$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft File: 71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft (raw, json) Hash identifier: azxdpxNtVDaFTs6Z7CJ7qOXPY3SvnXvi2x6noOKd+P4= Subject key identifier: A3:43:88:9D:5B:43:51:FB:F6:B8:AB:73:FB:F1:B6:52:71:DE:BF:AC Authority key identifier: 71:AD:BC:B8:05:EE:EE:44:A7:FD:C0:7C:A5:4A:D6:61:0C:81:E1:B3 Certificate issuer: /CN=71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3 Certificate serial: 5FF54439E5E1ECF70115E90E7AF87FF305EF1DDE Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft Manifest number: E8 Signing time: Tue 21 Jul 2026 08:38:20 +0000 Manifest this update: Tue 21 Jul 2026 08:33:20 +0000 Manifest next update: Wed 22 Jul 2026 12:14:20 +0000 Files and hashes: 1: 71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl (hash: Tcf5DGwfgg/TwA1ygT7nCOZHYwvJ4iZIsK/SdKYUjiU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 12:14:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:f5:44:39:e5:e1:ec:f7:01:15:e9:0e:7a:f8:7f:f3:05:ef:1d:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3 Validity Not Before: Jul 21 08:33:20 2026 GMT Not After : Jul 22 12:14:20 2026 GMT Subject: CN=A343889D5B4351FBF6B8AB73FBF1B65271DEBFAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f9:ba:81:4a:c1:d5:bc:76:e9:b1:74:25:c3: ff:cd:fd:b7:f7:93:bf:ea:15:d6:aa:c6:35:6d:28: 12:9e:28:20:4e:4c:82:ef:e9:82:e7:d6:e8:0d:c6: 51:b7:7c:3c:2d:a0:fc:18:05:fb:e3:e4:be:af:9d: 9a:5f:28:9d:32:07:f4:9f:d4:be:be:31:7b:ab:88: a0:a1:46:2a:b6:f6:df:90:b6:c8:8b:0b:26:aa:46: d8:09:ae:75:ab:8d:27:42:a1:0a:20:91:a8:db:03: 2f:d6:45:99:22:be:43:1f:61:25:a0:b8:14:2e:16: 55:48:6d:f7:1b:60:a2:75:cd:a5:67:33:ee:a1:ec: 57:66:73:62:aa:10:a6:52:c0:e1:15:1b:c5:6c:5a: df:f5:6d:d1:3f:c7:24:93:19:7a:55:d7:f4:31:58: 4e:77:15:3d:bf:87:a8:34:c4:b3:0b:85:d9:ec:1f: 05:96:f4:ee:de:d3:bd:78:cd:97:3d:a5:16:19:ac: 20:a9:e2:44:2f:e5:fa:2c:ab:75:0b:f0:8d:a3:72: 25:ce:3a:bf:5b:9e:e8:be:26:4f:cd:08:7f:ae:a1: 29:08:88:5e:62:34:1f:5c:4f:e2:6c:12:61:e2:09: 95:92:95:0b:ef:fc:6f:f6:6e:5b:aa:9f:00:3d:bb: 35:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:43:88:9D:5B:43:51:FB:F6:B8:AB:73:FB:F1:B6:52:71:DE:BF:AC X509v3 Authority Key Identifier: keyid:71:AD:BC:B8:05:EE:EE:44:A7:FD:C0:7C:A5:4A:D6:61:0C:81:E1:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:7d:af:bb:4d:d4:1f:2b:59:7f:45:4f:2d:08:c3:ec:56:81: eb:7d:1b:0c:62:ba:67:9c:05:c5:1e:29:ff:e6:42:74:59:1d: 