$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.mft File: F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.mft (raw, json) Hash identifier: xiM2c34NcfENHuJGqExD7okp6uBephvRvHFSGehE09w= Subject key identifier: FE:B8:D4:71:B9:DE:3F:22:85:70:09:51:8E:29:C8:84:BB:29:5F:0F Authority key identifier: F4:D1:A7:E9:DF:F0:D9:0E:76:0F:B8:7D:56:05:45:8B:A8:70:BF:32 Certificate issuer: /CN=F4D1A7E9DFF0D90E760FB87D5605458BA870BF32 Certificate serial: 51D35994B15550F2204F845DF41E4216A1F96A04 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.mft Manifest number: 89 Signing time: Fri 13 Mar 2026 18:57:47 +0000 Manifest this update: Fri 13 Mar 2026 18:52:47 +0000 Manifest next update: Sat 14 Mar 2026 21:02:47 +0000 Files and hashes: 1: F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.crl (hash: PTtzkZknGhQANvnL3yWvJ64XCg2gad31v0mItRlaahw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 21:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:d3:59:94:b1:55:50:f2:20:4f:84:5d:f4:1e:42:16:a1:f9:6a:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4D1A7E9DFF0D90E760FB87D5605458BA870BF32 Validity Not Before: Mar 13 18:52:47 2026 GMT Not After : Mar 14 21:02:47 2026 GMT Subject: CN=FEB8D471B9DE3F22857009518E29C884BB295F0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fc:34:a5:b3:b8:01:62:65:c7:9f:c8:cd:8c: d7:74:af:da:67:3d:39:aa:72:78:98:c3:71:93:ad: f8:bf:c8:6c:08:ef:ee:41:1c:0b:eb:a0:c3:1a:16: 77:4a:d1:62:73:fe:ce:30:bd:7d:b7:98:78:80:0f: 81:46:52:fa:a1:02:ea:5c:27:9c:d5:4e:6d:74:8a: 85:33:57:08:f4:2f:58:7f:78:e3:3d:8f:e1:23:08: b6:c5:30:64:50:81:87:b0:71:a5:20:11:d8:b2:88: 2f:85:83:b8:26:ef:5a:a2:8a:d9:a2:10:5d:6d:a6: 56:5e:6b:5f:2a:42:5a:28:8f:4a:a6:bf:06:c1:cf: 78:94:12:2e:88:b9:a9:0c:7a:83:dc:f0:e1:49:16: 61:bb:c7:d4:86:00:4f:f2:c3:f2:5d:a7:d2:3f:1d: d4:10:be:7f:e0:1c:ee:75:87:63:bc:ab:06:d2:48: 70:40:92:e7:dd:78:48:0b:f3:8f:82:eb:f3:d6:3c: a3:f7:35:40:5b:ba:71:d3:eb:82:a8:c0:04:49:b2: 47:b5:a6:fc:63:b8:fb:b1:7c:6a:6a:d5:75:60:4b: 9d:a3:e1:a5:4e:b7:01:fe:78:c6:16:2b:56:78:14: 97:2d:b3:a2:1c:b2:46:58:81:33:3b:8e:aa:63:ef: c0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B8:D4:71:B9:DE:3F:22:85:70:09:51:8E:29:C8:84:BB:29:5F:0F X509v3 Authority Key Identifier: keyid:F4:D1:A7:E9:DF:F0:D9:0E:76:0F:B8:7D:56:05:45:8B:A8:70:BF:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:65:2b:81:36:b9:f4:45:ad:9a:db:40:04:72:fa:43:0e:9b: f0:9c:75:03:4b:3b:9b:27:ec:64:07:dd:4a:03:01:f3:4c:0c: a1:3c:88:8c:a9:ce:e3:28:c6:ea:43:c0:d1:b4:f3:6a:8f:16: 23:56:6c:5e:27:9d:2d:32:83:59:c9:ce:f2:7b:a6:42:56:ff: db:d2:b9:7f:2e:4b:4c:f4:29:70:01:5a:c3:99:fc:d3:00:c3: 25:6b:61:73:8b:21:b3:b5:ce:44:fb:fd:bf:1d:6c:bc:b3:f6: 90:6c:10:79:34:24:80:a0:2a:37:86:82:3d:2a:2d:29:a4:a4: 30:15:a1:39:75:5a:90:bd:c1:f7:a5:a2:9f:76:52:a7:97:08: 65:f5:ff:08:84:b6:6b:38:65:fa:f4:09:52:f3:c7:3d:c6:eb: 61:1f:5d:b8:bc:81:a1:c0:0c:9a:52:fd:82:40:b7:4f:62:58: 90:e9:f5:55:48:0e:08:b2:c5:e7:ac:a2:1f:75:e5:3a:b0:5c: ab:ab:47:27:88:5d:1f:88:93:f5:52:af:68:9f:cf:42:ad:7e: 4c:b4:4e:db:69:10:ab:4c:88:4e:fd:8e:38:f4:57:74:36:eb: fd:89:c1:4b:01:16:ca:7b:cb:3f:53:42:12:19:37:11:df:4e: 29:dc:77:02 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUUdNZlLFVUPIgT4Rd9B5CFqH5agQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjREMUE3RTlERkYwRDkwRTc2MEZCODdENTYwNTQ1OEJB ODcwQkYzMjAeFw0yNjAzMTMxODUyNDdaFw0yNjAzMTQyMTAyNDdaMDMxMTAvBgNV BAMTKEZFQjhENDcxQjlERTNGMjI4NTcwMDk1MThFMjlDODg0QkIyOTVGMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs/DSls7gBYmXHn8jNjNd0r9pn PTmqcniYw3GTrfi/yGwI7+5BHAvroMMaFndK0WJz/s4wvX23mHiAD4FGUvqhAupc J5zVTm10ioUzVwj0L1h/eOM9j+EjCLbFMGRQgYewcaUgEdiyiC+Fg7gm71qiitmi EF1tplZea18qQlooj0qmvwbBz3iUEi6IuakMeoPc8OFJFmG7x9SGAE/yw/Jdp9I/ HdQQvn/gHO51h2O8qwbSSHBAkufdeEgL84+C6/PWPKP3NUBbunHT64KowARJske1 pvxjuPuxfGpq1XVgS52j4aVOtwH+eMYWK1Z4FJcts6IcskZYgTM7jqpj78CTAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU/rjUcbnePyKFcAlRjinIhLspXw8wHwYDVR0j BBgwFoAU9NGn6d/w2Q52D7h9VgVFi6hwvzIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzAvRjREMUE3RTlERkYwRDkwRTc2MEZCODdENTYwNTQ1OEJBODcwQkYzMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNEQxQTdFOURGRjBEOTBFNzYwRkI4N0Q1 NjA1NDU4QkE4NzBCRjMyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzA5NzE4ZjA4LWJiMzktNGEwOS1hNGMwLTFmNDAyNDhhNmQxNS8wL0Y0RDFBN0U5 REZGMEQ5MEU3NjBGQjg3RDU2MDU0NThCQTg3MEJGMzIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAVZSuB Nrn0Ra2a20AEcvpDDpvwnHUDSzubJ+xkB91KAwHzTAyhPIiMqc7jKMbqQ8DRtPNq jxYjVmxeJ50tMoNZyc7ye6ZCVv/b0rl/LktM9ClwAVrDmfzTAMMla2FziyGztc5E +/2/HWy8s/aQbBB5NCSAoCo3hoI9Ki0ppKQwFaE5dVqQvcH3paKfdlKnlwhl9f8I hLZrOGX69AlS88c9xuthH124vIGhwAyaUv2CQLdPYliQ6fVVSA4IssXnrKIfdeU6 sFyrq0cniF0fiJP1Uq9on89CrX5MtE7baRCrTIhO/Y449Fd0Nuv9icFLARbKe8s/ U0ISGTcR304p3HcC -----END CERTIFICATE-----Generated at Sat Mar 14 14:42:37 2026 by rpki-client