$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft File: 2A91778ACCE76333081468D9784DE132C2985976.mft (raw, json) Hash identifier: 4qDCZvXD95OTX/YaALDFMJEkwYsP3f2oBRFY0d+ncVQ= Subject key identifier: A3:51:36:3F:67:CB:F8:01:E2:64:E5:E0:E5:F3:7B:EB:9E:C5:83:D7 Authority key identifier: 2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 Certificate issuer: /CN=2A91778ACCE76333081468D9784DE132C2985976 Certificate serial: 54EF987C7BA2BA76F3CF3B594F3F60EB78BD2C63 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft Manifest number: 30 Signing time: Sun 01 Mar 2026 09:25:28 +0000 Manifest this update: Sun 01 Mar 2026 09:20:28 +0000 Manifest next update: Mon 02 Mar 2026 10:02:28 +0000 Files and hashes: 1: 326130663a316363353a323630303a3a2f34302d3438203d3e20323032333335.roa (hash: nzPrfU7/0C1uT8wK0Kkdb/GSWbML8Xt4edf9nME+bEg=) 2: 2A91778ACCE76333081468D9784DE132C2985976.crl (hash: zDQ0YRMgpqKioLG8Zs5mfPjlZi7enmCDjsBABIHSVsw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.crl rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:ef:98:7c:7b:a2:ba:76:f3:cf:3b:59:4f:3f:60:eb:78:bd:2c:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A91778ACCE76333081468D9784DE132C2985976 Validity Not Before: Mar 1 09:20:28 2026 GMT Not After : Mar 2 10:02:28 2026 GMT Subject: CN=A351363F67CBF801E264E5E0E5F37BEB9EC583D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f7:4c:1e:a8:a2:67:78:44:6d:10:53:9c:77: 11:a1:6c:bb:89:ce:7a:ef:67:25:e0:7f:b6:41:0b: fe:2e:83:44:56:c9:c7:2e:47:ab:6e:59:78:9e:4e: 2b:85:99:a1:a3:83:e8:de:fe:ee:f4:e2:19:fb:7e: 92:9f:a8:fa:9d:3f:69:cb:79:bf:2e:72:a8:d7:5d: e5:42:c4:22:09:94:9e:f3:48:80:84:46:5a:53:7b: 22:2d:05:db:a1:f7:2b:1a:31:bd:5d:25:39:7e:1e: d1:72:b0:06:d5:14:cd:e0:49:16:67:ab:d7:97:34: df:e7:0b:2a:8c:90:4b:a9:ed:1e:cb:97:94:fd:28: 89:27:00:99:af:77:65:43:eb:eb:8a:b8:15:fb:30: 65:6a:3f:0b:eb:69:ea:48:69:ff:1c:4c:1a:be:3b: ff:91:96:76:09:b0:c4:9a:1a:29:15:f5:52:6f:b3: d5:27:2a:a1:0b:25:3f:de:f8:46:60:f4:ae:54:9f: 6a:17:92:2b:2c:d8:00:66:8e:b7:6b:f1:b2:83:dd: 7f:c0:1c:e0:48:1e:b2:20:5c:e3:4c:65:68:cb:e2: 15:8a:8b:36:64:b1:56:b0:41:cc:c4:59:95:dc:ce: b8:0d:0d:45:ea:44:14:38:79:6f:2f:83:45:a9:6f: 0a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:51:36:3F:67:CB:F8:01:E2:64:E5:E0:E5:F3:7B:EB:9E:C5:83:D7 X509v3 Authority Key Identifier: keyid:2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:dd:5b:98:9b:cb:3a:eb:e2:c7:7a:63:d8:be:ed:d8:e3:91: 