$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft File: C284E54726A876081FA2857EF4AF5B1A78D096B4.mft (raw, json) Hash identifier: orcvtu+piqAYmqc7W9U4PZNKvlb6ORadg2PhUaAEM5g= Subject key identifier: 73:A1:D6:61:CB:C1:80:36:56:87:3B:4B:EE:37:D2:3B:AD:A9:F3:E1 Authority key identifier: C2:84:E5:47:26:A8:76:08:1F:A2:85:7E:F4:AF:5B:1A:78:D0:96:B4 Certificate issuer: /CN=C284E54726A876081FA2857EF4AF5B1A78D096B4 Certificate serial: 338F90229F6D740D7ECE92ACD14875B21904FAEA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/C284E54726A876081FA2857EF4AF5B1A78D096B4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft Manifest number: 0158 Signing time: Wed 11 Mar 2026 02:03:47 +0000 Manifest this update: Wed 11 Mar 2026 01:58:47 +0000 Manifest next update: Thu 12 Mar 2026 02:56:47 +0000 Files and hashes: 1: C284E54726A876081FA2857EF4AF5B1A78D096B4.crl (hash: lV40VQgL3cQWOhI4sw17/nMPRpBmmZRksipuzSQ5g1Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/C284E54726A876081FA2857EF4AF5B1A78D096B4.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 12 Mar 2026 02:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:8f:90:22:9f:6d:74:0d:7e:ce:92:ac:d1:48:75:b2:19:04:fa:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C284E54726A876081FA2857EF4AF5B1A78D096B4 Validity Not Before: Mar 11 01:58:47 2026 GMT Not After : Mar 12 02:56:47 2026 GMT Subject: CN=73A1D661CBC1803656873B4BEE37D23BADA9F3E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ce:fa:53:db:da:0f:c0:71:a5:8b:3d:67:a4: ab:ae:3e:a0:36:77:20:07:2b:a3:48:ce:93:e9:9c: c7:7d:1c:76:96:db:af:a5:89:9d:70:84:43:14:da: 48:c3:bd:bb:31:14:ff:36:b0:e6:f7:e6:39:b9:01: 8f:13:6d:72:e2:53:64:33:ca:50:7e:8d:c1:47:33: 63:c7:1e:9d:2e:c2:47:d0:6a:e8:88:25:09:ae:6f: 59:60:7d:76:d2:c9:43:29:60:57:17:2e:2f:bf:98: 65:10:72:d6:e6:42:3c:ca:4c:4e:b9:32:e3:be:c8: 7a:e9:96:16:76:71:0c:b3:fd:71:7f:67:63:42:81: fb:86:04:5e:e5:dc:e8:c3:9c:aa:d5:4f:b5:fa:c0: 3c:fd:3c:4c:64:6d:63:c0:9c:81:43:88:81:46:97: 28:b0:49:6b:ce:63:3e:f6:4a:14:5e:b0:ef:7b:34: 9a:0f:ff:ed:8e:07:18:8c:17:46:50:fa:3b:af:80: 14:f1:26:36:c6:0f:ea:e0:3a:68:f2:89:44:82:04: dd:49:74:1b:0b:af:c2:44:13:61:be:cb:85:e8:d8: cd:7e:d4:d2:17:de:4f:08:69:ee:95:79:a9:d4:82: 63:56:c5:0f:75:36:0b:f6:46:37:c1:d1:5d:3d:5f: 0e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A1:D6:61:CB:C1:80:36:56:87:3B:4B:EE:37:D2:3B:AD:A9:F3:E1 X509v3 Authority Key Identifier: keyid:C2:84:E5:47:26:A8:76:08:1F:A2:85:7E:F4:AF:5B:1A:78:D0:96:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/C284E54726A876081FA2857EF4AF5B1A78D096B4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:f1:43:b0:ed:95:c3:bd:b3:29:c1:62:48:6c:63:e7:c6:e9: 