$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/E9AE8529E9A69A4FA376F17695E6EB8731823068.mft File: E9AE8529E9A69A4FA376F17695E6EB8731823068.mft (raw, json) Hash identifier: XvuY29TaCxuftR71oPiBZMohIO94gxGOszV+9xOI5p8= Subject key identifier: A8:3F:77:46:5C:07:8B:67:44:47:27:7F:03:C7:4F:89:DC:0B:A0:FC Authority key identifier: E9:AE:85:29:E9:A6:9A:4F:A3:76:F1:76:95:E6:EB:87:31:82:30:68 Certificate issuer: /CN=E9AE8529E9A69A4FA376F17695E6EB8731823068 Certificate serial: 7B9EA780C81EA945F0AD46946A5909446C858078 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/E9AE8529E9A69A4FA376F17695E6EB8731823068.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/E9AE8529E9A69A4FA376F17695E6EB8731823068.mft Manifest number: 22 Signing time: Sun 01 Mar 2026 18:06:19 +0000 Manifest this update: Sun 01 Mar 2026 18:01:19 +0000 Manifest next update: Mon 02 Mar 2026 20:55:19 +0000 Files and hashes: 1: E9AE8529E9A69A4FA376F17695E6EB8731823068.crl (hash: Qsc/bjAZWotDTqfxI7EM1uEDuZOYb5a2i25tth34mWQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/E9AE8529E9A69A4FA376F17695E6EB8731823068.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/E9AE8529E9A69A4FA376F17695E6EB8731823068.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/E9AE8529E9A69A4FA376F17695E6EB8731823068.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 20:55:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:9e:a7:80:c8:1e:a9:45:f0:ad:46:94:6a:59:09:44:6c:85:80:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9AE8529E9A69A4FA376F17695E6EB8731823068 Validity Not Before: Mar 1 18:01:19 2026 GMT Not After : Mar 2 20:55:19 2026 GMT Subject: CN=A83F77465C078B674447277F03C74F89DC0BA0FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:da:16:5c:1b:6d:82:dd:23:64:bb:b5:a7:29: 82:97:d6:d4:17:c2:0b:78:a4:c7:a2:a7:01:e8:fd: 0f:e4:51:fa:0d:ce:6a:8d:55:1f:09:2f:3d:be:de: cb:82:c9:0e:73:52:12:10:c8:34:22:70:e2:57:a6: ef:fe:ba:4c:71:67:86:3c:04:43:f0:89:b1:9f:be: eb:83:d1:62:a4:a8:90:d1:4d:0d:f6:49:a4:ff:1e: 57:1c:9a:6c:8f:9f:da:05:b0:c5:bf:88:97:c6:38: 8d:86:cf:b1:60:65:63:96:43:c2:38:d4:8c:3a:4c: cf:a8:3a:da:2c:82:9f:46:74:75:c9:5a:05:2d:11: 4e:54:34:27:c1:e9:ea:03:0f:0d:8c:40:ec:b6:08: f9:b2:a8:20:13:cf:44:b5:12:33:1d:2c:3f:ff:ba: 94:30:77:f8:6d:65:95:3c:6a:55:65:64:d2:c3:ca: f1:48:a2:9b:16:81:d6:45:a4:4d:52:37:ab:8e:65: f8:a3:1b:76:8d:8a:e1:79:b3:08:0c:ea:7e:0e:a5: 28:bf:48:b7:f1:f3:08:af:21:30:47:57:91:6b:5a: ad:bc:e3:2b:d6:7d:72:d0:4b:3e:ab:32:4e:c3:d0: b9:49:46:de:a4:91:cf:9c:93:75:a6:9d:31:6b:9d: 94:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:3F:77:46:5C:07:8B:67:44:47:27:7F:03:C7:4F:89:DC:0B:A0:FC X509v3 Authority Key Identifier: keyid:E9:AE:85:29:E9:A6:9A:4F:A3:76:F1:76:95:E6:EB:87:31:82:30:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/E9AE8529E9A69A4FA376F17695E6EB8731823068.