$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft File: 71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft (raw, json) Hash identifier: aXreUmAMidWE9v5+FTVT+aj0fEOfP3BWk0vUsG5mUHg= Subject key identifier: 6F:51:62:69:BD:9C:75:D6:4F:EB:65:1E:AD:04:B4:F4:B5:BA:D9:39 Authority key identifier: 71:AD:BC:B8:05:EE:EE:44:A7:FD:C0:7C:A5:4A:D6:61:0C:81:E1:B3 Certificate issuer: /CN=71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3 Certificate serial: 03B4160EDD9CFF1265834E2E5C11E506C89DA9BB Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft Manifest number: 66 Signing time: Fri 17 Apr 2026 18:20:06 +0000 Manifest this update: Fri 17 Apr 2026 18:15:06 +0000 Manifest next update: Sat 18 Apr 2026 19:24:06 +0000 Files and hashes: 1: 71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl (hash: zmKumOhtqMhVKgEVn2Xfh66JAqUfH6zpCMvOIf2wBAU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 04:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:b4:16:0e:dd:9c:ff:12:65:83:4e:2e:5c:11:e5:06:c8:9d:a9:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3 Validity Not Before: Apr 17 18:15:06 2026 GMT Not After : Apr 18 19:24:06 2026 GMT Subject: CN=6F516269BD9C75D64FEB651EAD04B4F4B5BAD939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c8:2f:1f:24:7e:f2:ae:6e:0a:d6:f2:18:d5: 50:37:3e:a2:06:07:f6:b2:a5:22:41:58:d1:c6:3b: 27:21:cf:bb:7f:16:c0:c9:8f:65:02:78:48:14:43: 84:9a:1e:2f:fd:04:d9:b7:1f:17:c2:92:5d:3d:a6: 8e:f6:e3:40:d4:e6:46:26:04:c7:8f:c7:e3:32:d2: 7e:ad:18:df:45:51:1d:51:a4:e2:2c:26:2d:cb:81: cb:6c:1c:7c:58:a7:a9:6d:c1:e3:85:ee:01:f9:be: 95:06:74:a3:ae:dd:8e:8d:41:d4:0d:a4:ec:d4:9a: bb:a5:a2:75:3f:80:c8:d9:1a:bc:dc:fe:52:4e:c4: 38:4b:87:a6:d5:f3:ee:14:d0:f5:04:20:cd:bc:7f: 00:1f:bc:43:d2:7a:ca:1a:a8:d3:45:16:56:1b:36: 59:8c:83:1e:1f:51:02:54:80:e0:3e:f5:f4:4c:b2: ab:c8:aa:dc:fd:8e:74:04:22:d5:83:1f:50:22:d7: 6b:03:ba:83:87:fd:86:0c:8d:8f:50:f8:02:2d:48: 79:78:cd:1e:38:ca:f7:79:f2:e2:04:6e:bf:cc:c8: 14:b5:1b:21:93:6a:11:d2:bf:86:30:ad:5d:00:29: dd:35:6f:db:5b:46:9b:59:52:31:aa:05:99:d0:38: 9d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:51:62:69:BD:9C:75:D6:4F:EB:65:1E:AD:04:B4:F4:B5:BA:D9:39 X509v3 Authority Key Identifier: keyid:71:AD:BC:B8:05:EE:EE:44:A7:FD:C0:7C:A5:4A:D6:61:0C:81:E1:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:cb:71:02:1e:a8:26:85:cb:53:96:7e:53:e8:75:a5:e3:74: b5:0d:00:41:a1:b1:ff:90:37:03:32:7f:28:f1:79:5c:ce:5d: 