$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft File: D36546790928F44FF74C564231471FA1D8D2A97B.mft (raw, json) Hash identifier: tuFH6L1COFaBmGax0hUOnFxH/HgYxJRkJQR9qF0Jd7M= Subject key identifier: 16:DD:4F:57:EE:72:53:AC:A5:3F:9F:CB:DF:77:FF:66:FB:A7:0C:E2 Authority key identifier: D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B Certificate issuer: /CN=D36546790928F44FF74C564231471FA1D8D2A97B Certificate serial: 2F3F9E3DE5ED09655E9C16798180C9E6BDD5F8B5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft Manifest number: BA Signing time: Thu 26 Mar 2026 02:13:49 +0000 Manifest this update: Thu 26 Mar 2026 02:08:49 +0000 Manifest next update: Fri 27 Mar 2026 02:33:49 +0000 Files and hashes: 1: 326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa (hash: Uw0Yd63FHiLbrVWXi+u/Khr5x1SAZF46bRDWajH7ZJ4=) 2: 326130363a313238333a626434313a3a2f34382d313238203d3e20323130373936.roa (hash: dEQxNzWGRiNVE6wnRySg0Zjbuji/RIwRR1DUgWYNf80=) 3: D36546790928F44FF74C564231471FA1D8D2A97B.crl (hash: G9W9dauiEV99+pNpk1Cdkpp81dg6EMJz9rSfsRwsvgE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:3f:9e:3d:e5:ed:09:65:5e:9c:16:79:81:80:c9:e6:bd:d5:f8:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D36546790928F44FF74C564231471FA1D8D2A97B Validity Not Before: Mar 26 02:08:49 2026 GMT Not After : Mar 27 02:33:49 2026 GMT Subject: CN=16DD4F57EE7253ACA53F9FCBDF77FF66FBA70CE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:47:e4:78:fa:4e:3b:58:55:da:70:c8:87:2f: 6c:35:7d:49:a1:23:67:5c:1c:d3:5a:92:eb:34:61: 20:b9:58:ed:a7:04:71:a7:de:96:ff:64:8c:6f:f3: 6f:91:b0:b3:9e:40:c0:a1:4a:d9:85:91:80:bb:b2: 45:6f:8a:7c:13:25:33:ac:c0:fb:d6:43:3d:82:33: e3:39:5e:99:7c:9c:a2:22:08:eb:9f:e4:f3:65:cd: 17:b9:bf:fa:48:bb:3f:41:fb:de:4b:00:0b:d3:d5: 23:fa:30:35:90:93:50:b6:5e:b8:1d:7b:af:08:e0: c5:79:5c:cb:26:33:08:8c:f1:db:fe:ce:aa:34:5d: b7:be:5b:6f:4a:3e:09:9b:75:c6:c8:93:d8:b6:d2: 79:f5:9e:e2:e9:b3:80:b9:1c:5d:fb:5a:52:40:32: 16:f7:f1:91:56:56:e6:8a:7a:03:b0:a0:e4:d8:95: 29:d2:c6:ce:b1:5b:4f:98:dd:2a:d9:8c:6c:80:f1: 83:d4:38:f3:12:d1:b8:d6:f7:28:4c:b7:7a:39:88: b2:d6:71:0b:c5:c4:f8:a2:ab:9d:cd:7d:8f:f0:b7: e5:d1:55:1e:a3:83:aa:28:51:82:e2:20:48:ab:4a: fc:20:7e:3b:a2:68:e5:7d:a7:28:be:5c:71:60:8d: c8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:DD:4F:57:EE:72:53:AC:A5:3F:9F:CB:DF:77:FF:66:FB:A7:0C:E2 X509v3 Authority Key Identifier: keyid:D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:7f:4b:54:be:6c:50:b7:9c:51:ed:3f:61:49:c9:30:a9:c4: 