$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft File: AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft (raw, json) Hash identifier: QGhKwwt0h0YAMx2W/58c1Zhi+NK3yZdco8qfnXVQ2NY= Subject key identifier: 48:B4:FA:E2:ED:2B:1C:B0:F5:1F:9E:76:25:0B:16:13:D3:A6:50:FC Authority key identifier: AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24 Certificate issuer: /CN=AC7F9BC30C04B3A236BDF8A430869ECA1A28B324 Certificate serial: 5F351487B3C5071D50B0AA00D052376127670DFB Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft Manifest number: 90 Signing time: Sun 01 Mar 2026 12:22:36 +0000 Manifest this update: Sun 01 Mar 2026 12:17:36 +0000 Manifest next update: Mon 02 Mar 2026 14:37:36 +0000 Files and hashes: 1: 326130643a643930353a3a2f33322d3332203d3e20323038393135.roa (hash: 2xUP0qecdhpogJJIXpKqaPO0rpU4gp47dCbQRpKimlY=) 2: 3230362e35332e302e302f32342d3234203d3e20323038393135.roa (hash: WAuGwGix52TOMRQkik+jyE1rcWEn8673KCYGvlhnhXY=) 3: AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl (hash: 4cVAaaFLWq29/y3AKbbtul/AWjeWna0vO4O/jtNghmU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 14:37:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:35:14:87:b3:c5:07:1d:50:b0:aa:00:d0:52:37:61:27:67:0d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC7F9BC30C04B3A236BDF8A430869ECA1A28B324 Validity Not Before: Mar 1 12:17:36 2026 GMT Not After : Mar 2 14:37:36 2026 GMT Subject: CN=48B4FAE2ED2B1CB0F51F9E76250B1613D3A650FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:bf:d0:37:62:44:64:6c:a1:0e:da:79:79:97: 8b:4e:d9:de:6e:41:6b:50:23:c9:02:85:8f:7a:dd: 0d:2b:fc:42:07:9b:32:74:ea:bc:08:79:b3:2f:c5: 31:58:d5:d7:3d:af:de:83:5c:d1:c8:47:48:46:f3: 6b:c6:13:e2:7c:50:db:01:30:a0:ba:5b:72:4b:20: 54:12:bc:1d:92:d1:55:2f:f9:1f:f5:7e:ee:12:53: 6e:bc:f6:ce:fd:cd:bc:ef:89:33:1d:1c:89:db:38: 3e:5f:fc:a1:d6:26:07:52:99:1c:a8:2a:74:85:df: 11:8d:49:4e:8c:58:15:37:63:b7:c2:6a:7b:ee:84: cb:28:ee:04:32:54:fe:85:e1:7e:00:4e:b5:86:aa: a8:79:ec:57:f4:fc:9d:33:08:10:7d:72:d8:39:a1: a7:3c:19:d4:6d:81:2b:d8:cc:8e:bb:8d:11:44:28: cc:52:aa:f6:8a:68:31:4a:d1:65:2e:27:3a:75:d6: 22:82:70:f2:ee:a2:3d:0e:0d:7b:25:7d:ff:42:7e: 6e:ac:4b:eb:99:51:84:33:55:bc:81:72:2f:9c:c2: b7:14:f8:0e:8d:25:9a:f0:50:18:4a:e2:ca:9c:77: 2a:2a:7f:b2:c0:87:f3:2e:af:34:3e:d5:4b:fc:de: da:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B4:FA:E2:ED:2B:1C:B0:F5:1F:9E:76:25:0B:16:13:D3:A6:50:FC X509v3 Authority Key Identifier: keyid:AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:cb:18:b1:50:fc:ca:c3:58:e8:b5:3c:9e:85:b0:23:01:06: 1e:69:f0:4f:0c:35:0a:82:43:2a:63:e9:09:7e:40:5e:de:76: d7:da:79:9e:0c:0c:6b:f4:fa:24:d1:de:ac:c6:61:19:9d:4b: c4:89:40:9c:f3:17:ab:6c:06:ff:6d:45:fb:76:4e:6d:84:1f: 40:32:99:03:5b:bd:2b:ff:a5:63:f7:b4:96:b1:56:7f:47:c6: 54:dc:11:25:58:f1:19:16:7a:fd:39:ff:ed:dc:69:c4:f4:48: 3f:cc:6d:7e:32:fa:11:b3:88:65:3f:39:35:f0:54:a7:65:2a: 7c:95:3e:c7:38:a0:2a:d9:dc:14:c0:3c:d4:79:5f:e0:74:8b: bf:fe:64:ab:0d:df:03:1f:f0:8a:3c:18:14:2c:8e:79:98:de: 23:21:95:fe:69:43:d7:7c:b2:85:e1:5b:85:98:4f:13:b8:6a: a3:5e:aa:c0:ff:58:40:1b:ca:5f:35:8a:8f:48:b9:49:49:ce: b1:91:54:85:60:cb:f2:89:5e:a4:53:de:5e:a9:56:5e:1d:3e: 6c:67:ed:ee:d5:5b:7a:c1:e5:a8:7d:15:09:9a:05:d5:aa:51: 2d:0d:49:de:cc:36:23:73:e8:10:ba:da:7b:b7:40:16:a1:6a: 04:0c:91:c8 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUXzUUh7PFBx1QsKoA0FI3YSdnDfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0Ex QTI4QjMyNDAeFw0yNjAzMDExMjE3MzZaFw0yNjAzMDIxNDM3MzZaMDMxMTAvBgNV BAMTKDQ4QjRGQUUyRUQyQjFDQjBGNTFGOUU3NjI1MEIxNjEzRDNBNjUwRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbv9A3YkRkbKEO2nl5l4tO2d5u QWtQI8kChY963Q0r/EIHmzJ06rwIebMvxTFY1dc9r96DXNHIR0hG82vGE+J8UNsB MKC6W3JLIFQSvB2S0VUv+R/1fu4SU2689s79zbzviTMdHInbOD5f/KHWJgdSmRyo KnSF3xGNSU6MWBU3Y7fCanvuhMso7gQyVP6F4X4ATrWGqqh57Ff0/J0zCBB9ctg5 oac8GdRtgSvYzI67jRFEKMxSqvaKaDFK0WUuJzp11iKCcPLuoj0ODXslff9Cfm6s S+uZUYQzVbyBci+cwrcU+A6NJZrwUBhK4sqcdyoqf7LAh/MurzQ+1Uv83trZAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUSLT64u0rHLD1H552JQsWE9OmUPwwHwYDVR0j BBgwFoAUrH+bwwwEs6I2vfikMIaeyhoosyQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRjY2I0YjAtZTMwZS00MjZjLTg0ZGMtNDY0ZmQxODk5 MTE2LzEvQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0ExQTI4QjMyNC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0ExQTI4 QjMyNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGNjYjRiMC1l MzBlLTQyNmMtODRkYy00NjRmZDE4OTkxMTYvMS9BQzdGOUJDMzBDMDRCM0EyMzZC REY4QTQzMDg2OUVDQTFBMjhCMzI0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqcsYsVD8ysNY6LU8noWw IwEGHmnwTww1CoJDKmPpCX5AXt5219p5ngwMa/T6JNHerMZhGZ1LxIlAnPMXq2wG /21F+3ZObYQfQDKZA1u9K/+lY/e0lrFWf0fGVNwRJVjxGRZ6/Tn/7dxpxPRIP8xt fjL6EbOIZT85NfBUp2UqfJU+xzigKtncFMA81Hlf4HSLv/5kqw3fAx/wijwYFCyO eZjeIyGV/mlD13yyheFbhZhPE7hqo16qwP9YQBvKXzWKj0i5SUnOsZFUhWDL8ole pFPeXqlWXh0+bGft7tVbesHlqH0VCZoF1apRLQ1J3sw2I3PoELrae7dAFqFqBAyR yA== -----END CERTIFICATE-----Generated at Mon Mar 2 05:49:05 2026 by rpki-client