$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft File: 473F2085BBDEE25875BDA78FE4469ABD64842C90.mft (raw, json) Hash identifier: oFVZsahUYV8tZn1BCs9S0DS6mcjDNbjbEqUyUw+9txU= Subject key identifier: 31:7E:05:DB:A8:65:C4:35:5C:43:83:EE:D8:60:A8:FA:47:76:FE:ED Authority key identifier: 47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90 Certificate issuer: /CN=473F2085BBDEE25875BDA78FE4469ABD64842C90 Certificate serial: 5393CDEE070C523B4D563E9E2B44B5537D9FFF74 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft Manifest number: 0F Signing time: Tue 03 Mar 2026 23:56:27 +0000 Manifest this update: Tue 03 Mar 2026 23:51:27 +0000 Manifest next update: Thu 05 Mar 2026 01:27:27 +0000 Files and hashes: 1: 326130663a316363353a6330303a3a2f34302d3430203d3e20323038373534.roa (hash: 7R/AqvSPd+mjbQXVUntn+5w6+Rg2rnPKWKoHVT2xT+M=) 2: 326130663a316363353a6330303a3a2f34342d3434203d3e20323038373534.roa (hash: CeuYfTbMRgfjzuFv0VeMFMIF0V2bsX3gw5vHgqx/z/I=) 3: 473F2085BBDEE25875BDA78FE4469ABD64842C90.crl (hash: Gx4uc2V4jhUowBOAIZIJSXkHsYqMEhniTX9bdViIMGo=) 4: 326130663a316363353a6330303a3a2f34342d3434203d3e20313337393038.roa (hash: 4dmGplxsB4MdWDNWjWF0Dx41BrwXk8ckrpCB2PWeI6E=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.crl rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Mar 2026 01:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:93:cd:ee:07:0c:52:3b:4d:56:3e:9e:2b:44:b5:53:7d:9f:ff:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473F2085BBDEE25875BDA78FE4469ABD64842C90 Validity Not Before: Mar 3 23:51:27 2026 GMT Not After : Mar 5 01:27:27 2026 GMT Subject: CN=317E05DBA865C4355C4383EED860A8FA4776FEED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7d:f6:b3:51:a8:8d:66:a0:47:de:f7:b1:5a: cc:cd:24:24:35:f7:57:e4:dd:e8:9b:a0:23:ee:d2: 50:14:0b:09:bc:74:88:0c:54:18:46:e7:8a:fd:eb: 98:15:19:b6:99:9e:cb:16:c9:58:dc:2e:92:76:ae: 42:3d:35:0a:a9:29:5f:f6:98:a2:e3:e8:d7:2b:ea: 39:62:94:76:b2:7d:81:57:a2:51:a5:d7:d8:d7:cc: 18:cf:73:af:fb:6b:e7:a9:8e:80:3c:2f:a1:2f:4d: 38:32:36:c6:d3:47:0f:4b:90:14:cf:7e:1c:16:81: a1:ec:9d:0a:1a:e0:79:9c:9c:24:ac:7f:88:d8:56: ac:3f:42:79:81:65:73:eb:22:ca:79:54:cd:c7:36: a2:7c:82:85:16:94:73:1c:c5:5c:90:3f:dc:9d:05: 02:d3:8e:88:0a:71:91:f8:8b:5d:79:00:cc:4c:52: 35:fe:69:16:db:af:73:ef:73:03:c0:79:d2:1c:29: 4a:d7:f5:e5:19:3d:e0:4b:89:93:b5:7c:40:25:c4: c6:05:f7:32:70:17:7b:63:19:0f:60:87:1c:36:be: 5c:5b:b8:b1:2e:74:03:17:0e:7d:2d:51:aa:c8:a8: b4:93:eb:da:83:62:bf:92:77:8e:e9:3a:f9:a4:ba: 28:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:7E:05:DB:A8:65:C4:35:5C:43:83:EE:D8:60:A8:FA:47:76:FE:ED X509v3 