$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft File: 71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft (raw, json) Hash identifier: DjUn0z3CqHRUlb+kFiiegWNYkaaQx3uaA+7wjQCvITk= Subject key identifier: 94:E8:FC:E0:09:3F:BA:D5:A3:B7:FF:C8:2A:1A:91:E4:35:2A:F4:16 Authority key identifier: 71:AD:BC:B8:05:EE:EE:44:A7:FD:C0:7C:A5:4A:D6:61:0C:81:E1:B3 Certificate issuer: /CN=71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3 Certificate serial: 68F8738713CA7191DBDE7E9D3A9B5779D1353B34 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft Manifest number: 0147 Signing time: Tue 29 Sep 2026 06:39:16 +0000 Manifest this update: Tue 29 Sep 2026 06:34:16 +0000 Manifest next update: Wed 30 Sep 2026 07:50:16 +0000 Files and hashes: 1: 71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl (hash: tc7gzjk9Q1RcXOWItADJGxpmy2hVsxa9gvlXGWO9gQA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Sep 2026 07:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:f8:73:87:13:ca:71:91:db:de:7e:9d:3a:9b:57:79:d1:35:3b:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3 Validity Not Before: Sep 29 06:34:16 2026 GMT Not After : Sep 30 07:50:16 2026 GMT Subject: CN=94E8FCE0093FBAD5A3B7FFC82A1A91E4352AF416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:27:bc:b7:3f:46:43:8c:02:4b:e3:f8:65:04: 16:42:41:e8:5f:17:22:e9:44:76:d8:42:d8:60:48: 0c:7e:51:92:5f:76:40:69:9d:53:84:ac:93:c9:c4: 93:36:75:8d:56:ec:04:e7:39:53:3f:c5:ae:75:48: 10:5a:b0:48:28:f8:b1:9f:2f:8f:d0:82:d7:84:79: 08:ec:c4:98:17:c5:85:8d:e5:84:16:ad:5f:74:45: 2a:b5:08:61:47:44:da:6a:e0:5a:9f:71:a0:1c:a0: 0d:66:55:49:45:ec:22:97:e8:3d:c3:63:5d:2a:f2: b6:48:fc:44:89:7c:37:71:0d:d3:5c:84:a6:83:cf: ae:62:cc:41:c5:38:c9:aa:74:80:e1:d3:a2:d1:92: 13:d9:49:ca:48:1c:43:03:bf:66:c7:77:ae:41:e1: c8:c1:1b:11:b0:83:0d:da:72:c1:37:64:c9:2b:1c: 9b:e6:17:89:5d:3b:d7:b1:92:7f:af:72:2a:ad:4b: e4:47:06:04:84:a9:47:a4:c3:ef:20:38:2f:7e:e9: 98:1c:e0:37:f1:ee:e9:43:3f:ad:06:42:e1:6c:0a: e2:5b:62:fa:1c:6e:fb:98:cb:f1:fc:d0:b9:34:90: bf:df:44:d8:ad:67:e3:2c:1d:ce:ff:fe:3b:c1:b3: fa:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E8:FC:E0:09:3F:BA:D5:A3:B7:FF:C8:2A:1A:91:E4:35:2A:F4:16 X509v3 Authority Key Identifier: keyid:71:AD:BC:B8:05:EE:EE:44:A7:FD:C0:7C:A5:4A:D6:61:0C:81:E1:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:3c:72:b8:47:25:a1:2d:72:ee:4b:32:03:36:23:d4:b0:af: 3e:e4:f2:6f:20:0c:b6:98:e5:5c:31:96:e4:76:57:3c:1b:1e: 