$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft File: 307456E03A11DBB48443E93538958B15B4E9E0F0.mft (raw, json) Hash identifier: CUWB+Jd28MLRsS0RY4LUh7W7TpNyO3XSN5+h5Rj5ub4= Subject key identifier: E7:06:CE:AD:66:0B:DB:BC:21:93:A8:C9:A4:01:B1:E1:FB:0D:D8:5D Authority key identifier: 30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0 Certificate issuer: /CN=307456E03A11DBB48443E93538958B15B4E9E0F0 Certificate serial: 41319E95A5140C552C572639835140CA03952D94 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft Manifest number: 0191 Signing time: Tue 12 May 2026 13:58:44 +0000 Manifest this update: Tue 12 May 2026 13:53:44 +0000 Manifest next update: Wed 13 May 2026 15:11:44 +0000 Files and hashes: 1: 3130332e3133392e38382e302f32342d3234203d3e20323134383039.roa (hash: aBp6U2aVMH3hSM5eeFVi+p63pJd0WYDoQYC72uEJ/w8=) 2: 307456E03A11DBB48443E93538958B15B4E9E0F0.crl (hash: qjT5nUTEkJrmcQfv7T6yGb6uFRBmbfTfJjm2VGTrwss=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 15:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:31:9e:95:a5:14:0c:55:2c:57:26:39:83:51:40:ca:03:95:2d:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307456E03A11DBB48443E93538958B15B4E9E0F0 Validity Not Before: May 12 13:53:44 2026 GMT Not After : May 13 15:11:44 2026 GMT Subject: CN=E706CEAD660BDBBC2193A8C9A401B1E1FB0DD85D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:71:c6:66:f3:59:53:ef:9e:62:31:5e:6c:a0: 57:fb:47:af:fc:d3:36:71:98:1a:e1:c3:30:f1:c6: 49:a5:2f:f2:5a:6c:c6:c2:aa:55:0b:6c:fa:df:ed: 6f:b4:6e:a5:6f:01:e3:19:2c:81:d1:3c:fc:ff:36: 3d:28:35:fb:30:75:67:c0:d4:52:30:24:13:81:03: 1f:87:1f:21:37:c1:13:f8:7a:29:84:c8:76:1b:bb: 2a:f8:a9:de:73:b6:d9:b4:1b:40:cc:f7:30:32:25: 61:56:96:39:f0:0d:6d:8a:2d:d4:0b:57:f7:5e:f6: 6d:2f:40:14:58:d3:1d:6d:fa:72:81:ef:57:71:da: d6:38:a9:54:21:5e:78:a4:47:cd:23:c7:1a:fb:43: e0:03:ed:10:87:3e:c4:9a:f2:40:66:8f:f6:6d:25: f9:26:2c:9c:c1:7f:35:02:e2:e4:0b:50:e0:e0:7d: 2b:96:20:7c:fe:7b:02:89:2d:f6:61:f0:84:82:20: 80:c6:91:63:6a:c8:38:d8:23:9d:50:45:40:35:ac: 44:1e:2d:07:21:96:8e:1f:ea:72:86:7e:5f:da:ea: 20:32:df:f4:c5:b9:5a:c6:37:f8:92:80:fe:c2:44: 0a:e8:3a:d7:cb:12:cf:1b:e1:6d:c1:b8:33:fa:15: 1a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:06:CE:AD:66:0B:DB:BC:21:93:A8:C9:A4:01:B1:E1:FB:0D:D8:5D X509v3 Authority Key Identifier: keyid:30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:e8:fe:c1:9f:0a:e8:0b:78:b5:2e:11:3f:56:49:c2:40:f4: 