$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft File: 71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft (raw, json) Hash identifier: DR1e0a+oWlBumRzIUQPuVkqyaO46gredCsUSqJdCa1k= Subject key identifier: D3:B1:BF:5D:D2:90:DC:29:C5:50:FF:0B:6E:7D:07:03:6A:5C:8E:BD Authority key identifier: 71:AD:BC:B8:05:EE:EE:44:A7:FD:C0:7C:A5:4A:D6:61:0C:81:E1:B3 Certificate issuer: /CN=71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3 Certificate serial: 1ED6259C935DF4BE9D580EDDBEA17603219F415B Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft Manifest number: 47 Signing time: Sat 28 Mar 2026 01:45:06 +0000 Manifest this update: Sat 28 Mar 2026 01:40:06 +0000 Manifest next update: Sun 29 Mar 2026 01:46:06 +0000 Files and hashes: 1: 326130623a346530373a353030303a3a2f34382d3438203d3e20323135363835.roa (hash: hC1tSwtk6P/n7XKD/XE88SOcdq8LuodINPa1HAhKd6c=) 2: 71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl (hash: 6cKlKjJqP4G+aOudDbq+PudMOLrIrHkp3zynF+EX4NA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 01:46:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:d6:25:9c:93:5d:f4:be:9d:58:0e:dd:be:a1:76:03:21:9f:41:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3 Validity Not Before: Mar 28 01:40:06 2026 GMT Not After : Mar 29 01:46:06 2026 GMT Subject: CN=D3B1BF5DD290DC29C550FF0B6E7D07036A5C8EBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c0:30:54:cf:08:a5:ff:8c:aa:d7:8e:23:3f: f6:4e:2f:9d:66:f8:fa:5e:05:4f:af:75:59:d0:78: 05:65:d3:14:d8:e5:93:77:5e:59:9c:18:50:d5:6c: 6c:b8:a0:d6:25:26:dd:9f:6d:0b:26:65:98:a0:94: ab:47:08:2a:30:47:fb:0a:e2:58:31:2d:18:f2:f2: e2:67:88:d9:4f:1f:4a:0b:4a:22:dc:ba:01:fe:1b: 65:cf:cf:d2:aa:e1:23:de:de:af:80:86:7a:c1:68: d7:5d:e9:54:fa:5c:09:26:81:4f:ff:43:03:66:cc: 89:5a:cf:86:76:40:9a:24:cc:09:a3:ed:61:71:71: 0f:43:59:0a:fd:ca:c3:50:db:80:51:25:76:50:e6: 9b:a3:49:61:e6:55:4e:9c:74:1d:bd:f7:d9:8e:e9: 73:60:6b:19:f1:87:0a:01:9b:fe:c3:c2:14:2d:b3: 1c:81:d0:f8:03:74:d3:43:e9:e3:d2:39:a4:3d:fc: 7b:2d:59:dc:ca:61:be:6c:d0:e2:16:81:4a:28:0c: c7:e6:6c:cf:35:34:57:14:3b:3e:3f:bf:74:7c:a6: de:97:fd:93:28:d4:e4:45:85:06:23:1d:21:65:42: c5:a3:64:85:99:37:3a:3e:f2:b3:b4:e4:2c:21:59: 0e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B1:BF:5D:D2:90:DC:29:C5:50:FF:0B:6E:7D:07:03:6A:5C:8E:BD X509v3 Authority Key Identifier: keyid:71:AD:BC:B8:05:EE:EE:44:A7:FD:C0:7C:A5:4A:D6:61:0C:81:E1:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:90:6e:4c:94:3d:3b:9b:14:76:6e:8a:f1:3a:2d:75:f7:e2: 