$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft File: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft (raw, json) Hash identifier: 9EL3aJC0oJf6ZsobN6ztVvW639gHri8KdOMRR6gN56I= Subject key identifier: 64:E5:F9:1D:35:CB:F1:A9:31:88:E2:F8:83:7D:3B:98:48:CC:A6:90 Authority key identifier: 0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 Certificate issuer: /CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Certificate serial: 1EB0B5BE5401B961333192AA575AFE1D20379D21 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft Manifest number: 016A Signing time: Thu 02 Apr 2026 14:17:19 +0000 Manifest this update: Thu 02 Apr 2026 14:12:19 +0000 Manifest next update: Fri 03 Apr 2026 17:17:19 +0000 Files and hashes: 1: 326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (hash: PoxwFIHy8kdey2mlHnL1hmx4hhF1/GhCPxY1mv6kDWE=) 2: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl (hash: tQPhQfuIgMU66jjjKeN0iagcXSS/Xi4dLwOEL55vzl0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 03 Apr 2026 17:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:b0:b5:be:54:01:b9:61:33:31:92:aa:57:5a:fe:1d:20:37:9d:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Validity Not Before: Apr 2 14:12:19 2026 GMT Not After : Apr 3 17:17:19 2026 GMT Subject: CN=64E5F91D35CBF1A93188E2F8837D3B9848CCA690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:1f:5f:96:28:b1:b0:a6:87:cf:7a:99:39:c9: 48:cb:e0:60:cf:d1:8b:0d:9a:1e:e8:a6:58:f7:95: ed:5b:6c:85:6b:72:d6:a1:26:17:54:76:a5:42:f2: e2:82:23:29:f1:e0:de:6e:63:64:21:26:eb:25:ea: 8e:20:43:be:e2:60:7d:ed:39:a4:8c:2c:c3:09:30: c1:53:12:c8:c9:cd:a7:a2:56:da:07:7d:03:cd:b0: 88:0d:c3:87:c7:ff:7f:3b:06:12:d7:70:cd:29:bc: f0:a7:bd:af:b2:5f:7d:1d:56:2a:77:9b:1c:4f:32: 7a:51:49:a2:3e:6f:ad:8c:42:0e:f2:f6:c6:6d:e0: 22:e0:4d:e5:63:54:43:28:5e:d4:4f:53:4f:b9:47: a0:12:49:44:3d:52:21:a8:e3:76:62:32:d2:d1:c4: 8c:36:8b:a1:b5:60:f0:0c:c3:71:01:c5:10:2d:9c: 1a:2a:d8:be:5d:64:d3:ac:6f:58:3f:fa:ea:3f:db: 66:e1:bd:13:98:7c:d7:87:0c:27:ef:05:ee:f0:05: 02:df:06:de:db:21:5c:b5:7b:6a:af:ea:40:61:46: 44:70:52:eb:9a:91:0c:07:c5:8f:ac:77:93:1b:cd: f0:81:2b:3d:8c:29:e0:3c:47:7f:b9:89:4b:df:79: f7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E5:F9:1D:35:CB:F1:A9:31:88:E2:F8:83:7D:3B:98:48:CC:A6:90 X509v3 Authority Key Identifier: keyid:0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:c8:a5:51:1b:8f:7f:4e:fd:7f:0c:8d:2b:3d:f1:08:20:66: b7:20:ae:27:9b:36:a9:92:1f:37:21:75:eb:ac:0a:6e:63:ef: a6:eb:4d:e3:ff:30:2c:db:57:16:e4:5b:ff:4a:ff:c1:3c:81: 30:ec:ab:f8:e9:8c:69:2e:6a:3f:20:9f:9d:8b:f1:31:d4:4a: 90:21:72:89:6d:cf:dc:d8:61:64:7e:96:eb:32:d3:c8:9f:ea: 5c:a8:70:16:e5:24:e9:0f:dd:53:52:33:b3:b5:c2:fb:09:24: 8b:95:ef:f9:b9:94:59:53:e0:92:25:19:7b:6c:fe:5b:46:b3: 9a:cc:b2:0b:5b:b0:24:eb:23:ed:9d:d8:fc:49:1d:9b:88:6f: d5:b2:81:59:84:f2:1c:0b:0c:43:98:b7:a1:59:a0:30:d8:85: 56:bd:54:d2:f7:1e:e3:d1:32:11:5d:39:32:5f:6d:ca:13:17: af:9c:ce:7b:a2:4e:52:e4:0c:e0:8f:ab:01:10:0a:b7:2e:4b: 3f:a1:e5:0d:dc:f7:e0:b4:c7:89:ca:1d:56:69:dd:0f:e4:af: d0:00:8a:57:9b:e1:13:51:bd:69:2e:0a:a4:d9:f7:29:59:bd: 7a:dc:2b:45:2a:72:fc:a8:cb:32:c4:d8:77:e1:24:68:33:57: d0:53:0b:be -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUHrC1vlQBuWEzMZKqV1r+HSA3nSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1 RjRCMDlCOTAeFw0yNjA0MDIxNDEyMTlaFw0yNjA0MDMxNzE3MTlaMDMxMTAvBgNV BAMTKDY0RTVGOTFEMzVDQkYxQTkzMTg4RTJGODgzN0QzQjk4NDhDQ0E2OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxH1+WKLGwpofPepk5yUjL4GDP 0YsNmh7oplj3le1bbIVrctahJhdUdqVC8uKCIynx4N5uY2QhJusl6o4gQ77iYH3t OaSMLMMJMMFTEsjJzaeiVtoHfQPNsIgNw4fH/387BhLXcM0pvPCnva+yX30dVip3 mxxPMnpRSaI+b62MQg7y9sZt4CLgTeVjVEMoXtRPU0+5R6ASSUQ9UiGo43ZiMtLR xIw2i6G1YPAMw3EBxRAtnBoq2L5dZNOsb1g/+uo/22bhvROYfNeHDCfvBe7wBQLf Bt7bIVy1e2qv6kBhRkRwUuuakQwHxY+sd5MbzfCBKz2MKeA8R3+5iUvfefffAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUZOX5HTXL8akxiOL4g307mEjMppAwHwYDVR0j BBgwFoAUCv23IiueujOmXim74/KdfF9LCbkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzMvMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1RjRCMDlCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC8wQUZEQjcyMjJCOUVCQTMzQTY1RTI5QkJF M0YyOUQ3QzVGNEIwOUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8zLzBBRkRCNzIy MkI5RUJBMzNBNjVFMjlCQkUzRjI5RDdDNUY0QjA5QjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBuyKVR G49/Tv1/DI0rPfEIIGa3IK4nmzapkh83IXXrrApuY++m603j/zAs21cW5Fv/Sv/B PIEw7Kv46YxpLmo/IJ+di/Ex1EqQIXKJbc/c2GFkfpbrMtPIn+pcqHAW5STpD91T UjOztcL7CSSLle/5uZRZU+CSJRl7bP5bRrOazLILW7Ak6yPtndj8SR2biG/VsoFZ hPIcCwxDmLehWaAw2IVWvVTS9x7j0TIRXTkyX23KExevnM57ok5S5Azgj6sBEAq3 Lks/oeUN3PfgtMeJyh1Wad0P5K/QAIpXm+ETUb1pLgqk2fcpWb163CtFKnL8qMsy xNh34SRoM1fQUwu+ -----END CERTIFICATE-----Generated at Fri Apr 3 10:15:49 2026 by rpki-client