$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft File: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json) Hash identifier: V/RIBDNrnUD4WpeFyzTszcWgj3ak3NY+H8DHowUX2PU= Subject key identifier: 64:FF:16:6F:D5:FE:A2:ED:41:BD:9C:72:86:C5:EA:02:A2:7C:71:E7 Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Certificate serial: 77718BFC73D0E872069D0B1C05885935B6B5F98B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft Manifest number: 0552 Signing time: Sun 01 Mar 2026 13:01:43 +0000 Manifest this update: Sun 01 Mar 2026 12:56:43 +0000 Manifest next update: Mon 02 Mar 2026 16:13:43 +0000 Files and hashes: 1: 36322e3131322e3134342e302f32302d3230203d3e203539363432.roa (hash: hNXCqst3dZC+Dp3skkO26cOwh1zWEwx2n+JeuoU1IgU=) 2: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: qxlkfW/nLMV9I5WoI6HQ89q00naILT20Rguml63Zf0A=) 3: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (hash: NPxcG44HSvUhEjS0S2kkms3rMNVlot0JsRdIfylKbjg=) 4: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: OKc3uZvr3kmY38TGv/j5cCd/d8TD6IBU2hGWJY9u+K0=) 5: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: X+PLwzsRRQMgaM/TWKrSkseThdECGWKV7QbjrMlPn80=) 6: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: oQj2no095+LyjZGzWOfw+sSJOW/7fRxpgUOPswu5nqM=) 7: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: hY/iIpaGanxmxatebFYi3ijTkZjHjUc/Iwjsijc0S+E=) 8: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: qGNft1uCzkGwuPJH7iDQ4xUhWrhNnduWexIhT+DgvI8=) 9: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: e67Gw7JLSS7QbdRGuvfG/1ddATc2PAJ83LHbVf7SB9Q=) 10: 36322e3131322e3134342e302f32302d3234203d3e203230333236.roa (hash: PvFG9BZ+YdbKPRfUC/0dM3w7V209DRWmI/bk8VoBnFU=) 11: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: DuCHe81tO8TVOKBTNFQCS5fRuYDjbGZfxshPpJZXNzc=) 12: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: GCjCQc0vdu8E+NZi5emgx2vW0PKbTzGL5UYc+2R4voE=) 13: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: W95e9h2ypKBcN51G9gRI82wozQL8rXCLvGb2mHpv6bk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 16:13:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:71:8b:fc:73:d0:e8:72:06:9d:0b:1c:05:88:59:35:b6:b5:f9:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Validity Not Before: Mar 1 12:56:43 2026 GMT Not After : Mar 2 16:13:43 2026 GMT Subject: CN=64FF166FD5FEA2ED41BD9C7286C5EA02A27C71E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:07:f3:09:f6:ef:1d:97:b5:b5:d9:d2:44:78: 11:09:0d:72:8d:e9:c7:97:35:2a:eb:1c:e2:38:bf: 78:cd:ae:4c:e8:2a:8c:eb:25:37:3b:94:7b:5a:80: ee:1b:e7:09:9d:78:d4:5a:8a:88:94:77:ad:f0:4f: f7:7c:81:95:5f:fd:41:ee:ba:51:0f:e4:4b:9d:a8: ec:c5:91:c4:0f:65:12:da:32:32:2e:d9:e3:1e:04: 1c:31:64:a1:1d:fd:d7:02:28:00:80:3b:66:df:49: a9:7f:dd:6e:2a:0a:91:74:92:8e:3b:37:1a:c2:a4: 42:55:2a:11:b2:72:e2:0b:83:cb:0f:40:48:28:c6: f8:46:b9:cd:32:2e:2b:ec:da:e1:6f:a7:bc:75:f1: ff:83:c9:05:d3:31:71:c8:13:2d:29:a3:49:18:2e: c9:5d:2c:61:a4:68:3b:54:a1:c9:eb:e1:60:9a:7e: 8f:cd:d1:d4:3e:27:bc:42:52:08:61:0c:7f:11:f6: 2c:16:76:ca:1b:91:10:5c:f2:d1:01:fc:33:57:a0: 84:25:c6:34:a4:4f:94:9b:77:c4:eb:13:c0:82:91: 2e:1e:32:78:d5:8a:76:25:73:3e:8b:71:f2:26:f2: bf:0c:e0:31:e5:66:c0:0d:00:21:30:57:3e:03:62: 2c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FF:16:6F:D5:FE:A2:ED:41:BD:9C:72:86:C5:EA:02:A2:7C:71:E7 X509v3 Authority Key Identifier: keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:06:0e:8a:03:6c:fc:a3:e5:eb:58:57:88:a1:29:96:19:f9: 62:ef:d9:cc:f1:9d:24:37:67:98:aa:a3:eb:d4:03:37:2d:aa: 7e:06:93:ac:25:b0:4a:f8:84:ab:57:9a:de:66:9c:4f:a5:fe: e0:4b:b3:79:c7:9d:14:e0:80:e8:43:48:f0:51:ea:71:cb:27: 7f:21:72:76:06:7d:91:88:f9:fd:f3:7e:1c:7c:47:75:20:d9: f2:35:39:33:b8:f1:7e:81:c1:21:03:b4:f3:24:58:32:c2:1f: b8:2e:d8:7d:f0:22:06:6c:48:ec:b6:29:f4:41:dd:ba:eb:2f: 63:56:df:08:0a:66:47:a8:c8:86:a2:f8:70:22:ae:24:b6:d9: f8:b0:c6:9a:af:64:a0:22:a0:0f:a1:7b:f0:df:3b:20:b8:9d: 48:8a:d9:7f:65:79:76:3f:53:ad:fa:f1:e7:85:3d:28:60:7e: 9d:48:37:86:6d:1d:56:b4:64:ef:bb:55:d0:0b:48:eb:5c:3f: 4e:14:30:fd:bd:22:18:07:07:18:7d:77:d8:48:b6:02:b1:a3: f2:15:b7:2a:2b:c9:88:e0:3a:4d:91:7d:61:2c:38:ec:ab:10: de:9c:37:96:cb:1d:1b:e4:4e:d8:d8:33:60:0a:bb:4c:9a:3d: 75:af:90:48 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUd3GL/HPQ6HIGnQscBYhZNba1+YswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3 MDgzZWQ0ZDAeFw0yNjAzMDExMjU2NDNaFw0yNjAzMDIxNjEzNDNaMDMxMTAvBgNV BAMTKDY0RkYxNjZGRDVGRUEyRUQ0MUJEOUM3Mjg2QzVFQTAyQTI3QzcxRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOB/MJ9u8dl7W12dJEeBEJDXKN 6ceXNSrrHOI4v3jNrkzoKozrJTc7lHtagO4b5wmdeNRaioiUd63wT/d8gZVf/UHu ulEP5EudqOzFkcQPZRLaMjIu2eMeBBwxZKEd/dcCKACAO2bfSal/3W4qCpF0ko47 NxrCpEJVKhGycuILg8sPQEgoxvhGuc0yLivs2uFvp7x18f+DyQXTMXHIEy0po0kY LsldLGGkaDtUocnr4WCafo/N0dQ+J7xCUghhDH8R9iwWdsobkRBc8tEB/DNXoIQl xjSkT5Sbd8TrE8CCkS4eMnjVinYlcz6LcfIm8r8M4DHlZsANACEwVz4DYizhAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUZP8Wb9X+ou1BvZxyhsXqAqJ8cecwHwYDVR0j BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3 ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD RDdVMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjMxNzY4ZC00 MmIxLTRlOTItYjgzZi1iZWY3ZWUwMTc4MTMvMC85RjBEMjRDODU1RUVFMDBGRTRB QkYzOTAzQzZFOEZDQzcwODNFRDRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADAYOigNs/KPl61hXiKEp lhn5Yu/ZzPGdJDdnmKqj69QDNy2qfgaTrCWwSviEq1ea3macT6X+4EuzecedFOCA 6ENI8FHqccsnfyFydgZ9kYj5/fN+HHxHdSDZ8jU5M7jxfoHBIQO08yRYMsIfuC7Y ffAiBmxI7LYp9EHduusvY1bfCApmR6jIhqL4cCKuJLbZ+LDGmq9koCKgD6F78N87 ILidSIrZf2V5dj9Trfrx54U9KGB+nUg3hm0dVrRk77tV0AtI61w/ThQw/b0iGAcH GH132Ei2ArGj8hW3KivJiOA6TZF9YSw47KsQ3pw3lssdG+RO2NgzYAq7TJo9da+Q SA== -----END CERTIFICATE-----Generated at Mon Mar 2 03:23:37 2026 by rpki-client