$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft File: 72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft (raw, json) Hash identifier: ame6OCpoK6osBGjyzVtJuvERyAsZ0sW98e2gXKvBJ2c= Subject key identifier: FC:F8:89:1C:0E:B8:A1:11:5A:85:8F:3D:A2:07:8C:9F:27:D7:5C:D1 Authority key identifier: 72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1 Certificate issuer: /CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1 Certificate serial: 74BF118BC73982ABB8F55C79DF0CEFBC751BFAE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft Manifest number: 019A Signing time: Sun 01 Mar 2026 02:54:11 +0000 Manifest this update: Sun 01 Mar 2026 02:49:11 +0000 Manifest next update: Mon 02 Mar 2026 05:20:11 +0000 Files and hashes: 1: AS31184.asa (hash: lpmkTsOkQWRjH6hPbivRUCUrNBqi+kTnEwLPqRlRwbs=) 2: 3139352e37342e34302e302f32322d3234203d3e203331313834.roa (hash: OWTrG12il6+R+m95Ctsd+LQNgEyVIDW3AMDlydaSO3g=) 3: 326131333a363134303a3a2f32392d3332203d3e203331313834.roa (hash: HEAzsbwZSQMPtZWHDUG9J3+dKm/03SetBs7lrO1nkwI=) 4: 72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl (hash: L8QmOOWgzk1jfnoJTmLV1snFoWvsZivy0qViKBo8P6c=) 5: 3139332e32322e3235332e302f32342d3234203d3e203331313834.roa (hash: WrMYNrMKiwcHb7Layep1L0ANnPM7z3AEErZKMOJmYxg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 05:20:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:bf:11:8b:c7:39:82:ab:b8:f5:5c:79:df:0c:ef:bc:75:1b:fa:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1 Validity Not Before: Mar 1 02:49:11 2026 GMT Not After : Mar 2 05:20:11 2026 GMT Subject: CN=FCF8891C0EB8A1115A858F3DA2078C9F27D75CD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:12:5f:7a:4f:c6:b2:f2:d4:a1:cf:f9:cf:cb: de:4e:9c:3c:77:8c:64:96:b9:42:cc:fe:ce:27:f2: 82:ce:22:63:1f:8b:ea:5a:0b:aa:4a:3e:15:15:db: 32:ff:77:91:ad:87:0e:d5:22:e9:4b:50:2c:f0:9c: 3d:42:a1:e2:44:3e:d4:b9:3f:bd:26:b0:03:d0:58: fd:98:ba:fb:31:3e:b5:9a:d7:8b:8f:78:a8:b7:25: 9c:09:e0:1e:d6:36:4b:ba:99:29:fb:7e:80:1f:01: 40:02:87:1e:2f:09:66:8a:b8:17:33:ff:9b:9e:02: 1a:bd:1a:16:02:3e:76:47:2a:25:3f:fe:1b:9b:58: f7:2b:d0:2d:36:11:43:16:27:13:56:b3:f3:6e:fd: 7a:d0:69:e5:f0:c3:27:95:44:88:b2:f6:bf:51:b2: 75:03:63:37:d1:69:82:07:f9:1f:bf:16:31:8a:65: 41:84:ad:e6:92:81:99:dc:64:1f:de:0d:c3:85:1e: 59:82:1d:f7:9f:eb:f5:2e:e8:86:04:65:d9:6f:8a: 64:15:4b:19:b7:81:95:ab:fa:6e:eb:75:8c:99:e3: 3c:ea:04:87:b9:88:52:12:dc:4d:18:44:30:6c:43: dc:82:51:a7:3b:1f:55:a4:c4:2d:8c:f0:47:d1:54: 96:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F8:89:1C:0E:B8:A1:11:5A:85:8F:3D:A2:07:8C:9F:27:D7:5C:D1 X509v3 Authority