$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft File: A1EE5D09A0F5D0D87611013175C62E35777DA926.mft (raw, json) Hash identifier: 1hMED99HC+cvJSgaqO7nXSZJX0nhGb0ZjE7NDlNXzzE= Subject key identifier: D2:AA:12:A5:71:E6:9B:99:82:57:97:E0:E7:F6:3A:D5:97:34:B2:D5 Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 Certificate issuer: /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Certificate serial: 7A8BDC9BC377F41C88FE63397D365B54B69CC8C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft Manifest number: 037B Signing time: Fri 17 Apr 2026 13:03:40 +0000 Manifest this update: Fri 17 Apr 2026 12:58:40 +0000 Manifest next update: Sat 18 Apr 2026 16:19:40 +0000 Files and hashes: 1: 326131343a373538313a393165303a3a2f34382d3438203d3e20323135333634.roa (hash: 2aDuD/D+lIpzPYcnGpfR3f4GvH7bzD6tXNlt4SzLv7s=) 2: 326131343a373538313a393230303a3a2f34302d3438203d3e20323039313039.roa (hash: pMn1lmNiSpZ9TgFB+IRiwlTd7+lbxKBF0vBWWTkkXYs=) 3: 326131343a373538313a393330303a3a2f34302d3438203d3e20323039313039.roa (hash: TWxboGw6/lxhoMiWiDnyOg4O9SxsEOXusyizWuah2wo=) 4: 326131343a373538313a393063303a3a2f34342d3438203d3e203134343437.roa (hash: 1KwjyQC5mQq96/1cZ1aeVWaWGIQIpF6Ei+ZSWIfd5WM=) 5: 326131343a373538313a393062303a3a2f34342d3438203d3e203134343437.roa (hash: 0s1d24KMFu1kYJPCMrebtn4XcHECqVsweN9wGCszluU=) 6: 326131343a373538313a393032303a3a2f34342d3438203d3e203339373533.roa (hash: 0nNVfH0UNkgevPAH9ITuwY5tE24LlYCDjFx46F3vtM0=) 7: 326131343a373538313a393030303a3a2f33382d3338203d3e20323135333634.roa (hash: coziJfcvV7NZzAVbts1JQ6BKxT5yxFwdbwzsra8WCDw=) 8: 326131343a373538313a393230303a3a2f34302d3430203d3e203134343437.roa (hash: wCZcPZ1Lk7X2Qee1qTSfN0RGP0Z21kPGqT0D7sgtD64=) 9: 326131343a373538313a393066663a3a2f34382d3438203d3e20323135363137.roa (hash: JYfFIGSSsdhSc4V2wOJu9QFkSSC76MmCAjKsdTBmtQA=) 10: 326131343a373538313a393165313a3a2f34382d3438203d3e20323135333634.roa (hash: F9b5BNgK8TO7NWcYalz+qyjvcxyYqlq+/TYg6mk1sTI=) 11: 326131343a373538313a393230303a3a2f34302d3438203d3e203134343437.roa (hash: kZ5VHXe1kAhX5tvSZsX77jhReBFDdvoZNrdYu896udw=) 12: 326131343a373538313a393061303a3a2f34332d3438203d3e203134343437.roa (hash: jsviVwthOZBlV5+oRRFYDUvQF+OHc4iDYR8PVPHLwkA=) 13: 326131343a373538313a393030303a3a2f34342d3438203d3e20323135333634.roa (hash: a41Xyu+1QM63sJBLjRXDXCMByy5FuK1D59e4kuksRCE=) 14: A1EE5D09A0F5D0D87611013175C62E35777DA926.crl (hash: x+oKrvMmIErGAIbDo6aSYlWj/WZptLcavYG8lDMHBAI=) 15: 326131343a373538313a393065653a3a2f34382d3438203d3e20323135333634.roa (hash: 5IFSShC1J1DPKr9fgEjy0DHzTqmR8W17B+sGrWUb29Q=) 16: 326131343a373538313a393130303a3a2f34382d3438203d3e20323134383431.roa (hash: TejNBoLvDqd6zzS1lptpFez+EdbwzXYJ6yM06vDQ9j0=) 17: 326131343a373538313a393061303a3a2f34332d3438203d3e20323135333634.roa (hash: imEjvtvCCz1eqwuI8/eFHCFB+WwTlJEDfPXRombfVNU=) 18: 326131343a373538313a393031303a3a2f34342d3438203d3e20313430393135.roa (hash: 34CzDRdWck3x5QdKwY21JLn4ljy5X8PbpWV6VL1UPl8=) 19: 326131343a373538313a393066653a3a2f34382d3438203d3e20323135333634.roa (hash: MyeYfbLc0//rjwnR8ZJ3TnxqQq4JflTHlrUTLQvk3gU=) 20: 326131343a373538313a393130613a3a2f34382d3438203d3e20323135313438.roa (hash: g9TWsQZsTWz7mSDp6Y61gNZDSwAn6dADsEyVm1AJtlU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 14:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:8b:dc:9b:c3:77:f4:1c:88:fe:63:39:7d:36:5b:54:b6:9c:c8:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Validity Not Before: Apr 17 12:58:40 2026 GMT Not After : Apr 18 16:19:40 2026 GMT Subject: CN=D2AA12A571E69B99825797E0E7F63AD59734B2D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:13:95:6a:37:77:44:c6:ba:cd:b6:8e:7d:85: 92:d0:cd:1b:83:ca:f3:a1:42:a5:f1:22:48:25:b3: 77:2c:54:88:78:43:71:7c:7b:7b:9b:09:d0:fb:7c: df:dd:50:68:4a:d0:9c:71:dc:24:49:94:c2:e9:8b: 89:8a:bd:56:83:21:65:32:de:2b:ed:a3:fa:65:61: e9:e1:ca:f5:b1:f6:5b:30:17:18:87:6d:4e:cb:2c: c3:ea:b2:11:6c:87:c8:b1:cc:38:34:76:72:9b:aa: 5f:93:47:c4:fa:e2:b8:e7:0e:3f:cf:fb:6d:10:7a: 54:5c:97:ed:82:1e:68:a4:6e:b8:d4:4b:9b:ae:a5: 49:98:a3:e3:de:5d:bb:5c:d9:df:da:88:b2:01:1f: ec:96:e0:fd:d2:03:4a:2a:7f:24:cc:f6:c4:ee:1a: ac:be:5e:11:8f:5b:6e:20:3a:4b:75:0f:9a:0f:93: 70:e0:e3:f3:04:71:5b:b8:bd:44:00:80:ba:02:5d: 95:54:39:ab:cc:72:40:8f:dc:75:03:fd:be:e7:91: 2d:1a:1b:42:c0:3d:d3:42:77:84:05:85:4a:87:15: 73:6f:93:a9:f1:80:7f:24:c7:4c:cc:40:c9:de:37: 8c:54:b2:27:17:a0:cb:29:c8:17:84:10:bd:6c:a4: a3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:AA:12:A5:71:E6:9B:99:82:57:97:E0:E7:F6:3A:D5:97:34:B2:D5 X509v3 Authority Key Identifier: keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:e1:64:9e:79:97:6f:3c:45:60:07:85:39:e3:5e:35:3a:a9: 75:7a:35:d6:01:1f:12:56:87:97:09:9d:db:3d:54:cd:1f:51: ea:f5:33:00:7c:e0:5d:10:e8:c8:6d:4d:8d:f0:66:00:14:a4: 68:1f:27:63:5a:78:a2:c9:5d:84:c5:2c:e8:43:48:75:6d:86: 80:66:d8:7d:53:69:5a:6f:cc:4d:a2:d2:ce:a1:3f:c9:df:8a: 0e:55:71:36:65:38:3c:e3:07:76:d8:0f:26:1c:46:df:6f:5c: 6e:5b:ea:7d:6e:ff:8f:53:37:6d:37:87:b2:54:c2:05:b3:68: a8:59:ba:59:83:4a:d0:9a:bb:64:cc:0e:76:8c:d4:43:21:f1: 93:14:64:0c:b0:ed:7c:fe:71:0f:26:3d:54:b2:8e:c6:9b:9d: bd:8b:c2:09:9e:16:a8:eb:37:8a:e1:f5:67:29:f2:36:38:8a: c3:f3:e0:9a:fa:f3:c8:bc:d6:6b:0f:e8:7f:00:b8:53:5c:7f: ab:0d:5e:4a:1a:0f:31:22:5e:ff:4c:5b:16:71:40:9d:08:20: 78:0c:28:ce:e7:34:c3:17:84:90:b0:a0:54:a5:12:35:17:4f: 89:90:68:65:65:6f:da:62:65:33:81:8d:25:9c:40:73:f6:43: d2:2a:4e:1e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUeovcm8N39ByI/mM5fTZbVLacyMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3 NzdEQTkyNjAeFw0yNjA0MTcxMjU4NDBaFw0yNjA0MTgxNjE5NDBaMDMxMTAvBgNV BAMTKEQyQUExMkE1NzFFNjlCOTk4MjU3OTdFMEU3RjYzQUQ1OTczNEIyRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSE5VqN3dExrrNto59hZLQzRuD yvOhQqXxIkgls3csVIh4Q3F8e3ubCdD7fN/dUGhK0Jxx3CRJlMLpi4mKvVaDIWUy 3ivto/plYenhyvWx9lswFxiHbU7LLMPqshFsh8ixzDg0dnKbql+TR8T64rjnDj/P +20QelRcl+2CHmikbrjUS5uupUmYo+PeXbtc2d/aiLIBH+yW4P3SA0oqfyTM9sTu Gqy+XhGPW24gOkt1D5oPk3Dg4/MEcVu4vUQAgLoCXZVUOavMckCP3HUD/b7nkS0a G0LAPdNCd4QFhUqHFXNvk6nxgH8kx0zMQMneN4xUsicXoMspyBeEEL1spKMhAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU0qoSpXHmm5mCV5fg5/Y61Zc0stUwHwYDVR0j BBgwFoAUoe5dCaD10Nh2EQExdcYuNXd9qSYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODU1YzdkNWEtMTVjNC00NTg5LTg1ZmEtYjQ5MWEwNzEw NDhjLzAvQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3NzdEQTkyNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BMUVFNUQwOUEwRjVEMEQ4NzYxMTAxMzE3 NUM2MkUzNTc3N0RBOTI2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg1NWM3ZDVhLTE1YzQtNDU4OS04NWZhLWI0OTFhMDcxMDQ4Yy8wL0ExRUU1RDA5 QTBGNUQwRDg3NjExMDEzMTc1QzYyRTM1Nzc3REE5MjYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCt4WSe eZdvPEVgB4U54141Oql1ejXWAR8SVoeXCZ3bPVTNH1Hq9TMAfOBdEOjIbU2N8GYA FKRoHydjWniiyV2ExSzoQ0h1bYaAZth9U2lab8xNotLOoT/J34oOVXE2ZTg84wd2 2A8mHEbfb1xuW+p9bv+PUzdtN4eyVMIFs2ioWbpZg0rQmrtkzA52jNRDIfGTFGQM sO18/nEPJj1Uso7Gm529i8IJnhao6zeK4fVnKfI2OIrD8+Ca+vPIvNZrD+h/ALhT XH+rDV5KGg8xIl7/TFsWcUCdCCB4DCjO5zTDF4SQsKBUpRI1F0+JkGhlZW/aYmUz gY0lnEBz9kPSKk4e -----END CERTIFICATE-----Generated at Fri Apr 17 18:37:33 2026 by rpki-client