$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft File: B3F1737E90F240D7ABB33C72F84D71482FE62679.mft (raw, json) Hash identifier: +KzXYEYDHFDeaP5wt18kuBzK08TFw7hbjt0zZCyGTkk= Subject key identifier: 57:06:D2:C0:94:E7:5E:5E:D6:04:97:D7:7A:92:1F:3B:69:65:57:57 Authority key identifier: B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79 Certificate issuer: /CN=B3F1737E90F240D7ABB33C72F84D71482FE62679 Certificate serial: 51061F5748E09344C1C13ECEE7954591F576E902 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft Manifest number: 0184 Signing time: Thu 16 Apr 2026 16:30:27 +0000 Manifest this update: Thu 16 Apr 2026 16:25:27 +0000 Manifest next update: Fri 17 Apr 2026 16:31:27 +0000 Files and hashes: 1: 326130373a353463373a356631303a3a2f34382d3438203d3e20323135353737.roa (hash: 7mCuwzfIey+Hcqy/Vhuj4zUx9bQcgkzpUeh+UNvlKO4=) 2: 326130373a353463373a353939393a3a2f34382d3438203d3e20323136343535.roa (hash: SvnI/kKkXn3yiVhNqVKN9Taah5WCLs8Rw+D4PBjSrbo=) 3: 326130373a353463373a356630303a3a2f34342d3434203d3e20323135353737.roa (hash: x50UL+Ve3n2XGikbTbQdFLaQIWslIjcJnasiyHq58lM=) 4: B3F1737E90F240D7ABB33C72F84D71482FE62679.crl (hash: JHQitPxoD7GACDlpdq4OuIpkV5Nkat/ZkqfQd72HlNQ=) 5: 326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa (hash: dERySCDhc3+rlKwMAYMhD9XvddhhgSjXbVZeRoj98gc=) 6: 326130373a353463373a356666653a3a2f34382d3438203d3e20323135353737.roa (hash: FG+PaaelFQQTh0Pl3BlClI1RFrk+FdkeBozLHlfkasU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 16:31:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:06:1f:57:48:e0:93:44:c1:c1:3e:ce:e7:95:45:91:f5:76:e9:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F1737E90F240D7ABB33C72F84D71482FE62679 Validity Not Before: Apr 16 16:25:27 2026 GMT Not After : Apr 17 16:31:27 2026 GMT Subject: CN=5706D2C094E75E5ED60497D77A921F3B69655757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b5:d4:83:28:0f:f8:4a:3c:d7:5a:84:2e:f6: 01:cb:7a:03:e7:d1:2d:18:b3:61:39:e0:7b:04:b0: 85:fa:3a:56:e5:c0:79:f2:4b:54:46:c4:3a:51:e5: f3:13:1b:f2:4e:f5:cd:f2:b1:a4:c0:04:9c:50:12: a4:c7:e9:01:be:4c:4a:bf:a3:fa:8a:ec:78:d9:98: 2e:4b:36:f7:c7:73:6d:90:a2:36:90:bb:c7:57:4d: 2a:c7:85:76:e1:e6:7d:f2:5b:18:d8:4c:70:0a:46: bd:b7:9c:69:70:cc:f0:76:60:5b:57:14:bc:44:a4: b5:2b:15:01:8a:ce:e0:b7:14:ec:0f:2a:cd:38:8a: 3d:94:c6:cd:f2:b6:03:c8:89:a2:5c:14:c8:d6:55: 93:4c:3b:72:df:b7:64:6f:e6:94:f9:63:b3:98:74: 92:ac:f3:b8:82:cf:36:fd:89:25:48:d3:7d:6b:47: 22:75:8a:b8:7d:10:c4:59:96:e9:15:98:a8:d6:fd: de:65:fd:b5:ce:e0:7d:86:53:95:66:21:d0:05:a4: 5f:8f:eb:87:fd:9e:71:c8:03:d6:6f:03:c9:4d:75: 58:46:97:30:2f:6f:e4:0f:95:e8:7d:50:39:a0:a3: dd:a5:77:5b:e6:4c:a1:86:1e:c1:e2:2f:ee:bf:b7: 