$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.mft File: C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.mft (raw, json) Hash identifier: lL7pO/Zfzxkm6UjtSfwtrOZ2fBksqee7PZjwxooGtQE= Subject key identifier: 57:F7:74:AC:48:66:06:E3:9C:A6:0E:5E:FA:92:35:89:D3:0D:CB:FC Authority key identifier: C7:3F:B7:03:3F:23:C9:59:58:FC:FB:E5:0E:4C:65:AA:95:C0:3E:F0 Certificate issuer: /CN=C73FB7033F23C95958FCFBE50E4C65AA95C03EF0 Certificate serial: 4EC47A34AB8543C7FE3F58A171990B00BEF8F1F8 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.mft Manifest number: 39 Signing time: Wed 25 Mar 2026 13:11:37 +0000 Manifest this update: Wed 25 Mar 2026 13:06:37 +0000 Manifest next update: Thu 26 Mar 2026 13:53:37 +0000 Files and hashes: 1: 326130623a346530373a62323a3a2f34382d3438203d3e20323031333938.roa (hash: LS3BrlYZK8SbNX6J/CClnGQfo8ZO+l7g9dfo7FOeS6Y=) 2: 326130623a346530373a323030303a3a2f33372d3438203d3e20323031333938.roa (hash: v7UO4M6SMwywlzOBSeY802VXKxb7Hc4PkISYovezxNY=) 3: 326130623a346530373a62333a3a2f34382d3438203d3e20323031333938.roa (hash: qsLlFxGXc9WfPWNVKXZeaayMCuoiW6Y+K24Q7W63kCI=) 4: 326130623a346530373a62303a3a2f34382d3438203d3e20323031333938.roa (hash: /uTqT5JLie3E28kiPUEQaB1WxPf4ESjtP7GgXWWmEIg=) 5: 326130623a346530373a62303a3a2f34362d3436203d3e20323031333938.roa (hash: Vj8pBup2nRsVCRRZZonBMO1mLcSOjU3VQ9IXLrIX7W4=) 6: 326130623a346530373a323030303a3a2f34382d3438203d3e20323031333938.roa (hash: pNk3stE2biT30Fr/pVyzBAKYs6S5o79kFdYQqd+736w=) 7: 326130623a346530373a62313a3a2f34382d3438203d3e20323031333938.roa (hash: 1RCf60dXQ/oUKmGHAZtweCBKcxHUn9CNbfMBr9zQkkk=) 8: C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.crl (hash: tNLjvlnh3On0/ONek0r17oMjbh7cBgv7zqN/ls4LHEs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.crl rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 13:53:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:c4:7a:34:ab:85:43:c7:fe:3f:58:a1:71:99:0b:00:be:f8:f1:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C73FB7033F23C95958FCFBE50E4C65AA95C03EF0 Validity Not Before: Mar 25 13:06:37 2026 GMT Not After : Mar 26 13:53:37 2026 GMT Subject: CN=57F774AC486606E39CA60E5EFA923589D30DCBFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c0:d1:10:f8:49:ec:d6:8b:c9:ca:9f:be:c5: 38:c4:0f:91:56:e5:a9:f9:ff:3e:d9:f1:3b:e5:ef: 9d:65:9b:80:cd:5b:ab:89:a0:96:f4:36:c8:20:07: 5b:76:42:72:ba:85:56:ee:5e:e9:c8:ae:76:fc:bc: b1:01:22:a6:6e:69:d6:26:63:16:ab:59:f0:ae:ab: b7:f1:d4:e4:8a:02:8e:7a:ff:d8:0a:b2:8e:c9:08: c4:2e:b6:21:1f:5a:db:47:3b:fd:8c:75:9f:b2:74: 8e:f0:30:be:a2:26:b5:8a:94:45:79:96:99:f1:92: 84:07:db:9f:aa:70:be:31:cb:54:24:46:43:b5:83: 17:58:a6:11:28:55:58:50:7a:39:83:e9:5e:d9:31: 64:98:f7:47:af:b8:91:dc:98:2f:ff:3c:32:9b:74: 19:bc:a3:d7:35:b4:7e:03:59:9a:ab:9b:16:94:8f: e6:5e:e8:85:b4:b5:58:a9:8e:29:8a:bc:42:19:fc: 81:a1:31:eb:9f:b4:eb:df:87:87:1f:70:51:0e:94: e7:5a:d6:26:9c:cd:fa:84:94:91:dd:3e:f9:ab:ef: 