NzY1YWEwYTRh MDIxNDRhZTAeFw0yNjAzMDEwNzM0MzZaFw0yNjAzMDIxMDU0MzZaMDMxMTAvBgNV BAMTKDA2MDhFOEZBODc5REQzQUM5OUExMEZGOTU3NDA5ODY1RUFGNUM4RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvCfuaylPnTNyyrCzhKMt+12AI zoRiFIYN/4L2ci1ExyLR73UnwQAFjvU5kbzcBHx5w2C9GxneOC5rrAr3IndAJb0Y RdMTbekiza3380akF663CWK7xSsSNg+mfljMGuMbWvq0+2lZluDOQZugtghVLa8J 0kpxeMAnXcjs9lDu91wINPQB6Z7OK1atGEsYt71g2JCmW+0JCJVQHh68RVUPk0Kw Tcl94AVz5/NOurnAvQUdCUqY25z20gVS5Ydu/Akaym1IFiGEQS3Oo1VQuXY66u+y 0GvWXkuR7Wr5W/pPaLPtO4WqFD2qfeCecpRPwBIDxUPJLP9R6dKeyGibyHmnAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUBgjo+oed06yZoQ/5V0CYZer1yOEwHwYDVR0j BBgwFoAUnfhZl7G5s1jhxD82dlqgpKAhRK4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDAyZTBiYTMtZmU2MC00NWIxLTkxNjAtODY4YTJmOGE0 M2IxLzMvOURGODU5OTdCMUI5QjM1OEUxQzQzRjM2NzY1QUEwQTRBMDIxNDRBRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25maFpsN0c1czFqaHhEODJkbHFncEtB aFJLNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJlMGJhMy1m ZTYwLTQ1YjEtOTE2MC04NjhhMmY4YTQzYjEvMy85REY4NTk5N0IxQjlCMzU4RTFD NDNGMzY3NjVBQTBBNEEwMjE0NEFFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARpbNkzDcmmlVB4rrno88 C09DZ9aBriAn1Id7JL7eMxZNaktwVRO5jy0DXbnYEormx3AARgjQMtqETw591kXl xVS8tZvW7PyqsfPVuU6y6hN3cpJb6H9pSagZKM+UVubfdLvA7u+5l268ZtcG+89w 3ZKkNUkEa4MGm9Wg+pJ01AiEF2teNNWL3twvmi5rO+c6urCsJhRR5/rGBISdCGmS 4I/7cXabJymo9jt/N7CzmRl9VSnSk1vLgX//4Ua+RhHD7vBEdXh20Z8xMjnXQ+WM OdcVXa5BCKEjVIvympM7Fvq3yg0QwGqa3K2zdDs6KeDROmWMbuFugDAx2gqUh+Dr TA== -----END CERTIFICATE-----Generated at Sun Mar 1 16:37:43 2026 by rpki-client