$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft File: A4A082EAE8EF48C7B407C40E742479EADD862089.mft (raw, json) Hash identifier: llN0pDLZMZOtp+v7nWQ1MRIym8ABSY712+YiQjmUKg8= Subject key identifier: 75:B7:67:27:84:51:12:4D:DB:18:66:E0:D5:AE:86:2D:02:6D:AC:A4 Authority key identifier: A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 Certificate issuer: /CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Certificate serial: 6005D268F1060A98939E1325E13359E5B1BDEE0F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft Manifest number: 0218 Signing time: Mon 02 Mar 2026 12:46:55 +0000 Manifest this update: Mon 02 Mar 2026 12:41:55 +0000 Manifest next update: Tue 03 Mar 2026 15:21:55 +0000 Files and hashes: 1: A4A082EAE8EF48C7B407C40E742479EADD862089.crl (hash: NEfT/MyOUXTqAnxx/E1bpPb1ITwJG+Xp0fSfQCYS1e0=) 2: 326130663a383563313a6234643a3a2f34382d3438203d3e20323133343238.roa (hash: PpctkXb5KUjo1ZozH4ZG/Vu6RAiqzknnMgLdpVk1Gts=) 3: 326130663a383563313a3339303a3a2f34382d3438203d3e20323135343730.roa (hash: mky/ldC1XpVEwoLHqIyOpw4wZEQNfx0y97P4Ne2BiJs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 15:05:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:05:d2:68:f1:06:0a:98:93:9e:13:25:e1:33:59:e5:b1:bd:ee:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Validity Not Before: Mar 2 12:41:55 2026 GMT Not After : Mar 3 15:21:55 2026 GMT Subject: CN=75B767278451124DDB1866E0D5AE862D026DACA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:16:77:6b:36:f2:bc:7a:7e:fc:0b:fe:15:0f: 62:a4:2b:23:3c:14:c0:f4:01:64:a6:38:a2:58:37: 1e:ff:9c:76:61:fa:81:f5:4a:e3:27:47:ea:ac:c6: a9:50:73:5d:27:ef:0e:3c:69:66:a5:d1:b6:62:3a: e1:fe:c2:6c:d1:0b:67:c5:91:33:fe:33:5c:10:10: 4f:af:7a:81:1f:da:ab:76:8a:ee:92:90:0e:9c:0c: fd:c3:22:d9:d8:1c:ac:53:6f:9a:85:83:ac:5b:d7: 59:5f:ed:b8:9a:75:8d:ba:aa:1b:14:6d:c8:7c:4e: b5:29:35:7f:32:24:32:56:02:f7:a7:d5:fa:38:50: fa:41:f3:1b:d0:a3:c8:82:f3:ac:59:62:50:c2:97: 6a:a7:40:98:fd:c0:03:35:bc:c0:20:b9:30:17:83: 4b:28:4a:62:c3:d4:6c:fa:80:05:fe:9a:00:f0:51: 8c:9c:06:94:42:2a:33:67:a7:46:2f:16:29:a7:57: 67:bd:0e:b1:45:9c:ab:75:ce:51:9c:6e:9a:0f:1a: a2:7d:4e:d7:a9:44:b3:35:de:32:ee:cd:1b:0b:b6: cc:9d:b9:0b:7b:51:a6:40:19:9e:bd:2c:85:4b:95: fd:93:fb:eb:e0:99:20:47:32:01:4c:b7:9f:c0:0b: 93:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B7:67:27:84:51:12:4D:DB:18:66:E0:D5:AE:86:2D:02:6D:AC:A4 X509v3 Authority Key Identifier: keyid:A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:0d:a1:c3:44:ea:af:a6:8f:cd:89:22:78:27:dd:3f:2e:22: 17:b5:2f:0a:f2:30:6f:7c:3b:97:55:be:9a:90:39:49:c8:b1: 0f:6f:3c:bc:9e:e2:cd:9c:e8:98:8f:fc:e4:e4:bb:80:aa:3a: f2:7d:cb:cf:bc:d9:60:12:6b:c2:26:e3:2f:ef:c6:dc:50:8d: 5f:39:4c:8d:45:3d:67:20:7f:02:3f:34:6f:43:41:cf:e4:d5: 0d:da:66:e8:5f:62:d5:3f:32:01:0e:c4:c4:6e:62:5c:6c:c3: f4:02:59:50:4e:0a:7d:b8:43:42:0f:3f:a1:54:dd:77:71:f6: b9:40:e4:6b:58:2e:49:39:48:cd:4f:8a:f9:55:65:d0:04:80: de:27:dd:b7:d6:b5:1a:2f:29:bc:7a:ae:a5:a7:2e:17:ce:1d: 5f:56:40:d1:c9:9f:c5:96:3d:67:57:5b:59:c9:a3:d9:62:09: e2:17:b5:f4:4a:af:60:49:0a:66:b7:89:d9:fb:08:01:45:22: 13:ad:f3:89:10:1c:1d:29:39:55:cc:9d:55:dd:15:a0:f9:1b: 18:22:9e:43:2d:80:db:89:d5:16:ee:05:2c:b7:ff:69:b1:77: e3:69:a5:c8:21:fb:90:60:6d:d4:d5:1e:82:18:62:9d:59:ba: d8:f9:57:c9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUYAXSaPEGCpiTnhMl4TNZ5bG97g8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFE RDg2MjA4OTAeFw0yNjAzMDIxMjQxNTVaFw0yNjAzMDMxNTIxNTVaMDMxMTAvBgNV BAMTKDc1Qjc2NzI3ODQ1MTEyNEREQjE4NjZFMEQ1QUU4NjJEMDI2REFDQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDFndrNvK8en78C/4VD2KkKyM8 FMD0AWSmOKJYNx7/nHZh+oH1SuMnR+qsxqlQc10n7w48aWal0bZiOuH+wmzRC2fF kTP+M1wQEE+veoEf2qt2iu6SkA6cDP3DItnYHKxTb5qFg6xb11lf7biadY26qhsU bch8TrUpNX8yJDJWAven1fo4UPpB8xvQo8iC86xZYlDCl2qnQJj9wAM1vMAguTAX g0soSmLD1Gz6gAX+mgDwUYycBpRCKjNnp0YvFimnV2e9DrFFnKt1zlGcbpoPGqJ9 TtepRLM13jLuzRsLtsyduQt7UaZAGZ69LIVLlf2T++vgmSBHMgFMt5/AC5MXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUdbdnJ4RREk3bGGbg1a6GLQJtrKQwHwYDVR0j BBgwFoAUpKCC6ujvSMe0B8QOdCR56t2GIIkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzEvQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFERDg2MjA4OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9BNEEwODJFQUU4RUY0OEM3QjQwN0M0MEU3 NDI0NzlFQUREODYyMDg5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE5YWE5ZGE3LWYxZTQtNGQ5OC1iZjk1LTlmZGZjZjQ0OGY3Ny8xL0E0QTA4MkVB RThFRjQ4QzdCNDA3QzQwRTc0MjQ3OUVBREQ4NjIwODkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBgDaHD ROqvpo/NiSJ4J90/LiIXtS8K8jBvfDuXVb6akDlJyLEPbzy8nuLNnOiYj/zk5LuA qjryfcvPvNlgEmvCJuMv78bcUI1fOUyNRT1nIH8CPzRvQ0HP5NUN2mboX2LVPzIB DsTEbmJcbMP0AllQTgp9uENCDz+hVN13cfa5QORrWC5JOUjNT4r5VWXQBIDeJ923 1rUaLym8eq6lpy4Xzh1fVkDRyZ/Flj1nV1tZyaPZYgniF7X0Sq9gSQpmt4nZ+wgB RSITrfOJEBwdKTlVzJ1V3RWg+RsYIp5DLYDbidUW7gUst/9psXfjaaXIIfuQYG3U 1R6CGGKdWbrY+VfJ -----END CERTIFICATE-----Generated at Mon Mar 2 18:07:35 2026 by rpki-client