$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.mft File: F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.mft (raw, json) Hash identifier: CHI18BD4WQlhKu6nv7/QIMg7xLBaLjYp8GFBj+k7+B0= Subject key identifier: 75:50:90:86:9A:32:82:76:3E:5B:72:55:16:5D:72:56:A4:8B:17:61 Authority key identifier: F4:D1:A7:E9:DF:F0:D9:0E:76:0F:B8:7D:56:05:45:8B:A8:70:BF:32 Certificate issuer: /CN=F4D1A7E9DFF0D90E760FB87D5605458BA870BF32 Certificate serial: 1FC49CFD5E73817E0EB484FA5DBDE1F6E2FBAF3A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.mft Manifest number: 9A Signing time: Thu 26 Mar 2026 13:42:12 +0000 Manifest this update: Thu 26 Mar 2026 13:37:12 +0000 Manifest next update: Fri 27 Mar 2026 17:14:12 +0000 Files and hashes: 1: F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.crl (hash: obnE+hPhnlZXuElqMxwj9ZEe6CFxKFXQHFkUBwREwWI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 16:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:c4:9c:fd:5e:73:81:7e:0e:b4:84:fa:5d:bd:e1:f6:e2:fb:af:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4D1A7E9DFF0D90E760FB87D5605458BA870BF32 Validity Not Before: Mar 26 13:37:12 2026 GMT Not After : Mar 27 17:14:12 2026 GMT Subject: CN=755090869A3282763E5B7255165D7256A48B1761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b2:27:aa:17:bd:21:e9:4d:3f:ed:ba:89:6c: a1:b9:a7:e4:b3:d8:ff:5d:5a:df:ee:d7:a1:38:f4: cc:50:ed:15:c8:2a:4f:20:47:8a:32:5f:1c:79:9f: 9f:36:22:eb:b7:a1:f1:ce:cb:6f:30:bc:d1:23:37: c5:45:aa:57:52:e0:0d:5e:fb:66:eb:d4:ee:4f:5e: 36:7d:b8:f3:8b:64:6f:39:ad:c4:6b:cd:ce:af:ee: 8a:f2:fe:60:04:07:db:b7:59:01:25:40:81:29:f1: be:71:a0:a9:48:93:71:e5:69:3a:0e:4c:ea:a9:b2: 8c:9c:2b:4b:29:d4:87:ab:ee:7d:59:32:fb:32:7a: 8e:25:2a:09:70:44:c3:37:bd:f7:39:9b:ff:53:e0: e4:71:41:43:a9:18:d3:81:60:9c:e8:3e:d6:e7:f2: 6e:b6:55:bf:8c:b6:0c:48:dc:2e:c0:8e:ed:67:5b: cd:9e:c3:5c:44:82:f0:85:c9:a0:5d:7c:c3:b6:f0: 4c:16:89:eb:42:df:8b:bc:67:68:a1:06:37:8d:ac: f2:0c:15:35:4a:ff:92:90:7b:6d:3b:65:70:7e:34: 9c:b9:f2:14:c2:9f:bc:c6:17:61:92:c3:eb:b6:b3: 75:03:d3:ea:a3:12:ae:f8:e0:0b:39:81:19:fd:26: 5c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:50:90:86:9A:32:82:76:3E:5B:72:55:16:5D:72:56:A4:8B:17:61 X509v3 Authority Key Identifier: keyid:F4:D1:A7:E9:DF:F0:D9:0E:76:0F:B8:7D:56:05:45:8B:A8:70:BF:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:57:9f:bd:34:6b:a4:0c:64:de:42:a6:62:18:0e:fe:68:0d: 