$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/4/37AAEE584452DDAB0250921C4B2D8474F61FF74D.mft File: 37AAEE584452DDAB0250921C4B2D8474F61FF74D.mft (raw, json) Hash identifier: Km3OPjsGhfgYXuuFymWSLGAg5biPQMSc9TdMvR3PYc4= Subject key identifier: A1:EE:14:73:1D:2C:D3:34:D4:46:77:1F:2B:3D:C3:C6:A8:7B:7F:C2 Authority key identifier: 37:AA:EE:58:44:52:DD:AB:02:50:92:1C:4B:2D:84:74:F6:1F:F7:4D Certificate issuer: /CN=37AAEE584452DDAB0250921C4B2D8474F61FF74D Certificate serial: 648D66BB0897B366698F2C73F765871F1F6099C4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/37AAEE584452DDAB0250921C4B2D8474F61FF74D.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/4/37AAEE584452DDAB0250921C4B2D8474F61FF74D.mft Manifest number: 53 Signing time: Wed 25 Mar 2026 18:28:14 +0000 Manifest this update: Wed 25 Mar 2026 18:23:14 +0000 Manifest next update: Thu 26 Mar 2026 20:22:14 +0000 Files and hashes: 1: 37AAEE584452DDAB0250921C4B2D8474F61FF74D.crl (hash: jhW1aObYMHAS4q9MIkZOTokGuVaOvoUzD4/HL7P/n5A=) 2: 326130663a316363353a323431313a3a2f34382d3438203d3e20323036303639.roa (hash: GgsS8q8v92ftDtmAINXb+jZxiQcNlTc0d1SR73H0Jss=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/4/37AAEE584452DDAB0250921C4B2D8474F61FF74D.crl rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/4/37AAEE584452DDAB0250921C4B2D8474F61FF74D.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/37AAEE584452DDAB0250921C4B2D8474F61FF74D.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 20:22:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:8d:66:bb:08:97:b3:66:69:8f:2c:73:f7:65:87:1f:1f:60:99:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37AAEE584452DDAB0250921C4B2D8474F61FF74D Validity Not Before: Mar 25 18:23:14 2026 GMT Not After : Mar 26 20:22:14 2026 GMT Subject: CN=A1EE14731D2CD334D446771F2B3DC3C6A87B7FC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0b:8c:77:92:9a:6e:01:98:80:b2:cd:cc:76: 95:94:1f:97:cd:36:ab:a0:93:67:6f:53:8e:ec:60: 2e:5f:ea:84:c5:bf:c3:d9:62:3c:e6:a4:c5:92:79: d7:33:7a:2d:ab:29:5d:bc:b3:8c:e1:ee:da:d3:73: 0c:a0:34:4a:55:d8:e9:97:d5:27:da:fe:2d:c6:d2: a5:b6:94:6c:fc:f1:91:d4:db:b5:97:58:86:26:67: 00:68:d8:a5:04:0f:27:96:0e:87:93:4d:78:3a:7d: 16:ad:6f:26:f3:09:80:fb:a7:a1:f0:ce:b7:91:da: aa:e5:82:74:7a:cf:9d:13:8e:96:84:54:fa:63:f1: 0f:d5:09:bc:ef:87:0b:49:74:5c:cc:dc:8d:99:c7: 04:5b:75:75:1f:e5:19:4c:4c:54:67:07:d9:e3:8e: 37:e6:cd:9c:76:e3:d8:17:df:b4:f5:40:44:64:78: 52:30:fa:2c:89:66:1f:a1:be:f2:7e:8b:e9:b5:3d: 4b:52:36:73:9f:cb:d4:c0:ca:ff:d6:16:6e:a1:35: ad:ee:8a:56:21:93:9f:3f:53:ff:1a:55:3a:9a:a9: 65:d6:65:55:f0:30:b5:6f:a3:27:3a:f3:71:34:2c: 1c:0f:25:5b:8f:3d:d2:30:7b:98:97:4c:97:e3:96: ae:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:EE:14:73:1D:2C:D3:34:D4:46:77:1F:2B:3D:C3:C6:A8:7B:7F:C2 X509v3 Authority Key Identifier: keyid:37:AA:EE:58:44:52:DD:AB:02:50:92:1C:4B:2D:84:74:F6:1F:F7:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/4/37AAEE584452DDAB0250921C4B2D8474F61FF74D.