Authority Key Identifier: keyid:47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:af:ba:99:0c:cd:53:5c:c1:45:cf:69:43:9b:95:0d:e0:00: d8:7d:f1:c2:cf:f8:23:8c:42:52:c6:c9:cb:f1:0f:fb:ca:bd: 49:63:ac:e4:e8:89:0d:ab:bc:ac:a2:7b:1a:36:35:e2:2d:08: bb:f9:73:40:95:d5:e7:36:72:93:95:05:75:e9:86:c4:50:a2: b9:46:b6:11:b2:a1:91:ac:59:2c:5b:8e:a1:53:82:4c:ac:48: c8:a1:c6:45:87:61:d7:46:83:d5:d3:6f:62:56:53:d0:61:f6: fe:7e:a4:9e:06:52:8b:50:6a:04:e2:47:fd:b4:ba:4b:61:f0: ba:44:60:a5:a5:55:a1:5d:1e:a4:4c:13:df:e2:ce:8e:19:39: cf:f5:a2:0c:33:c0:a7:4a:4a:96:30:9e:57:90:1d:e1:4e:40: 13:76:b7:4a:86:ad:9f:21:37:1e:25:e5:af:46:62:fa:bd:4e: fd:6a:21:55:20:26:bf:2c:ea:b0:65:43:ca:57:2c:72:4c:c4: 75:79:18:6a:79:8d:89:4c:74:20:dd:3c:b1:eb:58:b9:00:49: ab:42:29:11:f7:42:91:22:86:8d:2e:ea:7e:6c:42:4a:19:ea: 1d:07:45:28:28:c1:8d:7e:7d:ae:d4:fe:f4:84:14:5b:4d:01: b8:bb:e1:ad -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUU5PN7gcMUjtNVj6eK0S1U32f/3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczRjIwODVCQkRFRTI1ODc1QkRBNzhGRTQ0NjlBQkQ2 NDg0MkM5MDAeFw0yNjAzMDMyMzUxMjdaFw0yNjAzMDUwMTI3MjdaMDMxMTAvBgNV BAMTKDMxN0UwNURCQTg2NUM0MzU1QzQzODNFRUQ4NjBBOEZBNDc3NkZFRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJffazUaiNZqBH3vexWszNJCQ1 91fk3eiboCPu0lAUCwm8dIgMVBhG54r965gVGbaZnssWyVjcLpJ2rkI9NQqpKV/2 mKLj6Ncr6jlilHayfYFXolGl19jXzBjPc6/7a+epjoA8L6EvTTgyNsbTRw9LkBTP fhwWgaHsnQoa4HmcnCSsf4jYVqw/QnmBZXPrIsp5VM3HNqJ8goUWlHMcxVyQP9yd BQLTjogKcZH4i115AMxMUjX+aRbbr3PvcwPAedIcKUrX9eUZPeBLiZO1fEAlxMYF 9zJwF3tjGQ9ghxw2vlxbuLEudAMXDn0tUarIqLST69qDYr+Sd47pOvmkuijPAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUMX4F26hlxDVcQ4Pu2GCo+kd2/u0wHwYDVR0j BBgwFoAURz8ghbve4lh1vaeP5EaavWSELJAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjgxMmQzZWYtYzVmYy00NWIwLTk1NGEtOGE1MjIxMGMy ZTkwLzIvNDczRjIwODVCQkRFRTI1ODc1QkRBNzhGRTQ0NjlBQkQ2NDg0MkM5MC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC80NzNGMjA4NUJCREVFMjU4NzVCREE3OEZF NDQ2OUFCRDY0ODQyQzkwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y4MTJkM2VmLWM1ZmMtNDViMC05NTRhLThhNTIyMTBjMmU5MC8yLzQ3M0YyMDg1 QkJERUUyNTg3NUJEQTc4RkU0NDY5QUJENjQ4NDJDOTAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCcr7qZ DM1TXMFFz2lDm5UN4ADYffHCz/gjjEJSxsnL8Q/7yr1JY6zk6IkNq7ysonsaNjXi LQi7+XNAldXnNnKTlQV16YbEUKK5RrYRsqGRrFksW46hU4JMrEjIocZFh2HXRoPV 029iVlPQYfb+fqSeBlKLUGoE4kf9tLpLYfC6RGClpVWhXR6kTBPf4s6OGTnP9aIM M8CnSkqWMJ5XkB3hTkATdrdKhq2fITceJeWvRmL6vU79aiFVICa/LOqwZUPKVyxy TMR1eRhqeY2JTHQg3Tyx61i5AEmrQikR90KRIoaNLup+bEJKGeodB0UoKMGNfn2u 1P70hBRbTQG4u+Gt -----END CERTIFICATE-----Generated at Wed Mar 4 19:14:09 2026 by rpki-client