$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft File: 307456E03A11DBB48443E93538958B15B4E9E0F0.mft (raw, json) Hash identifier: 9IOEASjYcf1I/s0vv2SUjxCc/i5SRmgy5lnWxNPFzMM= Subject key identifier: 03:9F:0D:2E:FB:F3:EC:13:A0:22:81:30:4E:EE:ED:E9:43:3B:22:85 Authority key identifier: 30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0 Certificate issuer: /CN=307456E03A11DBB48443E93538958B15B4E9E0F0 Certificate serial: 11BD7B73D79062F0D4C54033D34FB42419150DF4 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft Manifest number: 014F Signing time: Wed 25 Mar 2026 16:58:58 +0000 Manifest this update: Wed 25 Mar 2026 16:53:58 +0000 Manifest next update: Thu 26 Mar 2026 19:05:58 +0000 Files and hashes: 1: 307456E03A11DBB48443E93538958B15B4E9E0F0.crl (hash: 9xXmyJY0WF2nFXhI8j2vv5nM1rcH2DU335mGqPiMetU=) 2: 3130332e3133392e38382e302f32342d3234203d3e20323134383039.roa (hash: aBp6U2aVMH3hSM5eeFVi+p63pJd0WYDoQYC72uEJ/w8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:bd:7b:73:d7:90:62:f0:d4:c5:40:33:d3:4f:b4:24:19:15:0d:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307456E03A11DBB48443E93538958B15B4E9E0F0 Validity Not Before: Mar 25 16:53:58 2026 GMT Not After : Mar 26 19:05:58 2026 GMT Subject: CN=039F0D2EFBF3EC13A02281304EEEEDE9433B2285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:35:44:e7:56:31:d5:1c:4e:a9:57:91:8f:d2: 0a:1b:6e:e2:96:57:53:44:59:d0:9f:61:04:0c:59: d0:34:99:52:63:2c:98:0d:57:39:9b:f0:b3:10:13: f6:3f:d3:56:2e:85:57:10:c2:ee:da:1d:63:10:89: c8:73:4e:73:d3:92:24:1d:b6:73:5d:7c:8e:ef:46: 29:e1:f3:e4:d3:8d:84:42:50:6d:89:aa:2d:ff:20: a9:0e:ac:e5:bc:20:bf:04:bb:e3:85:62:cb:40:75: 48:9a:a7:bf:42:b3:9b:eb:4f:c5:56:2d:95:3a:50: b6:59:fc:a1:1f:d2:93:4c:23:66:1e:73:8a:1c:e3: 62:b0:e6:8f:d4:51:78:51:7a:42:89:0d:7e:7e:bd: 3e:eb:c9:32:37:18:20:fd:ea:b2:c5:a5:41:c1:74: 98:ec:3e:79:e6:e2:17:cf:83:33:a1:4d:25:77:63: 68:4c:bd:e6:30:a0:38:23:c7:0a:89:b9:84:37:52: fd:4a:55:60:47:c5:0d:82:3f:71:e3:0e:c7:fe:b9: 57:e5:9c:cf:e4:ba:1c:6c:56:05:f4:e0:5d:44:60: 06:15:9b:b6:13:5b:ca:ea:f5:72:5c:ef:bd:a0:8f: 39:64:47:63:b4:cb:36:2b:c5:d7:f5:9a:cf:74:db: 42:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9F:0D:2E:FB:F3:EC:13:A0:22:81:30:4E:EE:ED:E9:43:3B:22:85 X509v3 Authority Key Identifier: keyid:30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:60:95:2a:06:2f:4c:ad:72:f9:9a:0e:5c:39:f5:5b:90:5d: 