$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft File: 71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft (raw, json) Hash identifier: p1obcDisdjVKlNo6Ddq47uohAnolCPpxrN84tUmQyTM= Subject key identifier: 15:1C:C2:65:B3:62:DF:A4:39:C7:DA:F7:69:F0:50:F3:A9:72:F7:EB Authority key identifier: 71:AD:BC:B8:05:EE:EE:44:A7:FD:C0:7C:A5:4A:D6:61:0C:81:E1:B3 Certificate issuer: /CN=71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3 Certificate serial: 7DC30A546AF7FD5C86DD60C46B711859D0E27B18 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft Manifest number: 89 Signing time: Wed 13 May 2026 01:45:06 +0000 Manifest this update: Wed 13 May 2026 01:40:06 +0000 Manifest next update: Thu 14 May 2026 04:32:06 +0000 Files and hashes: 1: 71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl (hash: mEUKPAQkVBQM+OZW/ixtiM0829RaqfkQzc9zBblqmdE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 19:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:c3:0a:54:6a:f7:fd:5c:86:dd:60:c4:6b:71:18:59:d0:e2:7b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3 Validity Not Before: May 13 01:40:06 2026 GMT Not After : May 14 04:32:06 2026 GMT Subject: CN=151CC265B362DFA439C7DAF769F050F3A972F7EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c4:d9:f0:4c:e7:bc:08:9e:fb:09:c9:a0:4a: 45:19:37:da:2d:5d:b2:14:2e:c5:69:dd:fd:ec:bc: 4f:e8:18:7f:67:d7:f0:26:00:00:bd:1f:94:5a:12: 9a:af:8d:65:5c:e4:c6:96:86:7b:d5:1c:c0:ef:0e: e1:4e:3c:eb:5c:4c:6c:6c:a0:46:8f:42:37:ac:10: 0a:c5:d6:e7:e0:e7:e3:56:ef:17:0d:51:b0:e1:ee: f7:35:5a:54:0f:f4:cb:62:92:1a:ce:eb:3c:17:e9: 50:e2:44:db:f1:c7:7d:80:f8:79:d3:a5:c5:b8:5f: 0b:88:9d:27:d0:36:0a:5f:7c:09:35:73:00:6b:d3: b3:e4:c1:00:aa:33:c8:23:bd:43:0c:c1:42:73:cf: 3d:55:56:86:0a:06:fd:75:0a:96:1b:96:85:86:a3: dc:fb:4a:bf:ba:26:12:04:6f:6d:b7:51:f3:7e:89: e6:98:d9:b8:b8:64:9d:71:aa:e9:75:30:96:57:d4: 94:78:09:b3:49:cd:7d:9f:de:21:e5:98:69:1c:b5: db:d8:c3:7d:29:ec:cb:18:11:2c:3a:a4:03:e5:a3: 68:ab:eb:ca:b4:14:06:a0:c5:97:ae:cc:64:83:e7: 80:09:d3:d5:b4:d8:2d:3f:87:d7:ec:b9:6d:5a:13: e6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1C:C2:65:B3:62:DF:A4:39:C7:DA:F7:69:F0:50:F3:A9:72:F7:EB X509v3 Authority Key Identifier: keyid:71:AD:BC:B8:05:EE:EE:44:A7:FD:C0:7C:A5:4A:D6:61:0C:81:E1:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:1b:ea:fc:c6:ee:77:ea:54:35:80:da:2e:56:4b:df:82:8a: c6:b6:6d:d3:cd:39:16:59:ac:9a:b8:3b:a6:3a:fd:ce:e9:98: 