$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft File: D36546790928F44FF74C564231471FA1D8D2A97B.mft (raw, json) Hash identifier: pPfxA2y+olhnz8VvURXk0E9gAVLKmRv5e2je/L8d0nA= Subject key identifier: B7:63:D4:FD:C0:EE:EE:C9:FE:80:93:32:E8:3A:6C:82:F0:E9:6F:95 Authority key identifier: D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B Certificate issuer: /CN=D36546790928F44FF74C564231471FA1D8D2A97B Certificate serial: 6B4DB4744863A54BE98751F54F991A6A51CFE495 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft Manifest number: DA Signing time: Sat 18 Apr 2026 18:21:03 +0000 Manifest this update: Sat 18 Apr 2026 18:16:03 +0000 Manifest next update: Sun 19 Apr 2026 22:19:03 +0000 Files and hashes: 1: D36546790928F44FF74C564231471FA1D8D2A97B.crl (hash: b4VY5icF0pfMpRF4nRyN8P4mtANkJ28GNuJ9uPlng9g=) 2: 326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa (hash: Uw0Yd63FHiLbrVWXi+u/Khr5x1SAZF46bRDWajH7ZJ4=) 3: 326130363a313238333a626434313a3a2f34382d313238203d3e20323130373936.roa (hash: dEQxNzWGRiNVE6wnRySg0Zjbuji/RIwRR1DUgWYNf80=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 Apr 2026 19:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:4d:b4:74:48:63:a5:4b:e9:87:51:f5:4f:99:1a:6a:51:cf:e4:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D36546790928F44FF74C564231471FA1D8D2A97B Validity Not Before: Apr 18 18:16:03 2026 GMT Not After : Apr 19 22:19:03 2026 GMT Subject: CN=B763D4FDC0EEEEC9FE809332E83A6C82F0E96F95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f8:32:9b:af:1e:be:1b:51:96:4e:9e:ac:b0: b6:20:ac:20:07:88:b9:90:64:a3:45:33:25:8a:2e: 95:31:ad:0b:bc:24:3a:53:9d:b4:cf:37:d2:ba:9f: 98:9e:16:7e:95:ed:1b:ca:4e:1e:ac:12:8e:47:8f: 98:0e:4a:da:00:bd:e4:e1:e0:84:71:94:26:05:ea: 9a:d4:56:d1:70:3b:20:26:54:33:f4:8b:79:6c:82: 00:eb:8a:95:49:80:45:18:58:01:99:b9:50:ad:db: ee:c5:3b:f7:d7:fd:7f:a5:b3:e8:e0:1c:80:f6:2e: 73:de:e5:f0:9f:6d:95:ee:73:d0:b6:9b:a2:fb:9a: 4d:d9:bc:e1:1f:f8:10:de:8b:69:ad:02:ed:c3:0c: 70:57:e7:89:07:86:7a:e1:c5:bd:67:f3:a5:b3:8a: e2:fb:f3:cc:89:21:9a:e8:84:2d:4e:96:0b:23:99: 9e:70:25:3c:a2:e9:c0:ac:28:ae:93:54:30:66:07: 4d:61:36:94:de:34:30:a0:81:a9:bb:64:28:54:90: 59:1f:5b:1a:81:08:1e:4f:72:b2:ef:61:6d:69:3f: 78:5b:06:17:ff:f3:64:b8:6d:0c:71:b5:4d:c3:14: 08:ce:81:72:31:56:4d:3c:86:80:02:36:df:40:26: d2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:63:D4:FD:C0:EE:EE:C9:FE:80:93:32:E8:3A:6C:82:F0:E9:6F:95 X509v3 Authority Key Identifier: keyid:D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:90:fe:65:1a:b3:00:40:db:e0:b4:08:ce:fd:15:12:d3:82: bb:14:dc:d4:7c:11:cf:07:d2:69:60:74:35:07:73:bb:20:e4: 55:aa:60:02:99:49:1c:de:be:63:3a:31:47:c4:f1:4f:87:01: 69:ce:97:ef:c1:fa:5f:f0:76:ea:26:d9:6b:27:6c:71:9f:cc: 46:39:d0:27:cb:6a:e4:50:db:b6:c0:8a:8b:e7:d4:02:32:61: 89:52:81:66:4e:c3:4f:73:f5:5a:36:a5:a3:91:65:b2:87:dc: 6e:42:71:27:74:53:28:0c:23:3a:a1:3b:c8:4a:05:07:aa:33: 45:b2:dc:bb:77:98:3b:44:50:96:14:9c:56:ab:19:e0:d7:5f: b8:5b:05:a0:ee:59:43:b2:e7:26:1f:4f:4c:a7:59:e2:f5:f7: 83:55:e9:45:46:cd:00:40:6f:92:98:fb:cc:80:12:80:2a:7d: 46:21:72:21:3c:71:9e:10:cd:f0:71:51:d9:dd:03:51:46:ae: 27:68:cb:a9:5e:16:b3:8e:5e:4c:59:39:21:ec:23:8e:70:4b: 2b:8e:6b:cd:3f:34:d6:04:15:03:0b:5b:1a:6e:73:89:e6:b5: 43:0a:06:dc:ce:16:d1:ae:43:69:08:9f:49:97:1d:e6:30:fc: bf:79:3f:4b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUa020dEhjpUvph1H1T5kaalHP5JUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM2NTQ2NzkwOTI4RjQ0RkY3NEM1NjQyMzE0NzFGQTFE OEQyQTk3QjAeFw0yNjA0MTgxODE2MDNaFw0yNjA0MTkyMjE5MDNaMDMxMTAvBgNV BAMTKEI3NjNENEZEQzBFRUVFQzlGRTgwOTMzMkU4M0E2QzgyRjBFOTZGOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn+DKbrx6+G1GWTp6ssLYgrCAH iLmQZKNFMyWKLpUxrQu8JDpTnbTPN9K6n5ieFn6V7RvKTh6sEo5Hj5gOStoAveTh 4IRxlCYF6prUVtFwOyAmVDP0i3lsggDripVJgEUYWAGZuVCt2+7FO/fX/X+ls+jg HID2LnPe5fCfbZXuc9C2m6L7mk3ZvOEf+BDei2mtAu3DDHBX54kHhnrhxb1n86Wz iuL788yJIZrohC1OlgsjmZ5wJTyi6cCsKK6TVDBmB01hNpTeNDCggam7ZChUkFkf WxqBCB5PcrLvYW1pP3hbBhf/82S4bQxxtU3DFAjOgXIxVk08hoACNt9AJtJRAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUt2PU/cDu7sn+gJMy6DpsgvDpb5UwHwYDVR0j BBgwFoAU02VGeQko9E/3TFZCMUcfodjSqXswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjg4NDQzMTgtMzVkNy00ODJlLWJiZDUtYjYyNGNmMGIy MDQxLzEvRDM2NTQ2NzkwOTI4RjQ0RkY3NEM1NjQyMzE0NzFGQTFEOEQyQTk3Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi9EMzY1NDY3OTA5MjhGNDRGRjc0QzU2NDIz MTQ3MUZBMUQ4RDJBOTdCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I4ODQ0MzE4LTM1ZDctNDgyZS1iYmQ1LWI2MjRjZjBiMjA0MS8xL0QzNjU0Njc5 MDkyOEY0NEZGNzRDNTY0MjMxNDcxRkExRDhEMkE5N0IubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCAkP5l GrMAQNvgtAjO/RUS04K7FNzUfBHPB9JpYHQ1B3O7IORVqmACmUkc3r5jOjFHxPFP hwFpzpfvwfpf8HbqJtlrJ2xxn8xGOdAny2rkUNu2wIqL59QCMmGJUoFmTsNPc/Va NqWjkWWyh9xuQnEndFMoDCM6oTvISgUHqjNFsty7d5g7RFCWFJxWqxng11+4WwWg 7llDsucmH09Mp1ni9feDVelFRs0AQG+SmPvMgBKAKn1GIXIhPHGeEM3wcVHZ3QNR Rq4naMupXhazjl5MWTkh7COOcEsrjmvNPzTWBBUDC1sabnOJ5rVDCgbczhbRrkNp CJ9Jlx3mMPy/eT9L -----END CERTIFICATE-----Generated at Sun Apr 19 05:43:07 2026 by rpki-client