$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft File: C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft (raw, json) Hash identifier: te+tmPuLKhdgdzLYMOPt4SuRpT1DnkRyX/3qVsJUWTc= Subject key identifier: 7A:8D:ED:39:9B:A7:8C:57:CF:CF:7C:00:E8:75:0E:21:E2:6E:25:33 Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf Certificate serial: 5249C85326CE00C0B1A6C6E60DAED66DCC1DD7A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft Manifest number: 05F6 Signing time: Sun 01 Mar 2026 09:16:02 +0000 Manifest this update: Sun 01 Mar 2026 09:11:02 +0000 Manifest next update: Mon 02 Mar 2026 11:13:02 +0000 Files and hashes: 1: 3139332e3234362e352e302f32342d3234203d3e20313939343135.roa (hash: lvghBplCcmXtQEEJ3nC5HmHIcxgk88drnBMjhNzmX2g=) 2: 3231372e3139382e3138372e302f32342d3234203d3e20323132363039.roa (hash: DHsuIdClDCk2AbtF+6NodfNI3JEU6gbRKvoUSbt4bMQ=) 3: 3139332e3234362e342e302f32342d3234203d3e20313335343032.roa (hash: x5G3aikxww4wLRaoWnz2KkIIppe2I2SZAi3PiElvQpI=) 4: 3231372e3139382e3138372e302f32342d3234203d3e20323131343135.roa (hash: I5EY6cn+MqUeM13Ic2acCtvjkzpr7UgV9E8MpknrsP0=) 5: 3139332e3234362e3130332e302f32342d3234203d3e20323136313338.roa (hash: fdALPGopwtGvbJEhx+/96pp78JBOCpIXPSPl4+ufmoE=) 6: C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl (hash: Wr3MwMq8Rc7I8rfWD0tCptBfgPdBhTpP5LcjRBjUOlo=) 7: 3231372e3139382e3138372e302f32342d3234203d3e20323131343430.roa (hash: 1b5s7twDP9sp8gcJ29rXGkFdvEaLedS6c1Dcd8xTFyM=) 8: 3139332e3234362e3130322e302f32342d3234203d3e203630373831.roa (hash: 9YIjshhRHJCTBV0dIP18GlVU8/qr9siO7bVSgJFYoAw=) 9: 3139332e3234362e3130332e302f32342d3234203d3e20323032373336.roa (hash: 25OCay2OV/7fsFzlQCaWuZFV/8gtz5r77rm0KuzYhQc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 11:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:49:c8:53:26:ce:00:c0:b1:a6:c6:e6:0d:ae:d6:6d:cc:1d:d7:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf Validity Not Before: Mar 1 09:11:02 2026 GMT Not After : Mar 2 11:13:02 2026 GMT Subject: CN=7A8DED399BA78C57CFCF7C00E8750E21E26E2533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:95:e1:3c:18:ef:81:39:6b:c5:66:7e:58:2c: 4a:8c:1d:0a:1d:e1:b8:06:6f:cd:36:5e:d3:82:6a: c9:d5:e7:6c:ab:c7:4c:02:ba:0f:9b:3f:c5:32:78: a7:a9:aa:a1:2a:7b:0c:cc:1f:e0:a5:92:b4:46:35: 9b:49:fd:e7:22:1e:d5:49:62:6d:d0:a6:d4:71:8b: e4:79:a1:77:40:7e:7e:8e:21:a8:3b:19:79:6e:81: fb:f4:6f:b7:95:a3:d8:db:e0:af:9b:d9:1c:30:39: e7:6c:d3:86:44:b2:84:ec:ea:e2:ee:95:b4:ed:8e: b8:62:16:77:de:2d:fe:2f:af:99:db:fd:83:32:89: 5d:f3:79:19:31:13:6d:1f:f6:93:37:40:37:a8:2c: fb:97:52:2d:cf:c0:98:80:78:60:c0:89:c1:ad:56: c5:9d:8b:de:56:ce:10:93:3a:b9:67:46:a5:1f:bf: b8:b6:f2:0b:5b:25:fb:23:51:8d:50:5f:21:68:5f: 7c:23:86:7b:26:72:0a:26:68:10:2f:d4:e9:e9:a0: 0e:fa:2a:4e:a0:ba:fe:a1:21:48:cb:69:75:d2:fd: 