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/37AAEE584452DDAB0250921C4B2D8474F61FF74D.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/4/37AAEE584452DDAB0250921C4B2D8474F61FF74D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:26:fb:91:17:64:8e:93:58:34:fe:59:18:d5:9a:5c:8a:3d: 48:7b:e3:67:13:13:fb:c3:90:78:ff:7c:8e:bd:39:c9:5f:8a: f0:17:83:84:8f:80:b6:99:a0:15:cc:41:5b:55:ba:12:19:d3: 95:03:78:45:ab:8e:e5:f4:12:02:12:dc:e0:58:f7:15:d1:a3: d1:44:2b:58:e5:08:bb:35:fc:6b:a5:ac:70:15:76:96:11:0f: 78:ca:81:be:d8:28:7c:5a:f9:e4:ec:f9:4c:5e:4a:84:96:2d: 93:3d:4a:2c:05:1b:63:e9:d5:43:c3:c1:e2:c1:39:53:85:69: 36:61:11:6e:19:e7:e5:b7:f4:d7:9d:90:2b:40:32:ae:57:3d: 4b:cf:25:9b:96:97:36:76:cf:ca:95:8d:b5:97:d0:60:10:a7: 43:81:9f:49:72:b0:1f:fa:49:34:a2:89:81:51:d9:3d:e3:f0: 66:b3:66:49:e0:64:12:8e:a3:c6:95:2e:dc:94:0b:cb:c4:ff: 19:3d:a5:20:7c:26:11:2c:b8:50:c4:02:bd:09:d4:ba:76:ea: ac:ee:d6:98:2e:33:05:14:cf:61:39:79:21:9d:b0:d3:29:07: c5:fe:5a:82:63:05:62:f7:14:10:b4:0f:2c:a2:9f:6e:57:51: 47:cf:80:ab -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUZI1muwiXs2Zpjyxz92WHHx9gmcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdBQUVFNTg0NDUyRERBQjAyNTA5MjFDNEIyRDg0NzRG NjFGRjc0RDAeFw0yNjAzMjUxODIzMTRaFw0yNjAzMjYyMDIyMTRaMDMxMTAvBgNV BAMTKEExRUUxNDczMUQyQ0QzMzRENDQ2NzcxRjJCM0RDM0M2QTg3QjdGQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdC4x3kppuAZiAss3MdpWUH5fN Nqugk2dvU47sYC5f6oTFv8PZYjzmpMWSedczei2rKV28s4zh7trTcwygNEpV2OmX 1Sfa/i3G0qW2lGz88ZHU27WXWIYmZwBo2KUEDyeWDoeTTXg6fRatbybzCYD7p6Hw zreR2qrlgnR6z50TjpaEVPpj8Q/VCbzvhwtJdFzM3I2ZxwRbdXUf5RlMTFRnB9nj jjfmzZx249gX37T1QERkeFIw+iyJZh+hvvJ+i+m1PUtSNnOfy9TAyv/WFm6hNa3u ilYhk58/U/8aVTqaqWXWZVXwMLVvoyc683E0LBwPJVuPPdIwe5iXTJfjlq7TAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUoe4Ucx0s0zTURncfKz3Dxqh7f8IwHwYDVR0j BBgwFoAUN6ruWERS3asCUJIcSy2EdPYf900wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTA4MjE4OTktNzdhNi00M2E3LTlhODItMGEzOGZmM2I0 YWQwLzQvMzdBQUVFNTg0NDUyRERBQjAyNTA5MjFDNEIyRDg0NzRGNjFGRjc0RC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC8zN0FBRUU1ODQ0NTJEREFCMDI1MDkyMUM0 QjJEODQ3NEY2MUZGNzRELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzkwODIxODk5LTc3YTYtNDNhNy05YTgyLTBhMzhmZjNiNGFkMC80LzM3QUFFRTU4 NDQ1MkREQUIwMjUwOTIxQzRCMkQ4NDc0RjYxRkY3NEQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBxJvuR F2SOk1g0/lkY1Zpcij1Ie+NnExP7w5B4/3yOvTnJX4rwF4OEj4C2maAVzEFbVboS GdOVA3hFq47l9BICEtzgWPcV0aPRRCtY5Qi7NfxrpaxwFXaWEQ94yoG+2Ch8Wvnk 7PlMXkqEli2TPUosBRtj6dVDw8HiwTlThWk2YRFuGeflt/TXnZArQDKuVz1LzyWb lpc2ds/KlY21l9BgEKdDgZ9JcrAf+kk0oomBUdk94/Bms2ZJ4GQSjqPGlS7clAvL xP8ZPaUgfCYRLLhQxAK9CdS6duqs7taYLjMFFM9hOXkhnbDTKQfF/lqCYwVi9xQQ tA8sop9uV1FHz4Cr -----END CERTIFICATE-----Generated at Thu Mar 26 10:06:44 2026 by rpki-client