$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft File: 98A87CAD5B710890A9528F166F4202393824E6B8.mft (raw, json) Hash identifier: YqO1re3Pi9yxUGpN3ujOG7YQJ34CdpbqW9Fds9WQ4gE= Subject key identifier: BB:9A:07:A6:8B:8E:57:FA:A2:01:EB:26:1D:D5:0C:66:B7:2A:A2:68 Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8 Certificate serial: 46E7AB327BE9C3E73F5C53DC74331EC8E01BB818 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft Manifest number: 0515 Signing time: Sun 01 Mar 2026 09:54:27 +0000 Manifest this update: Sun 01 Mar 2026 09:49:27 +0000 Manifest next update: Mon 02 Mar 2026 10:44:27 +0000 Files and hashes: 1: 326131313a353730373a61613a3a2f34382d3438203d3e203438303730.roa (hash: JswRhPyDtXHdt3LcnGr0rU+2WVgkSTrzy91w1+vHXG0=) 2: 39342e3132362e3233332e302f32342d3234203d3e203438303730.roa (hash: /8dVa93viKNoM1pCJooeH0rtbsVAVvDJFpjlC3WNZyI=) 3: 39342e3132362e3233392e302f32342d3234203d3e203438303730.roa (hash: NDHvIIcUiAk7uX5boyMA8yHxKUGe6BZWK+cptlXNnOA=) 4: 39342e3132362e3233322e302f32342d3234203d3e203438303730.roa (hash: VIdYFIOIqW5zJ3T1LDGwWjmJ764XjM+ac+86S8Ja5hk=) 5: 98A87CAD5B710890A9528F166F4202393824E6B8.crl (hash: cVWb7RBuS/7RdtX3e0dUt6o0VQKn4MUTz2Id+E1hLfs=) 6: 326131313a353730373a3a2f33322d3332203d3e203438303730.roa (hash: 242POLRepYH713AUptOGvBkM/JpRNVCsIm5BodQGTyY=) 7: 39342e3132362e3233352e302f32342d3234203d3e203438303730.roa (hash: S5WIAkzllTXfMiWpREUuucFgM0BSw7Pb5gT995rR5+k=) 8: 39342e3132362e3233342e302f32342d3234203d3e203438303730.roa (hash: wQ/YXS5V0WqyAz3I38Grxwtf2vC7Tnq0YU0pMolmNpk=) 9: 326131313a353730303a3a2f33322d3332203d3e203438303730.roa (hash: Fqs+xGh2wCPoRebx3WWGGz8gG+3wDYrzV+eGaABVra0=) 10: 326131313a353730313a31303a3a2f34342d3434203d3e20323030313938.roa (hash: IiLsd5rWyRAEtPC2BRNztBwgXOWFkCLAq6FHsMnhQxg=) 11: AS48070.asa (hash: 5MT6ORI/F8ffsUlifpuRiZkf4qUWanqmxrgKmyiz55A=) 12: 39342e3132362e3233372e302f32342d3234203d3e203438303730.roa (hash: SY6OvQv9R/Ut8R5yFxdy0RVK/9dKsg8ZwmC3iNS9Rpw=) 13: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer (hash: Pc4F216M/oD/fxZDUk8HLynWg8D1IQ0ANHs5N2ZC0VQ=) 14: 39342e3132362e3233362e302f32342d3234203d3e203438303730.roa (hash: ma+wlMqMsb7J0TC2Gy822cEZS57hTDfS/GzCjZsgQ1k=) 15: 39342e3132362e3233382e302f32342d3234203d3e203438303730.roa (hash: EEtfGKQPQ42nFzzdsRfixi4zKQ5tTYPEdAQ1iAcmdE4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:e7:ab:32:7b:e9:c3:e7:3f:5c:53:dc:74:33:1e:c8:e0:1b:b8:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8 Validity Not Before: Mar 1 09:49:27 2026 GMT Not After : Mar 2 10:44:27 2026 GMT Subject: CN=BB9A07A68B8E57FAA201EB261DD50C66B72AA268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:eb:52:55:71:7c:0b:3a:ee:ee:cf:76:ef:a5: f6:e7:0b:f6:3f:40:b1:0d:3e:97:f6:3e:01:e1:dd: 5a:bd:45:d2:d1:dd:a3:fc:35:a2:38:17:18:4d:a9: 98:54:a4:16:de:1c:93:d7:83:5a:7b:bd:61:7c:09: 89:73:8c:db:0e:65:74:b5:c2:3c:61:9c:08:ee:c5: 04:18:0a:a1:13:f8:eb:7f:80:5e:b3:d8:2a:61:7b: d4:a0:ab:1b:7c:fd:5a:19:4f:8d:a0:6c:89:95:50: f3:0d:eb:ed:42:ba:1d:65:24:2f:3c:0c:65:7b:31: a4:4d:7d:91:1b:46:5e:dc:6d:68:d0:5a:42:47:6e: 