$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft File: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft (raw, json) Hash identifier: y7J/LUHjVF4Zie1+psYFpamVw3Po8MycdrGfMYI9QeI= Subject key identifier: D3:BF:84:20:40:3F:FC:4A:57:2E:DC:EE:AE:04:5B:26:E6:5F:17:4F Authority key identifier: 1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 Certificate issuer: /CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Certificate serial: 10D208AC5E66A13B90DBB14F18F1E1CA03068612 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft Manifest number: 03AE Signing time: Sun 01 Mar 2026 00:48:01 +0000 Manifest this update: Sun 01 Mar 2026 00:43:01 +0000 Manifest next update: Mon 02 Mar 2026 02:00:01 +0000 Files and hashes: 1: 326131343a316563373a663030653a3a2f34382d3438203d3e203336383332.roa (hash: NchO6Xk6Xarz93hp9H8fOtN5l3Sk4YKm9dDl0QiIwEY=) 2: 326131343a316563373a663030643a3a2f34382d3438203d3e20323136313133.roa (hash: Qox4t/JWvxkukGGw/r9dKtLNJfAFgS1CAD7Cjd/SiSQ=) 3: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl (hash: yEOpXkIVN5z17sIVOsFbZGPktDFRDJaJwYgld4a8ZRI=) 4: 326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa (hash: ZBQrTYQq6EzEXXQqVVLmnECxmx5vDStz1fI8gjrWa9o=) 5: 326131343a316563373a663030303a3a2f34302d3430203d3e20323038343533.roa (hash: 2cf2+wXFX+Cv3rb6kyCpZO6NR2fDj483Pc3k7g3Nh48=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 02:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:d2:08:ac:5e:66:a1:3b:90:db:b1:4f:18:f1:e1:ca:03:06:86:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Validity Not Before: Mar 1 00:43:01 2026 GMT Not After : Mar 2 02:00:01 2026 GMT Subject: CN=D3BF8420403FFC4A572EDCEEAE045B26E65F174F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:01:b8:20:1f:77:68:4a:00:8c:5b:11:36:89: 54:72:29:4c:ca:11:a4:97:ce:05:86:ca:b6:d0:3d: 7e:50:9f:53:de:67:85:4c:f5:3c:59:cb:6f:16:d3: b6:cd:75:81:16:70:2b:19:70:44:96:d5:dd:8c:2d: a6:c6:de:0c:a2:75:4e:ea:ef:74:2b:a3:47:cc:8d: 54:c9:0f:d6:05:b5:cc:e3:21:54:bf:94:99:fb:52: 3f:a1:c5:91:9f:7e:38:e2:e7:c5:65:65:5c:31:a7: e9:58:ee:40:22:65:0c:34:67:f9:14:66:1f:39:0b: 2f:48:e0:b9:71:e7:27:0a:81:23:e9:36:76:ce:ff: 03:f7:28:7c:c3:5e:07:37:e7:7d:63:90:e5:e7:9a: e4:a3:96:75:89:6b:11:f3:29:3c:72:be:15:6a:b0: 10:46:65:13:33:f3:31:1d:c7:84:2f:fc:80:45:b1: 2a:68:11:34:15:72:be:29:cc:50:d7:ea:be:d6:57: d6:14:13:57:23:14:11:d0:b9:f0:1a:e2:fb:6b:b4: eb:50:bc:9f:8b:6b:18:6b:f6:3f:da:4d:9f:89:97: da:e4:10:95:f6:f5:dd:3d:4a:03:5b:f9:6f:6e:3f: 87:3d:d6:1d:76:7b:3a:16:e3:ac:44:24:c1:82:e4: