$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft File: 307456E03A11DBB48443E93538958B15B4E9E0F0.mft (raw, json) Hash identifier: 8kPL4375kKLhb7xJV225RiMD23Ptq9op73KxH889HQQ= Subject key identifier: 91:F5:88:FC:2E:CC:6C:81:2A:1C:A9:25:27:39:60:F5:F4:80:D2:48 Authority key identifier: 30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0 Certificate issuer: /CN=307456E03A11DBB48443E93538958B15B4E9E0F0 Certificate serial: 57C38CBA31AA23ED4F302158C569FB5CAF5C2E6D Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft Manifest number: 01F5 Signing time: Thu 23 Jul 2026 07:08:54 +0000 Manifest this update: Thu 23 Jul 2026 07:03:54 +0000 Manifest next update: Fri 24 Jul 2026 09:18:54 +0000 Files and hashes: 1: 307456E03A11DBB48443E93538958B15B4E9E0F0.crl (hash: Ry8T18h+O68rJeeJdMMN87bd2K94qbk93lSfjH44ahI=) 2: 3130332e3133392e38382e302f32342d3234203d3e20323134383039.roa (hash: 3Oy0/+Zmc9e5z/F4yp6K4LzyzEeGtPjpxBkzzaKS8w0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 09:18:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:c3:8c:ba:31:aa:23:ed:4f:30:21:58:c5:69:fb:5c:af:5c:2e:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307456E03A11DBB48443E93538958B15B4E9E0F0 Validity Not Before: Jul 23 07:03:54 2026 GMT Not After : Jul 24 09:18:54 2026 GMT Subject: CN=91F588FC2ECC6C812A1CA925273960F5F480D248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a8:d8:01:93:71:ae:05:30:64:56:bc:17:d7: 0e:25:f1:2a:e7:7f:71:63:d5:83:7d:42:de:00:2e: 4c:5e:11:91:9c:53:9d:97:33:10:36:b8:d2:09:e3: 34:87:d5:3c:c5:44:b8:a0:9b:94:a2:1b:c4:59:86: ec:1b:7d:27:df:14:4c:5d:74:b6:90:d3:f7:82:29: 16:ac:ea:83:ef:30:61:25:c4:44:49:a9:ea:48:cb: 31:6f:98:63:23:03:86:7f:70:74:5c:4d:13:51:f0: d9:b9:0b:e0:19:ae:fc:03:d7:79:e5:24:36:92:8f: d0:b3:f4:74:a6:a8:65:f7:4e:f0:15:4f:57:0d:1a: 92:46:42:a2:fb:a0:20:0b:db:fa:eb:cc:31:47:80: 12:6f:02:9a:86:11:64:5d:49:3e:ca:a2:ba:74:78: da:7c:51:d0:28:f6:cc:d8:1c:13:ab:21:ca:ff:0b: a4:02:d5:89:ad:d2:7e:96:fc:ec:7c:83:5c:11:47: 4c:e7:98:2c:c7:5c:4b:0f:6d:53:9b:ab:fd:09:dd: 13:81:71:7c:ea:55:b3:6d:3b:29:b1:49:9c:73:e7: f8:56:e6:e0:1e:fb:e8:05:6a:5b:00:a3:c5:49:ca: dc:df:15:3c:7b:99:5d:27:31:e0:5a:29:51:44:c3: 5e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F5:88:FC:2E:CC:6C:81:2A:1C:A9:25:27:39:60:F5:F4:80:D2:48 X509v3 Authority Key Identifier: keyid:30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:81:2a:82:1a:d5:b9:ca:9d:ea:38:73:69:e2:6d:78:08:61: 