$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft File: AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft (raw, json) Hash identifier: LP8BkiA27Cm+uMaSTKl/E6wqOJYMz9Le+pt1StPdi+k= Subject key identifier: EE:10:C3:F0:23:CF:37:CB:9D:CB:81:9F:03:77:E8:BE:94:8F:E8:AB Authority key identifier: AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24 Certificate issuer: /CN=AC7F9BC30C04B3A236BDF8A430869ECA1A28B324 Certificate serial: 60E8FFD78557E85E4EDEEDCB4DAA2D7762CD564E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft Manifest number: B0 Signing time: Wed 25 Mar 2026 18:05:55 +0000 Manifest this update: Wed 25 Mar 2026 18:00:55 +0000 Manifest next update: Thu 26 Mar 2026 18:32:55 +0000 Files and hashes: 1: 3230362e35332e302e302f32342d3234203d3e20323038393135.roa (hash: WAuGwGix52TOMRQkik+jyE1rcWEn8673KCYGvlhnhXY=) 2: AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl (hash: RyeX4P1E8HzwIdbyOPQFDQKGY7Cl02V1fPeEfBVGxn8=) 3: 326130643a643930353a3a2f33322d3332203d3e20323038393135.roa (hash: 2xUP0qecdhpogJJIXpKqaPO0rpU4gp47dCbQRpKimlY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 18:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:e8:ff:d7:85:57:e8:5e:4e:de:ed:cb:4d:aa:2d:77:62:cd:56:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC7F9BC30C04B3A236BDF8A430869ECA1A28B324 Validity Not Before: Mar 25 18:00:55 2026 GMT Not After : Mar 26 18:32:55 2026 GMT Subject: CN=EE10C3F023CF37CB9DCB819F0377E8BE948FE8AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bf:39:a1:9d:02:3c:bb:46:28:ef:3b:e3:4d: 42:78:4f:2b:18:f0:2b:db:41:11:3f:8a:fd:68:f9: ee:85:1b:be:56:e5:ca:13:83:85:04:1f:f8:09:65: 02:b0:f7:a5:af:84:79:e6:83:cb:05:3f:c6:23:e2: c2:d4:f7:d7:f4:84:12:27:85:96:bb:e6:25:7f:8f: 5a:99:f1:f0:43:6c:4b:97:cd:6f:d6:74:a9:7f:80: 06:e0:f3:f4:64:88:1d:b1:d0:d7:8e:3c:04:18:76: f4:f7:5e:0e:6b:73:54:42:bd:0e:af:64:76:24:d1: 64:bd:9c:83:06:bb:cb:c1:5c:18:a1:03:51:05:cb: 87:c2:1d:e2:78:32:7a:b3:93:dc:7c:3b:ad:3e:a7: 9b:36:d7:4a:83:8c:50:bc:bc:5d:da:9f:78:dc:cd: fe:11:b5:3f:8a:11:e0:12:47:9b:4b:da:2a:83:b3: f1:f2:7b:d9:9e:fe:cb:64:af:79:76:8e:45:d8:8f: 6d:1a:ff:ad:08:7d:99:a2:69:c9:c7:1a:73:fe:80: 02:39:d1:d6:a5:40:ca:10:ec:62:16:c1:78:a3:65: 9d:ed:dc:a6:35:02:90:12:4c:34:be:06:38:7f:d4: d7:9c:23:22:8a:fa:d6:c4:42:df:fe:59:22:ca:a6: 57:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:10:C3:F0:23:CF:37:CB:9D:CB:81:9F:03:77:E8:BE:94:8F:E8:AB X509v3 Authority Key Identifier: