$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft File: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft (raw, json) Hash identifier: N8E2qt/CRBMOfNophalzh4dv6m+jZo5IYQFsBmOCysg= Subject key identifier: 7D:98:26:45:1B:6B:94:84:74:36:6C:02:FD:25:48:00:12:06:C5:76 Authority key identifier: 40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 Certificate issuer: /CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Certificate serial: 26906369A0BC9D9C8FB052F440BA2D24CB99E037 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft Manifest number: 0267 Signing time: Sun 01 Mar 2026 21:35:18 +0000 Manifest this update: Sun 01 Mar 2026 21:30:18 +0000 Manifest next update: Mon 02 Mar 2026 22:51:18 +0000 Files and hashes: 1: 326131343a373538313a396632303a3a2f34342d3434203d3e20323135323838.roa (hash: Si3nvIvR6vlJSP9N899TEpLNTv8CH8Xf9C307NCghTQ=) 2: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl (hash: ADE3uTn6MunzozjzefnH3XnDVN9NLuZFwyaOwCXiWTw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:90:63:69:a0:bc:9d:9c:8f:b0:52:f4:40:ba:2d:24:cb:99:e0:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Validity Not Before: Mar 1 21:30:18 2026 GMT Not After : Mar 2 22:51:18 2026 GMT Subject: CN=7D9826451B6B948474366C02FD2548001206C576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:93:2f:6d:ad:0d:02:8c:f7:ce:a5:5a:ca:ef: 87:9f:7a:99:5f:05:1b:f0:4b:96:70:d1:f1:65:2f: cf:ff:73:e3:da:d9:f6:ec:fe:a6:4c:51:2f:57:1c: 90:80:a8:ef:b8:58:21:51:90:6a:7f:63:4f:60:a4: 60:84:3c:24:2e:ac:74:11:e2:32:09:d8:7f:6a:c9: 9c:17:94:ff:62:89:53:b2:4a:55:50:dd:7c:55:bc: ee:11:b3:02:08:a5:28:2b:4a:2f:cf:93:72:15:05: 5e:ec:cb:82:7e:26:de:db:d5:6d:05:a1:ba:80:80: 5a:95:fe:6a:fd:1e:5c:80:b1:cc:7b:70:6e:73:de: 6a:fe:73:2c:d7:83:00:09:43:9f:82:de:eb:fd:65: 34:6b:1d:4e:46:b1:45:65:e4:1d:4a:e4:0e:ef:2a: c2:70:53:bd:e3:cf:c6:eb:67:9a:4a:f6:6c:3b:ac: 0b:f3:d5:9a:11:73:cc:5b:ce:37:da:cc:c3:f2:14: 80:64:c5:a1:33:5a:9d:46:20:63:db:2c:d5:9e:ac: ab:47:ad:90:26:03:b2:3d:fb:27:4e:73:19:27:d5: 2e:43:ca:b1:c2:09:1d:e3:75:34:58:22:7e:ef:a1: ff:37:f2:02:81:75:1c:5a:aa:2d:95:cd:97:6c:b8: 0a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:98:26:45:1B:6B:94:84:74:36:6C:02:FD:25:48:00:12:06:C5:76 X509v3 Authority Key Identifier: keyid:40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:e1:61:89:a7:19:2f:00:b6:17:68:c5:71:1b:6a:13:f0:a2: cd:39:2f:4c:24:68:d3:bd:a5:5f:28:b3:ff:c6:68:f0:27:12: 