07:47:9e:a0:32:04:eb:c1:15:d6:30:40:9f:67:7a:0f:1a:21: 73:19:17:87:00:89:0a:4e:b8:5e:1f:f7:55:bf:a3:44:a0:ec: ac:5d:41:d9:63:a2:13:a5:2d:6b:4e:a5:01:1d:4f:04:95:4f: b3:4f:d7:78:ee:a7:99:7f:4a:42:79:15:be:e0:2e:ba:20:2c: 5d:bf:eb:d7:3f:0f:4b:b2:d4:33:63:e3:bf:50:10:1d:42:b2: 7b:fb:c7:a7:21:9d:84:87:64:59:48:4d:00:e6:19:76:be:02: 4d:aa:5a:a7:3b:c2:60:02:76:a7:22:cf:ad:3f:05:dd:b5:6a: 2d:14:df:f9:8b:0e:8d:dc:19:81:87:b4:70:05:42:3c:94:39: 69:05:53:31:36:90:3a:c4:20:7d:b6:4a:6a:bf:92:4c:0a:f9: 76:c4:18:98:0a:8e:e4:0d:d7:c4:4b:df:e4:d4:5d:12:22:ad: 8a:cc:a1:06:7e:66:70:d2:e8:11:4d:0e:2e:8d:0c:0f:13:72: fa:93:b4:60:a5:6f:9b:43:46:3d:fc:af:7f:fc:0a:72:fc:d4: d7:6d:07:a3:c7:78:a8:bb:82:a9:95:91:c3:bc:ab:f7:e2:c2: 74:76:e9:62 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULz+ePeXtCWVenBZ5gYDJ5r3V+LUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM2NTQ2NzkwOTI4RjQ0RkY3NEM1NjQyMzE0NzFGQTFE OEQyQTk3QjAeFw0yNjAzMjYwMjA4NDlaFw0yNjAzMjcwMjMzNDlaMDMxMTAvBgNV BAMTKDE2REQ0RjU3RUU3MjUzQUNBNTNGOUZDQkRGNzdGRjY2RkJBNzBDRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2R+R4+k47WFXacMiHL2w1fUmh I2dcHNNakus0YSC5WO2nBHGn3pb/ZIxv82+RsLOeQMChStmFkYC7skVvinwTJTOs wPvWQz2CM+M5Xpl8nKIiCOuf5PNlzRe5v/pIuz9B+95LAAvT1SP6MDWQk1C2Xrgd e68I4MV5XMsmMwiM8dv+zqo0Xbe+W29KPgmbdcbIk9i20nn1nuLps4C5HF37WlJA Mhb38ZFWVuaKegOwoOTYlSnSxs6xW0+Y3SrZjGyA8YPUOPMS0bjW9yhMt3o5iLLW cQvFxPiiq53NfY/wt+XRVR6jg6ooUYLiIEirSvwgfjuiaOV9pyi+XHFgjcj7AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUFt1PV+5yU6ylP5/L33f/ZvunDOIwHwYDVR0j BBgwFoAU02VGeQko9E/3TFZCMUcfodjSqXswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjg4NDQzMTgtMzVkNy00ODJlLWJiZDUtYjYyNGNmMGIy MDQxLzEvRDM2NTQ2NzkwOTI4RjQ0RkY3NEM1NjQyMzE0NzFGQTFEOEQyQTk3Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi9EMzY1NDY3OTA5MjhGNDRGRjc0QzU2NDIz MTQ3MUZBMUQ4RDJBOTdCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I4ODQ0MzE4LTM1ZDctNDgyZS1iYmQ1LWI2MjRjZjBiMjA0MS8xL0QzNjU0Njc5 MDkyOEY0NEZGNzRDNTY0MjMxNDcxRkExRDhEMkE5N0IubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQArf0tU vmxQt5xR7T9hSckwqcQHR56gMgTrwRXWMECfZ3oPGiFzGReHAIkKTrheH/dVv6NE oOysXUHZY6ITpS1rTqUBHU8ElU+zT9d47qeZf0pCeRW+4C66ICxdv+vXPw9LstQz Y+O/UBAdQrJ7+8enIZ2Eh2RZSE0A5hl2vgJNqlqnO8JgAnanIs+tPwXdtWotFN/5 iw6N3BmBh7RwBUI8lDlpBVMxNpA6xCB9tkpqv5JMCvl2xBiYCo7kDdfES9/k1F0S Iq2KzKEGfmZw0ugRTQ4ujQwPE3L6k7RgpW+bQ0Y9/K9//Apy/NTXbQejx3iou4Kp lZHDvKv34sJ0duli -----END CERTIFICATE-----Generated at Thu Mar 26 07:15:36 2026 by rpki-client