$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft File: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft (raw, json) Hash identifier: ET15/JypuzZp4opnc7U3lkqVf55mXFyM/PJyDhJZ9Sg= Subject key identifier: 91:F4:81:59:35:7E:BF:A8:03:FF:97:C8:0A:07:27:69:B7:39:63:D3 Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Certificate serial: 3DEBDF094C1D29B52CF572E840FBA6DAB2A9EDE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft Manifest number: 0290 Signing time: Mon 02 Mar 2026 03:32:16 +0000 Manifest this update: Mon 02 Mar 2026 03:27:16 +0000 Manifest next update: Tue 03 Mar 2026 06:09:16 +0000 Files and hashes: 1: 3138352e3231332e3235312e302f32342d3234203d3e20323032373336.roa (hash: k9NutrpE73eF9M1MGDaqB2MjGcD60li8mT4JnvFIELA=) 2: 33312e39392e3230332e302f32342d3234203d3e20383334.roa (hash: AkENFigRyAUb+VRKLIg05eNR2DATlVcoQ6cEURE1+Kc=) 3: 3139352e35382e3134362e302f32342d3234203d3e20343032313836.roa (hash: ORRSzvs2QEdncOPZuD+oGmv+utaq99nlS9NDrNT0GCE=) 4: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl (hash: 8SewALzMAh1xRhS5MArA5TIFkEJDD+Z4dsG2ya7itDA=) 5: 38352e3131372e3233312e302f32342d3234203d3e20323133373234.roa (hash: ohyXGo6Fwg3029u2hdROae+jQf4VI2skgvLUXH3jI8w=) 6: 33312e39392e3230362e302f32342d3234203d3e20323130343935.roa (hash: OC80Hx5Gq1jN6Ym5UmCqnC8fGlp8VQazYJOfXpnB8WU=) 7: 3139352e35382e3134372e302f32342d3234203d3e20383334.roa (hash: JWGPv7PU6obBxeHVeHi6tuMRYdpVhg5tTNxKivLFrAg=) 8: 38352e3131372e3232382e302f32342d3234203d3e20323134343538.roa (hash: rcAG2FX2+ZD0Qb1+KeZK9os832Q7CwzkoxVHQi9yY7k=) 9: 3139342e33342e3235342e302f32342d3234203d3e203531383532.roa (hash: za0HM3w55tiDFbhPrhUh3FtVd5oKhUm8JuFZ8lH0DiA=) 10: 38352e3131372e3233302e302f32342d3234203d3e2035303635.roa (hash: WxHcRq5WCH3YmKS5+Il6T1ro4Oc3AucTAyVboxN6cYg=) 11: 3139352e35382e3134382e302f32342d3234203d3e20323035383430.roa (hash: btToNdo4McV+mxna60YYwQUoRVqTrFqeFHcrOLZhmu4=) 12: 3139342e33342e3235352e302f32342d3234203d3e20313431393638.roa (hash: iQ9RYSqOmsvIqARX4nqI9wEFn//drkKsHCDo7XaSdTU=) 13: 33312e39392e3230322e302f32342d3234203d3e20323133363530.roa (hash: 0Bngyrmrdfz47mx/mnuSCDuWlf2EDWIUujRrINoh4uI=) 14: 38352e3131372e3232392e302f32342d3234203d3e203138353236.roa (hash: VL0qbnMthkW/z4M9i7RCycr128NaCWPDKcNp8MPhOx8=) 15: 33312e39392e3230372e302f32342d3234203d3e20323030393139.roa (hash: Sx4gimOMm/cDt00enlx4Don8b0BAMFnFutmPQSumeeM=) 16: 3138352e3231332e3234382e302f32342d3234203d3e20383334.roa (hash: mR/wWew3FjmrV6LotuwwCDAlPdUAkYACjCVanGsnnOg=) 17: 33312e39392e3230302e302f32342d3234203d3e20323032303736.roa (hash: 9aCU0WrowHQDEddqo+4gFdH5kjWR15/2+hM8MI1EWF8=) 18: 3138352e3231332e3234392e302f32342d3234203d3e20343030393039.roa (hash: GEbFfS+LLMgocx0zl/qOrB6oO+BgTD8IsbF49GAbNus=) 19: 3139342e33342e3235322e302f32342d3234203d3e203439353831.roa (hash: CdOWg7XQ7TdzzLDF2E3vbhyf4TDBRs7VuKir2QIc0i4=) 20: 38352e3131372e3232392e302f32342d3234203d3e20313439313037.roa (hash: Mdj3IIZJ097ibJGhSOfHP4GOBLdG4jAp1zNpVSxesFg=) 21: 3139342e33342e3235332e302f32342d3234203d3e2035303635.roa (hash: PbuFJWIaFPfS/fUezjEhjeDUJ1OpDE0MDCs7HAI2pDY=) 22: 3139352e35382e3134392e302f32342d3234203d3e203633313939.roa (hash: 9jUqhgLq8QIEEJxJiMALs0wsvhfDs1EJyMuRSJoW+38=) 23: 3139352e35382e3134382e302f32342d3234203d3e203633303233.roa (hash: oBeeeU3GnT2oMITYsHzfevINcnN3rBvPI2W5i1+sVPw=) 24: 33312e39392e3230312e302f32342d3234203d3e20323133363530.roa (hash: LZe/oPKdzHBDXdq7jgdrUvSsiw189QvXVXiPjXqJiLQ=) 25: 3138352e3231332e3235312e302f32342d3234203d3e20393834.roa (hash: A919/Bekrj6rZbVlRAQ3zY8i9Bm4Qio6XVxQpWLOfQM=) 26: 3139352e35382e3135302e302f32342d3234203d3e20323135333533.roa (hash: 26P6qmF1qO5EzcVJRtFpyvK2Pg0XJgNsh+hTSCj6XOs=) 27: 3139352e35382e3135312e302f32342d3234203d3e20383334.roa (hash: 51JyyvFmYKIMCwLTiDhhEK+MsZYYANLTwN4CVdAzFk8=) 28: 3138352e3231332e3235302e302f32342d3234203d3e20323032383238.roa (hash: cvWbud/Q3B4zVr3PrPYyxiTjcQyvCffxgDgg+5VMZYE=) 29: 3138352e3231332e3234392e302f32342d3234203d3e203235313938.roa (hash: RAmqdtOqt2GXnv4T7A8gAKdg4H2+TG5CqjE3/MvQxnU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:eb:df:09:4c:1d:29:b5:2c:f5:72:e8:40:fb:a6:da:b2:a9:ed:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Validity Not Before: Mar 2 03:27:16 2026 GMT Not After : Mar 3 06:09:16 2026 GMT Subject: CN=91F48159357EBFA803FF97C80A072769B73963D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:66:31:31:77:22:0f:e5:3e:1c:3c:45:51:fc: 28:3c:54:82:95:e9:ab:18:90:54:70:52:dc:5e:e8: b7:21:7d:ed:ca:46:2e:47:67:98:9d:0f:cc:bc:ca: 6b:95:82:36:f1:a4:26:e6:d4:07:6b:45:85:0e:bc: 7c:25:95:5c:82:ff:32:a6:87:2e:46:82:2f:f4:6e: d3:62:b1:7e:b6:ce:89:da:e9:65:0e:26:fd:b7:d5: 36:ed:83:8f:69:23:f4:6b:f1:4b:89:e2:25:42:3d: a4:50:f9:2c:9b:fd:9d:36:5b:4b:b0:89:76:b5:b5: d4:4b:0b:3b:2a:90:16:92:ef:da:b1:a3:a7:a4:4d: c4:ca:b6:76:77:9f:96:9b:3f:74:db:4a:89:66:ab: e9:33:a3:80:a2:09:06:34:d2:5d:e0:79:ad:56:3a: 13:43:4e:e9:69:da:cb:04:e6:25:f9:14:7c:30:10: 04:87:b7:0f:3e:b1:4c:74:84:d6:b0:39:75:30:c7: 42:b3:a8:a8:c3:53:eb:02:bf:2c:14:17:8c:3e:12: a6:e2:61:1c:47:d6:61:f2:b7:28:ef:78:14:fc:01: 76:af:a5:ee:9d:bd:84:8d:4f:d8:80:55:f4:85:60: fb:dc:e7:70:55:b3:e1:73:19:f6:09:82:4f:03:bf: 68:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F4:81:59:35:7E:BF:A8:03:FF:97:C8:0A:07:27:69:B7:39:63:D3 X509v3 Authority Key Identifier: keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:cc:de:7a:c0:04:7d:6b:f1:7b:fb:44:88:ea:9f:fd:c1:b5: b4:91:54:ba:49:ee:7c:18:c3:01:2a:83:3c:ed:05:82:5a:46: a8:53:69:fa:8f:eb:a2:39:2b:86:0f:4b:b1:1a:3a:93:9c:3c: 72:cb:c3:92:cb:33:43:ad:8f:92:f5:11:fe:1d:db:fd:ee:09: 3e:51:73:a9:06:2d:cd:79:38:e9:2d:8c:40:df:b2:09:6a:f9: 55:03:7b:86:a9:8e:25:ec:3b:00:2a:82:58:9e:e5:18:3d:02: bf:03:4f:26:a3:bd:5b:d1:e0:e9:53:d7:7e:93:86:3e:45:ea: 25:08:c9:12:b4:73:d2:06:f3:83:1a:a3:30:4f:a2:f3:4e:f8: 77:0a:91:14:90:f3:65:c3:3a:c5:6f:7f:ee:79:32:aa:2f:0a: 58:cf:d0:19:76:d7:28:4a:d9:bb:95:02:a4:ab:be:71:81:c1: 92:db:7b:0e:13:fb:c2:fc:ca:3b:18:89:04:6d:90:50:e4:8b: 9c:9e:dd:3f:53:ba:49:84:32:1a:da:97:7f:34:92:40:ac:1b: 0b:85:22:87:9c:53:dd:26:b1:17:0a:17:39:a3:6c:0b:eb:63: 7f:f8:89:ec:97:88:b6:83:0d:e9:df:5b:7c:01:fd:99:4f:22: 72:aa:97:30 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPevfCUwdKbUs9XLoQPum2rKp7eAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl ODQxYTRkMzAeFw0yNjAzMDIwMzI3MTZaFw0yNjAzMDMwNjA5MTZaMDMxMTAvBgNV BAMTKDkxRjQ4MTU5MzU3RUJGQTgwM0ZGOTdDODBBMDcyNzY5QjczOTYzRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSZjExdyIP5T4cPEVR/Cg8VIKV 6asYkFRwUtxe6Lchfe3KRi5HZ5idD8y8ymuVgjbxpCbm1AdrRYUOvHwllVyC/zKm hy5Ggi/0btNisX62zona6WUOJv231Tbtg49pI/Rr8UuJ4iVCPaRQ+Syb/Z02W0uw iXa1tdRLCzsqkBaS79qxo6ekTcTKtnZ3n5abP3TbSolmq+kzo4CiCQY00l3gea1W OhNDTulp2ssE5iX5FHwwEASHtw8+sUx0hNawOXUwx0KzqKjDU+sCvywUF4w+Eqbi YRxH1mHytyjveBT8AXavpe6dvYSNT9iAVfSFYPvc53BVs+FzGfYJgk8Dv2ipAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUkfSBWTV+v6gD/5fICgcnabc5Y9MwHwYDVR0j BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4 Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o QnBOTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MTEzZGRhNi03 YWRlLTQ0NWQtOGM2ZS00NDhhNzhlNDhjYTEvMS8wRDdGRkFFMzAwREVGMDg3NkJG ODQ4OTBGQjZFQTE3QkU4NDFBNEQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjszeesAEfWvxe/tEiOqf /cG1tJFUuknufBjDASqDPO0FglpGqFNp+o/rojkrhg9LsRo6k5w8csvDksszQ62P kvUR/h3b/e4JPlFzqQYtzXk46S2MQN+yCWr5VQN7hqmOJew7ACqCWJ7lGD0CvwNP JqO9W9Hg6VPXfpOGPkXqJQjJErRz0gbzgxqjME+i8074dwqRFJDzZcM6xW9/7nky qi8KWM/QGXbXKErZu5UCpKu+cYHBktt7DhP7wvzKOxiJBG2QUOSLnJ7dP1O6SYQy GtqXfzSSQKwbC4Uih5xT3SaxFwoXOaNsC+tjf/iJ7JeItoMN6d9bfAH9mU8icqqX MA== -----END CERTIFICATE-----Generated at Mon Mar 2 06:19:22 2026 by rpki-client