$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft File: 71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft (raw, json) Hash identifier: jJVN9PGWTxeQbXC3/4mVjU73sNCXGdX/Ez4IxdNMTPA= Subject key identifier: 9C:0D:40:84:58:31:E4:CF:48:57:04:9E:C5:FB:54:94:14:93:2C:6D Authority key identifier: 71:AD:BC:B8:05:EE:EE:44:A7:FD:C0:7C:A5:4A:D6:61:0C:81:E1:B3 Certificate issuer: /CN=71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3 Certificate serial: 5DE1370595F8B4EEA9CE4DC787CAF4024D8BB4E1 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft Manifest number: F2 Signing time: Tue 28 Jul 2026 22:13:20 +0000 Manifest this update: Tue 28 Jul 2026 22:08:20 +0000 Manifest next update: Thu 30 Jul 2026 01:23:20 +0000 Files and hashes: 1: 71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl (hash: pD5hFVELtltra5kYy0hmjEGP5s5ADz7t4BEEYdblhyE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 16:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:e1:37:05:95:f8:b4:ee:a9:ce:4d:c7:87:ca:f4:02:4d:8b:b4:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3 Validity Not Before: Jul 28 22:08:20 2026 GMT Not After : Jul 30 01:23:20 2026 GMT Subject: CN=9C0D40845831E4CF4857049EC5FB549414932C6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:19:61:fb:99:e9:54:c3:7f:0c:9d:24:57:dd: 28:99:97:e6:a8:fb:61:55:24:0b:87:ec:41:0b:8f: aa:59:a1:f2:25:f5:f2:c8:05:ea:c4:1c:b5:43:dc: d6:b2:c3:3e:f2:01:f4:74:30:97:2e:44:50:6e:aa: 00:d6:7e:00:cd:cd:4c:e8:2a:b3:f1:ba:bf:34:74: bd:51:02:0a:32:26:c9:10:7c:f2:12:bf:5c:37:cf: 44:92:1f:26:9f:57:4e:01:78:e4:10:fe:d6:42:ca: 86:0a:7c:c6:7a:4b:6e:1a:1b:35:0d:d5:f8:9a:c9: 05:4f:68:c2:0d:0d:7a:51:75:a7:89:7b:f0:a4:63: a4:29:0f:6a:6e:3c:fe:2f:d5:ea:9a:67:7a:d1:98: 16:fb:aa:59:ce:91:a2:c2:63:2f:2d:a8:5d:86:b8: 1f:0c:94:87:bb:d8:fc:a3:6c:29:ce:47:6b:ab:f0: e6:b2:c6:c2:79:e3:d3:27:d0:86:01:68:e0:03:8e: ba:8f:ab:e8:d0:ba:00:f8:b7:ae:bb:30:c8:ad:d2: b0:ec:72:01:7d:67:d3:7e:e4:ef:83:aa:8f:00:e6: fe:d5:e1:2d:8e:d3:3d:05:f8:cd:ae:ae:3e:36:53: 00:b4:ab:d4:b9:55:c0:ec:30:ce:be:46:48:84:02: 82:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:0D:40:84:58:31:E4:CF:48:57:04:9E:C5:FB:54:94:14:93:2C:6D X509v3 Authority Key Identifier: keyid:71:AD:BC:B8:05:EE:EE:44:A7:FD:C0:7C:A5:4A:D6:61:0C:81:E1:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:6a:e2:06:b6:c0:d7:46:40:e2:17:65:ea:31:de:df:6d:91: c3:79:4b:a6:29:c6:2c:b3:4f:44:c1:83:bf:3b:0c:a1:17:7a: ab:e7:24:d1:0f:2a:7b:2e:0e:68:11:37:b8:3d:1e:81:59:22: 72:aa:7c:72:4e:d1:b8:71:9e:a7:31:a8:e3:82:51:64:5a:04: cb:dd:89:e3:41:d9:db:e0:19:96:cf:e1:8c:22:b0:70:33:14: 36:86:65:b9:e2:c1:4b:a3:c5:68:d6:0b:40:b3:2a:de:77:61: 51:68:c4:13:5e:05:42:88:44:fc:0e:72:69:a3:df:0e:27:10: 91:0c:1f:96:2e:4e:59:03:fa:ed:ec:e6:74:a9:61:e1:c1:66: 8b:f5:1b:d4:b3:6d:44:1d:45:e6:8c:22:1f:b8:28:b4:e8:73: dc:7c:88:2b:75:c9:f9:2c:a0:41:02:31:5d:1f:d3:d3:6f:9d: 94:25:08:c9:01:7d:e6:2e:46:ba:36:9a:da:39:25:d6:b6:59: 14:96:0b:b7:a6:d5:fe:5d:2e:00:a4:63:ff:b0:fb:c6:8e:ff: 6b:e8:b1:8d:27:c0:16:cf:d7:65:04:0a:8d:9d:9b:62:4f:82: 64:e1:eb:a2:97:2a:06:64:62:86:0e:fe:b2:b4:fb:5f:8d:66: e8:5e:09:0e -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUXeE3BZX4tO6pzk3Hh8r0Ak2LtOEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFBREJDQjgwNUVFRUU0NEE3RkRDMDdDQTU0QUQ2NjEw QzgxRTFCMzAeFw0yNjA3MjgyMjA4MjBaFw0yNjA3MzAwMTIzMjBaMDMxMTAvBgNV BAMTKDlDMEQ0MDg0NTgzMUU0Q0Y0ODU3MDQ5RUM1RkI1NDk0MTQ5MzJDNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeGWH7melUw38MnSRX3SiZl+ao +2FVJAuH7EELj6pZofIl9fLIBerEHLVD3Naywz7yAfR0MJcuRFBuqgDWfgDNzUzo KrPxur80dL1RAgoyJskQfPISv1w3z0SSHyafV04BeOQQ/tZCyoYKfMZ6S24aGzUN 1fiayQVPaMINDXpRdaeJe/CkY6QpD2puPP4v1eqaZ3rRmBb7qlnOkaLCYy8tqF2G uB8MlIe72PyjbCnOR2ur8OayxsJ549Mn0IYBaOADjrqPq+jQugD4t667MMit0rDs cgF9Z9N+5O+Dqo8A5v7V4S2O0z0F+M2urj42UwC0q9S5VcDsMM6+RkiEAoLhAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUnA1AhFgx5M9IVwSexftUlBSTLG0wHwYDVR0j BBgwFoAUca28uAXu7kSn/cB8pUrWYQyB4bMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmU3Zjc0N2UtZmY2OC00ZmEyLWIyZTMtZjZlZGU1NDhh MzIwLzEvNzFBREJDQjgwNUVFRUU0NEE3RkRDMDdDQTU0QUQ2NjEwQzgxRTFCMy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvNzFBREJDQjgwNUVFRUU0NEE3RkRDMDdDQTU0QUQ2NjEwQzgx RTFCMy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82ZTdmNzQ3ZS1m ZjY4LTRmYTItYjJlMy1mNmVkZTU0OGEzMjAvMS83MUFEQkNCODA1RUVFRTQ0QTdG REMwN0NBNTRBRDY2MTBDODFFMUIzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm2riBrbA10ZA4hdl6jHe 322Rw3lLpinGLLNPRMGDvzsMoRd6q+ck0Q8qey4OaBE3uD0egVkicqp8ck7RuHGe pzGo44JRZFoEy92J40HZ2+AZls/hjCKwcDMUNoZlueLBS6PFaNYLQLMq3ndhUWjE E14FQohE/A5yaaPfDicQkQwfli5OWQP67ezmdKlh4cFmi/Ub1LNtRB1F5owiH7go tOhz3HyIK3XJ+SygQQIxXR/T02+dlCUIyQF95i5Gujaa2jkl1rZZFJYLt6bV/l0u AKRj/7D7xo7/a+ixjSfAFs/XZQQKjZ2bYk+CZOHropcqBmRihg7+srT7X41m6F4J Dg== -----END CERTIFICATE-----Generated at Wed Jul 29 06:40:04 2026 by rpki-client