$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft File: 71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft (raw, json) Hash identifier: oMtItgwavfoz0qrP5CvRoxhofWxdpb5W9OVOEJf1JvI= Subject key identifier: 54:E9:4C:DF:79:37:C9:31:17:3F:0D:66:99:01:D4:4A:10:AF:46:1E Authority key identifier: 71:AD:BC:B8:05:EE:EE:44:A7:FD:C0:7C:A5:4A:D6:61:0C:81:E1:B3 Certificate issuer: /CN=71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3 Certificate serial: 766698D9972B4B8AF45A60C0A7C3B2D416D37FD8 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft Manifest number: 44 Signing time: Wed 25 Mar 2026 21:05:06 +0000 Manifest this update: Wed 25 Mar 2026 21:00:06 +0000 Manifest next update: Thu 26 Mar 2026 21:58:06 +0000 Files and hashes: 1: 326130623a346530373a353030303a3a2f34382d3438203d3e20323135363835.roa (hash: hC1tSwtk6P/n7XKD/XE88SOcdq8LuodINPa1HAhKd6c=) 2: 71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl (hash: JXPu3h/l8G9Yph3yMcZhIagD0wnjOlBtEDw/OAaq/r0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 21:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:66:98:d9:97:2b:4b:8a:f4:5a:60:c0:a7:c3:b2:d4:16:d3:7f:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3 Validity Not Before: Mar 25 21:00:06 2026 GMT Not After : Mar 26 21:58:06 2026 GMT Subject: CN=54E94CDF7937C931173F0D669901D44A10AF461E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7f:cb:e6:b9:6e:13:4f:e4:f8:2d:18:c1:d1: 28:7d:75:50:f4:90:c3:b9:3c:e1:9f:a3:82:f7:2e: c3:d8:f6:6a:84:08:ed:ef:dc:32:35:5e:9c:86:96: 01:8a:6a:cc:e1:70:2a:89:c1:3d:c9:65:1c:db:31: b8:6f:ff:51:56:e0:85:74:90:54:d6:62:57:2f:f9: 3c:b6:10:65:f9:8f:8e:99:04:4e:aa:65:69:6f:e2: 8c:2d:5f:5d:6c:ec:e7:0a:c7:64:e4:f6:06:8f:92: 03:0e:a1:5e:7d:e4:c0:4b:57:89:2e:f0:68:28:2c: 73:87:8a:f3:a7:97:20:ef:a5:b7:e4:fd:83:ee:83: 3f:b7:13:15:14:f3:a6:6e:51:20:a2:4d:83:3d:07: bc:ad:7c:8a:cb:37:a3:e7:cb:85:dc:b9:a6:e0:9c: cf:20:5d:54:bc:fd:01:61:3e:59:5b:15:47:51:68: 92:25:f2:54:bf:5b:1d:94:90:bb:81:80:65:4b:f8: b3:9d:e2:2f:65:bc:e3:a3:d7:25:3d:8b:9a:c1:49: bc:b7:76:86:72:91:f9:74:df:63:15:79:f0:ad:09: f8:79:4a:9e:79:98:63:6d:59:4b:48:8f:aa:e0:b3: 6a:97:bd:ab:71:6f:15:c7:34:2c:cd:49:39:cc:9d: 7d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E9:4C:DF:79:37:C9:31:17:3F:0D:66:99:01:D4:4A:10:AF:46:1E X509v3 Authority Key Identifier: keyid:71:AD:BC:B8:05:EE:EE:44:A7:FD:C0:7C:A5:4A:D6:61:0C:81:E1:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:c0:98:34:9c:45:08:1c:67:b7:23:6b:2c:5d:37:14:1c:bd: b8:e8:b7:b2:aa:65:49:db:6d:86:8e:ef:41:b5:4e:f8:1f:14: b4:ad:ef:55:19:c1:55:7a:43:d7:0f:82:b4:52:41:40:ad:bb: 11:a0:54:2c:ed:2e:59:24:2d:2d:2c:9e:11:bd:0d:40:8d:68: 75:4c:5e:25:5c:17:ac:7a:6f:c4:d4:3d:64:d5:5d:bb:67:4d: 2c:bc:ef:9d:b8:83:45:23:de:e5:e8:46:f8:fa:7d:c4:4e:27: a4:ff:53:53:8d:ba:c6:c4:b3:39:38:61:da:5a:27:cc:46:c0: e1:15:30:c6:71:6a:88:5b:08:fd:5a:13:3b:bc:78:9b:57:7b: 99:95:6d:35:d2:b4:2b:1c:57:05:68:a1:46:83:5a:ed:9b:79: 07:d0:24:d2:21:90:6e:2b:f8:2e:c5:db:a4:f8:90:da:01:c0: a5:59:3a:c3:4f:12:84:47:9b:87:76:21:d1:17:90:e7:7f:ea: c9:f2:7d:e8:da:12:93:76:7d:a0:da:a0:a8:c4:a9:b3:73:76: dd:57:b5:3d:5f:06:ec:68:67:3b:56:4e:04:15:1a:5c:13:3b: 53:e9:9a:10:bf:34:33:91:67:2f:5a:3f:5e:34:b5:9a:04:2d: 34:87:ac:39 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUdmaY2ZcrS4r0WmDAp8Oy1BbTf9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFBREJDQjgwNUVFRUU0NEE3RkRDMDdDQTU0QUQ2NjEw QzgxRTFCMzAeFw0yNjAzMjUyMTAwMDZaFw0yNjAzMjYyMTU4MDZaMDMxMTAvBgNV BAMTKDU0RTk0Q0RGNzkzN0M5MzExNzNGMEQ2Njk5MDFENDRBMTBBRjQ2MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpf8vmuW4TT+T4LRjB0Sh9dVD0 kMO5POGfo4L3LsPY9mqECO3v3DI1XpyGlgGKaszhcCqJwT3JZRzbMbhv/1FW4IV0 kFTWYlcv+Ty2EGX5j46ZBE6qZWlv4owtX11s7OcKx2Tk9gaPkgMOoV595MBLV4ku 8GgoLHOHivOnlyDvpbfk/YPugz+3ExUU86ZuUSCiTYM9B7ytfIrLN6Pny4Xcuabg nM8gXVS8/QFhPllbFUdRaJIl8lS/Wx2UkLuBgGVL+LOd4i9lvOOj1yU9i5rBSby3 doZykfl032MVefCtCfh5Sp55mGNtWUtIj6rgs2qXvatxbxXHNCzNSTnMnX0ZAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUVOlM33k3yTEXPw1mmQHUShCvRh4wHwYDVR0j BBgwFoAUca28uAXu7kSn/cB8pUrWYQyB4bMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmU3Zjc0N2UtZmY2OC00ZmEyLWIyZTMtZjZlZGU1NDhh MzIwLzEvNzFBREJDQjgwNUVFRUU0NEE3RkRDMDdDQTU0QUQ2NjEwQzgxRTFCMy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvNzFBREJDQjgwNUVFRUU0NEE3RkRDMDdDQTU0QUQ2NjEwQzgx RTFCMy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82ZTdmNzQ3ZS1m ZjY4LTRmYTItYjJlMy1mNmVkZTU0OGEzMjAvMS83MUFEQkNCODA1RUVFRTQ0QTdG REMwN0NBNTRBRDY2MTBDODFFMUIzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl8CYNJxFCBxntyNrLF03 FBy9uOi3sqplSdttho7vQbVO+B8UtK3vVRnBVXpD1w+CtFJBQK27EaBULO0uWSQt LSyeEb0NQI1odUxeJVwXrHpvxNQ9ZNVdu2dNLLzvnbiDRSPe5ehG+Pp9xE4npP9T U426xsSzOThh2lonzEbA4RUwxnFqiFsI/VoTO7x4m1d7mZVtNdK0KxxXBWihRoNa 7Zt5B9Ak0iGQbiv4LsXbpPiQ2gHApVk6w08ShEebh3Yh0ReQ53/qyfJ96NoSk3Z9 oNqgqMSps3N23Ve1PV8G7GhnO1ZOBBUaXBM7U+maEL80M5FnL1o/XjS1mgQtNIes OQ== -----END CERTIFICATE-----Generated at Thu Mar 26 07:06:06 2026 by rpki-client