$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft File: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft (raw, json) Hash identifier: xoG4KyURKQmFBkNEAnNlxrm7BnUB0lZxZk0tStj4cmI= Subject key identifier: BF:B2:16:F1:A9:3C:B1:D4:4A:53:F3:F7:09:72:7D:69:4C:DC:99:6E Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Certificate serial: 722D93CCB8A945F6DEAF7E706C13F704A0066FC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft Manifest number: 0574 Signing time: Mon 02 Mar 2026 09:24:11 +0000 Manifest this update: Mon 02 Mar 2026 09:19:11 +0000 Manifest next update: Tue 03 Mar 2026 09:35:11 +0000 Files and hashes: 1: 34362e3138332e32382e302f32342d3234203d3e203239383032.roa (hash: kUcJYnZDGTlKIzzpmv1f5LvT/3qyw3JDmGespkIKDl8=) 2: 34362e3138332e32362e302f32342d3234203d3e2039303039.roa (hash: ckwThy9Ftd6Jb/nTbj53dd12b3F3RSR9Etp8JSW5svM=) 3: 34362e3138332e32372e302f32342d3234203d3e20323132323338.roa (hash: MBTQi0HOcbTwY/4fQl+vTOHLOQ2FmR/EhBIZ6Dj3u14=) 4: 34362e3138332e32392e302f32342d3234203d3e20383334.roa (hash: cCNMl/j8O4+QWokqGu7uLfEk807f860f4W6iD80yDww=) 5: 34362e3138332e32352e302f32342d3234203d3e203633303233.roa (hash: 4jq0qwMJqWtfRUuzz3vPyKHtua4FM5/8Y3cvVGfTKBM=) 6: 34362e3138332e33302e302f32342d3234203d3e203239383032.roa (hash: 72nHdO4b4bTlOVAl3qEYnqrejyz7ta1anmrlcAXdAWw=) 7: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl (hash: /gtgNdZKGx8dPZ+rjJRJ2KRdIWf7vFcBcbokp7Nopys=) 8: 34362e3138332e32382e302f32342d3234203d3e203631333137.roa (hash: EQc8ZSWRYu3w3yABE1KT+uLZnchUtUDhUBMKc9gsz8U=) 9: 34362e3138332e33312e302f32342d3234203d3e20383334.roa (hash: sUL1Un4mrUIulXB1hFi4zMCmkeeullp5kTLJ3eXsXVI=) 10: 34362e3138332e32342e302f32342d3234203d3e20313432313436.roa (hash: U6sIE1tc5XNg8Vw7jnbxLLCNANnB9wH3voxb1FhuZwc=) 11: 34362e3138332e33302e302f32342d3234203d3e203631333137.roa (hash: pxnqedD3kuwz1m+9x0q4e9R46P3xXGAP6tM7JZr4zqQ=) 12: 34362e3138332e32352e302f32342d3234203d3e20323132323338.roa (hash: lxi2m0tJ4IwcIv1Qu/mxuwgzf8BGdtHdxfKNM9mKZEQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 09:35:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:2d:93:cc:b8:a9:45:f6:de:af:7e:70:6c:13:f7:04:a0:06:6f:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Validity Not Before: Mar 2 09:19:11 2026 GMT Not After : Mar 3 09:35:11 2026 GMT Subject: CN=BFB216F1A93CB1D44A53F3F709727D694CDC996E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:67:40:2e:25:9b:a1:a3:a7:d3:22:4f:7a:04: f2:78:23:be:37:a4:4d:52:37:3c:af:b9:9f:59:68: 08:cc:07:8f:5a:ad:6c:b5:63:26:7a:36:25:7f:d1: d8:70:4f:14:e9:c4:01:99:96:11:1c:e3:86:34:65: 71:a0:7b:b7:49:66:a6:c4:b1:21:c0:5f:35:0f:57: cd:52:08:56:fe:b2:3d:b9:ac:93:46:13:23:ed:08: d2:4a:b7:e7:39:04:28:ef:ef:71:c3:9e:8f:4c:32: 2b:1c:53:d4:9e:44:9c:14:a8:0e:ea:26:cc:46:4a: 61:61:54:b8:6e:b1:ef:f6:fb:58:a2:5d:d6:0d:da: 65:7c:db:10:70:b0:e8:ff:59:8d:eb:c2:b9:05:cc: ea:ea:01:4e:30:c2:e7:05:99:3b:cd:b6:29:e5:bd: b5:0b:a3:89:8d:86:f8:b4:f8:8f:5e:e9:f2:4f:e6: 