$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft File: F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft (raw, json) Hash identifier: SB/awHFIe8f6yys+UybTy54wVgPqCYHXZK+Qc3SJWPQ= Subject key identifier: 08:59:9B:A7:B5:B8:FC:FF:BD:A0:87:B9:1E:9E:79:47:1E:79:E2:73 Authority key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE Certificate issuer: /CN=f1d0572fe72991bd32854bac716676ebdad22ace Certificate serial: 304C48E0DCAF769BCCCCCB62FE74C53E7900D7A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft Manifest number: 0362 Signing time: Thu 16 Apr 2026 15:57:19 +0000 Manifest this update: Thu 16 Apr 2026 15:52:19 +0000 Manifest next update: Fri 17 Apr 2026 19:48:19 +0000 Files and hashes: 1: 326131333a393634343a343030303a3a2f34302d3438203d3e203133333335.roa (hash: 3m2Z/mjozERlCSY+vSBpPSC7mc1wNvFz/UzxCrw2jy0=) 2: 326131333a393634343a34303a3a2f34342d3438203d3e20323136333336.roa (hash: lNHaIlVxi/lYCx53I3+MfwePjUfRoiP0WtejKnMjprU=) 3: 326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa (hash: e3gM8xBShVESXc8MaKIMDq1iDa8wjJWbHPjdOfhPuFQ=) 4: F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl (hash: 1LP8bXF6xDK4CSKRkv8e4ViX7jNzRy5csPyzu6JYtkE=) 5: 326131333a393634343a31303a3a2f34362d3438203d3e203438313934.roa (hash: WOAaZY65k+/GoeKbXXymPrZVu7CfbDlQvCXqyS0ZjLA=) 6: 39312e3230372e31332e302f32342d3234203d3e203532313132.roa (hash: YRttKbBVKmVFJCLqXVNyqXBZwi5ZooomBxSDP4Gl2m4=) 7: 326131333a393634343a323232303a3a2f34342d3438203d3e20323134393932.roa (hash: 894RTKAEh4ciZZOdefpuTBSaNDM2TQpQSdGle6pgy08=) 8: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer (hash: nYcdq/fifitjvFyPoNBEJvUP1WGfqAJvzv/Dj2Iivv0=) 9: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer (hash: DDBKGLOay0ETlRkkd+ZGuz8/q4wtGaLppxLYYnPMDTM=) 10: 326131333a393634343a34303a3a2f34342d3438203d3e20323131343331.roa (hash: UQpEpactphMaN3i4tpyR5s9Tmz685dUuNs8hSuG0cJQ=) 11: 326131333a393634303a3a2f34342d3434203d3e203532313132.roa (hash: DOR1Pt3ct68s+ey18ZghPrs5rAUoZlIbwxjvP68BE+k=) 12: 326131333a393634313a3a2f34382d3438203d3e203532313132.roa (hash: 5o2ZOradY5DoOPidcJ775vbaNLbxYZsPfZS6MPweSnY=) 13: 326131333a393634343a343030303a3a2f34302d3438203d3e20323034323931.roa (hash: OXH7kpuguUKmKnwoouN0IGAOMj3E/W/ffH2kJO7vbOY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 19:48:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:4c:48:e0:dc:af:76:9b:cc:cc:cb:62:fe:74:c5:3e:79:00:d7:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d0572fe72991bd32854bac716676ebdad22ace Validity Not Before: Apr 16 15:52:19 2026 GMT Not After : Apr 17 19:48:19 2026 GMT Subject: CN=08599BA7B5B8FCFFBDA087B91E9E79471E79E273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:84:25:0f:6b:f3:9c:09:59:2d:b2:74:a1:07: 82:6a:fa:55:ca:64:84:63:ec:15:2c:93:bf:f4:1b: 13:9b:39:89:b6:9d:6f:da:50:aa:22:9d:e6:e7:ef: 49:90:1f:af:49:c3:44:68:00:a0:f3:ad:31:60:fe: 36:28:6b:81:8f:ef:c5:a0:66:db:df:a4:4f:cb:5b: 74:7c:c5:0a:03:8d:43:9a:4f:79:19:33:5b:a5:9a: 65:ab:1d:b6:ad:f7:0a:d5:33:c0:49:cd:37:07:27: 8e:66:1b:7a:26:f2:51:c3:35:c9:25:dd:76:3e:38: 2a:0c:57:fa:1c:36:bf:71:24:bd:4c:82:4a:0d:60: 