$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft File: 307456E03A11DBB48443E93538958B15B4E9E0F0.mft (raw, json) Hash identifier: Ilfkb28EdA2Jfn//PUB8smkckBrgACPKkOXvkuP2mE8= Subject key identifier: D9:D7:06:35:38:7E:7D:5C:88:95:E6:F5:A2:30:DE:A7:CB:4D:C6:12 Authority key identifier: 30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0 Certificate issuer: /CN=307456E03A11DBB48443E93538958B15B4E9E0F0 Certificate serial: 6C5E3F714BA2E9109E63AF466B35B3F101EEC699 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft Manifest number: 016E Signing time: Fri 17 Apr 2026 07:42:46 +0000 Manifest this update: Fri 17 Apr 2026 07:37:46 +0000 Manifest next update: Sat 18 Apr 2026 09:31:46 +0000 Files and hashes: 1: 307456E03A11DBB48443E93538958B15B4E9E0F0.crl (hash: 6++lUaHomV0+F8/QnY90lVM+3fa2kuYUJACAlPtnXLM=) 2: 3130332e3133392e38382e302f32342d3234203d3e20323134383039.roa (hash: aBp6U2aVMH3hSM5eeFVi+p63pJd0WYDoQYC72uEJ/w8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:5e:3f:71:4b:a2:e9:10:9e:63:af:46:6b:35:b3:f1:01:ee:c6:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307456E03A11DBB48443E93538958B15B4E9E0F0 Validity Not Before: Apr 17 07:37:46 2026 GMT Not After : Apr 18 09:31:46 2026 GMT Subject: CN=D9D70635387E7D5C8895E6F5A230DEA7CB4DC612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:66:60:9f:fe:d3:a0:e1:c6:63:89:af:ff:16: 98:a4:08:83:66:e6:8a:c4:28:27:41:1e:38:09:a2: d1:5c:e3:e2:a1:b5:86:c8:fb:cb:5e:c3:32:80:35: b8:0c:bf:9d:61:71:30:10:2d:c0:29:57:86:75:e0: 64:42:5c:42:e0:cd:49:03:dd:41:f3:a8:9c:d0:65: 02:2b:27:27:a6:8a:da:6e:93:69:4f:52:e6:69:4f: 59:e8:b8:31:c7:e0:30:d5:7a:39:25:1f:d3:9f:4d: be:54:bc:d5:5e:57:f3:9a:3e:27:64:ba:d4:1e:58: 1e:d2:6c:31:f5:70:53:c3:b3:a5:f4:7d:42:f3:42: 9b:36:10:8b:45:f2:58:55:1b:90:1a:c6:35:53:f3: b8:4b:46:53:10:8b:94:46:63:f6:44:d3:b0:60:74: 3c:88:3d:cc:14:65:0a:a5:1a:b8:9d:3e:14:2a:4f: 6f:a9:a7:68:fa:97:c3:f5:fb:e5:34:c8:21:80:9b: 18:7c:5f:d9:0b:f7:5a:01:bf:95:14:df:8a:08:f4: a6:9e:7f:c4:8b:48:ec:99:ce:20:ec:d8:2b:b0:a2: 8b:55:9d:0a:bc:a1:0b:48:87:40:f4:f3:f7:20:87: 62:fc:9e:df:46:5b:03:f3:ce:ba:25:55:33:ee:e9: 21:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D7:06:35:38:7E:7D:5C:88:95:E6:F5:A2:30:DE:A7:CB:4D:C6:12 X509v3 Authority Key Identifier: keyid:30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:25:58:06:cf:4d:b9:84:b4:f4:44:37:9a:bc:27:6c:44:68: e0:3e:67:1d:54:74:f4:ea:c9:3a:d2:ee:df:4a:d0:09:95:bc: 9b:88:e7:73:95:bc:73:52:a8:a8:7d:86:10:d2:e8:c3:14:f3: 34:70:7c:46:07:84:07:48:86:15:7e:9b:4d:25:96:6b:97:88: 6a:4d:06:d5:64:5c:a2:4d:2b:d7:ff:c8:78:be:d2:22:7d:ec: 1c:ed:19:5e:f0:03:37:50:f8:46:67:74:e5:7f:18:52:fc:db: 95:d2:f9:cd:9e:7b:d6:19:cb:bb:90:00:f3:30:ab:88:3a:d1: e8:ee:d0:45:f8:6e:ff:56:48:03:fb:b7:4c:c0:e2:62:9f:f0: 82:77:50:18:ec:84:d9:11:07:9e:04:4f:5b:d1:fb:0a:d3:90: cb:6e:49:51:51:ca:1e:a8:ce:18:aa:ed:df:57:f6:39:69:23: aa:92:2f:f5:22:c6:97:30:b3:ea:b3:ec:bd:0f:32:0c:66:65: 79:69:dc:47:ad:6e:78:3f:48:75:de:71:41:ba:b1:76:1a:02: 0b:6a:df:bb:16:59:f3:53:57:43:3a:60:08:96:83:77:97:e3: 9e:d2:0e:90:30:3d:71:ea:9a:c5:c3:0f:4d:e6:52:dc:0b:d6: 4c:cd:ca:c3 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUbF4/cUui6RCeY69GazWz8QHuxpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVC NEU5RTBGMDAeFw0yNjA0MTcwNzM3NDZaFw0yNjA0MTgwOTMxNDZaMDMxMTAvBgNV BAMTKEQ5RDcwNjM1Mzg3RTdENUM4ODk1RTZGNUEyMzBERUE3Q0I0REM2MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaZmCf/tOg4cZjia//FpikCINm 5orEKCdBHjgJotFc4+KhtYbI+8tewzKANbgMv51hcTAQLcApV4Z14GRCXELgzUkD 3UHzqJzQZQIrJyemitpuk2lPUuZpT1nouDHH4DDVejklH9OfTb5UvNVeV/OaPidk utQeWB7SbDH1cFPDs6X0fULzQps2EItF8lhVG5AaxjVT87hLRlMQi5RGY/ZE07Bg dDyIPcwUZQqlGridPhQqT2+pp2j6l8P1++U0yCGAmxh8X9kL91oBv5UU34oI9Kae f8SLSOyZziDs2CuwootVnQq8oQtIh0D08/cgh2L8nt9GWwPzzrolVTPu6SHpAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU2dcGNTh+fVyIleb1ojDep8tNxhIwHwYDVR0j BBgwFoAUMHRW4DoR27SEQ+k1OJWLFbTp4PAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzEvMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVCNEU5RTBGMC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVCNEU5 RTBGMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTA5OGMyMy1h OTc3LTRmOWEtOTdjOS1jZDRlNzU5ZGVhMDkvMS8zMDc0NTZFMDNBMTFEQkI0ODQ0 M0U5MzUzODk1OEIxNUI0RTlFMEYwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAciVYBs9NuYS09EQ3mrwn bERo4D5nHVR09OrJOtLu30rQCZW8m4jnc5W8c1KoqH2GENLowxTzNHB8RgeEB0iG FX6bTSWWa5eIak0G1WRcok0r1//IeL7SIn3sHO0ZXvADN1D4Rmd05X8YUvzbldL5 zZ571hnLu5AA8zCriDrR6O7QRfhu/1ZIA/u3TMDiYp/wgndQGOyE2REHngRPW9H7 CtOQy25JUVHKHqjOGKrt31f2OWkjqpIv9SLGlzCz6rPsvQ8yDGZleWncR61ueD9I dd5xQbqxdhoCC2rfuxZZ81NXQzpgCJaDd5fjntIOkDA9ceqaxcMPTeZS3AvWTM3K ww== -----END CERTIFICATE-----Generated at Fri Apr 17 09:47:42 2026 by rpki-client