21:06:ae:e8:11:70:0e:91:f3:20:85:38:54:3d:f0:21:27:ff: 05:66:8f:08:43:67:a3:2c:ce:9a:53:0e:9f:78:84:63:31:f3: 05:76:84:1f:72:bf:f9:c1:11:7d:dd:5f:a9:36:5c:57:4b:e9: 52:4a:b8:76:d3:6d:0f:c1:4d:91:8d:fe:51:91:a8:e3:aa:26: ab:c6:ef:1c:b1:37:79:d0:b6:f3:4a:a9:a0:09:32:ef:d1:16: df:f6:19:c4:08:03:98:b1:f1:a6:c8:84:1e:91:d7:4f:36:31: 18:12:b1:e8:3f:50:27:19:0d:a4:28:ef:fc:1c:0a:6b:f2:2f: 35:68:04:0e:9c:61:e6:8c:d8:39:68:b4:59:38:a8:82:eb:7b: 27:ab:24:5e:31:63:77:8c:18:fe:c4:d7:2b:fa:35:42:4c:05: d7:b4:31:6b:47:e8:eb:d9:76:35:26:43:08:e3:43:1e:10:55: 2e:a2:2c:25:fd:b1:e0:ae:eb:bf:5b:ad:e1:af:5f:d5:8f:0c: 29:33:e2:54:bb:9d:e3:d0:98:5f:2f:4a:f4:eb:d4:90:0a:75: 33:c9:ee:80:b0:c6:55:dd:ac:d0:ed:d1:f8:4b:b3:1a:e2:e7: 97:07:fd:80 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUEb17c9eQYvDUxUAz00+0JBkVDfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVC NEU5RTBGMDAeFw0yNjAzMjUxNjUzNThaFw0yNjAzMjYxOTA1NThaMDMxMTAvBgNV BAMTKDAzOUYwRDJFRkJGM0VDMTNBMDIyODEzMDRFRUVFREU5NDMzQjIyODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxNUTnVjHVHE6pV5GP0gobbuKW V1NEWdCfYQQMWdA0mVJjLJgNVzmb8LMQE/Y/01YuhVcQwu7aHWMQichzTnPTkiQd tnNdfI7vRinh8+TTjYRCUG2Jqi3/IKkOrOW8IL8Eu+OFYstAdUiap79Cs5vrT8VW LZU6ULZZ/KEf0pNMI2Yec4oc42Kw5o/UUXhRekKJDX5+vT7ryTI3GCD96rLFpUHB dJjsPnnm4hfPgzOhTSV3Y2hMveYwoDgjxwqJuYQ3Uv1KVWBHxQ2CP3HjDsf+uVfl nM/kuhxsVgX04F1EYAYVm7YTW8rq9XJc772gjzlkR2O0yzYrxdf1ms9020KxAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUA58NLvvz7BOgIoEwTu7t6UM7IoUwHwYDVR0j BBgwFoAUMHRW4DoR27SEQ+k1OJWLFbTp4PAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzEvMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVCNEU5RTBGMC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVCNEU5 RTBGMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTA5OGMyMy1h OTc3LTRmOWEtOTdjOS1jZDRlNzU5ZGVhMDkvMS8zMDc0NTZFMDNBMTFEQkI0ODQ0 M0U5MzUzODk1OEIxNUI0RTlFMEYwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApmCVKgYvTK1y+ZoOXDn1 W5BdIQau6BFwDpHzIIU4VD3wISf/BWaPCENnoyzOmlMOn3iEYzHzBXaEH3K/+cER fd1fqTZcV0vpUkq4dtNtD8FNkY3+UZGo46omq8bvHLE3edC280qpoAky79EW3/YZ xAgDmLHxpsiEHpHXTzYxGBKx6D9QJxkNpCjv/BwKa/IvNWgEDpxh5ozYOWi0WTio gut7J6skXjFjd4wY/sTXK/o1QkwF17Qxa0fo69l2NSZDCONDHhBVLqIsJf2x4K7r v1ut4a9f1Y8MKTPiVLud49CYXy9K9OvUkAp1M8nugLDGVd2s0O3R+EuzGuLnlwf9 gA== -----END CERTIFICATE-----Generated at Wed Mar 25 23:15:23 2026 by rpki-client