8c:93:57:55:e4:7b:0a:17:03:7e:1d:6c:f9:35:aa:08:51:f1: bb:13:99:f9:05:db:6d:b5:ab:0a:45:1c:4a:96:77:02:e6:e9: 1f:ba:9a:6e:63:dc:99:c0:d1:b3:86:d9:5f:2a:ce:3e:b8:c8: 9a:7e:56:d2:a7:28:ec:71:44:ed:17:e5:fd:6a:ab:9e:11:c4: 74:db:0d:58:75:04:4c:eb:ac:0f:29:98:92:63:dd:07:dc:78: a4:61:6a:33:4a:9d:94:52:bb:77:a3:5b:49:7a:d8:1b:43:21: 0e:e2:9a:ae:f7:67:fd:74:94:08:48:67:f1:a4:db:2f:83:2b: c8:cc:02:bd:ce:ad:1b:33:16:0f:7e:07:40:d6:0a:06:77:64: 1b:c5:2f:05:d8:a2:4e:27:dd:82:1e:e9:bc:26:d4:50:24:74: 04:54:b1:4e:55:7d:bb:eb:95:85:40:32:7e:54:73:0f:4e:7c: 0c:d9:9a:ba:bc:9e:67:51:7a:ac:10:af:76:47:4a:12:05:49: 21:8f:8d:a1:0a:92:08:93:fd:b5:ee:10:55:cb:ac:8d:15:15: 2a:d7:94:f2 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUA7QWDt2c/xJlg04uXBHlBsidqbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFBREJDQjgwNUVFRUU0NEE3RkRDMDdDQTU0QUQ2NjEw QzgxRTFCMzAeFw0yNjA0MTcxODE1MDZaFw0yNjA0MTgxOTI0MDZaMDMxMTAvBgNV BAMTKDZGNTE2MjY5QkQ5Qzc1RDY0RkVCNjUxRUFEMDRCNEY0QjVCQUQ5MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpyC8fJH7yrm4K1vIY1VA3PqIG B/aypSJBWNHGOychz7t/FsDJj2UCeEgUQ4SaHi/9BNm3HxfCkl09po7240DU5kYm BMePx+My0n6tGN9FUR1RpOIsJi3LgctsHHxYp6ltweOF7gH5vpUGdKOu3Y6NQdQN pOzUmrulonU/gMjZGrzc/lJOxDhLh6bV8+4U0PUEIM28fwAfvEPSesoaqNNFFlYb NlmMgx4fUQJUgOA+9fRMsqvIqtz9jnQEItWDH1Ai12sDuoOH/YYMjY9Q+AItSHl4 zR44yvd58uIEbr/MyBS1GyGTahHSv4YwrV0AKd01b9tbRptZUjGqBZnQOJ2bAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUb1Fiab2cddZP62UerQS09LW62TkwHwYDVR0j BBgwFoAUca28uAXu7kSn/cB8pUrWYQyB4bMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmU3Zjc0N2UtZmY2OC00ZmEyLWIyZTMtZjZlZGU1NDhh MzIwLzEvNzFBREJDQjgwNUVFRUU0NEE3RkRDMDdDQTU0QUQ2NjEwQzgxRTFCMy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvNzFBREJDQjgwNUVFRUU0NEE3RkRDMDdDQTU0QUQ2NjEwQzgx RTFCMy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82ZTdmNzQ3ZS1m ZjY4LTRmYTItYjJlMy1mNmVkZTU0OGEzMjAvMS83MUFEQkNCODA1RUVFRTQ0QTdG REMwN0NBNTRBRDY2MTBDODFFMUIzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk8txAh6oJoXLU5Z+U+h1 peN0tQ0AQaGx/5A3AzJ/KPF5XM5djJNXVeR7ChcDfh1s+TWqCFHxuxOZ+QXbbbWr CkUcSpZ3AubpH7qabmPcmcDRs4bZXyrOPrjImn5W0qco7HFE7Rfl/WqrnhHEdNsN WHUETOusDymYkmPdB9x4pGFqM0qdlFK7d6NbSXrYG0MhDuKarvdn/XSUCEhn8aTb L4MryMwCvc6tGzMWD34HQNYKBndkG8UvBdiiTifdgh7pvCbUUCR0BFSxTlV9u+uV hUAyflRzD058DNmauryeZ1F6rBCvdkdKEgVJIY+NoQqSCJP9te4QVcusjRUVKteU 8g== -----END CERTIFICATE-----Generated at Fri Apr 17 20:46:56 2026 by rpki-client