$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft File: B3F1737E90F240D7ABB33C72F84D71482FE62679.mft (raw, json) Hash identifier: XjG90LYhRVWEjgJ81pMAs1zPIH4lWjiRkfxGkiZmW5I= Subject key identifier: 2E:DC:D2:79:DF:0F:A3:01:FF:75:E4:5D:DE:92:E9:44:9D:9C:CE:B5 Authority key identifier: B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79 Certificate issuer: /CN=B3F1737E90F240D7ABB33C72F84D71482FE62679 Certificate serial: 08EA9EE69A4B93B055657D77F6ED6C59309D26C1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft Manifest number: 0168 Signing time: Wed 25 Mar 2026 10:36:57 +0000 Manifest this update: Wed 25 Mar 2026 10:31:57 +0000 Manifest next update: Thu 26 Mar 2026 13:31:57 +0000 Files and hashes: 1: 326130373a353463373a356666653a3a2f34382d3438203d3e20323135353737.roa (hash: FG+PaaelFQQTh0Pl3BlClI1RFrk+FdkeBozLHlfkasU=) 2: B3F1737E90F240D7ABB33C72F84D71482FE62679.crl (hash: U33KAM6lJ8HxDF04WXphT9rLtRpFAjUHCHJSDsn9bHI=) 3: 326130373a353463373a353939393a3a2f34382d3438203d3e20323136343535.roa (hash: SvnI/kKkXn3yiVhNqVKN9Taah5WCLs8Rw+D4PBjSrbo=) 4: 326130373a353463373a356630303a3a2f34342d3434203d3e20323135353737.roa (hash: x50UL+Ve3n2XGikbTbQdFLaQIWslIjcJnasiyHq58lM=) 5: 326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa (hash: dERySCDhc3+rlKwMAYMhD9XvddhhgSjXbVZeRoj98gc=) 6: 326130373a353463373a356631303a3a2f34382d3438203d3e20323135353737.roa (hash: 7mCuwzfIey+Hcqy/Vhuj4zUx9bQcgkzpUeh+UNvlKO4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 13:21:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:ea:9e:e6:9a:4b:93:b0:55:65:7d:77:f6:ed:6c:59:30:9d:26:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F1737E90F240D7ABB33C72F84D71482FE62679 Validity Not Before: Mar 25 10:31:57 2026 GMT Not After : Mar 26 13:31:57 2026 GMT Subject: CN=2EDCD279DF0FA301FF75E45DDE92E9449D9CCEB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:83:56:69:10:80:2a:3b:be:e5:2c:93:e2:c0: 0f:0d:27:77:d4:af:bd:28:60:cf:8a:82:c2:26:dc: 49:68:97:a0:66:bb:7d:af:d5:0a:ed:5c:5e:f1:2c: a9:73:2e:c5:e1:6f:e6:a2:74:64:ca:c7:cf:ac:34: 7d:79:0d:5a:b4:9f:f4:82:9f:5a:a4:a2:20:25:5a: a0:29:77:4d:ea:90:b8:e3:91:ba:fd:21:42:29:79: fb:7e:cc:a8:4f:bc:4e:01:74:cc:18:e7:1c:6c:08: 41:43:bf:a4:94:77:5e:d3:41:62:15:bd:0b:a1:78: 31:15:af:89:f7:1a:e6:eb:0f:ed:ec:27:d9:c7:8d: c7:02:a7:77:f5:70:c1:82:74:20:f7:39:ad:a8:94: 57:4c:24:36:55:c5:0f:5b:50:26:8c:e8:57:18:6d: d2:e3:e9:ec:59:03:88:10:d6:eb:ee:73:74:4e:df: 8a:64:69:a4:8f:a4:9b:cf:cc:01:77:4d:f7:7f:1c: 9b:dc:71:af:72:14:12:46:61:42:08:da:ca:c1:cb: 78:74:b6:1c:fc:a5:a0:5b:73:47:16:68:ea:c1:89: 16:c5:e6:f5:4d:f3:b6:71:31:ae:cc:0f:1f:b6:5f: fb:11:24:71:f1:a0:82:66:b9:4f:6f:a8:f4:65:4d: 