$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft File: 8184669B0189B7FABE05E700325A0D74957BEB27.mft (raw, json) Hash identifier: qGtuh65vlpG+Fk3zxD2dOQQzqQCIqq0r6nWAy5QzOew= Subject key identifier: DD:D7:AB:EB:4A:F6:1C:A9:57:0F:09:AC:41:5E:76:C4:B2:21:07:11 Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27 Certificate serial: 61A09253BD077E77ED2F1E725FA17B99A84C4B4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft Manifest number: 01CD Signing time: Mon 02 Mar 2026 07:58:56 +0000 Manifest this update: Mon 02 Mar 2026 07:53:56 +0000 Manifest next update: Tue 03 Mar 2026 09:51:56 +0000 Files and hashes: 1: 3231332e3135372e3132332e302f32342d3234203d3e20383334.roa (hash: YU9Gu8DbwidmuJEj2bOkpyHE/QfDjQi5W4EwB2IqhYg=) 2: 3231332e3135372e39362e302f32302d3230203d3e203230353130.roa (hash: cK22q6rO6KtktflqsQYlSr1z73xEpoVM/WNGnd6YIEI=) 3: 3231332e3135372e3131382e302f32332d3233203d3e203230353130.roa (hash: U2rsj2GmpPBYV9RPLITNHzbaDI2Gxelnlov5msxX9eI=) 4: 3231332e3135372e3132302e302f32342d3234203d3e203432383331.roa (hash: obPbW0ZKO9rq4yp7c5UqzqijavPW0CV78gaYhHaBReI=) 5: 8184669B0189B7FABE05E700325A0D74957BEB27.crl (hash: vDHBLmkb7z5tabrfeJv4Q0RQAoAKZqPleLpBR/xt/m0=) 6: 3231332e3135372e3131362e302f32332d3233203d3e203230353130.roa (hash: u6D0nQIamyf1rwT6EphlkmgpGmdsHhrROhbEzSFSSxQ=) 7: 3231332e3135372e3130372e302f32342d3234203d3e203530323631.roa (hash: fkThFrWbc2SNg5nWL/DjCmp7efO9LKVSLfyHO63Odeo=) 8: 3231332e3135372e3131322e302f32322d3232203d3e203230353130.roa (hash: oXC9Asr9SJ7DSslxSZaWUX9xWnSBbY5iUxbxwvvcFUI=) 9: 3231332e3135372e3132312e302f32342d3234203d3e20383334.roa (hash: ymSjuPXVAPbWpsdUxy4NAbVAbZwcrZUHC9CvHZBpiEw=) 10: 3231332e3135372e3132322e302f32342d3234203d3e2039333034.roa (hash: aUvc4UTsIU7R0m9dsnmxWesOTPr9WQo6/RshJ5X0hb4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:a0:92:53:bd:07:7e:77:ed:2f:1e:72:5f:a1:7b:99:a8:4c:4b:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27 Validity Not Before: Mar 2 07:53:56 2026 GMT Not After : Mar 3 09:51:56 2026 GMT Subject: CN=DDD7ABEB4AF61CA9570F09AC415E76C4B2210711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ed:82:d8:a0:e0:dc:c2:d4:8d:ea:32:92:ce: 0b:9b:8f:fa:d1:9e:66:02:04:4a:fc:f5:af:08:b3: e4:58:07:97:7a:a3:f8:17:7c:8d:06:70:50:62:24: 95:e5:3a:56:ad:fe:ef:b2:ba:2d:e9:29:22:9a:ae: 66:00:77:1d:e8:d7:f8:9b:dc:9b:57:e9:3e:11:64: 63:d9:48:fb:de:1b:f0:d7:5b:8c:d1:88:62:c3:ab: c9:1c:e8:6d:a2:a6:63:6c:50:29:9d:68:b9:75:3a: 70:1f:50:72:57:ec:b8:85:b5:2c:a1:0b:fe:1a:1d: 5e:0e:ab:8c:18:3e:2c:a6:f6:57:4b:30:a1:fd:ff: 47:b7:fd:1d:d5:0e:28:07:e7:66:2d:aa:70:9c:3c: dc:f8:2f:fc:80:7f:e8:03:2e:3a:f1:73:0b:38:83: c8:e9:a8:a7:16:91:cf:22:17:d3:57:39:47:c1:4c: 46:80:ec:f3:1b:ec:66:f4:e4:08:64:74:a7:d6:e4: 87:b4:c8:e9:ed:37:14:a7:9a:06:b2:89:ef:fb:50: c3:3c:f9:71:73:1d:48:5d:67:88:20:38:72:1d:17: 