$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft File: C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft (raw, json) Hash identifier: DrTyh9ppz6VqKU+LpUe7dTVhl8IBBTkLvWBbfs52m0w= Subject key identifier: 3D:93:81:25:8A:8D:A0:FE:02:32:89:3E:6A:67:CB:E0:07:28:42:DB Authority key identifier: C3:F0:2C:2A:F3:82:37:7A:DA:9B:51:F2:EA:37:0E:74:54:12:D1:DF Certificate issuer: /CN=C3F02C2AF382377ADA9B51F2EA370E745412D1DF Certificate serial: 6198972ACA522DB649BA9AB2CD8E9F2BB41AD620 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft Manifest number: 0100 Signing time: Tue 25 Aug 2026 04:49:29 +0000 Manifest this update: Tue 25 Aug 2026 04:44:29 +0000 Manifest next update: Wed 26 Aug 2026 05:43:29 +0000 Files and hashes: 1: C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl (hash: rFc4pVkmkBm27Qg1LFTOq4C3Ynb/z52JDquoyMwpA3Q=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 25 Aug 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:98:97:2a:ca:52:2d:b6:49:ba:9a:b2:cd:8e:9f:2b:b4:1a:d6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3F02C2AF382377ADA9B51F2EA370E745412D1DF Validity Not Before: Aug 25 04:44:29 2026 GMT Not After : Aug 26 05:43:29 2026 GMT Subject: CN=3D9381258A8DA0FE0232893E6A67CBE0072842DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:13:99:9c:06:4b:25:43:6e:a8:46:a2:80:88: 5f:88:84:39:91:de:97:0f:91:b4:60:73:dd:38:ba: 1d:b2:28:72:5a:12:a4:20:ff:73:c6:7a:c4:10:3f: 7b:25:32:81:39:a0:ac:c2:a4:5c:ee:44:97:ca:37: 77:8a:99:6a:76:38:ae:6f:e4:ed:6a:25:69:e3:db: 1b:ab:38:d5:fc:e5:d1:27:01:0e:f0:61:52:f0:53: 1a:f7:39:c8:12:db:be:95:5d:86:e6:01:5f:86:b9: ee:70:13:b3:7c:84:34:43:57:1d:2d:b8:28:c2:c8: e5:4f:4e:5f:76:ee:23:60:e2:25:5a:41:dc:f1:cb: b2:84:0e:d3:3f:0b:3f:c5:d0:42:f1:9c:57:5a:87: af:f8:e2:b6:38:3c:3c:e0:c4:4c:a4:6b:9f:e8:42: d3:87:1a:70:b9:3b:4b:52:d4:33:da:81:af:b1:18: 08:ae:60:2a:7b:62:00:41:87:61:b6:bc:d6:e1:23: 0b:26:dc:d2:3d:b7:db:c9:62:2d:6d:e7:9c:e1:08: fa:a5:88:e4:a6:91:67:a6:51:87:de:3b:72:c0:70: 24:ce:6b:de:64:51:5c:87:05:c9:c9:17:8f:0d:0b: 6f:99:0f:23:ec:29:14:e7:c3:5d:93:09:97:8f:8a: b3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:93:81:25:8A:8D:A0:FE:02:32:89:3E:6A:67:CB:E0:07:28:42:DB X509v3 Authority Key Identifier: keyid:C3:F0:2C:2A:F3:82:37:7A:DA:9B:51:F2:EA:37:0E:74:54:12:D1:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:77:7d:3f:93:1d:e7:31:d1:0c:53:09:14:8f:5a:f0:dd:99: e2:4a:04:04:7a:8c:09:ad:00:f7:f9:fc:f7:6a:1d:07:71:88: df:12:61:df:f5:98:40:18:f3:8c:88:28:2f:66:d1:9c:c6:59: 44:d8:99:2b:eb:89:3e:21:5f:c9:2f:2e:8d:1d:d2:b0:ff:45: 57:e7:99:a9:b3:1b:20:c4:76:8e:37:f1:a3:1a:f0:da:4e:f9: e3:5f:01:f1:ee:35:a4:be:24:ad:e8:d4:46:b8:c3:44:7d:a6: d1:ca:ae:bb:95:64:32:bc:88:40:8a:d5:51:23:c1:04:b6:ce: 5a:bd:f7:03:bb:0b:1e:d3:aa:ff:ee:b1:f3:1b:9f:bb:af:f8: ca:ed:32:59:9e:28:b4:f5:cd:2f:7e:ce:80:fd:03:a8:45:54: ea:ed:e3:3a:ca:99:97:7e:4e:65:76:79:27:5b:73:2e:5e:92: 53:b2:84:d5:2a:ea:7e:3f:04:e8:93:24:9c:5b:4d:83:76:20: 48:1c:9c:ac:43:d3:b1:e7:f7:3f:e2:f9:dd:1c:02:75:a8:a2: c2:83:61:97:fe:3a:85:79:2e:d9:80:b0:72:44:da:d2:3b:2d: 3c:a4:a4:a2:ce:a5:71:19:a7:a3:88:64:24:eb:df:c0:36:2b: da:ef:2c:5e -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUYZiXKspSLbZJupqyzY6fK7Qa1iAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1 NDEyRDFERjAeFw0yNjA4MjUwNDQ0MjlaFw0yNjA4MjYwNTQzMjlaMDMxMTAvBgNV BAMTKDNEOTM4MTI1OEE4REEwRkUwMjMyODkzRTZBNjdDQkUwMDcyODQyREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2E5mcBkslQ26oRqKAiF+IhDmR 3pcPkbRgc904uh2yKHJaEqQg/3PGesQQP3slMoE5oKzCpFzuRJfKN3eKmWp2OK5v 5O1qJWnj2xurONX85dEnAQ7wYVLwUxr3OcgS276VXYbmAV+Gue5wE7N8hDRDVx0t uCjCyOVPTl927iNg4iVaQdzxy7KEDtM/Cz/F0ELxnFdah6/44rY4PDzgxEyka5/o QtOHGnC5O0tS1DPaga+xGAiuYCp7YgBBh2G2vNbhIwsm3NI9t9vJYi1t55zhCPql iOSmkWemUYfeO3LAcCTOa95kUVyHBcnJF48NC2+ZDyPsKRTnw12TCZePirO9AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUPZOBJYqNoP4CMok+amfL4AcoQtswHwYDVR0j BBgwFoAUw/AsKvOCN3ram1Hy6jcOdFQS0d8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzEvQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1NDEyRDFERi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1NDEy RDFERi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTA5OGMyMy1h OTc3LTRmOWEtOTdjOS1jZDRlNzU5ZGVhMDkvMS9DM0YwMkMyQUYzODIzNzdBREE5 QjUxRjJFQTM3MEU3NDU0MTJEMURGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVnd9P5Md5zHRDFMJFI9a 8N2Z4koEBHqMCa0A9/n892odB3GI3xJh3/WYQBjzjIgoL2bRnMZZRNiZK+uJPiFf yS8ujR3SsP9FV+eZqbMbIMR2jjfxoxrw2k75418B8e41pL4krejURrjDRH2m0cqu u5VkMryIQIrVUSPBBLbOWr33A7sLHtOq/+6x8xufu6/4yu0yWZ4otPXNL37OgP0D qEVU6u3jOsqZl35OZXZ5J1tzLl6SU7KE1Srqfj8E6JMknFtNg3YgSBycrEPTsef3 P+L53RwCdaiiwoNhl/46hXku2YCwckTa0jstPKSkos6lcRmno4hkJOvfwDYr2u8s Xg== -----END CERTIFICATE-----Generated at Tue Aug 25 07:59:59 2026 by rpki-client