$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft File: 0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft (raw, json) Hash identifier: ZDx+SfUSKxfiINp36WzO3S9tJSAuuMREwgdDcn7nTwA= Subject key identifier: 0E:6B:74:80:05:5D:6F:3E:FA:03:7F:1C:C0:3E:96:2B:9D:CB:22:B9 Authority key identifier: 08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B Certificate issuer: /CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B Certificate serial: 6A1373D1AA737E87975DCA41E1FC590DBC828754 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft Manifest number: 014A Signing time: Sat 14 Mar 2026 01:06:32 +0000 Manifest this update: Sat 14 Mar 2026 01:01:32 +0000 Manifest next update: Sun 15 Mar 2026 01:50:32 +0000 Files and hashes: 1: 0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl (hash: 8Cu4BWygtznxTuYcQc0hTI9LNEvIUm5DyGJCyPv1bTc=) 2: 326131343a373538313a383030303a3a2f33362d3430203d3e203530333835.roa (hash: Em5jZEM0Z1oJ1UofjCQGnCq9Pql9aI7sK4Y5UkTysUg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Mar 2026 01:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:13:73:d1:aa:73:7e:87:97:5d:ca:41:e1:fc:59:0d:bc:82:87:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B Validity Not Before: Mar 14 01:01:32 2026 GMT Not After : Mar 15 01:50:32 2026 GMT Subject: CN=0E6B7480055D6F3EFA037F1CC03E962B9DCB22B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:40:56:22:26:d6:4e:f8:45:88:cc:28:a7:7c: 08:47:ff:64:e5:00:e6:fd:95:02:9e:5d:20:7a:5d: 92:0f:c1:c8:6e:62:a1:dd:72:6f:d6:e0:0a:dd:4d: 30:6c:a1:e4:71:56:f7:b9:72:6c:ca:ce:ad:aa:30: 90:ed:c1:b3:c2:56:66:1d:46:c2:7a:c8:59:4c:9f: 78:89:fe:73:2c:56:85:17:f5:5d:96:62:73:9c:79: 66:f0:00:08:b4:e1:64:17:70:98:59:34:cc:2b:c9: fb:4f:af:00:94:16:15:3b:19:40:83:1a:a2:fc:61: f1:23:87:df:c5:cc:9a:8f:bc:b4:fa:dd:be:c0:30: 4e:06:02:05:db:0e:44:99:51:ec:b1:56:89:46:0e: 02:e6:3a:ce:e1:19:15:84:dc:c0:19:df:ca:5a:c0: 9c:39:44:7c:df:21:43:b7:08:de:66:dd:b6:2c:c3: 40:31:b1:34:d8:bb:a4:28:c3:2f:0e:cb:dd:b4:bc: 23:58:6e:9f:74:dc:29:1c:ea:f1:e2:14:2f:7e:c7: 24:0e:76:0c:ce:58:77:9d:81:39:6e:9e:16:6b:a0: 08:6d:cf:88:16:d9:8c:48:0e:30:25:7e:cc:34:94: 12:f0:a7:19:af:a0:cd:72:57:2b:38:c8:0e:8f:93: d6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:6B:74:80:05:5D:6F:3E:FA:03:7F:1C:C0:3E:96:2B:9D:CB:22:B9 X509v3 Authority Key Identifier: keyid:08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:31:7c:6b:4a:52:23:94:ca:d3:97:04:5a:8c:80:cf:68:b9: b6:08:3e:ec:99:8a:06:61:54:40:9f:da:5f:94:04:cd:1b:20: a8:b4:79:6b:33:f3:4a:32:2b:83:68:b9:8a:e5:79:ac:5e:88: 83:48:b4:52:f3:c5:1f:ee:99:d6:92:35:2f:2b:f6:02:d3:37: ed:55:b1:d0:91:de:33:67:24:ce:a5:63:85:bb:84:9e:49:a2: 98:8f:7c:98:ea:f8:18:b3:ea:45:90:88:01:3a:69:31:1a:45: 02:17:8b:9a:a5:90:c2:e3:b6:5d:52:f9:3d:dd:a8:a1:af:3b: 13:8b:2d:dc:8c:76:0e:29:5f:94:59:d2:e6:69:e9:56:17:3d: d4:bd:f0:f9:07:8f:6c:63:70:3a:34:3e:68:44:e2:69:ae:b1: e9:4f:25:89:74:68:c8:cc:19:a6:19:bd:d8:6e:55:9b:fe:eb: e9:dd:a2:95:d1:86:b1:67:49:d7:34:04:87:47:30:d1:fa:02: 56:1e:0a:a0:d3:d2:42:4c:02:02:52:04:29:51:86:5f:53:50: 07:9e:d8:94:c8:e5:07:d1:f5:f6:e7:31:75:0f:de:09:aa:d9: 1d:f8:af:fa:55:15:a6:e2:01:61:1c:9e:96:da:55:93:9f:b5: dd:ff:75:d2 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUahNz0apzfoeXXcpB4fxZDbyCh1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg3NDgwMTE2NERDOTVGMEFCOUNDRDRCRDMwNEEzRUY3 OEU5RjM5QjAeFw0yNjAzMTQwMTAxMzJaFw0yNjAzMTUwMTUwMzJaMDMxMTAvBgNV BAMTKDBFNkI3NDgwMDU1RDZGM0VGQTAzN0YxQ0MwM0U5NjJCOURDQjIyQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxQFYiJtZO+EWIzCinfAhH/2Tl AOb9lQKeXSB6XZIPwchuYqHdcm/W4ArdTTBsoeRxVve5cmzKzq2qMJDtwbPCVmYd RsJ6yFlMn3iJ/nMsVoUX9V2WYnOceWbwAAi04WQXcJhZNMwryftPrwCUFhU7GUCD GqL8YfEjh9/FzJqPvLT63b7AME4GAgXbDkSZUeyxVolGDgLmOs7hGRWE3MAZ38pa wJw5RHzfIUO3CN5m3bYsw0AxsTTYu6Qowy8Oy920vCNYbp903Ckc6vHiFC9+xyQO dgzOWHedgTlunhZroAhtz4gW2YxIDjAlfsw0lBLwpxmvoM1yVys4yA6Pk9bDAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUDmt0gAVdbz76A38cwD6WK53LIrkwHwYDVR0j BBgwFoAUCHSAEWTclfCrnM1L0wSj73jp85swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2M4ZTRlMTEtM2FjYS00MzA1LWFjZDQtZjA1ZTZjOTA5 MTE1LzEvMDg3NDgwMTE2NERDOTVGMEFCOUNDRDRCRDMwNEEzRUY3OEU5RjM5Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wODc0ODAxMTY0REM5NUYwQUI5Q0NENEJE MzA0QTNFRjc4RTlGMzlCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzNjOGU0ZTExLTNhY2EtNDMwNS1hY2Q0LWYwNWU2YzkwOTExNS8xLzA4NzQ4MDEx NjREQzk1RjBBQjlDQ0Q0QkQzMDRBM0VGNzhFOUYzOUIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAZMXxr SlIjlMrTlwRajIDPaLm2CD7smYoGYVRAn9pflATNGyCotHlrM/NKMiuDaLmK5Xms XoiDSLRS88Uf7pnWkjUvK/YC0zftVbHQkd4zZyTOpWOFu4SeSaKYj3yY6vgYs+pF kIgBOmkxGkUCF4uapZDC47ZdUvk93aihrzsTiy3cjHYOKV+UWdLmaelWFz3UvfD5 B49sY3A6ND5oROJprrHpTyWJdGjIzBmmGb3YblWb/uvp3aKV0YaxZ0nXNASHRzDR +gJWHgqg09JCTAICUgQpUYZfU1AHntiUyOUH0fX25zF1D94Jqtkd+K/6VRWm4gFh HJ6W2lWTn7Xd/3XS -----END CERTIFICATE-----Generated at Sat Mar 14 14:28:25 2026 by rpki-client