$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.mft File: C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.mft (raw, json) Hash identifier: hbV+9RSpxZl511i0nGvC5y/+4LYyWKkc7yy8PDNJqGo= Subject key identifier: 62:04:55:D3:1A:5B:12:41:9C:0F:C8:E1:6F:FE:B9:30:61:11:32:BF Authority key identifier: C7:3F:B7:03:3F:23:C9:59:58:FC:FB:E5:0E:4C:65:AA:95:C0:3E:F0 Certificate issuer: /CN=C73FB7033F23C95958FCFBE50E4C65AA95C03EF0 Certificate serial: 0546A560743FAAEE5B59C4BE24DC1D037CF51F84 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.mft Manifest number: 1D Signing time: Fri 06 Mar 2026 21:25:48 +0000 Manifest this update: Fri 06 Mar 2026 21:20:48 +0000 Manifest next update: Sat 07 Mar 2026 21:45:48 +0000 Files and hashes: 1: 326130623a346530373a323030303a3a2f33372d3337203d3e20323031333938.roa (hash: YaxPcCxHWXHEcz9z+CQU+GZfaoDKa2sEqx89Of12/vc=) 2: 326130623a346530373a62303a3a2f34382d3438203d3e20323031333938.roa (hash: /uTqT5JLie3E28kiPUEQaB1WxPf4ESjtP7GgXWWmEIg=) 3: 326130623a346530373a62323a3a2f34382d3438203d3e20323031333938.roa (hash: LS3BrlYZK8SbNX6J/CClnGQfo8ZO+l7g9dfo7FOeS6Y=) 4: 326130623a346530373a62313a3a2f34382d3438203d3e20323031333938.roa (hash: 1RCf60dXQ/oUKmGHAZtweCBKcxHUn9CNbfMBr9zQkkk=) 5: 326130623a346530373a62333a3a2f34382d3438203d3e20323031333938.roa (hash: qsLlFxGXc9WfPWNVKXZeaayMCuoiW6Y+K24Q7W63kCI=) 6: C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.crl (hash: qILnfaX1E/n1L7BraPmOT5uJdznjmKFwLzvUPWeSTlA=) 7: 326130623a346530373a62303a3a2f34362d3436203d3e20323031333938.roa (hash: Vj8pBup2nRsVCRRZZonBMO1mLcSOjU3VQ9IXLrIX7W4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.crl rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Mar 2026 16:54:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:46:a5:60:74:3f:aa:ee:5b:59:c4:be:24:dc:1d:03:7c:f5:1f:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C73FB7033F23C95958FCFBE50E4C65AA95C03EF0 Validity Not Before: Mar 6 21:20:48 2026 GMT Not After : Mar 7 21:45:48 2026 GMT Subject: CN=620455D31A5B12419C0FC8E16FFEB930611132BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a9:cf:cf:70:1a:dc:14:8d:cb:0c:b3:c7:09: 5c:40:55:c9:f5:af:3a:5e:3a:4b:1d:f4:e9:52:c8: 3c:33:f6:c8:a7:fd:c4:f0:59:4f:3e:2b:8a:96:b6: 90:c8:98:97:1f:63:b8:de:47:7b:97:5a:a2:35:00: 72:b8:e5:92:94:85:91:40:e3:4b:4a:1d:00:fa:a6: 4f:5f:5b:0c:63:ed:2f:a7:d9:ee:89:e3:c4:5c:45: 45:c8:4d:1b:04:da:58:6d:22:77:f9:14:51:d7:8e: 41:bc:7f:0c:52:20:76:7e:21:6e:e0:fa:8f:40:d6: b4:0f:bf:a4:3f:0c:fc:da:41:98:51:c0:0b:86:85: 60:0a:46:c1:69:82:96:68:1b:17:af:9c:9e:90:99: 0f:80:90:e5:a2:71:da:e2:63:92:37:b5:15:08:38: 0a:86:8f:55:de:f3:8e:ea:cc:38:b1:2b:c4:92:1c: 89:a4:9f:7f:7d:bc:93:55:d6:1e:b4:c4:fc:97:29: 02:41:2d:e4:12:2b:be:d0:09:a4:f0:55:c1:75:b6: 84:57:01:e2:2c:b7:49:73:05:4a:5e:f9:09:4c:c3: 50:37:8e:d5:62:06:a4:f8:70:ac:6f:03:c0:bf:ec: 