$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft File: B3F1737E90F240D7ABB33C72F84D71482FE62679.mft (raw, json) Hash identifier: dbFJwOI5c3e4DROFJTagIwKz092oVDwx0tUFr8S7tX0= Subject key identifier: DB:43:4F:5A:B8:03:1D:01:33:BB:58:C4:47:81:80:D0:F9:7F:70:9E Authority key identifier: B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79 Certificate issuer: /CN=B3F1737E90F240D7ABB33C72F84D71482FE62679 Certificate serial: 3B5214C3F48AC14B2AE50449327FB58941A2BEE2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft Manifest number: 0146 Signing time: Sun 01 Mar 2026 16:01:20 +0000 Manifest this update: Sun 01 Mar 2026 15:56:20 +0000 Manifest next update: Mon 02 Mar 2026 17:26:20 +0000 Files and hashes: 1: 326130373a353463373a356630303a3a2f34342d3434203d3e20323135353737.roa (hash: x50UL+Ve3n2XGikbTbQdFLaQIWslIjcJnasiyHq58lM=) 2: 326130373a353463373a356666653a3a2f34382d3438203d3e20323135353737.roa (hash: FG+PaaelFQQTh0Pl3BlClI1RFrk+FdkeBozLHlfkasU=) 3: 326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa (hash: dERySCDhc3+rlKwMAYMhD9XvddhhgSjXbVZeRoj98gc=) 4: 326130373a353463373a356631303a3a2f34382d3438203d3e20323135353737.roa (hash: 7mCuwzfIey+Hcqy/Vhuj4zUx9bQcgkzpUeh+UNvlKO4=) 5: 326130373a353463373a353939393a3a2f34382d3438203d3e20323136343535.roa (hash: SvnI/kKkXn3yiVhNqVKN9Taah5WCLs8Rw+D4PBjSrbo=) 6: B3F1737E90F240D7ABB33C72F84D71482FE62679.crl (hash: LJvLkwxlFjoYYKUYLU9RVKMchnqnJ82Z4DDN5y6a+NA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 05:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:52:14:c3:f4:8a:c1:4b:2a:e5:04:49:32:7f:b5:89:41:a2:be:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F1737E90F240D7ABB33C72F84D71482FE62679 Validity Not Before: Mar 1 15:56:20 2026 GMT Not After : Mar 2 17:26:20 2026 GMT Subject: CN=DB434F5AB8031D0133BB58C4478180D0F97F709E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ac:3b:4e:9e:93:4b:1c:86:4e:de:c8:4b:be: f7:20:7f:28:ad:c2:12:cb:1f:17:c7:04:21:e9:78: 4f:94:30:31:d8:47:78:11:12:03:6c:4e:ef:69:30: 86:55:ff:2e:60:08:c8:57:de:52:59:c0:73:9e:41: 7d:2d:81:8b:b4:aa:b1:01:1f:bd:b3:da:d2:ec:82: e2:bf:f2:21:42:61:0d:2e:ec:62:a5:e3:a9:fc:f4: 66:67:96:89:21:b1:bb:b3:59:1d:38:f0:04:d1:ce: fb:3b:82:2b:b4:55:75:17:14:d5:ce:f4:dc:15:c5: 86:c5:74:22:a7:5f:5a:63:65:50:a0:90:f6:5a:cb: c3:52:8f:35:1b:17:f2:68:05:a3:be:94:98:70:19: 44:ac:03:a0:80:5f:a8:6c:5b:2d:79:98:8b:03:fc: 5c:7f:30:02:4f:fb:dc:69:0f:f2:c4:fe:a7:f9:39: 13:c3:8d:73:f4:ba:7b:4e:e4:e2:4e:0c:90:09:5c: 96:dd:6f:59:df:4c:b4:16:f3:10:70:06:3e:d1:e1: b4:9e:06:be:ab:18:14:cc:93:7e:1e:f6:13:34:f9: d3:4f:d2:ba:37:28:67:b7:45:91:a1:a9:22:8d:ff: fa:4a:1d:5c:f9:f3:35:46:b2:61:ba:5e:e0:0e:f2: 