c4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:BF:84:20:40:3F:FC:4A:57:2E:DC:EE:AE:04:5B:26:E6:5F:17:4F X509v3 Authority Key Identifier: keyid:1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:3e:f3:14:96:10:fa:43:99:db:b5:9b:6b:ac:85:70:e7:cd: f2:1e:b9:6f:da:cb:52:a4:dd:e8:af:49:40:fd:9c:51:c4:70: 9b:a6:78:b8:a9:9a:fb:f6:fb:d6:dc:21:f8:7f:a3:8f:68:34: 05:b6:e2:c0:87:01:c1:d9:1f:50:b6:4b:c0:9a:1e:e6:88:d5: 80:6c:ec:d3:e9:e3:8e:4d:ad:8d:72:af:4e:1d:4d:09:07:0c: d5:3c:c7:0d:ff:9d:b8:14:17:dc:13:6a:43:0f:27:9a:b7:2d: 8d:af:99:fe:bd:57:fd:a1:5e:18:b6:9c:83:c5:0d:49:cc:4d: 74:01:39:57:ff:46:79:7a:33:1a:13:55:95:13:c6:a6:5c:d2: 6c:ac:b7:45:e3:e7:39:4a:3c:c8:fe:4b:9f:67:60:9a:19:9c: 74:44:2b:a8:72:2c:16:21:8e:a4:ad:c2:01:fe:63:9f:15:3e: ef:d2:07:fd:f1:79:20:6c:ac:c2:81:c6:23:17:31:c6:92:65: 64:4d:0a:a6:9b:98:b6:9c:eb:42:60:9b:96:ee:33:00:c2:03: 81:4a:7a:f5:f6:e4:88:88:f9:4d:59:5b:43:25:e8:5d:6e:44: d3:21:4c:67:0f:2d:4e:40:14:1c:70:8f:41:6f:82:e0:dd:8d: 94:c9:7c:70 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUENIIrF5moTuQ27FPGPHhygMGhhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVG ODNFMEU3MTAeFw0yNjAzMDEwMDQzMDFaFw0yNjAzMDIwMjAwMDFaMDMxMTAvBgNV BAMTKEQzQkY4NDIwNDAzRkZDNEE1NzJFRENFRUFFMDQ1QjI2RTY1RjE3NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRAbggH3doSgCMWxE2iVRyKUzK EaSXzgWGyrbQPX5Qn1PeZ4VM9TxZy28W07bNdYEWcCsZcESW1d2MLabG3gyidU7q 73Qro0fMjVTJD9YFtczjIVS/lJn7Uj+hxZGffjji58VlZVwxp+lY7kAiZQw0Z/kU Zh85Cy9I4Llx5ycKgSPpNnbO/wP3KHzDXgc3531jkOXnmuSjlnWJaxHzKTxyvhVq sBBGZRMz8zEdx4Qv/IBFsSpoETQVcr4pzFDX6r7WV9YUE1cjFBHQufAa4vtrtOtQ vJ+Laxhr9j/aTZ+Jl9rkEJX29d09SgNb+W9uP4c91h12ezoW46xEJMGC5MT/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU07+EIEA//EpXLtzurgRbJuZfF08wHwYDVR0j BBgwFoAUHb0dR/2ORXTIQhdDycxfDvg+DnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzIvMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVGODNFMEU3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8xREJEMUQ0N0ZEOEU0NTc0Qzg0MjE3NDND OUNDNUYwRUY4M0UwRTcxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8yLzFEQkQxRDQ3 RkQ4RTQ1NzRDODQyMTc0M0M5Q0M1RjBFRjgzRTBFNzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC5PvMU lhD6Q5nbtZtrrIVw583yHrlv2stSpN3or0lA/ZxRxHCbpni4qZr79vvW3CH4f6OP aDQFtuLAhwHB2R9QtkvAmh7miNWAbOzT6eOOTa2Ncq9OHU0JBwzVPMcN/524FBfc E2pDDyeaty2Nr5n+vVf9oV4YtpyDxQ1JzE10ATlX/0Z5ejMaE1WVE8amXNJsrLdF 4+c5SjzI/kufZ2CaGZx0RCuociwWIY6krcIB/mOfFT7v0gf98XkgbKzCgcYjFzHG kmVkTQqmm5i2nOtCYJuW7jMAwgOBSnr19uSIiPlNWVtDJehdbkTTIUxnDy1OQBQc cI9Bb4Lg3Y2UyXxw -----END CERTIFICATE-----Generated at Sun Mar 1 16:37:36 2026 by rpki-client