$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft File: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft (raw, json) Hash identifier: 0Wz/MBAJdRDZzEKcuGAg4978ChE6YBLyZdDKFFnjjOA= Subject key identifier: 5D:87:F1:92:56:BA:DF:E3:92:D1:C8:8F:5D:33:24:11:09:0C:E6:10 Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Certificate serial: 17BE27A1294F19CE59C647DD64D246D22C1DFBDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft Manifest number: 028E Signing time: Sun 01 Mar 2026 11:36:28 +0000 Manifest this update: Sun 01 Mar 2026 11:31:28 +0000 Manifest next update: Mon 02 Mar 2026 11:39:28 +0000 Files and hashes: 1: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl (hash: PIKVWx7FahNdOG2wkK4hAyPoMpfUxG7X3NZdF/gRmBs=) 2: 3139342e33342e3235352e302f32342d3234203d3e20313431393638.roa (hash: iQ9RYSqOmsvIqARX4nqI9wEFn//drkKsHCDo7XaSdTU=) 3: 3138352e3231332e3235312e302f32342d3234203d3e20393834.roa (hash: A919/Bekrj6rZbVlRAQ3zY8i9Bm4Qio6XVxQpWLOfQM=) 4: 3139352e35382e3135312e302f32342d3234203d3e20383334.roa (hash: 51JyyvFmYKIMCwLTiDhhEK+MsZYYANLTwN4CVdAzFk8=) 5: 38352e3131372e3233302e302f32342d3234203d3e2035303635.roa (hash: WxHcRq5WCH3YmKS5+Il6T1ro4Oc3AucTAyVboxN6cYg=) 6: 38352e3131372e3232382e302f32342d3234203d3e20323134343538.roa (hash: rcAG2FX2+ZD0Qb1+KeZK9os832Q7CwzkoxVHQi9yY7k=) 7: 38352e3131372e3232392e302f32342d3234203d3e203138353236.roa (hash: VL0qbnMthkW/z4M9i7RCycr128NaCWPDKcNp8MPhOx8=) 8: 3138352e3231332e3235312e302f32342d3234203d3e20323032373336.roa (hash: k9NutrpE73eF9M1MGDaqB2MjGcD60li8mT4JnvFIELA=) 9: 38352e3131372e3232392e302f32342d3234203d3e20313439313037.roa (hash: Mdj3IIZJ097ibJGhSOfHP4GOBLdG4jAp1zNpVSxesFg=) 10: 3139342e33342e3235342e302f32342d3234203d3e203531383532.roa (hash: za0HM3w55tiDFbhPrhUh3FtVd5oKhUm8JuFZ8lH0DiA=) 11: 3138352e3231332e3234392e302f32342d3234203d3e203235313938.roa (hash: RAmqdtOqt2GXnv4T7A8gAKdg4H2+TG5CqjE3/MvQxnU=) 12: 33312e39392e3230332e302f32342d3234203d3e20383334.roa (hash: AkENFigRyAUb+VRKLIg05eNR2DATlVcoQ6cEURE1+Kc=) 13: 3138352e3231332e3235302e302f32342d3234203d3e20323032383238.roa (hash: cvWbud/Q3B4zVr3PrPYyxiTjcQyvCffxgDgg+5VMZYE=) 14: 3139352e35382e3134382e302f32342d3234203d3e203633303233.roa (hash: oBeeeU3GnT2oMITYsHzfevINcnN3rBvPI2W5i1+sVPw=) 15: 33312e39392e3230312e302f32342d3234203d3e20323133363530.roa (hash: LZe/oPKdzHBDXdq7jgdrUvSsiw189QvXVXiPjXqJiLQ=) 16: 3139352e35382e3134382e302f32342d3234203d3e20323035383430.roa (hash: btToNdo4McV+mxna60YYwQUoRVqTrFqeFHcrOLZhmu4=) 