1f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:43:4F:5A:B8:03:1D:01:33:BB:58:C4:47:81:80:D0:F9:7F:70:9E X509v3 Authority Key Identifier: keyid:B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:01:30:fc:28:d8:f8:da:fd:52:5c:6b:77:2e:00:6a:45:e5: 44:df:a6:dd:32:8d:31:48:80:6b:36:e0:fe:4c:5c:19:86:81: 65:38:f1:1a:8a:35:14:86:ba:2d:9a:43:d7:dd:fb:ef:72:57: e1:ae:9c:5d:a1:a8:6d:04:81:c5:00:06:cf:76:cc:c3:a9:54: 63:7b:97:c8:7a:16:3b:a7:2f:35:00:42:fe:9f:f4:12:b7:b8: 2c:4b:3a:bd:02:4c:70:b2:59:b7:a7:3a:d5:50:4c:c5:8c:28: 16:6e:2b:d7:3c:ba:32:03:ad:19:a7:ea:13:1c:73:ca:da:7f: 66:d6:6e:07:99:77:56:3b:54:0c:70:ec:c0:1a:ef:f1:06:9f: f5:1c:2b:8f:8e:88:a4:03:4f:aa:99:8f:d8:f7:18:f4:1e:b5: d2:fa:c2:89:27:1a:40:21:42:ee:53:2d:0e:74:49:e1:3c:2e: ac:fc:16:39:8a:e7:83:2e:c1:e2:b3:62:6b:55:fc:a2:4e:1d: cb:f8:12:6e:e6:4b:74:b9:43:1f:e7:8d:7a:ed:00:b3:08:4f: 71:5a:7c:55:da:a7:9e:5a:d3:f5:29:a0:f6:99:80:07:0c:2d: a6:f0:4e:a9:72:a8:bb:85:3f:d3:ca:77:56:56:89:2d:98:fb: fa:ef:9e:3d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUO1IUw/SKwUsq5QRJMn+1iUGivuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgy RkU2MjY3OTAeFw0yNjAzMDExNTU2MjBaFw0yNjAzMDIxNzI2MjBaMDMxMTAvBgNV BAMTKERCNDM0RjVBQjgwMzFEMDEzM0JCNThDNDQ3ODE4MEQwRjk3RjcwOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClrDtOnpNLHIZO3shLvvcgfyit whLLHxfHBCHpeE+UMDHYR3gREgNsTu9pMIZV/y5gCMhX3lJZwHOeQX0tgYu0qrEB H72z2tLsguK/8iFCYQ0u7GKl46n89GZnlokhsbuzWR048ATRzvs7giu0VXUXFNXO 9NwVxYbFdCKnX1pjZVCgkPZay8NSjzUbF/JoBaO+lJhwGUSsA6CAX6hsWy15mIsD /Fx/MAJP+9xpD/LE/qf5ORPDjXP0untO5OJODJAJXJbdb1nfTLQW8xBwBj7R4bSe Br6rGBTMk34e9hM0+dNP0ro3KGe3RZGhqSKN//pKHVz58zVGsmG6XuAO8h/xAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU20NPWrgDHQEzu1jER4GA0Pl/cJ4wHwYDVR0j BBgwFoAUs/FzfpDyQNerszxy+E1xSC/mJnkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzIvQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgyRkU2MjY3OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC9CM0YxNzM3RTkwRjI0MEQ3QUJCMzNDNzJG ODRENzE0ODJGRTYyNjc5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzU4MjFjNDdlLWU4MTUtNDJkZS1iZDZiLTE5YTJlMWFlNTY0YS8yL0IzRjE3MzdF OTBGMjQwRDdBQkIzM0M3MkY4NEQ3MTQ4MkZFNjI2NzkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBTATD8 KNj42v1SXGt3LgBqReVE36bdMo0xSIBrNuD+TFwZhoFlOPEaijUUhrotmkPX3fvv clfhrpxdoahtBIHFAAbPdszDqVRje5fIehY7py81AEL+n/QSt7gsSzq9Akxwslm3 pzrVUEzFjCgWbivXPLoyA60Zp+oTHHPK2n9m1m4HmXdWO1QMcOzAGu/xBp/1HCuP joikA0+qmY/Y9xj0HrXS+sKJJxpAIULuUy0OdEnhPC6s/BY5iueDLsHis2JrVfyi Th3L+BJu5kt0uUMf54167QCzCE9xWnxV2qeeWtP1KaD2mYAHDC2m8E6pcqi7hT/T yndWVoktmPv67549 -----END CERTIFICATE-----Generated at Mon Mar 2 00:05:55 2026 by rpki-client