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/E9AE8529E9A69A4FA376F17695E6EB8731823068.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/E9AE8529E9A69A4FA376F17695E6EB8731823068.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:c4:1b:6d:31:e2:bb:d4:44:39:97:62:8c:aa:0c:7c:0d:36: e3:18:c4:75:52:46:51:90:52:2e:44:fa:df:50:52:0a:8b:4a: 21:47:81:ad:fd:c8:96:eb:9d:5a:2b:b8:0f:5a:54:b2:27:ca: 07:a4:37:7f:cd:cd:63:67:59:b2:8f:c4:d4:c6:b8:c5:25:4b: 73:79:16:49:ab:ff:2d:ce:fd:9b:c1:e0:2f:d9:70:6f:5d:94: cf:d7:0d:72:ee:73:fa:be:d1:a4:7b:a0:b5:c4:3c:2e:24:2f: 2b:da:51:50:59:0d:0b:0c:e2:b9:ee:c4:7b:04:38:2c:fa:de: 17:3a:1a:95:9e:6a:ed:33:cf:7c:b5:50:9d:36:6d:cf:4d:13: dd:11:df:e6:0e:bf:8a:b7:84:3e:7d:8a:49:0c:5c:c7:1d:f4: 03:b3:62:e8:32:cc:e9:0a:a9:fa:6f:69:47:42:8d:78:eb:26: 27:48:dd:65:ba:61:56:71:3b:c8:58:f8:11:3f:27:60:9b:86: 5f:e5:f5:a4:55:e4:67:4b:a7:38:be:07:df:1a:05:5f:33:83: 4d:10:b6:df:46:d4:ef:bd:16:21:0c:69:ed:b4:1d:35:bf:12: 1d:ee:d1:d0:1b:a2:8b:14:e5:49:62:98:4e:bb:04:b1:31:fd: 01:07:bd:07 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUe56ngMgeqUXwrUaUalkJRGyFgHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlBRTg1MjlFOUE2OUE0RkEzNzZGMTc2OTVFNkVCODcz MTgyMzA2ODAeFw0yNjAzMDExODAxMTlaFw0yNjAzMDIyMDU1MTlaMDMxMTAvBgNV BAMTKEE4M0Y3NzQ2NUMwNzhCNjc0NDQ3Mjc3RjAzQzc0Rjg5REMwQkEwRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC32hZcG22C3SNku7WnKYKX1tQX wgt4pMeipwHo/Q/kUfoNzmqNVR8JLz2+3suCyQ5zUhIQyDQicOJXpu/+ukxxZ4Y8 BEPwibGfvuuD0WKkqJDRTQ32SaT/HlccmmyPn9oFsMW/iJfGOI2Gz7FgZWOWQ8I4 1Iw6TM+oOtosgp9GdHXJWgUtEU5UNCfB6eoDDw2MQOy2CPmyqCATz0S1EjMdLD// upQwd/htZZU8alVlZNLDyvFIopsWgdZFpE1SN6uOZfijG3aNiuF5swgM6n4OpSi/ SLfx8wivITBHV5FrWq284yvWfXLQSz6rMk7D0LlJRt6kkc+ck3WmnTFrnZTdAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUqD93RlwHi2dERyd/A8dPidwLoPwwHwYDVR0j BBgwFoAU6a6FKemmmk+jdvF2lebrhzGCMGgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzkvRTlBRTg1MjlFOUE2OUE0RkEzNzZGMTc2OTVFNkVCODczMTgyMzA2OC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvRTlBRTg1MjlFOUE2OUE0RkEzNzZGMTc2OTVFNkVCODczMTgy MzA2OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03 Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvOS9FOUFFODUyOUU5QTY5QTRGQTM3 NkYxNzY5NUU2RUI4NzMxODIzMDY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMQbbTHiu9REOZdijKoM fA024xjEdVJGUZBSLkT631BSCotKIUeBrf3IluudWiu4D1pUsifKB6Q3f83NY2dZ so/E1Ma4xSVLc3kWSav/Lc79m8HgL9lwb12Uz9cNcu5z+r7RpHugtcQ8LiQvK9pR UFkNCwziue7EewQ4LPreFzoalZ5q7TPPfLVQnTZtz00T3RHf5g6/ireEPn2KSQxc xx30A7Ni6DLM6Qqp+m9pR0KNeOsmJ0jdZbphVnE7yFj4ET8nYJuGX+X1pFXkZ0un OL4H3xoFXzODTRC230bU770WIQxp7bQdNb8SHe7R0BuiixTlSWKYTrsEsTH9AQe9 Bw== -----END CERTIFICATE-----Generated at Mon Mar 2 08:23:31 2026 by rpki-client