$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft File: C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft (raw, json) Hash identifier: 5Ll9+L7MVOE/Im+s4oAdo9T5LS4pawXDftLGk8geBwA= Subject key identifier: C2:51:21:01:3B:B3:F8:87:3B:3E:61:F5:52:26:81:A3:D8:D4:C0:96 Authority key identifier: C3:F0:2C:2A:F3:82:37:7A:DA:9B:51:F2:EA:37:0E:74:54:12:D1:DF Certificate issuer: /CN=C3F02C2AF382377ADA9B51F2EA370E745412D1DF Certificate serial: 5B18C7EB16E7F453C547A74E418BB19E2CD10C5D Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft Manifest number: DA Signing time: Tue 28 Jul 2026 10:14:03 +0000 Manifest this update: Tue 28 Jul 2026 10:09:03 +0000 Manifest next update: Wed 29 Jul 2026 10:44:03 +0000 Files and hashes: 1: C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl (hash: r4lBdAwM7mZzbBfQ7gRPMRZTbQx7BMokxNY5nN1QZAw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 10:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:18:c7:eb:16:e7:f4:53:c5:47:a7:4e:41:8b:b1:9e:2c:d1:0c:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3F02C2AF382377ADA9B51F2EA370E745412D1DF Validity Not Before: Jul 28 10:09:03 2026 GMT Not After : Jul 29 10:44:03 2026 GMT Subject: CN=C25121013BB3F8873B3E61F5522681A3D8D4C096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:95:75:7c:53:f7:3a:5e:60:a1:ca:5e:ed:32: aa:c2:e6:6d:06:37:10:b2:c9:b0:da:c2:6c:48:7b: 4d:74:e5:c4:4a:e0:21:a5:d1:a4:ce:c8:7d:da:8f: c8:bf:78:27:5e:d6:88:78:cf:57:a2:24:ed:8a:5e: d9:41:1a:0e:76:b8:8b:64:ac:26:c8:06:29:04:4a: 88:f5:2b:4e:43:34:1b:5c:1c:6b:4b:19:45:49:54: cd:99:79:49:98:ba:a1:0a:a5:f6:0d:81:41:12:4b: c9:27:00:ea:ec:39:43:0a:e1:7c:82:3a:7e:b1:2a: dd:97:a3:9e:51:4f:f3:1b:29:d6:d1:72:04:83:54: 29:2d:3a:77:b3:53:6d:77:67:cf:1a:d2:18:10:7e: 2f:ee:4d:f7:3d:3e:94:b0:4c:ea:0e:02:2e:6f:93: 31:9e:a5:5d:87:f3:d2:df:d7:03:6b:1f:e5:b5:d1: 68:b7:a8:10:0c:43:5d:50:f8:cc:46:07:c7:a0:79: be:98:b7:c5:f7:61:bb:c9:82:55:d6:0a:03:ad:c1: e3:ec:85:45:c5:6a:f4:cc:4a:bc:1a:d1:70:53:9b: 84:d1:2d:e1:a4:54:98:d9:77:b1:70:5a:69:74:d6: ca:7e:69:4d:f3:3b:9b:0f:bb:89:db:0a:a1:69:04: 91:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:51:21:01:3B:B3:F8:87:3B:3E:61:F5:52:26:81:A3:D8:D4:C0:96 X509v3 Authority Key Identifier: keyid:C3:F0:2C:2A:F3:82:37:7A:DA:9B:51:F2:EA:37:0E:74:54:12:D1:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:d4:86:6a:e4:78:f5:58:a4:33:98:8d:8e:db:d2:9c:81:31: 