9e:70:ac:3c:e0:29:96:36:a0:15:6c:8d:cd:04:62:86:a4:8c: 3b:74:3f:1a:95:98:d6:ae:fb:06:d9:05:6a:ba:08:00:a9:c0: 54:64:85:0e:cf:e2:5e:cf:bb:ba:30:6d:16:ec:f2:54:d5:27: 14:5e:e8:b1:ec:64:c0:b0:f7:a7:8c:12:a4:9c:01:8b:ac:82: 68:b9:ba:5e:e3:95:50:83:e4:3e:ae:57:e5:95:15:11:b2:a8: 8f:9c:68:7c:44:ea:34:c2:d2:d0:54:49:5a:31:2e:b7:2c:21: 2b:83:e0:06:5f:d4:8c:18:d1:b4:52:6e:af:3f:d1:10:5c:1b: 14:38:46:bc:1c:05:ac:c0:28:a0:97:ce:33:53:f2:82:c8:82: f6:dd:f1:c2:2d:75:93:13:f5:67:20:ac:3b:46:76:3b:ff:00: db:f3:09:37:bc:f3:f6:9b:86:89:df:fc:93:bb:e6:1f:0a:b1: 6c:78:72:4a:24:cd:da:8c:34:7d:34:63:20:e5:a7:80:0a:3c: 50:05:90:39:74:96:2b:69:eb:f0:33:48:98:8b:2b:29:1a:22: 38:a8:a0:4e:93:49:16:f8:51:98:6f:33:88:31:73:72:95:5c: cc:1c:c8:47 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUV8OMujGqI+1PMCFYxWn7XK9cLm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVC NEU5RTBGMDAeFw0yNjA3MjMwNzAzNTRaFw0yNjA3MjQwOTE4NTRaMDMxMTAvBgNV BAMTKDkxRjU4OEZDMkVDQzZDODEyQTFDQTkyNTI3Mzk2MEY1RjQ4MEQyNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2qNgBk3GuBTBkVrwX1w4l8Srn f3Fj1YN9Qt4ALkxeEZGcU52XMxA2uNIJ4zSH1TzFRLigm5SiG8RZhuwbfSffFExd dLaQ0/eCKRas6oPvMGElxERJqepIyzFvmGMjA4Z/cHRcTRNR8Nm5C+AZrvwD13nl JDaSj9Cz9HSmqGX3TvAVT1cNGpJGQqL7oCAL2/rrzDFHgBJvApqGEWRdST7Korp0 eNp8UdAo9szYHBOrIcr/C6QC1Ymt0n6W/Ox8g1wRR0znmCzHXEsPbVObq/0J3ROB cXzqVbNtOymxSZxz5/hW5uAe++gFalsAo8VJytzfFTx7mV0nMeBaKVFEw151AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUkfWI/C7MbIEqHKklJzlg9fSA0kgwHwYDVR0j BBgwFoAUMHRW4DoR27SEQ+k1OJWLFbTp4PAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzEvMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVCNEU5RTBGMC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVCNEU5 RTBGMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTA5OGMyMy1h OTc3LTRmOWEtOTdjOS1jZDRlNzU5ZGVhMDkvMS8zMDc0NTZFMDNBMTFEQkI0ODQ0 M0U5MzUzODk1OEIxNUI0RTlFMEYwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACoEqghrVucqd6jhzaeJt eAhhnnCsPOApljagFWyNzQRihqSMO3Q/GpWY1q77BtkFaroIAKnAVGSFDs/iXs+7 ujBtFuzyVNUnFF7osexkwLD3p4wSpJwBi6yCaLm6XuOVUIPkPq5X5ZUVEbKoj5xo fETqNMLS0FRJWjEutywhK4PgBl/UjBjRtFJurz/REFwbFDhGvBwFrMAooJfOM1Py gsiC9t3xwi11kxP1ZyCsO0Z2O/8A2/MJN7zz9puGid/8k7vmHwqxbHhySiTN2ow0 fTRjIOWngAo8UAWQOXSWK2nr8DNImIsrKRoiOKigTpNJFvhRmG8ziDFzcpVczBzI Rw== -----END CERTIFICATE-----Generated at Thu Jul 23 21:39:54 2026 by rpki-client