49:49:98:89:b0:62:be:47:49:e5:e8:d9:4f:5d:32: 4c:ff:aa:78:34:89:6b:17:51:97:bc:e0:5a:57:c4: 65:b9:2a:1c:ed:9d:04:57:dd:bf:51:c6:e6:c6:3e: b7:69:28:d7:d8:a8:7e:25:03:b8:08:05:83:ae:f4: 91:58:2b:4d:4c:d6:7d:48:bb:9c:e4:95:69:79:f3: 3e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B2:16:F1:A9:3C:B1:D4:4A:53:F3:F7:09:72:7D:69:4C:DC:99:6E X509v3 Authority Key Identifier: keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:c6:17:2e:7c:be:57:b6:d0:aa:a4:ac:88:c8:ea:71:32:cb: 1f:97:e8:7e:4a:19:10:e3:6f:6e:d5:da:a1:0f:38:24:b6:95: b8:88:09:f4:44:3a:ed:f8:63:c2:45:8a:a1:34:bc:42:f8:f5: f2:c2:19:91:fa:bf:3f:b8:85:65:c5:27:50:37:7a:0c:0b:5d: 06:ae:be:0e:57:b2:74:18:2e:ef:5f:5e:55:d3:5e:9b:a9:63: e4:b9:6c:57:a4:28:eb:0a:02:e7:31:25:81:3c:2c:72:ed:86: b4:17:00:2c:d0:96:a8:2f:58:15:5e:8c:43:9f:02:77:58:21: 39:35:6a:83:b8:2b:19:44:94:d7:ca:38:95:58:eb:4b:76:a3: cd:8f:d4:07:79:6b:f9:36:76:f6:01:75:b6:97:24:42:4f:76: 7b:b1:80:bd:e3:2a:ec:5a:e0:ff:c0:26:64:66:60:d8:2e:10: d8:e5:0b:b5:42:36:9c:5d:4f:1e:1a:0b:c5:38:8d:7a:20:6b: b9:2a:4a:58:bf:dd:57:74:ec:1a:59:89:b6:41:8a:e9:e8:e8: 60:fd:db:88:f9:2e:44:d0:10:a2:0b:1b:cc:14:d2:b1:73:2a: f7:1f:21:47:4a:7f:1c:c2:ac:c4:f0:34:de:4f:c7:38:42:f3: 91:7b:4f:db -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUci2TzLipRfber35wbBP3BKAGb8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRlNTM3ODhiZDRlZmEyM2IxYTgyMDdiN2U3NGE4ZTFj YzY3N2IwMDAeFw0yNjAzMDIwOTE5MTFaFw0yNjAzMDMwOTM1MTFaMDMxMTAvBgNV BAMTKEJGQjIxNkYxQTkzQ0IxRDQ0QTUzRjNGNzA5NzI3RDY5NENEQzk5NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTZ0AuJZuho6fTIk96BPJ4I743 pE1SNzyvuZ9ZaAjMB49arWy1YyZ6NiV/0dhwTxTpxAGZlhEc44Y0ZXGge7dJZqbE sSHAXzUPV81SCFb+sj25rJNGEyPtCNJKt+c5BCjv73HDno9MMiscU9SeRJwUqA7q JsxGSmFhVLhuse/2+1iiXdYN2mV82xBwsOj/WY3rwrkFzOrqAU4wwucFmTvNtinl vbULo4mNhvi0+I9e6fJP5klJmImwYr5HSeXo2U9dMkz/qng0iWsXUZe84FpXxGW5 KhztnQRX3b9RxubGPrdpKNfYqH4lA7gIBYOu9JFYK01M1n1Iu5zklWl58z4bAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUv7IW8ak8sdRKU/P3CXJ9aUzcmW4wHwYDVR0j BBgwFoAUJOU3iL1O+iOxqCB7fnSo4cxnewAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAtNmQxZS00YWU0LTkxNzctZDkzOGU5ODA0 Mzk1LzAvMjRFNTM3ODhCRDRFRkEyM0IxQTgyMDdCN0U3NEE4RTFDQzY3N0IwMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pPVTNpTDFPLWlPeHFDQjdmblNvNGN4 bmV3QS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xNmFjYjlhMC02 ZDFlLTRhZTQtOTE3Ny1kOTM4ZTk4MDQzOTUvMC8yNEU1Mzc4OEJENEVGQTIzQjFB ODIwN0I3RTc0QThFMUNDNjc3QjAwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMYXLny+V7bQqqSsiMjq cTLLH5fofkoZEONvbtXaoQ84JLaVuIgJ9EQ67fhjwkWKoTS8Qvj18sIZkfq/P7iF ZcUnUDd6DAtdBq6+DleydBgu719eVdNem6lj5LlsV6Qo6woC5zElgTwscu2GtBcA LNCWqC9YFV6MQ58Cd1ghOTVqg7grGUSU18o4lVjrS3ajzY/UB3lr+TZ29gF1tpck Qk92e7GAveMq7Frg/8AmZGZg2C4Q2OULtUI2nF1PHhoLxTiNeiBruSpKWL/dV3Ts GlmJtkGK6ejoYP3biPkuRNAQogsbzBTSsXMq9x8hR0p/HMKsxPA03k/HOELzkXtP 2w== -----END CERTIFICATE-----Generated at Mon Mar 2 16:47:35 2026 by rpki-client