$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.mft File: 4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.mft (raw, json) Hash identifier: vQ2/gqNstAyRjcPOI+A4qBlKJW2Rb2dmjXRwdvwx4Pw= Subject key identifier: 56:4D:62:D9:86:AD:38:B1:8C:C0:03:47:69:0F:68:E1:6A:65:FA:86 Authority key identifier: 4B:7A:FD:45:B3:03:92:C9:F4:66:5C:E2:A7:69:2D:56:E7:55:DC:EA Certificate issuer: /CN=4B7AFD45B30392C9F4665CE2A7692D56E755DCEA Certificate serial: 3DE1390D9A9E7DC57613B30DDA76301A6206FB39 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.mft Manifest number: 45 Signing time: Fri 06 Mar 2026 20:08:10 +0000 Manifest this update: Fri 06 Mar 2026 20:03:10 +0000 Manifest next update: Sat 07 Mar 2026 22:12:10 +0000 Files and hashes: 1: 4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.crl (hash: ImpTJpa1x31h1Vyv/fR2UryHRBpxWvj32p1dHYY3EhI=) 2: 326131343a373538363a363030303a3a2f34302d3438203d3e20313531363733.roa (hash: a5s0weSMSVAZOPtcCLRRCAjoiXiAH1m3fzt4R/LeqXA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.crl rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Mar 2026 21:25:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:e1:39:0d:9a:9e:7d:c5:76:13:b3:0d:da:76:30:1a:62:06:fb:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B7AFD45B30392C9F4665CE2A7692D56E755DCEA Validity Not Before: Mar 6 20:03:10 2026 GMT Not After : Mar 7 22:12:10 2026 GMT Subject: CN=564D62D986AD38B18CC00347690F68E16A65FA86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a2:3d:e7:6d:47:a8:de:24:b6:b3:5c:5e:a6: 69:65:03:74:b9:54:c8:bb:51:c8:3a:32:9e:e0:3a: 4f:57:76:98:b4:11:b2:bb:3a:11:74:4a:1b:7a:30: cb:9c:5a:02:a7:74:ea:03:8f:4c:8b:0f:17:ea:95: 7a:5f:76:95:4b:90:76:04:f2:f5:35:e1:02:dd:1a: 2c:1e:f2:8a:18:c0:6f:d4:14:7a:15:51:81:37:b4: b3:1d:3a:7e:22:56:aa:41:77:ef:da:d3:c9:5c:ae: 84:e4:d3:d6:8c:82:18:a8:52:ea:30:31:01:2d:9f: 0b:d9:d3:00:eb:41:e1:2f:2f:4f:bd:af:41:7b:a4: 25:00:3d:fd:ad:14:ce:33:8f:be:ae:4b:c2:85:c8: 2d:34:d1:6f:0d:e0:06:7d:b3:14:76:b3:49:3f:2c: f9:34:e1:e7:d8:aa:26:7e:58:84:bf:c9:f3:3a:f1: 12:c7:68:7b:cd:35:58:63:ed:eb:31:e7:cc:ca:92: 95:61:81:ff:be:28:1d:41:2d:6e:7e:96:4c:cd:51: 3f:cf:1e:c9:bc:19:a4:2b:ab:79:65:c6:e0:da:9f: e0:91:a1:ed:a7:84:3d:c8:34:ee:81:67:48:f7:bf: c9:53:79:a0:80:dd:e9:cd:4b:b0:e0:8a:a5:cb:fc: 4e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:4D:62:D9:86:AD:38:B1:8C:C0:03:47:69:0F:68:E1:6A:65:FA:86 X509v3 Authority Key Identifier: keyid:4B:7A:FD:45:B3:03:92:C9:F4:66:5C:E2:A7:69:2D:56:E7:55:DC:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:ba:fd:0e:1f:e5:b7:ae:7f:40:e1:6d:c8:ab:ad:dc:98:9f: 