$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft File: E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft (raw, json) Hash identifier: mtz3BDUkCyQaAdwZHewyAoQJGKTADLrSdQ7CDNBXXTc= Subject key identifier: A3:E4:D8:59:35:52:4A:20:79:61:2E:41:05:10:2B:A8:47:58:FE:1A Authority key identifier: E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C Certificate issuer: /CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C Certificate serial: 0B87676CED3E942B46735A9B9065530EDE588473 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft Manifest number: 011E Signing time: Mon 02 Mar 2026 00:52:30 +0000 Manifest this update: Mon 02 Mar 2026 00:47:30 +0000 Manifest next update: Tue 03 Mar 2026 02:51:30 +0000 Files and hashes: 1: 326131343a373538313a333936323a3a2f34382d3634203d3e20313939373633.roa (hash: oCjl7TQd0xhHJ9B8MSi48PHfMmMZri62JgNd0y5lz+I=) 2: 326131343a373538313a333937373a3a2f34382d3634203d3e20313939373633.roa (hash: 6W8xvuJxWbwP3DdLZ6e8Sa+pGsBO2lzU710UJC28MHg=) 3: 326131343a373538313a333936313a3a2f34382d3634203d3e20313939373633.roa (hash: V25LiWzxXAuXeQVJTbroIsiNYHCj/akr9IIXebvCE7Q=) 4: 326131343a373538313a333936363a3a2f34382d3634203d3e20313939373633.roa (hash: +BDNAKrmKMibTT2xQwMz+K+qOmE3P6UuU3BvjMVQ0iI=) 5: 326131343a373538313a333966663a3a2f34382d3634203d3e20313939373633.roa (hash: aCq/jKA1GGay4DL6ZU284taMNq3/9u17cmIYZEHZP9Y=) 6: E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl (hash: gUx9zf9188rRmPwxPmHfoWye5dDTUVNpraK5NsOmFB8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 02:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:87:67:6c:ed:3e:94:2b:46:73:5a:9b:90:65:53:0e:de:58:84:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C Validity Not Before: Mar 2 00:47:30 2026 GMT Not After : Mar 3 02:51:30 2026 GMT Subject: CN=A3E4D85935524A2079612E4105102BA84758FE1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:53:eb:d8:db:74:3a:05:b3:99:cb:1c:c2:3a: 64:fd:62:e1:1a:80:fa:a7:bb:5f:98:b2:e3:8e:69: 26:8b:38:b8:ef:3d:2a:63:26:9b:db:5e:5f:dc:66: ed:ca:f2:d6:76:1f:22:b5:1c:87:00:d5:8f:52:ff: f1:62:0f:d7:89:cf:27:78:ae:5a:bc:7e:45:be:db: 0d:a6:74:0d:c2:5b:13:c1:7c:d5:51:5c:db:2e:ea: d9:eb:3d:e2:ac:b6:a3:2b:c6:e4:ea:80:85:f2:4b: 1c:90:a0:84:12:44:bf:4b:0e:73:08:6e:64:fe:e3: 77:b0:8c:19:62:ce:a4:fd:2f:55:d2:f5:22:8b:ca: 46:6e:17:22:22:fd:46:38:85:c2:6a:51:0d:1c:1e: b6:ce:93:1b:6d:1d:a3:6d:f4:32:81:fe:a9:4a:41: 28:3e:ca:29:02:59:01:00:4c:31:64:5c:6e:8f:d5: 1a:8d:f7:4f:c5:c1:e6:8b:ca:96:fb:03:7b:14:01: e7:1d:47:73:e8:70:1b:15:fc:86:bb:ed:7e:f7:1e: e6:e0:9e:29:3f:a4:92:20:a6:1c:2b:c5:9e:c3:d9: 49:9f:bb:c4:fc:f3:74:60:4a:7e:3d:79:43:1b:fd: 5c:52:f9:fd:dc:1c:d7:71:8b:cb:8d:47:df:98:0f: 80:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E4:D8:59:35:52:4A:20:79:61:2E:41:05:10:2B:A8:47:58:FE:1A X509v3 Authority Key Identifier: keyid:E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:86:17:a7:89:09:e0:50:c2:57:20:df:e0:e2:10:8c:8f:8e: 22:44:11:c8:c9:52:c0:63:36:50:49:82:4e:88:7c:2c:b0:44: c6:ba:39:4c:09:92:b3:2a:cf:8d:0f:1d:5c:ba:66:55:24:ed: e7:c6:4a:4e:86:f6:ca:4d:f9:da:6c:05:75:4e:36:8d:27:eb: b6:85:50:ef:96:c0:5f:a8:36:57:e2:80:b1:ce:85:1c:82:d2: ac:21:7c:2b:c6:80:9c:9f:02:37:0a:ac:31:75:5c:3f:82:55: 55:f0:94:5a:0c:c7:4a:b9:76:e3:41:3f:78:6f:cb:4a:0e:f2: 90:e9:5b:cd:79:57:2d:ad:0b:2e:aa:97:84:44:e1:91:f9:b3: 26:1d:c3:90:f9:b4:c3:05:e0:98:b5:e6:ab:08:b7:f1:77:ab: b3:fe:3d:d4:84:46:31:d8:08:95:c2:4f:45:52:c8:93:2c:21: 04:10:fc:be:2c:84:a1:c9:f3:5b:25:a8:a9:f4:4a:de:51:9e: d1:cf:89:93:fa:ab:6b:c6:a7:ea:30:1f:7f:9d:7f:31:10:18: 14:a4:40:b4:89:85:be:4e:51:a4:36:9c:af:e4:f0:69:0a:65: 30:72:cb:41:38:19:ce:1f:f9:ef:27:41:f7:ca:cc:d5:09:86: 61:b4:82:9f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUC4dnbO0+lCtGc1qbkGVTDt5YhHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5RjkxNUQ4NkJCOUYxM0QwRjIyOUNBNzhDRDZEOUYz RUFCQ0Y3QzAeFw0yNjAzMDIwMDQ3MzBaFw0yNjAzMDMwMjUxMzBaMDMxMTAvBgNV BAMTKEEzRTREODU5MzU1MjRBMjA3OTYxMkU0MTA1MTAyQkE4NDc1OEZFMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwU+vY23Q6BbOZyxzCOmT9YuEa gPqnu1+YsuOOaSaLOLjvPSpjJpvbXl/cZu3K8tZ2HyK1HIcA1Y9S//FiD9eJzyd4 rlq8fkW+2w2mdA3CWxPBfNVRXNsu6tnrPeKstqMrxuTqgIXySxyQoIQSRL9LDnMI bmT+43ewjBlizqT9L1XS9SKLykZuFyIi/UY4hcJqUQ0cHrbOkxttHaNt9DKB/qlK QSg+yikCWQEATDFkXG6P1RqN90/FweaLypb7A3sUAecdR3PocBsV/Ia77X73Hubg nik/pJIgphwrxZ7D2Umfu8T883RgSn49eUMb/VxS+f3cHNdxi8uNR9+YD4A1AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUo+TYWTVSSiB5YS5BBRArqEdY/howHwYDVR0j BBgwFoAU6J+RXYa7nxPQ8inKeM1tnz6rz3wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzU4MzZlNjAtNmE5Mi00N2VmLTliOWItOTJhODRkNmQz NWJhLzEvRTg5RjkxNUQ4NkJCOUYxM0QwRjIyOUNBNzhDRDZEOUYzRUFCQ0Y3Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9FODlGOTE1RDg2QkI5RjEzRDBGMjI5Q0E3 OENENkQ5RjNFQUJDRjdDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M1ODM2ZTYwLTZhOTItNDdlZi05YjliLTkyYTg0ZDZkMzViYS8xL0U4OUY5MTVE ODZCQjlGMTNEMEYyMjlDQTc4Q0Q2RDlGM0VBQkNGN0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBphhen iQngUMJXIN/g4hCMj44iRBHIyVLAYzZQSYJOiHwssETGujlMCZKzKs+NDx1cumZV JO3nxkpOhvbKTfnabAV1TjaNJ+u2hVDvlsBfqDZX4oCxzoUcgtKsIXwrxoCcnwI3 CqwxdVw/glVV8JRaDMdKuXbjQT94b8tKDvKQ6VvNeVctrQsuqpeEROGR+bMmHcOQ +bTDBeCYtearCLfxd6uz/j3UhEYx2AiVwk9FUsiTLCEEEPy+LIShyfNbJaip9Ere UZ7Rz4mT+qtrxqfqMB9/nX8xEBgUpEC0iYW+TlGkNpyv5PBpCmUwcstBOBnOH/nv J0H3yszVCYZhtIKf -----END CERTIFICATE-----Generated at Mon Mar 2 13:50:08 2026 by rpki-client