$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft File: C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft (raw, json) Hash identifier: u4rHq+nPEnJL4P7qAjYdbm7PtfwvzK7CGnw95WxK0CQ= Subject key identifier: DA:32:96:16:39:B4:C9:00:0B:BD:66:FF:32:F1:6B:D0:3F:6C:3A:12 Authority key identifier: C3:F0:2C:2A:F3:82:37:7A:DA:9B:51:F2:EA:37:0E:74:54:12:D1:DF Certificate issuer: /CN=C3F02C2AF382377ADA9B51F2EA370E745412D1DF Certificate serial: 4F0007B5138FAA4EB8ED354A58B41E9547E2411B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft Manifest number: 0126 Signing time: Mon 21 Sep 2026 08:44:46 +0000 Manifest this update: Mon 21 Sep 2026 08:39:46 +0000 Manifest next update: Tue 22 Sep 2026 08:49:46 +0000 Files and hashes: 1: C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl (hash: fRqlBfXbnxeQRwrkXMmRlg4AUwD3bXkAEwkL7T3hfkQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 08:49:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:00:07:b5:13:8f:aa:4e:b8:ed:35:4a:58:b4:1e:95:47:e2:41:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3F02C2AF382377ADA9B51F2EA370E745412D1DF Validity Not Before: Sep 21 08:39:46 2026 GMT Not After : Sep 22 08:49:46 2026 GMT Subject: CN=DA32961639B4C9000BBD66FF32F16BD03F6C3A12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dd:81:25:92:f4:d7:42:1e:47:09:03:12:c9: cc:d2:d4:5a:76:8d:b6:d2:85:f4:ec:18:2b:26:b8: 27:92:80:d0:a5:99:e1:59:d6:e3:32:67:b0:3f:88: 25:ea:57:c7:55:ab:17:7b:87:f9:cc:dc:8c:ec:56: e0:ec:04:c6:ef:3a:58:db:0a:a0:01:db:d5:12:e7: a6:8c:84:a9:5a:99:60:d1:36:4a:19:ac:1f:5b:a4: 10:82:6a:44:de:00:b2:6d:85:c7:9c:df:25:68:ff: 85:27:c0:38:61:33:76:e0:4d:ac:2c:df:f9:d8:cd: 9c:ab:4e:35:98:17:0a:b3:bf:2d:7f:2b:b6:89:d6: 5e:be:92:83:c8:58:a6:16:35:4d:0f:1b:2b:a3:ec: c7:ed:4a:dd:6d:db:b9:75:1f:3d:bc:61:ea:e8:4d: cc:e4:86:cc:16:d0:a8:33:68:d8:93:5f:b0:f8:61: e1:ba:35:19:2d:f0:0a:57:61:86:e8:2d:24:36:cb: 24:0a:bd:c8:27:da:16:9a:d1:eb:28:4a:92:3e:7e: 23:d8:7a:94:23:67:e6:f0:65:9d:a2:09:ec:47:a5: 21:ab:2a:86:97:5f:ab:80:a7:11:af:1e:d0:7a:a1: cd:88:ce:1c:dc:26:18:f9:92:e6:58:ba:2a:b4:2c: ac:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:32:96:16:39:B4:C9:00:0B:BD:66:FF:32:F1:6B:D0:3F:6C:3A:12 X509v3 Authority Key Identifier: keyid:C3:F0:2C:2A:F3:82:37:7A:DA:9B:51:F2:EA:37:0E:74:54:12:D1:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:c3:f1:ba:aa:0c:ea:84:3d:f5:48:28:a0:07:51:ef:f6:ad: 