$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft File: 307456E03A11DBB48443E93538958B15B4E9E0F0.mft (raw, json) Hash identifier: /qZPrttJIwMi/Y0TUqMjcBoMMUg9oSCTuX6s5qaP8B0= Subject key identifier: DC:F1:E9:FF:99:28:47:E9:56:D8:53:C5:E7:7A:B3:EB:E2:F6:A7:9F Authority key identifier: 30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0 Certificate issuer: /CN=307456E03A11DBB48443E93538958B15B4E9E0F0 Certificate serial: 12F0282CEF08322D86E106D74520DD02F4D9C57D Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft Manifest number: 01BC Signing time: Fri 12 Jun 2026 18:59:13 +0000 Manifest this update: Fri 12 Jun 2026 18:54:13 +0000 Manifest next update: Sat 13 Jun 2026 22:45:13 +0000 Files and hashes: 1: 307456E03A11DBB48443E93538958B15B4E9E0F0.crl (hash: rFWcmadCqwrXP/vWU7DYvL6l2OiQe+ywU7GXlu5+DaE=) 2: 3130332e3133392e38382e302f32342d3234203d3e20323134383039.roa (hash: aBp6U2aVMH3hSM5eeFVi+p63pJd0WYDoQYC72uEJ/w8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:f0:28:2c:ef:08:32:2d:86:e1:06:d7:45:20:dd:02:f4:d9:c5:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307456E03A11DBB48443E93538958B15B4E9E0F0 Validity Not Before: Jun 12 18:54:13 2026 GMT Not After : Jun 13 22:45:13 2026 GMT Subject: CN=DCF1E9FF992847E956D853C5E77AB3EBE2F6A79F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:bb:f2:36:ec:8a:94:43:59:db:f3:f8:96:b8: 08:7c:4a:57:83:f9:d4:2f:b6:49:4d:7e:5d:19:7c: 9c:f5:d2:7b:d2:dc:17:28:60:20:b4:cf:42:f3:39: fe:22:c8:90:6f:2d:f3:6a:79:8a:c4:f3:16:f7:71: a3:62:ad:fe:50:e3:db:50:4a:48:49:92:29:10:4f: a1:f3:58:75:d2:f3:93:da:c5:2a:64:9b:44:2c:88: 68:02:e9:52:e6:9e:ea:58:a2:ee:40:9c:74:bf:52: 61:28:65:2b:b6:11:24:a0:70:7b:45:de:15:df:68: 27:ee:a1:bb:89:49:9d:f2:67:62:a7:94:46:0c:14: b2:78:48:ea:97:17:5b:e4:ec:2e:ed:01:9b:0d:e7: c0:ed:8d:d2:5a:9e:30:56:a4:32:50:f3:c4:2b:53: fa:6c:aa:7e:31:7e:56:4e:ad:3d:95:fe:61:26:ec: 11:ee:a6:63:4b:8f:08:36:ba:16:66:5d:00:f9:af: e3:f4:16:74:c4:77:31:46:d8:a2:ff:64:d2:ea:a1: e8:b8:f8:74:1d:b7:14:71:ad:41:d5:7c:fc:27:00: ee:7e:13:a4:e7:61:ac:79:b7:b9:5c:d6:62:b5:10: be:21:b6:e6:d1:ce:7b:22:74:74:8a:1c:59:f8:0b: ee:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F1:E9:FF:99:28:47:E9:56:D8:53:C5:E7:7A:B3:EB:E2:F6:A7:9F X509v3 Authority Key Identifier: keyid:30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:d4:cd:51:88:55:b6:24:ed:49:13:98:d1:d7:73:ef:23:d4: