$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft File: 892C2C5990DF4D7045BB55A011F473261F0643F6.mft (raw, json) Hash identifier: sMPJ4xkaXwzfGtcppgr+tJoyvo4XoOOSmRrXshRAJ3M= Subject key identifier: 84:B4:54:3E:E3:09:7E:68:AE:54:14:9B:6D:AD:52:FA:52:18:E5:37 Authority key identifier: 89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6 Certificate issuer: /CN=892C2C5990DF4D7045BB55A011F473261F0643F6 Certificate serial: 36B1D4C1BA25B325F14770A6D85BC7ACB735E9C7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft Manifest number: 39 Signing time: Sun 01 Mar 2026 09:45:50 +0000 Manifest this update: Sun 01 Mar 2026 09:40:50 +0000 Manifest next update: Mon 02 Mar 2026 10:41:50 +0000 Files and hashes: 1: 326131343a373538313a366664303a3a2f34342d3438203d3e20323135393334.roa (hash: qRdEAnTHQewkn5xjFMDkvIHao/PLgA0XfOA580oQ+Wc=) 2: 326131343a373538313a366330303a3a2f34302d3438203d3e20313938393534.roa (hash: YStl04IuWDei0D2oH+P/iOh9DAuPICnaprLiyMtF9EQ=) 3: 326131343a373538313a366661303a3a2f34342d3438203d3e20323031393433.roa (hash: JBtcFivWNaxAMDtrHXjCq5obdYQeQd+Iuq7/0LpltBs=) 4: 326131343a373538313a366665303a3a2f34342d3438203d3e20323134383431.roa (hash: eEYD+/uvxh4zHSJ/ztOoyn4X0s3MJpPiWt8uJufCQxo=) 5: 326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa (hash: hu2ypRUPAbYRtYy+M6vE/W8hAPWUPIin1Y9THyO12k8=) 6: 326131343a373538313a366630303a3a2f34342d3438203d3e20323035353932.roa (hash: tGdxxPffiEkwkQ8zZYSEAsNxiyZw0E/Szbr/GF6Tp3w=) 7: 326131343a373538313a366662303a3a2f34342d3438203d3e20323136343332.roa (hash: zJsseoUx2WfsGKQLt6/5bb4va41JRgL/bMceecvpwjU=) 8: 326131343a373538313a366430303a3a2f34302d3438203d3e20323035333239.roa (hash: zvsXrWVsgBSXSyUjh+x5IMf/onv6HLNx12EoyFofF0E=) 9: 326131343a373538313a366663303a3a2f34342d3438203d3e20323037333839.roa (hash: xJNDYcDRMGL3P/Oo1HJdC8ak3UBswnP71D60lUjKtOU=) 10: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: BopLEf/ZmGSLBYK/WoER81ANZkew9Ua3lUbCSl9Jp8M=) 11: 892C2C5990DF4D7045BB55A011F473261F0643F6.crl (hash: isW1OHr0vIJeG2t+a8ZqRyg0V0+jIs0HZqCAr6nMmA0=) 12: 326131343a373538313a366666303a3a2f34342d3438203d3e20323035353932.roa (hash: tJECAkp2L4ouOi5S7tH2woZZkAUIydRlFynQO3qJTRU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:b1:d4:c1:ba:25:b3:25:f1:47:70:a6:d8:5b:c7:ac:b7:35:e9:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=892C2C5990DF4D7045BB55A011F473261F0643F6 Validity Not Before: Mar 1 09:40:50 2026 GMT Not After : Mar 2 10:41:50 2026 GMT Subject: CN=84B4543EE3097E68AE54149B6DAD52FA5218E537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b7:52:51:f2:96:16:2c:45:4d:57:9c:00:fe: 87:95:f7:0a:63:d2:2c:9e:dc:22:35:43:3a:c9:29: 48:28:a4:33:06:7c:ee:13:8d:00:69:de:44:86:c3: 09:90:93:38:11:9a:aa:75:3d:ef:d6:84:ae:87:c6: 4e:89:63:5e:a1:08:78:7e:79:02:00:7d:39:b1:06: ab:06:1d:7b:75:c3:35:c7:c4:a5:a0:c2:93:0b:24: 4d:33:9f:4a:84:21:59:ee:ac:79:e3:a2:c2:09:ed: 0c:4d:31:b8:d5:33:e2:bb:89:53:67:0e:d8:05:ac: b7:f6:10:26:26:c6:80:6f:cf:df:1f:29:1b:4a:41: 0a:01:aa:b9:83:6b:fd:63:d2:8d:4d:a8:3b:d0:f8: 