$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft File: A1EE5D09A0F5D0D87611013175C62E35777DA926.mft (raw, json) Hash identifier: SApv2c9k2o/dll3GwOa+MkGrSVe1PJ1DoqjOxG9tkvE= Subject key identifier: 6A:84:C7:35:DD:91:FD:EA:96:8A:7F:9F:7F:C4:A4:30:0D:A3:92:98 Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 Certificate issuer: /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Certificate serial: 22D1EF9BB1D158E02BCC0E0DBD7C560AEF555916 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft Manifest number: 033D Signing time: Mon 02 Mar 2026 03:19:54 +0000 Manifest this update: Mon 02 Mar 2026 03:14:54 +0000 Manifest next update: Tue 03 Mar 2026 04:01:54 +0000 Files and hashes: 1: 326131343a373538313a393130613a3a2f34382d3438203d3e20323135313438.roa (hash: g9TWsQZsTWz7mSDp6Y61gNZDSwAn6dADsEyVm1AJtlU=) 2: 326131343a373538313a393032303a3a2f34342d3438203d3e203339373533.roa (hash: 0nNVfH0UNkgevPAH9ITuwY5tE24LlYCDjFx46F3vtM0=) 3: 326131343a373538313a393165303a3a2f34382d3438203d3e20323135333634.roa (hash: 2aDuD/D+lIpzPYcnGpfR3f4GvH7bzD6tXNlt4SzLv7s=) 4: 326131343a373538313a393066663a3a2f34382d3438203d3e20323135363137.roa (hash: JYfFIGSSsdhSc4V2wOJu9QFkSSC76MmCAjKsdTBmtQA=) 5: 326131343a373538313a393130303a3a2f34382d3438203d3e20323134383431.roa (hash: TejNBoLvDqd6zzS1lptpFez+EdbwzXYJ6yM06vDQ9j0=) 6: 326131343a373538313a393230303a3a2f34302d3438203d3e203134343437.roa (hash: kZ5VHXe1kAhX5tvSZsX77jhReBFDdvoZNrdYu896udw=) 7: 326131343a373538313a393065653a3a2f34382d3438203d3e20323135333634.roa (hash: 5IFSShC1J1DPKr9fgEjy0DHzTqmR8W17B+sGrWUb29Q=) 8: 326131343a373538313a393061303a3a2f34332d3438203d3e203134343437.roa (hash: jsviVwthOZBlV5+oRRFYDUvQF+OHc4iDYR8PVPHLwkA=) 9: 326131343a373538313a393066653a3a2f34382d3438203d3e20323135333634.roa (hash: MyeYfbLc0//rjwnR8ZJ3TnxqQq4JflTHlrUTLQvk3gU=) 10: 326131343a373538313a393330303a3a2f34302d3438203d3e20323039313039.roa (hash: TWxboGw6/lxhoMiWiDnyOg4O9SxsEOXusyizWuah2wo=) 11: 326131343a373538313a393230303a3a2f34302d3430203d3e203134343437.roa (hash: wCZcPZ1Lk7X2Qee1qTSfN0RGP0Z21kPGqT0D7sgtD64=) 12: 326131343a373538313a393062303a3a2f34342d3438203d3e203134343437.roa (hash: 0s1d24KMFu1kYJPCMrebtn4XcHECqVsweN9wGCszluU=) 13: 326131343a373538313a393063303a3a2f34342d3438203d3e203134343437.roa (hash: 1KwjyQC5mQq96/1cZ1aeVWaWGIQIpF6Ei+ZSWIfd5WM=) 14: 