$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft File: 140CF895225100CF571959173341D92070FF6E7C.mft (raw, json) Hash identifier: PzxM80MtVl94RjZVZbnk7E7S/YJzIvt7Rf8izp2cJtU= Subject key identifier: EA:6B:1C:84:13:BA:46:EE:1D:29:41:88:8E:15:B8:CF:0B:60:00:CC Authority key identifier: 14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C Certificate issuer: /CN=140CF895225100CF571959173341D92070FF6E7C Certificate serial: 53AA7BB842DBAB357D2A257BA3DBAE163F50C5B1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft Manifest number: 5C Signing time: Mon 02 Mar 2026 03:47:56 +0000 Manifest this update: Mon 02 Mar 2026 03:42:56 +0000 Manifest next update: Tue 03 Mar 2026 06:06:56 +0000 Files and hashes: 1: 140CF895225100CF571959173341D92070FF6E7C.crl (hash: ZhZc7HF7d/gbiKsCn2FYK2wk2QM0LoztVVp8gijgK/4=) 2: 326131343a373538363a363230303a3a2f34302d3438203d3e20323130333532.roa (hash: VyqY9yrEjpVeGa7fC0EnkjbydVqfbidJLnALhbzwu3k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 04:40:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:aa:7b:b8:42:db:ab:35:7d:2a:25:7b:a3:db:ae:16:3f:50:c5:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=140CF895225100CF571959173341D92070FF6E7C Validity Not Before: Mar 2 03:42:56 2026 GMT Not After : Mar 3 06:06:56 2026 GMT Subject: CN=EA6B1C8413BA46EE1D2941888E15B8CF0B6000CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:aa:80:c9:3a:d4:63:c6:e6:61:bb:90:98:b5: 15:b5:a2:e7:94:53:1b:8a:84:67:a5:0e:02:8b:32: d1:a9:27:7e:16:78:f3:d5:9a:e0:06:b9:bd:34:b5: f5:42:0b:32:18:48:b8:f6:29:b6:fd:5c:63:1f:91: 94:c7:d7:f3:0d:90:3a:34:da:f5:38:85:8b:6d:28: 3a:1c:05:86:22:97:88:48:5a:c4:8b:b0:3f:cb:80: e7:5e:27:46:23:26:d6:4f:94:00:90:27:13:dd:4e: 1c:65:c1:ee:3a:c4:77:1f:a3:ec:c2:c3:f6:6c:81: 05:e0:0e:a2:a9:08:b6:7d:d0:7e:c9:e8:07:e2:31: 61:33:ce:fe:93:0e:9f:7d:b9:5a:2b:65:31:c8:18: 4a:3b:3a:de:e9:45:82:70:dc:0f:2b:0f:c0:ce:fe: 86:ed:09:a1:7a:7b:2e:48:7a:a6:41:58:60:8e:1f: 66:f0:b4:dc:6a:97:38:9c:66:36:b4:c8:04:75:87: 46:b4:34:75:6c:9a:9b:eb:d1:20:d3:a7:2b:60:78: a1:60:91:1e:cc:9e:e4:4b:a6:06:d2:04:a0:7c:8a: 5d:89:55:5e:4b:5a:48:8b:cd:0d:95:9d:5d:34:b0: 99:a1:80:2d:0a:a2:9e:50:ad:82:cd:60:b4:ce:d0: 7f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:6B:1C:84:13:BA:46:EE:1D:29:41:88:8E:15:B8:CF:0B:60:00:CC X509v3 Authority Key Identifier: keyid:14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:8a:9e:75:52:57:e1:28:f9:43:3c:dd:11:1e:4d:03:b7:2a: 