$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft File: 307456E03A11DBB48443E93538958B15B4E9E0F0.mft (raw, json) Hash identifier: 8WO2uTg3o7IatmKyOhtu8NRPM/ZnfAqPPmeQM+kTbCI= Subject key identifier: 32:4D:4E:20:DE:82:D9:E5:A3:39:27:0E:A3:04:2F:2E:B3:84:BD:C4 Authority key identifier: 30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0 Certificate issuer: /CN=307456E03A11DBB48443E93538958B15B4E9E0F0 Certificate serial: 76601B0EB42ECACCAEDFAB0FA72DC05EE67DDCC8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft Manifest number: 0131 Signing time: Wed 04 Mar 2026 01:33:38 +0000 Manifest this update: Wed 04 Mar 2026 01:28:38 +0000 Manifest next update: Thu 05 Mar 2026 04:17:38 +0000 Files and hashes: 1: 3130332e3133392e38382e302f32342d3234203d3e20323134383039.roa (hash: aBp6U2aVMH3hSM5eeFVi+p63pJd0WYDoQYC72uEJ/w8=) 2: 307456E03A11DBB48443E93538958B15B4E9E0F0.crl (hash: S22Igh466DwmD7iRBvSsZGX20OjbPJ3TaPyDaYvUMyk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Mar 2026 04:17:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:60:1b:0e:b4:2e:ca:cc:ae:df:ab:0f:a7:2d:c0:5e:e6:7d:dc:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307456E03A11DBB48443E93538958B15B4E9E0F0 Validity Not Before: Mar 4 01:28:38 2026 GMT Not After : Mar 5 04:17:38 2026 GMT Subject: CN=324D4E20DE82D9E5A339270EA3042F2EB384BDC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:42:73:41:34:d7:71:25:4b:0a:0e:50:d5:ed: e2:97:fe:2b:ac:fb:e2:57:61:44:e8:b7:ed:d7:c9: 7f:69:cd:85:dd:f1:51:0b:4e:c7:3e:dc:f1:b7:e2: d9:54:67:f6:90:b1:2a:b5:e4:9f:30:9a:8e:7c:65: 7a:19:2a:d0:2c:23:01:30:a0:89:20:50:4a:a8:46: d5:1f:f1:25:65:e1:00:43:f0:73:d9:f2:2a:bd:d7: da:18:47:c6:56:be:f1:85:b5:b7:af:da:26:9b:bd: 68:3f:eb:e3:93:e9:8a:21:ba:57:aa:9d:94:3e:32: 5f:b5:7f:61:ab:48:b6:23:2a:30:bc:0b:46:94:74: 61:91:08:72:f5:68:98:5e:6f:31:ff:20:08:0b:7d: 05:5c:97:b8:9b:5b:5f:46:ca:95:2e:6f:60:67:af: 06:40:f4:95:1f:41:66:36:02:0e:a9:23:b0:fc:82: ff:5f:c9:bd:09:ca:1a:03:51:14:17:4c:f6:88:b9: 34:6d:61:0c:dd:72:67:29:a9:f0:8a:fa:69:3e:3d: e4:9b:d0:3b:16:21:05:fe:1e:1d:56:85:1f:f7:bd: 67:c2:20:dc:f5:63:21:5d:98:85:fe:ee:c4:64:4b: 8b:2f:d7:69:db:c2:11:07:2b:60:b7:1d:14:2c:ca: 19:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4D:4E:20:DE:82:D9:E5:A3:39:27:0E:A3:04:2F:2E:B3:84:BD:C4 X509v3 Authority Key Identifier: keyid:30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:81:2f:c5:57:0a:44:6a:5a:d8:ee:e9:70:d5:5d:ca:d8:b1: 