326131343a373538313a393030303a3a2f34342d3438203d3e20323135333634.roa (hash: a41Xyu+1QM63sJBLjRXDXCMByy5FuK1D59e4kuksRCE=) 15: 326131343a373538313a393030303a3a2f33382d3338203d3e20323135333634.roa (hash: coziJfcvV7NZzAVbts1JQ6BKxT5yxFwdbwzsra8WCDw=) 16: 326131343a373538313a393230303a3a2f34302d3438203d3e20323039313039.roa (hash: pMn1lmNiSpZ9TgFB+IRiwlTd7+lbxKBF0vBWWTkkXYs=) 17: 326131343a373538313a393031303a3a2f34342d3438203d3e20313430393135.roa (hash: 34CzDRdWck3x5QdKwY21JLn4ljy5X8PbpWV6VL1UPl8=) 18: A1EE5D09A0F5D0D87611013175C62E35777DA926.crl (hash: XGDpbP5MW56c7P0OGU4OsW33D+/4RWSiEMa70AMgSf0=) 19: 326131343a373538313a393061303a3a2f34332d3438203d3e20323135333634.roa (hash: imEjvtvCCz1eqwuI8/eFHCFB+WwTlJEDfPXRombfVNU=) 20: 326131343a373538313a393165313a3a2f34382d3438203d3e20323135333634.roa (hash: F9b5BNgK8TO7NWcYalz+qyjvcxyYqlq+/TYg6mk1sTI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 04:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:d1:ef:9b:b1:d1:58:e0:2b:cc:0e:0d:bd:7c:56:0a:ef:55:59:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Validity Not Before: Mar 2 03:14:54 2026 GMT Not After : Mar 3 04:01:54 2026 GMT Subject: CN=6A84C735DD91FDEA968A7F9F7FC4A4300DA39298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:08:18:62:f6:09:9b:27:3f:e0:48:9c:cf:f9: a4:26:33:d5:92:1b:e2:fb:27:4b:51:d3:2a:b6:be: 9c:dd:d7:13:52:7d:43:20:23:f8:9f:8b:a4:d1:9f: 4c:f4:18:d2:b3:fb:19:3a:57:f8:03:31:8b:96:3b: 33:5e:2b:02:b7:db:d3:0c:49:5c:91:bf:72:33:aa: 13:33:cd:b0:c7:c2:1d:3d:23:15:5c:73:b6:12:e2: 7e:d1:a4:04:33:8e:ad:60:c3:f9:fb:da:7e:f6:63: ff:6a:fe:8e:b6:f6:ae:cf:f6:ea:56:d2:b4:58:69: a2:82:88:04:70:6e:ab:1b:d1:9b:67:b6:41:c4:5f: f0:ef:c8:3e:7c:40:eb:0c:6c:9e:15:89:ff:88:23: aa:b3:8d:ec:73:d8:9a:41:e7:fa:bf:a4:df:52:d1: 93:6b:54:e3:3f:93:3f:76:2e:3a:31:35:ab:70:ce: ad:cb:f5:32:94:3b:38:87:39:55:27:6f:2c:d4:34: ad:c4:da:5f:94:39:5f:79:73:54:4a:3b:eb:08:35: 66:ea:c9:b4:ad:59:b7:1a:a8:97:c3:95:28:38:9d: f1:c9:c8:b7:21:a1:95:e7:d3:23:59:8e:57:3b:59: 48:24:4a:8d:a0:cd:c8:8c:79:8f:29:43:78:70:15: 1b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:84:C7:35:DD:91:FD:EA:96:8A:7F:9F:7F:C4:A4:30:0D:A3:92:98 X509v3 Authority Key Identifier: keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:9c:6e:81:4b:b0:22:a7:52:24:62:06:c5:38:7a:3c:22:a1: a0:7b:58:3b:9f:34:35:62:9b:d8:d8:ad:54:ca:9d:d4:d0:57: 