$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/4/37AAEE584452DDAB0250921C4B2D8474F61FF74D.mft File: 37AAEE584452DDAB0250921C4B2D8474F61FF74D.mft (raw, json) Hash identifier: RssKtD/mqA7nl+GwYq//yPGm7XXvVXhlh7jQnda7ILQ= Subject key identifier: 0D:66:51:04:FB:C3:83:B9:9D:C9:EA:F0:B3:40:2B:3C:2D:F1:96:03 Authority key identifier: 37:AA:EE:58:44:52:DD:AB:02:50:92:1C:4B:2D:84:74:F6:1F:F7:4D Certificate issuer: /CN=37AAEE584452DDAB0250921C4B2D8474F61FF74D Certificate serial: 2C1AC82EC6B0A33E0BCD5E8C8544E321A1D19DC0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/37AAEE584452DDAB0250921C4B2D8474F61FF74D.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/4/37AAEE584452DDAB0250921C4B2D8474F61FF74D.mft Manifest number: 36 Signing time: Wed 04 Mar 2026 09:03:10 +0000 Manifest this update: Wed 04 Mar 2026 08:58:10 +0000 Manifest next update: Thu 05 Mar 2026 09:17:10 +0000 Files and hashes: 1: 37AAEE584452DDAB0250921C4B2D8474F61FF74D.crl (hash: ltQHYY9hwZ7sAh6K5WSXkhAKMVwvDj9DqUw+jnYPDsE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/4/37AAEE584452DDAB0250921C4B2D8474F61FF74D.crl rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/4/37AAEE584452DDAB0250921C4B2D8474F61FF74D.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/37AAEE584452DDAB0250921C4B2D8474F61FF74D.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Mar 2026 09:17:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:1a:c8:2e:c6:b0:a3:3e:0b:cd:5e:8c:85:44:e3:21:a1:d1:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37AAEE584452DDAB0250921C4B2D8474F61FF74D Validity Not Before: Mar 4 08:58:10 2026 GMT Not After : Mar 5 09:17:10 2026 GMT Subject: CN=0D665104FBC383B99DC9EAF0B3402B3C2DF19603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:18:ec:7e:9f:fb:71:e8:46:d6:ea:da:76:ef: 22:87:f0:b9:f6:32:23:02:69:31:2e:be:a7:94:f9: 86:57:8e:cb:d2:92:8b:5a:a8:de:ab:03:0e:15:1a: cd:95:07:eb:83:6c:78:30:d2:49:d4:34:11:e1:4a: 6e:97:ce:21:bf:81:87:2d:93:7a:30:dd:2b:a1:41: 88:56:5e:8e:42:27:23:30:62:75:81:4d:4f:1e:7a: 91:79:5b:7d:f1:00:24:f4:8c:17:96:aa:39:0f:40: 73:54:17:39:05:71:7b:6c:b8:70:8e:02:87:8f:ec: 9d:d2:66:ea:8c:0a:f6:9a:80:1a:c6:fa:88:da:f9: ab:ec:f9:1b:fa:46:0c:76:c9:a1:18:91:e3:c6:23: 64:c5:38:24:c0:39:43:23:80:0d:cd:68:08:93:1e: a4:7a:7b:54:4c:a7:18:5f:11:83:c0:03:e6:95:0c: 2a:54:70:fb:2c:2c:61:d6:01:02:09:26:8d:86:20: 07:05:23:e6:8e:1a:e8:d6:7d:bb:de:d5:f1:a1:5f: 84:46:48:9d:75:e0:35:d2:4f:dd:10:d4:8e:b1:96: 9d:1d:f9:d5:6e:d9:a6:d5:1f:23:36:28:f4:5a:8f: 22:ab:39:97:13:80:f3:6c:97:1e:ef:be:06:ae:9c: f2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:66:51:04:FB:C3:83:B9:9D:C9:EA:F0:B3:40:2B:3C:2D:F1:96:03 X509v3 Authority Key Identifier: keyid:37:AA:EE:58:44:52:DD:AB:02:50:92:1C:4B:2D:84:74:F6:1F:F7:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/4/37AAEE584452DDAB0250921C4B2D8474F61FF74D.