$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft File: C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft (raw, json) Hash identifier: 5sAxJqbAiNA/Njtay1TtpnaDv/+fSyvjUoscCj1CCPs= Subject key identifier: F3:53:8E:94:89:B1:74:C8:3F:52:0A:F5:4A:D0:FA:CE:30:9F:2E:ED Authority key identifier: C3:F0:2C:2A:F3:82:37:7A:DA:9B:51:F2:EA:37:0E:74:54:12:D1:DF Certificate issuer: /CN=C3F02C2AF382377ADA9B51F2EA370E745412D1DF Certificate serial: 7A389785CA690AD41759BDC33B63BED7F4E1F5B9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft Manifest number: 6F Signing time: Tue 12 May 2026 13:58:44 +0000 Manifest this update: Tue 12 May 2026 13:53:44 +0000 Manifest next update: Wed 13 May 2026 15:52:44 +0000 Files and hashes: 1: C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl (hash: 18Faj8Nw01W2p8ia8+mooS3U7zz21aatYUnSubhuQT4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:38:97:85:ca:69:0a:d4:17:59:bd:c3:3b:63:be:d7:f4:e1:f5:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3F02C2AF382377ADA9B51F2EA370E745412D1DF Validity Not Before: May 12 13:53:44 2026 GMT Not After : May 13 15:52:44 2026 GMT Subject: CN=F3538E9489B174C83F520AF54AD0FACE309F2EED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:82:07:88:a5:b8:e8:0b:b3:a9:57:80:87:0d: ae:01:46:8a:59:c7:9d:97:f1:b1:88:82:ca:ad:ab: e3:82:88:69:50:29:bd:eb:11:65:af:23:0c:8b:8a: 87:6a:98:3e:07:22:3a:a4:fd:39:7f:e6:1a:72:00: 08:f9:c9:c8:79:87:59:77:a7:9a:2b:de:8d:00:ba: 2a:45:45:52:16:e6:26:d3:23:27:de:e1:a7:e1:9b: 32:2b:c3:bb:30:1a:d8:59:9b:89:a8:5f:11:5f:68: e4:30:8e:7a:29:c1:d3:0d:2a:68:dd:f3:b8:52:23: 68:96:34:ae:33:5a:68:99:89:7c:3c:c2:35:1d:27: b6:9b:0f:68:5a:76:b9:fe:5e:12:0c:ae:e7:16:79: c5:07:4c:57:8b:5d:d0:86:6d:67:ff:9c:81:c0:fc: 40:ed:1e:40:b4:c2:7e:b0:a8:2e:3b:90:23:93:49: 08:bf:f4:05:6c:3d:19:16:90:2a:0c:f0:eb:76:af: 21:65:cb:17:84:5f:46:de:af:1a:db:ff:45:3c:28: 69:84:40:76:3b:ad:7b:5b:7b:71:e9:9c:67:77:e2: 53:be:ca:b5:0c:0c:1c:2a:25:c7:73:7e:6a:89:e1: 8f:d7:54:40:02:25:66:ec:9e:68:7c:d8:c3:9d:0f: c6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:53:8E:94:89:B1:74:C8:3F:52:0A:F5:4A:D0:FA:CE:30:9F:2E:ED X509v3 Authority Key Identifier: keyid:C3:F0:2C:2A:F3:82:37:7A:DA:9B:51:F2:EA:37:0E:74:54:12:D1:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:03:2b:22:a1:96:0f:49:e2:76:10:23:16:03:95:91:80:75: 62:4b:2b:75:3a:74:f9:09:52:87:b6:f3:2f:2e:a2:ef:fa:23: 0e:93:6e:85:08:e8:fb:9d:43:07:5b:b0:64:28:6b:95:50:31: 65:03:15:db:2f:bc:e7:95:f1:b6:d3:12:b5:c9:02:b6:f7:2e: c0:b4:c1:78:1e:74:ba:c1:5f:06:f7:21:9a:89:55:d4:a0:aa: af:d3:98:63:bd:08:39:b9:ff:9b:45:cc:9e:cb:42:f0:80:2a: b5:ed:fe:de:46:2c:b3:5d:09:1c:7d:46:bb:57:f0:ba:ff:92: 2d:89:e0:eb:15:da:38:3b:cb:61:0e:fc:ec:23:73:ad:1b:45: ea:14:00:a2:fd:fb:ef:a9:00:0c:89:ea:7f:60:11:5e:c2:ce: 97:aa:4f:64:04:ea:33:9a:16:6f:cb:89:44:19:26:da:b8:66: 3a:3d:32:c5:8d:bc:9f:b1:a5:63:5a:f2:5f:fe:88:47:f0:c2: b1:78:12:f4:2e:cd:d7:db:e6:66:3a:21:56:f4:be:79:10:ab: 6e:38:96:9e:8e:58:0a:c7:9a:a0:e3:00:81:71:fe:8c:b5:18: 30:be:17:2a:3d:83:55:35:04:a9:c2:e7:53:37:9e:d8:ef:7c: 7f:33:02:e7 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUejiXhcppCtQXWb3DO2O+1/Th9bkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1 NDEyRDFERjAeFw0yNjA1MTIxMzUzNDRaFw0yNjA1MTMxNTUyNDRaMDMxMTAvBgNV BAMTKEYzNTM4RTk0ODlCMTc0QzgzRjUyMEFGNTRBRDBGQUNFMzA5RjJFRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkggeIpbjoC7OpV4CHDa4BRopZ x52X8bGIgsqtq+OCiGlQKb3rEWWvIwyLiodqmD4HIjqk/Tl/5hpyAAj5ych5h1l3 p5or3o0AuipFRVIW5ibTIyfe4afhmzIrw7swGthZm4moXxFfaOQwjnopwdMNKmjd 87hSI2iWNK4zWmiZiXw8wjUdJ7abD2hadrn+XhIMrucWecUHTFeLXdCGbWf/nIHA /EDtHkC0wn6wqC47kCOTSQi/9AVsPRkWkCoM8Ot2ryFlyxeEX0berxrb/0U8KGmE QHY7rXtbe3HpnGd34lO+yrUMDBwqJcdzfmqJ4Y/XVEACJWbsnmh82MOdD8b/AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU81OOlImxdMg/Ugr1StD6zjCfLu0wHwYDVR0j BBgwFoAUw/AsKvOCN3ram1Hy6jcOdFQS0d8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzEvQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1NDEyRDFERi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1NDEy RDFERi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTA5OGMyMy1h OTc3LTRmOWEtOTdjOS1jZDRlNzU5ZGVhMDkvMS9DM0YwMkMyQUYzODIzNzdBREE5 QjUxRjJFQTM3MEU3NDU0MTJEMURGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQQMrIqGWD0nidhAjFgOV kYB1YksrdTp0+QlSh7bzLy6i7/ojDpNuhQjo+51DB1uwZChrlVAxZQMV2y+855Xx ttMStckCtvcuwLTBeB50usFfBvchmolV1KCqr9OYY70IObn/m0XMnstC8IAqte3+ 3kYss10JHH1Gu1fwuv+SLYng6xXaODvLYQ787CNzrRtF6hQAov3776kADInqf2AR XsLOl6pPZATqM5oWb8uJRBkm2rhmOj0yxY28n7GlY1ryX/6IR/DCsXgS9C7N19vm ZjohVvS+eRCrbjiWno5YCseaoOMAgXH+jLUYML4XKj2DVTUEqcLnUzee2O98fzMC 5w== -----END CERTIFICATE-----Generated at Wed May 13 00:39:57 2026 by rpki-client