$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.mft File: F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.mft (raw, json) Hash identifier: tGaIsbBZ8F47HpQpwChhJfLNxVq8CcWi5Ul8YUpskA0= Subject key identifier: 03:89:5F:57:31:B7:9D:56:4F:F0:EB:33:6F:E3:D7:EE:54:7C:1B:D7 Authority key identifier: F4:D1:A7:E9:DF:F0:D9:0E:76:0F:B8:7D:56:05:45:8B:A8:70:BF:32 Certificate issuer: /CN=F4D1A7E9DFF0D90E760FB87D5605458BA870BF32 Certificate serial: 628AA74D07265813F5B2E165E7F50B91D1E61FB5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.mft Manifest number: 7A Signing time: Mon 02 Mar 2026 14:37:44 +0000 Manifest this update: Mon 02 Mar 2026 14:32:44 +0000 Manifest next update: Tue 03 Mar 2026 15:21:44 +0000 Files and hashes: 1: F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.crl (hash: AEI9+e56QIUM0Zth7hRsdipy6JyxjzXojIivqo+K6Es=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 15:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:8a:a7:4d:07:26:58:13:f5:b2:e1:65:e7:f5:0b:91:d1:e6:1f:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4D1A7E9DFF0D90E760FB87D5605458BA870BF32 Validity Not Before: Mar 2 14:32:44 2026 GMT Not After : Mar 3 15:21:44 2026 GMT Subject: CN=03895F5731B79D564FF0EB336FE3D7EE547C1BD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e3:b4:4c:b0:bf:92:f2:90:6e:5b:22:dc:f6: 7d:59:7f:a7:12:03:69:73:d2:3b:66:1f:3a:a0:8e: d5:2e:bb:71:14:6d:65:3b:3f:e2:c3:b3:a0:d0:fb: 9d:fc:42:7f:d6:82:a8:4a:9c:75:08:00:ac:46:c9: c0:a5:84:8e:78:84:99:99:d3:5d:27:12:7e:81:e6: e2:89:f8:8e:17:90:9d:8d:5b:65:fb:40:56:f6:c3: 6b:d5:27:d0:51:be:bf:af:83:98:77:cb:8f:f6:84: 4e:56:ce:6b:5b:6a:a2:df:ed:5f:79:db:c3:24:0a: da:9a:17:af:5f:e1:b7:d9:c0:a3:85:da:ab:c5:9e: 6d:ab:37:a3:3b:91:61:61:5b:9a:79:9e:ad:54:00: de:8e:e0:4a:a0:5a:27:af:6d:6d:dd:10:cb:6b:4b: 76:7c:52:c9:52:a3:02:19:0f:c4:ea:59:3c:4a:42: 4c:9c:0b:bd:d9:b8:45:a0:78:cf:2f:d7:37:ee:83: c2:dc:c1:5c:93:a6:d3:24:63:36:37:8c:93:23:3a: 90:b4:50:c7:2c:99:3c:1e:54:bb:db:cc:a8:e6:c4: c6:05:93:5a:e5:0d:e6:19:6d:1d:73:30:c4:47:f2: 51:29:c6:97:3a:c0:0f:11:3b:ee:29:f7:0f:e6:a3: ff:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:89:5F:57:31:B7:9D:56:4F:F0:EB:33:6F:E3:D7:EE:54:7C:1B:D7 X509v3 Authority Key Identifier: keyid:F4:D1:A7:E9:DF:F0:D9:0E:76:0F:B8:7D:56:05:45:8B:A8:70:BF:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:3a:4d:fb:f6:cb:5b:09:3d:50:72:26:49:92:63:58:59:b3: 