$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/4/37AAEE584452DDAB0250921C4B2D8474F61FF74D.mft File: 37AAEE584452DDAB0250921C4B2D8474F61FF74D.mft (raw, json) Hash identifier: nUakXT8YPS+Y8PRtNMOLJQiImv6LNbj/5pFwd4oBS2I= Subject key identifier: F6:69:BA:69:EF:B4:36:5C:01:77:4F:C5:04:81:3F:F3:5F:32:F4:6B Authority key identifier: 37:AA:EE:58:44:52:DD:AB:02:50:92:1C:4B:2D:84:74:F6:1F:F7:4D Certificate issuer: /CN=37AAEE584452DDAB0250921C4B2D8474F61FF74D Certificate serial: 33AFB3305B9211554B598CABD60E41035EF227EA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/37AAEE584452DDAB0250921C4B2D8474F61FF74D.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/4/37AAEE584452DDAB0250921C4B2D8474F61FF74D.mft Manifest number: 32 Signing time: Sun 01 Mar 2026 07:53:10 +0000 Manifest this update: Sun 01 Mar 2026 07:48:10 +0000 Manifest next update: Mon 02 Mar 2026 10:36:10 +0000 Files and hashes: 1: 37AAEE584452DDAB0250921C4B2D8474F61FF74D.crl (hash: /3YdkslTtEZ4JHVdZbpm/rjGyz3NcRHBQMQizBBVV9s=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/4/37AAEE584452DDAB0250921C4B2D8474F61FF74D.crl rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/4/37AAEE584452DDAB0250921C4B2D8474F61FF74D.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/37AAEE584452DDAB0250921C4B2D8474F61FF74D.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:af:b3:30:5b:92:11:55:4b:59:8c:ab:d6:0e:41:03:5e:f2:27:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37AAEE584452DDAB0250921C4B2D8474F61FF74D Validity Not Before: Mar 1 07:48:10 2026 GMT Not After : Mar 2 10:36:10 2026 GMT Subject: CN=F669BA69EFB4365C01774FC504813FF35F32F46B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c3:66:e3:1d:7c:6e:3e:83:6d:19:4d:17:b4: f2:e1:bd:74:f2:71:a0:c9:c0:db:d5:5f:7d:e5:45: ed:4f:ed:9f:cf:5a:50:8b:5a:6c:b8:33:2f:4b:1e: ee:d3:50:d5:24:44:c3:d1:f0:bc:fa:3a:7b:96:b6: 4e:54:2c:94:84:41:4c:18:61:3c:05:44:2c:93:91: 89:67:17:3e:c8:e4:1b:99:42:5f:4b:13:cd:26:4f: cc:28:64:7d:fc:68:88:80:bd:4d:89:10:56:59:33: 54:d2:bd:71:23:74:a0:e2:19:11:29:17:a3:25:2e: f8:6e:a0:15:33:5a:5c:58:7a:88:81:62:f7:38:ee: cb:56:d1:11:8b:16:18:bc:09:00:ec:44:b0:c0:5b: 39:cf:ed:a7:f8:b6:ca:18:79:22:89:2b:c4:cb:59: 69:8d:2a:85:f6:ba:46:b9:79:ea:13:77:36:ea:0e: 7e:5e:38:69:42:dd:d6:8a:d3:e3:30:a8:ab:b9:72: 82:ba:37:ca:24:fb:68:60:40:96:a5:d7:59:26:35: cc:0c:91:8e:58:92:49:6b:7d:f9:74:c6:a0:c7:75: a2:5a:d9:16:d6:f7:b3:79:82:5d:b3:95:d5:92:d4: a2:4e:64:9e:d8:9d:68:5e:95:c4:54:e6:58:c1:80: c3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:69:BA:69:EF:B4:36:5C:01:77:4F:C5:04:81:3F:F3:5F:32:F4:6B X509v3 Authority Key Identifier: keyid:37:AA:EE:58:44:52:DD:AB:02:50:92:1C:4B:2D:84:74:F6:1F:F7:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/4/37AAEE584452DDAB0250921C4B2D8474F61FF74D.