$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft File: C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft (raw, json) Hash identifier: 0abN92UuxKL7QveiCybssaxUaJhK5uHME/dXfNJi73s= Subject key identifier: BC:90:78:1B:C3:57:68:73:CD:23:C5:FC:08:2F:F3:DD:63:3E:E5:5A Authority key identifier: C3:F0:2C:2A:F3:82:37:7A:DA:9B:51:F2:EA:37:0E:74:54:12:D1:DF Certificate issuer: /CN=C3F02C2AF382377ADA9B51F2EA370E745412D1DF Certificate serial: 5B50FA9D23F96EAF0DEBDA9597A6ED0E8DAF480B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft Manifest number: 41 Signing time: Thu 09 Apr 2026 09:52:40 +0000 Manifest this update: Thu 09 Apr 2026 09:47:40 +0000 Manifest next update: Fri 10 Apr 2026 13:01:40 +0000 Files and hashes: 1: C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl (hash: jIkyr8sKymihs6whphKfNMEHHvVT0T4CEebnJoqV3Qo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 10 Apr 2026 13:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:50:fa:9d:23:f9:6e:af:0d:eb:da:95:97:a6:ed:0e:8d:af:48:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3F02C2AF382377ADA9B51F2EA370E745412D1DF Validity Not Before: Apr 9 09:47:40 2026 GMT Not After : Apr 10 13:01:40 2026 GMT Subject: CN=BC90781BC3576873CD23C5FC082FF3DD633EE55A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:48:26:13:57:d6:8e:94:95:a2:2d:82:1c:ec: 0c:bb:87:a9:2a:01:16:8f:df:8f:dc:47:f3:61:b3: 5a:96:2b:7d:87:d3:93:51:68:86:83:86:2a:b0:4f: cf:91:57:42:16:f7:97:71:1d:57:88:6e:6e:40:26: be:ec:15:9b:39:4d:6f:25:91:b0:ca:91:84:85:95: c0:ba:f9:51:08:67:e9:70:d7:b6:39:f9:d9:38:c7: f1:84:e8:85:79:5b:b6:b7:d2:77:7c:69:4b:3a:5f: 0d:72:0b:09:52:51:a4:4f:7b:ab:19:2b:ff:a6:84: 43:19:00:ce:d7:62:99:2d:0d:50:b3:b2:9a:ec:3d: 89:92:89:c7:46:2a:1d:2d:f6:03:61:0c:8e:6d:70: 38:5d:1a:ff:14:29:01:31:f5:11:28:37:80:79:e3: cc:35:f7:cf:8e:82:b9:fb:2a:98:f2:a8:a2:91:15: 4e:f7:70:dd:19:44:58:87:0b:ad:95:55:30:3b:47: c0:5e:1c:f3:91:45:28:08:38:df:be:0c:78:80:c4: b2:88:25:1c:96:62:9d:42:e4:e9:2c:a8:61:58:cf: 5c:eb:39:38:5f:0e:61:7d:64:29:1f:87:ba:ad:a8: e4:42:aa:0a:4c:c3:43:7d:a8:07:2a:9e:87:18:8f: df:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:90:78:1B:C3:57:68:73:CD:23:C5:FC:08:2F:F3:DD:63:3E:E5:5A X509v3 Authority Key Identifier: keyid:C3:F0:2C:2A:F3:82:37:7A:DA:9B:51:F2:EA:37:0E:74:54:12:D1:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:55:5b:56:58:a8:a6:e8:f1:0a:3a:0b:58:66:4e:ff:c5:1d: d3:b3:a1:cf:1b:6a:f5:f4:ac:c6:90:82:1f:be:bd:32:b1:89: 55:28:16:d3:9a:b2:74:b5:c7:2e:3e:a9:f5:3a:10:5d:4d:fb: 16:7d:e5:10:71:24:8b:14:a1:b9:25:9d:b6:e0:9b:36:ca:2e: e9:9e:8d:24:99:24:76:fc:60:b7:6d:50:7e:4d:d1:45:06:80: a3:68:3b:d3:19:12:21:6c:55:98:3a:49:8b:cc:f1:62:62:ea: 3d:25:d5:cf:a9:92:86:f8:12:f7:3c:cc:f0:21:14:9a:e4:5f: 0e:27:9f:13:3a:90:ad:59:54:41:8f:f9:78:a9:0b:88:54:1f: 21:92:12:9f:13:ca:4a:93:d3:d9:6c:87:79:af:1c:15:5f:e1: 39:43:af:6b:6a:10:88:4e:81:7b:0a:a7:1c:f3:04:a1:ec:0b: 47:0f:ec:ff:26:51:9e:cf:62:64:46:48:5b:cc:57:89:8b:af: 2a:92:f9:65:72:77:c8:20:06:c0:3a:89:57:e8:31:62:a3:80: 2e:1e:2f:b8:7d:a4:ce:26:84:2f:2a:bb:b7:e6:67:24:83:bd: 04:cf:77:e3:a4:ee:9d:8f:b8:bf:36:4a:6d:84:f2:ab:6f:26: ea:c9:77:62 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUW1D6nSP5bq8N69qVl6btDo2vSAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1 NDEyRDFERjAeFw0yNjA0MDkwOTQ3NDBaFw0yNjA0MTAxMzAxNDBaMDMxMTAvBgNV BAMTKEJDOTA3ODFCQzM1NzY4NzNDRDIzQzVGQzA4MkZGM0RENjMzRUU1NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKSCYTV9aOlJWiLYIc7Ay7h6kq ARaP34/cR/Nhs1qWK32H05NRaIaDhiqwT8+RV0IW95dxHVeIbm5AJr7sFZs5TW8l kbDKkYSFlcC6+VEIZ+lw17Y5+dk4x/GE6IV5W7a30nd8aUs6Xw1yCwlSUaRPe6sZ K/+mhEMZAM7XYpktDVCzsprsPYmSicdGKh0t9gNhDI5tcDhdGv8UKQEx9REoN4B5 48w198+Ogrn7KpjyqKKRFU73cN0ZRFiHC62VVTA7R8BeHPORRSgION++DHiAxLKI JRyWYp1C5OksqGFYz1zrOThfDmF9ZCkfh7qtqORCqgpMw0N9qAcqnocYj99fAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUvJB4G8NXaHPNI8X8CC/z3WM+5VowHwYDVR0j BBgwFoAUw/AsKvOCN3ram1Hy6jcOdFQS0d8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzEvQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1NDEyRDFERi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1NDEy RDFERi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTA5OGMyMy1h OTc3LTRmOWEtOTdjOS1jZDRlNzU5ZGVhMDkvMS9DM0YwMkMyQUYzODIzNzdBREE5 QjUxRjJFQTM3MEU3NDU0MTJEMURGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVVVbVliopujxCjoLWGZO /8Ud07Ohzxtq9fSsxpCCH769MrGJVSgW05qydLXHLj6p9ToQXU37Fn3lEHEkixSh uSWdtuCbNsou6Z6NJJkkdvxgt21Qfk3RRQaAo2g70xkSIWxVmDpJi8zxYmLqPSXV z6mShvgS9zzM8CEUmuRfDiefEzqQrVlUQY/5eKkLiFQfIZISnxPKSpPT2WyHea8c FV/hOUOva2oQiE6BewqnHPMEoewLRw/s/yZRns9iZEZIW8xXiYuvKpL5ZXJ3yCAG wDqJV+gxYqOALh4vuH2kziaELyq7t+ZnJIO9BM9346TunY+4vzZKbYTyq28m6sl3 Yg== -----END CERTIFICATE-----Generated at Thu Apr 9 20:59:08 2026 by rpki-client