11:09:fb:33:2d:5d:7f:31:c7:85:6b:fc:b7:18:09:fe:6d:c8: 59:76:c1:c4:8e:12:b5:30:f6:47:c9:21:74:2c:d5:5e:d2:a4: 4a:58:2b:ae:aa:9e:a1:1e:eb:75:dc:28:54:7d:34:05:b6:0d: d0:f1:65:2d:36:05:94:40:3d:96:ae:25:99:eb:cb:e9:a6:7e: 67:c9:00:f2:c8:87:15:b7:ba:3e:6c:d0:e1:97:b5:c6:30:ac: 9e:ad:23:f0:71:fe:54:0a:ab:79:a5:22:73:c1:31:5a:2f:83: 48:b5:bd:d6:19:ba:e0:3c:27:7e:90:bb:c6:30:9d:19:d0:b2: a5:bc:a2:2e:ca:0e:1f:8d:8a:e7:cd:a6:01:7a:a1:57:31:c5: ac:4b:17:54:35:4e:ae:8f:92:38:30:df:4e:d2:d7:1c:5b:5f: 25:f1:f8:7e:a9:8a:42:ac:dc:c6:ec:9f:af:0a:b3:04:6c:a6: 8d:09:7a:d1:72:f6:fc:89:45:06:e8:c3:ba:6f:d3:b2:ae:b0: 5b:b8:dc:01:1c:a0:ac:37:90:7e:b3:e5:b0:c4:1d:e5:be:c6: 32:4f:1d:1d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUJpBjaaC8nZyPsFL0QLotJMuZ4DcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBG RTIyMkJENjAeFw0yNjAzMDEyMTMwMThaFw0yNjAzMDIyMjUxMThaMDMxMTAvBgNV BAMTKDdEOTgyNjQ1MUI2Qjk0ODQ3NDM2NkMwMkZEMjU0ODAwMTIwNkM1NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7ky9trQ0CjPfOpVrK74efeplf BRvwS5Zw0fFlL8//c+Pa2fbs/qZMUS9XHJCAqO+4WCFRkGp/Y09gpGCEPCQurHQR 4jIJ2H9qyZwXlP9iiVOySlVQ3XxVvO4RswIIpSgrSi/Pk3IVBV7sy4J+Jt7b1W0F obqAgFqV/mr9HlyAscx7cG5z3mr+cyzXgwAJQ5+C3uv9ZTRrHU5GsUVl5B1K5A7v KsJwU73jz8brZ5pK9mw7rAvz1ZoRc8xbzjfazMPyFIBkxaEzWp1GIGPbLNWerKtH rZAmA7I9+ydOcxkn1S5DyrHCCR3jdTRYIn7vof838gKBdRxaqi2VzZdsuArDAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUfZgmRRtrlIR0NmwC/SVIABIGxXYwHwYDVR0j BBgwFoAUQFChe64cXzdj1Fo43P6s4P4iK9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzg2YjY1YjEtNDVlOS00ZmIyLWFkYzUtODdiYTcxMWUy MWI3LzEvNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBGRTIyMkJENi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC80MDUwQTE3QkFFMUM1RjM3NjNENDVBMzhE Q0ZFQUNFMEZFMjIyQkQ2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M4NmI2NWIxLTQ1ZTktNGZiMi1hZGM1LTg3YmE3MTFlMjFiNy8xLzQwNTBBMTdC QUUxQzVGMzc2M0Q0NUEzOERDRkVBQ0UwRkUyMjJCRDYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBi4WGJ pxkvALYXaMVxG2oT8KLNOS9MJGjTvaVfKLP/xmjwJxIRCfszLV1/MceFa/y3GAn+ bchZdsHEjhK1MPZHySF0LNVe0qRKWCuuqp6hHut13ChUfTQFtg3Q8WUtNgWUQD2W riWZ68vppn5nyQDyyIcVt7o+bNDhl7XGMKyerSPwcf5UCqt5pSJzwTFaL4NItb3W GbrgPCd+kLvGMJ0Z0LKlvKIuyg4fjYrnzaYBeqFXMcWsSxdUNU6uj5I4MN9O0tcc W18l8fh+qYpCrNzG7J+vCrMEbKaNCXrRcvb8iUUG6MO6b9OyrrBbuNwBHKCsN5B+ s+WwxB3lvsYyTx0d -----END CERTIFICATE-----Generated at Mon Mar 2 02:11:22 2026 by rpki-client