$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft File: B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft (raw, json) Hash identifier: q9srMhSAKKj+dpeVe8jqqLrD0vd7hid0ptI4hx1VE/s= Subject key identifier: D8:FE:9D:34:C6:8D:D7:23:1B:C8:27:96:91:3B:9A:E9:C9:9B:10:B7 Authority key identifier: B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65 Certificate issuer: /CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65 Certificate serial: 1C9B8CBF66BCBAEF7351BA0DD3C035609490E019 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft Manifest number: 0145 Signing time: Sun 01 Mar 2026 18:06:21 +0000 Manifest this update: Sun 01 Mar 2026 18:01:21 +0000 Manifest next update: Mon 02 Mar 2026 19:45:21 +0000 Files and hashes: 1: 326130353a646663353a3a2f33322d3332203d3e20323033303639.roa (hash: 1TfiGVzOrsDaGT5s8N1oSkECX3MMsr3gXEgw7UF/3c0=) 2: 326130353a646663353a31303a3a2f34372d3437203d3e20323033303639.roa (hash: t/2Kihb52wxLH3GVF+LrphldGHxVkV2gtesMFke+X4A=) 3: 326130353a646663353a326630303a3a2f34302d3430203d3e20323033303639.roa (hash: ikPIiFRhFNPp4wzJn8w9YCg2eDdJG03INaF7Jeb4D9A=) 4: B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl (hash: 7BqmF+50G3GY1yohxYmlb2tiI/xbf5uqhq9SCA8Z0sE=) 5: 326130353a646663353a623030623a3a2f34382d3438203d3e20323033303639.roa (hash: pe/tp2bLBPulUkbhZe9b5ATBM6Rh5HMZWo4IJTXGPDU=) 6: 326130353a646663353a3a2f34372d3437203d3e20323033303639.roa (hash: tIjYpQd9GyWainiE9GzQFbd7ZqDFGn1arDb1AExxerU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 19:45:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:9b:8c:bf:66:bc:ba:ef:73:51:ba:0d:d3:c0:35:60:94:90:e0:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65 Validity Not Before: Mar 1 18:01:21 2026 GMT Not After : Mar 2 19:45:21 2026 GMT Subject: CN=D8FE9D34C68DD7231BC82796913B9AE9C99B10B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:81:8b:1e:0a:e8:b7:31:dd:86:77:04:c0:69: 23:1c:22:13:b9:e2:2a:74:82:1d:83:b3:f3:c9:fd: 8d:6f:ec:d7:4e:0a:e3:8e:41:3a:cb:33:96:5c:83: 64:2c:39:0c:6a:92:43:93:8e:98:27:31:75:5b:8e: ea:e5:9c:bf:d7:94:ac:f2:83:0c:25:69:e5:10:56: 91:6c:46:04:8e:3f:1f:f3:69:0a:b6:08:fc:17:7b: f8:60:13:80:7c:40:d4:b2:eb:28:2e:ac:ab:d7:6e: 0d:c1:5c:c5:fb:f3:d2:c5:69:f4:83:bf:78:6b:78: 25:e5:15:40:a7:b2:02:d4:87:dc:27:6d:94:82:24: 6f:6a:0d:fb:65:b1:d1:c4:01:b1:68:02:de:cf:9f: 9f:ca:ef:76:10:18:9b:2a:57:ef:af:09:62:10:30: ff:f9:a6:05:e2:87:53:75:eb:0b:d2:3d:87:0a:02: 83:63:4a:e2:33:66:fe:1c:02:4d:cf:45:a9:43:56: 62:68:3c:49:15:ee:00:ce:8e:b1:6c:eb:e5:c0:c3: 72:47:d9:5d:53:df:6b:2a:09:8b:fe:47:69:82:fd: df:c1:eb:19:3a:34:03:ee:a3:d5:0c:15:f5:89:88: b6:0f:bf:b7:29:a4:6f:91:4e:78:bd:20:da:79:d1: e3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:FE:9D:34:C6:8D:D7:23:1B:C8:27:96:91:3B:9A:E9:C9:9B:10:B7 X509v3 Authority Key Identifier: keyid:B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:2e:e5:d0:7c:da:72:f6:06:fe:74:74:f1:4e:40:75:c7:7a: 4c:c7:3b:9e:d3:00:0a:44:06:29:b6:07:40:48:c3:fa:a9:e8: d6:c2:1c:6d:9a:d1:97:ea:c4:8d:e3:48:eb:84:a7:d3:7d:97: a5:b9:4f:96:81:de:72:b8:c9:0d:1a:14:e0:c7:ed:dc:99:bb: 04:21:4f:e7:55:9c:8b:00:74:d9:b4:59:4f:2d:a1:9a:3d:96: ec:ca:b7:c6:a6:02:12:8d:5e:0e:ad:44:99:50:54:65:4e:4f: e7:bd:d4:d9:4d:85:a2:cb:d0:11:58:2d:b6:42:97:2e:4f:28: 93:5d:16:77:76:45:bc:0a:fb:f4:7e:b9:2b:06:ae:e1:f7:4f: 58:a9:dd:55:e1:22:da:d6:8a:c2:c5:46:0d:cd:dc:e0:f6:90: dc:f0:eb:33:cc:62:b7:d0:29:d1:9c:ea:df:62:e2:7b:2b:a9: 27:a0:5c:9b:b4:44:d0:ab:d4:b9:a7:b7:1e:6b:8a:3d:14:a3: 5a:12:c4:4b:f8:34:bc:23:34:b0:ba:0e:75:1f:81:c7:ff:be: d1:d9:d8:96:65:d4:46:1e:9c:6a:3f:96:e1:33:a3:8d:53:8e: 1e:1a:eb:a4:31:77:8e:a6:e2:98:0f:b4:d9:b8:83:d6:da:8f: c7:47:cf:f4 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUHJuMv2a8uu9zUboN08A1YJSQ4BkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY0NzlFMDkwNEIzMDE5NzVCMTlEMkJGRjQyQkUwOERC RkQ2OEQ2NTAeFw0yNjAzMDExODAxMjFaFw0yNjAzMDIxOTQ1MjFaMDMxMTAvBgNV BAMTKEQ4RkU5RDM0QzY4REQ3MjMxQkM4Mjc5NjkxM0I5QUU5Qzk5QjEwQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqgYseCui3Md2GdwTAaSMcIhO5 4ip0gh2Ds/PJ/Y1v7NdOCuOOQTrLM5Zcg2QsOQxqkkOTjpgnMXVbjurlnL/XlKzy gwwlaeUQVpFsRgSOPx/zaQq2CPwXe/hgE4B8QNSy6ygurKvXbg3BXMX789LFafSD v3hreCXlFUCnsgLUh9wnbZSCJG9qDftlsdHEAbFoAt7Pn5/K73YQGJsqV++vCWIQ MP/5pgXih1N16wvSPYcKAoNjSuIzZv4cAk3PRalDVmJoPEkV7gDOjrFs6+XAw3JH 2V1T32sqCYv+R2mC/d/B6xk6NAPuo9UMFfWJiLYPv7cppG+RTni9INp50eMtAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU2P6dNMaN1yMbyCeWkTua6cmbELcwHwYDVR0j BBgwFoAUtkeeCQSzAZdbGdK/9Cvgjb/WjWUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzkvQjY0NzlFMDkwNEIzMDE5NzVCMTlEMkJGRjQyQkUwOERCRkQ2OEQ2NS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQjY0NzlFMDkwNEIzMDE5NzVCMTlEMkJGRjQyQkUwOERCRkQ2 OEQ2NS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03 Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvOS9CNjQ3OUUwOTA0QjMwMTk3NUIx OUQyQkZGNDJCRTA4REJGRDY4RDY1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFi7l0HzacvYG/nR08U5A dcd6TMc7ntMACkQGKbYHQEjD+qno1sIcbZrRl+rEjeNI64Sn032XpblPloHecrjJ DRoU4Mft3Jm7BCFP51WciwB02bRZTy2hmj2W7Mq3xqYCEo1eDq1EmVBUZU5P573U 2U2FosvQEVgttkKXLk8ok10Wd3ZFvAr79H65Kwau4fdPWKndVeEi2taKwsVGDc3c 4PaQ3PDrM8xit9Ap0Zzq32LieyupJ6Bcm7RE0KvUuae3HmuKPRSjWhLES/g0vCM0 sLoOdR+Bx/++0dnYlmXURh6caj+W4TOjjVOOHhrrpDF3jqbimA+02biD1tqPx0fP 9A== -----END CERTIFICATE-----Generated at Mon Mar 2 07:29:12 2026 by rpki-client