37:14:d7:31:f4:e8:d8:e0:f4:49:c4:7f:db:64:de:58:b7:20: b9:8f:2b:5b:7a:26:e5:76:ed:2a:14:c8:53:8b:44:96:e6:d6: a9:a8:97:4f:1a:f4:ab:1c:72:37:09:f4:63:72:fc:1f:28:91: 7f:b5:86:7e:63:95:b0:e7:d6:df:d8:14:be:87:05:f8:1b:a9: 28:51:aa:9b:14:70:3c:6a:e2:6a:26:20:57:5e:b2:76:22:65: f7:41:11:46:d9:0f:e6:cc:da:86:e4:7d:60:2e:36:7d:25:f8: 92:0a:f4:fa:72:6c:b4:3e:e0:f6:bd:d2:3f:91:28:79:4a:ab: 6c:bc:a0:c3:50:da:c5:94:74:a5:f0:1e:a8:61:f0:5f:0c:6a: b8:fd:80:f1:5f:a0:6a:2a:a3:36:6a:51:d3:f8:2d:d1:7c:dc: 18:64:a8:87:3b:76:03:da:14:db:cd:d5:b8:d6:14:de:2a:d4: e8:e7:1c:d5:62:7e:35:8c:70:6a:e0:ce:e2:e6:96:a5:a1:f4: 4b:43:80:58:56:59:04:f2:79:63:52:5e:25:66:2f:b5:14:11: ac:90:61:3f:34:29:14:c2:a1:51:a4:a0:7d:fc:f3:e3:97:c8: 51:fd:84:01 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUHtYlnJNd9L6dWA7dvqF2AyGfQVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFBREJDQjgwNUVFRUU0NEE3RkRDMDdDQTU0QUQ2NjEw QzgxRTFCMzAeFw0yNjAzMjgwMTQwMDZaFw0yNjAzMjkwMTQ2MDZaMDMxMTAvBgNV BAMTKEQzQjFCRjVERDI5MERDMjlDNTUwRkYwQjZFN0QwNzAzNkE1QzhFQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1wDBUzwil/4yq144jP/ZOL51m +PpeBU+vdVnQeAVl0xTY5ZN3XlmcGFDVbGy4oNYlJt2fbQsmZZiglKtHCCowR/sK 4lgxLRjy8uJniNlPH0oLSiLcugH+G2XPz9Kq4SPe3q+AhnrBaNdd6VT6XAkmgU// QwNmzIlaz4Z2QJokzAmj7WFxcQ9DWQr9ysNQ24BRJXZQ5pujSWHmVU6cdB2999mO 6XNgaxnxhwoBm/7DwhQtsxyB0PgDdNND6ePSOaQ9/HstWdzKYb5s0OIWgUooDMfm bM81NFcUOz4/v3R8pt6X/ZMo1ORFhQYjHSFlQsWjZIWZNzo+8rO05CwhWQ5hAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU07G/XdKQ3CnFUP8Lbn0HA2pcjr0wHwYDVR0j BBgwFoAUca28uAXu7kSn/cB8pUrWYQyB4bMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmU3Zjc0N2UtZmY2OC00ZmEyLWIyZTMtZjZlZGU1NDhh MzIwLzEvNzFBREJDQjgwNUVFRUU0NEE3RkRDMDdDQTU0QUQ2NjEwQzgxRTFCMy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvNzFBREJDQjgwNUVFRUU0NEE3RkRDMDdDQTU0QUQ2NjEwQzgx RTFCMy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82ZTdmNzQ3ZS1m ZjY4LTRmYTItYjJlMy1mNmVkZTU0OGEzMjAvMS83MUFEQkNCODA1RUVFRTQ0QTdG REMwN0NBNTRBRDY2MTBDODFFMUIzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn5BuTJQ9O5sUdm6K8Tot dffiNxTXMfTo2OD0ScR/22TeWLcguY8rW3om5XbtKhTIU4tElubWqaiXTxr0qxxy Nwn0Y3L8HyiRf7WGfmOVsOfW39gUvocF+BupKFGqmxRwPGriaiYgV16ydiJl90ER RtkP5szahuR9YC42fSX4kgr0+nJstD7g9r3SP5EoeUqrbLygw1DaxZR0pfAeqGHw XwxquP2A8V+gaiqjNmpR0/gt0XzcGGSohzt2A9oU283VuNYU3irU6Occ1WJ+NYxw auDO4uaWpaH0S0OAWFZZBPJ5Y1JeJWYvtRQRrJBhPzQpFMKhUaSgffzz45fIUf2E AQ== -----END CERTIFICATE-----Generated at Sat Mar 28 15:13:03 2026 by rpki-client