$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft File: C284E54726A876081FA2857EF4AF5B1A78D096B4.mft (raw, json) Hash identifier: ZfQr+t6gDQs4B+nsrGa6jlRlWscTJOMO6wy6QBUTuPg= Subject key identifier: 21:8B:A2:A2:36:ED:CB:FE:50:2E:E4:61:F7:84:BA:1E:01:2F:DE:16 Authority key identifier: C2:84:E5:47:26:A8:76:08:1F:A2:85:7E:F4:AF:5B:1A:78:D0:96:B4 Certificate issuer: /CN=C284E54726A876081FA2857EF4AF5B1A78D096B4 Certificate serial: 0EA4204FC954BAF685D59230593756EF822C7658 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/C284E54726A876081FA2857EF4AF5B1A78D096B4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft Manifest number: 0189 Signing time: Fri 17 Apr 2026 02:12:45 +0000 Manifest this update: Fri 17 Apr 2026 02:07:45 +0000 Manifest next update: Sat 18 Apr 2026 02:54:45 +0000 Files and hashes: 1: C284E54726A876081FA2857EF4AF5B1A78D096B4.crl (hash: UCjT+BLJ9Q8Zv6HYGrUFrF3L0dNMpQckUZkBfOqkMC8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/C284E54726A876081FA2857EF4AF5B1A78D096B4.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 02:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:a4:20:4f:c9:54:ba:f6:85:d5:92:30:59:37:56:ef:82:2c:76:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C284E54726A876081FA2857EF4AF5B1A78D096B4 Validity Not Before: Apr 17 02:07:45 2026 GMT Not After : Apr 18 02:54:45 2026 GMT Subject: CN=218BA2A236EDCBFE502EE461F784BA1E012FDE16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f2:b6:e3:5d:fc:52:68:c1:ae:a1:f6:14:9c: 0c:43:f0:fc:80:38:58:73:9c:cd:b8:99:07:f8:e0: 7f:4c:70:71:1b:f9:53:ac:46:c0:30:3c:8f:bf:f9: 9d:6e:c3:3b:2c:21:6c:7e:76:5b:66:15:94:e4:b7: 3d:66:e4:3b:d3:29:8d:8d:06:8d:80:93:1e:0e:d4: 86:72:e7:5a:9b:67:14:b1:aa:85:8d:9d:a6:fd:eb: 75:1c:12:2d:31:9f:08:86:e8:0a:08:55:87:24:b4: 28:b6:3b:7a:bd:fb:0c:a8:3f:c3:19:de:08:79:04: ed:24:96:83:27:50:e7:66:14:21:e7:54:7d:38:88: 1b:45:5d:3d:2b:b1:5b:06:6f:67:4d:ed:27:c8:41: f8:eb:a3:30:a4:98:56:c4:83:c7:90:06:f7:56:8d: db:f9:bb:b1:fa:01:dd:2b:95:db:93:f8:7c:d2:d8: 69:e2:ce:06:68:5e:0c:f0:22:b8:5c:e0:c2:18:b1: 22:4d:c2:a1:7a:51:35:95:74:21:31:48:ef:39:a2: 92:c5:9d:3d:66:e0:10:8f:f8:ce:61:08:56:d3:26: 77:00:7b:aa:bb:79:7e:de:3f:c6:3a:c5:dc:7b:e1: 7c:a1:87:97:d3:85:cd:8a:2e:7e:e7:db:82:0f:4f: e2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:8B:A2:A2:36:ED:CB:FE:50:2E:E4:61:F7:84:BA:1E:01:2F:DE:16 X509v3 Authority Key Identifier: keyid:C2:84:E5:47:26:A8:76:08:1F:A2:85:7E:F4:AF:5B:1A:78:D0:96:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/C284E54726A876081FA2857EF4AF5B1A78D096B4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:d2:84:64:65:f1:23:f3:07:e5:4f:d3:13:70:19:5b:d1:22: 