21:db:f0:ae:3e:65:2b:af:ac:19:39:8a:ce:15:3a: 15:d5:6e:d5:e2:91:76:81:63:9f:33:30:a8:53:55: a8:88:94:05:f9:6f:e5:a1:9e:88:c6:3c:dd:65:d5: 67:8f:2f:c4:5e:74:92:50:4c:97:81:85:54:bb:10: 89:ef:2d:f7:d0:71:31:59:ce:05:6e:03:f2:17:a8: a8:97:5f:f0:dd:2d:87:78:90:82:3d:74:40:20:32: 07:20:80:7d:7e:c6:2c:1b:d7:63:b5:77:11:53:b7: 0a:9b:80:f7:cd:49:65:5d:27:a1:85:45:40:a2:8e: 9e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:9A:07:A6:8B:8E:57:FA:A2:01:EB:26:1D:D5:0C:66:B7:2A:A2:68 X509v3 Authority Key Identifier: keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ac:ed:ac:51:ce:ab:66:37:3d:68:2e:f2:b9:e1:37:54:e3: ea:a1:1b:f9:e0:a2:72:42:78:c0:ca:cd:07:9d:51:b2:fb:6e: 6e:7e:96:03:e6:74:40:a2:25:bc:f1:9e:33:36:33:9f:c9:bf: 10:10:17:b9:17:7f:00:df:5c:41:3e:83:01:75:f8:35:e9:71: 98:bb:c3:fd:d5:c4:51:d8:f4:5e:89:21:c8:e4:9c:26:21:a0: 86:d1:03:a2:20:9a:3d:c0:b2:aa:70:e6:56:5c:74:82:1e:cc: 3f:e6:90:94:ea:f7:06:71:24:34:43:0b:63:97:ac:48:63:07: 1d:71:e3:e8:91:fa:a6:d3:d5:c1:85:91:d4:90:86:1a:9c:63: e3:0d:c0:35:40:b0:54:5d:3e:09:5a:16:18:7d:6d:8b:58:7a: 0d:96:e1:3b:88:14:73:7a:6e:db:c5:9e:84:b2:d9:ef:95:70: a6:99:8a:9e:20:4c:97:de:e6:74:03:a2:74:85:5a:5a:51:60: 07:f5:e7:a0:c8:34:ec:46:a7:8f:1f:80:82:ad:d5:25:4f:af: c4:86:12:dc:93:c2:00:19:49:94:1c:3d:57:67:b3:ba:67:92: 49:15:be:39:ed:c4:47:d3:e8:bc:16:b5:fb:3a:03:12:74:e5: 2a:7d:c4:92 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURuerMnvpw+c/XFPcdDMeyOAbuBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThhODdjYWQ1YjcxMDg5MGE5NTI4ZjE2NmY0MjAyMzkz ODI0ZTZiODAeFw0yNjAzMDEwOTQ5MjdaFw0yNjAzMDIxMDQ0MjdaMDMxMTAvBgNV BAMTKEJCOUEwN0E2OEI4RTU3RkFBMjAxRUIyNjFERDUwQzY2QjcyQUEyNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH61JVcXwLOu7uz3bvpfbnC/Y/ QLENPpf2PgHh3Vq9RdLR3aP8NaI4FxhNqZhUpBbeHJPXg1p7vWF8CYlzjNsOZXS1 wjxhnAjuxQQYCqET+Ot/gF6z2Cphe9Sgqxt8/VoZT42gbImVUPMN6+1Cuh1lJC88 DGV7MaRNfZEbRl7cbWjQWkJHbiHb8K4+ZSuvrBk5is4VOhXVbtXikXaBY58zMKhT VaiIlAX5b+WhnojGPN1l1WePL8RedJJQTJeBhVS7EInvLffQcTFZzgVuA/IXqKiX X/DdLYd4kII9dEAgMgcggH1+xiwb12O1dxFTtwqbgPfNSWVdJ6GFRUCijp7FAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUu5oHpouOV/qiAesmHdUMZrcqomgwHwYDVR0j BBgwFoAUmKh8rVtxCJCpUo8Wb0ICOTgk5rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUtNGIxYS00NmVhLTljOTUtNGFmMTI5NjRh NDlkLzAvOThBODdDQUQ1QjcxMDg5MEE5NTI4RjE2NkY0MjAyMzkzODI0RTZCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL21LaDhyVnR4Q0pDcFVvOFdiMElDT1Rn azVyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00 YjFhLTQ2ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC85OEE4N0NBRDVCNzEwODkwQTk1 MjhGMTY2RjQyMDIzOTM4MjRFNkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX6ztrFHOq2Y3PWgu8rnh N1Tj6qEb+eCickJ4wMrNB51Rsvtubn6WA+Z0QKIlvPGeMzYzn8m/EBAXuRd/AN9c QT6DAXX4NelxmLvD/dXEUdj0XokhyOScJiGghtEDoiCaPcCyqnDmVlx0gh7MP+aQ lOr3BnEkNEMLY5esSGMHHXHj6JH6ptPVwYWR1JCGGpxj4w3ANUCwVF0+CVoWGH1t i1h6DZbhO4gUc3pu28WehLLZ75VwppmKniBMl97mdAOidIVaWlFgB/XnoMg07Ean jx+Agq3VJU+vxIYS3JPCABlJlBw9V2ezumeSSRW+Oe3ER9PovBa1+zoDEnTlKn3E kg== -----END CERTIFICATE-----Generated at Sun Mar 1 20:27:21 2026 by rpki-client