$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: PuX6hfk+QK4/h+2vzvRfS3ASGMFSDHtNXClSeXTTWsM= Subject key identifier: 47:CD:4A:6C:2C:7A:07:93:F2:76:3C:3C:29:DE:CD:35:2E:09:86:17 Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 7FEB6B26B86870961995F0D546EA56C1E31D15BC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 040D Signing time: Tue 28 Jul 2026 21:12:27 +0000 Manifest this update: Tue 28 Jul 2026 21:07:27 +0000 Manifest next update: Wed 29 Jul 2026 22:35:27 +0000 Files and hashes: 1: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: XxZQPg3bymA39RzaDkTbJBcK/NEqin5of0P6cgBF9Yw=) 2: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=) 3: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=) 4: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: n+Ls1jXfWmBHifONKmtp9H1RDvGnEsrCqesBPgQc1ow=) 5: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: h3VcKI8rQsN3JtAe6OwHMHeBRW3aUtosh0JU525Pq4c=) 6: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=) 7: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=) 8: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=) 9: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=) 10: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=) 11: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: qIinON8jv6hIaRRXSEkmCVk1Vs6GNz9P2gPg3guPxgE=) 12: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=) 13: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=) 14: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=) 15: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: SggrSd58rYWUnF7aoXbJS01Xsn0gasOjLa9BRU+eZog=) 16: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=) 17: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: q6pUV6zyLgy5iz4rBp0u/JDvv3Mq/ssZO9Kfj4UGPPc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 22:35:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:eb:6b:26:b8:68:70:96:19:95:f0:d5:46:ea:56:c1:e3:1d:15:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Jul 28 21:07:27 2026 GMT Not After : Jul 29 22:35:27 2026 GMT Subject: CN=47CD4A6C2C7A0793F2763C3C29DECD352E098617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f2:d1:23:41:fa:83:61:ae:ff:3b:21:3e:32: 6b:03:a5:ab:03:a3:6d:c5:60:f5:69:d2:b1:c0:db: 9f:1d:66:6e:bd:40:e7:a5:46:e4:18:10:c8:46:e6: fe:97:d0:fd:51:ec:7b:23:4e:e7:c6:33:95:ac:41: 9b:d0:ff:93:b3:b8:bf:d6:52:b5:eb:11:c2:6e:ae: 61:41:58:0f:d0:c8:f9:1b:e2:2b:01:61:bf:3e:4b: c6:31:e1:21:be:6b:92:59:3a:92:69:5e:f0:3e:19: 92:ea:90:a9:71:91:19:8f:b5:4b:29:8e:93:a7:3b: 0a:a7:84:83:7c:f0:b1:a9:fa:7c:17:a1:54:6f:96: 2f:97:a8:fd:58:7b:97:6c:75:ee:c5:b6:79:b8:ef: 06:fe:7c:27:fb:eb:3a:bf:49:bd:42:77:1c:11:9a: 50:f2:09:7d:23:18:72:77:3c:ea:db:f6:c2:82:3d: 3d:dc:c8:0a:66:b4:c6:c5:50:21:67:5c:ba:e7:fd: 72:94:4e:7f:56:9a:2f:77:ed:32:34:6a:e2:0d:a3: b6:85:11:7f:71:64:a6:30:30:7e:12:dd:05:75:49: d0:21:a2:d4:6e:f4:75:29:43:99:93:b3:9d:32:39: 17:3c:e1:c2:da:4b:d7:9d:a8:7d:fe:88:9f:bd:01: 04:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:CD:4A:6C:2C:7A:07:93:F2:76:3C:3C:29:DE:CD:35:2E:09:86:17 X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:40:2f:6a:ba:76:5d:a6:8b:3f:19:96:1e:59:e4:42:f4:3e: fb:db:f2:71:49:16:c5:07:28:3d:6e:3a:13:b8:18:c7:f2:80: 23:91:b9:9e:0f:0e:12:23:5e:eb:77:0a:34:ca:c0:17:4c:5c: c3:1c:c3:fa:28:4c:0e:ab:1e:aa:56:51:78:b6:f7:17:5e:7f: 71:72:ab:8a:dc:29:9b:ac:38:4c:f7:a6:8e:10:4b:0f:2a:6b: fd:3b:21:46:fd:bf:d0:70:e5:d3:3a:2d:8f:47:10:49:4c:2a: 11:c5:f6:e5:31:4e:01:31:6d:f0:7e:2f:e8:be:99:1a:d9:77: 83:30:28:4b:a2:2e:05:a0:53:52:1b:c9:55:a4:d1:07:7b:c8: 49:49:d1:bb:99:d4:0e:5c:8f:b5:3a:70:bb:c1:6a:84:d5:ba: 05:5d:ce:50:ce:3a:36:43:27:98:d9:29:b2:aa:0f:ad:7c:68: 36:f7:18:d8:08:be:ad:56:37:b8:e9:27:f8:e9:6c:62:a8:a1: 79:2b:41:6e:26:2d:bc:36:2d:21:f5:d8:28:a8:c6:6f:31:1b: 2b:fc:b6:cf:15:9e:48:f2:d7:44:5e:f6:88:83:c2:2e:6d:b7: d9:6d:3a:eb:51:d6:85:71:61:c4:bb:ae:a0:fc:28:90:c2:5a: 96:dc:b6:27 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUf+trJrhocJYZlfDVRupWweMdFbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNjA3MjgyMTA3MjdaFw0yNjA3MjkyMjM1MjdaMDMxMTAvBgNV BAMTKDQ3Q0Q0QTZDMkM3QTA3OTNGMjc2M0MzQzI5REVDRDM1MkUwOTg2MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU8tEjQfqDYa7/OyE+MmsDpasD o23FYPVp0rHA258dZm69QOelRuQYEMhG5v6X0P1R7HsjTufGM5WsQZvQ/5OzuL/W UrXrEcJurmFBWA/QyPkb4isBYb8+S8Yx4SG+a5JZOpJpXvA+GZLqkKlxkRmPtUsp jpOnOwqnhIN88LGp+nwXoVRvli+XqP1Ye5dsde7Ftnm47wb+fCf76zq/Sb1CdxwR mlDyCX0jGHJ3POrb9sKCPT3cyApmtMbFUCFnXLrn/XKUTn9Wmi937TI0auINo7aF EX9xZKYwMH4S3QV1SdAhotRu9HUpQ5mTs50yORc84cLaS9edqH3+iJ+9AQQJAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUR81KbCx6B5Pydjw8Kd7NNS4JhhcwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAWQC9q unZdpos/GZYeWeRC9D772/JxSRbFByg9bjoTuBjH8oAjkbmeDw4SI17rdwo0ysAX TFzDHMP6KEwOqx6qVlF4tvcXXn9xcquK3CmbrDhM96aOEEsPKmv9OyFG/b/QcOXT Oi2PRxBJTCoRxfblMU4BMW3wfi/ovpka2XeDMChLoi4FoFNSG8lVpNEHe8hJSdG7 mdQOXI+1OnC7wWqE1boFXc5Qzjo2QyeY2Smyqg+tfGg29xjYCL6tVje46Sf46Wxi qKF5K0FuJi28Ni0h9dgoqMZvMRsr/LbPFZ5I8tdEXvaIg8IubbfZbTrrUdaFcWHE u66g/CiQwlqW3LYn -----END CERTIFICATE-----Generated at Wed Jul 29 00:43:12 2026 by rpki-client