2b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DC:D2:79:DF:0F:A3:01:FF:75:E4:5D:DE:92:E9:44:9D:9C:CE:B5 X509v3 Authority Key Identifier: keyid:B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:c1:13:5c:c0:fd:de:4b:e8:28:50:5f:56:01:30:d3:62:3e: bb:5e:31:c5:54:40:98:cf:c7:92:71:3e:0d:46:f9:87:e7:ad: 7a:d2:79:64:7e:d2:27:e4:02:e0:19:b0:0f:1f:b5:64:8c:cc: ed:e3:6e:46:50:55:90:cf:11:30:94:36:f4:d2:ad:0e:a3:7e: 52:d6:ec:1c:f0:42:09:bc:e5:b7:aa:ba:4b:26:61:50:5f:e1: bd:42:ac:56:35:c2:67:72:48:51:05:50:0c:7e:76:21:5a:46: c2:5e:a4:3e:0a:ee:f8:9e:b1:1f:86:ce:8d:21:b3:5a:5d:25: 0b:c0:bf:1d:07:3c:bb:ce:0d:f9:f6:46:4c:e5:d4:cd:e9:c1: 98:86:3c:4d:17:fb:af:af:86:0b:9a:9b:e5:57:93:94:3a:51: 86:e4:30:5f:c9:a4:43:d2:4c:e8:b4:a8:9a:62:71:1f:dd:0f: 4d:70:59:de:de:43:e4:f9:53:36:10:36:13:cb:4e:bd:61:ea: 39:fa:e2:8e:4e:e5:20:51:19:00:fc:a5:25:29:09:87:be:63: 05:f7:06:40:f0:02:ca:69:5e:99:ef:82:c4:44:0b:a8:3b:03: fc:3b:96:0c:9c:86:07:17:97:a7:c9:39:6f:a0:78:ab:c4:c9: 78:76:f0:69 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUCOqe5ppLk7BVZX139u1sWTCdJsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgy RkU2MjY3OTAeFw0yNjAzMjUxMDMxNTdaFw0yNjAzMjYxMzMxNTdaMDMxMTAvBgNV BAMTKDJFRENEMjc5REYwRkEzMDFGRjc1RTQ1RERFOTJFOTQ0OUQ5Q0NFQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYg1ZpEIAqO77lLJPiwA8NJ3fU r70oYM+KgsIm3Elol6Bmu32v1QrtXF7xLKlzLsXhb+aidGTKx8+sNH15DVq0n/SC n1qkoiAlWqApd03qkLjjkbr9IUIpeft+zKhPvE4BdMwY5xxsCEFDv6SUd17TQWIV vQuheDEVr4n3GubrD+3sJ9nHjccCp3f1cMGCdCD3Oa2olFdMJDZVxQ9bUCaM6FcY bdLj6exZA4gQ1uvuc3RO34pkaaSPpJvPzAF3Tfd/HJvcca9yFBJGYUII2srBy3h0 thz8paBbc0cWaOrBiRbF5vVN87ZxMa7MDx+2X/sRJHHxoIJmuU9vqPRlTStvAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQULtzSed8PowH/deRd3pLpRJ2czrUwHwYDVR0j BBgwFoAUs/FzfpDyQNerszxy+E1xSC/mJnkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzIvQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgyRkU2MjY3OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC9CM0YxNzM3RTkwRjI0MEQ3QUJCMzNDNzJG ODRENzE0ODJGRTYyNjc5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzU4MjFjNDdlLWU4MTUtNDJkZS1iZDZiLTE5YTJlMWFlNTY0YS8yL0IzRjE3MzdF OTBGMjQwRDdBQkIzM0M3MkY4NEQ3MTQ4MkZFNjI2NzkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAAwRNc wP3eS+goUF9WATDTYj67XjHFVECYz8eScT4NRvmH56160nlkftIn5ALgGbAPH7Vk jMzt425GUFWQzxEwlDb00q0Oo35S1uwc8EIJvOW3qrpLJmFQX+G9QqxWNcJnckhR BVAMfnYhWkbCXqQ+Cu74nrEfhs6NIbNaXSULwL8dBzy7zg359kZM5dTN6cGYhjxN F/uvr4YLmpvlV5OUOlGG5DBfyaRD0kzotKiaYnEf3Q9NcFne3kPk+VM2EDYTy069 Yeo5+uKOTuUgURkA/KUlKQmHvmMF9wZA8ALKaV6Z74LERAuoOwP8O5YMnIYHF5en yTlvoHirxMl4dvBp -----END CERTIFICATE-----Generated at Wed Mar 25 23:08:27 2026 by rpki-client