$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft File: F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft (raw, json) Hash identifier: DSoTm+x9B7PMZc5qHtlaUPsSzL5HrQ5QXK0IHopS+tA= Subject key identifier: B9:F3:E3:E4:C7:B4:97:47:2C:54:58:C8:44:FB:16:A4:74:C9:38:5C Authority key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE Certificate issuer: /CN=f1d0572fe72991bd32854bac716676ebdad22ace Certificate serial: 61F1D7EDFB1F546A20D42137809BFAD4CDCAD272 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft Manifest number: 0324 Signing time: Sun 01 Mar 2026 17:12:02 +0000 Manifest this update: Sun 01 Mar 2026 17:07:02 +0000 Manifest next update: Mon 02 Mar 2026 18:53:02 +0000 Files and hashes: 1: F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl (hash: KA6RCxGtsCwBnP008Eq1Q0lYtKrfsb3zw3qmUhH90Nc=) 2: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer (hash: DDBKGLOay0ETlRkkd+ZGuz8/q4wtGaLppxLYYnPMDTM=) 3: 326131333a393634343a34303a3a2f34342d3438203d3e20323136333336.roa (hash: lNHaIlVxi/lYCx53I3+MfwePjUfRoiP0WtejKnMjprU=) 4: 326131333a393634343a343030303a3a2f34302d3438203d3e20323034323931.roa (hash: OXH7kpuguUKmKnwoouN0IGAOMj3E/W/ffH2kJO7vbOY=) 5: 326131333a393634343a343030303a3a2f34302d3438203d3e203133333335.roa (hash: 3m2Z/mjozERlCSY+vSBpPSC7mc1wNvFz/UzxCrw2jy0=) 6: 326131333a393634313a3a2f34382d3438203d3e203532313132.roa (hash: 5o2ZOradY5DoOPidcJ775vbaNLbxYZsPfZS6MPweSnY=) 7: 326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa (hash: e3gM8xBShVESXc8MaKIMDq1iDa8wjJWbHPjdOfhPuFQ=) 8: 39312e3230372e31332e302f32342d3234203d3e203532313132.roa (hash: YRttKbBVKmVFJCLqXVNyqXBZwi5ZooomBxSDP4Gl2m4=) 9: 326131333a393634303a3a2f34342d3434203d3e203532313132.roa (hash: DOR1Pt3ct68s+ey18ZghPrs5rAUoZlIbwxjvP68BE+k=) 10: 326131333a393634343a34303a3a2f34342d3438203d3e20323131343331.roa (hash: UQpEpactphMaN3i4tpyR5s9Tmz685dUuNs8hSuG0cJQ=) 11: 326131333a393634343a323232303a3a2f34342d3438203d3e20323134393932.roa (hash: 894RTKAEh4ciZZOdefpuTBSaNDM2TQpQSdGle6pgy08=) 12: 326131333a393634343a31303a3a2f34362d3438203d3e203438313934.roa (hash: WOAaZY65k+/GoeKbXXymPrZVu7CfbDlQvCXqyS0ZjLA=) 13: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer (hash: nYcdq/fifitjvFyPoNBEJvUP1WGfqAJvzv/Dj2Iivv0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:f1:d7:ed:fb:1f:54:6a:20:d4:21:37:80:9b:fa:d4:cd:ca:d2:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d0572fe72991bd32854bac716676ebdad22ace Validity Not Before: Mar 1 17:07:02 2026 GMT Not After : Mar 2 18:53:02 2026 GMT Subject: CN=B9F3E3E4C7B497472C5458C844FB16A474C9385C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:97:cb:48:94:e8:9f:69:35:d2:ba:d0:4d:d2: 62:45:98:19:73:4b:43:66:cb:23:85:6c:3c:63:2d: f5:0c:25:a7:50:dc:e4:f6:28:ec:fb:91:46:e9:c3: 26:b2:81:7d:5d:e1:37:de:da:1c:39:33:85:93:94: 62:00:21:a8:e2:bf:d5:e1:9e:6c:26:37:e3:79:86: 4b:74:08:13:64:3c:f2:84:7e:ab:34:65:20:f3:a6: 5d:47:6e:e5:7a:94:07:08:04:e3:3b:fb:3f:a9:40: d8:49:30:6b:28:09:53:52:55:69:f6:e1:4a:99:71: ce:3c:a3:59:b1:75:55:39:03:90:a3:45:43:24:11: 