$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft File: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft (raw, json) Hash identifier: Nj1hO27tAJrvOrcqjud98DsBTJ3Zj99Wi2RPvWne2d4= Subject key identifier: 52:46:A9:D5:12:D5:ED:2E:A5:E1:5F:06:5C:1B:6E:FB:FE:6A:4F:C3 Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 4E7AE5B4C9B52EDDF9F8051F17AE8B9110703D91 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft Manifest number: 0257 Signing time: Sat 28 Mar 2026 07:00:47 +0000 Manifest this update: Sat 28 Mar 2026 06:55:47 +0000 Manifest next update: Sun 29 Mar 2026 20:46:47 +0000 Files and hashes: 1: 326130623a346530373a363030303a3a2f34302d3438203d3e20323134373031.roa (hash: mhaYla+UsHdOX7ijGa8kmFH/Ey3jwcszbuWBzNvxxRw=) 2: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl (hash: zLg0+giHWDnYlVdP0zSlJ3J1U1MiY/jjfQYkAl/oLQY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 00:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:7a:e5:b4:c9:b5:2e:dd:f9:f8:05:1f:17:ae:8b:91:10:70:3d:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: Mar 28 06:55:47 2026 GMT Not After : Mar 29 20:46:47 2026 GMT Subject: CN=5246A9D512D5ED2EA5E15F065C1B6EFBFE6A4FC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:17:0f:f9:22:c9:2d:88:1c:da:2c:b2:fe:e8: d7:d4:52:ca:d1:02:56:0d:8b:6d:a2:ab:64:bf:71: 58:d5:0c:c6:b7:e9:9b:fc:d2:81:cb:3e:f3:c1:ab: 5a:98:4a:79:90:11:d6:f1:71:f3:97:f0:fc:4d:d6: ce:c5:5f:aa:2d:52:95:ee:64:e3:86:e3:36:9b:f0: 32:76:f6:39:5f:b6:e7:d3:4b:e4:e2:dc:25:78:4f: 38:a9:74:77:cc:6b:f7:aa:db:c7:dc:da:1e:de:22: 98:e8:7d:46:fe:ed:a0:b2:46:4e:40:08:17:23:47: a8:0c:8f:50:f9:81:26:f7:14:0d:fc:84:0e:37:b7: f7:de:73:3b:67:fe:42:2f:a4:10:ec:b9:ef:18:39: 2b:0c:5e:41:e3:e1:7f:77:87:85:2b:64:ba:c5:de: 86:ab:49:6f:6b:b4:ac:3b:9f:08:5c:54:fe:e9:84: 20:89:f9:61:5e:6f:2f:91:a7:6f:4a:6a:78:64:e6: f2:e3:0e:f9:e5:2a:53:09:4d:d4:7c:4c:a9:ab:da: 7c:13:ff:8c:98:76:6e:ac:1d:10:c4:6f:82:17:f5: c4:c0:28:33:68:7c:32:6c:17:95:e9:5a:5e:5a:75: 6f:0a:8c:2e:ff:25:e0:f0:48:4e:de:aa:ce:a6:61: cf:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:46:A9:D5:12:D5:ED:2E:A5:E1:5F:06:5C:1B:6E:FB:FE:6A:4F:C3 X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:72:4c:8f:05:b0:47:20:5b:fa:df:9d:45:49:18:49:9e:07: d4:fc:d1:02:bd:9c:75:89:74:9c:ab:57:40:ed:45:da:28:a4: 33:9d:e9:18:d8:07:e5:b6:3e:69:4a:7a:63:2d:30:44:f5:33: de:17:d8:0f:1a:93:c2:ac:15:0a:08:e6:2d:40:94:14:0a:c9: e9:7d:7a:a2:e4:77:cb:a5:20:60:4c:46:d1:d5:37:cb:95:91: cf:41:20:11:d8:87:7c:be:d5:47:7a:0e:88:d5:f3:d4:85:ba: 2e:9f:67:e1:03:c3:fc:9d:39:04:bb:40:ca:c6:45:e1:d3:d9: 02:19:55:0a:8a:24:de:b5:af:53:03:cb:6f:e6:97:96:bf:b6: 37:82:4c:05:f4:78:ba:5a:68:13:8e:6e:03:55:4d:93:b2:85: cf:f8:83:ae:28:93:57:0e:01:ab:97:06:cc:ed:dd:8e:72:87: 2a:9b:5b:60:c9:3a:de:2d:fd:e1:41:89:ef:71:ee:54:c2:54: 1e:da:7a:a4:bd:99:0a:27:21:5c:be:02:4f:d6:e3:15:a3:1e: c7:0c:a4:bb:6c:41:27:d5:28:e0:8a:82:99:41:8c:0f:34:62: 50:42:63:be:db:de:d8:81:c4:87:ee:86:45:b2:60:e2:09:12: 81:79:fe:0f -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUTnrltMm1Lt35+AUfF66LkRBwPZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNjAzMjgwNjU1NDdaFw0yNjAzMjkyMDQ2NDdaMDMxMTAvBgNV BAMTKDUyNDZBOUQ1MTJENUVEMkVBNUUxNUYwNjVDMUI2RUZCRkU2QTRGQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEFw/5IsktiBzaLLL+6NfUUsrR AlYNi22iq2S/cVjVDMa36Zv80oHLPvPBq1qYSnmQEdbxcfOX8PxN1s7FX6otUpXu ZOOG4zab8DJ29jlftufTS+Ti3CV4TzipdHfMa/eq28fc2h7eIpjofUb+7aCyRk5A CBcjR6gMj1D5gSb3FA38hA43t/fecztn/kIvpBDsue8YOSsMXkHj4X93h4UrZLrF 3oarSW9rtKw7nwhcVP7phCCJ+WFeby+Rp29Kanhk5vLjDvnlKlMJTdR8TKmr2nwT /4yYdm6sHRDEb4IX9cTAKDNofDJsF5XpWl5adW8KjC7/JeDwSE7eqs6mYc/bAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUUkap1RLV7S6l4V8GXBtu+/5qT8MwHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMy9EREMyNUFEMkYxQTQ4OTI0Nzcx M0VFMzlCMUMwM0VBMkZEREE0MTE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAanJMjwWwRyBb+t+dRUkY SZ4H1PzRAr2cdYl0nKtXQO1F2iikM53pGNgH5bY+aUp6Yy0wRPUz3hfYDxqTwqwV CgjmLUCUFArJ6X16ouR3y6UgYExG0dU3y5WRz0EgEdiHfL7VR3oOiNXz1IW6Lp9n 4QPD/J05BLtAysZF4dPZAhlVCook3rWvUwPLb+aXlr+2N4JMBfR4ulpoE45uA1VN k7KFz/iDriiTVw4Bq5cGzO3djnKHKptbYMk63i394UGJ73HuVMJUHtp6pL2ZCich XL4CT9bjFaMexwyku2xBJ9Uo4IqCmUGMDzRiUEJjvtve2IHEh+6GRbJg4gkSgXn+ Dw== -----END CERTIFICATE-----Generated at Sat Mar 28 10:32:32 2026 by rpki-client