08:5d:78:78:cc:62:12:c1:1a:bb:1e:fd:90:44:b5:30:1a:35: a4:f3:32:34:9c:c9:63:d9:b7:a9:27:aa:b0:9b:27:51:d9:a6: 62:f0:52:fd:22:68:c5:10:ef:c5:7f:9f:c3:e3:41:e2:57:7c: e4:a5:d3:ca:40:2f:92:f5:03:c0:50:3f:c4:15:d4:0d:b7:73: 6a:c1:8f:f6:14:52:57:14:a9:6d:0f:9c:9a:e8:90:a1:84:52: c3:b1:2c:09:a4:81:43:5d:ee:06:de:d7:87:ab:1c:22:0f:e9: cc:67:3d:3f:0c:18:1a:51:47:c1:d3:88:cc:67:66:5d:6a:7e: 7e:ce:43:7f:fb:1d:30:11:63:45:1b:c9:6d:31:c9:b1:f5:60: 3f:83:21:18:bd:42:1a:b0:69:f7:2b:7d:32:55:52:92:a0:29: a8:47:dd:7c:94:3f:83:69:db:0d:ef:cd:fd:88:e3:ac:e7:a8: 88:03:2a:5b:e7:39:01:bc:43:49:e7:5e:06:54:e5:b4:b5:b9: 57:bd:20:65:9c:5a:e3:62:9e:bc:c6:ea:d1:60:0c:90:d4:9b: d0:7f:cb:9a -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUX/VEOeXh7PcBFekOevh/8wXvHd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFBREJDQjgwNUVFRUU0NEE3RkRDMDdDQTU0QUQ2NjEw QzgxRTFCMzAeFw0yNjA3MjEwODMzMjBaFw0yNjA3MjIxMjE0MjBaMDMxMTAvBgNV BAMTKEEzNDM4ODlENUI0MzUxRkJGNkI4QUI3M0ZCRjFCNjUyNzFERUJGQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS+bqBSsHVvHbpsXQlw//N/bf3 k7/qFdaqxjVtKBKeKCBOTILv6YLn1ugNxlG3fDwtoPwYBfvj5L6vnZpfKJ0yB/Sf 1L6+MXuriKChRiq29t+QtsiLCyaqRtgJrnWrjSdCoQogkajbAy/WRZkivkMfYSWg uBQuFlVIbfcbYKJ1zaVnM+6h7Fdmc2KqEKZSwOEVG8VsWt/1bdE/xySTGXpV1/Qx WE53FT2/h6g0xLMLhdnsHwWW9O7e0714zZc9pRYZrCCp4kQv5fosq3UL8I2jciXO Or9bnui+Jk/NCH+uoSkIiF5iNB9cT+JsEmHiCZWSlQvv/G/2bluqnwA9uzXnAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUo0OInVtDUfv2uKtz+/G2UnHev6wwHwYDVR0j BBgwFoAUca28uAXu7kSn/cB8pUrWYQyB4bMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmU3Zjc0N2UtZmY2OC00ZmEyLWIyZTMtZjZlZGU1NDhh MzIwLzEvNzFBREJDQjgwNUVFRUU0NEE3RkRDMDdDQTU0QUQ2NjEwQzgxRTFCMy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvNzFBREJDQjgwNUVFRUU0NEE3RkRDMDdDQTU0QUQ2NjEwQzgx RTFCMy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82ZTdmNzQ3ZS1m ZjY4LTRmYTItYjJlMy1mNmVkZTU0OGEzMjAvMS83MUFEQkNCODA1RUVFRTQ0QTdG REMwN0NBNTRBRDY2MTBDODFFMUIzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM32vu03UHytZf0VPLQjD 7FaB630bDGK6Z5wFxR4p/+ZCdFkdCF14eMxiEsEaux79kES1MBo1pPMyNJzJY9m3 qSeqsJsnUdmmYvBS/SJoxRDvxX+fw+NB4ld85KXTykAvkvUDwFA/xBXUDbdzasGP 9hRSVxSpbQ+cmuiQoYRSw7EsCaSBQ13uBt7Xh6scIg/pzGc9PwwYGlFHwdOIzGdm XWp+fs5Df/sdMBFjRRvJbTHJsfVgP4MhGL1CGrBp9yt9MlVSkqApqEfdfJQ/g2nb De/N/YjjrOeoiAMqW+c5AbxDSedeBlTltLW5V70gZZxa42KevMbq0WAMkNSb0H/L mg== -----END CERTIFICATE-----Generated at Tue Jul 21 23:15:27 2026 by rpki-client