$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft File: 79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft (raw, json) Hash identifier: WNcVLQ85CSg2y8hojrFq35iWWTGKrmWdxJteEPRMfuc= Subject key identifier: 6F:29:7E:7B:CB:71:69:C7:BA:5F:51:0F:9C:EB:73:0F:98:B3:E8:2E Authority key identifier: 79:AA:12:BA:D7:E2:C5:02:78:89:0F:2D:F9:CC:E0:2B:88:E1:84:84 Certificate issuer: /CN=79AA12BAD7E2C50278890F2DF9CCE02B88E18484 Certificate serial: 33AF839CB3EB5C7338F99F228921A6E0269ECFA2 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft Manifest number: 3F Signing time: Wed 25 Mar 2026 13:20:22 +0000 Manifest this update: Wed 25 Mar 2026 13:15:22 +0000 Manifest next update: Thu 26 Mar 2026 16:11:22 +0000 Files and hashes: 1: 326130623a346530373a363130313a3a2f34382d3438203d3e20323130363332.roa (hash: IoCPHkitPh6npsPsb3Bqa9FNQf1sEQWU+tTBPtB15HE=) 2: 326130623a346530373a363130333a3a2f34382d3438203d3e20323130363332.roa (hash: R8edTsZwje2HhgGaCzDrUpKv5hszBEq9JO3MDKNHPqg=) 3: 326130623a346530373a363130303a3a2f34302d3430203d3e20323130363332.roa (hash: UaVUawxyo7vEGzTJHFQ6hbv9VSPWBwLtWGhp7ONFPXo=) 4: 326130623a346530373a363130323a3a2f34382d3438203d3e20323130363332.roa (hash: kZt+v+XPycP4DQLvFhNN3zKIerdJLT8fmEhn3Kh8DJ8=) 5: 79AA12BAD7E2C50278890F2DF9CCE02B88E18484.crl (hash: DIBbV/U2inqPoIeeS5fNc3XakO47/QxXVujAeKFhbsE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.crl rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:af:83:9c:b3:eb:5c:73:38:f9:9f:22:89:21:a6:e0:26:9e:cf:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79AA12BAD7E2C50278890F2DF9CCE02B88E18484 Validity Not Before: Mar 25 13:15:22 2026 GMT Not After : Mar 26 16:11:22 2026 GMT Subject: CN=6F297E7BCB7169C7BA5F510F9CEB730F98B3E82E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:73:0b:ed:22:c9:c6:24:4c:60:ae:06:64:ca: cb:c1:0e:d2:11:95:03:68:9b:4c:7c:8f:49:45:21: 93:b7:8c:c9:c7:21:0b:37:c9:98:0f:b0:21:25:40: 36:03:99:0b:46:62:5a:1e:33:ed:b6:31:e6:2c:4f: 8e:e8:70:75:4c:3e:0f:4c:ef:a8:19:05:c0:bb:96: f8:01:22:7e:1a:1f:2b:6c:76:32:4e:91:14:bc:33: 6e:65:3e:3a:4a:91:da:5d:32:58:4d:c7:e4:8c:35: 31:53:c4:b0:92:04:10:7d:27:fd:db:2b:9f:4d:77: 7c:c2:7b:2f:73:7f:47:96:98:08:e8:3c:4c:21:40: 05:17:a2:09:43:3a:fb:ae:35:f8:0f:d2:c5:c9:be: 81:02:7a:71:86:5b:70:4c:16:79:71:e9:3c:ee:ba: 04:74:7a:33:94:e1:24:b7:c9:23:d7:fd:b0:f6:3f: 6c:81:a1:e5:b0:73:06:60:5e:5e:5c:f3:28:d2:e1: a9:ef:7d:13:81:05:79:5c:7c:77:e7:a5:0d:cf:fa: 96:91:ef:65:ac:b3:09:cc:19:54:40:fc:5b:0d:4c: 27:c1:3c:14:a1:af:4a:a4:d1:22:db:68:8a:f7:34: c5:68:d4:36:68:40:5f:d8:0a:74:63:bf:5b:bc:a7: 40:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:29:7E:7B:CB:71:69:C7:BA:5F:51:0F:9C:EB:73:0F:98:B3:E8:2E