6f:5b:46:51:88:cb:84:67:42:23:06:9f:4d:36:08:c8:11:42: de:4d:20:56:4b:52:b6:8c:3c:ae:8c:aa:c6:dd:26:54:e5:e8: 6f:e1:dc:66:9d:7a:92:4a:a7:65:4c:eb:b1:66:a9:bc:3d:86: 97:65:87:d1:e4:23:42:3c:11:81:54:ca:3b:3d:7b:4a:ac:7d: df:55:14:c4:26:00:ba:f0:4f:ff:03:3f:41:bc:26:4d:a0:a9: d0:dd:6e:58:89:6a:c0:04:d4:03:5e:02:dd:0c:78:6a:ac:00: b3:d5:d7:b6:27:c0:7f:f7:07:c3:cf:6a:9d:62:54:ab:57:72: 9c:09:60:b7:7c:e0:ee:40:03:14:45:81:08:19:b1:f6:fc:66: fb:d6:a9:fb:17:8d:92:bf:c2:d4:3e:e6:71:72:ab:b3:f5:b6: 70:d0:d6:6e:4d:82:01:a1:79:b3:fd:1a:c3:12:4a:a4:1a:7f: bc:64:94:fd:95:ac:05:e8:da:f0:7e:ae:28:36:62:b5:ad:a7: a3:43:6c:17:56:54:16:4e:1f:21:1b:f9:8b:aa:32:52:ff:c4: d9:57:b1:ba:f6:4d:a1:14:96:ac:a8:be:23:03:d5:f8:09:8f: f2:e7:24:d4 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUTwAHtROPqk647TVKWLQelUfiQRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1 NDEyRDFERjAeFw0yNjA5MjEwODM5NDZaFw0yNjA5MjIwODQ5NDZaMDMxMTAvBgNV BAMTKERBMzI5NjE2MzlCNEM5MDAwQkJENjZGRjMyRjE2QkQwM0Y2QzNBMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC33YElkvTXQh5HCQMSyczS1Fp2 jbbShfTsGCsmuCeSgNClmeFZ1uMyZ7A/iCXqV8dVqxd7h/nM3IzsVuDsBMbvOljb CqAB29US56aMhKlamWDRNkoZrB9bpBCCakTeALJthcec3yVo/4UnwDhhM3bgTaws 3/nYzZyrTjWYFwqzvy1/K7aJ1l6+koPIWKYWNU0PGyuj7MftSt1t27l1Hz28Yero TczkhswW0KgzaNiTX7D4YeG6NRkt8ApXYYboLSQ2yyQKvcgn2haa0esoSpI+fiPY epQjZ+bwZZ2iCexHpSGrKoaXX6uApxGvHtB6oc2IzhzcJhj5kuZYuiq0LKxDAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU2jKWFjm0yQALvWb/MvFr0D9sOhIwHwYDVR0j BBgwFoAUw/AsKvOCN3ram1Hy6jcOdFQS0d8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzEvQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1NDEyRDFERi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1NDEy RDFERi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTA5OGMyMy1h OTc3LTRmOWEtOTdjOS1jZDRlNzU5ZGVhMDkvMS9DM0YwMkMyQUYzODIzNzdBREE5 QjUxRjJFQTM3MEU3NDU0MTJEMURGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHMPxuqoM6oQ99UgooAdR 7/atb1tGUYjLhGdCIwafTTYIyBFC3k0gVktStow8royqxt0mVOXob+HcZp16kkqn ZUzrsWapvD2Gl2WH0eQjQjwRgVTKOz17Sqx931UUxCYAuvBP/wM/QbwmTaCp0N1u WIlqwATUA14C3Qx4aqwAs9XXtifAf/cHw89qnWJUq1dynAlgt3zg7kADFEWBCBmx 9vxm+9ap+xeNkr/C1D7mcXKrs/W2cNDWbk2CAaF5s/0awxJKpBp/vGSU/ZWsBeja 8H6uKDZita2no0NsF1ZUFk4fIRv5i6oyUv/E2VexuvZNoRSWrKi+IwPV+AmP8uck 1A== -----END CERTIFICATE-----Generated at Mon Sep 21 16:34:18 2026 by rpki-client