e7:7d:0a:bb:5c:6d:3e:df:5b:b8:d0:1e:90:56:01:ce:63:b2: 03:da:56:c6:5d:f8:9b:60:91:98:3d:f0:d6:d7:92:94:a9:dd: 3f:13:94:04:6d:18:dc:4a:a0:a7:8c:ea:98:4b:d2:dd:87:6c: 33:55:bc:93:23:38:89:2d:fc:38:84:1a:37:5b:9b:3f:03:96: 5d:57:55:8e:d9:da:8d:7c:72:7f:b8:e3:e3:e1:c2:63:85:f9: 4a:2e:6f:ca:71:24:d1:6d:4c:56:9c:98:ee:c0:59:38:bd:b8: 88:17:8c:cf:15:a4:d6:c2:1c:35:3d:e6:b2:e8:4a:66:75:e4: 3d:f8:0f:3f:06:05:7b:c4:12:30:2d:7b:8b:68:88:c5:be:0d: c6:a2:2d:d0:e0:3f:7f:f4:ee:75:4b:5a:c1:44:08:d6:7b:6a: 9a:2c:c3:61:ae:ef:59:4b:5f:0b:f1:b7:67:3b:c7:c5:92:30: e7:0c:cd:30:71:19:f6:4b:34:9d:44:98:4d:2f:e7:42:6d:28: 9f:a0:53:b7:5c:07:c0:63:d1:48:b3:41:d6:c2:3a:d5:1b:bc: 4e:74:30:98:ef:7a:90:ec:1c:f1:50:17:cd:e9:91:0d:20:0c: a1:b7:7b:b2 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUEvAoLO8IMi2G4QbXRSDdAvTZxX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVC NEU5RTBGMDAeFw0yNjA2MTIxODU0MTNaFw0yNjA2MTMyMjQ1MTNaMDMxMTAvBgNV BAMTKERDRjFFOUZGOTkyODQ3RTk1NkQ4NTNDNUU3N0FCM0VCRTJGNkE3OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgu/I27IqUQ1nb8/iWuAh8SleD +dQvtklNfl0ZfJz10nvS3BcoYCC0z0LzOf4iyJBvLfNqeYrE8xb3caNirf5Q49tQ SkhJkikQT6HzWHXS85PaxSpkm0QsiGgC6VLmnupYou5AnHS/UmEoZSu2ESSgcHtF 3hXfaCfuobuJSZ3yZ2KnlEYMFLJ4SOqXF1vk7C7tAZsN58DtjdJanjBWpDJQ88Qr U/psqn4xflZOrT2V/mEm7BHupmNLjwg2uhZmXQD5r+P0FnTEdzFG2KL/ZNLqoei4 +HQdtxRxrUHVfPwnAO5+E6TnYax5t7lc1mK1EL4htubRznsidHSKHFn4C+7ZAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU3PHp/5koR+lW2FPF53qz6+L2p58wHwYDVR0j BBgwFoAUMHRW4DoR27SEQ+k1OJWLFbTp4PAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzEvMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVCNEU5RTBGMC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVCNEU5 RTBGMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTA5OGMyMy1h OTc3LTRmOWEtOTdjOS1jZDRlNzU5ZGVhMDkvMS8zMDc0NTZFMDNBMTFEQkI0ODQ0 M0U5MzUzODk1OEIxNUI0RTlFMEYwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9TNUYhVtiTtSROY0ddz 7yPU530Ku1xtPt9buNAekFYBzmOyA9pWxl34m2CRmD3w1teSlKndPxOUBG0Y3Eqg p4zqmEvS3YdsM1W8kyM4iS38OIQaN1ubPwOWXVdVjtnajXxyf7jj4+HCY4X5Si5v ynEk0W1MVpyY7sBZOL24iBeMzxWk1sIcNT3msuhKZnXkPfgPPwYFe8QSMC17i2iI xb4NxqIt0OA/f/TudUtawUQI1ntqmizDYa7vWUtfC/G3ZzvHxZIw5wzNMHEZ9ks0 nUSYTS/nQm0on6BTt1wHwGPRSLNB1sI61Ru8TnQwmO96kOwc8VAXzemRDSAMobd7 sg== -----END CERTIFICATE-----Generated at Sat Jun 13 13:21:26 2026 by rpki-client