$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft File: 72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft (raw, json) Hash identifier: nUoLj1V098uZIp193uM0MUjKecQrmol3hYbenPDKCq8= Subject key identifier: FC:90:06:25:02:34:FC:14:56:C2:CF:27:47:86:82:0C:EE:DF:56:98 Authority key identifier: 72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1 Certificate issuer: /CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1 Certificate serial: 68196E3BE5D02B1D4897696E58A1E431BC7CE772 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft Manifest number: 01BA Signing time: Wed 25 Mar 2026 15:34:11 +0000 Manifest this update: Wed 25 Mar 2026 15:29:11 +0000 Manifest next update: Thu 26 Mar 2026 18:22:11 +0000 Files and hashes: 1: 326131333a363134303a3a2f32392d3332203d3e203331313834.roa (hash: HEAzsbwZSQMPtZWHDUG9J3+dKm/03SetBs7lrO1nkwI=) 2: 3139332e32322e3235332e302f32342d3234203d3e203331313834.roa (hash: WrMYNrMKiwcHb7Layep1L0ANnPM7z3AEErZKMOJmYxg=) 3: 3139352e37342e34302e302f32322d3234203d3e203331313834.roa (hash: OWTrG12il6+R+m95Ctsd+LQNgEyVIDW3AMDlydaSO3g=) 4: 72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl (hash: bzSl04/ccqRMreXDdVPnwxXemWR2jKtLS0syFoJYxT4=) 5: AS31184.asa (hash: lpmkTsOkQWRjH6hPbivRUCUrNBqi+kTnEwLPqRlRwbs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:19:6e:3b:e5:d0:2b:1d:48:97:69:6e:58:a1:e4:31:bc:7c:e7:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1 Validity Not Before: Mar 25 15:29:11 2026 GMT Not After : Mar 26 18:22:11 2026 GMT Subject: CN=FC9006250234FC1456C2CF274786820CEEDF5698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:a7:83:94:04:08:f9:77:32:4d:8c:99:cc:4c: 16:03:41:92:fa:fc:de:64:12:6a:5e:e8:87:15:44: 10:09:83:6f:27:cb:14:f3:7b:6e:42:2d:cd:2d:f0: e4:b4:74:87:a3:d2:a1:92:69:53:65:ad:61:e0:6e: 04:a2:e3:99:9c:8f:80:c0:3d:93:4e:44:3b:08:69: 31:3c:42:43:90:15:64:a9:8c:a8:55:fb:66:82:28: 3a:52:9e:dd:fb:93:98:a5:90:14:22:f9:39:b2:d4: c3:fa:a1:b6:8d:25:4f:26:9f:96:70:e6:4d:ee:9a: f5:e0:a8:30:14:2b:fa:a6:12:4f:b1:35:8c:f8:95: e5:b5:57:b0:4e:d4:06:65:60:02:35:c1:07:7d:c2: 10:f1:c3:4a:9e:d7:8f:d6:d4:af:6c:5e:6f:e8:17: 13:97:76:09:7e:4e:ee:ae:6a:35:1a:0c:d6:e4:57: c3:f7:43:d6:66:09:0a:db:84:ea:c4:39:97:b8:03: 9d:09:d1:ba:ff:55:26:ab:8b:ce:1a:90:24:de:8d: 46:62:f5:dc:b1:71:df:ce:74:1d:4b:ea:05:eb:87: 49:79:79:5b:7b:80:ed:61:3a:1f:71:02:d7:73:5b: 6f:0d:3c:0a:9b:0f:d2:bb:55:e8:9c:ec:a5:9c:59: f0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:90:06:25:02:34:FC:14:56:C2:CF:27:47:86:82:0C:EE:DF:56:98 X509v3 Authority Key Identifier: keyid:72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:da:01:06:06:8b:64:e6:a0:6b:a2:53:94:92:98:1d:24:5c: 87:eb:e8:28:8f:d9:61:e0:84:5e:e9:68:61:03:92:e3:99:47: d7:67:33:e3:df:8d:cc:9d:2d:02:8d:65:31:64:93:57:b9:b5: 0b:0f:fb:b2:0e:92:b3:f3:36:c6:05:38:62:d7:2e:4b:66:18: c8:e7:56:0b:ce:c3:20:fd:84:e5:e7:4e:9b:dc:78:1b:81:89: f9:c3:0f:0f:5c:19:b3:79:7f:c2:3e:6d:cb:a9:c4:56:c1:6f: f0:7f:81:e9:13:69:62:c6:37:57:02:5b:70:f3:42:02:40:89: 83:47:71:32:84:80:0d:1a:13:38:83:4f:36:85:d2:7d:eb:00: bf:83:5d:f4:c6:07:2b:c4:0c:40:7d:02:0c:90:fa:da:72:bd: e3:3c:0b:f7:ff:fa:31:68:68:dd:17:a1:33:51:ec:80:65:fb: f4:f1:a5:2b:b0:e3:39:b1:15:32:15:a8:88:8b:8c:fb:13:e8: 64:48:cc:cd:53:c2:b3:43:83:e8:c4:4a:46:2b:55:75:b8:e3: 2c:c5:68:cf:3f:50:f9:9b:ec:b6:75:4e:9a:b8:4f:f0:33:41: 48:12:90:75:eb:7f:a3:c3:56:4a:66:7c:f1:5b:59:bc:52:95: dd:15:0a:0c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUaBluO+XQKx1Il2luWKHkMbx853IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJmM2VlMTY5ZjliZDcxZjc4YTQyZDFhNzJmZTBmMmE4 MjQ4MjJkMTAeFw0yNjAzMjUxNTI5MTFaFw0yNjAzMjYxODIyMTFaMDMxMTAvBgNV BAMTKEZDOTAwNjI1MDIzNEZDMTQ1NkMyQ0YyNzQ3ODY4MjBDRUVERjU2OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2p4OUBAj5dzJNjJnMTBYDQZL6 /N5kEmpe6IcVRBAJg28nyxTze25CLc0t8OS0dIej0qGSaVNlrWHgbgSi45mcj4DA PZNORDsIaTE8QkOQFWSpjKhV+2aCKDpSnt37k5ilkBQi+Tmy1MP6obaNJU8mn5Zw 5k3umvXgqDAUK/qmEk+xNYz4leW1V7BO1AZlYAI1wQd9whDxw0qe14/W1K9sXm/o FxOXdgl+Tu6uajUaDNbkV8P3Q9ZmCQrbhOrEOZe4A50J0br/VSari84akCTejUZi 9dyxcd/OdB1L6gXrh0l5eVt7gO1hOh9xAtdzW28NPAqbD9K7Veic7KWcWfApAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU/JAGJQI0/BRWws8nR4aCDO7fVpgwHwYDVR0j BBgwFoAUcvPuFp+b1x94pC0acv4PKoJIItEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjgyYjVlMDAtMmFjMy00OWYxLWEyOWItMjZhNWZkZjBm YTQxLzAvNzJGM0VFMTY5RjlCRDcxRjc4QTQyRDFBNzJGRTBGMkE4MjQ4MjJEMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2N2UHVGcC1iMXg5NHBDMGFjdjRQS29K SUl0RS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yODJiNWUwMC0y YWMzLTQ5ZjEtYTI5Yi0yNmE1ZmRmMGZhNDEvMC83MkYzRUUxNjlGOUJENzFGNzhB NDJEMUE3MkZFMEYyQTgyNDgyMkQxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP9oBBgaLZOaga6JTlJKY HSRch+voKI/ZYeCEXuloYQOS45lH12cz49+NzJ0tAo1lMWSTV7m1Cw/7sg6Ss/M2 xgU4YtcuS2YYyOdWC87DIP2E5edOm9x4G4GJ+cMPD1wZs3l/wj5ty6nEVsFv8H+B 6RNpYsY3VwJbcPNCAkCJg0dxMoSADRoTOINPNoXSfesAv4Nd9MYHK8QMQH0CDJD6 2nK94zwL9//6MWho3RehM1HsgGX79PGlK7DjObEVMhWoiIuM+xPoZEjMzVPCs0OD 6MRKRitVdbjjLMVozz9Q+ZvstnVOmrhP8DNBSBKQdet/o8NWSmZ88VtZvFKV3RUK DA== -----END CERTIFICATE-----Generated at Wed Mar 25 21:25:53 2026 by rpki-client