X509v3 Authority Key Identifier: keyid:79:AA:12:BA:D7:E2:C5:02:78:89:0F:2D:F9:CC:E0:2B:88:E1:84:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:1b:b2:6d:91:30:b7:5f:7f:8c:b5:48:34:9c:19:e6:9b:d7: 65:dd:e2:ea:46:5c:6b:c8:70:77:45:6e:ca:c0:ed:de:24:d7: 41:cf:b8:51:72:5b:60:fe:14:f3:14:22:7b:48:37:f0:42:29: 6a:c2:3a:b5:8c:20:29:a5:98:f9:af:c5:a0:ef:4c:be:36:6b: fc:27:bd:63:dd:63:2c:f1:eb:57:22:e1:98:64:5e:b3:2e:3d: 3e:0c:d7:64:8f:4d:b0:66:f8:e4:39:5a:26:56:86:25:1a:f8: c2:f0:e2:14:04:b3:28:a6:c8:f1:eb:93:1e:6e:b9:11:e9:f2: 71:2b:1f:6a:64:7a:6d:4f:8a:4f:da:6b:e8:58:48:d6:0e:da: 45:11:2f:2e:5e:08:7d:1e:37:ea:63:1a:66:91:82:b4:0b:15: 22:68:dc:39:6f:55:3b:a5:14:a4:51:2f:09:fc:8a:44:a5:69: ef:c0:65:b3:80:92:3a:56:82:65:47:f9:c0:84:f2:b7:9d:90: 67:39:4b:90:b2:20:63:6e:82:48:da:d1:e3:c7:1d:4b:c2:46: fb:b7:55:fd:d6:65:51:62:7a:c8:d8:fc:d4:e4:ef:6b:9b:01: 07:98:49:b4:62:1a:f4:44:97:58:60:34:88:59:bd:ea:70:c5: e5:c3:97:e4 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUM6+DnLPrXHM4+Z8iiSGm4Caez6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzlBQTEyQkFEN0UyQzUwMjc4ODkwRjJERjlDQ0UwMkI4 OEUxODQ4NDAeFw0yNjAzMjUxMzE1MjJaFw0yNjAzMjYxNjExMjJaMDMxMTAvBgNV BAMTKDZGMjk3RTdCQ0I3MTY5QzdCQTVGNTEwRjlDRUI3MzBGOThCM0U4MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCucwvtIsnGJExgrgZkysvBDtIR lQNom0x8j0lFIZO3jMnHIQs3yZgPsCElQDYDmQtGYloeM+22MeYsT47ocHVMPg9M 76gZBcC7lvgBIn4aHytsdjJOkRS8M25lPjpKkdpdMlhNx+SMNTFTxLCSBBB9J/3b K59Nd3zCey9zf0eWmAjoPEwhQAUXoglDOvuuNfgP0sXJvoECenGGW3BMFnlx6Tzu ugR0ejOU4SS3ySPX/bD2P2yBoeWwcwZgXl5c8yjS4anvfROBBXlcfHfnpQ3P+paR 72WsswnMGVRA/FsNTCfBPBShr0qk0SLbaIr3NMVo1DZoQF/YCnRjv1u8p0AVAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUbyl+e8txace6X1EPnOtzD5iz6C4wHwYDVR0j BBgwFoAUeaoSutfixQJ4iQ8t+czgK4jhhIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGYxNjlhN2EtZTA0My00MzM3LWFlZWMtMjRkMmFiOTFm MTM4LzEvNzlBQTEyQkFEN0UyQzUwMjc4ODkwRjJERjlDQ0UwMkI4OEUxODQ4NC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvNzlBQTEyQkFEN0UyQzUwMjc4ODkwRjJERjlDQ0UwMkI4OEUx ODQ4NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZjE2OWE3YS1l MDQzLTQzMzctYWVlYy0yNGQyYWI5MWYxMzgvMS83OUFBMTJCQUQ3RTJDNTAyNzg4 OTBGMkRGOUNDRTAyQjg4RTE4NDg0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJRuybZEwt19/jLVINJwZ 5pvXZd3i6kZca8hwd0VuysDt3iTXQc+4UXJbYP4U8xQie0g38EIpasI6tYwgKaWY +a/FoO9MvjZr/Ce9Y91jLPHrVyLhmGResy49PgzXZI9NsGb45DlaJlaGJRr4wvDi FASzKKbI8euTHm65EenycSsfamR6bU+KT9pr6FhI1g7aRREvLl4IfR436mMaZpGC tAsVImjcOW9VO6UUpFEvCfyKRKVp78Bls4CSOlaCZUf5wITyt52QZzlLkLIgY26C SNrR48cdS8JG+7dV/dZlUWJ6yNj81OTva5sBB5hJtGIa9ESXWGA0iFm96nDF5cOX 5A== -----END CERTIFICATE-----Generated at Wed Mar 25 22:54:58 2026 by rpki-client