$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft File: 188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft (raw, json) Hash identifier: Fb8p3bJede84txnGsfK4407Tjiz/8WJ6qx+Y1ANXICQ= Subject key identifier: 3A:2B:E9:F5:CD:DE:74:78:13:01:D8:AD:67:D7:DD:B9:D6:7B:BF:D9 Authority key identifier: 18:80:78:EA:8A:BD:56:1E:7C:13:EF:CE:91:31:BC:67:1D:E2:9F:96 Certificate issuer: /CN=188078EA8ABD561E7C13EFCE9131BC671DE29F96 Certificate serial: 4C1FD77750E3248DE893EA4074506F9461FDB88B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/188078EA8ABD561E7C13EFCE9131BC671DE29F96.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft Manifest number: 0138 Signing time: Wed 04 Mar 2026 16:18:30 +0000 Manifest this update: Wed 04 Mar 2026 16:13:30 +0000 Manifest next update: Thu 05 Mar 2026 16:36:30 +0000 Files and hashes: 1: 188078EA8ABD561E7C13EFCE9131BC671DE29F96.crl (hash: QNiNAKpjP425AYLgF8RAK/4YntarXGNSpsqlL2YaC1A=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/188078EA8ABD561E7C13EFCE9131BC671DE29F96.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Mar 2026 14:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:1f:d7:77:50:e3:24:8d:e8:93:ea:40:74:50:6f:94:61:fd:b8:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=188078EA8ABD561E7C13EFCE9131BC671DE29F96 Validity Not Before: Mar 4 16:13:30 2026 GMT Not After : Mar 5 16:36:30 2026 GMT Subject: CN=3A2BE9F5CDDE74781301D8AD67D7DDB9D67BBFD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:85:65:2f:b3:f7:81:94:13:b3:44:e8:ef:c6: cc:57:3a:79:92:63:d1:7d:7c:e8:9b:b0:f6:84:b8: 8c:94:c4:56:96:e6:3f:2f:c8:8f:24:a7:ce:eb:0c: b3:32:76:7c:94:31:39:b1:67:ec:ec:21:84:81:1f: b0:73:f0:69:10:a9:04:78:d4:16:6a:ed:f7:d4:5f: e8:04:d8:b3:5e:cf:2f:7b:82:a3:fd:04:9e:09:fb: 89:12:b4:b0:51:36:f9:4e:d1:27:ee:27:99:0c:84: 3f:e8:54:cf:63:59:22:5a:45:13:88:4c:f5:40:10: 14:cc:45:71:61:ff:b8:d9:9e:d0:5f:50:bf:c4:9b: a2:66:5b:34:11:9a:73:03:95:78:07:45:56:34:70: cc:39:17:c2:79:2e:6a:6b:07:9c:e2:77:f5:35:85: 6d:3a:4a:de:0a:2f:d2:0a:43:ef:d8:ce:50:c4:82: b0:c4:aa:c2:b8:e9:0a:98:90:f7:80:64:97:6a:f1: a1:1d:55:88:f3:ee:77:41:5b:94:96:3e:9d:42:cf: 37:4b:69:21:d5:ce:8d:67:61:73:b5:0d:1c:43:fd: 98:57:5b:9c:8b:6e:44:9e:05:e4:03:0a:e1:e2:eb: fb:03:dd:f4:c8:47:70:3b:8f:33:7c:2d:bd:28:29: 45:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2B:E9:F5:CD:DE:74:78:13:01:D8:AD:67:D7:DD:B9:D6:7B:BF:D9 X509v3 Authority Key Identifier: keyid:18:80:78:EA:8A:BD:56:1E:7C:13:EF:CE:91:31:BC:67:1D:E2:9F:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/188078EA8ABD561E7C13EFCE9131BC671DE29F96.