25:cc:6f:3d:2a:97:bc:de:25:54:7d:0e:6a:1c:be: ce:31:52:6f:b7:9a:ea:09:66:9e:63:b0:42:39:42: 52:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F7:74:AC:48:66:06:E3:9C:A6:0E:5E:FA:92:35:89:D3:0D:CB:FC X509v3 Authority Key Identifier: keyid:C7:3F:B7:03:3F:23:C9:59:58:FC:FB:E5:0E:4C:65:AA:95:C0:3E:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:7e:f7:13:b0:c5:03:be:45:8b:a0:3e:b4:a4:31:71:23:ca: 42:cf:bb:f1:3e:48:aa:7a:a1:79:e6:cf:61:4c:86:85:02:df: f8:69:03:24:15:c0:eb:0c:fa:46:9b:92:73:08:70:88:55:5a: be:92:47:47:f3:f4:ed:11:73:7b:4c:06:e4:af:5f:bd:7a:f4: 27:0c:63:20:91:21:39:9d:24:d2:b6:31:2f:90:54:58:f6:91: 49:fd:cc:c5:bf:60:16:a3:c3:9f:6a:7e:cb:6a:91:d6:4c:6c: 9a:83:3b:66:a3:0e:a7:53:94:0d:b9:62:dd:89:68:c7:3f:a5: 24:e4:b7:ee:b5:b2:c8:58:1c:e7:80:fe:83:f6:2f:71:08:df: 48:c3:3f:87:7f:9b:42:aa:82:32:d2:c5:29:bf:bd:9b:25:e1: 60:37:8c:64:eb:66:8d:17:2e:a3:7c:03:cb:03:60:d1:0b:a2: 5f:70:9c:9d:13:b9:93:9c:9d:b4:a4:e5:dc:fb:11:8f:12:7f: 41:7c:7c:7b:76:d7:10:03:13:c9:2b:96:2d:92:bc:f3:50:ce: 5c:90:84:c2:1d:4d:a8:20:1d:2a:e0:0b:85:fe:18:9a:c5:88: 31:16:dd:d2:ea:92:78:f9:68:ab:0f:4c:eb:0d:a1:2e:53:45: ec:d5:3a:11 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUTsR6NKuFQ8f+P1ihcZkLAL748fgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzczRkI3MDMzRjIzQzk1OTU4RkNGQkU1MEU0QzY1QUE5 NUMwM0VGMDAeFw0yNjAzMjUxMzA2MzdaFw0yNjAzMjYxMzUzMzdaMDMxMTAvBgNV BAMTKDU3Rjc3NEFDNDg2NjA2RTM5Q0E2MEU1RUZBOTIzNTg5RDMwRENCRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCwNEQ+Ens1ovJyp++xTjED5FW 5an5/z7Z8Tvl751lm4DNW6uJoJb0NsggB1t2QnK6hVbuXunIrnb8vLEBIqZuadYm YxarWfCuq7fx1OSKAo56/9gKso7JCMQutiEfWttHO/2MdZ+ydI7wML6iJrWKlEV5 lpnxkoQH25+qcL4xy1QkRkO1gxdYphEoVVhQejmD6V7ZMWSY90evuJHcmC//PDKb dBm8o9c1tH4DWZqrmxaUj+Ze6IW0tVipjimKvEIZ/IGhMeuftOvfh4cfcFEOlOda 1iaczfqElJHdPvmr7yXMbz0ql7zeJVR9Dmocvs4xUm+3muoJZp5jsEI5QlJXAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUV/d0rEhmBuOcpg5e+pI1idMNy/wwHwYDVR0j BBgwFoAUxz+3Az8jyVlY/PvlDkxlqpXAPvAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTlmODA4ZDItMWYxNS00ZGYzLWI1MWUtZDU1YzUyM2I2 MmZjLzEvQzczRkI3MDMzRjIzQzk1OTU4RkNGQkU1MEU0QzY1QUE5NUMwM0VGMC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvQzczRkI3MDMzRjIzQzk1OTU4RkNGQkU1MEU0QzY1QUE5NUMw M0VGMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85OWY4MDhkMi0x ZjE1LTRkZjMtYjUxZS1kNTVjNTIzYjYyZmMvMS9DNzNGQjcwMzNGMjNDOTU5NThG Q0ZCRTUwRTRDNjVBQTk1QzAzRUYwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX373E7DFA75Fi6A+tKQx cSPKQs+78T5IqnqheebPYUyGhQLf+GkDJBXA6wz6RpuScwhwiFVavpJHR/P07RFz e0wG5K9fvXr0JwxjIJEhOZ0k0rYxL5BUWPaRSf3Mxb9gFqPDn2p+y2qR1kxsmoM7 ZqMOp1OUDbli3Yloxz+lJOS37rWyyFgc54D+g/YvcQjfSMM/h3+bQqqCMtLFKb+9 myXhYDeMZOtmjRcuo3wDywNg0QuiX3CcnRO5k5ydtKTl3PsRjxJ/QXx8e3bXEAMT ySuWLZK881DOXJCEwh1NqCAdKuALhf4YmsWIMRbd0uqSePloqw9M6w2hLlNF7NU6 EQ== -----END CERTIFICATE-----Generated at Wed Mar 25 23:01:56 2026 by rpki-client