$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft File: AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft (raw, json) Hash identifier: f9Y8g20LCKyNMV6vy45JSLMKFPCAaxMy6OeMj35qLv0= Subject key identifier: 27:FE:67:81:FE:FD:5A:62:6E:0E:ED:18:9B:7D:03:91:DA:C3:0A:6D Authority key identifier: AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24 Certificate issuer: /CN=AC7F9BC30C04B3A236BDF8A430869ECA1A28B324 Certificate serial: 78E47B1EE0556B2FE4B6750D871A02235647125E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft Manifest number: 0100 Signing time: Mon 25 May 2026 06:37:27 +0000 Manifest this update: Mon 25 May 2026 06:32:27 +0000 Manifest next update: Tue 26 May 2026 09:45:27 +0000 Files and hashes: 1: 3230362e35332e302e302f32342d3234203d3e20323038393135.roa (hash: WAuGwGix52TOMRQkik+jyE1rcWEn8673KCYGvlhnhXY=) 2: 326130643a643930353a3a2f33322d3332203d3e20323038393135.roa (hash: 2xUP0qecdhpogJJIXpKqaPO0rpU4gp47dCbQRpKimlY=) 3: AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl (hash: xQRFGL0XpyV+vyKZUyzTdC0QxJPg2LA9nVkc0956Kfs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 26 May 2026 01:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:e4:7b:1e:e0:55:6b:2f:e4:b6:75:0d:87:1a:02:23:56:47:12:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC7F9BC30C04B3A236BDF8A430869ECA1A28B324 Validity Not Before: May 25 06:32:27 2026 GMT Not After : May 26 09:45:27 2026 GMT Subject: CN=27FE6781FEFD5A626E0EED189B7D0391DAC30A6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:83:6a:8b:b4:4f:62:9a:a8:3d:4e:e5:60:48: f2:75:e9:c3:44:90:3c:7a:47:b8:3f:db:6c:15:f0: 10:b2:4e:b6:8b:e6:f0:4e:7f:c2:92:c3:22:5c:2f: aa:f5:1e:7c:b6:a5:6d:de:09:cb:7d:30:bf:ee:67: 1a:25:e0:ef:7d:0f:a7:1b:89:c5:f8:e8:a4:44:f9: ac:49:40:71:63:cc:8a:2a:97:13:47:4d:53:ea:1a: e7:80:73:68:97:57:cf:f0:e5:3d:af:69:65:d2:1f: 54:41:a9:7b:cf:f7:dc:86:24:26:e3:ba:c7:ea:b0: dd:95:6f:01:3b:28:e4:38:68:9d:df:b7:0b:9b:3b: 9c:ca:ef:b8:ca:b3:19:fd:29:ff:5f:47:a6:a1:dd: ac:be:19:03:da:79:5a:fb:9a:c1:dd:92:ec:98:45: 37:4d:21:d5:9d:7b:b0:28:a2:a7:6f:9d:8a:b8:75: 1c:4d:08:a3:ac:27:b5:a4:cd:de:a2:f2:85:94:13: 5c:59:df:e3:13:01:1b:4d:ba:ac:80:b1:e4:a7:da: ba:71:77:5e:85:da:74:0f:7d:cd:23:c3:f2:7c:82: 2b:c8:bd:a2:3e:93:ea:71:3d:a9:59:71:4d:37:98: f9:dd:43:e6:dc:6c:97:52:9d:42:42:d8:ef:7b:74: 16:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:FE:67:81:FE:FD:5A:62:6E:0E:ED:18:9B:7D:03:91:DA:C3:0A:6D X509v3 Authority Key Identifier: keyid:AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:f9:21:43:90:9d:ed:9c:69:79:fe:a8:9c:4f:59:7a:9a:f7: 3d:6a:2b:d1:63:e0:50:58:cf:7a:7d:e5:8c:bc:60:6a:7a:a6: 46:99:c7:e9:5d:a5:59:78:fc:dd:dc:87:45:fe:af:b4:28:e7: fb:34:fd:41:44:14:33:07:8d:87:47:95:13:94:0a:86:e4:8d: e6:56:f7:2a:7e:b1:29:6a:7d:68:ef:97:93:16:8c:bd:e6:0b: 49:f1:9e:36:3b:44:54:ea:74:a2:65:d0:f8:20:69:93:b7:be: 07:53:ee:00:8b:2b:10:58:62:44:c0:b3:bb:c7:11:e2:54:76: 97:40:01:c8:46:e8:81:24:95:c8:9c:c9:a8:93:d2:07:b7:e5: 1e:a3:71:95:d1:81:f9:c3:64:3f:9c:c8:ba:6d:4d:21:47:32: d3:74:a1:b9:25:3f:92:f6:aa:7c:6f:5a:57:ac:0f:9a:85:41: e3:d9:c9:41:49:7a:1a:e1:12:f0:09:eb:85:00:8a:e5:63:07: 12:d0:69:16:1f:12:e8:da:64:54:23:f0:29:db:a6:73:14:9a: 06:3f:34:11:70:7d:0f:c8:05:aa:a0:ef:10:40:71:a1:a6:e7: 87:e1:d1:f1:b2:45:7d:23:9a:75:ff:be:fd:cb:9d:c6:46:bd: 4f:d4:f1:97 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUeOR7HuBVay/ktnUNhxoCI1ZHEl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0Ex QTI4QjMyNDAeFw0yNjA1MjUwNjMyMjdaFw0yNjA1MjYwOTQ1MjdaMDMxMTAvBgNV BAMTKDI3RkU2NzgxRkVGRDVBNjI2RTBFRUQxODlCN0QwMzkxREFDMzBBNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrg2qLtE9imqg9TuVgSPJ16cNE kDx6R7g/22wV8BCyTraL5vBOf8KSwyJcL6r1Hny2pW3eCct9ML/uZxol4O99D6cb icX46KRE+axJQHFjzIoqlxNHTVPqGueAc2iXV8/w5T2vaWXSH1RBqXvP99yGJCbj usfqsN2VbwE7KOQ4aJ3ftwubO5zK77jKsxn9Kf9fR6ah3ay+GQPaeVr7msHdkuyY RTdNIdWde7AooqdvnYq4dRxNCKOsJ7Wkzd6i8oWUE1xZ3+MTARtNuqyAseSn2rpx d16F2nQPfc0jw/J8givIvaI+k+pxPalZcU03mPndQ+bcbJdSnUJC2O97dBZhAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUJ/5ngf79WmJuDu0Ym30DkdrDCm0wHwYDVR0j BBgwFoAUrH+bwwwEs6I2vfikMIaeyhoosyQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRjY2I0YjAtZTMwZS00MjZjLTg0ZGMtNDY0ZmQxODk5 MTE2LzEvQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0ExQTI4QjMyNC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0ExQTI4 QjMyNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGNjYjRiMC1l MzBlLTQyNmMtODRkYy00NjRmZDE4OTkxMTYvMS9BQzdGOUJDMzBDMDRCM0EyMzZC REY4QTQzMDg2OUVDQTFBMjhCMzI0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqvkhQ5Cd7Zxpef6onE9Z epr3PWor0WPgUFjPen3ljLxganqmRpnH6V2lWXj83dyHRf6vtCjn+zT9QUQUMweN h0eVE5QKhuSN5lb3Kn6xKWp9aO+XkxaMveYLSfGeNjtEVOp0omXQ+CBpk7e+B1Pu AIsrEFhiRMCzu8cR4lR2l0AByEbogSSVyJzJqJPSB7flHqNxldGB+cNkP5zIum1N IUcy03ShuSU/kvaqfG9aV6wPmoVB49nJQUl6GuES8AnrhQCK5WMHEtBpFh8S6Npk VCPwKdumcxSaBj80EXB9D8gFqqDvEEBxoabnh+HR8bJFfSOadf++/cudxka9T9Tx lw== -----END CERTIFICATE-----Generated at Mon May 25 13:49:20 2026 by rpki-client