$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft File: B3F1737E90F240D7ABB33C72F84D71482FE62679.mft (raw, json) Hash identifier: n7cRauPRuItli6OntNkVFVC3BhqTzChCJ/5PReDMtvA= Subject key identifier: DD:6C:B1:9E:E8:25:13:CD:3A:CC:2E:42:23:4F:C6:4B:D9:30:CA:31 Authority key identifier: B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79 Certificate issuer: /CN=B3F1737E90F240D7ABB33C72F84D71482FE62679 Certificate serial: 3FCA266BA4C4181FA8FBF2EDDE3698B18BFC4A93 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft Manifest number: 0188 Signing time: Sun 19 Apr 2026 16:05:39 +0000 Manifest this update: Sun 19 Apr 2026 16:00:39 +0000 Manifest next update: Mon 20 Apr 2026 16:39:39 +0000 Files and hashes: 1: 326130373a353463373a356666653a3a2f34382d3438203d3e20323135353737.roa (hash: FG+PaaelFQQTh0Pl3BlClI1RFrk+FdkeBozLHlfkasU=) 2: 326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa (hash: dERySCDhc3+rlKwMAYMhD9XvddhhgSjXbVZeRoj98gc=) 3: B3F1737E90F240D7ABB33C72F84D71482FE62679.crl (hash: hnVUdhRwUQx20InNJjffBM5fbb5s/tngyWF6SDOC48Q=) 4: 326130373a353463373a353939393a3a2f34382d3438203d3e20323136343535.roa (hash: SvnI/kKkXn3yiVhNqVKN9Taah5WCLs8Rw+D4PBjSrbo=) 5: 326130373a353463373a356631303a3a2f34382d3438203d3e20323135353737.roa (hash: 7mCuwzfIey+Hcqy/Vhuj4zUx9bQcgkzpUeh+UNvlKO4=) 6: 326130373a353463373a356630303a3a2f34342d3434203d3e20323135353737.roa (hash: x50UL+Ve3n2XGikbTbQdFLaQIWslIjcJnasiyHq58lM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 16:39:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ca:26:6b:a4:c4:18:1f:a8:fb:f2:ed:de:36:98:b1:8b:fc:4a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F1737E90F240D7ABB33C72F84D71482FE62679 Validity Not Before: Apr 19 16:00:39 2026 GMT Not After : Apr 20 16:39:39 2026 GMT Subject: CN=DD6CB19EE82513CD3ACC2E42234FC64BD930CA31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:19:09:81:94:c7:8d:c0:a8:fe:8d:d1:0e:8e: 04:11:dc:01:87:33:eb:72:2f:34:c8:23:76:fc:66: 3e:04:a0:48:d9:a7:74:5c:81:21:13:a6:71:82:12: 92:3d:b3:13:95:88:cb:76:5a:ac:da:1b:96:18:dd: 6d:34:31:98:1b:60:2b:a3:e4:7f:c4:cf:e6:75:a0: 95:6d:e5:fd:44:9f:71:47:0a:9c:b4:3e:94:e5:2a: 09:df:60:65:5e:d8:c5:87:1f:34:fd:f6:2f:7c:9c: 32:7c:67:8f:b5:02:77:12:a5:3b:26:28:29:6f:79: dc:e0:6e:82:87:9d:1f:86:22:c9:90:8b:c2:9c:6e: 70:52:32:6f:fc:85:24:7c:50:e9:ff:52:75:da:b4: 10:22:d5:1e:b1:95:e4:68:63:a1:ec:b8:6c:f9:56: 29:41:3f:4a:58:d2:19:9f:25:3b:de:e9:bc:89:99: 23:13:99:fc:26:5a:eb:40:9f:59:36:b5:39:f7:b9: 11:a4:22:ea:6e:11:3d:61:8c:d2:fd:da:fb:05:95: 9f:13:62:d4:9c:fe:21:9d:7f:be:9b:1c:4d:7c:28: 00:90:ca:ac:ea:46:33:82:25:fb:2e:d3:f1:2a:2b: 0b:c6:c1:30:df:e3:3b:b0:d5:af:eb:64:59:a1:ad: d0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6C:B1:9E:E8:25:13:CD:3A:CC:2E:42:23:4F:C6:4B:D9:30:CA:31 X509v3 Authority Key Identifier: keyid:B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:1a:3e:08:ec:8d:86:b0:3c:97:07:67:6f:64:e4:9e:ac:be: 2f:b1:7c:56:32:25:6f:35:47:6f:82:01:15:4c:cc:81:a3:2b: f4:10:33:92:2f:9e:12:3c:d9:2f:62:a9:74:c4:13:58:e9:45: 6e:1c:45:70:f9:43:e5:e5:87:da:8a:fe:81:25:8c:d4:d2:76: cb:e9:3e:4d:7a:92:c9:de:6b:5d:17:9e:76:71:05:f9:e6:bd: 84:b1:7a:9c:7e:fe:c2:ac:dd:b4:02:f4:7d:84:0f:3b:f6:d5: 07:f7:90:6d:ff:1f:e7:4f:7c:d1:76:12:af:af:fe:f7:f3:8c: 19:75:b6:ec:84:da:b3:0e:60:24:87:c3:a9:f4:35:44:4e:1a: 5d:84:91:2e:9a:02:8a:3a:bd:42:c5:20:b6:74:5b:80:23:52: 14:1b:05:2f:65:2d:d9:8a:ce:11:4c:a6:f8:50:11:6b:31:37: b9:06:34:73:99:7b:08:5d:6f:49:ef:f4:4d:d8:4b:59:a6:72: c3:49:86:09:b6:e6:40:fc:24:5c:a5:03:d5:23:78:be:81:ca: 1d:b7:9f:c2:a0:77:70:17:a8:77:1b:d7:3a:7d:2f:0b:2f:ca: 07:a0:93:d6:de:d0:5d:c2:e1:64:ec:de:50:fc:04:1e:68:fc: 1c:d9:0c:64 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUP8oma6TEGB+o+/Lt3jaYsYv8SpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgy RkU2MjY3OTAeFw0yNjA0MTkxNjAwMzlaFw0yNjA0MjAxNjM5MzlaMDMxMTAvBgNV BAMTKERENkNCMTlFRTgyNTEzQ0QzQUNDMkU0MjIzNEZDNjRCRDkzMENBMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUGQmBlMeNwKj+jdEOjgQR3AGH M+tyLzTII3b8Zj4EoEjZp3RcgSETpnGCEpI9sxOViMt2WqzaG5YY3W00MZgbYCuj 5H/Ez+Z1oJVt5f1En3FHCpy0PpTlKgnfYGVe2MWHHzT99i98nDJ8Z4+1AncSpTsm KClvedzgboKHnR+GIsmQi8KcbnBSMm/8hSR8UOn/UnXatBAi1R6xleRoY6HsuGz5 VilBP0pY0hmfJTve6byJmSMTmfwmWutAn1k2tTn3uRGkIupuET1hjNL92vsFlZ8T YtSc/iGdf76bHE18KACQyqzqRjOCJfsu0/EqKwvGwTDf4zuw1a/rZFmhrdDXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU3WyxnuglE806zC5CI0/GS9kwyjEwHwYDVR0j BBgwFoAUs/FzfpDyQNerszxy+E1xSC/mJnkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzIvQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgyRkU2MjY3OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC9CM0YxNzM3RTkwRjI0MEQ3QUJCMzNDNzJG ODRENzE0ODJGRTYyNjc5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzU4MjFjNDdlLWU4MTUtNDJkZS1iZDZiLTE5YTJlMWFlNTY0YS8yL0IzRjE3MzdF OTBGMjQwRDdBQkIzM0M3MkY4NEQ3MTQ4MkZFNjI2NzkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAwGj4I 7I2GsDyXB2dvZOSerL4vsXxWMiVvNUdvggEVTMyBoyv0EDOSL54SPNkvYql0xBNY 6UVuHEVw+UPl5Yfaiv6BJYzU0nbL6T5NepLJ3mtdF552cQX55r2EsXqcfv7CrN20 AvR9hA879tUH95Bt/x/nT3zRdhKvr/7384wZdbbshNqzDmAkh8Op9DVEThpdhJEu mgKKOr1CxSC2dFuAI1IUGwUvZS3Zis4RTKb4UBFrMTe5BjRzmXsIXW9J7/RN2EtZ pnLDSYYJtuZA/CRcpQPVI3i+gcodt5/CoHdwF6h3G9c6fS8LL8oHoJPW3tBdwuFk 7N5Q/AQeaPwc2Qxk -----END CERTIFICATE-----Generated at Mon Apr 20 09:37:54 2026 by rpki-client