98:74:59:0b:23:d5:6b:9d:73:95:6f:63:97:9c:d3:95:8a:97: b5:a1:a1:46:64:a0:23:6e:58:61:85:a7:2e:0f:4b:72:6e:6e: 1e:2b:ac:c9:2b:c7:d1:01:16:4c:f5:a8:b1:fb:27:0d:8e:25: b7:cd:a6:3b:8c:66:74:34:52:27:48:d1:58:cb:61:f5:3b:23: 37:4a:f5:19:bf:76:38:31:cf:40:9b:01:52:dd:d4:67:4b:13: 2a:91:14:d7:97:f6:4e:19:dd:00:a9:c4:89:8f:a9:63:9a:c8: 9d:5a:f4:6a:88:9d:db:81:9a:2c:8b:ce:07:4c:32:5b:80:e3: 25:3b:22:c9:75:92:71:70:5e:20:94:ca:81:1e:71:1e:9f:5e: 36:b7:8e:bf:f1:5b:16:4b:25:f5:fe:a7:0e:fc:cc:80:19:ac: 61:d6:91:4b:92:70:ce:c7:33:6c:a4:16:76:20:c9:06:36:c6: 91:1f:f8:ee:a0:fc:34:24:30:e0:0a:77:94:f0:37:8f:45:35: 98:32:2e:3e:1e:cd:c0:0b:b7:d6:52:17:76:13:75:04:e0:d4: 3c:c5:0d:06 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUItHvm7HRWOArzA4NvXxWCu9VWRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3 NzdEQTkyNjAeFw0yNjAzMDIwMzE0NTRaFw0yNjAzMDMwNDAxNTRaMDMxMTAvBgNV BAMTKDZBODRDNzM1REQ5MUZERUE5NjhBN0Y5RjdGQzRBNDMwMERBMzkyOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7CBhi9gmbJz/gSJzP+aQmM9WS G+L7J0tR0yq2vpzd1xNSfUMgI/ifi6TRn0z0GNKz+xk6V/gDMYuWOzNeKwK329MM SVyRv3IzqhMzzbDHwh09IxVcc7YS4n7RpAQzjq1gw/n72n72Y/9q/o629q7P9upW 0rRYaaKCiARwbqsb0ZtntkHEX/DvyD58QOsMbJ4Vif+II6qzjexz2JpB5/q/pN9S 0ZNrVOM/kz92LjoxNatwzq3L9TKUOziHOVUnbyzUNK3E2l+UOV95c1RKO+sINWbq ybStWbcaqJfDlSg4nfHJyLchoZXn0yNZjlc7WUgkSo2gzciMeY8pQ3hwFRsrAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUaoTHNd2R/eqWin+ff8SkMA2jkpgwHwYDVR0j BBgwFoAUoe5dCaD10Nh2EQExdcYuNXd9qSYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODU1YzdkNWEtMTVjNC00NTg5LTg1ZmEtYjQ5MWEwNzEw NDhjLzAvQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3NzdEQTkyNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BMUVFNUQwOUEwRjVEMEQ4NzYxMTAxMzE3 NUM2MkUzNTc3N0RBOTI2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg1NWM3ZDVhLTE1YzQtNDU4OS04NWZhLWI0OTFhMDcxMDQ4Yy8wL0ExRUU1RDA5 QTBGNUQwRDg3NjExMDEzMTc1QzYyRTM1Nzc3REE5MjYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBtnG6B S7Aip1IkYgbFOHo8IqGge1g7nzQ1YpvY2K1Uyp3U0FeYdFkLI9VrnXOVb2OXnNOV ipe1oaFGZKAjblhhhacuD0tybm4eK6zJK8fRARZM9aix+ycNjiW3zaY7jGZ0NFIn SNFYy2H1OyM3SvUZv3Y4Mc9AmwFS3dRnSxMqkRTXl/ZOGd0AqcSJj6ljmsidWvRq iJ3bgZosi84HTDJbgOMlOyLJdZJxcF4glMqBHnEen142t46/8VsWSyX1/qcO/MyA Gaxh1pFLknDOxzNspBZ2IMkGNsaRH/juoPw0JDDgCneU8DePRTWYMi4+Hs3AC7fW Uhd2E3UE4NQ8xQ0G -----END CERTIFICATE-----Generated at Mon Mar 2 21:10:53 2026 by rpki-client