57:89:70:40:44:e9:f9:2b:0b:2a:5e:de:30:9a:91:2f:c6:5b: f6:ca:9d:cc:49:ba:ff:f0:6b:84:05:78:3b:fb:59:59:aa:63: e9:c0:79:c3:a4:5d:4b:30:02:48:d1:a5:a8:f7:ba:ff:3f:25: 4c:57:8b:91:b7:77:70:76:2f:14:a6:1e:20:93:12:04:91:6e: cd:35:23:f8:07:fc:9d:ef:07:4b:a0:e9:95:90:0c:27:44:bb: e8:81:fc:46:c9:d5:d0:c6:12:13:4b:1e:75:44:fb:bc:46:b9: 12:27:ed:75:1b:c9:f2:58:74:8f:1e:55:0c:92:00:46:5a:f4: 88:51:be:09:d6:fb:ab:79:21:cb:23:93:6d:2c:ca:18:ba:99: 04:f9:3a:d0:cd:a3:df:e2:fd:dd:a1:ac:d6:aa:43:80:85:0d: 41:45:af:6c:72:d5:3f:72:b5:15:df:8a:1f:a5:9f:0f:6b:2b: 87:62:56:52:30:6e:fc:e5:c5:81:7e:e6:13:a2:61:3f:e0:bd: 56:5d:1c:b6:89:04:73:f4:8f:bd:ca:b4:c0:3a:38:9d:0e:79: 7e:a0:d4:ea:58:67:55:42:e6:4e:bf:13:53:f0:be:95:3c:47: 73:85:db:44 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUU6p7uELbqzV9KiV7o9uuFj9QxbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3 MEZGNkU3QzAeFw0yNjAzMDIwMzQyNTZaFw0yNjAzMDMwNjA2NTZaMDMxMTAvBgNV BAMTKEVBNkIxQzg0MTNCQTQ2RUUxRDI5NDE4ODhFMTVCOENGMEI2MDAwQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClqoDJOtRjxuZhu5CYtRW1oueU UxuKhGelDgKLMtGpJ34WePPVmuAGub00tfVCCzIYSLj2Kbb9XGMfkZTH1/MNkDo0 2vU4hYttKDocBYYil4hIWsSLsD/LgOdeJ0YjJtZPlACQJxPdThxlwe46xHcfo+zC w/ZsgQXgDqKpCLZ90H7J6AfiMWEzzv6TDp99uVorZTHIGEo7Ot7pRYJw3A8rD8DO /obtCaF6ey5IeqZBWGCOH2bwtNxqlzicZja0yAR1h0a0NHVsmpvr0SDTpytgeKFg kR7MnuRLpgbSBKB8il2JVV5LWkiLzQ2VnV00sJmhgC0Kop5QrYLNYLTO0H+zAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU6mschBO6Ru4dKUGIjhW4zwtgAMwwHwYDVR0j BBgwFoAUFAz4lSJRAM9XGVkXM0HZIHD/bnwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzEvMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3MEZGNkU3Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy8xNDBDRjg5NTIyNTEwMENGNTcxOTU5MTcz MzQxRDkyMDcwRkY2RTdDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi8xLzE0MENGODk1 MjI1MTAwQ0Y1NzE5NTkxNzMzNDFEOTIwNzBGRjZFN0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB7ip51 UlfhKPlDPN0RHk0DtypXiXBAROn5KwsqXt4wmpEvxlv2yp3MSbr/8GuEBXg7+1lZ qmPpwHnDpF1LMAJI0aWo97r/PyVMV4uRt3dwdi8Uph4gkxIEkW7NNSP4B/yd7wdL oOmVkAwnRLvogfxGydXQxhITSx51RPu8RrkSJ+11G8nyWHSPHlUMkgBGWvSIUb4J 1vureSHLI5NtLMoYupkE+TrQzaPf4v3doazWqkOAhQ1BRa9sctU/crUV34ofpZ8P ayuHYlZSMG785cWBfuYTomE/4L1WXRy2iQRz9I+9yrTAOjidDnl+oNTqWGdVQuZO vxNT8L6VPEdzhdtE -----END CERTIFICATE-----Generated at Mon Mar 2 17:00:15 2026 by rpki-client