$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft File: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft (raw, json) Hash identifier: 7oM3rDzxgPsF2cn4nnmg4al9LTF+WQVZ6EpgKF9VFeI= Subject key identifier: 2C:42:4D:6C:85:DE:38:80:E6:14:00:B7:39:84:C0:F6:5D:C7:25:BF Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB Certificate issuer: /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Certificate serial: 5825A3E2902883F116D20AD7C1CB3895BCF76A7D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft Manifest number: 0349 Signing time: Sun 01 Mar 2026 18:32:08 +0000 Manifest this update: Sun 01 Mar 2026 18:27:08 +0000 Manifest next update: Mon 02 Mar 2026 21:26:08 +0000 Files and hashes: 1: 326131343a373538313a643130303a3a2f34302d3438203d3e203533363637.roa (hash: e+p8+Sw9X8S3Ty3gF9pg+LdvDbV5qMXAYBBthQD4LPE=) 2: 326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa (hash: OTYsTfrglFs/JKFj7RJtAXdrMe1OUcjbc3WSXqeD0dk=) 3: 326131343a373538313a643130303a3a2f34302d3430203d3e203533363637.roa (hash: M0+yHEN3VX8K+aVDmpusml/7Hx8dbBnadNDMaFbGOzQ=) 4: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl (hash: RdnI9dZW/c7bsthUA1tP7lKuniIP+wyB0cedJmC8VqI=) 5: 326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa (hash: DvQHKT6M+fkiG6o9KW4wBm0yNbqCXWjg78L/cu4BiJ0=) 6: 326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa (hash: BL4+PYIdcLs3fiOkkamkg94lgyO9kcRHp6ACoQUQ5y8=) 7: 326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa (hash: R4oy1L8+rEt1QdmoGVV7PiYt423B/xK5i6kPhc7W9aI=) 8: 326131343a373538313a643230303a3a2f34302d3430203d3e203533363637.roa (hash: KPVNDBydB4lEOCddQAWiNda/rm6IVb4G2i+sUeOhrYg=) 9: 326131343a373538313a643330303a3a2f34302d3430203d3e2037353435.roa (hash: 9phDdz/jhh9vxdEc5WXHXIl+cdnJzAyh/6SdvyVejiI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 21:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:25:a3:e2:90:28:83:f1:16:d2:0a:d7:c1:cb:38:95:bc:f7:6a:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Validity Not Before: Mar 1 18:27:08 2026 GMT Not After : Mar 2 21:26:08 2026 GMT Subject: CN=2C424D6C85DE3880E61400B73984C0F65DC725BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:06:be:b8:d3:ed:4b:02:15:bb:14:5e:15:11: 9a:b5:6a:a9:d5:1c:60:57:27:1f:45:a1:4c:4e:a2: d6:f2:33:7b:d0:b4:13:6b:27:24:68:9f:cd:5a:bd: 1e:27:72:78:c1:7f:b6:1b:48:fa:da:07:47:cb:e5: 19:f7:89:80:c0:d8:1f:7a:1e:51:bf:b9:7c:8f:73: be:b5:d2:1d:8f:f5:46:27:08:27:89:fa:c6:bc:3d: 17:3a:f3:05:67:d2:db:37:94:40:19:b9:fe:28:61: 29:47:46:fd:09:04:fd:3a:0f:4f:5b:f2:04:8a:2e: fe:87:eb:68:61:00:69:62:73:04:17:a1:f2:25:fa: 6e:40:d0:1d:87:86:45:4a:3e:2a:03:0b:f3:99:5c: bc:6d:4b:d9:cd:68:48:5e:96:24:d3:23:14:f3:66: 18:6f:22:e3:1e:fd:a3:af:31:96:e7:34:f0:ab:1d: 83:f8:f5:81:9a:db:68:32:74:d6:09:05:a0:c8:d9: cf:87:e9:96:7c:32:ec:06:3e:74:2f:ee:2c:ac:0e: 