45:c7:54:f7:c8:19:b2:90:69:ac:a1:ee:a2:64:28:cb:3f:a7: 0c:f6:40:a3:91:de:ee:43:4e:f1:c6:28:3c:56:74:c0:7e:17: 54:05:26:b7:c0:c6:68:ed:36:5d:d0:11:b2:4e:a3:54:1e:2b: 6f:1c:88:49:ba:0b:cf:f8:eb:98:91:6c:80:08:ba:90:ef:18: 94:21:47:c4:bf:be:37:c7:98:3b:7f:9c:c0:c9:44:70:84:81: 50:2f:cd:b9:d1:75:51:ef:42:6f:f1:9a:ea:a9:97:5f:8f:a6: f1:cb:87:df:94:c6:52:b4:5a:2f:2c:c0:3e:2a:3e:00:13:bb: 5b:8f:6e:5d:ac:bb:3a:aa:6b:04:8e:a7:38:52:0f:12:de:00: ff:4b:ae:13:06:b9:da:fb:24:81:13:74:f1:8e:de:26:c3:57: 14:5f:02:e5:81:ae:d0:ad:e0:41:db:28:37:af:b6:57:28:d0: be:8b:1d:ec:14:11:f4:04:8f:9b:03:3b:3b:05:ea:c5:d6:26: ee:7e:8e:da:43:8e:6e:08:fa:b1:82:d7:91:b9:b5:1e:a3:be: a1:04:d6:e5:21:32:59:bc:a7:ed:26:af:db:1d:f8:a3:eb:bb: b7:5f:ab:c1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUDqQgT8lUuvaF1ZIwWTdW74IsdlgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI4NEU1NDcyNkE4NzYwODFGQTI4NTdFRjRBRjVCMUE3 OEQwOTZCNDAeFw0yNjA0MTcwMjA3NDVaFw0yNjA0MTgwMjU0NDVaMDMxMTAvBgNV BAMTKDIxOEJBMkEyMzZFRENCRkU1MDJFRTQ2MUY3ODRCQTFFMDEyRkRFMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH8rbjXfxSaMGuofYUnAxD8PyA OFhznM24mQf44H9McHEb+VOsRsAwPI+/+Z1uwzssIWx+dltmFZTktz1m5DvTKY2N Bo2Akx4O1IZy51qbZxSxqoWNnab963UcEi0xnwiG6AoIVYcktCi2O3q9+wyoP8MZ 3gh5BO0kloMnUOdmFCHnVH04iBtFXT0rsVsGb2dN7SfIQfjrozCkmFbEg8eQBvdW jdv5u7H6Ad0rlduT+HzS2GnizgZoXgzwIrhc4MIYsSJNwqF6UTWVdCExSO85opLF nT1m4BCP+M5hCFbTJncAe6q7eX7eP8Y6xdx74Xyhh5fThc2KLn7n24IPT+LxAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUIYuiojbty/5QLuRh94S6HgEv3hYwHwYDVR0j BBgwFoAUwoTlRyaodggfooV+9K9bGnjQlrQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5 YjNkLzUvQzI4NEU1NDcyNkE4NzYwODFGQTI4NTdFRjRBRjVCMUE3OEQwOTZCNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC9DMjg0RTU0NzI2QTg3NjA4MUZBMjg1N0VG NEFGNUIxQTc4RDA5NkI0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzZmZjdhOTg5LWVjZGYtNDNkNi04NmUxLWY2YzM5MzViOWIzZC81L0MyODRFNTQ3 MjZBODc2MDgxRkEyODU3RUY0QUY1QjFBNzhEMDk2QjQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBQ0oRk ZfEj8wflT9MTcBlb0SJFx1T3yBmykGmsoe6iZCjLP6cM9kCjkd7uQ07xxig8VnTA fhdUBSa3wMZo7TZd0BGyTqNUHitvHIhJugvP+OuYkWyACLqQ7xiUIUfEv743x5g7 f5zAyURwhIFQL8250XVR70Jv8ZrqqZdfj6bxy4fflMZStFovLMA+Kj4AE7tbj25d rLs6qmsEjqc4Ug8S3gD/S64TBrna+ySBE3Txjt4mw1cUXwLlga7QreBB2yg3r7ZX KNC+ix3sFBH0BI+bAzs7BerF1ibufo7aQ45uCPqxgteRubUeo76hBNblITJZvKft Jq/bHfij67u3X6vB -----END CERTIFICATE-----Generated at Fri Apr 17 15:35:02 2026 by rpki-client