22:ef:71:9e:93:ad:bf:59:d8:27:09:88:e0:35:68: aa:02:c0:0a:98:a4:5a:a7:1e:ee:c1:d4:45:58:6e: ec:78:10:33:03:78:2b:63:1c:0f:a4:fa:dd:af:23: 8a:51:72:bd:2d:6e:b8:f0:2d:04:21:34:b8:94:1e: 9a:40:d7:a4:8d:d2:34:57:4c:05:b5:8d:0b:12:34: 6c:63:74:27:0c:31:c0:b9:db:76:e1:f4:04:32:6d: 94:87:a1:13:22:32:58:ba:ea:57:b2:33:b6:83:f2: 0f:a9:2a:0d:28:da:aa:f0:7e:aa:f9:d1:fe:c0:4b: dc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:59:9B:A7:B5:B8:FC:FF:BD:A0:87:B9:1E:9E:79:47:1E:79:E2:73 X509v3 Authority Key Identifier: keyid:F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:50:07:96:88:b3:c4:1d:f7:2c:2c:71:ce:24:49:11:a1:81: 80:bb:21:35:9d:56:5e:98:7e:f1:ff:06:97:f9:aa:88:3f:fc: e6:d6:21:e3:88:8f:62:5b:10:cd:17:13:9c:da:3b:8b:73:65: 02:63:ff:88:41:6f:1c:fe:5d:f4:ae:39:8c:16:65:45:c9:65: 1a:c4:23:7d:46:21:a7:d0:75:b9:44:dc:48:d2:18:59:ac:5b: 21:23:7c:34:5e:d8:c0:2a:4e:b4:7c:76:0a:18:3e:d8:19:b2: f2:59:33:a7:eb:94:de:6f:a0:fa:b7:54:3f:db:1e:b9:39:ed: 8e:83:7d:bf:a0:0a:59:87:bb:6e:4a:d9:3d:e7:21:37:8c:05: 33:e7:80:82:ce:18:d5:83:83:b4:6a:65:fe:71:de:d3:5d:68: 16:8a:33:f3:e9:90:ad:73:51:65:e6:71:13:8b:bb:f8:3b:c3: b8:6a:51:f4:e2:cb:bc:fd:28:94:8e:9f:96:1d:a3:1d:1c:c3: 7f:3a:c7:96:0f:d8:77:c9:b3:60:59:10:ba:69:b1:a4:99:37: 4f:4b:b0:ad:71:52:4f:1e:f6:98:d9:c5:ce:ad:e4:24:2e:47: 6b:5e:8b:21:97:38:4f:8d:0e:dc:65:54:90:0e:28:c6:0e:66: 21:46:dd:03 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUMExI4NyvdpvMzMti/nTFPnkA16IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjFkMDU3MmZlNzI5OTFiZDMyODU0YmFjNzE2Njc2ZWJk YWQyMmFjZTAeFw0yNjA0MTYxNTUyMTlaFw0yNjA0MTcxOTQ4MTlaMDMxMTAvBgNV BAMTKDA4NTk5QkE3QjVCOEZDRkZCREEwODdCOTFFOUU3OTQ3MUU3OUUyNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwhCUPa/OcCVktsnShB4Jq+lXK ZIRj7BUsk7/0GxObOYm2nW/aUKoinebn70mQH69Jw0RoAKDzrTFg/jYoa4GP78Wg ZtvfpE/LW3R8xQoDjUOaT3kZM1ulmmWrHbat9wrVM8BJzTcHJ45mG3om8lHDNckl 3XY+OCoMV/ocNr9xJL1MgkoNYCLvcZ6Trb9Z2CcJiOA1aKoCwAqYpFqnHu7B1EVY bux4EDMDeCtjHA+k+t2vI4pRcr0tbrjwLQQhNLiUHppA16SN0jRXTAW1jQsSNGxj dCcMMcC523bh9AQybZSHoRMiMli66leyM7aD8g+pKg0o2qrwfqr50f7AS9xvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUCFmbp7W4/P+9oIe5Hp55Rx554nMwHwYDVR0j BBgwFoAU8dBXL+cpkb0yhUuscWZ269rSKs4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTMwZGU4NGItNDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1 YjQ5LzAvRjFEMDU3MkZFNzI5OTFCRDMyODU0QkFDNzE2Njc2RUJEQUQyMkFDRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkQlhMLWNwa2IweWhVdXNjV1oyNjly U0tzNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00 MDBhLTRmZDEtYWI4YS1lNzYxNmUyNDViNDkvMC9GMUQwNTcyRkU3Mjk5MUJEMzI4 NTRCQUM3MTY2NzZFQkRBRDIyQUNFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADFAHloizxB33LCxxziRJ EaGBgLshNZ1WXph+8f8Gl/mqiD/85tYh44iPYlsQzRcTnNo7i3NlAmP/iEFvHP5d 9K45jBZlRcllGsQjfUYhp9B1uUTcSNIYWaxbISN8NF7YwCpOtHx2Chg+2Bmy8lkz p+uU3m+g+rdUP9seuTntjoN9v6AKWYe7bkrZPechN4wFM+eAgs4Y1YODtGpl/nHe 011oFooz8+mQrXNRZeZxE4u7+DvDuGpR9OLLvP0olI6flh2jHRzDfzrHlg/Yd8mz YFkQummxpJk3T0uwrXFSTx72mNnFzq3kJC5Ha16LIZc4T40O3GVUkA4oxg5mIUbd Aw== -----END CERTIFICATE-----Generated at Fri Apr 17 06:08:32 2026 by rpki-client