3f:32:22:40:a6:bd:dd:c3:94:05:8b:c6:eb:f6:1f:0e:ff:5e: d8:0d:96:f0:4c:60:2f:00:ab:d3:dc:e0:35:f2:d0:67:36:ad: 04:93:0d:df:7a:48:6d:bb:7c:ac:46:87:a1:34:41:cf:46:94: 89:76:70:71:05:f9:5f:a4:9e:f4:fc:fa:79:d3:3d:99:42:81: c7:15:6a:bc:0b:af:54:8c:67:8f:1e:73:8b:f7:87:40:44:df: 9d:22:86:05:3e:03:94:f8:2e:24:39:47:e8:6c:08:8e:19:d7: 41:0f:db:ca:94:9d:06:54:51:63:08:26:43:92:88:03:55:77: e7:13:62:60:b3:61:7c:29:68:46:60:38:3a:36:5c:d4:3e:d1: 7e:a8:95:01:60:4c:b7:f2:bd:c8:f0:f3:8e:b7:9e:d1:5f:b6: 9f:54:ea:0e:3c:7c:3c:e5:d1:4e:b9:e3:e7:a7:6b:87:ab:41: 24:06:3a:6b:5e:bb:f6:69:d5:f1:6c:0c:76:24:ca:9a:88:30: 13:5d:99:0d:11:25:04:82:b6:d0:3e:87:d6:1c:82:88:91:d0: 77:27:7d:e8:2b:d3:39:7e:e3:3b:66:09:a1:2d:7b:c8:33:61: 71:ab:4b:90 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUH8Sc/V5zgX4OtIT6Xb3h9uL7rzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjREMUE3RTlERkYwRDkwRTc2MEZCODdENTYwNTQ1OEJB ODcwQkYzMjAeFw0yNjAzMjYxMzM3MTJaFw0yNjAzMjcxNzE0MTJaMDMxMTAvBgNV BAMTKDc1NTA5MDg2OUEzMjgyNzYzRTVCNzI1NTE2NUQ3MjU2QTQ4QjE3NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCesieqF70h6U0/7bqJbKG5p+Sz 2P9dWt/u16E49MxQ7RXIKk8gR4oyXxx5n582Iuu3ofHOy28wvNEjN8VFqldS4A1e +2br1O5PXjZ9uPOLZG85rcRrzc6v7ory/mAEB9u3WQElQIEp8b5xoKlIk3HlaToO TOqpsoycK0sp1Ier7n1ZMvsyeo4lKglwRMM3vfc5m/9T4ORxQUOpGNOBYJzoPtbn 8m62Vb+MtgxI3C7Aju1nW82ew1xEgvCFyaBdfMO28EwWietC34u8Z2ihBjeNrPIM FTVK/5KQe207ZXB+NJy58hTCn7zGF2GSw+u2s3UD0+qjEq744As5gRn9JlzZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUdVCQhpoygnY+W3JVFl1yVqSLF2EwHwYDVR0j BBgwFoAU9NGn6d/w2Q52D7h9VgVFi6hwvzIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzAvRjREMUE3RTlERkYwRDkwRTc2MEZCODdENTYwNTQ1OEJBODcwQkYzMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNEQxQTdFOURGRjBEOTBFNzYwRkI4N0Q1 NjA1NDU4QkE4NzBCRjMyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzA5NzE4ZjA4LWJiMzktNGEwOS1hNGMwLTFmNDAyNDhhNmQxNS8wL0Y0RDFBN0U5 REZGMEQ5MEU3NjBGQjg3RDU2MDU0NThCQTg3MEJGMzIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAtV5+9 NGukDGTeQqZiGA7+aA0/MiJApr3dw5QFi8br9h8O/17YDZbwTGAvAKvT3OA18tBn Nq0Ekw3fekhtu3ysRoehNEHPRpSJdnBxBflfpJ70/Pp50z2ZQoHHFWq8C69UjGeP HnOL94dARN+dIoYFPgOU+C4kOUfobAiOGddBD9vKlJ0GVFFjCCZDkogDVXfnE2Jg s2F8KWhGYDg6NlzUPtF+qJUBYEy38r3I8POOt57RX7afVOoOPHw85dFOuePnp2uH q0EkBjprXrv2adXxbAx2JMqaiDATXZkNESUEgrbQPofWHIKIkdB3J33oK9M5fuM7 ZgmhLXvIM2Fxq0uQ -----END CERTIFICATE-----Generated at Thu Mar 26 20:36:40 2026 by rpki-client