$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft File: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft (raw, json) Hash identifier: rPA4jxvXNPqdn9JLkF4i/N17jELjhlxTSRibdBXZo4c= Subject key identifier: 67:B3:B3:B3:8A:C0:C4:4E:97:C2:65:14:3D:67:E9:A1:FE:12:D7:03 Authority key identifier: 0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 Certificate issuer: /CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Certificate serial: 5C909EE56B88037226BD9B0BF3BC8E8F257D40B0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft Manifest number: 015F Signing time: Wed 25 Mar 2026 09:42:19 +0000 Manifest this update: Wed 25 Mar 2026 09:37:19 +0000 Manifest next update: Thu 26 Mar 2026 12:43:19 +0000 Files and hashes: 1: 326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (hash: PoxwFIHy8kdey2mlHnL1hmx4hhF1/GhCPxY1mv6kDWE=) 2: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl (hash: S5IMgOtL1Hc2eI9LPXmIslLSvq3HW1c1ELzLGBL7uFA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 12:43:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:90:9e:e5:6b:88:03:72:26:bd:9b:0b:f3:bc:8e:8f:25:7d:40:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Validity Not Before: Mar 25 09:37:19 2026 GMT Not After : Mar 26 12:43:19 2026 GMT Subject: CN=67B3B3B38AC0C44E97C265143D67E9A1FE12D703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ec:b8:c8:f9:c8:7a:28:43:50:ee:8d:4c:6a: 1b:87:3e:96:61:3e:9c:97:d0:66:c8:52:28:4b:7b: 72:f7:a0:1c:f4:68:30:7b:6d:36:e8:0c:75:e5:28: 8b:22:61:f1:e0:d5:0b:0e:f4:3c:f8:80:a2:e6:c6: 27:d3:d1:08:cd:32:ed:e4:ee:3f:15:b1:90:bb:94: 97:48:32:3d:0b:77:c3:47:77:60:66:c3:89:51:cf: 0a:a2:d4:4f:53:78:0b:2e:32:17:f0:f4:52:64:aa: df:ed:6b:63:b1:bb:d8:70:a9:24:90:e5:6b:a3:33: 3a:e9:aa:fe:65:4e:54:08:84:51:19:31:6a:49:8a: d4:c2:e0:77:bf:33:7d:5e:88:0f:b8:20:9d:7f:dc: b6:56:1f:a0:63:0e:01:b7:af:ca:49:37:7a:d6:10: 08:01:4d:59:61:ce:fe:19:da:6d:c8:e9:13:4f:93: 05:12:c8:8f:2a:65:9a:98:7f:0a:64:25:73:fe:e1: 91:ee:2f:d6:38:d1:8f:08:d6:5e:99:e3:e0:d8:a8: 00:8e:13:db:35:e7:c9:e3:89:c7:ef:ab:1c:02:28: 0b:ba:64:b2:c3:ab:a1:c2:39:43:bf:32:f3:cc:d0: a3:66:4f:45:6f:3a:85:4b:d6:db:a9:c7:cd:80:5e: a6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B3:B3:B3:8A:C0:C4:4E:97:C2:65:14:3D:67:E9:A1:FE:12:D7:03 X509v3 Authority Key Identifier: keyid:0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:5d:6e:aa:09:ee:c0:e6:bb:81:d4:b2:44:3b:88:d5:04:66: 28:8e:e0:3c:83:83:3d:8d:42:4e:cd:69:80:0e:97:d9:93:55: 8d:9d:fc:3a:2f:d4:41:99:fa:9e:63:d0:c5:99:1f:35:f6:7b: f7:ea:e9:f7:b5:88:bb:fa:7a:bf:58:81:71:8e:d9:cc:93:44: 97:d8:ff:f4:81:49:d2:32:2d:9f:64:05:03:fc:da:88:1d:b6: 89:65:17:fa:9d:3a:22:61:37:24:45:4c:36:46:28:86:b4:1d: 70:ca:a7:9c:dd:94:6f:ff:45:c4:f5:ca:48:b6:0f:cf:43:64: 18:26:a5:82:78:b9:a1:23:8c:eb:1d:e9:36:31:55:1e:43:10: f4:9a:cc:11:45:d7:d8:42:5b:fa:11:e9:24:3f:52:10:c0:61: 9b:e9:9e:03:13:4a:c8:53:6d:11:a2:bd:0f:2d:f1:ba:dc:c0: 62:fb:d6:ef:8f:c5:22:89:6a:4a:96:22:23:24:6c:d5:c9:ae: b7:b9:c6:ce:8b:1c:ba:38:e6:1d:16:f0:79:0f:22:8f:ca:5f: 11:97:8f:b2:03:49:6e:af:8e:e1:aa:63:ab:58:28:57:d9:59: ea:88:0b:de:f7:f0:59:2b:4e:a1:fa:46:af:9c:b8:87:d5:9d: 2d:93:aa:7e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXJCe5WuIA3ImvZsL87yOjyV9QLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1 RjRCMDlCOTAeFw0yNjAzMjUwOTM3MTlaFw0yNjAzMjYxMjQzMTlaMDMxMTAvBgNV BAMTKDY3QjNCM0IzOEFDMEM0NEU5N0MyNjUxNDNENjdFOUExRkUxMkQ3MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF7LjI+ch6KENQ7o1MahuHPpZh PpyX0GbIUihLe3L3oBz0aDB7bTboDHXlKIsiYfHg1QsO9Dz4gKLmxifT0QjNMu3k 7j8VsZC7lJdIMj0Ld8NHd2Bmw4lRzwqi1E9TeAsuMhfw9FJkqt/ta2Oxu9hwqSSQ 5WujMzrpqv5lTlQIhFEZMWpJitTC4He/M31eiA+4IJ1/3LZWH6BjDgG3r8pJN3rW EAgBTVlhzv4Z2m3I6RNPkwUSyI8qZZqYfwpkJXP+4ZHuL9Y40Y8I1l6Z4+DYqACO E9s158njicfvqxwCKAu6ZLLDq6HCOUO/MvPM0KNmT0VvOoVL1tupx82AXqbZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUZ7Ozs4rAxE6XwmUUPWfpof4S1wMwHwYDVR0j BBgwFoAUCv23IiueujOmXim74/KdfF9LCbkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzMvMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1RjRCMDlCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC8wQUZEQjcyMjJCOUVCQTMzQTY1RTI5QkJF M0YyOUQ3QzVGNEIwOUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8zLzBBRkRCNzIy MkI5RUJBMzNBNjVFMjlCQkUzRjI5RDdDNUY0QjA5QjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA8XW6q Ce7A5ruB1LJEO4jVBGYojuA8g4M9jUJOzWmADpfZk1WNnfw6L9RBmfqeY9DFmR81 9nv36un3tYi7+nq/WIFxjtnMk0SX2P/0gUnSMi2fZAUD/NqIHbaJZRf6nToiYTck RUw2RiiGtB1wyqec3ZRv/0XE9cpItg/PQ2QYJqWCeLmhI4zrHek2MVUeQxD0mswR RdfYQlv6EekkP1IQwGGb6Z4DE0rIU20Ror0PLfG63MBi+9bvj8UiiWpKliIjJGzV ya63ucbOixy6OOYdFvB5DyKPyl8Rl4+yA0lur47hqmOrWChX2VnqiAve9/BZK06h +kavnLiH1Z0tk6p+ -----END CERTIFICATE-----Generated at Thu Mar 26 04:18:43 2026 by rpki-client