4a:e6:da:a9:f4:5d:33:61:6b:c5:c2:67:19:72:35: e4:31:c2:dd:1a:c5:42:bd:56:80:57:63:d7:31:ac: 3f:17:3d:bd:41:4c:ef:b4:a6:68:d4:ca:62:7e:08: 35:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:42:4D:6C:85:DE:38:80:E6:14:00:B7:39:84:C0:F6:5D:C7:25:BF X509v3 Authority Key Identifier: keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b2:c6:ff:a6:50:85:b9:de:fa:db:6b:45:f6:09:9a:00:03: c2:9c:80:e2:bb:3f:cf:50:74:8c:17:98:76:bb:c0:51:74:21: 52:9d:1b:4f:a2:6b:17:ca:78:6b:f1:89:26:8c:e4:d7:e4:f7: a0:7b:94:21:28:21:82:fd:94:f8:47:b7:ec:85:ea:2d:3a:92: 4c:88:fc:82:77:33:df:50:02:01:0a:e9:24:1c:30:5d:c5:77: 0f:63:ea:e5:e7:fc:42:b4:56:23:a8:6d:b2:80:45:75:d4:b4: fe:12:34:39:09:76:8f:4a:7d:e5:ad:51:4c:78:ee:37:1d:d3: 5d:fd:9a:06:1f:8c:6e:70:cf:9f:3b:58:be:78:28:50:3e:80: e2:5f:e5:65:26:f2:be:22:01:ed:32:aa:e1:59:e9:7f:94:1b: 4f:b6:7c:74:8c:2c:6a:e6:2d:ab:70:a6:30:37:ea:24:b9:a5: ad:2d:ba:d6:df:29:2c:f2:31:5e:9f:23:99:83:e7:e9:57:86: 1e:59:71:28:2b:c2:59:7b:98:8b:40:59:2e:03:38:a7:49:39: d5:62:40:7e:1c:6e:4d:52:05:b5:c4:77:11:0a:b3:4e:7e:03: f1:c8:b7:f1:5f:7e:7b:b0:9f:c1:e6:9f:30:03:04:43:2b:44: 63:de:a2:7b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUWCWj4pAog/EW0grXwcs4lbz3an0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFC RUM4OTBCQjAeFw0yNjAzMDExODI3MDhaFw0yNjAzMDIyMTI2MDhaMDMxMTAvBgNV BAMTKDJDNDI0RDZDODVERTM4ODBFNjE0MDBCNzM5ODRDMEY2NURDNzI1QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Br640+1LAhW7FF4VEZq1aqnV HGBXJx9FoUxOotbyM3vQtBNrJyRon81avR4ncnjBf7YbSPraB0fL5Rn3iYDA2B96 HlG/uXyPc7610h2P9UYnCCeJ+sa8PRc68wVn0ts3lEAZuf4oYSlHRv0JBP06D09b 8gSKLv6H62hhAGlicwQXofIl+m5A0B2HhkVKPioDC/OZXLxtS9nNaEheliTTIxTz ZhhvIuMe/aOvMZbnNPCrHYP49YGa22gydNYJBaDI2c+H6ZZ8MuwGPnQv7iysDkrm 2qn0XTNha8XCZxlyNeQxwt0axUK9VoBXY9cxrD8XPb1BTO+0pmjUymJ+CDU3AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQULEJNbIXeOIDmFAC3OYTA9l3HJb8wHwYDVR0j BBgwFoAUH0yCgnaplmhlqytZUz0csb7IkLswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjU5YzEwNmMtNTNiNC00ZTkyLTlmYmEtZDYwODI3YjVi ZGI4LzAvMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFCRUM4OTBCQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xRjRDODI4Mjc2QTk5NjY4NjVBQjJCNTk1 MzNEMUNCMUJFQzg5MEJCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I1OWMxMDZjLTUzYjQtNGU5Mi05ZmJhLWQ2MDgyN2I1YmRiOC8wLzFGNEM4Mjgy NzZBOTk2Njg2NUFCMkI1OTUzM0QxQ0IxQkVDODkwQkIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAsssb/ plCFud7622tF9gmaAAPCnIDiuz/PUHSMF5h2u8BRdCFSnRtPomsXynhr8YkmjOTX 5Pege5QhKCGC/ZT4R7fsheotOpJMiPyCdzPfUAIBCukkHDBdxXcPY+rl5/xCtFYj qG2ygEV11LT+EjQ5CXaPSn3lrVFMeO43HdNd/ZoGH4xucM+fO1i+eChQPoDiX+Vl JvK+IgHtMqrhWel/lBtPtnx0jCxq5i2rcKYwN+okuaWtLbrW3yks8jFenyOZg+fp V4YeWXEoK8JZe5iLQFkuAzinSTnVYkB+HG5NUgW1xHcRCrNOfgPxyLfxX357sJ/B 5p8wAwRDK0Rj3qJ7 -----END CERTIFICATE-----Generated at Mon Mar 2 12:37:06 2026 by rpki-client