$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft File: C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft (raw, json) Hash identifier: fO5DtGuhvl3X+GqbTuky9fWs676gXplGJSn57R/gN1Q= Subject key identifier: 9B:F1:3F:BA:35:2A:7F:4B:EC:CE:FA:8F:C2:F1:E5:11:4E:0A:C4:59 Authority key identifier: C3:F0:2C:2A:F3:82:37:7A:DA:9B:51:F2:EA:37:0E:74:54:12:D1:DF Certificate issuer: /CN=C3F02C2AF382377ADA9B51F2EA370E745412D1DF Certificate serial: 1A17932CB7CA22648A54A3548927BCCD4187F447 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft Manifest number: C1 Signing time: Fri 10 Jul 2026 07:28:42 +0000 Manifest this update: Fri 10 Jul 2026 07:23:42 +0000 Manifest next update: Sat 11 Jul 2026 08:54:42 +0000 Files and hashes: 1: C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl (hash: OqUKg4L3Wb8TM8W/6/VaYC1f5MoiuNQeDtBhss00qNU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:17:93:2c:b7:ca:22:64:8a:54:a3:54:89:27:bc:cd:41:87:f4:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3F02C2AF382377ADA9B51F2EA370E745412D1DF Validity Not Before: Jul 10 07:23:42 2026 GMT Not After : Jul 11 08:54:42 2026 GMT Subject: CN=9BF13FBA352A7F4BECCEFA8FC2F1E5114E0AC459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dc:9f:b3:17:41:55:5d:70:5e:0c:03:5c:97: 68:df:95:40:fb:b2:0c:1e:4a:7a:01:86:72:89:80: 62:82:09:d4:e5:1d:89:30:17:f3:bc:f8:a4:e7:7b: b0:cb:80:14:24:ba:88:2f:bd:37:df:78:b8:c2:4b: 15:ef:9d:6f:1c:8f:b0:15:8e:d9:3c:50:ac:95:01: 62:59:d1:36:8d:4e:c3:0f:9f:ba:a7:11:b5:ae:1c: fa:b3:a4:61:a9:08:7d:79:48:e6:6e:67:32:c4:bf: e3:1f:38:a9:7a:31:90:cf:cc:27:ab:e1:f6:12:a7: 9b:3a:ea:30:51:99:4d:d3:e8:a3:6e:b5:8a:72:4e: 3a:83:7e:fa:a1:87:e0:8e:0a:fd:0d:c2:26:47:12: 83:68:0a:8f:5f:45:03:5f:fb:7f:68:05:37:43:11: 21:2e:5a:d5:a1:c6:7c:ff:5c:2f:24:f4:83:e9:cb: 4c:e1:9e:5c:e1:78:46:01:c5:3d:1b:e9:6c:d4:7a: 34:f6:c0:a1:5f:1c:e3:97:5d:2a:cc:42:72:37:0e: 8b:e1:cb:65:fa:63:39:90:23:fd:ee:dd:57:3e:60: cb:a7:87:48:3f:aa:96:47:aa:99:99:d8:78:29:d7: 20:9b:d5:62:dc:c6:08:d6:21:1c:66:f7:d2:ac:e7: bc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F1:3F:BA:35:2A:7F:4B:EC:CE:FA:8F:C2:F1:E5:11:4E:0A:C4:59 X509v3 Authority Key Identifier: keyid:C3:F0:2C:2A:F3:82:37:7A:DA:9B:51:F2:EA:37:0E:74:54:12:D1:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:8f:38:24:8f:cf:f9:12:a5:35:e6:99:ed:30:d9:06:9a:df: 