$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.mft File: FEF34FB01875095EDA56E1554746D2A5EC1ECE54.mft (raw, json) Hash identifier: xFy3oV4GVWnpd0At5Nb8eqySWug2S230QokJXoLY6+c= Subject key identifier: 42:7F:FB:6F:85:D0:5F:0E:D7:73:46:36:CB:ED:F8:9F:1D:0A:07:A9 Authority key identifier: FE:F3:4F:B0:18:75:09:5E:DA:56:E1:55:47:46:D2:A5:EC:1E:CE:54 Certificate issuer: /CN=FEF34FB01875095EDA56E1554746D2A5EC1ECE54 Certificate serial: 4A182038BACC1CEC33AD723595E0AB881E666758 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.mft Manifest number: 38 Signing time: Mon 02 Mar 2026 12:22:44 +0000 Manifest this update: Mon 02 Mar 2026 12:17:44 +0000 Manifest next update: Tue 03 Mar 2026 14:36:44 +0000 Files and hashes: 1: 326131343a373538303a666130303a3a2f34342d3438203d3e20323134333434.roa (hash: UqCNzDGtU5aD3Sfhq0hDlqQDB4EqJwXqpH7M/ZgJ89U=) 2: FEF34FB01875095EDA56E1554746D2A5EC1ECE54.crl (hash: pZeBzux4xtj5uD5sJ0wdI4lsEG0r8u+6yjRWZ6gvUUE=) 3: 326131343a373538303a666132303a3a2f34342d3438203d3e20323134333434.roa (hash: q8V2y9WUGOeaflB9on/TGNr/ZKQwKQK7OMK/V1fxCUE=) 4: 326131343a373538303a666131303a3a2f34342d3438203d3e20323134333434.roa (hash: t0fyMS70w2sKbXm+rw7xWIunJVCWcYTOkdarqGuSj1I=) 5: 326131343a373538303a666134303a3a2f34342d3438203d3e20323134333434.roa (hash: D26rbX3psrVmaD+T/bDXuaJV8uOWmhZNX1TYvDQmeqo=) 6: 326131343a373538303a666133303a3a2f34342d3438203d3e20323134333434.roa (hash: lZi2rz69yJ2BC+doYbaqrHrJGm4sWCLa8BxeQ92G0Hs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 14:36:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:18:20:38:ba:cc:1c:ec:33:ad:72:35:95:e0:ab:88:1e:66:67:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FEF34FB01875095EDA56E1554746D2A5EC1ECE54 Validity Not Before: Mar 2 12:17:44 2026 GMT Not After : Mar 3 14:36:44 2026 GMT Subject: CN=427FFB6F85D05F0ED7734636CBEDF89F1D0A07A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:75:87:3f:f7:cb:31:ed:9d:53:82:71:1c:1c: e7:9b:7c:ad:fd:bd:a6:47:6c:9a:ef:73:1a:a1:0c: e7:bb:30:7f:ab:d4:26:80:11:05:11:19:56:2b:29: 73:07:01:d2:57:dc:14:09:b0:53:44:aa:70:c9:dc: 3b:a3:db:da:a4:76:0d:40:76:3f:b0:b0:0e:68:82: fe:90:f6:9a:c0:30:d8:a2:54:76:94:a5:23:25:65: 57:15:86:ef:c7:2e:f5:eb:bf:f0:a5:06:46:bd:02: ff:a5:a4:e4:29:82:ae:66:84:d4:aa:aa:e3:16:47: 32:62:aa:06:f2:15:2e:4f:d9:c3:a3:76:76:2b:63: 9b:08:84:ad:ab:c6:da:bb:65:44:35:40:d5:65:bf: 53:fa:43:72:dd:ce:f5:f9:c7:05:55:1b:af:f9:5e: 03:dd:83:63:19:f0:09:99:b9:59:3e:65:3a:06:8a: cd:ee:12:63:79:f0:8e:be:1e:b7:fa:c1:e0:a6:f4: 22:fd:ea:96:51:81:7c:3d:5e:60:d2:19:0f:a2:26: 55:d9:f1:f8:c9:fa:0b:76:1a:43:5f:af:a7:71:f3: ec:42:93:3b:e8:d5:2f:65:1c:ad:06:a4:dd:1b:9a: 3c:e7:6e:be:6e:82:06:dd:da:ac:3c:8d:17:25:96: 57:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7F:FB:6F:85:D0:5F:0E:D7:73:46:36:CB:ED:F8:9F:1D:0A:07:A9 X509v3 Authority Key Identifier: keyid:FE:F3:4F:B0:18:75:09:5E:DA:56:E1:55:47:46:D2:A5:EC:1E:CE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:7f:38:45:51:82:24:10:55:b2:08:ea:db:e9:b5:c6:ed:0b: ca:82:a7:8d:41:52:a5:4a:07:b6:64:0e:76:bc:ae:35:41:8e: b5:7a:b2:4e:42:79:e0:56:17:93:88:e9:1e:30:d9:c7:51:91: 78:c3:e7:63:4d:5d:6c:fc:72:e0:9f:c5:c1:e4:93:64:09:cb: 2e:00:a2:ca:aa:f1:c4:1b:79:b1:1f:eb:3f:60:12:d3:7d:78: 74:2a:b7:06:a8:dd:45:ad:90:0f:2b:d6:5c:86:ad:90:57:98: 72:06:b4:f7:59:80:e4:18:7c:18:25:a6:26:31:c0:16:f7:a9: e2:00:f7:7f:0f:55:62:c6:e5:9f:8e:fe:3f:83:02:44:61:8a: 01:11:28:a6:f5:d1:3e:f8:01:e8:73:2f:ea:95:69:fa:25:5f: c6:9f:fe:41:89:b6:9c:4d:5b:d5:c5:f2:b4:16:cd:c8:0b:d5: 92:d1:b0:24:b2:33:56:4c:fe:d0:af:cb:c1:9d:8c:bf:65:98: 0a:3d:5c:61:b0:ac:ae:0c:74:3a:df:db:05:bb:05:33:1b:be: ca:cd:a1:44:b3:56:39:e8:4b:c6:75:47:71:44:ec:bd:41:12: 91:0a:c1:5a:2b:11:45:2b:03:e6:34:7a:4b:21:5a:63:e3:2c: 04:9e:51:81 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUShggOLrMHOwzrXI1leCriB5mZ1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkVGMzRGQjAxODc1MDk1RURBNTZFMTU1NDc0NkQyQTVF QzFFQ0U1NDAeFw0yNjAzMDIxMjE3NDRaFw0yNjAzMDMxNDM2NDRaMDMxMTAvBgNV BAMTKDQyN0ZGQjZGODVEMDVGMEVENzczNDYzNkNCRURGODlGMUQwQTA3QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBdYc/98sx7Z1TgnEcHOebfK39 vaZHbJrvcxqhDOe7MH+r1CaAEQURGVYrKXMHAdJX3BQJsFNEqnDJ3Duj29qkdg1A dj+wsA5ogv6Q9prAMNiiVHaUpSMlZVcVhu/HLvXrv/ClBka9Av+lpOQpgq5mhNSq quMWRzJiqgbyFS5P2cOjdnYrY5sIhK2rxtq7ZUQ1QNVlv1P6Q3LdzvX5xwVVG6/5 XgPdg2MZ8AmZuVk+ZToGis3uEmN58I6+Hrf6weCm9CL96pZRgXw9XmDSGQ+iJlXZ 8fjJ+gt2GkNfr6dx8+xCkzvo1S9lHK0GpN0bmjznbr5uggbd2qw8jRcllldRAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUQn/7b4XQXw7Xc0Y2y+34nx0KB6kwHwYDVR0j BBgwFoAU/vNPsBh1CV7aVuFVR0bSpewezlQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzQvRkVGMzRGQjAxODc1MDk1RURBNTZFMTU1NDc0NkQyQTVFQzFFQ0U1NC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GRUYzNEZCMDE4NzUwOTVFREE1NkUxNTU0 NzQ2RDJBNUVDMUVDRTU0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzA5NzE4ZjA4LWJiMzktNGEwOS1hNGMwLTFmNDAyNDhhNmQxNS80L0ZFRjM0RkIw MTg3NTA5NUVEQTU2RTE1NTQ3NDZEMkE1RUMxRUNFNTQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBrfzhF UYIkEFWyCOrb6bXG7QvKgqeNQVKlSge2ZA52vK41QY61erJOQnngVheTiOkeMNnH UZF4w+djTV1s/HLgn8XB5JNkCcsuAKLKqvHEG3mxH+s/YBLTfXh0KrcGqN1FrZAP K9Zchq2QV5hyBrT3WYDkGHwYJaYmMcAW96niAPd/D1VixuWfjv4/gwJEYYoBESim 9dE++AHocy/qlWn6JV/Gn/5BibacTVvVxfK0Fs3IC9WS0bAksjNWTP7Qr8vBnYy/ ZZgKPVxhsKyuDHQ639sFuwUzG77KzaFEs1Y56EvGdUdxROy9QRKRCsFaKxFFKwPm NHpLIVpj4ywEnlGB -----END CERTIFICATE-----Generated at Tue Mar 3 01:57:10 2026 by rpki-client