4f:c7:60:a4:f5:6c:23:67:58:00:04:4a:07:68:57:db:fa:fb: 7b:a7:36:28:fb:92:46:0b:47:35:8d:56:6f:49:f1:59:b8:0a: 2c:82:41:cf:03:f8:bd:ea:04:e3:23:58:6b:af:81:a0:80:02: 66:f0:7d:f7:29:7a:70:6f:a9:47:8c:cc:23:dd:b8:0e:b4:be: dd:96:5d:e5:43:7a:88:28:1c:7f:e7:7c:13:cd:a0:13:c5:30: 2b:bb:ca:c5:b1:60:d7:be:d4:1d:48:e0:56:a2:47:27:2e:ba: 97:a8:ab:7e:81:4c:9f:75:81:f6:36:b3:d0:b9:71:81:d2:74: 63:89:22:06:56:d5:ce:00:59:6a:ec:20:48:35:f4:e4:c1:92: 52:d6:6d:d5:28:61:e6:a1:cd:9f:72:36:a8:9e:4d:31:6c:43: 38:78:e8:52:e1:39:3f:ad:5d:91:23:05:7f:ed:9f:4c:4c:11: 2a:fd:14:ce:10:ba:79:c1:61:b0:f5:44:5b:79:2f:21:a8:4b: 7e:1d:c2:2b:6c:bc:5b:5a:43:d7:5d:9b:c9:5f:60:df:62:1b: da:fc:28:6d:dc:37:14:b8:74:29:66:e5:33:40:be:6d:44:c3: 9c:6e:9a:cc -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUQTGelaUUDFUsVyY5g1FAygOVLZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVC NEU5RTBGMDAeFw0yNjA1MTIxMzUzNDRaFw0yNjA1MTMxNTExNDRaMDMxMTAvBgNV BAMTKEU3MDZDRUFENjYwQkRCQkMyMTkzQThDOUE0MDFCMUUxRkIwREQ4NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGccZm81lT755iMV5soFf7R6/8 0zZxmBrhwzDxxkmlL/JabMbCqlULbPrf7W+0bqVvAeMZLIHRPPz/Nj0oNfswdWfA 1FIwJBOBAx+HHyE3wRP4eimEyHYbuyr4qd5zttm0G0DM9zAyJWFWljnwDW2KLdQL V/de9m0vQBRY0x1t+nKB71dx2tY4qVQhXnikR80jxxr7Q+AD7RCHPsSa8kBmj/Zt JfkmLJzBfzUC4uQLUODgfSuWIHz+ewKJLfZh8ISCIIDGkWNqyDjYI51QRUA1rEQe LQchlo4f6nKGfl/a6iAy3/TFuVrGN/iSgP7CRAroOtfLEs8b4W3BuDP6FRpLAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU5wbOrWYL27whk6jJpAGx4fsN2F0wHwYDVR0j BBgwFoAUMHRW4DoR27SEQ+k1OJWLFbTp4PAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzEvMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVCNEU5RTBGMC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVCNEU5 RTBGMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTA5OGMyMy1h OTc3LTRmOWEtOTdjOS1jZDRlNzU5ZGVhMDkvMS8zMDc0NTZFMDNBMTFEQkI0ODQ0 M0U5MzUzODk1OEIxNUI0RTlFMEYwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+j+wZ8K6At4tS4RP1ZJ wkD0T8dgpPVsI2dYAARKB2hX2/r7e6c2KPuSRgtHNY1Wb0nxWbgKLIJBzwP4veoE 4yNYa6+BoIACZvB99yl6cG+pR4zMI924DrS+3ZZd5UN6iCgcf+d8E82gE8UwK7vK xbFg177UHUjgVqJHJy66l6irfoFMn3WB9jaz0LlxgdJ0Y4kiBlbVzgBZauwgSDX0 5MGSUtZt1Shh5qHNn3I2qJ5NMWxDOHjoUuE5P61dkSMFf+2fTEwRKv0UzhC6ecFh sPVEW3kvIahLfh3CK2y8W1pD112byV9g32Ib2vwobdw3FLh0KWblM0C+bUTDnG6a zA== -----END CERTIFICATE-----Generated at Wed May 13 04:07:48 2026 by rpki-client