$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: jQBn3sF0IUsVN/eA/bdqBwQoU/tNWaVg0CjhjctIKYY= Subject key identifier: 76:99:CB:30:20:BC:C5:14:A9:65:97:8C:55:DF:A9:E9:20:1F:D2:5A Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 41509C09BCAD63D0868E1A238869E8257BF07046 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 038A Signing time: Sun 01 Mar 2026 14:01:42 +0000 Manifest this update: Sun 01 Mar 2026 13:56:42 +0000 Manifest next update: Mon 02 Mar 2026 14:14:42 +0000 Files and hashes: 1: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=) 2: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=) 3: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=) 4: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=) 5: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=) 6: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=) 7: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: lmgWHc3nRBr11xo/kZOSwYuH7lAJroSCOT01OsHyElI=) 8: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=) 9: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=) 10: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=) 11: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=) 12: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=) 13: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=) 14: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=) 15: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=) 16: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=) 17: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 14:14:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:50:9c:09:bc:ad:63:d0:86:8e:1a:23:88:69:e8:25:7b:f0:70:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Mar 1 13:56:42 2026 GMT Not After : Mar 2 14:14:42 2026 GMT Subject: CN=7699CB3020BCC514A965978C55DFA9E9201FD25A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8e:46:78:a3:0f:6d:10:89:6a:da:d7:f5:c6: 50:bb:1d:77:96:ff:d8:6c:c1:a7:6f:57:2e:62:78: 09:f3:44:69:7c:f4:b7:e8:28:15:e7:e0:ce:fd:34: 0d:ad:bc:6e:ff:f9:07:6e:6b:d5:a8:1e:d9:48:ce: 2b:75:97:00:e1:97:36:ba:6a:4a:55:c5:d2:1e:bd: a9:e8:7d:7f:aa:f0:20:73:68:a4:cd:10:8b:89:9b: f9:f8:90:d4:6f:c9:e2:60:6f:0e:55:f8:40:85:3c: 19:d1:2a:02:b7:12:86:03:95:34:2d:0e:48:d2:89: 97:94:bd:d2:5d:c5:5a:4e:c7:7e:b7:5e:6d:3b:cc: a1:84:da:71:7e:e3:97:d5:31:ce:83:fa:37:e9:1f: 24:58:88:ca:1a:98:9d:54:0b:2b:63:86:72:a7:74: c1:7f:1b:6c:7d:37:ab:55:e5:01:2e:bd:ae:e9:f7: af:ef:c3:3d:67:dd:fa:a8:d4:41:ae:b8:8e:11:ca: fb:2d:40:43:04:84:75:d5:92:76:56:9d:f4:a4:bd: 3a:a4:8a:c6:32:13:be:0b:3a:80:bb:26:02:0d:0a: 79:e2:b5:eb:ad:af:c4:b4:c0:b8:e0:c6:b9:13:39: 10:47:b5:58:26:76:ca:be:c3:e2:72:19:b9:fd:c5: e6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:99:CB:30:20:BC:C5:14:A9:65:97:8C:55:DF:A9:E9:20:1F:D2:5A X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:5a:bd:3d:a6:ea:e8:94:f3:b6:0c:5f:c1:95:e5:ad:8c:a8: a7:19:af:0a:0b:fa:60:d8:34:41:b4:d3:15:20:c9:4d:80:05: 99:56:a5:31:7b:b8:cd:d7:60:ef:df:e0:51:f9:f4:1a:ad:32: 22:8f:aa:66:3c:08:92:59:68:c3:dd:13:16:9c:57:c6:a9:5c: f0:14:1e:44:92:63:30:d1:e2:2f:75:27:4a:99:b7:c3:73:b4: 98:31:35:c8:7e:c1:a1:ff:66:71:8c:11:02:aa:17:fe:ea:90: e8:82:1a:21:1e:78:85:4d:ba:6b:5c:fd:44:57:2d:23:28:ee: 1f:db:f0:bd:cc:46:70:6c:2d:68:bd:f3:59:b1:22:60:20:59: fd:18:ec:ab:2b:8c:63:0e:97:c7:1b:71:07:61:29:a5:56:5b: 63:13:a2:52:e0:7e:25:d8:4e:f8:4a:41:64:19:87:86:f5:82: 36:96:5a:e1:a6:41:4b:84:45:21:d4:72:ea:3d:c1:02:7f:5e: 44:af:aa:36:32:ab:42:26:89:3d:12:69:17:7b:71:3a:b7:b6: 3e:82:5e:81:0a:33:da:d1:e5:08:88:17:6e:b7:12:bb:e7:55: a4:85:8f:fe:f1:a6:a5:bc:60:c0:38:55:33:f6:6b:9d:4b:a1: 60:b3:c1:5b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUQVCcCbytY9CGjhojiGnoJXvwcEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNjAzMDExMzU2NDJaFw0yNjAzMDIxNDE0NDJaMDMxMTAvBgNV BAMTKDc2OTlDQjMwMjBCQ0M1MTRBOTY1OTc4QzU1REZBOUU5MjAxRkQyNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9jkZ4ow9tEIlq2tf1xlC7HXeW /9hswadvVy5ieAnzRGl89LfoKBXn4M79NA2tvG7/+Qdua9WoHtlIzit1lwDhlza6 akpVxdIevanofX+q8CBzaKTNEIuJm/n4kNRvyeJgbw5V+ECFPBnRKgK3EoYDlTQt DkjSiZeUvdJdxVpOx363Xm07zKGE2nF+45fVMc6D+jfpHyRYiMoamJ1UCytjhnKn dMF/G2x9N6tV5QEuva7p96/vwz1n3fqo1EGuuI4RyvstQEMEhHXVknZWnfSkvTqk isYyE74LOoC7JgINCnniteutr8S0wLjgxrkTORBHtVgmdsq+w+JyGbn9xeaHAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUdpnLMCC8xRSpZZeMVd+p6SAf0lowHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAMWr09 purolPO2DF/BleWtjKinGa8KC/pg2DRBtNMVIMlNgAWZVqUxe7jN12Dv3+BR+fQa rTIij6pmPAiSWWjD3RMWnFfGqVzwFB5EkmMw0eIvdSdKmbfDc7SYMTXIfsGh/2Zx jBECqhf+6pDoghohHniFTbprXP1EVy0jKO4f2/C9zEZwbC1ovfNZsSJgIFn9GOyr K4xjDpfHG3EHYSmlVltjE6JS4H4l2E74SkFkGYeG9YI2llrhpkFLhEUh1HLqPcEC f15Er6o2MqtCJok9EmkXe3E6t7Y+gl6BCjPa0eUIiBdutxK751WkhY/+8aalvGDA OFUz9mudS6Fgs8Fb -----END CERTIFICATE-----Generated at Sun Mar 1 23:00:13 2026 by rpki-client