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:41:b7:31:1e:5f:2f:10:2e:98:ca:8c:cd:8a:dd:80:a9:0d: 5c:54:ea:1a:2b:00:6e:c8:3f:23:53:60:93:83:59:f9:22:cd: 62:c3:d2:92:4f:a5:a5:03:fd:10:64:91:45:02:81:8c:4b:fc: 56:3a:02:4a:63:b4:94:5a:17:17:57:52:cf:1b:94:4d:17:cd: 89:0a:93:8c:98:18:e0:b9:d2:5b:04:e7:8f:47:1b:38:f6:30: 6c:0c:bf:4a:32:d2:14:7b:df:89:81:05:9d:6d:1a:b2:73:ca: 2f:23:c3:47:17:c9:9c:8f:52:11:bf:77:e1:06:b9:84:9d:9b: a9:b0:8a:0b:f4:95:86:0b:1e:5b:fc:1e:c9:1b:01:43:8a:d1: ee:2c:76:a2:f6:ed:23:20:82:ec:74:ce:a3:b6:9b:86:2a:99: cd:86:a4:91:90:12:bb:d2:ae:5d:bf:4a:a2:ca:6d:05:da:b8: 88:75:eb:4d:1f:55:d5:df:2f:64:d5:87:5c:af:50:aa:79:9f: 53:84:b3:6b:a6:e3:83:b5:20:e7:14:81:cb:a7:17:7b:dc:1c: a2:be:07:c2:0f:25:04:02:be:97:79:8c:45:62:b7:d0:58:66: c2:d1:e1:f2:17:5e:cf:f0:f8:3e:e0:94:f9:8f:35:1b:f8:34: 07:45:7b:29 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUTB/Xd1DjJI3ok+pAdFBvlGH9uIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg4MDc4RUE4QUJENTYxRTdDMTNFRkNFOTEzMUJDNjcx REUyOUY5NjAeFw0yNjAzMDQxNjEzMzBaFw0yNjAzMDUxNjM2MzBaMDMxMTAvBgNV BAMTKDNBMkJFOUY1Q0RERTc0NzgxMzAxRDhBRDY3RDdEREI5RDY3QkJGRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5hWUvs/eBlBOzROjvxsxXOnmS Y9F9fOibsPaEuIyUxFaW5j8vyI8kp87rDLMydnyUMTmxZ+zsIYSBH7Bz8GkQqQR4 1BZq7ffUX+gE2LNezy97gqP9BJ4J+4kStLBRNvlO0SfuJ5kMhD/oVM9jWSJaRROI TPVAEBTMRXFh/7jZntBfUL/Em6JmWzQRmnMDlXgHRVY0cMw5F8J5LmprB5zid/U1 hW06St4KL9IKQ+/YzlDEgrDEqsK46QqYkPeAZJdq8aEdVYjz7ndBW5SWPp1CzzdL aSHVzo1nYXO1DRxD/ZhXW5yLbkSeBeQDCuHi6/sD3fTIR3A7jzN8Lb0oKUV1AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUOivp9c3edHgTAditZ9fdudZ7v9kwHwYDVR0j BBgwFoAUGIB46oq9Vh58E+/OkTG8Zx3in5YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzUvMTg4MDc4RUE4QUJENTYxRTdDMTNFRkNFOTEzMUJDNjcxREUyOUY5Ni5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMTg4MDc4RUE4QUJENTYxRTdDMTNFRkNFOTEzMUJDNjcxREUy OUY5Ni5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1m MDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvNS8xODgwNzhFQThBQkQ1NjFFN0Mx M0VGQ0U5MTMxQkM2NzFERTI5Rjk2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATEG3MR5fLxAumMqMzYrd gKkNXFTqGisAbsg/I1Ngk4NZ+SLNYsPSkk+lpQP9EGSRRQKBjEv8VjoCSmO0lFoX F1dSzxuUTRfNiQqTjJgY4LnSWwTnj0cbOPYwbAy/SjLSFHvfiYEFnW0asnPKLyPD RxfJnI9SEb934Qa5hJ2bqbCKC/SVhgseW/weyRsBQ4rR7ix2ovbtIyCC7HTOo7ab hiqZzYakkZASu9KuXb9KosptBdq4iHXrTR9V1d8vZNWHXK9QqnmfU4Sza6bjg7Ug 5xSBy6cXe9wcor4Hwg8lBAK+l3mMRWK30FhmwtHh8hdez/D4PuCU+Y81G/g0B0V7 KQ== -----END CERTIFICATE-----Generated at Wed Mar 4 18:48:47 2026 by rpki-client