$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft File: B149F23A3E99C4760297DD7104B400C835D86D19.mft (raw, json) Hash identifier: JhLnEWVqvvtXWYsSf2DnNMKr/Hbg7t/pYAaXku+DM34= Subject key identifier: BC:9B:DD:41:F0:BA:A8:E2:37:A7:30:97:1A:21:34:A2:84:05:92:2D Authority key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 Certificate issuer: /CN=B149F23A3E99C4760297DD7104B400C835D86D19 Certificate serial: 5C5EBDE8B00D3E75F840E492F844AC014F3AB0D5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft Manifest number: 0149 Signing time: Fri 17 Apr 2026 12:10:19 +0000 Manifest this update: Fri 17 Apr 2026 12:05:19 +0000 Manifest next update: Sat 18 Apr 2026 12:17:19 +0000 Files and hashes: 1: 326131343a373538333a663436303a3a2f34342d3438203d3e20323034353339.roa (hash: eK2I8NNfEPTCbHsIoeKMUzU2EbiQp+1aLucAqTV09UA=) 2: E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer (hash: ttIHeVow2IErbUXmp4n67KjX2H68UmfVMTfPkOmulDw=) 3: 326131343a373538333a663431313a3a2f34382d3438203d3e20323131353735.roa (hash: T+RdHDe5NeQheGE3D7vM1SaQKENF6nLzJfru8VF2DHI=) 4: B149F23A3E99C4760297DD7104B400C835D86D19.crl (hash: 3TlWOxchPOiFW0r32HwRgjociqwlfpguRjL6P8WFjZE=) 5: 326131343a373538333a663436303a3a2f34342d3438203d3e20323134373230.roa (hash: 4YEjtMXLVEjj9+5CMQ85BeokEYmpgzJkQtl+GYY10z4=) 6: 326131343a373538333a663436303a3a2f34342d3438203d3e20323131353735.roa (hash: LMFmuLJ4IgxIQCv2slhgNeKFDMCx6rSWhmkOn3RblbI=) 7: 326131343a373538333a663436653a3a2f34382d3438203d3e20323131353735.roa (hash: 4zMeFak+3ClZhwivG2q5oRcVFKqGYFgGU+fXsaRbNAY=) 8: ECC2D1AF90663968C0983906E34503A5F531FBA9.cer (hash: 7yhtiP6LYY9iuIZqKiSw4vGWqamY84tAaUqjWikPsq8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 12:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:5e:bd:e8:b0:0d:3e:75:f8:40:e4:92:f8:44:ac:01:4f:3a:b0:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B149F23A3E99C4760297DD7104B400C835D86D19 Validity Not Before: Apr 17 12:05:19 2026 GMT Not After : Apr 18 12:17:19 2026 GMT Subject: CN=BC9BDD41F0BAA8E237A730971A2134A28405922D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:72:ee:41:ce:6b:a3:ef:11:58:c4:ad:3e:e9: f8:30:c0:bd:33:3c:df:ea:72:a4:cf:86:c9:a7:89: 0a:af:c4:ae:63:24:b4:18:65:9e:9e:41:6a:9a:42: c2:71:2a:e5:ed:6f:ae:35:04:fd:cb:b4:8c:0f:95: 6c:fc:67:95:64:30:b0:2d:17:53:13:cf:63:9e:a1: aa:4e:d1:bf:ae:66:32:82:d7:a4:6c:ec:5b:d7:37: d6:4b:6b:3f:c5:69:c5:45:46:f9:79:b2:08:87:8b: 4d:0b:73:42:9f:e0:fa:ae:c1:2c:f4:bc:ad:92:28: 6b:96:a1:b2:9c:96:1f:44:49:3b:1f:cb:90:67:4a: e2:0b:64:77:1e:8d:b0:6f:a4:73:a5:2f:c3:6c:2a: f1:a8:0b:9f:b4:6e:31:89:37:e6:6b:84:34:dc:be: 49:11:5b:8a:bf:dc:84:2f:48:16:93:91:fb:40:c2: 1a:c7:87:41:f1:88:36:17:b1:57:76:ed:fd:11:1f: 92:d9:5f:04:99:f7:10:7e:5c:18:38:55:73:17:bc: 64:43:a6:4a:33:bd:f2:26:d5:bf:31:04:99:60:c4: 