7a:ab:28:8f:c7:86:0a:4f:f0:e3:59:46:29:f0:2a:4f:d8:b6: cc:fb:81:91:60:e5:f2:68:24:26:a4:50:c0:ec:36:d8:d3:f1: 88:be:4c:43:c3:69:ec:5c:b3:c3:69:89:ca:42:b6:d5:5b:dd: 47:00:41:c4:05:4d:0f:57:8c:57:10:ba:5b:4e:ed:15:90:36: c8:0f:0f:ad:6d:2f:de:d5:36:35:99:a4:6a:23:4f:68:df:60: 8c:16:b1:d8:28:dd:5e:63:e4:4c:6b:4d:fd:62:a3:3c:9c:47: a5:56:2a:75:b1:32:5d:fc:fb:d5:66:5c:e0:f6:3a:5e:ff:fa: 9d:22:33:94:d3:77:b7:54:e9:3e:5c:5e:67:01:2a:73:a5:8f: f9:1c:04:eb:07:07:9e:5c:ea:83:b7:a7:12:76:79:13:92:c4: e4:86:a4:91:2b:de:10:90:a7:9c:f8:cd:f6:cf:1c:ba:11:28: bc:11:d0:47:07:fd:27:94:97:e2:9f:aa:35:d9:73:cb:21:cc: 81:6b:67:f5:d5:15:af:4f:11:46:97:d3:da:3e:02:7d:21:91: a8:9a:ec:01:9e:5b:6c:e0:1e:08:2e:35:f0:7e:c7:19:11:ca: 18:f5:2e:42 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUWxjH6xbn9FPFR6dOQYuxnizRDF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1 NDEyRDFERjAeFw0yNjA3MjgxMDA5MDNaFw0yNjA3MjkxMDQ0MDNaMDMxMTAvBgNV BAMTKEMyNTEyMTAxM0JCM0Y4ODczQjNFNjFGNTUyMjY4MUEzRDhENEMwOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZlXV8U/c6XmChyl7tMqrC5m0G NxCyybDawmxIe0105cRK4CGl0aTOyH3aj8i/eCde1oh4z1eiJO2KXtlBGg52uItk rCbIBikESoj1K05DNBtcHGtLGUVJVM2ZeUmYuqEKpfYNgUESS8knAOrsOUMK4XyC On6xKt2Xo55RT/MbKdbRcgSDVCktOnezU213Z88a0hgQfi/uTfc9PpSwTOoOAi5v kzGepV2H89Lf1wNrH+W10Wi3qBAMQ11Q+MxGB8egeb6Yt8X3YbvJglXWCgOtwePs hUXFavTMSrwa0XBTm4TRLeGkVJjZd7FwWml01sp+aU3zO5sPu4nbCqFpBJETAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUwlEhATuz+Ic7PmH1UiaBo9jUwJYwHwYDVR0j BBgwFoAUw/AsKvOCN3ram1Hy6jcOdFQS0d8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzEvQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1NDEyRDFERi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQzNGMDJDMkFGMzgyMzc3QURBOUI1MUYyRUEzNzBFNzQ1NDEy RDFERi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTA5OGMyMy1h OTc3LTRmOWEtOTdjOS1jZDRlNzU5ZGVhMDkvMS9DM0YwMkMyQUYzODIzNzdBREE5 QjUxRjJFQTM3MEU3NDU0MTJEMURGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARNSGauR49VikM5iNjtvS nIExeqsoj8eGCk/w41lGKfAqT9i2zPuBkWDl8mgkJqRQwOw22NPxiL5MQ8Np7Fyz w2mJykK21VvdRwBBxAVND1eMVxC6W07tFZA2yA8PrW0v3tU2NZmkaiNPaN9gjBax 2CjdXmPkTGtN/WKjPJxHpVYqdbEyXfz71WZc4PY6Xv/6nSIzlNN3t1TpPlxeZwEq c6WP+RwE6wcHnlzqg7enEnZ5E5LE5IakkSveEJCnnPjN9s8cuhEovBHQRwf9J5SX 4p+qNdlzyyHMgWtn9dUVr08RRpfT2j4CfSGRqJrsAZ5bbOAeCC418H7HGRHKGPUu Qg== -----END CERTIFICATE-----Generated at Tue Jul 28 19:26:14 2026 by rpki-client