55:80:60:80:55:6e:d8:bf:ed:a0:eb:3c:11:0b:01: 92:79:58:66:15:07:ae:79:ce:6d:8a:8e:8d:73:bc: e9:88:59:cf:cc:b4:e9:39:0b:79:97:e6:68:f0:ff: fe:ab:ba:12:e1:39:c5:c3:b1:9c:85:a2:6c:a9:57: 9a:5f:64:24:af:05:4a:a9:bb:34:9e:a6:a0:3d:6e: bc:d7:4f:48:7c:b5:79:08:5c:c0:f6:87:60:cb:98: 77:3d:fd:cf:cf:7b:d1:d1:ee:42:45:41:54:7c:18: be:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B4:54:3E:E3:09:7E:68:AE:54:14:9B:6D:AD:52:FA:52:18:E5:37 X509v3 Authority Key Identifier: keyid:89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:25:1d:eb:f9:0a:a5:19:f2:df:e8:44:fc:80:79:45:e5:2e: 49:15:f8:1e:2e:3b:e1:22:63:d2:e4:bd:48:c1:b6:d9:82:c0: 9f:e4:e7:6e:7c:a7:6b:c9:78:18:56:92:08:95:86:35:c3:76: 84:ae:60:f2:38:32:4c:07:e2:97:78:fe:f6:c2:84:5d:72:7b: d3:c6:77:9d:53:6e:7b:34:1a:c6:16:9e:70:10:90:1a:87:6f: 4a:f2:d1:af:af:9f:d8:45:f3:b0:31:f5:86:7e:58:3f:c4:bc: 03:fd:e6:60:7c:3d:17:cd:32:3c:ba:34:21:1a:d7:02:45:21: ef:1f:e8:62:f0:51:87:df:12:01:04:38:47:83:9b:aa:21:c7: d1:ee:bb:58:c9:cb:b7:4f:46:37:24:bb:20:fe:97:09:d8:dc: a0:48:35:65:15:44:44:f2:1e:d0:83:45:08:6b:7d:05:64:2c: 2e:42:ce:a0:14:ca:ae:6c:25:85:fe:9d:25:ce:08:3d:64:13: 87:f1:10:39:a8:65:b8:9a:fa:9d:fa:b7:66:48:3b:a9:c6:28: 78:b9:c0:df:e4:c5:c0:3b:00:bb:f6:d1:76:45:ea:bc:fb:1a: b7:f7:38:25:79:b3:d2:9b:dd:78:65:53:62:84:72:96:2b:ef: fa:3f:c3:7f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUNrHUwbolsyXxR3Cm2FvHrLc16ccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkyQzJDNTk5MERGNEQ3MDQ1QkI1NUEwMTFGNDczMjYx RjA2NDNGNjAeFw0yNjAzMDEwOTQwNTBaFw0yNjAzMDIxMDQxNTBaMDMxMTAvBgNV BAMTKDg0QjQ1NDNFRTMwOTdFNjhBRTU0MTQ5QjZEQUQ1MkZBNTIxOEU1MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMt1JR8pYWLEVNV5wA/oeV9wpj 0iye3CI1QzrJKUgopDMGfO4TjQBp3kSGwwmQkzgRmqp1Pe/WhK6Hxk6JY16hCHh+ eQIAfTmxBqsGHXt1wzXHxKWgwpMLJE0zn0qEIVnurHnjosIJ7QxNMbjVM+K7iVNn DtgFrLf2ECYmxoBvz98fKRtKQQoBqrmDa/1j0o1NqDvQ+FWAYIBVbti/7aDrPBEL AZJ5WGYVB655zm2Kjo1zvOmIWc/MtOk5C3mX5mjw//6ruhLhOcXDsZyFomypV5pf ZCSvBUqpuzSepqA9brzXT0h8tXkIXMD2h2DLmHc9/c/Pe9HR7kJFQVR8GL6bAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUhLRUPuMJfmiuVBSbba1S+lIY5TcwHwYDVR0j BBgwFoAUiSwsWZDfTXBFu1WgEfRzJh8GQ/YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzFiZWRmNmMtY2M5MS00YmYwLTlkNmUtN2U5YjNjYjk5 MDVkLzEvODkyQzJDNTk5MERGNEQ3MDQ1QkI1NUEwMTFGNDczMjYxRjA2NDNGNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84OTJDMkM1OTkwREY0RDcwNDVCQjU1QTAx MUY0NzMyNjFGMDY0M0Y2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxYmVkZjZjLWNjOTEtNGJmMC05ZDZlLTdlOWIzY2I5OTA1ZC8xLzg5MkMyQzU5 OTBERjRENzA0NUJCNTVBMDExRjQ3MzI2MUYwNjQzRjYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBVJR3r +QqlGfLf6ET8gHlF5S5JFfgeLjvhImPS5L1IwbbZgsCf5OdufKdryXgYVpIIlYY1 w3aErmDyODJMB+KXeP72woRdcnvTxnedU257NBrGFp5wEJAah29K8tGvr5/YRfOw MfWGflg/xLwD/eZgfD0XzTI8ujQhGtcCRSHvH+hi8FGH3xIBBDhHg5uqIcfR7rtY ycu3T0Y3JLsg/pcJ2NygSDVlFURE8h7Qg0UIa30FZCwuQs6gFMqubCWF/p0lzgg9 ZBOH8RA5qGW4mvqd+rdmSDupxih4ucDf5MXAOwC79tF2Req8+xq39zglebPSm914 ZVNihHKWK+/6P8N/ -----END CERTIFICATE-----Generated at Sun Mar 1 20:04:16 2026 by rpki-client