$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft File: 71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft (raw, json) Hash identifier: zmh+zHrf03wYIoqU9fNDNjmRpQCxd5BIUuxsGj8PrM4= Subject key identifier: 1B:0D:FF:6E:38:AB:29:92:39:86:EB:C0:6F:C6:9A:8A:B8:5E:A7:81 Authority key identifier: 71:AD:BC:B8:05:EE:EE:44:A7:FD:C0:7C:A5:4A:D6:61:0C:81:E1:B3 Certificate issuer: /CN=71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3 Certificate serial: 21B2CC30D38D28301851B0B2EE4B3F3F0C061957 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft Manifest number: 0144 Signing time: Sat 26 Sep 2026 21:14:16 +0000 Manifest this update: Sat 26 Sep 2026 21:09:16 +0000 Manifest next update: Mon 28 Sep 2026 00:01:16 +0000 Files and hashes: 1: 71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl (hash: VWoMrwmCnzXIm+alDTjsy3MRABaEINV4CATtLZxuGxs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 21:23:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:b2:cc:30:d3:8d:28:30:18:51:b0:b2:ee:4b:3f:3f:0c:06:19:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3 Validity Not Before: Sep 26 21:09:16 2026 GMT Not After : Sep 28 00:01:16 2026 GMT Subject: CN=1B0DFF6E38AB29923986EBC06FC69A8AB85EA781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:12:1d:a6:db:78:ea:85:f2:88:5c:db:d4:20: 2f:0e:86:1d:ae:95:d8:2f:61:3b:5a:5f:25:ec:0d: 19:f3:ba:76:24:f1:b9:32:91:0d:e4:8d:14:93:61: f4:7f:ab:03:0c:71:42:c7:a4:0e:68:fb:27:fb:b8: d4:e0:a5:15:b1:0d:91:b7:05:be:31:57:b2:90:d0: bf:dc:1b:e5:aa:09:4e:40:03:6a:ba:1a:d8:96:7d: f9:e4:83:12:32:cc:40:8c:9b:50:42:f4:31:29:32: b6:6e:d6:c0:d1:47:4f:53:96:46:b9:bc:70:ca:9b: 05:68:ce:03:a9:82:1e:bd:d1:35:de:ef:6b:10:fb: 19:50:1a:b5:af:8e:e0:c9:e1:9e:58:d7:70:d5:c3: d0:31:48:2c:88:31:c3:5f:1b:3f:cf:7e:18:f4:79: ca:89:41:b2:44:64:25:d2:9d:dc:3e:0e:0b:2d:a5: eb:2a:7e:8a:76:c6:64:e2:01:ce:f1:7b:7e:0d:6b: 19:61:5f:e6:eb:fb:6e:d2:e7:58:13:59:12:7c:24: fb:8e:97:84:a6:15:98:e2:bd:e8:c8:08:35:9f:69: a3:81:4b:4d:c3:08:e6:ff:14:89:3b:fe:0e:62:08: 9a:b1:be:5b:bd:06:29:4d:c4:94:c7:35:51:44:5f: 21:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:0D:FF:6E:38:AB:29:92:39:86:EB:C0:6F:C6:9A:8A:B8:5E:A7:81 X509v3 Authority Key Identifier: keyid:71:AD:BC:B8:05:EE:EE:44:A7:FD:C0:7C:A5:4A:D6:61:0C:81:E1:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:a4:0a:53:45:e0:a8:fe:8f:32:f0:96:6b:bc:b5:36:9d:d6: 87:83:33:6c:cc:3f:3a:ef:a9:bf:e8:cc:ac:18:38:df:ff:09: 