$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft File: C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft (raw, json) Hash identifier: SgqmkKOiIqLXMJdRe0q+wW/D6KLCmx8IgrU0yzICsFs= Subject key identifier: 61:19:F3:1F:13:BE:63:68:95:0A:E3:16:F9:29:4D:AF:7A:68:52:26 Authority key identifier: C3:F0:2C:2A:F3:82:37:7A:DA:9B:51:F2:EA:37:0E:74:54:12:D1:DF Certificate issuer: /CN=C3F02C2AF382377ADA9B51F2EA370E745412D1DF Certificate serial: 4FADC5CA0951D015E224EBD5481B38A92BA1640B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft Manifest number: 4B Signing time: Thu 16 Apr 2026 12:57:45 +0000 Manifest this update: Thu 16 Apr 2026 12:52:45 +0000 Manifest next update: Fri 17 Apr 2026 16:46:45 +0000 Files and hashes: 1: C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl (hash: qej5SVbMuZQVmKRwVoJELeCo2sRZzQA1g6ZnxZxyI/s=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 16:46:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ad:c5:ca:09:51:d0:15:e2:24:eb:d5:48:1b:38:a9:2b:a1:64:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3F02C2AF382377ADA9B51F2EA370E745412D1DF Validity Not Before: Apr 16 12:52:45 2026 GMT Not After : Apr 17 16:46:45 2026 GMT Subject: CN=6119F31F13BE6368950AE316F9294DAF7A685226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:76:86:0d:47:32:c7:ae:40:f2:91:16:c7:2c: 0a:5a:a5:ad:32:72:05:a1:88:60:be:f8:eb:64:92: 94:b1:9e:57:75:04:09:e7:9c:9c:b5:10:89:9d:1d: 68:c1:96:1e:5b:3a:b3:03:5a:2b:e5:83:f5:df:7f: e0:57:4f:b3:90:1d:b0:30:9e:2a:6e:d6:28:6a:40: 55:93:25:aa:9d:3b:01:73:2a:85:88:3b:f0:b4:39: 82:09:89:33:28:4a:2a:59:b3:b4:53:6a:07:82:d0: 4b:4d:de:4a:1b:a3:79:55:3f:a6:01:91:0b:5b:33: 04:01:7d:3e:af:8a:c1:b6:12:71:a6:45:8f:c0:32: 7f:c8:a7:e5:70:d4:53:9a:9f:29:70:33:9c:47:68: b3:3a:f1:80:10:5b:31:1d:6e:fa:51:0b:7c:cc:92: c2:d2:58:ab:21:89:62:8b:42:84:21:6b:e9:8c:7c: 80:8e:8c:24:3b:6b:9d:17:14:c3:2c:01:60:ca:09: f7:ee:e3:95:bb:f1:27:29:11:34:c4:9b:61:e4:12: 62:ac:29:08:80:f0:b4:9b:7f:78:10:0f:c7:32:de: 1f:36:cf:6b:6f:18:89:5d:58:60:ba:1d:8b:ae:ab: f9:fa:30:03:dc:42:f3:c4:54:95:14:1d:0b:fc:21: 5e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:19:F3:1F:13:BE:63:68:95:0A:E3:16:F9:29:4D:AF:7A:68:52:26 X509v3 Authority Key Identifier: keyid:C3:F0:2C:2A:F3:82:37:7A:DA:9B:51:F2:EA:37:0E:74:54:12:D1:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:1e:f4:3a:ca:e3:63:b2:22:3c:5d:ab:85:e8:93:c3:22:a8: 