$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft File: B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft (raw, json) Hash identifier: JCpxIWW9Tmoj2m+IoBgiYQL1EjQGdxIgLy00d/cuII4= Subject key identifier: 4C:2B:58:F0:81:7A:34:C5:24:7B:6D:10:FE:80:80:FA:22:97:92:78 Authority key identifier: B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65 Certificate issuer: /CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65 Certificate serial: 70FBF37870627EFC6E10C5F78715A2FDCEE7F32B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft Manifest number: 0166 Signing time: Wed 25 Mar 2026 15:47:17 +0000 Manifest this update: Wed 25 Mar 2026 15:42:17 +0000 Manifest next update: Thu 26 Mar 2026 16:06:17 +0000 Files and hashes: 1: 326130353a646663353a3a2f33322d3332203d3e20323033303639.roa (hash: 1TfiGVzOrsDaGT5s8N1oSkECX3MMsr3gXEgw7UF/3c0=) 2: 326130353a646663353a623030623a3a2f34382d3438203d3e20323033303639.roa (hash: pe/tp2bLBPulUkbhZe9b5ATBM6Rh5HMZWo4IJTXGPDU=) 3: B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl (hash: LQVaqVAq4UByhEZseMQWNbXmycQT8lwcW9g5r0mKH5s=) 4: 326130353a646663353a3a2f34372d3437203d3e20323033303639.roa (hash: tIjYpQd9GyWainiE9GzQFbd7ZqDFGn1arDb1AExxerU=) 5: 326130353a646663353a326630303a3a2f34302d3430203d3e20323033303639.roa (hash: ikPIiFRhFNPp4wzJn8w9YCg2eDdJG03INaF7Jeb4D9A=) 6: 326130353a646663353a31303a3a2f34372d3437203d3e20323033303639.roa (hash: t/2Kihb52wxLH3GVF+LrphldGHxVkV2gtesMFke+X4A=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 16:06:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:fb:f3:78:70:62:7e:fc:6e:10:c5:f7:87:15:a2:fd:ce:e7:f3:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65 Validity Not Before: Mar 25 15:42:17 2026 GMT Not After : Mar 26 16:06:17 2026 GMT Subject: CN=4C2B58F0817A34C5247B6D10FE8080FA22979278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1f:b9:2b:9d:c6:99:4f:bf:52:1c:07:1e:0e: cd:16:59:6d:20:24:60:ad:a8:b3:bd:02:fc:52:08: 8a:7b:c0:c0:bf:0d:94:d7:1d:3f:53:67:76:c9:ae: a7:c9:d2:22:ef:79:62:6b:0f:07:31:4f:7d:dc:1c: 30:23:b9:e2:d3:a5:ac:d2:40:75:79:d2:10:78:11: 0d:c2:41:9e:68:d5:34:9d:fa:49:40:2e:43:b1:77: 45:88:25:8c:b4:f4:50:dd:c0:17:16:f5:65:22:44: 0a:a5:b9:32:94:0e:6f:df:67:f6:9c:dd:70:a5:11: e9:82:8e:b4:6d:9e:06:37:69:33:2f:ac:2c:4c:a0: 5f:95:fb:e1:f7:0f:d3:ae:77:fd:b6:36:73:13:56: 0e:25:c2:10:ec:3b:27:80:d9:76:85:13:76:bc:4b: 2c:03:2c:cc:82:c1:d0:ce:dd:a6:ad:ad:e3:cc:9e: 84:c5:cf:d9:fb:51:d9:4f:56:28:74:5d:f2:99:dd: da:e6:12:6e:76:e6:2c:d1:ff:ba:0a:40:5e:7c:9b: 44:b5:e2:b9:dc:eb:7c:80:28:54:d0:2f:69:62:35: 0e:21:ad:7c:3d:28:76:2f:76:19:27:1f:6d:f5:3d: cc:f1:70:27:4c:3d:3f:bf:98:0e:e1:d5:da:01:27: 66:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2B:58:F0:81:7A:34:C5:24:7B:6D:10:FE:80:80:FA:22:97:92:78 X509v3 Authority Key Identifier: keyid:B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:98:40:fb:31:8f:44:04:3e:31:c0:02:57:3d:fb:63:5a:ac: c3:3f:97:22:6d:34:64:67:50:5c:bf:51:98:2a:30:c7:40:df: c3:4b:f8:00:e7:6d:39:93:48:44:af:f8:5f:5c:b2:f4:14:06: fc:9a:60:05:29:b7:7c:b8:48:b9:3c:26:d0:7c:e5:00:4a:22: 88:01:9d:17:54:27:fa:b3:3e:1b:33:17:d1:5b:69:6f:e7:9f: d6:07:85:c8:40:47:07:f1:4a:2a:8a:f8:c7:77:3d:ca:99:9b: f3:e5:29:a9:d8:ae:72:3e:b3:35:99:4e:46:e9:8d:77:b2:cd: b0:b2:d5:06:8e:8a:71:2c:5e:13:83:58:26:22:7c:3b:c5:f7: 78:eb:d4:76:78:47:be:54:f7:d1:48:68:68:36:b9:a6:79:32: 1e:b0:6b:0c:8f:02:2d:fe:d6:2b:5c:05:51:e7:e6:82:c1:81: 8d:e5:29:36:87:98:49:f6:0e:7b:24:18:54:b8:36:39:36:a9: d6:21:47:6e:1a:53:3c:65:ed:e2:97:2e:7c:87:ce:28:5a:ad: c4:17:7f:22:83:fb:29:57:42:c7:3a:76:86:86:5b:b2:81:3b: b9:7c:20:c3:b3:89:58:2f:31:da:55:b5:4c:46:69:cf:29:73: 09:d3:0d:6c -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUcPvzeHBifvxuEMX3hxWi/c7n8yswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY0NzlFMDkwNEIzMDE5NzVCMTlEMkJGRjQyQkUwOERC RkQ2OEQ2NTAeFw0yNjAzMjUxNTQyMTdaFw0yNjAzMjYxNjA2MTdaMDMxMTAvBgNV BAMTKDRDMkI1OEYwODE3QTM0QzUyNDdCNkQxMEZFODA4MEZBMjI5NzkyNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWH7krncaZT79SHAceDs0WWW0g JGCtqLO9AvxSCIp7wMC/DZTXHT9TZ3bJrqfJ0iLveWJrDwcxT33cHDAjueLTpazS QHV50hB4EQ3CQZ5o1TSd+klALkOxd0WIJYy09FDdwBcW9WUiRAqluTKUDm/fZ/ac 3XClEemCjrRtngY3aTMvrCxMoF+V++H3D9Oud/22NnMTVg4lwhDsOyeA2XaFE3a8 SywDLMyCwdDO3aatrePMnoTFz9n7UdlPVih0XfKZ3drmEm525izR/7oKQF58m0S1 4rnc63yAKFTQL2liNQ4hrXw9KHYvdhknH231PczxcCdMPT+/mA7h1doBJ2Z3AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUTCtY8IF6NMUke20Q/oCA+iKXkngwHwYDVR0j BBgwFoAUtkeeCQSzAZdbGdK/9Cvgjb/WjWUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzkvQjY0NzlFMDkwNEIzMDE5NzVCMTlEMkJGRjQyQkUwOERCRkQ2OEQ2NS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQjY0NzlFMDkwNEIzMDE5NzVCMTlEMkJGRjQyQkUwOERCRkQ2 OEQ2NS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03 Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvOS9CNjQ3OUUwOTA0QjMwMTk3NUIx OUQyQkZGNDJCRTA4REJGRDY4RDY1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOphA+zGPRAQ+McACVz37 Y1qswz+XIm00ZGdQXL9RmCowx0Dfw0v4AOdtOZNIRK/4X1yy9BQG/JpgBSm3fLhI uTwm0HzlAEoiiAGdF1Qn+rM+GzMX0Vtpb+ef1geFyEBHB/FKKor4x3c9ypmb8+Up qdiucj6zNZlORumNd7LNsLLVBo6KcSxeE4NYJiJ8O8X3eOvUdnhHvlT30UhoaDa5 pnkyHrBrDI8CLf7WK1wFUefmgsGBjeUpNoeYSfYOeyQYVLg2OTap1iFHbhpTPGXt 4pcufIfOKFqtxBd/IoP7KVdCxzp2hoZbsoE7uXwgw7OJWC8x2lW1TEZpzylzCdMN bA== -----END CERTIFICATE-----Generated at Thu Mar 26 04:18:49 2026 by rpki-client