41:f3:48:f2:63:7f:e3:a5:4b:5d:f7:29:98:c8:79:b8:4f:e9: b5:90:04:24:eb:83:d8:82:91:84:07:24:b4:21:d5:c7:0f:c9: df:59:8b:73:56:ff:57:e9:0c:08:38:de:d4:c7:b7:43:90:dc: 32:59:1f:8f:ad:c1:0d:a1:90:66:9c:33:29:d5:98:55:2e:63: bf:23:df:5f:73:5a:88:29:a5:9d:d3:4d:81:cb:a6:f5:94:a0: 97:64:46:05:28:bb:71:33:66:b9:17:11:00:b5:ba:9d:ed:ab: e9:83:e5:39:99:e0:ba:3f:dc:53:a2:63:be:82:0a:d7:22:36: 9f:8b:8c:d7:e6:e4:c6:0e:27:3a:31:c6:2c:ca:75:a5:7d:48: 2b:86:ff:d1:33:64:0c:3e:7a:34:85:2e:8d:1e:b8:aa:5f:a4: 22:25:be:b7:9e:28:dd:21:bc:93:40:f9:a4:b8:bc:43:06:b7: 1d:fd:ac:18:64:13:49:99:9c:a9:e7:ac:91:82:55:18:8c:53: 15:e7:80:d3:04:ff:38:2c:13:56:a1:41:78:c2:ba:ad:5b:a0: 89:58:ab:a3:69:5f:11:3d:b2:b9:77:23:9f:e8:0a:75:6d:71: c4:d7:ea:e5 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUGheTLLfKImSKVKNUiSe8zUGH9EcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1 NDEyRDFERjAeFw0yNjA3MTAwNzIzNDJaFw0yNjA3MTEwODU0NDJaMDMxMTAvBgNV BAMTKDlCRjEzRkJBMzUyQTdGNEJFQ0NFRkE4RkMyRjFFNTExNEUwQUM0NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC53J+zF0FVXXBeDANcl2jflUD7 sgweSnoBhnKJgGKCCdTlHYkwF/O8+KTne7DLgBQkuogvvTffeLjCSxXvnW8cj7AV jtk8UKyVAWJZ0TaNTsMPn7qnEbWuHPqzpGGpCH15SOZuZzLEv+MfOKl6MZDPzCer 4fYSp5s66jBRmU3T6KNutYpyTjqDfvqhh+COCv0NwiZHEoNoCo9fRQNf+39oBTdD ESEuWtWhxnz/XC8k9IPpy0zhnlzheEYBxT0b6WzUejT2wKFfHOOXXSrMQnI3Dovh y2X6YzmQI/3u3Vc+YMunh0g/qpZHqpmZ2Hgp1yCb1WLcxgjWIRxm99Ks57w9AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUm/E/ujUqf0vszvqPwvHlEU4KxFkwHwYDVR0j BBgwFoAUw/AsKvOCN3ram1Hy6jcOdFQS0d8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzEvQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1NDEyRDFERi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1NDEy RDFERi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTA5OGMyMy1h OTc3LTRmOWEtOTdjOS1jZDRlNzU5ZGVhMDkvMS9DM0YwMkMyQUYzODIzNzdBREE5 QjUxRjJFQTM3MEU3NDU0MTJEMURGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKI84JI/P+RKlNeaZ7TDZ BprfQfNI8mN/46VLXfcpmMh5uE/ptZAEJOuD2IKRhAcktCHVxw/J31mLc1b/V+kM CDje1Me3Q5DcMlkfj63BDaGQZpwzKdWYVS5jvyPfX3NaiCmlndNNgcum9ZSgl2RG BSi7cTNmuRcRALW6ne2r6YPlOZnguj/cU6JjvoIK1yI2n4uM1+bkxg4nOjHGLMp1 pX1IK4b/0TNkDD56NIUujR64ql+kIiW+t54o3SG8k0D5pLi8Qwa3Hf2sGGQTSZmc qeeskYJVGIxTFeeA0wT/OCwTVqFBeMK6rVugiViro2lfET2yuXcjn+gKdW1xxNfq 5Q== -----END CERTIFICATE-----Generated at Fri Jul 10 15:13:06 2026 by rpki-client