keyid:AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:fe:cf:56:6a:e3:cd:2f:0e:68:13:f8:58:e0:2f:7c:4a:42: bf:16:65:f9:3c:e9:00:1a:ef:b4:61:bd:1f:ff:f1:86:b7:a7: 5c:df:1b:d3:9e:ce:ea:2e:72:13:b9:11:bf:2a:e7:e0:8b:be: fd:4a:1d:66:a9:9c:48:b2:b9:f7:87:2f:88:a7:52:01:7c:4b: a9:bf:e5:9b:4e:31:9d:3b:f0:d6:6c:ff:eb:7d:f0:83:00:bb: 04:6f:08:68:8e:7f:77:8c:02:67:e3:d9:63:c9:5f:05:8c:22: 8c:fa:3f:17:74:7f:62:e2:ef:c1:67:e5:2a:0a:0e:65:97:1a: 8f:92:d8:ab:43:d8:36:b6:b2:f3:0d:45:03:39:31:96:15:ed: db:1d:92:0c:e1:9e:75:9d:b2:4c:f3:d2:a9:eb:d2:52:62:a1: 80:ce:a7:93:cf:6b:c0:0d:9c:bd:46:db:b8:64:44:d6:3f:8c: e2:18:79:b7:07:a6:65:c1:d2:c2:c4:02:e8:f3:6a:3a:4d:4d: 36:3f:1e:dc:68:d6:2d:6b:f5:7e:8e:ba:e4:7e:7e:b0:f1:a4: 61:2c:8a:23:a5:49:d5:2b:21:11:7e:5e:9e:97:fc:50:7b:ed: 82:ea:b2:75:f3:c0:31:5a:a2:19:71:59:24:0e:23:1e:48:b3: aa:cf:6a:0e -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUYOj/14VX6F5O3u3LTaotd2LNVk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0Ex QTI4QjMyNDAeFw0yNjAzMjUxODAwNTVaFw0yNjAzMjYxODMyNTVaMDMxMTAvBgNV BAMTKEVFMTBDM0YwMjNDRjM3Q0I5RENCODE5RjAzNzdFOEJFOTQ4RkU4QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEvzmhnQI8u0Yo7zvjTUJ4TysY 8CvbQRE/iv1o+e6FG75W5coTg4UEH/gJZQKw96WvhHnmg8sFP8Yj4sLU99f0hBIn hZa75iV/j1qZ8fBDbEuXzW/WdKl/gAbg8/RkiB2x0NeOPAQYdvT3Xg5rc1RCvQ6v ZHYk0WS9nIMGu8vBXBihA1EFy4fCHeJ4Mnqzk9x8O60+p5s210qDjFC8vF3an3jc zf4RtT+KEeASR5tL2iqDs/Hye9me/stkr3l2jkXYj20a/60IfZmiacnHGnP+gAI5 0dalQMoQ7GIWwXijZZ3t3KY1ApASTDS+Bjh/1NecIyKK+tbEQt/+WSLKplcxAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU7hDD8CPPN8udy4GfA3fovpSP6KswHwYDVR0j BBgwFoAUrH+bwwwEs6I2vfikMIaeyhoosyQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRjY2I0YjAtZTMwZS00MjZjLTg0ZGMtNDY0ZmQxODk5 MTE2LzEvQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0ExQTI4QjMyNC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0ExQTI4 QjMyNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGNjYjRiMC1l MzBlLTQyNmMtODRkYy00NjRmZDE4OTkxMTYvMS9BQzdGOUJDMzBDMDRCM0EyMzZC REY4QTQzMDg2OUVDQTFBMjhCMzI0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPv7PVmrjzS8OaBP4WOAv fEpCvxZl+TzpABrvtGG9H//xhrenXN8b057O6i5yE7kRvyrn4Iu+/UodZqmcSLK5 94cviKdSAXxLqb/lm04xnTvw1mz/633wgwC7BG8IaI5/d4wCZ+PZY8lfBYwijPo/ F3R/YuLvwWflKgoOZZcaj5LYq0PYNray8w1FAzkxlhXt2x2SDOGedZ2yTPPSqevS UmKhgM6nk89rwA2cvUbbuGRE1j+M4hh5twemZcHSwsQC6PNqOk1NNj8e3GjWLWv1 fo665H5+sPGkYSyKI6VJ1SshEX5enpf8UHvtguqydfPAMVqiGXFZJA4jHkizqs9q Dg== -----END CERTIFICATE-----Generated at Thu Mar 26 08:47:42 2026 by rpki-client