$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft File: C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft (raw, json) Hash identifier: KJZsQQV8p7a/VugvzOu7q/nvGAbTQd35FNVKFeJfMI8= Subject key identifier: 6A:00:E6:5D:00:64:88:93:55:F6:4B:9F:65:38:CE:AA:23:5E:7C:8A Authority key identifier: C3:F0:2C:2A:F3:82:37:7A:DA:9B:51:F2:EA:37:0E:74:54:12:D1:DF Certificate issuer: /CN=C3F02C2AF382377ADA9B51F2EA370E745412D1DF Certificate serial: 1B364F2338C49764AFF247A8F8636F7099F30B5A Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft Manifest number: D4 Signing time: Fri 24 Jul 2026 00:28:54 +0000 Manifest this update: Fri 24 Jul 2026 00:23:54 +0000 Manifest next update: Sat 25 Jul 2026 01:19:54 +0000 Files and hashes: 1: C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl (hash: odIOMCKn++rIegthU2qLqK/7gN4X9c809PXH/Qz3OVw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:36:4f:23:38:c4:97:64:af:f2:47:a8:f8:63:6f:70:99:f3:0b:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3F02C2AF382377ADA9B51F2EA370E745412D1DF Validity Not Before: Jul 24 00:23:54 2026 GMT Not After : Jul 25 01:19:54 2026 GMT Subject: CN=6A00E65D0064889355F64B9F6538CEAA235E7C8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c3:6c:4f:20:f6:97:e7:cb:e9:d2:cd:bc:cc: 01:2f:86:8d:6e:05:eb:bb:6a:06:d5:36:db:3c:85: 7e:01:a3:bf:ef:00:0c:78:dc:37:b2:39:fa:8c:82: b8:61:bc:ba:ca:fb:52:ed:74:07:01:a7:bc:cc:57: 3d:7d:dd:21:91:1d:a1:4f:a8:a1:50:7b:72:c2:8b: 9b:3d:00:72:93:dc:90:71:43:77:7c:06:93:0b:ca: 95:c8:b6:9f:0d:ed:32:07:b9:6f:28:9e:88:ac:00: 84:f4:1d:b1:4a:ff:f2:96:0e:84:00:67:56:b3:88: 2f:03:d3:c8:d6:38:e0:c8:b8:2b:73:c9:5b:f3:6e: ec:b7:73:7a:8f:49:8f:b7:d4:b7:24:53:b7:70:10: b4:b7:82:ec:0c:9c:dd:95:32:20:93:68:9a:95:33: cd:51:4e:6d:9f:4b:ca:90:9d:9a:b3:a2:5d:15:95: 2a:d2:00:43:e6:d4:0d:05:c8:be:c0:ba:ab:fe:81: 87:4b:b9:d5:9e:3c:59:b5:08:ad:fd:26:ca:ed:d5: 93:b8:87:90:13:6a:64:48:e5:47:c1:19:30:46:41: 78:cd:b7:ef:56:b0:9f:40:a4:d2:bb:c5:bd:6c:6f: 6e:5e:ee:46:c7:e1:6c:6e:a8:e5:cc:28:26:cc:5a: da:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:00:E6:5D:00:64:88:93:55:F6:4B:9F:65:38:CE:AA:23:5E:7C:8A X509v3 Authority Key Identifier: keyid:C3:F0:2C:2A:F3:82:37:7A:DA:9B:51:F2:EA:37:0E:74:54:12:D1:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:53:2f:a6:3d:c1:ac:88:65:7e:0f:10:fd:9b:50:df:69:0b: e3:50:a5:b1:32:4a:2f:b9:db:4c:e6:17:05:56:09:c5:fb:fe: 0b:d4:30:7a:1a:cf:b4:ba:74:4e:f9:8d:78:f0:28:dd:bc:65: f2:c3:60:b4:99:1a:bd:4e:02:49:bc:76:28:ab:fe:64:73:d3: d5:f0:c1:f1:fa:56:fa:af:df:7c:06:91:15:2d:ac:0e:2d:57: 60:04:6d:5e:a3:3b:f5:f5:0e:2a:70:b4:c0:fa:76:ff:2b:77: d4:79:57:c7:79:e6:27:d2:b2:e2:5d:9e:b8:26:1f:91:0e:b4: bd:34:bc:75:ba:59:c5:72:36:49:b3:0e:d2:66:a1:5e:e0:e6: 24:c4:8a:30:7a:bb:82:a5:bb:51:26:ee:8d:d1:ec:86:de:82: 70:35:4d:5f:05:53:4e:3c:22:3c:96:6e:36:f8:79:65:03:3c: fa:50:4e:77:a0:32:d7:c7:05:a2:56:b8:2b:36:5f:58:22:68: ec:da:3d:4e:06:55:9f:9a:ef:94:a4:f0:78:71:a5:ea:bc:e0: f5:82:c4:d3:29:38:f5:bd:b3:5c:b4:6c:84:7d:f2:ec:80:05: 06:30:67:d5:66:d7:c7:48:ca:16:db:37:e6:ac:2a:43:81:61: 94:4f:63:3c -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUGzZPIzjEl2Sv8keo+GNvcJnzC1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1 NDEyRDFERjAeFw0yNjA3MjQwMDIzNTRaFw0yNjA3MjUwMTE5NTRaMDMxMTAvBgNV BAMTKDZBMDBFNjVEMDA2NDg4OTM1NUY2NEI5RjY1MzhDRUFBMjM1RTdDOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxw2xPIPaX58vp0s28zAEvho1u Beu7agbVNts8hX4Bo7/vAAx43DeyOfqMgrhhvLrK+1LtdAcBp7zMVz193SGRHaFP qKFQe3LCi5s9AHKT3JBxQ3d8BpMLypXItp8N7TIHuW8onoisAIT0HbFK//KWDoQA Z1aziC8D08jWOODIuCtzyVvzbuy3c3qPSY+31LckU7dwELS3guwMnN2VMiCTaJqV M81RTm2fS8qQnZqzol0VlSrSAEPm1A0FyL7Auqv+gYdLudWePFm1CK39Jsrt1ZO4 h5ATamRI5UfBGTBGQXjNt+9WsJ9ApNK7xb1sb25e7kbH4WxuqOXMKCbMWtrjAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUagDmXQBkiJNV9kufZTjOqiNefIowHwYDVR0j BBgwFoAUw/AsKvOCN3ram1Hy6jcOdFQS0d8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzEvQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1NDEyRDFERi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1NDEy RDFERi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTA5OGMyMy1h OTc3LTRmOWEtOTdjOS1jZDRlNzU5ZGVhMDkvMS9DM0YwMkMyQUYzODIzNzdBREE5 QjUxRjJFQTM3MEU3NDU0MTJEMURGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX1Mvpj3BrIhlfg8Q/ZtQ 32kL41ClsTJKL7nbTOYXBVYJxfv+C9QwehrPtLp0TvmNePAo3bxl8sNgtJkavU4C Sbx2KKv+ZHPT1fDB8fpW+q/ffAaRFS2sDi1XYARtXqM79fUOKnC0wPp2/yt31HlX x3nmJ9Ky4l2euCYfkQ60vTS8dbpZxXI2SbMO0mahXuDmJMSKMHq7gqW7USbujdHs ht6CcDVNXwVTTjwiPJZuNvh5ZQM8+lBOd6Ay18cFola4KzZfWCJo7No9TgZVn5rv lKTweHGl6rzg9YLE0yk49b2zXLRshH3y7IAFBjBn1WbXx0jKFts35qwqQ4FhlE9j PA== -----END CERTIFICATE-----Generated at Fri Jul 24 02:37:17 2026 by rpki-client