18:5b:d2:e4:0d:df:8b:bf:e0:a3:92:db:45:6c:63: 7a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:04:55:D3:1A:5B:12:41:9C:0F:C8:E1:6F:FE:B9:30:61:11:32:BF X509v3 Authority Key Identifier: keyid:C7:3F:B7:03:3F:23:C9:59:58:FC:FB:E5:0E:4C:65:AA:95:C0:3E:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:3d:23:43:db:88:56:06:d1:5b:fb:92:cb:3d:17:ce:c9:a2: fe:0c:ba:d8:0f:93:7c:75:20:c2:40:99:7f:fc:bb:e5:a8:23: 6d:ab:13:44:21:46:ac:68:94:aa:25:e7:f8:57:12:41:fc:d4: ca:b5:a7:8a:79:5f:4f:1f:ff:df:c3:4d:aa:ef:fd:14:a0:81: 19:f9:7b:29:cb:bf:50:8c:67:97:a0:11:e5:5e:01:e3:a9:09: 6d:7b:f2:54:58:af:8b:e7:a4:71:c6:a2:c3:68:68:d7:8f:5b: dc:5e:03:a0:fa:94:c3:46:3c:90:88:22:b6:a6:b1:77:45:7f: 24:c2:2f:d0:60:2b:2d:a1:4c:c0:49:17:f3:85:43:bd:f7:f2: 14:e1:4b:71:ba:9d:81:81:f4:ec:67:23:8d:4f:38:62:c9:dc: b8:ee:74:2f:78:93:b0:75:27:ae:7f:87:8b:b8:04:c3:1a:34: 01:ff:f2:25:3d:bd:ac:1f:2a:f2:81:41:31:64:f6:ad:52:fd: 3a:40:e3:6f:25:a6:f1:f1:0f:94:25:bb:42:a0:93:55:b8:e7: 2a:cb:0c:62:ae:16:98:5b:49:09:78:ac:96:5b:ad:d6:ca:d1: a9:e7:b5:12:ff:fb:03:f9:b1:4d:98:04:c6:63:a2:08:3a:c6: ce:68:5c:28 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUBUalYHQ/qu5bWcS+JNwdA3z1H4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzczRkI3MDMzRjIzQzk1OTU4RkNGQkU1MEU0QzY1QUE5 NUMwM0VGMDAeFw0yNjAzMDYyMTIwNDhaFw0yNjAzMDcyMTQ1NDhaMDMxMTAvBgNV BAMTKDYyMDQ1NUQzMUE1QjEyNDE5QzBGQzhFMTZGRkVCOTMwNjExMTMyQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7qc/PcBrcFI3LDLPHCVxAVcn1 rzpeOksd9OlSyDwz9sin/cTwWU8+K4qWtpDImJcfY7jeR3uXWqI1AHK45ZKUhZFA 40tKHQD6pk9fWwxj7S+n2e6J48RcRUXITRsE2lhtInf5FFHXjkG8fwxSIHZ+IW7g +o9A1rQPv6Q/DPzaQZhRwAuGhWAKRsFpgpZoGxevnJ6QmQ+AkOWicdriY5I3tRUI OAqGj1Xe847qzDixK8SSHImkn399vJNV1h60xPyXKQJBLeQSK77QCaTwVcF1toRX AeIst0lzBUpe+QlMw1A3jtViBqT4cKxvA8C/7Bhb0uQN34u/4KOS20VsY3r5AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUYgRV0xpbEkGcD8jhb/65MGERMr8wHwYDVR0j BBgwFoAUxz+3Az8jyVlY/PvlDkxlqpXAPvAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTlmODA4ZDItMWYxNS00ZGYzLWI1MWUtZDU1YzUyM2I2 MmZjLzEvQzczRkI3MDMzRjIzQzk1OTU4RkNGQkU1MEU0QzY1QUE5NUMwM0VGMC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvQzczRkI3MDMzRjIzQzk1OTU4RkNGQkU1MEU0QzY1QUE5NUMw M0VGMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85OWY4MDhkMi0x ZjE1LTRkZjMtYjUxZS1kNTVjNTIzYjYyZmMvMS9DNzNGQjcwMzNGMjNDOTU5NThG Q0ZCRTUwRTRDNjVBQTk1QzAzRUYwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlD0jQ9uIVgbRW/uSyz0X zsmi/gy62A+TfHUgwkCZf/y75agjbasTRCFGrGiUqiXn+FcSQfzUyrWninlfTx// 38NNqu/9FKCBGfl7Kcu/UIxnl6AR5V4B46kJbXvyVFivi+ekccaiw2ho149b3F4D oPqUw0Y8kIgitqaxd0V/JMIv0GArLaFMwEkX84VDvffyFOFLcbqdgYH07GcjjU84 YsncuO50L3iTsHUnrn+Hi7gEwxo0Af/yJT29rB8q8oFBMWT2rVL9OkDjbyWm8fEP lCW7QqCTVbjnKssMYq4WmFtJCXisllut1srRqee1Ev/7A/mxTZgExmOiCDrGzmhc KA== -----END CERTIFICATE-----Generated at Sat Mar 7 09:35:33 2026 by rpki-client