$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft File: B3D0280F500695A43204251C9830454CA8A2E7AC.mft (raw, json) Hash identifier: ZTKM/59ZtI9Cgokgga1YkSU95H/aXWRCEOJ1UB8YRKc= Subject key identifier: AE:E7:E9:7A:82:EA:F4:6D:77:AC:00:36:C1:04:6C:5D:10:CE:57:38 Authority key identifier: B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC Certificate issuer: /CN=b3d0280f500695a43204251c9830454ca8a2e7ac Certificate serial: 1632A9BB42CAEEC2099805800DAC106F37435844 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft Manifest number: 0373 Signing time: Sun 01 Mar 2026 09:16:03 +0000 Manifest this update: Sun 01 Mar 2026 09:11:03 +0000 Manifest next update: Mon 02 Mar 2026 13:05:03 +0000 Files and hashes: 1: B3D0280F500695A43204251C9830454CA8A2E7AC.crl (hash: d5OALbHusIaAK3IonARavvKQergKVkOZoKdmx312vE4=) 2: 3138352e3138362e32362e302f32342d3234203d3e20323135373033.roa (hash: 64uxD3jQtXWcavfYFljDhJHJgbOPhGll/0DiDk/jIuA=) 3: 3138352e3138362e32352e302f32342d3234203d3e20323133373732.roa (hash: KbS5MjAty6bkNu2TCkQpJN6TOq9xU7ustWBHWVtQeSQ=) 4: 3138352e3138362e32352e302f32342d3234203d3e203135343430.roa (hash: zbKaWYwmjPPC167P5YL6I94JcPZEWN0HKnmqpfcR9u4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 13:05:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:32:a9:bb:42:ca:ee:c2:09:98:05:80:0d:ac:10:6f:37:43:58:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d0280f500695a43204251c9830454ca8a2e7ac Validity Not Before: Mar 1 09:11:03 2026 GMT Not After : Mar 2 13:05:03 2026 GMT Subject: CN=AEE7E97A82EAF46D77AC0036C1046C5D10CE5738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:56:d7:fb:06:e5:2f:f8:1f:f2:ca:8f:dd:f1: 26:e6:44:33:6e:ba:8d:c3:6b:07:57:83:b5:99:a5: a5:09:62:af:d1:63:7b:b0:c5:fd:23:fa:4e:d0:ff: bc:44:b3:f3:1d:65:b7:56:3d:4b:de:f0:e8:0c:5c: 4d:40:ce:08:71:c8:ee:e5:75:3c:f3:50:2e:08:c9: 84:47:74:38:66:7b:cd:af:81:03:c6:62:57:c5:1d: d5:47:23:c1:a0:61:28:b3:85:95:f5:11:78:7e:01: 1b:71:1b:34:69:4e:36:eb:22:32:5b:8f:30:77:db: 02:ef:54:c5:7f:23:83:27:39:86:9a:bc:eb:c3:95: c5:ca:2e:47:f6:3c:6a:23:20:f2:dd:7e:35:11:02: 39:e5:bc:3f:b2:fd:90:4a:cf:25:a9:29:65:5f:36: ec:5b:9f:ed:35:da:53:1e:71:3c:46:08:3d:53:58: 4f:90:7d:af:6d:7c:5c:fa:e3:01:22:f2:1e:34:a1: d0:1c:20:89:89:89:9a:4c:e2:4f:09:39:e4:d3:1d: a0:ff:8f:cb:c6:c7:7e:39:1d:08:31:8b:c7:0a:5b: 53:57:5b:2f:d6:9c:d6:9f:c5:15:8d:96:cc:76:61: 69:e5:40:6b:f3:da:c8:60:fb:b5:31:b5:33:74:30: bc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E7:E9:7A:82:EA:F4:6D:77:AC:00:36:C1:04:6C:5D:10:CE:57:38 X509v3 Authority Key Identifier: keyid:B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:6b:32:0e:50:f0:67:79:9b:df:84:cf:41:49:80:39:11:ed: fd:3c:0e:50:31:8f:90:c7:63:23:0d:7a:c4:d8:0f:93:0e:03: c4:f5:38:c0:f9:b2:1a:c4:2e:16:d0:d4:52:8e:95:86:58:d6: 14:9e:98:9e:e9:d8:f6:a9:78:06:7d:91:13:e6:00:16:28:dd: 4f:43:08:43:09:66:54:fd:4a:33:a1:2c:fe:ef:91:d1:77:86: bb:44:3d:72:b9:6a:95:a2:31:70:24:92:b7:24:ac:01:73:1f: cc:09:49:5f:47:56:15:27:59:31:11:7f:eb:11:fd:64:5e:20: 15:09:83:6e:56:10:a5:cc:1d:85:0a:27:cf:91:2a:16:26:3b: ff:bf:5e:1a:67:f9:f0:a4:39:71:e8:21:7f:4c:6a:45:f3:d3: df:44:c3:ce:c0:24:af:72:cb:a7:45:0f:01:70:41:b2:d6:10: bb:c9:5c:ec:a8:b0:82:99:91:61:a8:42:5f:73:be:9f:4e:29: dc:a3:ae:62:94:e6:af:3d:72:d3:82:0e:1b:3a:fd:bd:f9:d4: 35:37:87:44:d7:69:5e:ab:14:85:ef:92:74:1e:20:de:de:d1: b9:74:d8:3a:fa:04:a1:38:47:b3:ea:34:8b:11:ea:78:c4:8c: 6b:df:24:6a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFjKpu0LK7sIJmAWADawQbzdDWEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjNkMDI4MGY1MDA2OTVhNDMyMDQyNTFjOTgzMDQ1NGNh OGEyZTdhYzAeFw0yNjAzMDEwOTExMDNaFw0yNjAzMDIxMzA1MDNaMDMxMTAvBgNV BAMTKEFFRTdFOTdBODJFQUY0NkQ3N0FDMDAzNkMxMDQ2QzVEMTBDRTU3MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiVtf7BuUv+B/yyo/d8SbmRDNu uo3DawdXg7WZpaUJYq/RY3uwxf0j+k7Q/7xEs/MdZbdWPUve8OgMXE1AzghxyO7l dTzzUC4IyYRHdDhme82vgQPGYlfFHdVHI8GgYSizhZX1EXh+ARtxGzRpTjbrIjJb jzB32wLvVMV/I4MnOYaavOvDlcXKLkf2PGojIPLdfjURAjnlvD+y/ZBKzyWpKWVf Nuxbn+012lMecTxGCD1TWE+Qfa9tfFz64wEi8h40odAcIImJiZpM4k8JOeTTHaD/ j8vGx345HQgxi8cKW1NXWy/WnNafxRWNlsx2YWnlQGvz2shg+7UxtTN0MLy7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUrufpeoLq9G13rAA2wQRsXRDOVzgwHwYDVR0j BBgwFoAUs9AoD1AGlaQyBCUcmDBFTKii56wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODdhZTI1ZjMtNzA2Yi00N2VkLWJiNzQtNDY2ODRhZTBl ZjJiLzAvQjNEMDI4MEY1MDA2OTVBNDMyMDQyNTFDOTgzMDQ1NENBOEEyRTdBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3M5QW9EMUFHbGFReUJDVWNtREJGVEtp aTU2dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84N2FlMjVmMy03 MDZiLTQ3ZWQtYmI3NC00NjY4NGFlMGVmMmIvMC9CM0QwMjgwRjUwMDY5NUE0MzIw NDI1MUM5ODMwNDU0Q0E4QTJFN0FDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo2syDlDwZ3mb34TPQUmA ORHt/TwOUDGPkMdjIw16xNgPkw4DxPU4wPmyGsQuFtDUUo6VhljWFJ6YnunY9ql4 Bn2RE+YAFijdT0MIQwlmVP1KM6Es/u+R0XeGu0Q9crlqlaIxcCSStySsAXMfzAlJ X0dWFSdZMRF/6xH9ZF4gFQmDblYQpcwdhQonz5EqFiY7/79eGmf58KQ5ceghf0xq RfPT30TDzsAkr3LLp0UPAXBBstYQu8lc7KiwgpmRYahCX3O+n04p3KOuYpTmrz1y 04IOGzr9vfnUNTeHRNdpXqsUhe+SdB4g3t7RuXTYOvoEoThHs+o0ixHqeMSMa98k ag== -----END CERTIFICATE-----Generated at Mon Mar 2 06:32:36 2026 by rpki-client