42:78:26:de:63:79:2e:7c:3a:2b:e9:05:98:cb:61:be:49:b0: e8:38:1c:f7:43:87:9f:a9:31:e4:23:6c:40:7d:e9:c0:b1:45: d5:f0:ad:46:9e:f8:5c:a9:29:f4:88:3b:f2:3d:31:c3:12:98: d8:c9:1c:29:64:da:a7:f8:a5:9f:5a:b7:f0:fc:69:fe:2f:85: 20:ab:06:d2:33:50:0e:5e:a4:0c:c3:d2:23:b6:eb:80:91:b9: 5d:66:b0:eb:71:ca:d0:29:b9:c6:51:57:f3:37:7c:cf:7f:94: 8b:d6:78:81:02:de:7b:26:a6:03:f6:96:17:64:73:73:bf:29: 89:c6:d5:02:0b:0c:42:e4:75:c0:84:e9:3f:12:f9:f0:f9:1c: 7c:64:68:24:a2:70:68:22:ae:2e:15:57:d3:fa:29:de:14:7a: 36:43:53:2f:08:e7:98:cd:8e:33:f0:2a:71:e6:62:80:ef:94: cb:31:aa:60:ef:db:25:07:a0:cd:09:bb:9f:10:90:b3:43:9b: f2:c4:99:cb:f7:d7:e3:d0:60:d6:eb:a5:74:86:c1:50:06:f4: d8:16:0b:19 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUIbLMMNONKDAYUbCy7ks/PwwGGVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFBREJDQjgwNUVFRUU0NEE3RkRDMDdDQTU0QUQ2NjEw QzgxRTFCMzAeFw0yNjA5MjYyMTA5MTZaFw0yNjA5MjgwMDAxMTZaMDMxMTAvBgNV BAMTKDFCMERGRjZFMzhBQjI5OTIzOTg2RUJDMDZGQzY5QThBQjg1RUE3ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChEh2m23jqhfKIXNvUIC8Ohh2u ldgvYTtaXyXsDRnzunYk8bkykQ3kjRSTYfR/qwMMcULHpA5o+yf7uNTgpRWxDZG3 Bb4xV7KQ0L/cG+WqCU5AA2q6GtiWffnkgxIyzECMm1BC9DEpMrZu1sDRR09Tlka5 vHDKmwVozgOpgh690TXe72sQ+xlQGrWvjuDJ4Z5Y13DVw9AxSCyIMcNfGz/Pfhj0 ecqJQbJEZCXSndw+Dgstpesqfop2xmTiAc7xe34NaxlhX+br+27S51gTWRJ8JPuO l4SmFZjivejICDWfaaOBS03DCOb/FIk7/g5iCJqxvlu9BilNxJTHNVFEXyEnAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUGw3/bjirKZI5huvAb8aairhep4EwHwYDVR0j BBgwFoAUca28uAXu7kSn/cB8pUrWYQyB4bMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmU3Zjc0N2UtZmY2OC00ZmEyLWIyZTMtZjZlZGU1NDhh MzIwLzEvNzFBREJDQjgwNUVFRUU0NEE3RkRDMDdDQTU0QUQ2NjEwQzgxRTFCMy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvNzFBREJDQjgwNUVFRUU0NEE3RkRDMDdDQTU0QUQ2NjEwQzgx RTFCMy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82ZTdmNzQ3ZS1m ZjY4LTRmYTItYjJlMy1mNmVkZTU0OGEzMjAvMS83MUFEQkNCODA1RUVFRTQ0QTdG REMwN0NBNTRBRDY2MTBDODFFMUIzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKQKU0XgqP6PMvCWa7y1 Np3Wh4MzbMw/Ou+pv+jMrBg43/8JQngm3mN5Lnw6K+kFmMthvkmw6Dgc90OHn6kx 5CNsQH3pwLFF1fCtRp74XKkp9Ig78j0xwxKY2MkcKWTap/iln1q38Pxp/i+FIKsG 0jNQDl6kDMPSI7brgJG5XWaw63HK0Cm5xlFX8zd8z3+Ui9Z4gQLeeyamA/aWF2Rz c78picbVAgsMQuR1wITpPxL58PkcfGRoJKJwaCKuLhVX0/op3hR6NkNTLwjnmM2O M/AqceZigO+UyzGqYO/bJQegzQm7nxCQs0Ob8sSZy/fX49Bg1uuldIbBUAb02BYL GQ== -----END CERTIFICATE-----Generated at Sun Sep 27 09:38:19 2026 by rpki-client