$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft File: C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft (raw, json) Hash identifier: jduoJTniRnVwXVKZQihRwTlB1HFV7cH2XMc/pCC7Jt4= Subject key identifier: D1:46:DF:A8:93:7A:27:85:90:2F:DD:77:16:6B:75:40:A3:DC:76:BB Authority key identifier: C3:F0:2C:2A:F3:82:37:7A:DA:9B:51:F2:EA:37:0E:74:54:12:D1:DF Certificate issuer: /CN=C3F02C2AF382377ADA9B51F2EA370E745412D1DF Certificate serial: 48FFF766C35181BC4576B3F55CE98933D2EA7F4D Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft Manifest number: 2E Signing time: Thu 26 Mar 2026 11:08:59 +0000 Manifest this update: Thu 26 Mar 2026 11:03:59 +0000 Manifest next update: Fri 27 Mar 2026 14:00:59 +0000 Files and hashes: 1: C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl (hash: /7/cVMyIXnZ7o0O32jszQCZK7uEj0Fpt+7N6PA/nhg0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 14:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ff:f7:66:c3:51:81:bc:45:76:b3:f5:5c:e9:89:33:d2:ea:7f:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3F02C2AF382377ADA9B51F2EA370E745412D1DF Validity Not Before: Mar 26 11:03:59 2026 GMT Not After : Mar 27 14:00:59 2026 GMT Subject: CN=D146DFA8937A2785902FDD77166B7540A3DC76BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:03:9f:55:c0:3b:6e:32:21:a3:de:ba:9a:e0: ec:23:c2:03:2c:69:80:9e:08:38:5f:38:c4:6f:53: 4c:ce:e7:61:db:43:1b:9a:42:2c:6f:6a:3a:ce:35: c2:a7:e2:02:5c:be:4c:bb:fc:80:18:1b:d9:d6:5c: 83:56:26:6d:84:80:b4:cb:25:80:80:14:0d:b5:5b: bf:25:94:e8:2c:bd:d4:d2:cb:04:3f:43:d5:ed:f8: c6:86:ad:19:a9:c1:8e:15:ae:87:ea:e1:3d:11:98: cd:7c:3f:29:e6:54:c0:0e:10:3a:1d:ab:16:8d:73: cb:d4:ef:4e:89:f4:99:ac:7e:88:35:84:1b:c9:40: 9b:51:fb:18:53:88:a8:92:d9:0c:86:ee:f7:31:13: a5:43:0b:48:3e:02:52:f0:83:08:07:ed:af:2e:c5: cb:66:f2:68:6c:e4:ee:0d:7c:a0:40:24:b7:d5:e8: 0f:2c:f7:b3:e4:41:79:25:e3:f4:65:31:11:ba:1b: 1c:c4:44:e9:ed:77:c3:82:e4:6a:58:cc:59:6c:68: c6:f2:71:32:c6:16:f8:61:be:88:b1:68:d1:e3:6e: 6a:4b:76:52:f2:01:db:1a:59:f9:52:80:ae:52:fe: a0:ba:f4:87:86:82:b5:e1:30:8f:a6:2c:fb:c6:0f: 9d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:46:DF:A8:93:7A:27:85:90:2F:DD:77:16:6B:75:40:A3:DC:76:BB X509v3 Authority Key Identifier: keyid:C3:F0:2C:2A:F3:82:37:7A:DA:9B:51:F2:EA:37:0E:74:54:12:D1:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:24:43:15:9d:26:aa:8b:15:5e:b4:11:30:70:b7:1f:56:fd: 03:f1:d3:2e:90:86:01:3c:04:70:be:7f:c8:e2:e9:08:34:2b: 5d:67:a7:24:6c:cb:b4:9b:8c:47:b5:0f:14:72:80:0c:f0:ee: 8c:5e:3c:70:3d:4a:54:95:d3:41:29:ff:95:28:3d:d6:02:be: ec:70:2f:31:40:25:a3:fb:23:5c:65:d8:ff:58:ca:2c:ea:68: c2:25:1d:d8:0f:0c:5e:57:7a:a6:0d:9b:e9:14:19:f4:f2:ad: a1:87:53:a7:08:67:b3:f8:0e:61:f6:70:a7:78:26:e3:82:95: 4e:95:e7:ea:58:fa:ee:ec:67:35:46:1c:26:72:e2:c9:23:01: ed:e9:00:69:95:15:6c:99:f7:28:39:09:a4:7f:8b:16:c2:b2: b0:dc:19:52:33:fd:b5:87:e5:26:5f:5c:7b:ef:87:57:11:ea: 86:ba:4b:74:24:59:ce:8d:bd:ce:5f:08:cd:0a:a4:15:ca:dd: 7b:6d:0b:9a:a8:8b:6d:55:1f:05:16:1b:51:18:69:f3:cc:f8: 19:01:e3:0e:77:7b:79:4b:33:a2:c6:d9:14:79:1f:5b:d1:93: e7:3d:11:c3:1a:53:c4:63:fa:61:4c:34:62:10:5b:7d:fe:7b: 08:ce:f2:a0 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUSP/3ZsNRgbxFdrP1XOmJM9Lqf00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1 NDEyRDFERjAeFw0yNjAzMjYxMTAzNTlaFw0yNjAzMjcxNDAwNTlaMDMxMTAvBgNV BAMTKEQxNDZERkE4OTM3QTI3ODU5MDJGREQ3NzE2NkI3NTQwQTNEQzc2QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXA59VwDtuMiGj3rqa4OwjwgMs aYCeCDhfOMRvU0zO52HbQxuaQixvajrONcKn4gJcvky7/IAYG9nWXINWJm2EgLTL JYCAFA21W78llOgsvdTSywQ/Q9Xt+MaGrRmpwY4Vrofq4T0RmM18PynmVMAOEDod qxaNc8vU706J9Jmsfog1hBvJQJtR+xhTiKiS2QyG7vcxE6VDC0g+AlLwgwgH7a8u xctm8mhs5O4NfKBAJLfV6A8s97PkQXkl4/RlMRG6GxzEROntd8OC5GpYzFlsaMby cTLGFvhhvoixaNHjbmpLdlLyAdsaWflSgK5S/qC69IeGgrXhMI+mLPvGD50FAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU0UbfqJN6J4WQL913Fmt1QKPcdrswHwYDVR0j BBgwFoAUw/AsKvOCN3ram1Hy6jcOdFQS0d8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzEvQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1NDEyRDFERi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1NDEy RDFERi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTA5OGMyMy1h OTc3LTRmOWEtOTdjOS1jZDRlNzU5ZGVhMDkvMS9DM0YwMkMyQUYzODIzNzdBREE5 QjUxRjJFQTM3MEU3NDU0MTJEMURGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARiRDFZ0mqosVXrQRMHC3 H1b9A/HTLpCGATwEcL5/yOLpCDQrXWenJGzLtJuMR7UPFHKADPDujF48cD1KVJXT QSn/lSg91gK+7HAvMUAlo/sjXGXY/1jKLOpowiUd2A8MXld6pg2b6RQZ9PKtoYdT pwhns/gOYfZwp3gm44KVTpXn6lj67uxnNUYcJnLiySMB7ekAaZUVbJn3KDkJpH+L FsKysNwZUjP9tYflJl9ce++HVxHqhrpLdCRZzo29zl8IzQqkFcrde20LmqiLbVUf BRYbURhp88z4GQHjDnd7eUszosbZFHkfW9GT5z0RwxpTxGP6YUw0YhBbff57CM7y oA== -----END CERTIFICATE-----Generated at Fri Mar 27 01:25:15 2026 by rpki-client