66:f0:dd:e2:db:60:22:6d:50:af:21:0f:92:b5:5f: 38:a8:6f:b4:db:db:6f:d4:7f:6e:50:6a:11:34:fb: b7:3d:6f:e0:fe:12:86:74:94:f9:0c:18:ab:70:14: 62:75:c4:61:3e:e4:e9:12:1a:71:03:10:b1:89:5f: f9:fa:a1:6d:c7:3e:77:1d:7e:cb:d5:f8:a6:24:c4: 13:30:96:e6:31:ec:0b:3f:70:68:9b:c1:2e:4d:1d: bc:d3:68:af:d1:2a:a7:fb:9d:79:fd:79:e0:6d:bf: 40:16:65:67:28:e9:1b:83:bd:84:2a:8c:49:7f:4f: 86:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F3:E3:E4:C7:B4:97:47:2C:54:58:C8:44:FB:16:A4:74:C9:38:5C X509v3 Authority Key Identifier: keyid:F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:11:a4:13:68:a4:4d:47:b8:2c:22:bd:3c:a3:83:b2:17:ac: 90:d9:ab:6c:87:c0:26:2c:03:16:cf:3c:9a:e8:26:7a:d7:1f: 72:94:a9:5f:b7:a5:c3:93:8d:38:a2:04:2c:4a:02:43:93:3e: 18:84:fa:77:36:ee:26:a8:69:73:fd:30:6e:1a:cb:1a:a6:9f: c8:e5:43:ba:5f:68:1b:53:65:3e:d4:fc:90:e8:e2:da:c2:bb: ed:8a:87:f7:0f:80:a3:f2:b5:29:e2:dd:19:2d:ed:bf:b3:0c: 86:a7:52:56:4d:07:5f:8a:3c:aa:12:ed:5b:88:7f:06:b9:68: e4:f3:da:36:3d:1f:81:0d:01:01:1e:d0:f7:32:43:42:e6:df: 26:17:e1:d6:9d:d6:94:dc:71:5e:7c:ee:5e:1a:cd:53:75:0e: 09:56:da:82:9c:9d:b1:93:b9:c0:f4:cd:b8:7f:f0:f3:cc:f9: 40:91:06:d7:cd:16:c7:6f:7e:3f:f0:36:be:5b:38:c4:0f:39: 01:35:91:7e:e8:a0:ea:5a:70:de:1d:8e:22:88:66:82:df:7c: f8:39:2a:59:f3:e8:6f:70:b8:27:55:30:88:33:dd:f3:31:1c: 47:9e:f0:cc:c1:74:c3:1f:97:c0:91:22:1d:fe:aa:38:e8:76: 8c:d5:84:68 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYfHX7fsfVGog1CE3gJv61M3K0nIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjFkMDU3MmZlNzI5OTFiZDMyODU0YmFjNzE2Njc2ZWJk YWQyMmFjZTAeFw0yNjAzMDExNzA3MDJaFw0yNjAzMDIxODUzMDJaMDMxMTAvBgNV BAMTKEI5RjNFM0U0QzdCNDk3NDcyQzU0NThDODQ0RkIxNkE0NzRDOTM4NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLl8tIlOifaTXSutBN0mJFmBlz S0NmyyOFbDxjLfUMJadQ3OT2KOz7kUbpwyaygX1d4Tfe2hw5M4WTlGIAIajiv9Xh nmwmN+N5hkt0CBNkPPKEfqs0ZSDzpl1HbuV6lAcIBOM7+z+pQNhJMGsoCVNSVWn2 4UqZcc48o1mxdVU5A5CjRUMkEWbw3eLbYCJtUK8hD5K1Xziob7Tb22/Uf25QahE0 +7c9b+D+EoZ0lPkMGKtwFGJ1xGE+5OkSGnEDELGJX/n6oW3HPncdfsvV+KYkxBMw luYx7As/cGibwS5NHbzTaK/RKqf7nXn9eeBtv0AWZWco6RuDvYQqjEl/T4YjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUufPj5Me0l0csVFjIRPsWpHTJOFwwHwYDVR0j BBgwFoAU8dBXL+cpkb0yhUuscWZ269rSKs4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTMwZGU4NGItNDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1 YjQ5LzAvRjFEMDU3MkZFNzI5OTFCRDMyODU0QkFDNzE2Njc2RUJEQUQyMkFDRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkQlhMLWNwa2IweWhVdXNjV1oyNjly U0tzNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00 MDBhLTRmZDEtYWI4YS1lNzYxNmUyNDViNDkvMC9GMUQwNTcyRkU3Mjk5MUJEMzI4 NTRCQUM3MTY2NzZFQkRBRDIyQUNFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiRGkE2ikTUe4LCK9PKOD sheskNmrbIfAJiwDFs88mugmetcfcpSpX7elw5ONOKIELEoCQ5M+GIT6dzbuJqhp c/0wbhrLGqafyOVDul9oG1NlPtT8kOji2sK77YqH9w+Ao/K1KeLdGS3tv7MMhqdS Vk0HX4o8qhLtW4h/Brlo5PPaNj0fgQ0BAR7Q9zJDQubfJhfh1p3WlNxxXnzuXhrN U3UOCVbagpydsZO5wPTNuH/w88z5QJEG180Wx29+P/A2vls4xA85ATWRfuig6lpw 3h2OIohmgt98+DkqWfPob3C4J1UwiDPd8zEcR57wzMF0wx+XwJEiHf6qOOh2jNWE aA== -----END CERTIFICATE-----Generated at Mon Mar 2 01:41:17 2026 by rpki-client