$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft File: 879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft (raw, json) Hash identifier: a78lwWqc4d4UlyZ1WNEhw0V8yv8wxIfmS7bWLXr4PI4= Subject key identifier: 2B:DC:ED:17:49:D8:9A:AE:AD:D6:EE:10:1A:32:37:6D:CA:E1:83:E2 Authority key identifier: 87:92:80:A7:D9:E6:DD:DD:CC:B2:9E:9A:77:81:9D:5C:E3:82:31:85 Certificate issuer: /CN=879280A7D9E6DDDDCCB29E9A77819D5CE3823185 Certificate serial: 3D6A1F5C8DF88F4069784D57807CB30E075BD2CC Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft Manifest number: AE Signing time: Tue 21 Apr 2026 09:33:30 +0000 Manifest this update: Tue 21 Apr 2026 09:28:30 +0000 Manifest next update: Wed 22 Apr 2026 10:35:30 +0000 Files and hashes: 1: 879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl (hash: NO9EpAX85gkrmX6PSGytLUbOYyfw1sEBEjg31WkRwQQ=) 2: 326130623a346530373a6362393a3a2f34382d3438203d3e20333936393832.roa (hash: dqTuq88lK2siPMjsitpQHSHuFkGIuzl+tsULr9aboBE=) 3: 326130623a346530373a6330303a3a2f33382d3438203d3e20323135373630.roa (hash: YPrQ7rMdq3JvlF7MZ9xUnQFGrFDCIgYUVgYATMFPJvs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Apr 2026 21:47:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:6a:1f:5c:8d:f8:8f:40:69:78:4d:57:80:7c:b3:0e:07:5b:d2:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=879280A7D9E6DDDDCCB29E9A77819D5CE3823185 Validity Not Before: Apr 21 09:28:30 2026 GMT Not After : Apr 22 10:35:30 2026 GMT Subject: CN=2BDCED1749D89AAEADD6EE101A32376DCAE183E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:78:25:fd:4f:59:a1:a9:95:4e:2a:bd:2e:6f: 40:8e:c3:aa:31:21:5f:14:f5:ac:54:90:c3:bf:f2: 59:5d:ea:64:e7:09:a1:5b:07:06:bd:09:b8:45:d6: 81:36:f0:09:2a:3e:b2:9c:f6:d5:4e:55:f9:03:15: ac:09:bd:4b:d5:65:31:57:29:f4:71:53:00:7d:5a: 12:9f:af:b6:a7:36:c9:98:28:d6:bc:58:42:c6:fd: b9:16:5d:76:71:0f:7b:c2:77:4d:9f:f9:12:b3:35: 2b:b0:32:ae:7a:4d:bd:e2:d5:5e:31:1d:2b:79:e8: 0d:e0:34:fe:27:4b:d7:6d:49:79:ae:7e:a5:16:31: 44:13:29:0a:62:1a:ff:07:a2:d1:54:51:91:4d:b3: 3a:51:f7:de:fb:7d:3b:f6:07:15:98:ce:ea:bf:2b: 66:3f:f4:95:60:ce:f8:21:86:f7:8e:5c:58:63:32: 33:12:95:c7:2b:c3:45:f8:bb:86:29:0f:75:24:29: 22:56:eb:42:0b:21:1b:9e:51:4c:06:c7:7c:75:9d: 47:63:80:7c:eb:9f:2f:07:52:9e:8f:a9:ed:bd:2c: dc:a8:e9:77:d0:13:43:0d:64:ec:c4:08:cd:bd:9e: 50:09:e8:bf:9c:c6:2e:52:17:cc:98:8a:23:c7:e2: 6e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DC:ED:17:49:D8:9A:AE:AD:D6:EE:10:1A:32:37:6D:CA:E1:83:E2 X509v3 Authority Key Identifier: