$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft File: 307456E03A11DBB48443E93538958B15B4E9E0F0.mft (raw, json) Hash identifier: 4VSwGHyHU8IoMlgQ9Te+Fo//qJ7MnUxpL32LybqW6jk= Subject key identifier: 76:87:B9:D4:B6:E7:54:07:55:C1:1C:F9:D1:E5:DD:95:4E:EC:A4:6B Authority key identifier: 30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0 Certificate issuer: /CN=307456E03A11DBB48443E93538958B15B4E9E0F0 Certificate serial: 6DF4381EE78E91327F6FA1C82CE6B83D5A445B3E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft Manifest number: 012E Signing time: Sun 01 Mar 2026 20:53:35 +0000 Manifest this update: Sun 01 Mar 2026 20:48:35 +0000 Manifest next update: Mon 02 Mar 2026 23:16:35 +0000 Files and hashes: 1: 307456E03A11DBB48443E93538958B15B4E9E0F0.crl (hash: rM4DFimHs+1PiX+z4Cy77uwSebe4wwK8oSrozrPQujs=) 2: 3130332e3133392e38382e302f32342d3234203d3e20323134383039.roa (hash: aBp6U2aVMH3hSM5eeFVi+p63pJd0WYDoQYC72uEJ/w8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:f4:38:1e:e7:8e:91:32:7f:6f:a1:c8:2c:e6:b8:3d:5a:44:5b:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307456E03A11DBB48443E93538958B15B4E9E0F0 Validity Not Before: Mar 1 20:48:35 2026 GMT Not After : Mar 2 23:16:35 2026 GMT Subject: CN=7687B9D4B6E7540755C11CF9D1E5DD954EECA46B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f9:fe:09:77:c6:54:c6:de:dc:1a:c0:e1:6a: 91:fd:1f:5a:3a:f0:54:04:9a:e5:92:19:90:93:0b: c4:fe:b9:5c:c2:ba:dd:12:20:24:37:77:d1:53:2a: d0:6e:d9:87:09:0b:6a:71:df:c9:6e:e6:2a:71:f8: 12:bc:66:2e:23:c1:db:3e:75:64:90:fa:b6:88:e1: 4a:88:a1:01:59:28:04:f9:98:4d:a9:ad:08:ff:58: 02:d8:a8:37:5e:e0:36:ce:0c:7b:76:50:92:42:22: 96:a5:4f:df:c9:04:01:ff:13:e3:6f:1d:69:df:06: fa:08:80:f9:98:fc:6e:26:3d:34:09:a2:7d:5d:fa: f7:28:45:0d:81:b0:0e:5b:79:76:87:ab:a6:cb:80: 9f:a5:c8:08:96:2c:a2:d3:ec:ba:5a:ab:52:9c:87: ab:5f:93:1c:b5:55:f6:fa:3c:b7:ce:1f:f9:e2:af: 14:68:15:b1:6f:ca:53:af:44:04:18:0f:56:1d:b4: 9a:d5:a0:88:39:54:83:31:85:e9:64:a6:0c:03:35: 02:5d:cd:a1:2c:0c:4e:12:cd:94:b6:6c:4b:eb:7d: d1:29:a1:1e:47:97:eb:2f:73:2a:2b:07:64:4a:f9: 3a:eb:54:23:84:b5:b5:cd:15:ba:05:d6:ae:3b:e8: 39:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:87:B9:D4:B6:E7:54:07:55:C1:1C:F9:D1:E5:DD:95:4E:EC:A4:6B X509v3 Authority Key Identifier: keyid:30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:cb:00:8a:da:0f:f5:19:85:68:dd:e6:fc:49:cb:d0:8c:f2: 