$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft File: 307456E03A11DBB48443E93538958B15B4E9E0F0.mft (raw, json) Hash identifier: 2Vce8zIKOwRz4MSyGYdKj1lihARvU4oN17068HL0RKE= Subject key identifier: 4D:7A:8B:CF:D8:55:29:44:76:22:3B:6A:58:65:63:07:BE:90:79:61 Authority key identifier: 30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0 Certificate issuer: /CN=307456E03A11DBB48443E93538958B15B4E9E0F0 Certificate serial: 3B9D5DB3BE3B0FCD4CC5882890895FA559008CA2 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft Manifest number: 0180 Signing time: Thu 30 Apr 2026 07:43:01 +0000 Manifest this update: Thu 30 Apr 2026 07:38:01 +0000 Manifest next update: Fri 01 May 2026 08:32:01 +0000 Files and hashes: 1: 3130332e3133392e38382e302f32342d3234203d3e20323134383039.roa (hash: aBp6U2aVMH3hSM5eeFVi+p63pJd0WYDoQYC72uEJ/w8=) 2: 307456E03A11DBB48443E93538958B15B4E9E0F0.crl (hash: yBPbZS3rg1xbd6KPkkXyzzR8E/8LpmRXcTPGXGgQemw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 01 May 2026 06:53:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:9d:5d:b3:be:3b:0f:cd:4c:c5:88:28:90:89:5f:a5:59:00:8c:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307456E03A11DBB48443E93538958B15B4E9E0F0 Validity Not Before: Apr 30 07:38:01 2026 GMT Not After : May 1 08:32:01 2026 GMT Subject: CN=4D7A8BCFD855294476223B6A58656307BE907961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:84:8a:12:90:dc:ea:91:7d:f3:f0:83:1b:53: 1b:43:07:51:07:c2:61:f5:12:67:37:b9:9b:00:40: 9f:ce:32:91:86:9d:46:6d:b5:78:87:00:58:2a:a4: a5:4f:4c:43:29:d8:9e:e0:9c:c2:c5:2f:cd:37:78: 22:ab:03:19:06:1f:1b:ab:b5:a8:f8:7f:32:59:4b: 8e:f6:c0:5a:33:82:45:29:a9:3f:ee:12:e4:22:e0: 6c:a0:72:b9:f9:63:3a:2e:e0:c9:21:d8:ff:3f:b2: 7c:62:1d:15:89:35:79:56:07:03:55:72:16:0d:f3: b2:ec:38:f5:0d:f8:ef:d3:3c:99:d1:dd:0c:2f:ca: 74:3f:52:a4:a0:bc:c8:3a:9b:ec:d2:35:31:08:c4: e1:46:11:b3:69:1e:6d:88:84:50:ce:5b:22:d8:d7: 78:8e:f3:97:97:0e:a0:4a:2f:5e:b4:a8:f6:ca:1e: eb:f5:ee:60:6a:30:13:e7:4c:dd:9e:9f:df:74:eb: 13:ce:8c:ae:f6:ce:e2:dd:74:5d:e9:d0:64:c0:69: 5c:18:9e:97:de:7d:61:1c:07:7a:21:e6:15:6e:dd: 57:cf:80:b3:34:ae:e1:88:b2:45:1b:7e:81:7e:44: c2:32:de:2f:de:de:94:f1:42:1e:a7:95:47:03:01: 86:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:7A:8B:CF:D8:55:29:44:76:22:3B:6A:58:65:63:07:BE:90:79:61 X509v3 Authority Key Identifier: keyid:30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:29:ff:49:39:56:90:de:4b:09:95:f3:d6:83:20:26:db:61: 