$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft File: 926CB33722A3493216283DC80CAE0EE9D58874F2.mft (raw, json) Hash identifier: XpwBNcfilUWCEKdM60Rg/9z8FSQvQ5wGXYRe/qDDxeI= Subject key identifier: F4:DA:C5:54:14:13:C0:7A:CC:23:98:BB:38:5B:E6:78:63:42:82:07 Authority key identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2 Certificate issuer: /CN=926cb33722a3493216283dc80cae0ee9d58874f2 Certificate serial: 3720619A71BE80C7E665733918E620E77E124D3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft Manifest number: 061A Signing time: Sun 01 Mar 2026 20:05:40 +0000 Manifest this update: Sun 01 Mar 2026 20:00:40 +0000 Manifest next update: Mon 02 Mar 2026 20:42:40 +0000 Files and hashes: 1: FF0595CB477C33B6B94C7E477213C842A6067D6B.cer (hash: kkkt+CdVzC7OjY449gnOlMwgGCN8KNpK56RTONBzmFY=) 2: 323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa (hash: m4JDjuZJDmmChmmlFAMJ8Bw8b2ZsdAh0iDbkWo79PPM=) 3: 323030313a3637633a313139303a626162653a3a2f36342d3634203d3e203537373832.roa (hash: Pxf4B7ZT6gV1TWVd3qoH34uVviW8HXPSyFTn+jTKS9w=) 4: 926CB33722A3493216283DC80CAE0EE9D58874F2.crl (hash: TvtubMaaH1FaEQbNbygqAziSLFrHH6nAvPKtXOkOtj0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:20:61:9a:71:be:80:c7:e6:65:73:39:18:e6:20:e7:7e:12:4d:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=926cb33722a3493216283dc80cae0ee9d58874f2 Validity Not Before: Mar 1 20:00:40 2026 GMT Not After : Mar 2 20:42:40 2026 GMT Subject: CN=F4DAC5541413C07ACC2398BB385BE67863428207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:46:36:64:6c:fb:e3:0f:1a:1e:b5:c1:72:9d: 02:08:a0:2b:84:33:3a:cf:78:ab:6b:20:2f:8a:ff: 7d:30:db:9a:d1:c1:3a:22:ab:a6:58:f4:d9:3e:9f: aa:99:81:36:09:3c:84:92:c7:5e:dc:5a:28:3e:b7: 4a:b1:d7:6f:77:29:de:be:77:24:ab:ac:9b:ca:89: ce:95:9d:7d:70:3a:ff:28:a2:89:34:2c:b8:56:74: 44:ff:ec:c9:5a:66:ca:f9:1d:07:7b:39:e5:5e:55: b5:31:27:4a:60:23:27:99:f5:2e:d7:6a:be:57:f5: 4d:f3:82:23:dc:c8:eb:d0:98:c9:e4:b8:c6:b0:3b: 6e:c3:14:22:da:b6:63:90:c5:a5:c7:bb:02:24:c4: 73:60:f9:71:c9:a1:23:e3:ad:fc:b6:bb:8d:3b:9b: 3c:7a:89:62:5c:93:6a:cb:0d:a0:8d:75:31:01:2e: 3a:41:61:a7:bd:fd:a5:be:a9:3b:2c:1f:1d:ef:b6: d3:26:5b:3b:a5:61:54:59:29:fe:e0:3a:31:48:8d: 2e:b3:b2:5b:ad:32:67:fc:fb:34:d0:48:89:95:bf: 97:2f:60:6c:0f:5d:20:62:f3:fa:ff:0e:b5:5b:83: f8:59:45:81:6e:a5:2e:4c:f4:9b:c7:28:af:be:b2: 13:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:DA:C5:54:14:13:C0:7A:CC:23:98:BB:38:5B:E6:78:63:42:82:07 X509v3 Authority Key Identifier: keyid:92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:5c:c8:ef:a1:28:f6:5a:b4:72:19:23:a6:9d:2c:0b:5d:2e: 42:bd:e7:7a:ff:0d:fc:8d:8c:4f:68:c6:ce:25:35:1c:ac:5e: ed:60:01:37:74:ef:73:ef:13:93:6d:d1:89:55:ce:05:d8:0a: 1b:a3:50:05:7e:27:2f:14:d5:fb:f2:b9:4a:fa:ab:fe:3f:0a: 52:26:4f:a8:7d:f1:4f:e7:0f:b6:52:a3:d6:e2:27:e2:4e:d4: 45:56:44:30:79:f3:af:9d:b8:48:3b:4d:aa:c3:c4:d1:36:42: 13:f6:3d:a0:45:e3:d8:78:6b:64:14:6b:20:f9:72:6c:2c:e8: 87:9c:8e:4b:d9:25:96:6e:72:48:bc:8e:6d:0a:57:50:31:7e: f4:42:ef:d9:66:16:c2:a3:55:cc:3c:e7:74:c8:7c:ce:c9:72: d1:86:72:48:36:d0:35:94:0a:55:a9:87:15:31:f4:ac:af:4c: 2b:91:5b:23:87:5e:f5:17:c6:5d:dc:e7:46:de:f9:2e:88:3b: 95:2a:ff:4d:a6:81:bb:ae:41:3c:79:e6:8b:a7:cd:6d:ed:cd: fd:22:24:51:4e:3f:31:66:6a:bc:75:b5:d0:40:3d:5b:a9:2a: f6:89:12:e6:b1:1d:35:27:bc:69:37:6a:42:c6:d9:13:c4:99: 16:f7:2d:83 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNyBhmnG+gMfmZXM5GOYg534STTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI2Y2IzMzcyMmEzNDkzMjE2MjgzZGM4MGNhZTBlZTlk NTg4NzRmMjAeFw0yNjAzMDEyMDAwNDBaFw0yNjAzMDIyMDQyNDBaMDMxMTAvBgNV BAMTKEY0REFDNTU0MTQxM0MwN0FDQzIzOThCQjM4NUJFNjc4NjM0MjgyMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeRjZkbPvjDxoetcFynQIIoCuE MzrPeKtrIC+K/30w25rRwToiq6ZY9Nk+n6qZgTYJPISSx17cWig+t0qx1293Kd6+ dySrrJvKic6VnX1wOv8oook0LLhWdET/7MlaZsr5HQd7OeVeVbUxJ0pgIyeZ9S7X ar5X9U3zgiPcyOvQmMnkuMawO27DFCLatmOQxaXHuwIkxHNg+XHJoSPjrfy2u407 mzx6iWJck2rLDaCNdTEBLjpBYae9/aW+qTssHx3vttMmWzulYVRZKf7gOjFIjS6z slutMmf8+zTQSImVv5cvYGwPXSBi8/r/DrVbg/hZRYFupS5M9JvHKK++shMLAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU9NrFVBQTwHrMI5i7OFvmeGNCggcwHwYDVR0j BBgwFoAUkmyzNyKjSTIWKD3IDK4O6dWIdPIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NlMDBjZjktMDRhNS00M2QxLThiODktZWRmYTYwY2Q4 ZDRhLzIvOTI2Q0IzMzcyMkEzNDkzMjE2MjgzREM4MENBRTBFRTlENTg4NzRGMi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2tteXpOeUtqU1RJV0tEM0lESzRPNmRX SWRQSS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jY2UwMGNmOS0w NGE1LTQzZDEtOGI4OS1lZGZhNjBjZDhkNGEvMi85MjZDQjMzNzIyQTM0OTMyMTYy ODNEQzgwQ0FFMEVFOUQ1ODg3NEYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGFzI76Eo9lq0chkjpp0s C10uQr3nev8N/I2MT2jGziU1HKxe7WABN3Tvc+8Tk23RiVXOBdgKG6NQBX4nLxTV +/K5Svqr/j8KUiZPqH3xT+cPtlKj1uIn4k7URVZEMHnzr524SDtNqsPE0TZCE/Y9 oEXj2HhrZBRrIPlybCzoh5yOS9kllm5ySLyObQpXUDF+9ELv2WYWwqNVzDzndMh8 zsly0YZySDbQNZQKVamHFTH0rK9MK5FbI4de9RfGXdznRt75Log7lSr/TaaBu65B PHnmi6fNbe3N/SIkUU4/MWZqvHW10EA9W6kq9okS5rEdNSe8aTdqQsbZE8SZFvct gw== -----END CERTIFICATE-----Generated at Mon Mar 2 01:50:32 2026 by rpki-client