17: 33312e39392e3230302e302f32342d3234203d3e20323032303736.roa (hash: 9aCU0WrowHQDEddqo+4gFdH5kjWR15/2+hM8MI1EWF8=) 18: 38352e3131372e3233312e302f32342d3234203d3e20323133373234.roa (hash: ohyXGo6Fwg3029u2hdROae+jQf4VI2skgvLUXH3jI8w=) 19: 3139342e33342e3235322e302f32342d3234203d3e203439353831.roa (hash: CdOWg7XQ7TdzzLDF2E3vbhyf4TDBRs7VuKir2QIc0i4=) 20: 33312e39392e3230322e302f32342d3234203d3e20323133363530.roa (hash: 0Bngyrmrdfz47mx/mnuSCDuWlf2EDWIUujRrINoh4uI=) 21: 3139342e33342e3235332e302f32342d3234203d3e2035303635.roa (hash: PbuFJWIaFPfS/fUezjEhjeDUJ1OpDE0MDCs7HAI2pDY=) 22: 3139352e35382e3134392e302f32342d3234203d3e203633313939.roa (hash: 9jUqhgLq8QIEEJxJiMALs0wsvhfDs1EJyMuRSJoW+38=) 23: 3138352e3231332e3234382e302f32342d3234203d3e20383334.roa (hash: mR/wWew3FjmrV6LotuwwCDAlPdUAkYACjCVanGsnnOg=) 24: 33312e39392e3230362e302f32342d3234203d3e20323130343935.roa (hash: OC80Hx5Gq1jN6Ym5UmCqnC8fGlp8VQazYJOfXpnB8WU=) 25: 3138352e3231332e3234392e302f32342d3234203d3e20343030393039.roa (hash: GEbFfS+LLMgocx0zl/qOrB6oO+BgTD8IsbF49GAbNus=) 26: 33312e39392e3230372e302f32342d3234203d3e20323030393139.roa (hash: Sx4gimOMm/cDt00enlx4Don8b0BAMFnFutmPQSumeeM=) 27: 3139352e35382e3135302e302f32342d3234203d3e20323135333533.roa (hash: 26P6qmF1qO5EzcVJRtFpyvK2Pg0XJgNsh+hTSCj6XOs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 11:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:be:27:a1:29:4f:19:ce:59:c6:47:dd:64:d2:46:d2:2c:1d:fb:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Validity Not Before: Mar 1 11:31:28 2026 GMT Not After : Mar 2 11:39:28 2026 GMT Subject: CN=5D87F19256BADFE392D1C88F5D332411090CE610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0c:89:09:be:0c:5a:e6:b0:56:70:12:d9:63: f0:49:ed:e9:6f:01:49:d6:2e:79:1c:b7:5a:eb:69: a4:7a:5b:35:87:ff:cf:f2:0a:d4:55:75:9f:30:9e: d4:12:8d:3e:df:3e:52:10:bb:43:11:b7:39:80:83: 99:a3:2e:5b:53:41:68:a7:6a:e1:94:66:f5:e2:fc: 41:d1:ac:bc:8a:ba:ac:fc:fd:31:82:02:fc:c1:95: df:ec:8a:bb:82:c7:66:ed:52:b2:46:99:3e:79:8d: ea:44:56:fc:00:ee:76:6a:62:08:08:7c:20:7c:1d: 3d:bd:9a:af:25:53:a5:93:01:34:a0:59:1c:0e:22: 51:f0:ff:22:cd:0a:d6:a4:65:e5:e1:91:d7:fd:fb: af:ce:16:ef:75:fb:f7:9d:f6:d4:af:bd:2a:36:ff: 30:ea:e4:e3:b1:b0:29:83:b6:ee:68:cc:f3:43:e4: 5d:24:c3:88:21:09:10:41:30:dc:98:e9:87:83:66: 81:73:5b:ad:54:07:56:c6:6b:07:6e:45:98:70:eb: 59:91:19:0e:57:ac:96:10:99:3a:de:d9:c7:61:ab: 3c:e1:08:87:28:92:e6:2c:81:74:63:e2:7e:5e:aa: f4:84:e1:96:13:d5:06:d0:18:53:ca:ba:38:3f:ad: 