$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft File: 71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft (raw, json) Hash identifier: InlWGXScLigPyRm5aNPw+oDeiHDXmEJWmfOAFmiTIR4= Subject key identifier: 40:31:9F:FA:05:44:BC:EE:6B:38:63:33:B8:4C:6C:F7:A3:B6:C4:46 Authority key identifier: 71:AD:BC:B8:05:EE:EE:44:A7:FD:C0:7C:A5:4A:D6:61:0C:81:E1:B3 Certificate issuer: /CN=71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3 Certificate serial: 3500F3642249505E1975BEFA00D66775F9D2A238 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft Manifest number: 23 Signing time: Sun 01 Mar 2026 07:25:06 +0000 Manifest this update: Sun 01 Mar 2026 07:20:06 +0000 Manifest next update: Mon 02 Mar 2026 07:28:06 +0000 Files and hashes: 1: 71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl (hash: +3eRE+3hLD6cl8a79LjoBF6U8Zya+aocsybcjO9L+eM=) 2: 326130623a346530373a353030303a3a2f34382d3438203d3e20323135363835.roa (hash: hC1tSwtk6P/n7XKD/XE88SOcdq8LuodINPa1HAhKd6c=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 05:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:00:f3:64:22:49:50:5e:19:75:be:fa:00:d6:67:75:f9:d2:a2:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3 Validity Not Before: Mar 1 07:20:06 2026 GMT Not After : Mar 2 07:28:06 2026 GMT Subject: CN=40319FFA0544BCEE6B386333B84C6CF7A3B6C446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:05:af:59:19:7e:d3:b5:0f:bc:64:90:bd:4d: 85:01:cf:8b:59:b3:c2:0d:3f:5f:39:b6:89:18:cc: 6e:69:a1:a4:22:79:2f:37:62:59:58:83:0d:7b:cd: a6:57:1b:99:09:9a:e1:51:e0:a7:74:97:2d:09:9c: b1:92:eb:b0:b4:a8:62:bb:97:87:99:a7:f1:d3:d6: 45:c8:65:64:fa:6f:56:be:5b:69:14:68:29:de:aa: de:f6:ca:a0:85:78:6d:49:a7:bc:e8:42:44:3e:58: e5:07:a6:2f:e6:bc:cb:80:32:09:33:d0:9c:8f:7d: dc:8e:8c:22:65:53:a4:41:e4:37:71:82:ee:64:f2: 28:c5:d6:2f:c1:a9:c9:e1:ad:34:22:dd:42:1c:6f: 0c:90:d2:c1:cf:0e:e4:5f:76:80:aa:8d:b1:27:b9: 03:80:93:de:09:c2:05:f9:79:ec:d2:c8:82:85:3a: ac:74:81:26:33:8e:74:9a:08:54:0c:da:12:f5:b8: 19:db:76:da:46:27:cf:23:00:94:ae:c9:e3:02:e6: 8c:f9:45:11:8c:a9:99:26:e0:f9:f5:36:08:54:90: 7f:4e:19:c6:5b:70:ed:6e:ca:63:77:50:56:e7:22: 14:bf:d2:09:36:ef:fa:36:2d:a7:fb:bb:9f:9b:63: d7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:31:9F:FA:05:44:BC:EE:6B:38:63:33:B8:4C:6C:F7:A3:B6:C4:46 X509v3 Authority Key Identifier: keyid:71:AD:BC:B8:05:EE:EE:44:A7:FD:C0:7C:A5:4A:D6:61:0C:81:E1:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:7b:45:f5:3a:d5:b5:c5:e6:91:49:34:14:2d:c7:9a:c5:2d: a2:18:fd:9f:a4:11:af:5e:6d:4c:75:ec:bc:d5:b6:6a:3c:00: 82:99:ec:81:f5:ba:b0:2b:eb:36:b1:52:ab:91:34:64:8b:4a: e2:d2:b6:1c:29:3d:57:8b:6f:da:66:ea:cc:36:e2:f0:73:95: f9:46:6b:91:47:ee:7c:e8:32:55:b1:a7:da:1b:7a:e2:a9:ef: 4b:db:55:0e:cf:31:5a:c1:6a:7c:45:7c:66:9c:03:25:80:a2: 90:b6:35:d4:ea:5b:76:fa:c6:c4:a0:30:19:ef:46:cc:cd:bd: 57:26:0c:80:0d:e5:4d:51:0d:e9:0d:ec:0b:5e:51:19:3f:36: d4:99:ff:35:30:29:37:4a:8c:c4:2e:2e:e9:13:96:9f:24:7b: ed:f5:84:01:aa:5f:49:a7:5e:cc:2e:32:6a:06:02:fd:ad:66: c7:83:0b:54:e2:11:6c:fc:0f:ab:d2:e7:fd:2a:a3:cf:a1:82: 1c:4b:7b:6c:ac:1f:16:54:e4:8b:96:65:6a:33:a4:63:e2:75: 44:8e:cf:d3:07:92:83:31:75:dd:46:d4:7b:19:02:f9:8a:bf: 51:79:ce:f0:b9:d2:12:ba:49:1d:05:f9:25:4e:d4:93:36:ed: b2:1c:b3:17 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUNQDzZCJJUF4Zdb76ANZndfnSojgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFBREJDQjgwNUVFRUU0NEE3RkRDMDdDQTU0QUQ2NjEw QzgxRTFCMzAeFw0yNjAzMDEwNzIwMDZaFw0yNjAzMDIwNzI4MDZaMDMxMTAvBgNV BAMTKDQwMzE5RkZBMDU0NEJDRUU2QjM4NjMzM0I4NEM2Q0Y3QTNCNkM0NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBBa9ZGX7TtQ+8ZJC9TYUBz4tZ s8INP185tokYzG5poaQieS83YllYgw17zaZXG5kJmuFR4Kd0ly0JnLGS67C0qGK7 l4eZp/HT1kXIZWT6b1a+W2kUaCneqt72yqCFeG1Jp7zoQkQ+WOUHpi/mvMuAMgkz 0JyPfdyOjCJlU6RB5Ddxgu5k8ijF1i/BqcnhrTQi3UIcbwyQ0sHPDuRfdoCqjbEn uQOAk94JwgX5eezSyIKFOqx0gSYzjnSaCFQM2hL1uBnbdtpGJ88jAJSuyeMC5oz5 RRGMqZkm4Pn1NghUkH9OGcZbcO1uymN3UFbnIhS/0gk27/o2Laf7u5+bY9cpAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUQDGf+gVEvO5rOGMzuExs96O2xEYwHwYDVR0j BBgwFoAUca28uAXu7kSn/cB8pUrWYQyB4bMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmU3Zjc0N2UtZmY2OC00ZmEyLWIyZTMtZjZlZGU1NDhh MzIwLzEvNzFBREJDQjgwNUVFRUU0NEE3RkRDMDdDQTU0QUQ2NjEwQzgxRTFCMy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvNzFBREJDQjgwNUVFRUU0NEE3RkRDMDdDQTU0QUQ2NjEwQzgx RTFCMy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82ZTdmNzQ3ZS1m ZjY4LTRmYTItYjJlMy1mNmVkZTU0OGEzMjAvMS83MUFEQkNCODA1RUVFRTQ0QTdG REMwN0NBNTRBRDY2MTBDODFFMUIzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIXtF9TrVtcXmkUk0FC3H msUtohj9n6QRr15tTHXsvNW2ajwAgpnsgfW6sCvrNrFSq5E0ZItK4tK2HCk9V4tv 2mbqzDbi8HOV+UZrkUfufOgyVbGn2ht64qnvS9tVDs8xWsFqfEV8ZpwDJYCikLY1 1OpbdvrGxKAwGe9GzM29VyYMgA3lTVEN6Q3sC15RGT821Jn/NTApN0qMxC4u6ROW nyR77fWEAapfSadezC4yagYC/a1mx4MLVOIRbPwPq9Ln/Sqjz6GCHEt7bKwfFlTk i5ZlajOkY+J1RI7P0weSgzF13UbUexkC+Yq/UXnO8LnSErpJHQX5JU7Ukzbtshyz Fw== -----END CERTIFICATE-----Generated at Sun Mar 1 20:06:29 2026 by rpki-client