$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.mft File: 4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.mft (raw, json) Hash identifier: RdSRebLJbaA92x8F+2+RGLJZUunbbqUqJk7T91Jo7Tg= Subject key identifier: F1:F4:51:73:1F:73:16:06:70:E2:70:3A:B2:DD:03:5C:E6:C3:CB:E4 Authority key identifier: 4B:7A:FD:45:B3:03:92:C9:F4:66:5C:E2:A7:69:2D:56:E7:55:DC:EA Certificate issuer: /CN=4B7AFD45B30392C9F4665CE2A7692D56E755DCEA Certificate serial: 5C2A98F4494ABE5187C2B4AE26E1CE6C71AA1890 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.mft Manifest number: 3F Signing time: Mon 02 Mar 2026 05:58:10 +0000 Manifest this update: Mon 02 Mar 2026 05:53:10 +0000 Manifest next update: Tue 03 Mar 2026 08:23:10 +0000 Files and hashes: 1: 326131343a373538363a363030303a3a2f34302d3438203d3e20313531363733.roa (hash: a5s0weSMSVAZOPtcCLRRCAjoiXiAH1m3fzt4R/LeqXA=) 2: 4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.crl (hash: jkMdvmy9/gmKpAwqLbPIjnrcBpKztIu5docd0IWFrw4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.crl rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 04:40:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:2a:98:f4:49:4a:be:51:87:c2:b4:ae:26:e1:ce:6c:71:aa:18:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B7AFD45B30392C9F4665CE2A7692D56E755DCEA Validity Not Before: Mar 2 05:53:10 2026 GMT Not After : Mar 3 08:23:10 2026 GMT Subject: CN=F1F451731F73160670E2703AB2DD035CE6C3CBE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:16:ea:30:b7:36:c9:70:c5:5c:60:61:ed:b7: eb:d5:83:38:89:75:ff:62:5e:d3:a4:07:87:28:58: 65:27:38:f1:15:9e:d5:76:ac:22:8b:00:c4:81:91: 0b:6f:57:3a:1b:ff:76:f7:70:dc:86:ee:bd:e8:17: b2:04:c0:f0:0a:5e:a2:41:19:70:84:6f:86:c9:21: 17:31:eb:38:7a:f3:24:1d:21:24:df:10:34:4e:c6: f4:7f:c5:71:df:ea:22:06:8e:2d:bb:08:6b:d9:60: 7a:ae:1f:40:99:2f:64:ba:ff:1e:7d:49:2c:94:75: 19:1e:a8:73:96:5b:85:65:7a:81:77:dc:b6:e0:09: b1:2a:bc:de:a6:3d:72:50:ac:d4:4e:0b:31:58:35: cc:6e:6b:13:09:5d:5a:32:92:85:ba:a6:65:5a:65: 3f:00:cb:4c:93:b0:f4:60:98:81:04:0e:60:af:2b: 17:b9:76:2b:de:79:5f:e2:f7:18:6e:63:fd:3e:11: fd:57:de:82:7d:35:3d:fe:0f:c6:c6:e5:2b:e5:97: f1:a8:36:87:65:a2:84:11:4d:1c:eb:74:23:59:fd: 4d:bb:1a:f4:34:55:ca:b0:35:67:ae:d5:30:f6:b2: 98:db:a6:2a:81:50:83:c4:f8:c6:c6:8d:f2:48:0a: b8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F4:51:73:1F:73:16:06:70:E2:70:3A:B2:DD:03:5C:E6:C3:CB:E4 X509v3 Authority Key Identifier: keyid:4B:7A:FD:45:B3:03:92:C9:F4:66:5C:E2:A7:69:2D:56:E7:55:DC:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:a4:b7:33:36:fa:0b:cb:ba:df:46:fe:0d:94:af:12:25:a1: 