38:1a:e4:54:83:46:d4:cd:c1:79:df:f4:b8:0d:38:36:4b:b0: 2a:67:02:b2:a1:0d:59:6c:07:ad:43:17:54:de:f4:dc:72:2c: 3b:ae:c5:68:3e:db:93:ad:3e:f3:c7:08:fb:76:87:1d:ee:8e: 6d:b2:c4:6d:00:b2:e6:2b:2a:88:4c:0f:3e:4e:c0:6f:a4:32: a1:e8:e3:b9:83:b5:90:c4:2c:67:89:92:2e:13:2d:ac:9b:4d: 71:e0:2d:a0:82:f1:66:09:c8:ce:12:af:61:ab:f5:7d:fc:0b: 83:c3:d3:da:e6:56:14:76:6a:b3:c9:8f:fd:c4:5b:c8:2b:f4: 06:24:4a:37:bf:94:89:14:36:c7:0d:67:9d:08:4a:b8:44:ea: bb:e1:6d:bf:b6:ad:29:bf:86:57:c9:f3:60:88:3a:3b:d4:18: dd:2b:e3:66:10:8d:14:a4:17:8d:9f:90:8f:3a:9d:35:1f:9e: 7d:e7:29:3f:8c:80:08:4c:64:06:0f:96:d8:2e:bf:97:99:1a: 09:ee:c2:eb:3d:ee:71:69:25:4e:95:1d:2e:7c:e4:a9:2d:a1: eb:5c:36:c0:c4:81:95:77:10:c4:ba:76:97:81:9d:ac:fd:ae: 92:c3:02:4e -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUO51ds747D81MxYgokIlfpVkAjKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVC NEU5RTBGMDAeFw0yNjA0MzAwNzM4MDFaFw0yNjA1MDEwODMyMDFaMDMxMTAvBgNV BAMTKDREN0E4QkNGRDg1NTI5NDQ3NjIyM0I2QTU4NjU2MzA3QkU5MDc5NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYhIoSkNzqkX3z8IMbUxtDB1EH wmH1Emc3uZsAQJ/OMpGGnUZttXiHAFgqpKVPTEMp2J7gnMLFL803eCKrAxkGHxur taj4fzJZS472wFozgkUpqT/uEuQi4Gygcrn5Yzou4Mkh2P8/snxiHRWJNXlWBwNV chYN87LsOPUN+O/TPJnR3QwvynQ/UqSgvMg6m+zSNTEIxOFGEbNpHm2IhFDOWyLY 13iO85eXDqBKL160qPbKHuv17mBqMBPnTN2en9906xPOjK72zuLddF3p0GTAaVwY npfefWEcB3oh5hVu3VfPgLM0ruGIskUbfoF+RMIy3i/e3pTxQh6nlUcDAYazAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUTXqLz9hVKUR2IjtqWGVjB76QeWEwHwYDVR0j BBgwFoAUMHRW4DoR27SEQ+k1OJWLFbTp4PAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzEvMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVCNEU5RTBGMC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVCNEU5 RTBGMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTA5OGMyMy1h OTc3LTRmOWEtOTdjOS1jZDRlNzU5ZGVhMDkvMS8zMDc0NTZFMDNBMTFEQkI0ODQ0 M0U5MzUzODk1OEIxNUI0RTlFMEYwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtSn/STlWkN5LCZXz1oMg JtthOBrkVING1M3Bed/0uA04NkuwKmcCsqENWWwHrUMXVN703HIsO67FaD7bk60+ 88cI+3aHHe6ObbLEbQCy5isqiEwPPk7Ab6QyoejjuYO1kMQsZ4mSLhMtrJtNceAt oILxZgnIzhKvYav1ffwLg8PT2uZWFHZqs8mP/cRbyCv0BiRKN7+UiRQ2xw1nnQhK uETqu+Ftv7atKb+GV8nzYIg6O9QY3SvjZhCNFKQXjZ+QjzqdNR+efecpP4yACExk Bg+W2C6/l5kaCe7C6z3ucWklTpUdLnzkqS2h61w2wMSBlXcQxLp2l4GdrP2uksMC Tg== -----END CERTIFICATE-----Generated at Thu Apr 30 13:46:31 2026 by rpki-client