$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft File: B149F23A3E99C4760297DD7104B400C835D86D19.mft (raw, json) Hash identifier: iEPWA72bCmCF6xA67fNgI/+8xKu13LDrBKg7kM+yOQY= Subject key identifier: F6:26:D0:B0:29:CD:42:D5:24:F9:39:75:BB:CB:F8:A3:80:0C:84:68 Authority key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 Certificate issuer: /CN=B149F23A3E99C4760297DD7104B400C835D86D19 Certificate serial: 198E36F4A108DC5D2FCF22045AD734FCBBBF4689 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft Manifest number: 010A Signing time: Sun 01 Mar 2026 08:41:45 +0000 Manifest this update: Sun 01 Mar 2026 08:36:45 +0000 Manifest next update: Mon 02 Mar 2026 10:07:45 +0000 Files and hashes: 1: 326131343a373538333a663436303a3a2f34342d3438203d3e20323134373230.roa (hash: 4YEjtMXLVEjj9+5CMQ85BeokEYmpgzJkQtl+GYY10z4=) 2: 326131343a373538333a663436303a3a2f34342d3438203d3e20323131353735.roa (hash: LMFmuLJ4IgxIQCv2slhgNeKFDMCx6rSWhmkOn3RblbI=) 3: ECC2D1AF90663968C0983906E34503A5F531FBA9.cer (hash: 7yhtiP6LYY9iuIZqKiSw4vGWqamY84tAaUqjWikPsq8=) 4: 326131343a373538333a663436653a3a2f34382d3438203d3e20323131353735.roa (hash: 4zMeFak+3ClZhwivG2q5oRcVFKqGYFgGU+fXsaRbNAY=) 5: E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer (hash: ttIHeVow2IErbUXmp4n67KjX2H68UmfVMTfPkOmulDw=) 6: B149F23A3E99C4760297DD7104B400C835D86D19.crl (hash: 4RUHLPnJgVpFrbHcOc1ctGRZL4F1xH8IcY8CJsNNFNA=) 7: 326131343a373538333a663436303a3a2f34342d3438203d3e20323034353339.roa (hash: eK2I8NNfEPTCbHsIoeKMUzU2EbiQp+1aLucAqTV09UA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:8e:36:f4:a1:08:dc:5d:2f:cf:22:04:5a:d7:34:fc:bb:bf:46:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B149F23A3E99C4760297DD7104B400C835D86D19 Validity Not Before: Mar 1 08:36:45 2026 GMT Not After : Mar 2 10:07:45 2026 GMT Subject: CN=F626D0B029CD42D524F93975BBCBF8A3800C8468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:47:82:03:f6:7d:85:41:99:44:12:b7:38:59: 0b:e2:ca:24:8a:a2:ee:cf:95:b4:0b:ed:b5:85:65: 4a:c5:90:8c:e1:23:bf:03:2e:ef:43:1a:33:7d:23: 1a:ee:c2:35:65:15:fd:66:65:cc:24:a8:80:83:96: fd:75:19:41:fb:50:2b:6d:0e:9b:06:3e:5f:2d:f8: d7:4e:5a:c8:56:dd:d7:a2:dc:47:c5:9c:53:35:36: f5:eb:d4:82:48:25:9d:40:5a:4f:c0:ac:20:d5:6f: e7:32:9a:11:17:2b:8f:8f:13:51:dd:27:c6:32:15: bf:48:76:44:dc:9c:c5:c8:ec:de:2f:2b:18:fa:24: 44:28:a3:56:06:39:6e:70:a7:d7:98:52:75:38:c7: 64:eb:d1:bc:3c:13:84:07:27:1f:a1:bc:7a:22:f1: 4d:c2:72:97:e2:7c:4c:9a:5c:4a:85:25:34:a9:5d: 88:50:08:5e:12:34:71:31:b3:79:76:df:32:ec:a6: ec:42:a1:db:8a:19:4a:f0:67:75:2c:b1:7f:7d:d1: ed:9b:ed:6b:02:8b:79:07:bd:7d:9f:7a:86:0a:62: ad:fe:9e:79:aa:61:1c:b0:a7:1f:37:37:73:08:d8: da:57:68:36:94:f6:9e:40:47:67:d7:b1:6e:8d:fe: 08:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:26:D0:B0:29:CD:42:D5:24:F9:39:75:BB:CB:F8:A3:80:0C:84:68 X509v3 Authority Key Identifier: keyid:B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:fb:bf:8e:7e:f0:ac:7c:af:3d:25:92:06:4e:ec:95:e8:d1: db:5d:0d:5f:67:d9:8c:eb:84:ff:2a:74:67:20:af:f4:f1:02: be:50:6f:d5:94:86:42:b4:23:1b:8b:1d:a6:e2:b9:55:a9:29: 36:0a:77:d5:7d:c3:18:b3:81:36:8e:9c:a9:18:dc:f6:21:af: 93:f0:44:c8:83:d9:e8:8c:7e:bb:8b:2d:ae:b1:c2:ce:7d:a7: b1:37:3b:43:26:01:55:db:23:fb:20:d2:4c:50:b3:0f:ed:1a: 52:10:80:05:26:ab:0b:de:c3:62:3b:d4:fb:f2:a4:7d:1e:b3: 9f:31:5a:5c:4e:46:e9:f4:99:91:3b:9e:c6:0c:ec:5b:ee:d3: 27:0e:6f:83:ee:cc:dc:f9:91:02:40:ac:7e:df:29:f0:f9:a9: ba:7b:7d:ad:4b:6f:7a:1d:6c:d8:e3:21:3d:3c:e6:63:68:53: ec:2c:44:7d:4c:f8:c6:ca:35:36:6d:57:75:df:13:2b:20:cf: f3:b7:e9:2e:07:9a:a6:08:62:97:55:22:6d:81:e4:e8:61:41: 6b:49:64:90:56:13:8c:6d:a0:ba:e5:b5:da:29:99:47:82:d9: a2:a7:11:b3:57:74:14:04:81:26:c2:d4:ea:83:11:d1:2f:e9: f0:1a:4d:64 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUGY429KEI3F0vzyIEWtc0/Lu/RokwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgz NUQ4NkQxOTAeFw0yNjAzMDEwODM2NDVaFw0yNjAzMDIxMDA3NDVaMDMxMTAvBgNV BAMTKEY2MjZEMEIwMjlDRDQyRDUyNEY5Mzk3NUJCQ0JGOEEzODAwQzg0NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/R4ID9n2FQZlEErc4WQviyiSK ou7PlbQL7bWFZUrFkIzhI78DLu9DGjN9IxruwjVlFf1mZcwkqICDlv11GUH7UCtt DpsGPl8t+NdOWshW3dei3EfFnFM1NvXr1IJIJZ1AWk/ArCDVb+cymhEXK4+PE1Hd J8YyFb9IdkTcnMXI7N4vKxj6JEQoo1YGOW5wp9eYUnU4x2Tr0bw8E4QHJx+hvHoi 8U3CcpfifEyaXEqFJTSpXYhQCF4SNHExs3l23zLspuxCoduKGUrwZ3UssX990e2b 7WsCi3kHvX2feoYKYq3+nnmqYRywpx83N3MI2NpXaDaU9p5AR2fXsW6N/gi9AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU9ibQsCnNQtUk+Tl1u8v4o4AMhGgwHwYDVR0j BBgwFoAUsUnyOj6ZxHYCl91xBLQAyDXYbRkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVj OWRjLzIvQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgzNUQ4NkQxOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CMTQ5RjIzQTNFOTlDNDc2MDI5N0RENzEw NEI0MDBDODM1RDg2RDE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzk4MWY5NzgyLTg5OGUtNGI4My05NWU2LTRmZjRhYjc1YzlkYy8yL0IxNDlGMjNB M0U5OUM0NzYwMjk3REQ3MTA0QjQwMEM4MzVEODZEMTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCN+7+O fvCsfK89JZIGTuyV6NHbXQ1fZ9mM64T/KnRnIK/08QK+UG/VlIZCtCMbix2m4rlV qSk2CnfVfcMYs4E2jpypGNz2Ia+T8ETIg9nojH67iy2uscLOfaexNztDJgFV2yP7 INJMULMP7RpSEIAFJqsL3sNiO9T78qR9HrOfMVpcTkbp9JmRO57GDOxb7tMnDm+D 7szc+ZECQKx+3ynw+am6e32tS296HWzY4yE9POZjaFPsLER9TPjGyjU2bVd13xMr IM/zt+kuB5qmCGKXVSJtgeToYUFrSWSQVhOMbaC65bXaKZlHgtmipxGzV3QUBIEm wtTqgxHRL+nwGk1k -----END CERTIFICATE-----Generated at Sun Mar 1 18:29:18 2026 by rpki-client