$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft File: 879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft (raw, json) Hash identifier: h4R73ilhnpY/xPQWDS4+joj59ANdBR+g1VIBllRKJvw= Subject key identifier: ED:A1:DA:C1:03:FB:36:30:3A:DB:C6:92:4F:07:4C:DA:D7:7E:A1:F7 Authority key identifier: 87:92:80:A7:D9:E6:DD:DD:CC:B2:9E:9A:77:81:9D:5C:E3:82:31:85 Certificate issuer: /CN=879280A7D9E6DDDDCCB29E9A77819D5CE3823185 Certificate serial: 7740429E89F7ECD6ECFE4B9B8488D9936EE2100D Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft Manifest number: 87 Signing time: Wed 25 Mar 2026 19:15:22 +0000 Manifest this update: Wed 25 Mar 2026 19:10:22 +0000 Manifest next update: Thu 26 Mar 2026 19:17:22 +0000 Files and hashes: 1: 879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl (hash: tfPlwAUMdjhDWQJzdxL0hSnTLTeFYZhfAOLM13Cq/3M=) 2: 326130623a346530373a6330303a3a2f33382d3438203d3e20323135373630.roa (hash: YPrQ7rMdq3JvlF7MZ9xUnQFGrFDCIgYUVgYATMFPJvs=) 3: 326130623a346530373a6362393a3a2f34382d3438203d3e20333936393832.roa (hash: dqTuq88lK2siPMjsitpQHSHuFkGIuzl+tsULr9aboBE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 19:17:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:40:42:9e:89:f7:ec:d6:ec:fe:4b:9b:84:88:d9:93:6e:e2:10:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=879280A7D9E6DDDDCCB29E9A77819D5CE3823185 Validity Not Before: Mar 25 19:10:22 2026 GMT Not After : Mar 26 19:17:22 2026 GMT Subject: CN=EDA1DAC103FB36303ADBC6924F074CDAD77EA1F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7b:02:62:81:67:ef:d3:4c:97:cb:02:da:99: fd:fe:82:2f:70:52:f1:f6:37:d5:b7:42:fb:5b:49: 34:16:53:e0:a1:e3:e0:92:64:b0:f9:49:de:19:ef: be:f0:af:f4:25:04:cf:2d:49:c2:1e:0e:8b:1d:67: 65:91:21:a1:3f:72:58:b9:08:ce:72:ed:cb:af:59: 2a:9a:4f:e0:24:92:2a:04:34:4d:73:23:7e:2a:b1: e1:ca:83:13:e3:32:00:fb:07:ff:f0:5a:0d:38:4b: 83:6f:48:65:b1:1e:d4:01:4c:de:af:e3:e8:77:d1: 1d:51:c4:51:83:12:4d:10:d2:bc:ff:a2:6b:86:04: d9:55:c1:a2:d3:93:be:54:4f:01:21:99:aa:49:02: 10:eb:b3:d2:c4:47:16:6e:bf:90:08:f9:70:36:12: 4c:c3:77:f3:5e:52:e8:b1:34:60:fc:3b:65:06:22: d6:b6:35:32:e4:d1:51:7c:5a:0f:97:56:18:14:6e: a6:47:e2:f1:ad:5d:ca:cd:d8:a3:17:01:ec:7f:ed: f2:90:79:43:de:17:af:fb:b8:c4:4a:82:e5:b0:d9: 6b:08:ba:e8:61:d6:09:95:24:f6:a4:91:f3:80:50: a2:3f:41:99:f1:80:7c:a5:ad:c7:cf:ee:4d:be:19: f5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A1:DA:C1:03:FB:36:30:3A:DB:C6:92:4F:07:4C:DA:D7:7E:A1:F7 X509v3 Authority Key Identifier: keyid:87:92:80:A7:D9:E6:DD:DD:CC:B2:9E:9A:77:81:9D:5C:E3:82:31:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:34:a1:51:6b:3b:00:78:81:6b:0b:ba:8f:ee:0e:ef:8f:fd: 58:9b:1f:5d:10:0e:5c:8b:85:70:09:8c:a7:47:b2:cb:20:aa: 6f:14:77:14:07:c7:f1:40:44:16:85:ed:29:59:b9:12:ea:39: 3a:ef:d8:d7:9f:e5:98:8e:03:8c:57:b8:80:29:5f:a7:ea:35: bf:32:59:cc:c4:f8:4e:2a:dd:08:d3:59:6d:39:25:e4:2c:34: c2:26:e6:8b:ab:c3:d2:44:cd:49:c2:30:66:76:4d:6e:01:e5: f2:3d:48:b1:96:c3:70:73:79:26:0d:43:53:67:99:57:af:a5: fa:8c:f6:21:fd:33:c7:f4:53:96:3b:27:92:69:a2:8a:2c:81: 89:de:99:15:11:cf:9f:81:1e:01:27:7f:da:ad:9e:64:1b:6d: 7b:a8:91:49:1f:4f:20:ae:4e:3c:97:db:f5:75:39:7e:40:aa: df:78:b7:8b:4c:e1:ca:52:b3:8d:ba:5f:78:bb:ab:2a:4d:e4: 9f:60:ec:ef:7e:f5:1f:d4:ab:04:f5:77:e3:46:35:26:00:61: f5:fd:d6:ae:e5:1a:e4:cf:b5:17:9f:75:23:6d:17:13:7f:77: cd:f4:b7:80:fe:b1:c7:5b:5e:c9:48:42:b3:c0:14:37:4d:17: 51:c5:c0:b8 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUd0BCnon37Nbs/kubhIjZk27iEA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNF MzgyMzE4NTAeFw0yNjAzMjUxOTEwMjJaFw0yNjAzMjYxOTE3MjJaMDMxMTAvBgNV BAMTKEVEQTFEQUMxMDNGQjM2MzAzQURCQzY5MjRGMDc0Q0RBRDc3RUExRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ewJigWfv00yXywLamf3+gi9w UvH2N9W3QvtbSTQWU+Ch4+CSZLD5Sd4Z777wr/QlBM8tScIeDosdZ2WRIaE/cli5 CM5y7cuvWSqaT+AkkioENE1zI34qseHKgxPjMgD7B//wWg04S4NvSGWxHtQBTN6v 4+h30R1RxFGDEk0Q0rz/omuGBNlVwaLTk75UTwEhmapJAhDrs9LERxZuv5AI+XA2 EkzDd/NeUuixNGD8O2UGIta2NTLk0VF8Wg+XVhgUbqZH4vGtXcrN2KMXAex/7fKQ eUPeF6/7uMRKguWw2WsIuuhh1gmVJPakkfOAUKI/QZnxgHylrcfP7k2+GfUtAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU7aHawQP7NjA628aSTwdM2td+ofcwHwYDVR0j BBgwFoAUh5KAp9nm3d3Msp6ad4GdXOOCMYUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2 ZDAzLzEvODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNFMzgyMzE4NS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNFMzgy MzE4NS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mN2Q5MjU1OC0y NThlLTRiNDQtYWQxNi04YzEwMjJjNDZkMDMvMS84NzkyODBBN0Q5RTZEREREQ0NC MjlFOUE3NzgxOUQ1Q0UzODIzMTg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjDShUWs7AHiBawu6j+4O 74/9WJsfXRAOXIuFcAmMp0eyyyCqbxR3FAfH8UBEFoXtKVm5Euo5Ou/Y15/lmI4D jFe4gClfp+o1vzJZzMT4TirdCNNZbTkl5Cw0wibmi6vD0kTNScIwZnZNbgHl8j1I sZbDcHN5Jg1DU2eZV6+l+oz2If0zx/RTljsnkmmiiiyBid6ZFRHPn4EeASd/2q2e ZBtte6iRSR9PIK5OPJfb9XU5fkCq33i3i0zhylKzjbpfeLurKk3kn2Ds7371H9Sr BPV340Y1JgBh9f3WruUa5M+1F591I20XE393zfS3gP6xx1teyUhCs8AUN00XUcXA uA== -----END CERTIFICATE-----Generated at Thu Mar 26 12:26:35 2026 by rpki-client