$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft File: 71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft (raw, json) Hash identifier: bgoIP/jT6ThPMfDjl5yUL7fuvUgRbxmN4qTA16pcObw= Subject key identifier: 01:44:41:5B:FD:4C:EB:74:5C:B5:63:E5:99:3B:13:04:43:68:A9:56 Authority key identifier: 71:AD:BC:B8:05:EE:EE:44:A7:FD:C0:7C:A5:4A:D6:61:0C:81:E1:B3 Certificate issuer: /CN=71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3 Certificate serial: 7F302F2A0D045A0954E3F74E9AB7ED769B9164D9 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft Manifest number: B4 Signing time: Sat 13 Jun 2026 05:00:06 +0000 Manifest this update: Sat 13 Jun 2026 04:55:06 +0000 Manifest next update: Sun 14 Jun 2026 05:00:06 +0000 Files and hashes: 1: 71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl (hash: JBK9BNH9ZzQrDMpPsbP0AVgp8uLeFfV5AUPLU+Lrm54=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 04:43:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:30:2f:2a:0d:04:5a:09:54:e3:f7:4e:9a:b7:ed:76:9b:91:64:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3 Validity Not Before: Jun 13 04:55:06 2026 GMT Not After : Jun 14 05:00:06 2026 GMT Subject: CN=0144415BFD4CEB745CB563E5993B13044368A956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1f:6c:7b:0f:fb:7a:57:b6:49:9f:05:61:b0: 26:c4:ef:98:3b:54:ec:60:e3:d6:ef:89:36:8d:98: 4c:63:d2:73:53:a2:11:e8:e4:48:5f:6c:a8:80:7c: 9d:d8:53:45:c0:6d:f3:3d:ed:5b:fb:eb:10:b3:87: f3:14:9c:02:4b:39:de:87:e8:7d:63:eb:30:91:fa: 2d:f1:67:20:ea:09:f3:fe:45:90:42:eb:66:4e:48: 98:a7:31:1e:bf:b1:fb:a9:20:63:7c:95:09:9b:eb: 52:b1:2a:9c:91:de:24:b8:56:fb:d6:d8:b1:0a:db: 4b:8d:63:4b:1a:ad:88:01:16:53:8a:65:85:fc:e3: a1:ad:00:a9:80:9e:8a:7e:93:c0:da:c5:4c:16:72: 68:8a:c4:17:69:d6:bb:90:72:b1:2c:f4:1f:07:6f: 6d:79:88:73:b4:70:d8:b0:3b:dc:97:95:e8:c5:a7: 2e:9a:f7:0d:a9:47:b6:f5:6b:5c:e9:c9:40:55:03: c8:d7:aa:c5:18:fa:cf:1e:a8:ca:72:32:0c:db:34: 90:15:bd:92:10:7d:ad:45:c3:17:23:a9:65:3b:4b: 70:4f:02:62:96:5d:25:06:e7:64:3d:3e:a3:23:d1: 7a:36:b3:5b:96:06:0e:e9:4d:d1:53:4a:dc:d4:7f: 65:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:44:41:5B:FD:4C:EB:74:5C:B5:63:E5:99:3B:13:04:43:68:A9:56 X509v3 Authority Key Identifier: keyid:71:AD:BC:B8:05:EE:EE:44:A7:FD:C0:7C:A5:4A:D6:61:0C:81:E1:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:dd:10:57:b3:0d:11:8e:7c:57:5a:31:91:6f:a4:20:ef:c2: 78:7f:87:fa:70:ba:53:d0:9a:98:b4:79:3c:3d:d9:5c:a5:b7: af:05:3b:98:d4:20:cb:e9:de:cd:e7:2f:31:1b:ba:89:81:9f: 6e:bc:53:95:a5:ef:ea:d5:15:3f:79:78:e9:b4:e8:a0:b1:86: 4d:3f:2a:c8:b1:1a:e7:d9:0d:41:41:79:d2:03:29:58:b2:8b: b7:89:5d:cb:b0:b5:26:72:79:2e:da:c3:9f:ac:ab:1a:01:99: 5d:16:58:c5:02:1b:c3:83:7d:9d:8d:67:e6:15:98:2e:7d:8b: 05:1a:17:55:7c:50:f1:c2:88:5e:70:a4:87:84:cc:da:ed:a4: e6:a4:f3:12:1b:7d:d5:59:6f:b2:ba:bd:cf:34:94:8f:91:8c: 60:4f:13:6d:a9:a6:b2:c5:9c:8a:58:67:68:5d:4b:59:63:00: 32:6b:79:be:eb:a3:d3:0e:d0:51:9e:cf:08:53:db:1c:8d:b4: fe:c3:a9:24:22:b8:4b:41:a3:a3:ea:d2:91:a1:87:c5:fc:e3: ca:67:d3:f1:75:cb:ee:c8:96:58:19:48:f1:f2:94:03:99:1e: 76:09:d7:8b:76:39:d1:9e:b4:c1:9a:0d:99:4b:ca:d1:e8:ca: b6:3d:5d:8e -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUfzAvKg0EWglU4/dOmrftdpuRZNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFBREJDQjgwNUVFRUU0NEE3RkRDMDdDQTU0QUQ2NjEw QzgxRTFCMzAeFw0yNjA2MTMwNDU1MDZaFw0yNjA2MTQwNTAwMDZaMDMxMTAvBgNV BAMTKDAxNDQ0MTVCRkQ0Q0VCNzQ1Q0I1NjNFNTk5M0IxMzA0NDM2OEE5NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPH2x7D/t6V7ZJnwVhsCbE75g7 VOxg49bviTaNmExj0nNTohHo5EhfbKiAfJ3YU0XAbfM97Vv76xCzh/MUnAJLOd6H 6H1j6zCR+i3xZyDqCfP+RZBC62ZOSJinMR6/sfupIGN8lQmb61KxKpyR3iS4VvvW 2LEK20uNY0sarYgBFlOKZYX846GtAKmAnop+k8DaxUwWcmiKxBdp1ruQcrEs9B8H b215iHO0cNiwO9yXlejFpy6a9w2pR7b1a1zpyUBVA8jXqsUY+s8eqMpyMgzbNJAV vZIQfa1FwxcjqWU7S3BPAmKWXSUG52Q9PqMj0Xo2s1uWBg7pTdFTStzUf2VRAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUAURBW/1M63RctWPlmTsTBENoqVYwHwYDVR0j BBgwFoAUca28uAXu7kSn/cB8pUrWYQyB4bMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmU3Zjc0N2UtZmY2OC00ZmEyLWIyZTMtZjZlZGU1NDhh MzIwLzEvNzFBREJDQjgwNUVFRUU0NEE3RkRDMDdDQTU0QUQ2NjEwQzgxRTFCMy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvNzFBREJDQjgwNUVFRUU0NEE3RkRDMDdDQTU0QUQ2NjEwQzgx RTFCMy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82ZTdmNzQ3ZS1m ZjY4LTRmYTItYjJlMy1mNmVkZTU0OGEzMjAvMS83MUFEQkNCODA1RUVFRTQ0QTdG REMwN0NBNTRBRDY2MTBDODFFMUIzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAad0QV7MNEY58V1oxkW+k IO/CeH+H+nC6U9CamLR5PD3ZXKW3rwU7mNQgy+nezecvMRu6iYGfbrxTlaXv6tUV P3l46bTooLGGTT8qyLEa59kNQUF50gMpWLKLt4ldy7C1JnJ5LtrDn6yrGgGZXRZY xQIbw4N9nY1n5hWYLn2LBRoXVXxQ8cKIXnCkh4TM2u2k5qTzEht91Vlvsrq9zzSU j5GMYE8TbammssWcilhnaF1LWWMAMmt5vuuj0w7QUZ7PCFPbHI20/sOpJCK4S0Gj o+rSkaGHxfzjymfT8XXL7siWWBlI8fKUA5kedgnXi3Y50Z60wZoNmUvK0ejKtj1d jg== -----END CERTIFICATE-----Generated at Sat Jun 13 15:59:14 2026 by rpki-client