8f:84:67:15:85:05:2e:dc:6e:d1:bd:a1:08:4b:02: 79:45:df:d5:f4:6c:bc:d2:cd:09:f8:5d:74:3b:02: 3a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:8D:ED:39:9B:A7:8C:57:CF:CF:7C:00:E8:75:0E:21:E2:6E:25:33 X509v3 Authority Key Identifier: keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:d2:28:62:af:b2:8e:1c:94:61:35:a0:2a:d3:2f:b3:e6:39: 8f:2d:90:83:67:c0:4b:dc:67:87:fe:e5:fa:69:c1:fe:15:fc: b8:a8:7f:a4:bb:98:aa:a1:94:47:f6:ea:d6:15:6b:17:46:72: 83:97:c5:69:ea:ba:e9:7c:dd:b4:7c:68:2f:db:30:70:65:23: 07:4e:49:19:62:d2:8d:b3:ae:71:d3:49:60:ef:b7:8d:32:28: a2:6e:6d:f5:e5:94:07:d6:a4:78:87:50:85:e3:62:d0:cb:4a: 28:ae:17:4b:e6:a1:67:98:a4:b8:30:02:16:bf:61:5f:97:fb: 31:d8:59:30:23:eb:9c:60:1e:21:24:41:b9:19:c3:e8:93:c9: ab:3d:ea:0a:6b:71:75:d0:0c:c1:f3:9d:16:b4:63:5c:0e:b0: 9c:d8:81:18:61:41:11:6b:e3:de:ef:d3:5c:c5:09:26:1a:4f: 78:e5:93:96:98:72:e8:67:ae:0c:13:c8:06:80:60:b4:52:72: a8:d5:30:ab:2a:a2:89:82:24:10:0d:93:cb:16:66:f9:a8:1c: f6:82:53:36:81:b2:93:9c:e3:6a:27:d7:06:3a:d7:85:44:f5: 40:91:2c:bf:e8:d1:72:32:8a:9d:df:35:4a:69:a4:b3:db:ba: bb:b6:b4:16 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUknIUybOAMCxpsbmDa7Wbcwd16IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc5ZDAyYzYxODg2MWFkNDViYWY3OGNlMzkwMjNjYmNi NDk0YTdiZjAeFw0yNjAzMDEwOTExMDJaFw0yNjAzMDIxMTEzMDJaMDMxMTAvBgNV BAMTKDdBOERFRDM5OUJBNzhDNTdDRkNGN0MwMEU4NzUwRTIxRTI2RTI1MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIleE8GO+BOWvFZn5YLEqMHQod 4bgGb802XtOCasnV52yrx0wCug+bP8UyeKepqqEqewzMH+ClkrRGNZtJ/eciHtVJ Ym3QptRxi+R5oXdAfn6OIag7GXlugfv0b7eVo9jb4K+b2RwwOeds04ZEsoTs6uLu lbTtjrhiFnfeLf4vr5nb/YMyiV3zeRkxE20f9pM3QDeoLPuXUi3PwJiAeGDAicGt VsWdi95WzhCTOrlnRqUfv7i28gtbJfsjUY1QXyFoX3wjhnsmcgomaBAv1OnpoA76 Kk6guv6hIUjLaXXS/Y+EZxWFBS7cbtG9oQhLAnlF39X0bLzSzQn4XXQ7AjofAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUeo3tOZunjFfPz3wA6HUOIeJuJTMwHwYDVR0j BBgwFoAUx50CxhiGGtRbr3jOOQI8vLSUp78wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDkwYTkzNWEtYTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0 ZjI4LzAvQzc5RDAyQzYxODg2MUFENDVCQUY3OENFMzkwMjNDQkNCNDk0QTdCRi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3g1MEN4aGlHR3RSYnIzak9PUUk4dkxT VXA3OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOTBhOTM1YS1h NzRkLTRiOTgtOTQzMC1iYzdhZTVjMjRmMjgvMC9DNzlEMDJDNjE4ODYxQUQ0NUJB Rjc4Q0UzOTAyM0NCQ0I0OTRBN0JGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAudIoYq+yjhyUYTWgKtMv s+Y5jy2Qg2fAS9xnh/7l+mnB/hX8uKh/pLuYqqGUR/bq1hVrF0Zyg5fFaeq66Xzd tHxoL9swcGUjB05JGWLSjbOucdNJYO+3jTIoom5t9eWUB9akeIdQheNi0MtKKK4X S+ahZ5ikuDACFr9hX5f7MdhZMCPrnGAeISRBuRnD6JPJqz3qCmtxddAMwfOdFrRj XA6wnNiBGGFBEWvj3u/TXMUJJhpPeOWTlphy6GeuDBPIBoBgtFJyqNUwqyqiiYIk EA2TyxZm+agc9oJTNoGyk5zjaifXBjrXhUT1QJEsv+jRcjKKnd81Smmks9u6u7a0 Fg== -----END CERTIFICATE-----Generated at Mon Mar 2 01:03:46 2026 by rpki-client