$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft File: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft (raw, json) Hash identifier: VpyE0REXgpxMYtfaz2sfPc4K8yeajc6AYDv32lUsSyg= Subject key identifier: 22:E3:A8:17:30:DD:CD:61:02:52:10:81:F6:68:1F:F4:E4:5F:F3:AA Authority key identifier: 1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 Certificate issuer: /CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Certificate serial: 4BA41E5CF1F9C91BCE184BD8CF80132F36A11EBA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft Manifest number: 03F2 Signing time: Tue 21 Apr 2026 04:42:13 +0000 Manifest this update: Tue 21 Apr 2026 04:37:13 +0000 Manifest next update: Wed 22 Apr 2026 08:04:13 +0000 Files and hashes: 1: 326131343a316563373a663030643a3a2f34382d3438203d3e20323136313133.roa (hash: Qox4t/JWvxkukGGw/r9dKtLNJfAFgS1CAD7Cjd/SiSQ=) 2: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl (hash: icZqv8X65xZr7buuelg72eTjOldQW5StAeSlrcwdSUg=) 3: 326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa (hash: ZBQrTYQq6EzEXXQqVVLmnECxmx5vDStz1fI8gjrWa9o=) 4: 326131343a316563373a663030303a3a2f34302d3430203d3e20323038343533.roa (hash: 2cf2+wXFX+Cv3rb6kyCpZO6NR2fDj483Pc3k7g3Nh48=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Apr 2026 08:04:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:a4:1e:5c:f1:f9:c9:1b:ce:18:4b:d8:cf:80:13:2f:36:a1:1e:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Validity Not Before: Apr 21 04:37:13 2026 GMT Not After : Apr 22 08:04:13 2026 GMT Subject: CN=22E3A81730DDCD6102521081F6681FF4E45FF3AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:df:11:b2:63:07:f1:25:7b:a8:0e:6a:5b:b0: 03:bf:62:88:81:0d:1e:32:6b:83:3d:b4:45:b5:1c: 21:f8:79:7b:0f:78:3a:3a:08:08:db:f3:fc:5b:65: a2:9c:de:fb:f8:cd:cd:d3:6c:5b:d4:3f:1b:ef:fd: 58:d3:e8:41:97:46:23:88:8e:b8:fb:da:5a:f6:30: a7:45:93:54:fe:a8:49:3f:00:6d:f9:7e:9c:5f:b1: 13:06:08:5c:56:4d:7b:d8:6d:4c:5c:7c:f9:eb:47: 58:30:57:9e:41:2d:fb:24:a7:d6:ed:0f:14:2a:20: 72:c9:1f:15:82:3f:5f:9a:0b:65:a5:65:34:2b:71: 16:e3:eb:38:72:54:67:4a:ba:78:91:6b:60:c6:12: c8:f9:e7:d9:09:d2:5c:1f:ee:8e:98:89:f7:3d:55: ba:e2:d7:71:74:8b:dd:95:95:e0:02:af:65:b0:23: c8:8e:00:72:72:58:28:93:34:c0:72:64:13:cd:89: 89:b9:3c:c5:13:41:5d:bd:54:61:13:30:4b:52:a3: ec:c6:8b:87:cb:c2:6c:cb:37:b9:4e:5d:1a:7c:21: cb:6c:51:c0:27:23:13:5a:b6:4a:6f:4d:db:36:72: c4:51:fa:e2:8e:a4:2f:18:d8:0c:80:40:36:6c:d5: 0d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E3:A8:17:30:DD:CD:61:02:52:10:81:F6:68:1F:F4:E4:5F:F3:AA