43:0f:37:96:d2:b6:24:28:c3:f7:9d:2c:7a:b1:3d:42:b7:28: fa:0f:e8:e6:9b:90:78:40:d1:7d:df:9a:1d:20:15:68:b6:6d: ac:db:8b:8c:87:ee:63:75:72:32:4d:bc:28:d7:cf:e7:f2:6b: 58:78:5a:99:fd:1b:9f:c2:29:1c:12:bf:7c:f1:33:d1:e0:f5: 5c:46:93:ea:a6:e7:22:1e:1a:ea:18:99:e0:6c:d3:3f:66:81: 31:2f:5a:06:45:75:31:50:02:35:ca:c4:69:b1:3c:5c:3a:59: 73:49:2d:52:a5:c8:7f:4d:7c:0f:bd:53:8d:7d:ad:bd:59:2b: 76:af:c1:8d:7e:cf:a7:e7:e1:b6:38:d1:50:a8:14:01:e7:a2: dd:6a:74:3c:49:63:0b:05:98:3c:66:ac:6f:4c:73:3e:7f:e9: cf:0a:ca:89:8b:b6:50:23:0f:e6:4a:ad:81:13:bc:22:0a:82: 62:00:ae:cd:4f:b6:c7:01:07:92:89:d7:92:95:bc:81:6c:10: 07:e1:2f:dd:4f:e6:ca:9d:02:f8:24:db:3e:4e:42:64:5b:15: 82:07:4b:3f -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUaPhzhxPKcZHb3n6dOptXedE1OzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFBREJDQjgwNUVFRUU0NEE3RkRDMDdDQTU0QUQ2NjEw QzgxRTFCMzAeFw0yNjA5MjkwNjM0MTZaFw0yNjA5MzAwNzUwMTZaMDMxMTAvBgNV BAMTKDk0RThGQ0UwMDkzRkJBRDVBM0I3RkZDODJBMUE5MUU0MzUyQUY0MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyJ7y3P0ZDjAJL4/hlBBZCQehf FyLpRHbYQthgSAx+UZJfdkBpnVOErJPJxJM2dY1W7ATnOVM/xa51SBBasEgo+LGf L4/QgteEeQjsxJgXxYWN5YQWrV90RSq1CGFHRNpq4FqfcaAcoA1mVUlF7CKX6D3D Y10q8rZI/ESJfDdxDdNchKaDz65izEHFOMmqdIDh06LRkhPZScpIHEMDv2bHd65B 4cjBGxGwgw3acsE3ZMkrHJvmF4ldO9exkn+vciqtS+RHBgSEqUekw+8gOC9+6Zgc 4Dfx7ulDP60GQuFsCuJbYvocbvuYy/H80Lk0kL/fRNitZ+MsHc7//jvBs/pTAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUlOj84Ak/utWjt//IKhqR5DUq9BYwHwYDVR0j BBgwFoAUca28uAXu7kSn/cB8pUrWYQyB4bMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmU3Zjc0N2UtZmY2OC00ZmEyLWIyZTMtZjZlZGU1NDhh MzIwLzEvNzFBREJDQjgwNUVFRUU0NEE3RkRDMDdDQTU0QUQ2NjEwQzgxRTFCMy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvNzFBREJDQjgwNUVFRUU0NEE3RkRDMDdDQTU0QUQ2NjEwQzgx RTFCMy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82ZTdmNzQ3ZS1m ZjY4LTRmYTItYjJlMy1mNmVkZTU0OGEzMjAvMS83MUFEQkNCODA1RUVFRTQ0QTdG REMwN0NBNTRBRDY2MTBDODFFMUIzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVjxyuEcloS1y7ksyAzYj 1LCvPuTybyAMtpjlXDGW5HZXPBseQw83ltK2JCjD950serE9Qrco+g/o5puQeEDR fd+aHSAVaLZtrNuLjIfuY3VyMk28KNfP5/JrWHhamf0bn8IpHBK/fPEz0eD1XEaT 6qbnIh4a6hiZ4GzTP2aBMS9aBkV1MVACNcrEabE8XDpZc0ktUqXIf018D71TjX2t vVkrdq/BjX7Pp+fhtjjRUKgUAeei3Wp0PEljCwWYPGasb0xzPn/pzwrKiYu2UCMP 5kqtgRO8IgqCYgCuzU+2xwEHkonXkpW8gWwQB+Ev3U/myp0C+CTbPk5CZFsVggdL Pw== -----END CERTIFICATE-----Generated at Wed Sep 30 00:58:29 2026 by rpki-client