72:53:fe:db:00:db:bd:fe:3d:4e:ea:7f:59:a6:28:7f:3b:35: 73:74:0b:e7:19:f5:c9:e0:20:7c:5e:de:9f:8f:5f:ce:23:f8: 25:f7:f9:be:c3:49:44:f6:09:e1:f8:31:2a:f8:dc:2f:68:9d: 50:5f:c9:2d:ef:c7:60:30:15:49:67:a0:b8:b3:78:fc:c5:da: 9e:00:bc:5c:1b:e4:f9:82:9f:21:5f:37:db:13:d2:a6:11:82: 76:1e:dc:0e:d5:2b:f0:93:37:09:f3:44:a9:02:8b:74:e9:ee: 74:88:90:71:e3:2d:fd:26:8c:76:33:d1:af:89:83:a2:ee:58: 4c:90:5f:08:30:30:03:90:1d:be:5e:09:3d:94:e3:25:ea:b5: 64:3f:b4:bf:76:45:89:03:d5:4f:50:4c:98:25:74:56:0d:89: 2c:85:ac:e5:9a:a9:e4:04:9e:fb:c3:71:c5:55:45:58:1b:ed: 3f:89:6a:38:9a:95:4b:15:6d:e6:2c:52:7e:b7:4b:7d:9b:f3: c5:e0:01:01:5f:bc:76:30:7d:ca:be:dd:85:4f:d6:ec:24:a9: db:14:87:25:41:01:e8:d9:33:83:33:7f:88:c3:9f:40:03:d5: ec:99:4e:ef -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUVO+YfHuiunbzzztZTz9g63i9LGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE5MTc3OEFDQ0U3NjMzMzA4MTQ2OEQ5Nzg0REUxMzJD Mjk4NTk3NjAeFw0yNjAzMDEwOTIwMjhaFw0yNjAzMDIxMDAyMjhaMDMxMTAvBgNV BAMTKEEzNTEzNjNGNjdDQkY4MDFFMjY0RTVFMEU1RjM3QkVCOUVDNTgzRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY90weqKJneERtEFOcdxGhbLuJ znrvZyXgf7ZBC/4ug0RWyccuR6tuWXieTiuFmaGjg+je/u704hn7fpKfqPqdP2nL eb8ucqjXXeVCxCIJlJ7zSICERlpTeyItBduh9ysaMb1dJTl+HtFysAbVFM3gSRZn q9eXNN/nCyqMkEup7R7Ll5T9KIknAJmvd2VD6+uKuBX7MGVqPwvraepIaf8cTBq+ O/+RlnYJsMSaGikV9VJvs9UnKqELJT/e+EZg9K5Un2oXkiss2ABmjrdr8bKD3X/A HOBIHrIgXONMZWjL4hWKizZksVawQczEWZXczrgNDUXqRBQ4eW8vg0Wpbwo5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUo1E2P2fL+AHiZOXg5fN7657Fg9cwHwYDVR0j BBgwFoAUKpF3isznYzMIFGjZeE3hMsKYWXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDBjYmE2MWQtNDA1Ni00NmE5LTkzOTItYTYxZGZjNTAw ZGM5LzEvMkE5MTc3OEFDQ0U3NjMzMzA4MTQ2OEQ5Nzg0REUxMzJDMjk4NTk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC8yQTkxNzc4QUNDRTc2MzMzMDgxNDY4RDk3 ODRERTEzMkMyOTg1OTc2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQwY2JhNjFkLTQwNTYtNDZhOS05MzkyLWE2MWRmYzUwMGRjOS8xLzJBOTE3NzhB Q0NFNzYzMzMwODE0NjhEOTc4NERFMTMyQzI5ODU5NzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBy3VuY m8s66+LHemPYvu3Y45FyU/7bANu9/j1O6n9Zpih/OzVzdAvnGfXJ4CB8Xt6fj1/O I/gl9/m+w0lE9gnh+DEq+NwvaJ1QX8kt78dgMBVJZ6C4s3j8xdqeALxcG+T5gp8h XzfbE9KmEYJ2HtwO1SvwkzcJ80SpAot06e50iJBx4y39Jox2M9GviYOi7lhMkF8I MDADkB2+Xgk9lOMl6rVkP7S/dkWJA9VPUEyYJXRWDYkshazlmqnkBJ77w3HFVUVY G+0/iWo4mpVLFW3mLFJ+t0t9m/PF4AEBX7x2MH3Kvt2FT9bsJKnbFIclQQHo2TOD M3+Iw59AA9XsmU7v -----END CERTIFICATE-----Generated at Sun Mar 1 20:07:06 2026 by rpki-client