6f:f4:8e:b2:01:37:38:68:60:13:cb:5d:fb:50:08: 62:31:db:93:f4:da:ff:6f:2e:b6:7d:57:71:2a:85: 6e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D7:AB:EB:4A:F6:1C:A9:57:0F:09:AC:41:5E:76:C4:B2:21:07:11 X509v3 Authority Key Identifier: keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:55:44:41:78:0b:90:e9:bf:a6:c0:8b:46:b1:a0:f8:b3:12: 9c:71:09:64:8d:a2:df:fe:20:06:7a:ac:5c:49:11:c2:32:3f: 7a:bc:91:30:54:a8:b1:74:55:ba:9e:e8:2a:c7:fb:1f:da:79: ea:a7:d9:54:8a:c7:e6:b9:7e:67:76:bd:bf:08:b2:fe:78:b0: 3e:3c:e3:cc:61:2b:6f:37:41:50:a3:67:86:7f:66:ae:03:41: f8:5d:e6:09:dd:c3:a7:86:ec:c7:68:e1:bf:4b:20:ef:1d:77: 54:1e:0b:e6:1b:46:24:db:4e:6a:22:21:51:aa:c7:97:9c:7f: 9c:71:37:b8:ff:0d:4a:08:88:4c:8e:73:9b:25:21:14:7e:fa: 39:c9:16:8d:69:ff:ba:98:54:93:b6:47:d1:6b:66:0f:4e:5e: 58:8d:55:3f:8e:e0:95:2b:f0:6d:f3:eb:21:09:17:6b:b3:6a: 35:2e:d9:43:f4:b0:c3:b8:55:73:9e:07:47:50:e5:cb:ee:4c: 92:3a:15:3b:24:9b:5f:85:55:b4:72:c3:6f:e0:eb:fc:0a:ba: 11:a2:b5:37:86:c3:0d:47:1e:8e:b9:62:57:83:17:8a:d2:75: f8:b9:0f:7f:dc:2b:f8:02:65:9d:a8:59:b3:ab:d6:10:92:d3: 1f:09:8c:e2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYaCSU70HfnftLx5yX6F7mahMS00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE4NDY2OWIwMTg5YjdmYWJlMDVlNzAwMzI1YTBkNzQ5 NTdiZWIyNzAeFw0yNjAzMDIwNzUzNTZaFw0yNjAzMDMwOTUxNTZaMDMxMTAvBgNV BAMTKERERDdBQkVCNEFGNjFDQTk1NzBGMDlBQzQxNUU3NkM0QjIyMTA3MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc7YLYoODcwtSN6jKSzgubj/rR nmYCBEr89a8Is+RYB5d6o/gXfI0GcFBiJJXlOlat/u+yui3pKSKarmYAdx3o1/ib 3JtX6T4RZGPZSPveG/DXW4zRiGLDq8kc6G2ipmNsUCmdaLl1OnAfUHJX7LiFtSyh C/4aHV4Oq4wYPiym9ldLMKH9/0e3/R3VDigH52YtqnCcPNz4L/yAf+gDLjrxcws4 g8jpqKcWkc8iF9NXOUfBTEaA7PMb7Gb05AhkdKfW5Ie0yOntNxSnmgayie/7UMM8 +XFzHUhdZ4ggOHIdF2/0jrIBNzhoYBPLXftQCGIx25P02v9vLrZ9V3EqhW4DAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU3der60r2HKlXDwmsQV52xLIhBxEwHwYDVR0j BBgwFoAUgYRmmwGJt/q+BecAMloNdJV76ycwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUtMGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJi ZTI1LzAvODE4NDY2OUIwMTg5QjdGQUJFMDVFNzAwMzI1QTBENzQ5NTdCRUIyNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dZUm1td0dKdF9xLUJlY0FNbG9OZEpW NzZ5Yy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNDMxZTQyZS0w ZDdmLTQ0ZDAtODEzZi1iNWUzYTJhYmJlMjUvMC84MTg0NjY5QjAxODlCN0ZBQkUw NUU3MDAzMjVBMEQ3NDk1N0JFQjI3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVlVEQXgLkOm/psCLRrGg +LMSnHEJZI2i3/4gBnqsXEkRwjI/eryRMFSosXRVup7oKsf7H9p56qfZVIrH5rl+ Z3a9vwiy/niwPjzjzGErbzdBUKNnhn9mrgNB+F3mCd3Dp4bsx2jhv0sg7x13VB4L 5htGJNtOaiIhUarHl5x/nHE3uP8NSgiITI5zmyUhFH76OckWjWn/uphUk7ZH0Wtm D05eWI1VP47glSvwbfPrIQkXa7NqNS7ZQ/Sww7hVc54HR1Dly+5MkjoVOySbX4VV tHLDb+Dr/Aq6EaK1N4bDDUcejrliV4MXitJ1+LkPf9wr+AJlnahZs6vWEJLTHwmM 4g== -----END CERTIFICATE-----Generated at Mon Mar 2 10:54:08 2026 by rpki-client