42:a3:ef:79:da:14:32:ec:39:93:50:c3:05:9c:50:2c:00:ea: 89:43:a5:68:2e:ee:26:9f:6f:8b:23:5f:cc:20:69:36:1e:48: 42:01:f4:fb:8f:ae:78:6e:dd:4c:a4:28:06:fd:cf:90:25:48: 4c:ab:46:3f:57:85:9a:12:22:49:77:cf:9a:4d:e1:84:36:40: 5e:91:23:60:f7:85:c0:e4:78:aa:44:ff:1b:57:b4:fd:0b:9d: ab:f5:01:c2:2a:41:3e:1a:22:4b:aa:31:39:4f:4b:24:39:22: 26:ce:75:da:44:57:19:27:bd:70:6d:35:f8:48:0f:bb:bd:4c: cb:46:26:39:d4:24:58:c9:89:b2:c6:3e:05:1a:1a:df:ed:ec: 98:37:8c:b4:c0:2b:79:62:52:5b:75:ab:d4:0f:4a:31:a7:26: 02:d1:2e:25:ad:7d:b3:8f:2c:7a:7b:93:dc:6a:b7:02:01:4b: ea:91:ce:d4:a9:ac:ac:67:a9:eb:fb:fb:05:ea:b6:97:5a:fb: df:fa:9f:f2:89:c9:92:5f:0c:95:69:e7:12:d6:67:73:f0:5d: a6:aa:11:01 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUfcMKVGr3/VyG3WDEa3EYWdDiexgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFBREJDQjgwNUVFRUU0NEE3RkRDMDdDQTU0QUQ2NjEw QzgxRTFCMzAeFw0yNjA1MTMwMTQwMDZaFw0yNjA1MTQwNDMyMDZaMDMxMTAvBgNV BAMTKDE1MUNDMjY1QjM2MkRGQTQzOUM3REFGNzY5RjA1MEYzQTk3MkY3RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5xNnwTOe8CJ77CcmgSkUZN9ot XbIULsVp3f3svE/oGH9n1/AmAAC9H5RaEpqvjWVc5MaWhnvVHMDvDuFOPOtcTGxs oEaPQjesEArF1ufg5+NW7xcNUbDh7vc1WlQP9MtikhrO6zwX6VDiRNvxx32A+HnT pcW4XwuInSfQNgpffAk1cwBr07PkwQCqM8gjvUMMwUJzzz1VVoYKBv11CpYbloWG o9z7Sr+6JhIEb223UfN+ieaY2bi4ZJ1xqul1MJZX1JR4CbNJzX2f3iHlmGkctdvY w30p7MsYESw6pAPlo2ir68q0FAagxZeuzGSD54AJ09W02C0/h9fsuW1aE+bHAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUFRzCZbNi36Q5x9r3afBQ86ly9+swHwYDVR0j BBgwFoAUca28uAXu7kSn/cB8pUrWYQyB4bMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmU3Zjc0N2UtZmY2OC00ZmEyLWIyZTMtZjZlZGU1NDhh MzIwLzEvNzFBREJDQjgwNUVFRUU0NEE3RkRDMDdDQTU0QUQ2NjEwQzgxRTFCMy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvNzFBREJDQjgwNUVFRUU0NEE3RkRDMDdDQTU0QUQ2NjEwQzgx RTFCMy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82ZTdmNzQ3ZS1m ZjY4LTRmYTItYjJlMy1mNmVkZTU0OGEzMjAvMS83MUFEQkNCODA1RUVFRTQ0QTdG REMwN0NBNTRBRDY2MTBDODFFMUIzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMRvq/Mbud+pUNYDaLlZL 34KKxrZt0805Flmsmrg7pjr9zumYQqPvedoUMuw5k1DDBZxQLADqiUOlaC7uJp9v iyNfzCBpNh5IQgH0+4+ueG7dTKQoBv3PkCVITKtGP1eFmhIiSXfPmk3hhDZAXpEj YPeFwOR4qkT/G1e0/Qudq/UBwipBPhoiS6oxOU9LJDkiJs512kRXGSe9cG01+EgP u71My0YmOdQkWMmJssY+BRoa3+3smDeMtMAreWJSW3Wr1A9KMacmAtEuJa19s48s enuT3Gq3AgFL6pHO1KmsrGep6/v7Beq2l1r73/qf8onJkl8MlWnnEtZnc/BdpqoR AQ== -----END CERTIFICATE-----Generated at Wed May 13 07:42:36 2026 by rpki-client