$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft File: C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft (raw, json) Hash identifier: QiXhrzYsaOWI948y8dCUJgqkQz/q7EDOtTcMiy3AHpQ= Subject key identifier: 54:0D:FB:E7:6D:D8:AF:DD:58:ED:9D:C0:0C:D4:15:52:61:6C:E9:68 Authority key identifier: C3:F0:2C:2A:F3:82:37:7A:DA:9B:51:F2:EA:37:0E:74:54:12:D1:DF Certificate issuer: /CN=C3F02C2AF382377ADA9B51F2EA370E745412D1DF Certificate serial: 7C4D9D1F012C085BD73E069621624C7A0412F60D Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft Manifest number: 012A Signing time: Thu 24 Sep 2026 04:09:48 +0000 Manifest this update: Thu 24 Sep 2026 04:04:48 +0000 Manifest next update: Fri 25 Sep 2026 07:04:48 +0000 Files and hashes: 1: C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl (hash: P6K2K0NCULTs1V4WkGBwIOOpRp8FQpJlpBYVdgGnO/w=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 07:04:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:4d:9d:1f:01:2c:08:5b:d7:3e:06:96:21:62:4c:7a:04:12:f6:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3F02C2AF382377ADA9B51F2EA370E745412D1DF Validity Not Before: Sep 24 04:04:48 2026 GMT Not After : Sep 25 07:04:48 2026 GMT Subject: CN=540DFBE76DD8AFDD58ED9DC00CD41552616CE968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7a:74:14:7f:cd:a8:ae:06:15:e2:9d:f2:cb: bd:e9:38:9d:af:0e:9d:44:bb:b7:32:40:8c:ab:b1: 62:47:8e:c8:c9:81:42:f9:7f:66:9b:df:04:39:df: 2b:92:c3:71:7a:ba:d3:05:c8:b4:32:5f:f5:a5:56: f4:16:3d:2e:0e:7c:cb:36:23:68:60:a9:1f:3b:c1: 1a:13:1a:01:7a:53:08:37:3a:7b:53:80:60:f2:bd: d5:00:f9:f9:8b:07:e1:48:e2:d1:d4:cc:2d:7d:81: 3c:f7:c5:3d:5e:a3:5e:c7:c1:88:88:91:97:c2:48: 6c:44:24:23:7a:88:25:96:3f:d2:15:08:a2:e9:c0: 69:36:31:c8:25:ac:77:7b:94:98:c6:b5:e3:e9:b0: 4f:4d:c7:77:c3:20:b7:b5:e5:42:91:29:d8:5a:38: 81:f7:02:ff:be:77:96:c9:a4:8b:d8:b3:33:8d:4e: e3:1d:cb:e4:7d:24:a0:43:de:5f:df:85:66:7b:d7: c1:b7:5e:12:2d:9b:84:7a:b6:2e:ab:2c:63:8d:28: 69:78:9f:5e:a6:13:99:93:aa:b7:3b:10:a7:6e:c8: db:79:a1:3e:97:79:80:29:4c:ba:c7:0b:37:ec:ce: d8:1b:84:cd:07:b4:2f:08:df:01:79:41:76:2d:60: 72:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:0D:FB:E7:6D:D8:AF:DD:58:ED:9D:C0:0C:D4:15:52:61:6C:E9:68 X509v3 Authority Key Identifier: keyid:C3:F0:2C:2A:F3:82:37:7A:DA:9B:51:F2:EA:37:0E:74:54:12:D1:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:25:f6:86:d5:e5:db:6e:be:81:ee:99:eb:1e:f4:26:61:54: 