$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.mft File: 4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.mft (raw, json) Hash identifier: ZVYNIUUCxZGRKr6HimpPeBgKZuAGLTYVoRhzRAFdLyg= Subject key identifier: 0A:86:5B:CA:45:68:78:B2:12:BB:B2:87:D4:40:B5:19:D9:A5:56:4F Authority key identifier: 4B:7A:FD:45:B3:03:92:C9:F4:66:5C:E2:A7:69:2D:56:E7:55:DC:EA Certificate issuer: /CN=4B7AFD45B30392C9F4665CE2A7692D56E755DCEA Certificate serial: 574D4B0F2A9F3451B835A4D04650BDCF0A35A2C4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.mft Manifest number: 60 Signing time: Thu 26 Mar 2026 18:08:14 +0000 Manifest this update: Thu 26 Mar 2026 18:03:14 +0000 Manifest next update: Fri 27 Mar 2026 18:32:14 +0000 Files and hashes: 1: 4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.crl (hash: 0fL1twjEzInwBRWTS/U51JN02b0Ddgl+XGTtj7AgfXI=) 2: 326131343a373538363a363030303a3a2f34302d3438203d3e20313531363733.roa (hash: a5s0weSMSVAZOPtcCLRRCAjoiXiAH1m3fzt4R/LeqXA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.crl rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 04:45:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:4d:4b:0f:2a:9f:34:51:b8:35:a4:d0:46:50:bd:cf:0a:35:a2:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B7AFD45B30392C9F4665CE2A7692D56E755DCEA Validity Not Before: Mar 26 18:03:14 2026 GMT Not After : Mar 27 18:32:14 2026 GMT Subject: CN=0A865BCA456878B212BBB287D440B519D9A5564F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a7:75:17:6d:b5:e0:fc:82:0e:78:72:6b:a9: 5a:e9:80:b6:04:fe:e3:72:7c:8e:d2:29:dc:be:67: bc:95:39:4c:a7:5f:ed:cb:6c:5f:41:3c:37:5a:63: 0d:5a:d5:fc:28:35:94:b8:6b:9a:23:be:c0:82:c7: 03:e2:46:94:7e:5a:38:59:d8:46:d5:ea:98:83:83: d7:73:ac:b8:58:03:74:48:ab:36:0d:21:2c:46:65: e6:a5:e8:3f:ca:70:98:a1:b3:2f:34:85:0f:a4:d7: 06:b8:4b:39:5e:65:46:16:f0:1a:d2:ca:8e:7d:a9: e3:24:aa:f5:a6:1c:6c:f7:8f:da:d8:2f:0e:a5:f6: 16:78:9e:13:7d:e9:c6:b1:d2:92:0b:45:5d:7e:67: b8:01:96:2a:aa:59:d6:33:4c:94:a3:39:24:49:03: ef:4f:56:2f:59:88:28:be:35:c4:a5:0d:1c:75:24: a1:eb:bc:fc:b1:b1:9b:87:bd:a5:4b:f5:a1:ba:16: 22:a2:67:14:d1:f0:26:ea:8c:06:1b:c4:5d:10:18: 67:08:57:36:4d:c3:bd:e2:a5:66:70:ec:23:80:49: f2:79:22:a6:9d:6a:ed:9e:1b:82:fc:57:73:f4:15: a4:8b:ed:45:1e:fd:77:ff:a7:e2:d3:3e:2a:0c:1a: 0f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:86:5B:CA:45:68:78:B2:12:BB:B2:87:D4:40:B5:19:D9:A5:56:4F X509v3 Authority Key Identifier: keyid:4B:7A:FD:45:B3:03:92:C9:F4:66:5C:E2:A7:69:2D:56:E7:55:DC:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:3b:ca:0a:d0:a5:96:d6:27:40:b4:74:83:a8:02:fd:f0:06: