$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft File: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft (raw, json) Hash identifier: y2eU3VVzaxHEPvNZcz7WDLu+MgJqRqLvxbJ4hDGO/3w= Subject key identifier: B6:CA:EB:82:F2:F8:EF:7B:DC:3A:F2:F4:12:77:9D:9C:95:31:6B:CE Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Certificate serial: 4BE2197796493A6F5D4ACED5C1F65789BF86DD93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft Manifest number: 0573 Signing time: Sun 01 Mar 2026 17:17:11 +0000 Manifest this update: Sun 01 Mar 2026 17:12:11 +0000 Manifest next update: Mon 02 Mar 2026 17:23:11 +0000 Files and hashes: 1: 34362e3138332e33302e302f32342d3234203d3e203631333137.roa (hash: pxnqedD3kuwz1m+9x0q4e9R46P3xXGAP6tM7JZr4zqQ=) 2: 34362e3138332e32352e302f32342d3234203d3e203633303233.roa (hash: 4jq0qwMJqWtfRUuzz3vPyKHtua4FM5/8Y3cvVGfTKBM=) 3: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl (hash: 2CGO/NIT0fx7FcCaQNAy2Rr/uXajS0xUZE0fVf3DY0s=) 4: 34362e3138332e33302e302f32342d3234203d3e203239383032.roa (hash: 72nHdO4b4bTlOVAl3qEYnqrejyz7ta1anmrlcAXdAWw=) 5: 34362e3138332e32372e302f32342d3234203d3e20323132323338.roa (hash: MBTQi0HOcbTwY/4fQl+vTOHLOQ2FmR/EhBIZ6Dj3u14=) 6: 34362e3138332e32382e302f32342d3234203d3e203239383032.roa (hash: kUcJYnZDGTlKIzzpmv1f5LvT/3qyw3JDmGespkIKDl8=) 7: 34362e3138332e32392e302f32342d3234203d3e20383334.roa (hash: cCNMl/j8O4+QWokqGu7uLfEk807f860f4W6iD80yDww=) 8: 34362e3138332e32362e302f32342d3234203d3e2039303039.roa (hash: ckwThy9Ftd6Jb/nTbj53dd12b3F3RSR9Etp8JSW5svM=) 9: 34362e3138332e32382e302f32342d3234203d3e203631333137.roa (hash: EQc8ZSWRYu3w3yABE1KT+uLZnchUtUDhUBMKc9gsz8U=) 10: 34362e3138332e32342e302f32342d3234203d3e20313432313436.roa (hash: U6sIE1tc5XNg8Vw7jnbxLLCNANnB9wH3voxb1FhuZwc=) 11: 34362e3138332e33312e302f32342d3234203d3e20383334.roa (hash: sUL1Un4mrUIulXB1hFi4zMCmkeeullp5kTLJ3eXsXVI=) 12: 34362e3138332e32352e302f32342d3234203d3e20323132323338.roa (hash: lxi2m0tJ4IwcIv1Qu/mxuwgzf8BGdtHdxfKNM9mKZEQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 17:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:e2:19:77:96:49:3a:6f:5d:4a:ce:d5:c1:f6:57:89:bf:86:dd:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Validity Not Before: Mar 1 17:12:11 2026 GMT Not After : Mar 2 17:23:11 2026 GMT Subject: CN=B6CAEB82F2F8EF7BDC3AF2F412779D9C95316BCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:14:48:47:bf:b3:d7:d0:31:c2:91:24:02:22: 33:bb:fc:4d:9a:b2:38:b6:7a:39:cf:d8:74:be:ed: 07:f8:20:ae:2c:db:52:e5:8c:55:6a:10:bb:63:0a: 6e:99:6c:f7:d6:cf:11:28:9f:f4:c8:3b:1d:b1:04: af:d7:12:dc:9e:ca:8d:63:13:85:fe:26:1c:34:af: fc:00:2c:26:6d:f5:8a:99:dc:a7:16:94:01:5e:18: 85:18:69:c0:46:8c:2d:df:5a:41:1e:97:59:b7:77: 3c:3c:dc:84:e6:b4:54:bd:84:86:79:84:a6:0f:6c: 47:a6:1e:f9:9a:83:35:c5:fc:1f:22:c6:8e:92:ec: 2e:7d:8e:d3:7e:6d:9c:e0:7e:ef:54:58:4d:b4:15: 7d:23:90:e2:8f:99:bb:6b:3b:8d:e0:07:89:88:d8: e1:43:28:10:7c:2e:13:7f:b6:2a:b6:e7:22:64:10: a5:7c:74:08:9a:0e:a7:90:bf:8f:d5:4c:ce:41:54: 42:3f:e9:49:22:3d:ba:f1:f3:7d:e7:d1:c1:71:c6: fe:4d:8b:9d:87:da:63:4b:59:b2:19:e8:e3:78:d2: 96:9b:10:77:d8:fa:58:e4:b3:26:cd:a8:aa:41:de: d5:a6:ac:cd:26:cb:1e:49:d6:f4:a7:41:fb:03:9f: a5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:CA:EB:82:F2:F8:EF:7B:DC:3A:F2:F4:12:77:9D:9C:95:31:6B:CE X509v3 Authority Key Identifier: keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:bb:80:4e:68:08:c1:f4:7d:7a:16:27:31:4b:65:f8:2b:90: 35:13:d8:a4:d1:90:a2:c7:7b:5d:8c:ef:54:97:c8:ed:c6:e4: 42:4a:13:f6:e4:39:d3:70:a4:7a:d6:02:3d:60:5a:20:e2:49: df:70:d7:06:d9:b6:96:60:7a:29:f6:6b:1d:7f:70:d2:7b:91: 89:78:15:ff:c8:8a:67:5a:a8:4e:49:c6:6d:0f:97:b6:bf:86: 4c:a4:0b:ab:1c:65:a3:09:36:f9:a8:ca:77:41:08:ae:2a:d2: e6:77:0d:bc:e3:cc:ae:7c:81:79:82:3c:30:0e:08:c3:89:16: e2:26:2d:8c:d0:6a:06:87:02:2a:74:cf:ee:3f:78:66:32:6f: 28:2e:5f:dc:ae:06:b4:40:dc:55:c7:88:f0:ee:fb:ce:11:6e: 43:55:6e:98:d4:50:09:23:c8:32:53:ec:43:21:e0:85:09:fa: 80:24:c4:66:75:0a:49:ba:4b:1d:55:83:5a:47:ca:7d:1f:56: dc:f5:8f:f8:35:42:9e:61:ab:1b:db:cc:33:da:c4:2f:a8:ae: cc:b4:b9:7d:2f:5a:5c:5c:0a:8d:3e:8e:66:4c:de:7d:b2:37: 76:71:ee:73:1e:6a:56:16:ea:8d:05:3b:d3:00:40:08:ec:26: f3:5a:a3:c5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUS+IZd5ZJOm9dSs7VwfZXib+G3ZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRlNTM3ODhiZDRlZmEyM2IxYTgyMDdiN2U3NGE4ZTFj YzY3N2IwMDAeFw0yNjAzMDExNzEyMTFaFw0yNjAzMDIxNzIzMTFaMDMxMTAvBgNV BAMTKEI2Q0FFQjgyRjJGOEVGN0JEQzNBRjJGNDEyNzc5RDlDOTUzMTZCQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfFEhHv7PX0DHCkSQCIjO7/E2a sji2ejnP2HS+7Qf4IK4s21LljFVqELtjCm6ZbPfWzxEon/TIOx2xBK/XEtyeyo1j E4X+Jhw0r/wALCZt9YqZ3KcWlAFeGIUYacBGjC3fWkEel1m3dzw83ITmtFS9hIZ5 hKYPbEemHvmagzXF/B8ixo6S7C59jtN+bZzgfu9UWE20FX0jkOKPmbtrO43gB4mI 2OFDKBB8LhN/tiq25yJkEKV8dAiaDqeQv4/VTM5BVEI/6UkiPbrx833n0cFxxv5N i52H2mNLWbIZ6ON40pabEHfY+ljksybNqKpB3tWmrM0myx5J1vSnQfsDn6XhAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUtsrrgvL473vcOvL0EnednJUxa84wHwYDVR0j BBgwFoAUJOU3iL1O+iOxqCB7fnSo4cxnewAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAtNmQxZS00YWU0LTkxNzctZDkzOGU5ODA0 Mzk1LzAvMjRFNTM3ODhCRDRFRkEyM0IxQTgyMDdCN0U3NEE4RTFDQzY3N0IwMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pPVTNpTDFPLWlPeHFDQjdmblNvNGN4 bmV3QS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xNmFjYjlhMC02 ZDFlLTRhZTQtOTE3Ny1kOTM4ZTk4MDQzOTUvMC8yNEU1Mzc4OEJENEVGQTIzQjFB ODIwN0I3RTc0QThFMUNDNjc3QjAwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZLuATmgIwfR9ehYnMUtl +CuQNRPYpNGQosd7XYzvVJfI7cbkQkoT9uQ503CketYCPWBaIOJJ33DXBtm2lmB6 KfZrHX9w0nuRiXgV/8iKZ1qoTknGbQ+Xtr+GTKQLqxxlowk2+ajKd0EIrirS5ncN vOPMrnyBeYI8MA4Iw4kW4iYtjNBqBocCKnTP7j94ZjJvKC5f3K4GtEDcVceI8O77 zhFuQ1VumNRQCSPIMlPsQyHghQn6gCTEZnUKSbpLHVWDWkfKfR9W3PWP+DVCnmGr G9vMM9rEL6iuzLS5fS9aXFwKjT6OZkzefbI3dnHucx5qVhbqjQU70wBACOwm81qj xQ== -----END CERTIFICATE-----Generated at Mon Mar 2 11:47:23 2026 by rpki-client