$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft File: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft (raw, json) Hash identifier: XHPstxaO5XPKdy8dy44BwN0VBc9CPYkHHk5R4wLW3bI= Subject key identifier: F6:49:02:51:BE:24:B8:7F:6B:CA:E5:DE:E1:B4:2D:CB:B7:94:4F:D3 Authority key identifier: 0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 Certificate issuer: /CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Certificate serial: 5F3CBE0CE60EF125BD98AF4790B0A024015AA193 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft Manifest number: 0140 Signing time: Sun 01 Mar 2026 13:28:01 +0000 Manifest this update: Sun 01 Mar 2026 13:23:01 +0000 Manifest next update: Mon 02 Mar 2026 14:57:01 +0000 Files and hashes: 1: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl (hash: 9mbD6dIf9wgvcMcl8U8qp+Jc/4BCV5QJ0XVl/rYpMcU=) 2: 326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (hash: PoxwFIHy8kdey2mlHnL1hmx4hhF1/GhCPxY1mv6kDWE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 05:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:3c:be:0c:e6:0e:f1:25:bd:98:af:47:90:b0:a0:24:01:5a:a1:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Validity Not Before: Mar 1 13:23:01 2026 GMT Not After : Mar 2 14:57:01 2026 GMT Subject: CN=F6490251BE24B87F6BCAE5DEE1B42DCBB7944FD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f8:cd:fa:ca:22:7c:56:ab:04:73:6d:ae:81: a5:56:f5:8f:6a:1e:b7:9f:cc:dd:e5:08:f9:e0:cd: 9a:46:73:11:b2:a1:84:58:61:ae:49:5a:9f:6c:cd: 0a:62:f0:7b:9b:27:ac:1d:84:17:db:d3:66:ed:e8: 3f:9c:f1:b3:ca:52:d7:75:57:98:25:39:55:25:fb: ac:07:d9:db:45:4e:7a:2e:26:6c:c5:e7:3c:58:0b: 71:af:dc:a4:c4:0b:bf:51:f3:e3:ae:89:3c:b5:f8: a4:e2:49:32:3b:30:d5:21:9f:7a:0b:8c:ca:23:41: 26:f8:ff:70:70:8e:26:c0:4c:49:78:dd:7b:2e:26: e1:60:32:cd:5c:55:81:54:57:58:11:48:67:bd:5b: 7b:a5:a8:a9:73:b4:a7:aa:18:f6:a5:cb:89:20:a2: 61:b0:4e:29:31:fc:df:85:d9:d2:ea:6f:85:c1:06: c5:31:a9:1a:d8:03:c3:3a:f4:71:9a:b8:1e:f4:d4: 3e:9a:1d:a3:60:7e:e8:f7:e6:cb:5c:8d:b5:3f:88: 26:0b:55:fc:39:61:dd:6d:60:0b:42:18:44:70:c3: 51:54:71:06:be:22:37:1e:60:3b:26:95:82:a2:fe: a2:53:07:4b:42:de:88:ff:7d:f8:39:35:7b:c2:d4: 74:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:49:02:51:BE:24:B8:7F:6B:CA:E5:DE:E1:B4:2D:CB:B7:94:4F:D3 X509v3 Authority Key Identifier: keyid:0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:9e:c1:33:35:ca:ec:5f:97:fe:6c:8a:02:07:c1:16:1b:36: cb:0d:9d:8a:29:a7:d6:e4:de:27:c7:b7:bc:95:9d:e1:6e:11: 12:fc:aa:e1:5f:16:90:d6:82:4f:b2:39:93:db:8e:d0:8e:ac: 1a:fc:76:3e:30:d2:ae:9d:d5:95:74:af:ec:d5:9e:5d:64:4a: 4f:0e:d3:0e:e0:20:c7:cf:b4:a5:1c:1c:22:62:d9:bf:87:46: 5e:b8:2c:df:35:c2:56:fe:13:76:b4:64:30:92:bb:60:66:db: 82:ea:12:27:81:15:16:a5:9d:19:f4:d9:77:2a:6d:16:27:89: c7:03:31:ba:b8:d7:57:c9:c7:e2:78:2a:f7:c4:0b:bf:d2:3a: ae:31:71:01:87:ae:35:7c:94:7e:5e:36:a4:43:4a:c9:e2:5b: f4:36:99:5f:e9:85:0d:ab:82:bb:19:06:ec:cc:da:3a:b8:a4: e1:d8:34:24:7b:06:57:c0:40:f8:b6:42:2c:7e:af:63:6a:d6: 6e:62:a7:0b:74:80:fa:9b:30:cb:a5:f5:f8:db:3c:2c:1f:a5: 04:b6:48:a8:c9:73:c3:68:e1:22:49:93:e5:24:12:6f:61:37: 1d:a3:36:08:46:94:fe:7a:5a:a5:be:a7:f9:5c:63:57:6a:f9: 19:bc:ad:e6 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXzy+DOYO8SW9mK9HkLCgJAFaoZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1 RjRCMDlCOTAeFw0yNjAzMDExMzIzMDFaFw0yNjAzMDIxNDU3MDFaMDMxMTAvBgNV BAMTKEY2NDkwMjUxQkUyNEI4N0Y2QkNBRTVERUUxQjQyRENCQjc5NDRGRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh+M36yiJ8VqsEc22ugaVW9Y9q HrefzN3lCPngzZpGcxGyoYRYYa5JWp9szQpi8HubJ6wdhBfb02bt6D+c8bPKUtd1 V5glOVUl+6wH2dtFTnouJmzF5zxYC3Gv3KTEC79R8+OuiTy1+KTiSTI7MNUhn3oL jMojQSb4/3BwjibATEl43XsuJuFgMs1cVYFUV1gRSGe9W3ulqKlztKeqGPaly4kg omGwTikx/N+F2dLqb4XBBsUxqRrYA8M69HGauB701D6aHaNgfuj35stcjbU/iCYL Vfw5Yd1tYAtCGERww1FUcQa+IjceYDsmlYKi/qJTB0tC3oj/ffg5NXvC1HTRAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU9kkCUb4kuH9ryuXe4bQty7eUT9MwHwYDVR0j BBgwFoAUCv23IiueujOmXim74/KdfF9LCbkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzMvMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1RjRCMDlCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC8wQUZEQjcyMjJCOUVCQTMzQTY1RTI5QkJF M0YyOUQ3QzVGNEIwOUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8zLzBBRkRCNzIy MkI5RUJBMzNBNjVFMjlCQkUzRjI5RDdDNUY0QjA5QjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBinsEz NcrsX5f+bIoCB8EWGzbLDZ2KKafW5N4nx7e8lZ3hbhES/KrhXxaQ1oJPsjmT247Q jqwa/HY+MNKundWVdK/s1Z5dZEpPDtMO4CDHz7SlHBwiYtm/h0ZeuCzfNcJW/hN2 tGQwkrtgZtuC6hIngRUWpZ0Z9Nl3Km0WJ4nHAzG6uNdXycfieCr3xAu/0jquMXEB h641fJR+XjakQ0rJ4lv0Nplf6YUNq4K7GQbszNo6uKTh2DQkewZXwED4tkIsfq9j atZuYqcLdID6mzDLpfX42zwsH6UEtkioyXPDaOEiSZPlJBJvYTcdozYIRpT+elql vqf5XGNXavkZvK3m -----END CERTIFICATE-----Generated at Sun Mar 1 16:37:44 2026 by rpki-client