Key Identifier: keyid:72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:81:4e:fa:21:3d:86:3c:2a:1e:70:53:23:f9:6b:56:c4:b6: 0b:57:be:87:16:46:05:97:e5:a3:d6:08:09:b6:ba:fd:4d:46: 47:91:cb:62:f8:f4:ba:02:28:f1:3a:48:78:59:0b:a1:4a:6d: a8:77:c1:65:6a:6a:45:d6:a6:6b:dd:db:a3:45:a1:46:a5:4d: 9d:9d:0a:1e:91:76:a4:3e:06:0c:a5:5b:4d:0e:11:45:1f:83: f7:aa:91:ee:31:40:b2:ca:e6:c5:54:0e:97:cf:96:c6:83:82: 31:5e:db:93:51:e2:4e:78:9e:07:5b:2c:e7:28:b2:92:09:62: e1:d5:86:e8:9e:5f:c7:75:29:c4:c3:d7:51:51:5f:fe:0b:c7: 05:09:68:52:c7:c8:b1:b5:22:9c:e0:45:48:be:9d:21:94:66: ff:1d:13:a2:70:6d:c2:0e:1b:a4:75:50:ea:db:d4:54:19:68: 6f:ea:ec:7b:61:ba:ce:6b:98:2f:3c:59:1c:f7:95:eb:f6:29: ca:bc:c9:fa:26:f7:88:62:ce:28:8c:36:4c:9b:7f:80:c4:22: e9:dd:fc:44:24:b6:e5:00:2b:3e:9d:ef:38:ad:79:2f:35:b0: e1:18:d0:08:3c:48:4b:12:33:cc:1e:a9:ad:1f:5d:b4:a4:35: 00:c5:5f:34 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdL8Ri8c5gqu49Vx53wzvvHUb+uQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJmM2VlMTY5ZjliZDcxZjc4YTQyZDFhNzJmZTBmMmE4 MjQ4MjJkMTAeFw0yNjAzMDEwMjQ5MTFaFw0yNjAzMDIwNTIwMTFaMDMxMTAvBgNV BAMTKEZDRjg4OTFDMEVCOEExMTE1QTg1OEYzREEyMDc4QzlGMjdENzVDRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4El96T8ay8tShz/nPy95OnDx3 jGSWuULM/s4n8oLOImMfi+paC6pKPhUV2zL/d5Gthw7VIulLUCzwnD1CoeJEPtS5 P70msAPQWP2YuvsxPrWa14uPeKi3JZwJ4B7WNku6mSn7foAfAUAChx4vCWaKuBcz /5ueAhq9GhYCPnZHKiU//hubWPcr0C02EUMWJxNWs/Nu/XrQaeXwwyeVRIiy9r9R snUDYzfRaYIH+R+/FjGKZUGEreaSgZncZB/eDcOFHlmCHfef6/Uu6IYEZdlvimQV Sxm3gZWr+m7rdYyZ4zzqBIe5iFIS3E0YRDBsQ9yCUac7H1WkxC2M8EfRVJZlAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU/PiJHA64oRFahY89ogeMnyfXXNEwHwYDVR0j BBgwFoAUcvPuFp+b1x94pC0acv4PKoJIItEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjgyYjVlMDAtMmFjMy00OWYxLWEyOWItMjZhNWZkZjBm YTQxLzAvNzJGM0VFMTY5RjlCRDcxRjc4QTQyRDFBNzJGRTBGMkE4MjQ4MjJEMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2N2UHVGcC1iMXg5NHBDMGFjdjRQS29K SUl0RS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yODJiNWUwMC0y YWMzLTQ5ZjEtYTI5Yi0yNmE1ZmRmMGZhNDEvMC83MkYzRUUxNjlGOUJENzFGNzhB NDJEMUE3MkZFMEYyQTgyNDgyMkQxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALIFO+iE9hjwqHnBTI/lr VsS2C1e+hxZGBZflo9YICba6/U1GR5HLYvj0ugIo8TpIeFkLoUptqHfBZWpqRdam a93bo0WhRqVNnZ0KHpF2pD4GDKVbTQ4RRR+D96qR7jFAssrmxVQOl8+WxoOCMV7b k1HiTnieB1ss5yiykgli4dWG6J5fx3UpxMPXUVFf/gvHBQloUsfIsbUinOBFSL6d IZRm/x0TonBtwg4bpHVQ6tvUVBlob+rse2G6zmuYLzxZHPeV6/YpyrzJ+ib3iGLO KIw2TJt/gMQi6d38RCS25QArPp3vOK15LzWw4RjQCDxISxIzzB6prR9dtKQ1AMVf NA== -----END CERTIFICATE-----Generated at Sun Mar 1 16:28:49 2026 by rpki-client