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/37AAEE584452DDAB0250921C4B2D8474F61FF74D.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/4/37AAEE584452DDAB0250921C4B2D8474F61FF74D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:da:0d:78:af:46:f6:5e:db:70:a4:9f:1d:01:77:78:d3:bc: 76:1a:ab:e3:7f:5c:34:c0:22:c4:69:89:15:de:24:db:83:93: a7:48:f8:57:18:4c:d5:3f:df:a1:eb:f4:f1:85:03:3b:49:be: 50:9b:4b:ac:28:fc:c4:b4:82:aa:2e:12:f4:0c:b8:b7:3d:ea: 43:f7:e3:a6:f0:55:d5:ed:07:67:0f:92:bf:14:a9:ae:ef:af: dd:fb:53:96:ee:0e:68:41:fb:a8:59:88:88:e0:f6:2b:e7:f3: 4a:f3:48:62:42:5a:eb:a6:1c:ab:00:86:ff:b0:9d:2e:95:49: 86:85:46:fb:84:f0:92:01:5a:c3:02:67:9b:be:23:ca:78:c5: 09:8f:b7:0a:0b:f8:fb:63:1c:80:0c:64:34:b0:f1:03:e7:83: 7f:ba:00:db:f9:6c:82:a5:12:5d:86:4a:32:d3:11:ed:94:3a: 1d:cd:c9:23:ac:eb:d9:5c:39:54:e4:fa:cb:f0:32:51:a7:5f: f4:55:58:67:56:2f:20:3f:b8:c4:b4:33:fe:14:ef:d1:49:56: 81:fe:b3:c5:cc:cf:4f:74:ae:00:53:0f:b9:ba:9c:55:0e:3f: 55:44:c4:eb:bc:71:7f:cc:8b:e6:1f:8e:95:e6:f2:42:2d:ab: ba:4d:9b:13 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULBrILsawoz4LzV6MhUTjIaHRncAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdBQUVFNTg0NDUyRERBQjAyNTA5MjFDNEIyRDg0NzRG NjFGRjc0RDAeFw0yNjAzMDQwODU4MTBaFw0yNjAzMDUwOTE3MTBaMDMxMTAvBgNV BAMTKDBENjY1MTA0RkJDMzgzQjk5REM5RUFGMEIzNDAyQjNDMkRGMTk2MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeGOx+n/tx6EbW6tp27yKH8Ln2 MiMCaTEuvqeU+YZXjsvSkotaqN6rAw4VGs2VB+uDbHgw0knUNBHhSm6XziG/gYct k3ow3SuhQYhWXo5CJyMwYnWBTU8eepF5W33xACT0jBeWqjkPQHNUFzkFcXtsuHCO AoeP7J3SZuqMCvaagBrG+oja+avs+Rv6Rgx2yaEYkePGI2TFOCTAOUMjgA3NaAiT HqR6e1RMpxhfEYPAA+aVDCpUcPssLGHWAQIJJo2GIAcFI+aOGujWfbve1fGhX4RG SJ114DXST90Q1I6xlp0d+dVu2abVHyM2KPRajyKrOZcTgPNslx7vvgaunPLNAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUDWZRBPvDg7mdyerws0ArPC3xlgMwHwYDVR0j BBgwFoAUN6ruWERS3asCUJIcSy2EdPYf900wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTA4MjE4OTktNzdhNi00M2E3LTlhODItMGEzOGZmM2I0 YWQwLzQvMzdBQUVFNTg0NDUyRERBQjAyNTA5MjFDNEIyRDg0NzRGNjFGRjc0RC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC8zN0FBRUU1ODQ0NTJEREFCMDI1MDkyMUM0 QjJEODQ3NEY2MUZGNzRELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzkwODIxODk5LTc3YTYtNDNhNy05YTgyLTBhMzhmZjNiNGFkMC80LzM3QUFFRTU4 NDQ1MkREQUIwMjUwOTIxQzRCMkQ4NDc0RjYxRkY3NEQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBM2g14 r0b2XttwpJ8dAXd407x2Gqvjf1w0wCLEaYkV3iTbg5OnSPhXGEzVP9+h6/TxhQM7 Sb5Qm0usKPzEtIKqLhL0DLi3PepD9+Om8FXV7QdnD5K/FKmu76/d+1OW7g5oQfuo WYiI4PYr5/NK80hiQlrrphyrAIb/sJ0ulUmGhUb7hPCSAVrDAmebviPKeMUJj7cK C/j7YxyADGQ0sPED54N/ugDb+WyCpRJdhkoy0xHtlDodzckjrOvZXDlU5PrL8DJR p1/0VVhnVi8gP7jEtDP+FO/RSVaB/rPFzM9PdK4AUw+5upxVDj9VRMTrvHF/zIvm H46V5vJCLau6TZsT -----END CERTIFICATE-----Generated at Wed Mar 4 19:14:02 2026 by rpki-client