22:f4:e2:23:02:c7:91:1c:39:28:42:6d:04:3f:27:69:84:0a: a3:65:fb:ce:77:52:b6:18:c4:f9:56:74:02:63:03:ae:4f:0b: cf:65:13:df:81:5b:9a:0f:d7:b3:9a:b5:a1:2e:62:a6:90:0c: bd:d5:53:f6:91:cd:0c:e6:1b:06:d6:6e:52:b9:8c:5d:60:06: 63:66:e0:28:ab:47:03:d1:cf:8e:82:42:34:f9:e4:8c:89:95: 50:aa:10:54:44:85:6c:90:03:77:23:a8:65:35:49:84:af:b4: 1e:b8:a6:39:f2:40:8a:3f:c3:60:80:4c:7a:ad:38:19:7b:6f: 5d:9d:de:31:52:b3:30:14:07:f1:d3:bc:48:af:d0:0b:e6:6e: 5d:e6:35:ce:ae:ab:07:11:46:3b:6a:91:ed:db:86:7c:91:f2: 12:d6:2a:12:6c:fe:10:be:15:76:8e:1c:76:32:ff:71:33:ac: 18:95:4e:1b:73:f5:4f:d8:2d:39:1c:d0:4f:97:94:47:60:d5: c3:8b:b7:8f:72:a1:03:4a:be:bb:75:bf:18:58:6d:4b:ad:5c: 6d:70:b9:6d:22:0f:f9:35:a6:c0:18:8f:05:35:1a:b0:e6:48: 70:17:84:1c -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUbfQ4HueOkTJ/b6HILOa4PVpEWz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVC NEU5RTBGMDAeFw0yNjAzMDEyMDQ4MzVaFw0yNjAzMDIyMzE2MzVaMDMxMTAvBgNV BAMTKDc2ODdCOUQ0QjZFNzU0MDc1NUMxMUNGOUQxRTVERDk1NEVFQ0E0NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw+f4Jd8ZUxt7cGsDhapH9H1o6 8FQEmuWSGZCTC8T+uVzCut0SICQ3d9FTKtBu2YcJC2px38lu5ipx+BK8Zi4jwds+ dWSQ+raI4UqIoQFZKAT5mE2prQj/WALYqDde4DbODHt2UJJCIpalT9/JBAH/E+Nv HWnfBvoIgPmY/G4mPTQJon1d+vcoRQ2BsA5beXaHq6bLgJ+lyAiWLKLT7Lpaq1Kc h6tfkxy1Vfb6PLfOH/nirxRoFbFvylOvRAQYD1YdtJrVoIg5VIMxhelkpgwDNQJd zaEsDE4SzZS2bEvrfdEpoR5Hl+svcyorB2RK+TrrVCOEtbXNFboF1q476DmnAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUdoe51LbnVAdVwRz50eXdlU7spGswHwYDVR0j BBgwFoAUMHRW4DoR27SEQ+k1OJWLFbTp4PAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzEvMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVCNEU5RTBGMC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVCNEU5 RTBGMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTA5OGMyMy1h OTc3LTRmOWEtOTdjOS1jZDRlNzU5ZGVhMDkvMS8zMDc0NTZFMDNBMTFEQkI0ODQ0 M0U5MzUzODk1OEIxNUI0RTlFMEYwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZssAitoP9RmFaN3m/EnL 0IzyIvTiIwLHkRw5KEJtBD8naYQKo2X7zndSthjE+VZ0AmMDrk8Lz2UT34Fbmg/X s5q1oS5ippAMvdVT9pHNDOYbBtZuUrmMXWAGY2bgKKtHA9HPjoJCNPnkjImVUKoQ VESFbJADdyOoZTVJhK+0HrimOfJAij/DYIBMeq04GXtvXZ3eMVKzMBQH8dO8SK/Q C+ZuXeY1zq6rBxFGO2qR7duGfJHyEtYqEmz+EL4Vdo4cdjL/cTOsGJVOG3P1T9gt ORzQT5eUR2DVw4u3j3KhA0q+u3W/GFhtS61cbXC5bSIP+TWmwBiPBTUasOZIcBeE HA== -----END CERTIFICATE-----Generated at Mon Mar 2 00:18:38 2026 by rpki-client