16:92:58:f6:d3:91:c4:f2:bc:3d:a6:90:1d:4a:22:37:0b:38: ec:ef:83:9a:13:6c:4c:ea:23:1b:3f:cb:a7:83:92:78:c0:18: 3a:a4:93:22:02:b7:dc:49:21:a4:fa:90:cf:04:3a:3b:ee:3e: 14:85:25:16:46:24:81:e8:a8:33:59:57:28:ea:6e:9b:91:b2: 6b:17:ce:c2:87:29:7a:6f:20:0f:33:f2:77:82:6d:ca:f9:4b: 0b:8d:74:b4:16:f6:87:f6:7e:cd:6c:88:e4:f0:10:0e:fe:9e: 38:af:2a:21:29:01:a1:9e:5f:dd:ac:62:91:ed:a4:b5:56:12: 67:8d:b8:b6:6f:7a:93:f1:41:bf:a4:e2:62:17:61:3d:3c:a3: 2a:fd:b5:bc:27:16:06:14:b4:fe:85:cb:08:d0:27:50:5e:ee: 8e:52:dd:f9:39:21:69:70:e8:61:bd:96:6d:a5:8b:f7:68:a3: 0f:88:c2:26:0a:f6:c1:ee:93:8b:ad:a3:cd:37:78:2c:47:92: 06:ac:51:29:fa:38:fb:10:e3:db:59:35:28:1c:ea:7e:34:c3: 3c:79:b0:47:06:ee:6a:a9:fc:87:cd:e0:cb:bf:63:e2:45:dd: 61:4b:ed:24 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPeE5DZqefcV2E7MN2nYwGmIG+zkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI3QUZENDVCMzAzOTJDOUY0NjY1Q0UyQTc2OTJENTZF NzU1RENFQTAeFw0yNjAzMDYyMDAzMTBaFw0yNjAzMDcyMjEyMTBaMDMxMTAvBgNV BAMTKDU2NEQ2MkQ5ODZBRDM4QjE4Q0MwMDM0NzY5MEY2OEUxNkE2NUZBODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCboj3nbUeo3iS2s1xepmllA3S5 VMi7Ucg6Mp7gOk9Xdpi0EbK7OhF0Sht6MMucWgKndOoDj0yLDxfqlXpfdpVLkHYE 8vU14QLdGiwe8ooYwG/UFHoVUYE3tLMdOn4iVqpBd+/a08lcroTk09aMghioUuow MQEtnwvZ0wDrQeEvL0+9r0F7pCUAPf2tFM4zj76uS8KFyC000W8N4AZ9sxR2s0k/ LPk04efYqiZ+WIS/yfM68RLHaHvNNVhj7esx58zKkpVhgf++KB1BLW5+lkzNUT/P Hsm8GaQrq3llxuDan+CRoe2nhD3INO6BZ0j3v8lTeaCA3enNS7DgiqXL/E6lAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUVk1i2YatOLGMwANHaQ9o4Wpl+oYwHwYDVR0j BBgwFoAUS3r9RbMDksn0Zlzip2ktVudV3OowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTA4MjE4OTktNzdhNi00M2E3LTlhODItMGEzOGZmM2I0 YWQwLzIvNEI3QUZENDVCMzAzOTJDOUY0NjY1Q0UyQTc2OTJENTZFNzU1RENFQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy80QjdBRkQ0NUIzMDM5MkM5RjQ2NjVDRTJB NzY5MkQ1NkU3NTVEQ0VBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzkwODIxODk5LTc3YTYtNDNhNy05YTgyLTBhMzhmZjNiNGFkMC8yLzRCN0FGRDQ1 QjMwMzkyQzlGNDY2NUNFMkE3NjkyRDU2RTc1NURDRUEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDBuv0O H+W3rn9A4W3Iq63cmJ8Wklj205HE8rw9ppAdSiI3Czjs74OaE2xM6iMbP8ung5J4 wBg6pJMiArfcSSGk+pDPBDo77j4UhSUWRiSB6KgzWVco6m6bkbJrF87Chyl6byAP M/J3gm3K+UsLjXS0FvaH9n7NbIjk8BAO/p44ryohKQGhnl/drGKR7aS1VhJnjbi2 b3qT8UG/pOJiF2E9PKMq/bW8JxYGFLT+hcsI0CdQXu6OUt35OSFpcOhhvZZtpYv3 aKMPiMImCvbB7pOLraPNN3gsR5IGrFEp+jj7EOPbWTUoHOp+NMM8ebBHBu5qqfyH zeDLv2PiRd1hS+0k -----END CERTIFICATE-----Generated at Sat Mar 7 07:46:59 2026 by rpki-client