6c:64:ad:49:49:93:62:27:ca:d1:b5:9f:e4:3b:9c: 55:d9:cb:59:d7:82:09:9a:7b:61:8c:af:bf:d9:ac: 48:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:9B:DD:41:F0:BA:A8:E2:37:A7:30:97:1A:21:34:A2:84:05:92:2D X509v3 Authority Key Identifier: keyid:B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:7d:87:96:b6:bf:f3:b5:01:6b:aa:58:d1:28:0b:3e:73:ff: f5:eb:c3:e6:57:10:01:d4:42:28:fc:4a:be:db:06:6a:78:59: 62:2e:2f:e8:b3:0e:66:ca:16:19:06:79:9b:d0:92:28:f9:71: b5:75:2e:ad:55:c6:f2:e6:f4:e5:95:fb:c3:31:94:1e:fc:3e: 06:b2:9f:ce:9d:7d:3f:8b:a2:c8:8d:76:21:f6:dd:8f:db:df: 5a:01:72:da:18:d1:35:9c:65:2c:c0:ff:a6:ce:9a:c1:3b:23: e1:fd:34:54:76:8c:ae:4c:a5:a7:b9:b1:e3:3a:14:1a:db:79: 89:a7:1d:3e:56:08:ef:71:f2:ed:17:55:46:03:38:58:43:c9: c8:31:f4:4a:fb:6c:6a:c4:e5:0d:e6:78:16:ca:0d:2b:9f:48: 49:f0:d2:05:66:a3:a4:03:a9:c0:88:bf:20:3d:56:39:57:80: b2:67:e9:68:03:de:2e:8d:7b:e4:d3:4f:38:4a:24:a8:f9:82: c1:7d:21:60:d5:58:9f:f2:79:f8:d9:75:67:46:62:d4:6a:61: e6:2c:37:04:fb:b3:e9:15:06:a4:10:2a:08:f0:29:3a:5d:81: 7a:7d:3b:a0:84:53:ec:41:4d:a1:7b:d2:83:22:24:28:71:e3: 4b:07:f9:84 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXF696LANPnX4QOSS+ESsAU86sNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgz NUQ4NkQxOTAeFw0yNjA0MTcxMjA1MTlaFw0yNjA0MTgxMjE3MTlaMDMxMTAvBgNV BAMTKEJDOUJERDQxRjBCQUE4RTIzN0E3MzA5NzFBMjEzNEEyODQwNTkyMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4cu5Bzmuj7xFYxK0+6fgwwL0z PN/qcqTPhsmniQqvxK5jJLQYZZ6eQWqaQsJxKuXtb641BP3LtIwPlWz8Z5VkMLAt F1MTz2OeoapO0b+uZjKC16Rs7FvXN9ZLaz/FacVFRvl5sgiHi00Lc0Kf4PquwSz0 vK2SKGuWobKclh9ESTsfy5BnSuILZHcejbBvpHOlL8NsKvGoC5+0bjGJN+ZrhDTc vkkRW4q/3IQvSBaTkftAwhrHh0HxiDYXsVd27f0RH5LZXwSZ9xB+XBg4VXMXvGRD pkozvfIm1b8xBJlgxGxkrUlJk2InytG1n+Q7nFXZy1nXggmae2GMr7/ZrEjlAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUvJvdQfC6qOI3pzCXGiE0ooQFki0wHwYDVR0j BBgwFoAUsUnyOj6ZxHYCl91xBLQAyDXYbRkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVj OWRjLzIvQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgzNUQ4NkQxOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CMTQ5RjIzQTNFOTlDNDc2MDI5N0RENzEw NEI0MDBDODM1RDg2RDE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzk4MWY5NzgyLTg5OGUtNGI4My05NWU2LTRmZjRhYjc1YzlkYy8yL0IxNDlGMjNB M0U5OUM0NzYwMjk3REQ3MTA0QjQwMEM4MzVEODZEMTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB8fYeW tr/ztQFrqljRKAs+c//168PmVxAB1EIo/Eq+2wZqeFliLi/osw5myhYZBnmb0JIo +XG1dS6tVcby5vTllfvDMZQe/D4Gsp/OnX0/i6LIjXYh9t2P299aAXLaGNE1nGUs wP+mzprBOyPh/TRUdoyuTKWnubHjOhQa23mJpx0+VgjvcfLtF1VGAzhYQ8nIMfRK +2xqxOUN5ngWyg0rn0hJ8NIFZqOkA6nAiL8gPVY5V4CyZ+loA94ujXvk0084SiSo +YLBfSFg1Vif8nn42XVnRmLUamHmLDcE+7PpFQakECoI8Ck6XYF6fTughFPsQU2h e9KDIiQoceNLB/mE -----END CERTIFICATE-----Generated at Fri Apr 17 21:48:17 2026 by rpki-client