keyid:87:92:80:A7:D9:E6:DD:DD:CC:B2:9E:9A:77:81:9D:5C:E3:82:31:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:68:6c:a0:24:de:4e:0b:ea:e0:76:4a:43:5c:14:29:fa:89: 7c:75:79:9e:51:1c:82:80:d8:96:dd:de:ad:32:8a:cf:8a:e4: 24:46:ea:28:9b:e5:54:8d:aa:39:8f:c3:31:2d:ed:da:b2:45: 79:98:0d:a6:ec:31:ab:09:0c:45:e9:63:14:83:5d:d6:69:f8: 74:6e:c0:8b:a3:19:4e:0a:72:89:c9:ca:f8:36:fd:9e:75:fa: 23:42:0b:b3:44:af:93:ee:8a:ee:b5:0f:74:80:6b:ed:f8:17: 04:78:1c:84:49:0d:d8:fa:68:79:e3:17:c5:2c:61:e0:3a:d8: 04:a7:ee:97:da:11:a8:4f:91:15:da:84:46:54:9e:b9:4a:dd: 9f:07:b9:39:31:f1:64:7d:7c:39:3b:17:74:c2:2d:93:c1:73: 7e:c8:31:65:23:1a:f4:ff:49:a5:57:22:51:d7:22:8f:db:27: 19:28:51:ff:da:4c:29:7e:dd:47:10:0d:5b:67:56:18:f6:43: 42:8e:fb:f9:19:ea:aa:90:9a:45:2e:0f:9e:81:fd:19:fa:19: b3:2f:84:8d:90:e3:8c:ce:99:e3:4c:3c:e4:4d:ca:9c:9e:25: 75:16:aa:90:e1:c0:a5:41:6a:cd:71:67:8a:51:3a:8f:2a:40: 1f:08:e7:0a -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUPWofXI34j0BpeE1XgHyzDgdb0swwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNF MzgyMzE4NTAeFw0yNjA0MjEwOTI4MzBaFw0yNjA0MjIxMDM1MzBaMDMxMTAvBgNV BAMTKDJCRENFRDE3NDlEODlBQUVBREQ2RUUxMDFBMzIzNzZEQ0FFMTgzRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDweCX9T1mhqZVOKr0ub0COw6ox IV8U9axUkMO/8lld6mTnCaFbBwa9CbhF1oE28AkqPrKc9tVOVfkDFawJvUvVZTFX KfRxUwB9WhKfr7anNsmYKNa8WELG/bkWXXZxD3vCd02f+RKzNSuwMq56Tb3i1V4x HSt56A3gNP4nS9dtSXmufqUWMUQTKQpiGv8HotFUUZFNszpR9977fTv2BxWYzuq/ K2Y/9JVgzvghhveOXFhjMjMSlccrw0X4u4YpD3UkKSJW60ILIRueUUwGx3x1nUdj gHzrny8HUp6Pqe29LNyo6XfQE0MNZOzECM29nlAJ6L+cxi5SF8yYiiPH4m69AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUK9ztF0nYmq6t1u4QGjI3bcrhg+IwHwYDVR0j BBgwFoAUh5KAp9nm3d3Msp6ad4GdXOOCMYUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2 ZDAzLzEvODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNFMzgyMzE4NS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNFMzgy MzE4NS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mN2Q5MjU1OC0y NThlLTRiNDQtYWQxNi04YzEwMjJjNDZkMDMvMS84NzkyODBBN0Q5RTZEREREQ0NC MjlFOUE3NzgxOUQ1Q0UzODIzMTg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqmhsoCTeTgvq4HZKQ1wU KfqJfHV5nlEcgoDYlt3erTKKz4rkJEbqKJvlVI2qOY/DMS3t2rJFeZgNpuwxqwkM ReljFINd1mn4dG7Ai6MZTgpyicnK+Db9nnX6I0ILs0Svk+6K7rUPdIBr7fgXBHgc hEkN2PpoeeMXxSxh4DrYBKful9oRqE+RFdqERlSeuUrdnwe5OTHxZH18OTsXdMIt k8FzfsgxZSMa9P9JpVciUdcij9snGShR/9pMKX7dRxANW2dWGPZDQo77+RnqqpCa RS4PnoH9GfoZsy+EjZDjjM6Z40w85E3KnJ4ldRaqkOHApUFqzXFnilE6jypAHwjn Cg== -----END CERTIFICATE-----Generated at Tue Apr 21 13:38:47 2026 by rpki-client