8b:c1:52:e5:65:4d:0d:6f:5e:81:49:58:e4:d4:9b:62:18:b5: 1f:d7:85:ed:8d:bb:17:56:8b:5a:49:f2:20:78:21:9d:1f:37: 6d:43:15:9d:4c:09:d5:62:7c:a6:93:8f:1e:e7:6f:1b:87:d7: 1a:30:df:2f:52:1d:77:9c:5e:ac:94:89:b9:7f:87:66:85:34: 01:d7:da:62:7d:f7:5a:fc:11:a7:50:91:05:fb:21:95:aa:8f: b3:67:f7:02:66:ca:c0:d4:ed:51:13:5b:21:36:d1:1e:18:ff: b0:02:04:8c:61:e1:5c:45:db:e7:55:7f:64:33:ce:0d:8c:11: cf:d0:b8:ea:a2:63:60:9c:7a:f8:5e:d7:f1:65:76:7f:90:3f: 62:13:76:4b:32:13:30:3d:3f:43:ea:e4:83:5f:09:bb:c5:a6: 4f:ad:b9:ed:b2:ce:29:b0:c6:a3:4b:c4:af:da:51:e5:af:0b: cb:d7:60:e7:32:ba:58:21:b5:80:c3:60:68:83:3c:28:6f:3c: ef:5f:c4:e9:39:a0:f7:f2:b6:8f:50:ec:92:9d:06:85:d2:05: 71:c4:f2:fe:6b:0b:68:7a:1a:38:5d:e7:a4:a4:59:f8:c1:7c: be:30:bb:44 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUT63FyglR0BXiJOvVSBs4qSuhZAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1 NDEyRDFERjAeFw0yNjA0MTYxMjUyNDVaFw0yNjA0MTcxNjQ2NDVaMDMxMTAvBgNV BAMTKDYxMTlGMzFGMTNCRTYzNjg5NTBBRTMxNkY5Mjk0REFGN0E2ODUyMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqdoYNRzLHrkDykRbHLApapa0y cgWhiGC++OtkkpSxnld1BAnnnJy1EImdHWjBlh5bOrMDWivlg/Xff+BXT7OQHbAw nipu1ihqQFWTJaqdOwFzKoWIO/C0OYIJiTMoSipZs7RTageC0EtN3kobo3lVP6YB kQtbMwQBfT6visG2EnGmRY/AMn/Ip+Vw1FOanylwM5xHaLM68YAQWzEdbvpRC3zM ksLSWKshiWKLQoQha+mMfICOjCQ7a50XFMMsAWDKCffu45W78ScpETTEm2HkEmKs KQiA8LSbf3gQD8cy3h82z2tvGIldWGC6HYuuq/n6MAPcQvPEVJUUHQv8IV5NAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUYRnzHxO+Y2iVCuMW+SlNr3poUiYwHwYDVR0j BBgwFoAUw/AsKvOCN3ram1Hy6jcOdFQS0d8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzEvQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1NDEyRDFERi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1NDEy RDFERi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTA5OGMyMy1h OTc3LTRmOWEtOTdjOS1jZDRlNzU5ZGVhMDkvMS9DM0YwMkMyQUYzODIzNzdBREE5 QjUxRjJFQTM3MEU3NDU0MTJEMURGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAh70OsrjY7IiPF2rheiT wyKoi8FS5WVNDW9egUlY5NSbYhi1H9eF7Y27F1aLWknyIHghnR83bUMVnUwJ1WJ8 ppOPHudvG4fXGjDfL1Idd5xerJSJuX+HZoU0AdfaYn33WvwRp1CRBfshlaqPs2f3 AmbKwNTtURNbITbRHhj/sAIEjGHhXEXb51V/ZDPODYwRz9C46qJjYJx6+F7X8WV2 f5A/YhN2SzITMD0/Q+rkg18Ju8WmT6257bLOKbDGo0vEr9pR5a8Ly9dg5zK6WCG1 gMNgaIM8KG8871/E6Tmg9/K2j1Dskp0GhdIFccTy/msLaHoaOF3npKRZ+MF8vjC7 RA== -----END CERTIFICATE-----Generated at Fri Apr 17 05:24:08 2026 by rpki-client