2d:23:1d:4d:7d:a9:a6:39:a2:c4:ea:32:77:72:a2:33:0f:3a: 8e:62:98:ed:b1:97:7e:cc:ee:71:fe:4c:e9:83:ad:61:11:6e: 13:28:93:a9:63:9f:2b:13:87:ba:47:8c:cd:07:03:1d:ec:65: a5:76:5f:6e:fd:21:d1:fd:bd:22:52:92:2d:8c:f7:0a:31:e4: 33:4e:95:da:12:77:d7:f1:c3:3e:d5:f9:bc:d1:dc:28:46:f7: ad:5f:fc:cd:3d:2a:d0:1e:19:43:63:db:e1:14:4e:f2:17:fe: b4:70:81:57:93:e0:c8:9b:51:32:98:c3:18:28:f8:43:62:b0: f0:e8:87:54:9a:f2:67:61:c9:e0:56:79:07:c6:4a:88:ff:a1: 40:2c:91:7e:f5:06:29:10:3a:87:e9:78:88:92:91:ce:10:f6: 39:6d:f0:07:67:78:68:0a:2f:77:30:8d:b2:d9:58:ca:4a:fc: 70:4b:f7:14:7f:a4:b8:eb:6f:5c:fb:40:e3:fa:04:21:44:e8: 6b:b0:aa:bc:d3:b5:40:01:cf:f7:b7:d2:8b:7a:e6:fa:73:7d: 45:d9:3b:01:49:4f:56:34:21:74:af:70:a8:e2:2a:f0:c1:bc: 6c:99:8a:2b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXCqY9ElKvlGHwrSuJuHObHGqGJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI3QUZENDVCMzAzOTJDOUY0NjY1Q0UyQTc2OTJENTZF NzU1RENFQTAeFw0yNjAzMDIwNTUzMTBaFw0yNjAzMDMwODIzMTBaMDMxMTAvBgNV BAMTKEYxRjQ1MTczMUY3MzE2MDY3MEUyNzAzQUIyREQwMzVDRTZDM0NCRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPFuowtzbJcMVcYGHtt+vVgziJ df9iXtOkB4coWGUnOPEVntV2rCKLAMSBkQtvVzob/3b3cNyG7r3oF7IEwPAKXqJB GXCEb4bJIRcx6zh68yQdISTfEDROxvR/xXHf6iIGji27CGvZYHquH0CZL2S6/x59 SSyUdRkeqHOWW4VleoF33LbgCbEqvN6mPXJQrNROCzFYNcxuaxMJXVoykoW6pmVa ZT8Ay0yTsPRgmIEEDmCvKxe5diveeV/i9xhuY/0+Ef1X3oJ9NT3+D8bG5Svll/Go NodlooQRTRzrdCNZ/U27GvQ0VcqwNWeu1TD2spjbpiqBUIPE+MbGjfJICrjjAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU8fRRcx9zFgZw4nA6st0DXObDy+QwHwYDVR0j BBgwFoAUS3r9RbMDksn0Zlzip2ktVudV3OowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTA4MjE4OTktNzdhNi00M2E3LTlhODItMGEzOGZmM2I0 YWQwLzIvNEI3QUZENDVCMzAzOTJDOUY0NjY1Q0UyQTc2OTJENTZFNzU1RENFQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy80QjdBRkQ0NUIzMDM5MkM5RjQ2NjVDRTJB NzY5MkQ1NkU3NTVEQ0VBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzkwODIxODk5LTc3YTYtNDNhNy05YTgyLTBhMzhmZjNiNGFkMC8yLzRCN0FGRDQ1 QjMwMzkyQzlGNDY2NUNFMkE3NjkyRDU2RTc1NURDRUEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCcpLcz NvoLy7rfRv4NlK8SJaEtIx1NfammOaLE6jJ3cqIzDzqOYpjtsZd+zO5x/kzpg61h EW4TKJOpY58rE4e6R4zNBwMd7GWldl9u/SHR/b0iUpItjPcKMeQzTpXaEnfX8cM+ 1fm80dwoRvetX/zNPSrQHhlDY9vhFE7yF/60cIFXk+DIm1EymMMYKPhDYrDw6IdU mvJnYcngVnkHxkqI/6FALJF+9QYpEDqH6XiIkpHOEPY5bfAHZ3hoCi93MI2y2VjK SvxwS/cUf6S4629c+0Dj+gQhROhrsKq807VAAc/3t9KLeub6c31F2TsBSU9WNCF0 r3Co4irwwbxsmYor -----END CERTIFICATE-----Generated at Mon Mar 2 15:21:51 2026 by rpki-client