$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft File: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft (raw, json) Hash identifier: ALg69fUnBVLsTxaJTIZUXwWyu9cQu/XhHfY5o69/VvU= Subject key identifier: 0A:73:AF:33:16:E2:34:E1:95:C3:FF:A1:71:A2:DA:BC:E1:40:BA:6A Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Certificate serial: 0FD79BD1AF3DA663B2A1C1E0D145C52340C09E04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft Manifest number: 054C Signing time: Thu 16 Apr 2026 17:25:15 +0000 Manifest this update: Thu 16 Apr 2026 17:20:15 +0000 Manifest next update: Fri 17 Apr 2026 19:16:15 +0000 Files and hashes: 1: 3138352e3134392e3135342e302f32342d3234203d3e203434373731.roa (hash: m3qyMw/oJQApcKE+tTHmQHJByXjG/Fh99MnZmfiTNq8=) 2: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl (hash: iPSci5TtT2ixVwVRil3Kq2WTg3f0gcfqYwvAWyVwy68=) 3: 38322e3134302e3138392e302f32342d3234203d3e203135343139.roa (hash: zH/62I+GFjmbLT58TFoHTt4seVQwFkHzMOITLzNLWwM=) 4: 326130323a323633303a3a2f33322d3332203d3e203135343139.roa (hash: jli84J8TPjOOdHhktkVlx+DNU1JzPO7pUh03TSavr40=) 5: 38392e3131362e31322e302f32332d3233203d3e203135343139.roa (hash: UzAk6y5i6qWN9IVFlhmoZTRjcqrtlajGQzrPjOGpriU=) 6: 326130323a323633303a3a2f32392d3239203d3e203135343139.roa (hash: 57eeXg7j+oXHRFh1XtK1fw7OXcY8daCIezixmAfkJcw=) 7: 3231372e392e3234322e302f32342d3234203d3e203135343139.roa (hash: mgaSFuH9dwlQC9LQOF1dVYEFek9VIOTVBqz/2FqpDg4=) 8: 38392e3131362e31362e302f32332d3233203d3e203135343139.roa (hash: 0ETOHqFxfMol2LhEQMME+DAkxTkGy4ojRF4+9fieTEQ=) 9: 3138352e3134392e3135322e302f32322d3232203d3e203135343139.roa (hash: euJ5l1svQV4yeF07rYfON9i9pW05MgdKcVAsQcZCZgs=) 10: 3138352e3134392e3135332e302f32342d3234203d3e203135343430.roa (hash: 6vwMaK76XK6X/pz6kTht3dh5BVylEQSRFW6TtRdFjeM=) 11: 38392e3131362e3131362e302f32322d3232203d3e203135343139.roa (hash: vuC6A6enLxPTXBOwLw9tBCemQGy3gdCRudl05Im1bw0=) 12: 38322e3134302e3137382e302f32342d3234203d3e203135343139.roa (hash: 9ZXjSWAp+j58GwfDtQ/mqL8ScvPvc/83HCdFvbTQt+M=) 13: 38322e3134302e3133312e302f32342d3234203d3e203135343139.roa (hash: tf013dx+p23kvdhs/rrgl7jF0HCw4nuCcwBzDL5I7qE=) 14: 38362e33382e332e302f32342d3234203d3e203135343139.roa (hash: kfugqwL5a8rKpk8fwdFIn7pS0iv55PmKrmdtLvO9AmM=) 15: 3138352e3134392e3135332e302f32342d3234203d3e203133313934.roa (hash: QbwoBEnpKwFJwsOgE5BSkaanZZexGA6c5rVJbKDREKo=) 16: 3138352e3134392e3135332e302f32342d3234203d3e203434373731.roa (hash: 8yuN3MCh3uYcW+DbtvxPqGplTmthXGYCL3Ax7r80myw=) 17: 3138352e3134392e3135352e302f32342d3234203d3e203434373731.roa (hash: W19aTL73kDmq4VpxFcM/5jWE3HfVKXSDK7YuTWHNOTU=) 18: D34606949D385DB42714FE71274FAC9948EF279C.cer (hash: TQCZQkzK1CqgemnKR/erluvTKMYq58W//DcXZ16FiAE=) 19: 38392e3131362e342e302f32322d3232203d3e203135343139.roa (hash: T273PKOaqPzw+ef1HYHPIsAsFc8LZnkPiPIyWBRhHPE=) 20: 3231372e392e3234312e302f32342d3234203d3e203135343139.roa (hash: EJG2SDzWzIGWns6pT4kVSDqRPMJTJNXkz97kFGgjHCI=) 21: 38392e3131362e31392e302f32342d3234203d3e203135343139.roa (hash: IYPeBc0njFQqxrAGs2OJRowmjEd1rlfv9Au+QQE5POo=) 22: 38392e3131362e34322e302f32332d3233203d3e203135343139.roa (hash: y6p5UjBQPUduUonTPaO5F0JtSCE/pxPOj2iYT5kNMsc=) 23: 38392e3131362e322e302f32332d3233203d3e203135343139.roa (hash: aSFnF5KE0HZKqtoTzaJ7DbcDwDtYbFqkJ83NVi96KOw=) 24: 38362e33382e382e302f32312d3231203d3e203135343139.roa (hash: RBjXMLj20ozhJFLy1WSIfc7wq7Cyuu+KQRQSUNSEpNg=) 25: 38392e3131362e312e302f32342d3234203d3e203135343139.roa (hash: rx28ukAYIi7QdbkrNWf+57kJyDhNeE212LGEgmkq0Dk=) 26: 38392e3131362e34312e302f32342d3234203d3e203135343139.roa (hash: kGai0vt9wA/86vZjdukxOGnISfChmqA46SxZbgRXmkY=) 27: 38392e3131362e31352e302f32342d3234203d3e203135343139.roa (hash: BfjOFS0GoZTfjo/xHJvef2THjZzuBY75ujhpTamWG84=) 28: 3231372e392e3235342e302f32332d3233203d3e203135343139.roa (hash: DU5pynjNIEEP2cTa3qAwphhWauxpRZzQL0RoFoNuEKY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 19:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d7:9b:d1:af:3d:a6:63:b2:a1:c1:e0:d1:45:c5:23:40:c0:9e:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Validity Not Before: Apr 16 17:20:15 2026 GMT Not After : Apr 17 19:16:15 2026 GMT Subject: CN=0A73AF3316E234E195C3FFA171A2DABCE140BA6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b9:00:6b:3c:a6:86:2e:41:4a:35:25:68:5b: e0:8b:68:f1:1f:5e:8c:7b:8d:9e:bf:4d:de:e8:ae: e0:75:74:32:ad:13:18:fa:ab:e3:dd:5a:fb:5a:56: 57:fb:53:c0:f7:c3:a4:d2:16:fb:df:13:9c:e8:c9: 40:f2:89:64:c0:9a:82:25:d4:74:ee:f3:67:09:4b: ac:43:a6:36:73:bb:fe:66:62:3d:bc:fe:35:2c:32: 96:c7:fd:59:a9:7e:37:66:09:ff:f1:cb:e5:2f:b0: 88:e0:3c:0d:39:43:3a:12:75:99:84:55:82:88:b9: 17:de:a7:64:8e:b8:04:35:e6:8e:fd:78:2d:45:6e: 59:12:29:4f:39:b5:6f:ed:89:ac:45:a1:73:79:46: a1:6f:e8:f9:cb:e4:53:d8:ac:86:bd:8d:07:3b:82: c8:ab:cf:e8:12:9c:78:8d:98:85:df:dc:73:43:69: e2:77:f3:4d:2b:9f:ab:40:f5:3c:ed:e1:25:08:91: 4e:54:23:78:2b:ba:df:be:97:09:2c:66:8d:33:86: 0d:ff:61:b2:fd:78:0a:97:ca:00:f6:05:da:7b:7b: ac:67:75:52:8b:2c:8e:4c:9e:4b:8a:2e:a0:b3:7a: 1d:9f:43:f0:9f:b1:56:58:ed:57:e5:c9:7c:fe:93: ec:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:73:AF:33:16:E2:34:E1:95:C3:FF:A1:71:A2:DA:BC:E1:40:BA:6A X509v3 Authority