3c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:06:D2:C0:94:E7:5E:5E:D6:04:97:D7:7A:92:1F:3B:69:65:57:57 X509v3 Authority Key Identifier: keyid:B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:71:6e:8e:55:df:05:f9:29:8d:cf:37:b8:46:95:bd:1a:e4: e4:64:51:c9:2d:b4:57:8b:3d:e5:91:c4:e3:93:6d:a3:84:85: 83:f6:3e:62:d2:38:57:73:fb:71:a5:84:84:ca:d2:a5:97:1a: 58:31:6e:98:14:0c:02:cc:9b:f8:fc:0a:c2:e8:c8:69:2d:73: f3:41:dd:06:1d:c6:e5:0b:e2:95:86:71:28:3b:89:34:76:47: 55:65:e4:b5:5b:a1:39:e9:46:43:0a:a8:09:50:d9:87:54:b4: f7:07:81:f0:d5:52:20:41:94:65:e1:41:38:54:1f:e1:2c:b8: 73:bf:22:cd:3c:e2:e5:d8:09:c3:51:96:45:6c:bb:12:2a:a7: 2e:7d:9d:29:7f:60:1a:05:9d:aa:9a:d4:9e:3a:66:11:b9:ed: 2c:6f:cd:0e:e8:d6:a3:98:fc:da:22:dd:b3:94:49:7d:a7:0f: bc:bd:f6:93:45:f0:68:92:f2:19:a2:c9:df:e0:86:90:f6:06: 49:1b:3f:8e:20:20:a4:33:58:81:1d:36:7b:02:69:cb:b5:56: 46:a4:f5:19:7d:9e:ed:17:db:c5:f4:9c:e0:0d:a4:16:be:3e: e4:6a:1a:1a:35:59:ff:39:d9:41:37:81:2d:2e:81:17:4c:6f: 14:0b:bf:78 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUUQYfV0jgk0TBwT7O55VFkfV26QIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgy RkU2MjY3OTAeFw0yNjA0MTYxNjI1MjdaFw0yNjA0MTcxNjMxMjdaMDMxMTAvBgNV BAMTKDU3MDZEMkMwOTRFNzVFNUVENjA0OTdENzdBOTIxRjNCNjk2NTU3NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUtdSDKA/4SjzXWoQu9gHLegPn 0S0Ys2E54HsEsIX6OlblwHnyS1RGxDpR5fMTG/JO9c3ysaTABJxQEqTH6QG+TEq/ o/qK7HjZmC5LNvfHc22QojaQu8dXTSrHhXbh5n3yWxjYTHAKRr23nGlwzPB2YFtX FLxEpLUrFQGKzuC3FOwPKs04ij2Uxs3ytgPIiaJcFMjWVZNMO3Lft2Rv5pT5Y7OY dJKs87iCzzb9iSVI031rRyJ1irh9EMRZlukVmKjW/d5l/bXO4H2GU5VmIdAFpF+P 64f9nnHIA9ZvA8lNdVhGlzAvb+QPleh9UDmgo92ld1vmTKGGHsHiL+6/tzyXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUVwbSwJTnXl7WBJfXepIfO2llV1cwHwYDVR0j BBgwFoAUs/FzfpDyQNerszxy+E1xSC/mJnkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzIvQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgyRkU2MjY3OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC9CM0YxNzM3RTkwRjI0MEQ3QUJCMzNDNzJG ODRENzE0ODJGRTYyNjc5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzU4MjFjNDdlLWU4MTUtNDJkZS1iZDZiLTE5YTJlMWFlNTY0YS8yL0IzRjE3MzdF OTBGMjQwRDdBQkIzM0M3MkY4NEQ3MTQ4MkZFNjI2NzkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAAcW6O Vd8F+SmNzze4RpW9GuTkZFHJLbRXiz3lkcTjk22jhIWD9j5i0jhXc/txpYSEytKl lxpYMW6YFAwCzJv4/ArC6MhpLXPzQd0GHcblC+KVhnEoO4k0dkdVZeS1W6E56UZD CqgJUNmHVLT3B4Hw1VIgQZRl4UE4VB/hLLhzvyLNPOLl2AnDUZZFbLsSKqcufZ0p f2AaBZ2qmtSeOmYRue0sb80O6NajmPzaIt2zlEl9pw+8vfaTRfBokvIZosnf4IaQ 9gZJGz+OICCkM1iBHTZ7AmnLtVZGpPUZfZ7tF9vF9JzgDaQWvj7kahoaNVn/OdlB N4EtLoEXTG8UC794 -----END CERTIFICATE-----Generated at Fri Apr 17 09:34:19 2026 by rpki-client