75:a0:c5:43:c2:91:84:60:2c:04:ad:0f:66:8a:0e:07:b8:94: fa:3f:49:5a:b7:9c:1e:ea:53:72:fb:8d:2a:14:c1:2a:8a:49: 65:a5:25:21:80:c0:6f:39:10:e3:b6:e3:53:98:8a:cd:68:94: e6:52:97:30:21:de:76:19:e5:e0:e7:95:90:8d:87:44:ce:e9: 17:93:42:4d:ef:36:a3:a5:01:03:ea:d4:53:a1:8c:5f:c5:ad: 23:d8:76:9c:63:43:5b:ea:0d:0d:84:9a:f2:58:1e:93:cb:90: f8:47:ac:50:c2:50:74:48:dc:4c:8e:c4:fd:ad:57:ed:fe:54: 28:f5:d1:4c:e4:a0:b0:3c:2a:02:35:a8:f3:8f:9e:78:20:e1: 49:59:4b:20:8b:e8:c8:1c:41:a4:a0:a4:9a:53:f8:76:a0:3f: ca:88:0d:d7:ad:d0:24:07:7d:99:1b:aa:25:6a:a1:e2:66:9c: d6:6b:3c:25:c2:f5:62:a4:5a:de:71:cb:66:c3:33:2b:65:61: f0:5c:6f:0a:fb:22:48:9f:cb:bc:80:52:81:6d:d3:3b:44:27: aa:25:1f:79:63:d7:cf:43:ae:72:38:5c:27:b5:a0:09:0c:d4: 4d:63:28:2d -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUdmAbDrQuysyu36sPpy3AXuZ93MgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVC NEU5RTBGMDAeFw0yNjAzMDQwMTI4MzhaFw0yNjAzMDUwNDE3MzhaMDMxMTAvBgNV BAMTKDMyNEQ0RTIwREU4MkQ5RTVBMzM5MjcwRUEzMDQyRjJFQjM4NEJEQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMQnNBNNdxJUsKDlDV7eKX/ius ++JXYUTot+3XyX9pzYXd8VELTsc+3PG34tlUZ/aQsSq15J8wmo58ZXoZKtAsIwEw oIkgUEqoRtUf8SVl4QBD8HPZ8iq919oYR8ZWvvGFtbev2iabvWg/6+OT6Yohuleq nZQ+Ml+1f2GrSLYjKjC8C0aUdGGRCHL1aJhebzH/IAgLfQVcl7ibW19GypUub2Bn rwZA9JUfQWY2Ag6pI7D8gv9fyb0JyhoDURQXTPaIuTRtYQzdcmcpqfCK+mk+PeSb 0DsWIQX+Hh1WhR/3vWfCINz1YyFdmIX+7sRkS4sv12nbwhEHK2C3HRQsyhlTAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUMk1OIN6C2eWjOScOowQvLrOEvcQwHwYDVR0j BBgwFoAUMHRW4DoR27SEQ+k1OJWLFbTp4PAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzEvMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVCNEU5RTBGMC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVCNEU5 RTBGMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTA5OGMyMy1h OTc3LTRmOWEtOTdjOS1jZDRlNzU5ZGVhMDkvMS8zMDc0NTZFMDNBMTFEQkI0ODQ0 M0U5MzUzODk1OEIxNUI0RTlFMEYwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAloEvxVcKRGpa2O7pcNVd ytixdaDFQ8KRhGAsBK0PZooOB7iU+j9JWrecHupTcvuNKhTBKopJZaUlIYDAbzkQ 47bjU5iKzWiU5lKXMCHedhnl4OeVkI2HRM7pF5NCTe82o6UBA+rUU6GMX8WtI9h2 nGNDW+oNDYSa8lgek8uQ+EesUMJQdEjcTI7E/a1X7f5UKPXRTOSgsDwqAjWo84+e eCDhSVlLIIvoyBxBpKCkmlP4dqA/yogN163QJAd9mRuqJWqh4mac1ms8JcL1YqRa 3nHLZsMzK2Vh8FxvCvsiSJ/LvIBSgW3TO0QnqiUfeWPXz0OucjhcJ7WgCQzUTWMo LQ== -----END CERTIFICATE-----Generated at Wed Mar 4 19:05:03 2026 by rpki-client