$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft File: B3F1737E90F240D7ABB33C72F84D71482FE62679.mft (raw, json) Hash identifier: nnNxcqbAkB7tPVkQOVD+Ou7U8ZRiHdpFwJvVMIe4fTo= Subject key identifier: 24:5A:70:C2:E9:21:3C:B2:70:74:DA:02:0B:A6:66:37:EB:FA:0A:37 Authority key identifier: B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79 Certificate issuer: /CN=B3F1737E90F240D7ABB33C72F84D71482FE62679 Certificate serial: 4C328AD5A77B8A5BDA2BE824208F47188E841954 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft Manifest number: 0156 Signing time: Fri 13 Mar 2026 16:26:36 +0000 Manifest this update: Fri 13 Mar 2026 16:21:36 +0000 Manifest next update: Sat 14 Mar 2026 16:51:36 +0000 Files and hashes: 1: 326130373a353463373a356666653a3a2f34382d3438203d3e20323135353737.roa (hash: FG+PaaelFQQTh0Pl3BlClI1RFrk+FdkeBozLHlfkasU=) 2: 326130373a353463373a356630303a3a2f34342d3434203d3e20323135353737.roa (hash: x50UL+Ve3n2XGikbTbQdFLaQIWslIjcJnasiyHq58lM=) 3: 326130373a353463373a353939393a3a2f34382d3438203d3e20323136343535.roa (hash: SvnI/kKkXn3yiVhNqVKN9Taah5WCLs8Rw+D4PBjSrbo=) 4: B3F1737E90F240D7ABB33C72F84D71482FE62679.crl (hash: sWfHrUnoHLLkoB2bdffuxUFYFflO0KgSsngX3XPnGoU=) 5: 326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa (hash: dERySCDhc3+rlKwMAYMhD9XvddhhgSjXbVZeRoj98gc=) 6: 326130373a353463373a356631303a3a2f34382d3438203d3e20323135353737.roa (hash: 7mCuwzfIey+Hcqy/Vhuj4zUx9bQcgkzpUeh+UNvlKO4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 16:51:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:32:8a:d5:a7:7b:8a:5b:da:2b:e8:24:20:8f:47:18:8e:84:19:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F1737E90F240D7ABB33C72F84D71482FE62679 Validity Not Before: Mar 13 16:21:36 2026 GMT Not After : Mar 14 16:51:36 2026 GMT Subject: CN=245A70C2E9213CB27074DA020BA66637EBFA0A37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f4:ff:07:84:97:18:64:ef:e8:7c:b2:36:f5: df:14:fe:9d:4d:40:96:43:d1:7b:1f:ef:60:9d:64: 0f:2c:11:21:7d:1c:1b:e0:15:fd:07:4a:6c:82:1f: 92:f6:3d:62:f5:f3:09:8d:07:94:f1:00:43:9f:5e: 63:91:b4:b5:fc:44:e2:bb:04:5b:cd:a1:cb:b9:ae: 45:db:9f:df:fb:e8:c3:af:cc:60:7d:49:28:fd:3b: 42:d3:0b:ca:c9:c0:fe:9e:35:15:bd:47:b5:3a:58: 45:b1:ea:a7:a7:5e:37:2d:66:32:a4:82:e0:06:a0: 8d:06:bc:67:fd:9a:32:40:bb:6a:06:f9:8b:80:bc: f6:a9:7c:23:b2:bc:38:11:15:f9:b2:1f:96:9e:13: 76:6f:dc:8a:35:3b:c1:28:0d:f2:30:99:c2:09:1f: 01:c2:a4:63:14:6b:d1:75:86:3a:0c:14:de:4e:c9: 7f:d1:73:70:b8:30:f2:2e:40:44:07:d3:1b:96:4a: 52:02:47:c4:81:80:66:11:e5:5a:1e:05:84:f0:f9: 62:fe:07:12:7e:25:31:b4:4b:f1:32:ef:43:5c:a4: e1:63:14:64:e4:0f:8a:8c:d2:b5:b6:bf:c1:19:9c: fe:e4:e8:7f:91:b2:96:53:c5:45:59:75:bf:66:7d: 81:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:5A:70:C2:E9:21:3C:B2:70:74:DA:02:0B:A6:66:37:EB:FA:0A:37 X509v3 Authority Key Identifier: keyid:B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:91:7d:46:90:b1:c3:c3:b4:38:b8:24:e9:67:fe:89:03:ac: 4a:94:f9:08:1b:b0:67:32:91:6c:bf:e5:52:1e:e3:c0:a0:67: 04:a5:4f:40:1e:1f:4f:66:5d:97:3b:fb:48:09:5d:20:26:4d: 8a:17:3b:82:3a:14:de:4f:b5:55:6b:5f:52:ac:29:55:36:bf: d9:31:47:4d:91:fe:2e:90:42:dc:1c:05:14:63:9e:09:b3:28: d5:f0:22:99:c9:d8:b4:78:36:ec:5c:98:60:3e:c2:af:7b:e0: 60:2f:27:96:ed:8c:ec:e1:4e:ef:39:fb:60:ac:f1:54:6a:74: 4b:49:2c:c8:05:6a:1f:7f:43:42:cc:21:e3:8d:37:b6:2e:91: 73:fb:b5:86:99:a1:f6:2d:0d:16:10:a9:4f:dc:ba:6c:fe:6f: 03:d9:74:52:36:ea:2e:d5:f4:4a:9e:dc:2e:3f:34:1c:e6:89: 7b:65:1c:1d:4c:f0:67:b5:41:45:63:00:7e:36:45:2d:cb:4f: 16:6e:fa:f6:98:4b:b7:3a:da:14:67:4e:a6:46:15:03:8a:f8: ff:7a:87:21:3d:a8:81:45:80:cc:38:0f:c7:6f:6c:37:a2:be: 51:58:fc:3d:7b:c6:f6:f6:28:ad:05:f4:9a:ac:5c:8d:4e:cb: b4:30:ef:23 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUTDKK1ad7ilvaK+gkII9HGI6EGVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgy RkU2MjY3OTAeFw0yNjAzMTMxNjIxMzZaFw0yNjAzMTQxNjUxMzZaMDMxMTAvBgNV BAMTKDI0NUE3MEMyRTkyMTNDQjI3MDc0REEwMjBCQTY2NjM3RUJGQTBBMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC29P8HhJcYZO/ofLI29d8U/p1N QJZD0Xsf72CdZA8sESF9HBvgFf0HSmyCH5L2PWL18wmNB5TxAEOfXmORtLX8ROK7 BFvNocu5rkXbn9/76MOvzGB9SSj9O0LTC8rJwP6eNRW9R7U6WEWx6qenXjctZjKk guAGoI0GvGf9mjJAu2oG+YuAvPapfCOyvDgRFfmyH5aeE3Zv3Io1O8EoDfIwmcIJ HwHCpGMUa9F1hjoMFN5OyX/Rc3C4MPIuQEQH0xuWSlICR8SBgGYR5VoeBYTw+WL+ BxJ+JTG0S/Ey70NcpOFjFGTkD4qM0rW2v8EZnP7k6H+RspZTxUVZdb9mfYHLAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUJFpwwukhPLJwdNoCC6ZmN+v6CjcwHwYDVR0j BBgwFoAUs/FzfpDyQNerszxy+E1xSC/mJnkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzIvQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgyRkU2MjY3OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC9CM0YxNzM3RTkwRjI0MEQ3QUJCMzNDNzJG ODRENzE0ODJGRTYyNjc5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzU4MjFjNDdlLWU4MTUtNDJkZS1iZDZiLTE5YTJlMWFlNTY0YS8yL0IzRjE3MzdF OTBGMjQwRDdBQkIzM0M3MkY4NEQ3MTQ4MkZFNjI2NzkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB0kX1G kLHDw7Q4uCTpZ/6JA6xKlPkIG7BnMpFsv+VSHuPAoGcEpU9AHh9PZl2XO/tICV0g Jk2KFzuCOhTeT7VVa19SrClVNr/ZMUdNkf4ukELcHAUUY54JsyjV8CKZydi0eDbs XJhgPsKve+BgLyeW7Yzs4U7vOftgrPFUanRLSSzIBWoff0NCzCHjjTe2LpFz+7WG maH2LQ0WEKlP3Lps/m8D2XRSNuou1fRKntwuPzQc5ol7ZRwdTPBntUFFYwB+NkUt y08Wbvr2mEu3OtoUZ06mRhUDivj/eochPaiBRYDMOA/Hb2w3or5RWPw9e8b29iit BfSarFyNTsu0MO8j -----END CERTIFICATE-----Generated at Sat Mar 14 08:40:43 2026 by rpki-client