1d:3e:27:19:da:2c:5c:e0:c4:6e:28:5f:9b:0c:43:b6:33:6e: c9:4f:aa:7c:28:72:84:f0:a3:43:e4:96:e9:b7:9a:f0:fa:b9: 54:6c:06:cf:d4:4a:00:20:2a:34:02:84:e2:87:b4:6f:55:2a: 02:0f:08:79:10:ff:75:06:ab:7b:cc:9f:35:73:5d:41:50:45: 7c:4c:5d:a6:0e:d2:fb:49:2a:2a:94:04:15:39:18:ca:25:3b: 8c:11:52:93:2d:41:dc:33:5f:51:f8:89:d5:bb:d7:b0:d7:d5: ac:0a:ce:c1:4b:ca:03:b6:77:49:85:e2:d4:fd:90:02:d4:89: 29:4f:21:f5:0d:b3:6b:a5:35:8f:d2:8e:9b:95:e4:c8:68:6f: 96:74:15:9d:65:16:ba:06:0d:6f:4b:7d:4e:6e:4c:e8:6d:51: 0b:78:00:35:5d:a9:50:6c:d3:f0:65:64:52:37:1b:53:0f:a9: f2:50:26:e5:51:5b:bd:47:cd:33:84:98:53:63:d1:b2:c9:36: 2d:f9:3d:02:c6:ec:5e:46:a2:ef:84:de:5c:7f:30:e3:e6:a5: 2f:10:77:af:30:4f:12:43:a0:d0:f4:cd:0f:16:38:df:5d:cb: a3:2c:13:60 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUM4+QIp9tdA1+zpKs0Uh1shkE+uowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI4NEU1NDcyNkE4NzYwODFGQTI4NTdFRjRBRjVCMUE3 OEQwOTZCNDAeFw0yNjAzMTEwMTU4NDdaFw0yNjAzMTIwMjU2NDdaMDMxMTAvBgNV BAMTKDczQTFENjYxQ0JDMTgwMzY1Njg3M0I0QkVFMzdEMjNCQURBOUYzRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBzvpT29oPwHGliz1npKuuPqA2 dyAHK6NIzpPpnMd9HHaW26+liZ1whEMU2kjDvbsxFP82sOb35jm5AY8TbXLiU2Qz ylB+jcFHM2PHHp0uwkfQauiIJQmub1lgfXbSyUMpYFcXLi+/mGUQctbmQjzKTE65 MuO+yHrplhZ2cQyz/XF/Z2NCgfuGBF7l3OjDnKrVT7X6wDz9PExkbWPAnIFDiIFG lyiwSWvOYz72ShResO97NJoP/+2OBxiMF0ZQ+juvgBTxJjbGD+rgOmjyiUSCBN1J dBsLr8JEE2G+y4Xo2M1+1NIX3k8Iae6VeanUgmNWxQ91Ngv2RjfB0V09Xw5jAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUc6HWYcvBgDZWhztL7jfSO62p8+EwHwYDVR0j BBgwFoAUwoTlRyaodggfooV+9K9bGnjQlrQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5 YjNkLzUvQzI4NEU1NDcyNkE4NzYwODFGQTI4NTdFRjRBRjVCMUE3OEQwOTZCNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC9DMjg0RTU0NzI2QTg3NjA4MUZBMjg1N0VG NEFGNUIxQTc4RDA5NkI0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzZmZjdhOTg5LWVjZGYtNDNkNi04NmUxLWY2YzM5MzViOWIzZC81L0MyODRFNTQ3 MjZBODc2MDgxRkEyODU3RUY0QUY1QjFBNzhEMDk2QjQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBa8UOw 7ZXDvbMpwWJIbGPnxukdPicZ2ixc4MRuKF+bDEO2M27JT6p8KHKE8KND5Jbpt5rw +rlUbAbP1EoAICo0AoTih7RvVSoCDwh5EP91Bqt7zJ81c11BUEV8TF2mDtL7SSoq lAQVORjKJTuMEVKTLUHcM19R+InVu9ew19WsCs7BS8oDtndJheLU/ZAC1IkpTyH1 DbNrpTWP0o6bleTIaG+WdBWdZRa6Bg1vS31ObkzobVELeAA1XalQbNPwZWRSNxtT D6nyUCblUVu9R80zhJhTY9GyyTYt+T0CxuxeRqLvhN5cfzDj5qUvEHevME8SQ6DQ 9M0PFjjfXcujLBNg -----END CERTIFICATE-----Generated at Wed Mar 11 17:44:29 2026 by rpki-client