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/37AAEE584452DDAB0250921C4B2D8474F61FF74D.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/4/37AAEE584452DDAB0250921C4B2D8474F61FF74D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:4f:d9:84:e7:d3:c5:10:2b:f2:6b:25:70:d6:d6:f8:59:18: b4:b6:77:d3:f1:3f:b1:04:36:71:d4:54:ac:e6:2e:75:e7:7d: 01:0d:f3:56:aa:59:0c:f2:b6:e9:50:d6:c5:25:7c:05:f1:3a: a3:c8:6e:7a:e6:ed:cf:ee:6f:5e:9c:75:07:c7:a6:dd:d8:fd: 27:f8:38:d5:ec:74:ed:8d:30:6c:d6:d5:8d:50:0b:f1:52:bc: 53:c1:d2:dc:52:d3:97:f9:43:7c:84:03:7b:a0:43:3e:61:58: ea:10:a4:c4:a5:b3:7f:a8:e9:c0:1d:cd:39:c3:4c:d4:e7:d6: 41:47:14:c9:f1:01:44:90:17:70:ee:41:64:bb:ed:53:77:25: 3c:c2:a8:a1:3d:5e:ff:73:8e:b5:75:05:ff:b4:61:fa:5f:f1: 26:7b:6d:9b:41:84:25:df:ae:88:cb:6d:84:3a:28:09:1d:c3: 50:33:23:04:be:7f:2a:c5:cb:e2:a1:d6:02:e2:c7:b0:7a:5e: f6:b5:c1:37:13:74:98:cb:b8:8e:f2:6a:93:f4:bb:b8:4e:61: e6:a9:f1:43:b7:42:51:8b:1d:5c:85:7c:a6:41:91:fb:a5:44: f8:d4:48:55:38:1b:ec:99:09:ea:92:64:03:12:ac:eb:84:54: 66:9c:41:45 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUM6+zMFuSEVVLWYyr1g5BA17yJ+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdBQUVFNTg0NDUyRERBQjAyNTA5MjFDNEIyRDg0NzRG NjFGRjc0RDAeFw0yNjAzMDEwNzQ4MTBaFw0yNjAzMDIxMDM2MTBaMDMxMTAvBgNV BAMTKEY2NjlCQTY5RUZCNDM2NUMwMTc3NEZDNTA0ODEzRkYzNUYzMkY0NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiw2bjHXxuPoNtGU0XtPLhvXTy caDJwNvVX33lRe1P7Z/PWlCLWmy4My9LHu7TUNUkRMPR8Lz6OnuWtk5ULJSEQUwY YTwFRCyTkYlnFz7I5BuZQl9LE80mT8woZH38aIiAvU2JEFZZM1TSvXEjdKDiGREp F6MlLvhuoBUzWlxYeoiBYvc47stW0RGLFhi8CQDsRLDAWznP7af4tsoYeSKJK8TL WWmNKoX2uka5eeoTdzbqDn5eOGlC3daK0+MwqKu5coK6N8ok+2hgQJal11kmNcwM kY5Ykklrffl0xqDHdaJa2RbW97N5gl2zldWS1KJOZJ7YnWhelcRU5ljBgMP1AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU9mm6ae+0NlwBd0/FBIE/818y9GswHwYDVR0j BBgwFoAUN6ruWERS3asCUJIcSy2EdPYf900wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTA4MjE4OTktNzdhNi00M2E3LTlhODItMGEzOGZmM2I0 YWQwLzQvMzdBQUVFNTg0NDUyRERBQjAyNTA5MjFDNEIyRDg0NzRGNjFGRjc0RC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC8zN0FBRUU1ODQ0NTJEREFCMDI1MDkyMUM0 QjJEODQ3NEY2MUZGNzRELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzkwODIxODk5LTc3YTYtNDNhNy05YTgyLTBhMzhmZjNiNGFkMC80LzM3QUFFRTU4 NDQ1MkREQUIwMjUwOTIxQzRCMkQ4NDc0RjYxRkY3NEQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBoT9mE 59PFECvyayVw1tb4WRi0tnfT8T+xBDZx1FSs5i51530BDfNWqlkM8rbpUNbFJXwF 8TqjyG565u3P7m9enHUHx6bd2P0n+DjV7HTtjTBs1tWNUAvxUrxTwdLcUtOX+UN8 hAN7oEM+YVjqEKTEpbN/qOnAHc05w0zU59ZBRxTJ8QFEkBdw7kFku+1TdyU8wqih PV7/c461dQX/tGH6X/Eme22bQYQl366Iy22EOigJHcNQMyMEvn8qxcviodYC4sew el72tcE3E3SYy7iO8mqT9Lu4TmHmqfFDt0JRix1chXymQZH7pUT41EhVOBvsmQnq kmQDEqzrhFRmnEFF -----END CERTIFICATE-----Generated at Sun Mar 1 20:06:20 2026 by rpki-client