49:05:8a:80:fc:29:51:33:a7:f5:66:44:05:ad:39:a7:7e:c8: ef:08:de:31:b7:ea:87:5f:e9:14:02:17:65:6e:20:20:f3:84: 9b:11:a7:98:24:ab:8e:47:f0:8b:9b:93:34:92:a1:25:b0:3b: e9:c6:76:72:b9:b1:74:aa:ed:b4:af:b8:6b:c4:6d:71:a1:7d: 32:0b:98:2b:eb:cc:42:06:91:52:1a:4f:4f:25:95:df:90:20: 88:43:78:7d:70:22:f0:e7:31:e8:5d:89:e7:fc:54:6e:65:19: 49:cc:70:39:79:66:e8:83:48:db:88:00:13:f7:fc:43:53:f5: 57:38:06:3e:e5:2d:49:55:8c:d8:ff:5c:f1:60:67:15:b6:ea: b9:be:82:27:a3:82:65:f0:11:40:61:8e:7d:00:1b:87:7e:32: 9d:aa:b8:e5:1c:5b:48:f1:d2:54:1a:6c:4b:b4:9a:a7:73:85: 4a:dd:56:d3:66:6f:74:c6:c9:2c:42:8e:dc:d0:dd:0c:6b:b9: 61:9e:10:f8:8e:25:f6:26:e8:81:71:1c:21:9c:8a:72:0a:66: f2:95:89:da:1c:a6:44:c7:6f:d3:3f:fb:6d:0a:67:48:8d:51: 06:f8:60:a8 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUfE2dHwEsCFvXPgaWIWJMegQS9g0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1 NDEyRDFERjAeFw0yNjA5MjQwNDA0NDhaFw0yNjA5MjUwNzA0NDhaMDMxMTAvBgNV BAMTKDU0MERGQkU3NkREOEFGREQ1OEVEOURDMDBDRDQxNTUyNjE2Q0U5NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYenQUf82orgYV4p3yy73pOJ2v Dp1Eu7cyQIyrsWJHjsjJgUL5f2ab3wQ53yuSw3F6utMFyLQyX/WlVvQWPS4OfMs2 I2hgqR87wRoTGgF6Uwg3OntTgGDyvdUA+fmLB+FI4tHUzC19gTz3xT1eo17HwYiI kZfCSGxEJCN6iCWWP9IVCKLpwGk2McglrHd7lJjGtePpsE9Nx3fDILe15UKRKdha OIH3Av++d5bJpIvYszONTuMdy+R9JKBD3l/fhWZ718G3XhItm4R6ti6rLGONKGl4 n16mE5mTqrc7EKduyNt5oT6XeYApTLrHCzfsztgbhM0HtC8I3wF5QXYtYHKTAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUVA37523Yr91Y7Z3ADNQVUmFs6WgwHwYDVR0j BBgwFoAUw/AsKvOCN3ram1Hy6jcOdFQS0d8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzEvQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1NDEyRDFERi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1NDEy RDFERi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTA5OGMyMy1h OTc3LTRmOWEtOTdjOS1jZDRlNzU5ZGVhMDkvMS9DM0YwMkMyQUYzODIzNzdBREE5 QjUxRjJFQTM3MEU3NDU0MTJEMURGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSX2htXl226+ge6Z6x70 JmFUSQWKgPwpUTOn9WZEBa05p37I7wjeMbfqh1/pFAIXZW4gIPOEmxGnmCSrjkfw i5uTNJKhJbA76cZ2crmxdKrttK+4a8RtcaF9MguYK+vMQgaRUhpPTyWV35AgiEN4 fXAi8Ocx6F2J5/xUbmUZScxwOXlm6INI24gAE/f8Q1P1VzgGPuUtSVWM2P9c8WBn Fbbqub6CJ6OCZfARQGGOfQAbh34ynaq45RxbSPHSVBpsS7Sap3OFSt1W02ZvdMbJ LEKO3NDdDGu5YZ4Q+I4l9ibogXEcIZyKcgpm8pWJ2hymRMdv0z/7bQpnSI1RBvhg qA== -----END CERTIFICATE-----Generated at Thu Sep 24 19:53:48 2026 by rpki-client