Key Identifier: keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:4d:14:54:8e:cd:3b:6b:d7:cc:41:d5:1e:d1:b8:90:e1:96: e2:89:eb:eb:c5:91:29:84:5d:a0:42:97:4f:3c:45:f0:b9:6e: 2d:9f:9f:d8:59:ca:ba:dc:a3:8a:d3:91:7b:41:01:b8:35:50: 2d:12:29:0b:35:75:f8:d4:61:b7:e6:ad:30:63:9f:3b:56:e9: 47:c1:c3:72:e4:2e:fb:fa:b5:1a:b0:4b:3e:7d:c4:75:a6:e8: 74:50:07:cf:e8:f9:cc:06:94:84:f5:35:27:61:d9:27:18:00: 53:63:1c:21:f9:0c:96:a9:06:cc:7e:47:88:78:d6:fb:35:d9: 27:de:0d:74:f0:25:4b:f8:18:56:a6:e9:27:64:98:41:5f:c5: 0d:52:d3:b7:c2:3c:89:18:59:ad:32:35:05:eb:36:32:56:80: e7:9e:5b:e0:40:fd:e9:66:27:09:c4:45:ab:20:20:b1:08:b7: d7:83:04:2e:f6:04:41:9f:03:3a:ac:87:fa:35:db:2b:b8:26: 11:48:ae:e5:cf:7e:ec:3d:dc:10:52:00:1e:bf:80:e6:a0:d3: 68:fb:a2:b2:29:cd:a6:26:0b:a3:8d:9f:6a:dc:98:2f:97:ed: 36:26:2d:b1:af:c5:a6:15:63:fc:f5:3a:23:56:8e:69:de:c5: ed:10:8d:a4 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUD9eb0a89pmOyocHg0UXFI0DAngQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmODU5OTdiMWI5YjM1OGUxYzQzZjM2NzY1YWEwYTRh MDIxNDRhZTAeFw0yNjA0MTYxNzIwMTVaFw0yNjA0MTcxOTE2MTVaMDMxMTAvBgNV BAMTKDBBNzNBRjMzMTZFMjM0RTE5NUMzRkZBMTcxQTJEQUJDRTE0MEJBNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbuQBrPKaGLkFKNSVoW+CLaPEf Xox7jZ6/Td7oruB1dDKtExj6q+PdWvtaVlf7U8D3w6TSFvvfE5zoyUDyiWTAmoIl 1HTu82cJS6xDpjZzu/5mYj28/jUsMpbH/VmpfjdmCf/xy+UvsIjgPA05QzoSdZmE VYKIuRfep2SOuAQ15o79eC1FblkSKU85tW/tiaxFoXN5RqFv6PnL5FPYrIa9jQc7 gsirz+gSnHiNmIXf3HNDaeJ3800rn6tA9Tzt4SUIkU5UI3grut++lwksZo0zhg3/ YbL9eAqXygD2Bdp7e6xndVKLLI5MnkuKLqCzeh2fQ/CfsVZY7VflyXz+k+yVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUCnOvMxbiNOGVw/+hcaLavOFAumowHwYDVR0j BBgwFoAUnfhZl7G5s1jhxD82dlqgpKAhRK4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDAyZTBiYTMtZmU2MC00NWIxLTkxNjAtODY4YTJmOGE0 M2IxLzMvOURGODU5OTdCMUI5QjM1OEUxQzQzRjM2NzY1QUEwQTRBMDIxNDRBRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25maFpsN0c1czFqaHhEODJkbHFncEtB aFJLNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJlMGJhMy1m ZTYwLTQ1YjEtOTE2MC04NjhhMmY4YTQzYjEvMy85REY4NTk5N0IxQjlCMzU4RTFD NDNGMzY3NjVBQTBBNEEwMjE0NEFFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANE0UVI7NO2vXzEHVHtG4 kOGW4onr68WRKYRdoEKXTzxF8LluLZ+f2FnKutyjitORe0EBuDVQLRIpCzV1+NRh t+atMGOfO1bpR8HDcuQu+/q1GrBLPn3EdabodFAHz+j5zAaUhPU1J2HZJxgAU2Mc IfkMlqkGzH5HiHjW+zXZJ94NdPAlS/gYVqbpJ2SYQV/FDVLTt8I8iRhZrTI1Bes2 MlaA555b4ED96WYnCcRFqyAgsQi314MELvYEQZ8DOqyH+jXbK7gmEUiu5c9+7D3c EFIAHr+A5qDTaPuisinNpiYLo42fatyYL5ftNiYtsa/FphVj/PU6I1aOad7F7RCN pA== -----END CERTIFICATE-----Generated at Fri Apr 17 05:32:15 2026 by rpki-client