fd:b9:f0:89:4b:c6:36:41:ae:1a:99:aa:46:9f:34:47:ac:9f: 33:98:6d:d8:67:aa:d7:b1:35:4d:b4:11:45:ef:0e:84:c2:7e: 39:29:6a:74:e9:6c:59:86:9a:e1:f9:8e:01:55:20:5a:ed:43: 03:d8:bb:5d:f2:86:a9:c6:41:df:96:59:4f:6a:6d:a1:c9:33: df:cf:27:a8:af:6d:15:78:68:d5:dc:43:2c:82:be:f6:97:69: 7c:df:34:c3:32:e6:0a:06:0e:f4:4b:0c:9f:e5:f3:a0:9e:f8: 8b:f4:fd:a9:5d:4f:51:ad:e2:55:d2:5c:0c:df:7c:4a:3c:a8: ed:42:fe:85:ba:46:fd:d1:33:9c:53:62:e1:f4:77:7f:4b:1c: 5d:48:4b:98:0b:5b:a4:46:e9:b1:89:a9:23:fd:24:80:96:7a: ed:b1:eb:92:e9:d4:ec:59:e5:45:d9:4a:53:47:b0:65:e7:95: a8:33:dc:f6:60:e6:f0:5e:66:ed:1f:f7:5b:e0:43:48:5e:06: 2b:28:23:5d:fc:67:50:d9:9f:c7:c5:6d:c7:72:97:e4:2f:e0: 5c:fb:d4:d8:99:6c:7a:b5:3a:05:ce:40:cb:67:98:db:8a:6a: 17:9c:61:0a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUV01LDyqfNFG4NaTQRlC9zwo1osQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI3QUZENDVCMzAzOTJDOUY0NjY1Q0UyQTc2OTJENTZF NzU1RENFQTAeFw0yNjAzMjYxODAzMTRaFw0yNjAzMjcxODMyMTRaMDMxMTAvBgNV BAMTKDBBODY1QkNBNDU2ODc4QjIxMkJCQjI4N0Q0NDBCNTE5RDlBNTU2NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcp3UXbbXg/IIOeHJrqVrpgLYE /uNyfI7SKdy+Z7yVOUynX+3LbF9BPDdaYw1a1fwoNZS4a5ojvsCCxwPiRpR+WjhZ 2EbV6piDg9dzrLhYA3RIqzYNISxGZeal6D/KcJihsy80hQ+k1wa4SzleZUYW8BrS yo59qeMkqvWmHGz3j9rYLw6l9hZ4nhN96cax0pILRV1+Z7gBliqqWdYzTJSjOSRJ A+9PVi9ZiCi+NcSlDRx1JKHrvPyxsZuHvaVL9aG6FiKiZxTR8CbqjAYbxF0QGGcI VzZNw73ipWZw7COASfJ5Iqadau2eG4L8V3P0FaSL7UUe/Xf/p+LTPioMGg+NAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUCoZbykVoeLISu7KH1EC1GdmlVk8wHwYDVR0j BBgwFoAUS3r9RbMDksn0Zlzip2ktVudV3OowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTA4MjE4OTktNzdhNi00M2E3LTlhODItMGEzOGZmM2I0 YWQwLzIvNEI3QUZENDVCMzAzOTJDOUY0NjY1Q0UyQTc2OTJENTZFNzU1RENFQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy80QjdBRkQ0NUIzMDM5MkM5RjQ2NjVDRTJB NzY5MkQ1NkU3NTVEQ0VBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzkwODIxODk5LTc3YTYtNDNhNy05YTgyLTBhMzhmZjNiNGFkMC8yLzRCN0FGRDQ1 QjMwMzkyQzlGNDY2NUNFMkE3NjkyRDU2RTc1NURDRUEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDCO8oK 0KWW1idAtHSDqAL98Ab9ufCJS8Y2Qa4amapGnzRHrJ8zmG3YZ6rXsTVNtBFF7w6E wn45KWp06WxZhprh+Y4BVSBa7UMD2Ltd8oapxkHflllPam2hyTPfzyeor20VeGjV 3EMsgr72l2l83zTDMuYKBg70Swyf5fOgnviL9P2pXU9RreJV0lwM33xKPKjtQv6F ukb90TOcU2Lh9Hd/SxxdSEuYC1ukRumxiakj/SSAlnrtseuS6dTsWeVF2UpTR7Bl 55WoM9z2YObwXmbtH/db4ENIXgYrKCNd/GdQ2Z/HxW3HcpfkL+Bc+9TYmWx6tToF zkDLZ5jbimoXnGEK -----END CERTIFICATE-----Generated at Thu Mar 26 22:49:51 2026 by rpki-client