X509v3 Authority Key Identifier: keyid:1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:99:54:a7:ef:05:f0:fe:67:89:c4:a9:91:88:8a:01:1a:b0: 2e:1d:be:14:f4:24:10:64:68:ed:76:fc:52:a3:48:47:98:71: 5a:15:9e:df:62:43:d4:62:44:da:0a:5e:27:d6:5e:4c:ef:63: e9:1b:60:3e:db:f0:a4:75:54:83:2e:42:bc:1d:d5:92:f2:af: b0:7d:ca:aa:de:37:05:85:aa:4c:a4:88:8c:d2:82:a9:09:8f: b4:65:cf:8f:fe:dc:db:33:bd:dc:68:06:4a:3a:32:a2:bb:f2: 9b:2f:34:c7:8c:c1:15:76:ff:f5:e7:33:6c:a1:69:5e:ad:e4: f8:84:d9:ed:ed:81:28:e7:2a:25:c6:ac:e1:54:3a:52:8a:61: b6:43:25:d8:f0:28:01:73:99:39:42:b1:50:f6:59:27:85:e9: 4b:cb:2c:a1:3a:66:30:71:71:04:2e:d0:e7:24:e0:62:d9:9f: 36:2c:1c:5e:24:0e:19:15:1b:a0:06:43:0f:64:7d:e8:97:33: 6c:5e:51:e9:63:b2:8e:51:b9:3d:6f:f4:08:ef:20:da:c2:88: 26:d3:13:70:56:6b:1d:2c:60:a7:69:73:5e:6f:cf:a9:ad:bf: d8:5d:85:bd:9c:24:87:38:63:75:93:e2:bc:10:90:a9:18:d3: 4d:54:fd:62 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUS6QeXPH5yRvOGEvYz4ATLzahHrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVG ODNFMEU3MTAeFw0yNjA0MjEwNDM3MTNaFw0yNjA0MjIwODA0MTNaMDMxMTAvBgNV BAMTKDIyRTNBODE3MzBERENENjEwMjUyMTA4MUY2NjgxRkY0RTQ1RkYzQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo3xGyYwfxJXuoDmpbsAO/YoiB DR4ya4M9tEW1HCH4eXsPeDo6CAjb8/xbZaKc3vv4zc3TbFvUPxvv/VjT6EGXRiOI jrj72lr2MKdFk1T+qEk/AG35fpxfsRMGCFxWTXvYbUxcfPnrR1gwV55BLfskp9bt DxQqIHLJHxWCP1+aC2WlZTQrcRbj6zhyVGdKuniRa2DGEsj559kJ0lwf7o6Yifc9 Vbri13F0i92VleACr2WwI8iOAHJyWCiTNMByZBPNiYm5PMUTQV29VGETMEtSo+zG i4fLwmzLN7lOXRp8IctsUcAnIxNatkpvTds2csRR+uKOpC8Y2AyAQDZs1Q1hAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUIuOoFzDdzWECUhCB9mgf9ORf86owHwYDVR0j BBgwFoAUHb0dR/2ORXTIQhdDycxfDvg+DnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzIvMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVGODNFMEU3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8xREJEMUQ0N0ZEOEU0NTc0Qzg0MjE3NDND OUNDNUYwRUY4M0UwRTcxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8yLzFEQkQxRDQ3 RkQ4RTQ1NzRDODQyMTc0M0M5Q0M1RjBFRjgzRTBFNzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA0mVSn 7wXw/meJxKmRiIoBGrAuHb4U9CQQZGjtdvxSo0hHmHFaFZ7fYkPUYkTaCl4n1l5M 72PpG2A+2/CkdVSDLkK8HdWS8q+wfcqq3jcFhapMpIiM0oKpCY+0Zc+P/tzbM73c aAZKOjKiu/KbLzTHjMEVdv/15zNsoWlereT4hNnt7YEo5yolxqzhVDpSimG2QyXY 8CgBc5k5QrFQ9lknhelLyyyhOmYwcXEELtDnJOBi2Z82LBxeJA4ZFRugBkMPZH3o lzNsXlHpY7KOUbk9b/QI7yDawogm0xNwVmsdLGCnaXNeb8+prb/YXYW9nCSHOGN1 k+K8EJCpGNNNVP1i -----END CERTIFICATE-----Generated at Wed Apr 22 01:43:16 2026 by rpki-client