$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft File: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft (raw, json) Hash identifier: QNWYG2uKMg5I+8pkRHRne7mc4eIH4AadNol1YJvpO9Q= Subject key identifier: F6:4B:B7:6E:C4:56:C4:39:57:01:10:61:57:A7:6A:A8:7D:4D:5C:AB Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 3D16F657C8F83D4E3966E8B367849B6B57A0F5B1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft Manifest number: 03AF Signing time: Sun 01 Mar 2026 11:14:50 +0000 Manifest this update: Sun 01 Mar 2026 11:09:50 +0000 Manifest next update: Mon 02 Mar 2026 14:36:50 +0000 Files and hashes: 1: 326131343a373538313a6634303a3a2f34342d3438203d3e20323134363433.roa (hash: jjg3HPw+XVWQVO0XHgF/TKZW97oaDPDZVvcbfhgJX94=) 2: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl (hash: D95Sdr6wRefu7ryjWcF3W/liGj/S4exk/RdmyihgnHo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 14:36:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:16:f6:57:c8:f8:3d:4e:39:66:e8:b3:67:84:9b:6b:57:a0:f5:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Mar 1 11:09:50 2026 GMT Not After : Mar 2 14:36:50 2026 GMT Subject: CN=F64BB76EC456C4395701106157A76AA87D4D5CAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e1:85:b0:e4:3f:bd:56:67:de:be:12:73:cf: 0f:5d:a2:74:07:0c:8f:ec:10:c2:01:7c:1c:d4:12: a3:28:d6:6a:58:b2:70:64:da:62:88:24:9f:63:1f: 00:37:ed:cd:19:88:8c:0b:36:b0:e8:ae:d1:6a:85: cb:95:90:da:74:26:11:59:f0:90:8f:c8:25:ec:91: 99:bc:1c:c9:bc:6f:80:5c:32:85:7b:c8:ab:7c:8f: 8d:85:43:c6:76:d5:90:16:48:81:d1:87:b0:93:ae: f3:4e:fb:85:aa:c7:07:2d:6f:6c:27:c4:a4:92:7a: 15:3e:26:76:04:16:2c:dd:b1:01:91:2c:9a:3c:34: 38:b5:54:da:14:0d:36:76:d6:8d:2a:24:fc:84:dd: 71:c0:d0:41:5b:d0:1f:9b:20:8f:86:c0:ef:98:f0: 76:c6:06:da:e3:3c:ef:6c:50:98:70:eb:8f:4c:4a: a0:91:e6:c1:a3:eb:01:86:93:4b:ac:74:b4:00:a7: b0:d3:07:b4:c7:f8:32:b4:d9:ef:01:e5:0e:fd:e6: 6d:1a:ba:17:a8:f2:ff:bf:42:a5:a6:98:83:de:ad: 63:d3:da:d1:42:01:36:e3:80:03:d0:c7:8e:28:c6: 21:97:89:35:f1:40:ac:d5:07:a6:48:c6:33:46:ab: 16:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:4B:B7:6E:C4:56:C4:39:57:01:10:61:57:A7:6A:A8:7D:4D:5C:AB X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:2e:0f:10:94:2e:94:e9:e9:26:c9:fe:61:4a:7d:21:01:6d: c8:f1:69:62:bb:1a:25:0c:f0:e6:fa:a6:7c:b7:2b:c6:13:79: 62:20:04:1e:23:8a:60:70:a8:56:a6:0d:2c:e8:05:23:1a:ca: 6c:06:f4:b0:78:60:1b:4d:af:b8:7d:98:e2:08:bf:31:19:41: fd:36:b7:92:cd:25:63:a0:dc:9c:82:96:cb:ab:0e:f6:dc:82: 15:92:4c:4d:fa:ca:61:80:17:a0:82:5d:25:4d:2d:32:14:29: 90:b5:49:33:7d:ee:7e:b3:ef:00:b5:6f:cd:e9:23:93:8a:ac: cf:b1:12:c1:4e:e0:e8:e3:d0:6f:d8:a7:97:97:4c:b0:4c:e3: 53:66:59:f2:c3:47:a4:f0:42:e2:75:54:2f:27:21:87:cd:e5: 00:b5:f3:8c:56:b5:1c:9b:91:33:0b:f9:d3:37:5d:34:d9:a4: 38:01:4a:56:86:d9:9c:9d:b0:43:b1:03:0d:b2:e8:78:75:c7: c0:2e:5a:15:40:6e:a6:b9:7f:88:ff:24:57:68:ac:23:53:04: 5a:e2:a5:64:27:c8:e6:2c:16:5b:de:4d:be:e0:b5:f0:77:90: 5c:df:48:55:eb:19:34:55:9b:56:73:fa:b2:40:32:20:68:49: 41:ae:9e:d7 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPRb2V8j4PU45ZuizZ4Sba1eg9bEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNjAzMDExMTA5NTBaFw0yNjAzMDIxNDM2NTBaMDMxMTAvBgNV BAMTKEY2NEJCNzZFQzQ1NkM0Mzk1NzAxMTA2MTU3QTc2QUE4N0Q0RDVDQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh4YWw5D+9VmfevhJzzw9donQH DI/sEMIBfBzUEqMo1mpYsnBk2mKIJJ9jHwA37c0ZiIwLNrDortFqhcuVkNp0JhFZ 8JCPyCXskZm8HMm8b4BcMoV7yKt8j42FQ8Z21ZAWSIHRh7CTrvNO+4Wqxwctb2wn xKSSehU+JnYEFizdsQGRLJo8NDi1VNoUDTZ21o0qJPyE3XHA0EFb0B+bII+GwO+Y 8HbGBtrjPO9sUJhw649MSqCR5sGj6wGGk0usdLQAp7DTB7TH+DK02e8B5Q795m0a uheo8v+/QqWmmIPerWPT2tFCATbjgAPQx44oxiGXiTXxQKzVB6ZIxjNGqxZ1AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU9ku3bsRWxDlXARBhV6dqqH1NXKswHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RiOGQ4YjdkLWM0ODYtNDIzOS05ZDlmLThmOGY1ZGNlZDhkMC8xL0Y5RjdBMjg4 NUNGMzAxMkZBMTM5MEQzQjMyNTlGQzc4QUVGN0FEMUEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAoLg8Q lC6U6ekmyf5hSn0hAW3I8WliuxolDPDm+qZ8tyvGE3liIAQeI4pgcKhWpg0s6AUj GspsBvSweGAbTa+4fZjiCL8xGUH9NreSzSVjoNycgpbLqw723IIVkkxN+sphgBeg gl0lTS0yFCmQtUkzfe5+s+8AtW/N6SOTiqzPsRLBTuDo49Bv2KeXl0ywTONTZlny w0ek8ELidVQvJyGHzeUAtfOMVrUcm5EzC/nTN1002aQ4AUpWhtmcnbBDsQMNsuh4 dcfALloVQG6muX+I/yRXaKwjUwRa4qVkJ8jmLBZb3k2+4LXwd5Bc30hV6xk0VZtW c/qyQDIgaElBrp7X -----END CERTIFICATE-----Generated at Mon Mar 2 03:47:45 2026 by rpki-client