6a:df:95:80:56:fb:8b:c9:6f:08:57:7e:fb:e4:d7:ad:8c:00: 9a:e7:21:d3:96:4a:76:c5:fd:a2:ce:c9:ea:26:51:4e:5e:61: b2:98:77:9b:e5:8a:da:6b:88:bd:e6:fc:3d:7e:2b:83:82:de: e8:53:5e:04:84:e2:f3:d5:e7:07:60:62:72:37:4b:c6:91:26: 20:39:69:0a:d9:37:4d:f9:e0:eb:dd:23:45:54:9e:cd:0f:40: cf:20:df:7d:16:35:da:46:97:4c:51:68:c2:19:b8:c5:e7:05: 93:b1:d1:34:0a:57:dc:6f:3d:a8:1f:41:51:8f:5a:54:98:7c: 67:f7:65:a2:d6:7e:7d:b9:1b:1c:f5:c8:57:1e:88:81:62:2b: 9f:40:4b:fe:52:ea:7e:73:5d:53:ff:cc:91:c1:00:93:a8:36: 86:0b:ac:00:e8:70:66:07:9a:a9:89:af:45:f5:38:0f:e4:8e: c6:56:e1:44:45:98:bb:44:f0:3b:e6:70:6e:61:a7:23:f8:f1: 99:f9:2b:ee:f4:8c:16:6b:f1:05:e4:a4:74:a9:03:6e:ba:41: 61:81:bd:ae:03:99:74:03:20:94:6e:59:10:c0:8c:58:4f:f8: 9f:9f:be:5c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUYoqnTQcmWBP1suFl5/ULkdHmH7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjREMUE3RTlERkYwRDkwRTc2MEZCODdENTYwNTQ1OEJB ODcwQkYzMjAeFw0yNjAzMDIxNDMyNDRaFw0yNjAzMDMxNTIxNDRaMDMxMTAvBgNV BAMTKDAzODk1RjU3MzFCNzlENTY0RkYwRUIzMzZGRTNEN0VFNTQ3QzFCRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+47RMsL+S8pBuWyLc9n1Zf6cS A2lz0jtmHzqgjtUuu3EUbWU7P+LDs6DQ+538Qn/WgqhKnHUIAKxGycClhI54hJmZ 010nEn6B5uKJ+I4XkJ2NW2X7QFb2w2vVJ9BRvr+vg5h3y4/2hE5WzmtbaqLf7V95 28MkCtqaF69f4bfZwKOF2qvFnm2rN6M7kWFhW5p5nq1UAN6O4EqgWievbW3dEMtr S3Z8UslSowIZD8TqWTxKQkycC73ZuEWgeM8v1zfug8LcwVyTptMkYzY3jJMjOpC0 UMcsmTweVLvbzKjmxMYFk1rlDeYZbR1zMMRH8lEpxpc6wA8RO+4p9w/mo/9xAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUA4lfVzG3nVZP8Oszb+PX7lR8G9cwHwYDVR0j BBgwFoAU9NGn6d/w2Q52D7h9VgVFi6hwvzIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzAvRjREMUE3RTlERkYwRDkwRTc2MEZCODdENTYwNTQ1OEJBODcwQkYzMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNEQxQTdFOURGRjBEOTBFNzYwRkI4N0Q1 NjA1NDU4QkE4NzBCRjMyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzA5NzE4ZjA4LWJiMzktNGEwOS1hNGMwLTFmNDAyNDhhNmQxNS8wL0Y0RDFBN0U5 REZGMEQ5MEU3NjBGQjg3RDU2MDU0NThCQTg3MEJGMzIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAQOk37 9stbCT1QciZJkmNYWbNq35WAVvuLyW8IV3775NetjACa5yHTlkp2xf2izsnqJlFO XmGymHeb5Yraa4i95vw9fiuDgt7oU14EhOLz1ecHYGJyN0vGkSYgOWkK2TdN+eDr 3SNFVJ7ND0DPIN99FjXaRpdMUWjCGbjF5wWTsdE0Clfcbz2oH0FRj1pUmHxn92Wi 1n59uRsc9chXHoiBYiufQEv+Uup+c11T/8yRwQCTqDaGC6wA6HBmB5qpia9F9TgP 5I7GVuFERZi7RPA75nBuYacj+PGZ+Svu9IwWa/EF5KR0qQNuukFhgb2uA5l0AyCU blkQwIxYT/ifn75c -----END CERTIFICATE-----Generated at Tue Mar 3 01:50:25 2026 by rpki-client