$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft File: E19302BE91C9D4211CDF4AFF091055A173B3593B.mft (raw, json) Hash identifier: BIdvclsKvfvcu4XxiVmnvLeABnXFtTbI4bP+04QoK3o= Subject key identifier: 2E:80:1D:05:30:0A:E0:85:D6:48:B1:35:D4:81:B1:1C:9F:25:64:DA Authority key identifier: E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B Certificate issuer: /CN=E19302BE91C9D4211CDF4AFF091055A173B3593B Certificate serial: 49F5F0FB2F7A572034CD843DB8288F09C596B5B8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft Manifest number: 0149 Signing time: Sun 01 Mar 2026 20:06:07 +0000 Manifest this update: Sun 01 Mar 2026 20:01:07 +0000 Manifest next update: Mon 02 Mar 2026 23:22:07 +0000 Files and hashes: 1: 326130373a353463313a343234323a3a2f34382d3438203d3e20313939353138.roa (hash: BOG3fQtugkiXpKS/p2fTg16ei6qBO6dg8xuWYfodSgU=) 2: 326130373a353463313a343236313a3a2f34382d3438203d3e203436373636.roa (hash: 7m4uBl7pjkxamzWCFShzOT8dP3zXIx3Ew/sIEJmrOk4=) 3: E19302BE91C9D4211CDF4AFF091055A173B3593B.crl (hash: vhYqWUnK2yGHKoVv4ANQTWqvLMhU3ccioaIqbNhVcWc=) 4: 326130373a353463313a343230303a3a2f34302d3430203d3e20313939353138.roa (hash: p0V0EhuR94jsdFZ1UsjzKoR4Va7GATjKkx+PVQ3cRs4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:f5:f0:fb:2f:7a:57:20:34:cd:84:3d:b8:28:8f:09:c5:96:b5:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E19302BE91C9D4211CDF4AFF091055A173B3593B Validity Not Before: Mar 1 20:01:07 2026 GMT Not After : Mar 2 23:22:07 2026 GMT Subject: CN=2E801D05300AE085D648B135D481B11C9F2564DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a8:c2:e5:33:30:1e:4f:6e:c0:53:fe:78:74: c9:73:67:ff:6b:90:3a:40:52:ec:38:28:78:4c:0f: 25:ee:40:b5:85:61:fd:73:ad:b2:2d:9b:1e:b8:f7: 00:46:cc:50:b5:86:94:e2:61:81:84:5d:38:84:83: 35:98:47:b4:f3:b0:38:b0:de:08:24:e5:e8:73:00: c9:14:96:75:5e:ae:7e:53:99:1e:d9:f3:e9:a6:7e: cb:08:f3:3a:0a:f1:b2:04:87:c0:c9:d8:d2:e0:fd: 74:2d:5e:d1:fb:2c:d1:1d:3e:a7:fd:cf:28:f5:d7: 62:5f:7a:9d:67:46:f5:8d:be:77:80:ca:84:7a:c9: 23:85:c3:b3:84:a6:f3:8f:3c:fe:73:80:ab:76:f8: 43:63:d9:49:cf:c7:3e:ef:0c:e4:7d:a4:66:3f:61: 01:a7:0c:7c:68:35:da:74:fa:46:8d:7b:8e:61:d8: 77:bd:8e:c0:99:12:6a:97:a4:95:dc:e1:0b:34:46: eb:8d:b4:26:b6:85:2d:57:05:e4:b4:ca:ff:c9:2d: 46:81:74:d3:f6:b8:b8:31:50:98:0f:5f:84:20:e1: fd:f3:e7:7e:8e:b2:74:a4:4a:98:84:9d:d1:86:26: 48:d8:6b:25:aa:e1:d1:15:b4:35:09:78:5e:b0:44: 71:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:80:1D:05:30:0A:E0:85:D6:48:B1:35:D4:81:B1:1C:9F:25:64:DA X509v3 Authority Key Identifier: keyid:E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ce:de:4c:49:8e:32:3b:34:14:cc:62:0b:f6:ae:80:ca:0a: 94:a1:d7:26:59:22:24:71:08:ea:8c:c2:7c:4d:5d:41:31:f1: 26:47:4a:fc:f1:05:c7:0e:50:15:c5:f3:ef:f1:bd:82:c2:f9: 4f:98:3d:04:47:a2:3e:f8:d6:24:91:dc:bb:e7:b0:90:bf:04: 90:ad:9b:4e:62:5b:58:65:62:86:24:7b:63:ed:da:52:97:b8: a8:83:4a:21:22:81:e2:41:b6:e9:62:0c:e4:cf:c4:f7:e7:aa: 3f:1c:5b:78:e2:1a:6b:23:da:57:7f:e0:58:1b:2e:c4:f2:02: 55:e5:d5:43:7a:83:59:1f:6b:3b:00:6a:d9:47:90:72:e7:e0: d0:e1:11:97:7f:75:f9:46:86:4b:f0:fe:3b:42:d9:58:70:bc: 21:f7:21:25:c9:4d:a5:b2:94:09:9d:58:10:d1:17:31:8e:01: 26:ff:e0:ad:1b:d6:59:b8:9c:04:6a:e1:1b:40:91:82:30:74: 57:2b:cb:76:c6:d2:c8:8c:6e:26:48:8e:55:85:95:7d:57:7f: 1c:c1:c7:72:43:0b:2d:a5:1d:33:e5:e6:59:85:88:ff:9f:52: 9a:71:f0:26:09:0f:c2:03:3f:75:33:1a:b1:85:8a:6e:52:0d: 5b:5c:6b:db -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIUSfXw+y96VyA0zYQ9uCiPCcWWtbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE5MzAyQkU5MUM5RDQyMTFDREY0QUZGMDkxMDU1QTE3 M0IzNTkzQjAeFw0yNjAzMDEyMDAxMDdaFw0yNjAzMDIyMzIyMDdaMDMxMTAvBgNV BAMTKDJFODAxRDA1MzAwQUUwODVENjQ4QjEzNUQ0ODFCMTFDOUYyNTY0REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrqMLlMzAeT27AU/54dMlzZ/9r kDpAUuw4KHhMDyXuQLWFYf1zrbItmx649wBGzFC1hpTiYYGEXTiEgzWYR7TzsDiw 3ggk5ehzAMkUlnVern5TmR7Z8+mmfssI8zoK8bIEh8DJ2NLg/XQtXtH7LNEdPqf9 zyj112Jfep1nRvWNvneAyoR6ySOFw7OEpvOPPP5zgKt2+ENj2UnPxz7vDOR9pGY/ YQGnDHxoNdp0+kaNe45h2He9jsCZEmqXpJXc4Qs0RuuNtCa2hS1XBeS0yv/JLUaB dNP2uLgxUJgPX4Qg4f3z536OsnSkSpiEndGGJkjYayWq4dEVtDUJeF6wRHFZAgMB AAGjggKGMIICgjAdBgNVHQ4EFgQULoAdBTAK4IXWSLE11IGxHJ8lZNowHwYDVR0j BBgwFoAU4ZMCvpHJ1CEc30r/CRBVoXOzWTswDgYDVR0PAQH/BAQDAgeAMIGXBgNV HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNm NTBlOC8xMC9FMTkzMDJCRTkxQzlENDIxMUNERjRBRkYwOTEwNTVBMTczQjM1OTNC LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0UxOTMwMkJFOTFDOUQ0MjExQ0RGNEFG RjA5MTA1NUExNzNCMzU5M0IuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYB BQUHMAuGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC8xMC9FMTkz MDJCRTkxQzlENDIxMUNERjRBRkYwOTEwNTVBMTczQjM1OTNCLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA nM7eTEmOMjs0FMxiC/augMoKlKHXJlkiJHEI6ozCfE1dQTHxJkdK/PEFxw5QFcXz 7/G9gsL5T5g9BEeiPvjWJJHcu+ewkL8EkK2bTmJbWGVihiR7Y+3aUpe4qINKISKB 4kG26WIM5M/E9+eqPxxbeOIaayPaV3/gWBsuxPICVeXVQ3qDWR9rOwBq2UeQcufg 0OERl391+UaGS/D+O0LZWHC8IfchJclNpbKUCZ1YENEXMY4BJv/grRvWWbicBGrh G0CRgjB0VyvLdsbSyIxuJkiOVYWVfVd/HMHHckMLLaUdM+XmWYWI/59SmnHwJgkP wgM/dTMasYWKblINW1xr2w== -----END CERTIFICATE-----Generated at Mon Mar 2 02:26:51 2026 by rpki-client