6d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:87:F1:92:56:BA:DF:E3:92:D1:C8:8F:5D:33:24:11:09:0C:E6:10 X509v3 Authority Key Identifier: keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:cd:8a:c7:10:d7:9a:d7:96:78:76:36:e5:ef:78:41:d9:2e: 08:78:5b:df:fb:85:18:f0:b0:53:64:90:41:78:10:71:43:21: 9b:d8:30:a4:3d:46:52:e1:75:87:cd:fb:c7:20:eb:42:ec:0c: 6d:f8:2b:1f:89:c7:45:04:35:33:30:74:e3:23:04:7c:21:0b: f2:b9:c0:a2:85:e9:33:78:75:26:6f:d6:58:39:3e:ec:2a:65: f8:8b:f8:ea:a3:c9:9b:44:bd:9d:c2:12:6a:57:c3:b6:80:6d: f0:6b:dc:86:5c:76:bd:54:21:c3:23:b9:56:e2:f3:ac:58:13: 68:4f:f0:92:21:36:84:ca:4e:47:8a:ab:4c:85:e2:20:c9:cf: 4e:48:50:e8:57:c0:fd:62:28:8e:24:8c:c3:8b:cf:2c:43:99: d9:3e:50:f0:87:d1:7c:6f:79:70:f2:48:d1:b9:be:20:64:30: 82:55:e0:49:c3:48:99:9c:32:ee:39:2a:48:c2:74:e4:ba:fd: 33:35:3b:fc:b7:23:79:e7:9e:bb:4c:a3:4d:72:44:5b:d7:89: e8:1f:80:0b:63:25:63:42:9b:37:3c:79:da:27:30:57:37:45: 25:33:99:5e:59:68:01:1a:c0:ce:66:27:c8:95:8e:b1:07:0d: 08:6e:75:7f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUF74noSlPGc5ZxkfdZNJG0iwd+94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl ODQxYTRkMzAeFw0yNjAzMDExMTMxMjhaFw0yNjAzMDIxMTM5MjhaMDMxMTAvBgNV BAMTKDVEODdGMTkyNTZCQURGRTM5MkQxQzg4RjVEMzMyNDExMDkwQ0U2MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+DIkJvgxa5rBWcBLZY/BJ7elv AUnWLnkct1rraaR6WzWH/8/yCtRVdZ8wntQSjT7fPlIQu0MRtzmAg5mjLltTQWin auGUZvXi/EHRrLyKuqz8/TGCAvzBld/siruCx2btUrJGmT55jepEVvwA7nZqYggI fCB8HT29mq8lU6WTATSgWRwOIlHw/yLNCtakZeXhkdf9+6/OFu91+/ed9tSvvSo2 /zDq5OOxsCmDtu5ozPND5F0kw4ghCRBBMNyY6YeDZoFzW61UB1bGawduRZhw61mR GQ5XrJYQmTre2cdhqzzhCIcokuYsgXRj4n5eqvSE4ZYT1QbQGFPKujg/rW0JAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUXYfxkla63+OS0ciPXTMkEQkM5hAwHwYDVR0j BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4 Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o QnBOTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MTEzZGRhNi03 YWRlLTQ0NWQtOGM2ZS00NDhhNzhlNDhjYTEvMS8wRDdGRkFFMzAwREVGMDg3NkJG ODQ4OTBGQjZFQTE3QkU4NDFBNEQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACs2KxxDXmteWeHY25e94 QdkuCHhb3/uFGPCwU2SQQXgQcUMhm9gwpD1GUuF1h837xyDrQuwMbfgrH4nHRQQ1 MzB04yMEfCEL8rnAooXpM3h1Jm/WWDk+7Cpl+Iv46qPJm0S9ncISalfDtoBt8Gvc hlx2vVQhwyO5VuLzrFgTaE/wkiE2hMpOR4qrTIXiIMnPTkhQ6FfA/WIojiSMw4vP LEOZ2T5Q8IfRfG95cPJI0bm+IGQwglXgScNImZwy7jkqSMJ05Lr9MzU7/Lcjeeee u0yjTXJEW9eJ6B+AC2MlY0KbNzx52icwVzdFJTOZXlloARrAzmYnyJWOsQcNCG51 fw== -----END CERTIFICATE-----Generated at Mon Mar 2 04:57:24 2026 by rpki-client