$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft File: B3D0280F500695A43204251C9830454CA8A2E7AC.mft (raw, json) Hash identifier: kXPIFJ07kyokF98pDy6b81Fho6cv61SZnQZOWtNppvI= Subject key identifier: 3E:DB:17:B0:59:61:26:E8:73:C8:DA:F9:C7:C3:10:CA:C5:00:76:E4 Authority key identifier: B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC Certificate issuer: /CN=b3d0280f500695a43204251c9830454ca8a2e7ac Certificate serial: 170F616889D23E7E113B1CDCAE2919F2EE331676 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft Manifest number: 0374 Signing time: Mon 02 Mar 2026 05:08:25 +0000 Manifest this update: Mon 02 Mar 2026 05:03:25 +0000 Manifest next update: Tue 03 Mar 2026 08:53:25 +0000 Files and hashes: 1: B3D0280F500695A43204251C9830454CA8A2E7AC.crl (hash: fAsuYDt8fsvalYYrzrSPTA8hGotQotAbch9hPHDyPWo=) 2: 3138352e3138362e32352e302f32342d3234203d3e203135343430.roa (hash: zbKaWYwmjPPC167P5YL6I94JcPZEWN0HKnmqpfcR9u4=) 3: 3138352e3138362e32352e302f32342d3234203d3e20323133373732.roa (hash: KbS5MjAty6bkNu2TCkQpJN6TOq9xU7ustWBHWVtQeSQ=) 4: 3138352e3138362e32362e302f32342d3234203d3e20323135373033.roa (hash: 64uxD3jQtXWcavfYFljDhJHJgbOPhGll/0DiDk/jIuA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:0f:61:68:89:d2:3e:7e:11:3b:1c:dc:ae:29:19:f2:ee:33:16:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d0280f500695a43204251c9830454ca8a2e7ac Validity Not Before: Mar 2 05:03:25 2026 GMT Not After : Mar 3 08:53:25 2026 GMT Subject: CN=3EDB17B0596126E873C8DAF9C7C310CAC50076E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:75:3f:2c:a3:dc:79:50:77:50:f4:ec:f6:8c: a2:27:08:45:a9:8c:8e:b1:47:cb:4f:40:b6:f9:1f: f4:34:d2:be:43:b1:41:34:77:c3:f8:9a:c0:2b:17: 91:3f:77:df:b7:7d:27:52:c0:fd:7d:93:6f:e1:cb: 98:3b:a9:dd:6b:4f:f2:3a:41:3f:f5:a1:a8:f0:09: 4e:86:16:71:cb:a0:e4:de:ed:a6:5c:fa:89:1e:70: ae:db:89:49:84:fb:cb:7e:a6:4d:db:9e:ea:0b:2c: fe:6c:3f:80:d0:dc:be:9b:48:c1:22:9e:96:df:3b: 79:34:57:04:25:79:b9:c1:33:26:9d:8e:61:f9:ff: 90:b3:69:91:46:bd:ea:32:9b:63:06:d6:c2:1e:d8: f9:b5:6a:84:42:f3:33:bf:6f:1f:6b:fe:6b:ba:fe: 8e:d3:c0:48:34:4e:5b:6a:bc:f4:c1:e2:d4:57:e9: 71:b6:ee:6b:13:76:b2:43:66:8f:ef:52:0f:6b:66: 36:f9:28:40:88:6b:84:1c:0a:39:32:9a:7b:9a:8e: 99:70:9a:c5:62:4d:87:0e:a5:66:cc:c8:3b:34:1c: 70:97:4e:d4:eb:71:97:f0:f3:d8:d5:be:d4:91:b3: 71:41:04:7e:f1:9b:86:29:2b:99:6a:55:1d:18:9f: ef:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:DB:17:B0:59:61:26:E8:73:C8:DA:F9:C7:C3:10:CA:C5:00:76:E4 X509v3 Authority Key Identifier: keyid:B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:17:ec:fe:be:5d:04:76:9e:d3:78:39:ae:67:77:02:43:08: a1:59:ef:3d:c4:cb:24:24:ea:4d:39:84:ce:eb:a3:85:18:f1: d2:77:ff:1c:c3:79:02:26:c6:12:4c:29:c7:5b:8f:0f:f1:fb: 77:ff:fa:fc:19:68:2d:ef:98:c9:d1:a9:19:97:12:c6:44:2b: 20:d6:57:cb:b6:bc:d6:ea:0c:2c:23:f1:23:65:d1:53:2b:17: b1:78:6e:b1:c8:a1:23:a8:55:25:bf:69:60:b1:fb:4c:7b:f0: d7:cf:48:2b:4b:0d:35:4b:6f:eb:83:56:0e:f0:44:7e:9b:cf: 9e:9a:08:0b:ae:ed:92:7d:16:49:87:1a:67:36:ec:ca:40:d4: 3e:1b:2a:f5:a0:cc:85:34:28:82:1d:3e:94:6e:9c:5d:b7:ef: 12:db:33:b2:7d:da:d2:e5:02:97:3b:d9:1f:e7:78:57:b8:40: 3d:37:d1:93:6c:3d:50:28:75:d8:c0:73:54:14:5d:f7:f6:2a: 1b:79:be:a9:38:2f:a7:60:f8:2d:cd:27:6f:73:9a:df:10:6e: 8a:32:41:6e:a4:b3:91:09:d4:c7:03:70:9d:c6:5b:37:58:12: 9f:ef:fe:45:9e:cb:d6:32:5a:63:79:42:e4:75:52:cf:cb:ef: e6:a8:10:1e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFw9haInSPn4ROxzcrikZ8u4zFnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjNkMDI4MGY1MDA2OTVhNDMyMDQyNTFjOTgzMDQ1NGNh OGEyZTdhYzAeFw0yNjAzMDIwNTAzMjVaFw0yNjAzMDMwODUzMjVaMDMxMTAvBgNV BAMTKDNFREIxN0IwNTk2MTI2RTg3M0M4REFGOUM3QzMxMENBQzUwMDc2RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7dT8so9x5UHdQ9Oz2jKInCEWp jI6xR8tPQLb5H/Q00r5DsUE0d8P4msArF5E/d9+3fSdSwP19k2/hy5g7qd1rT/I6 QT/1oajwCU6GFnHLoOTe7aZc+okecK7biUmE+8t+pk3bnuoLLP5sP4DQ3L6bSMEi npbfO3k0VwQlebnBMyadjmH5/5CzaZFGveoym2MG1sIe2Pm1aoRC8zO/bx9r/mu6 /o7TwEg0TltqvPTB4tRX6XG27msTdrJDZo/vUg9rZjb5KECIa4QcCjkymnuajplw msViTYcOpWbMyDs0HHCXTtTrcZfw89jVvtSRs3FBBH7xm4YpK5lqVR0Yn+9HAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUPtsXsFlhJuhzyNr5x8MQysUAduQwHwYDVR0j BBgwFoAUs9AoD1AGlaQyBCUcmDBFTKii56wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODdhZTI1ZjMtNzA2Yi00N2VkLWJiNzQtNDY2ODRhZTBl ZjJiLzAvQjNEMDI4MEY1MDA2OTVBNDMyMDQyNTFDOTgzMDQ1NENBOEEyRTdBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3M5QW9EMUFHbGFReUJDVWNtREJGVEtp aTU2dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84N2FlMjVmMy03 MDZiLTQ3ZWQtYmI3NC00NjY4NGFlMGVmMmIvMC9CM0QwMjgwRjUwMDY5NUE0MzIw NDI1MUM5ODMwNDU0Q0E4QTJFN0FDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxfs/r5dBHae03g5rmd3 AkMIoVnvPcTLJCTqTTmEzuujhRjx0nf/HMN5AibGEkwpx1uPD/H7d//6/BloLe+Y ydGpGZcSxkQrINZXy7a81uoMLCPxI2XRUysXsXhuscihI6hVJb9pYLH7THvw189I K0sNNUtv64NWDvBEfpvPnpoIC67tkn0WSYcaZzbsykDUPhsq9aDMhTQogh0+lG6c XbfvEtszsn3a0uUClzvZH+d4V7hAPTfRk2w9UCh12MBzVBRd9/YqG3m+qTgvp2D4 Lc0nb3Oa3xBuijJBbqSzkQnUxwNwncZbN1gSn+/+RZ7L1jJaY3lC5HVSz8vv5qgQ Hg== -----END CERTIFICATE-----Generated at Mon Mar 2 09:07:59 2026 by rpki-client