$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.mft File: C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.mft (raw, json) Hash identifier: M0BxG5PjbTlw5PyqbEB81bOygJ8+2VmAdSEnMSvUrN0= Subject key identifier: 90:88:FB:AD:13:5E:B0:22:57:1F:10:16:B1:84:C0:53:E6:12:E0:3D Authority key identifier: C7:3F:B7:03:3F:23:C9:59:58:FC:FB:E5:0E:4C:65:AA:95:C0:3E:F0 Certificate issuer: /CN=C73FB7033F23C95958FCFBE50E4C65AA95C03EF0 Certificate serial: 3E9D419F1F24176EBE5BBE76B96B8FB9CE6DB292 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.mft Manifest number: 13 Signing time: Sun 01 Mar 2026 10:45:48 +0000 Manifest this update: Sun 01 Mar 2026 10:40:48 +0000 Manifest next update: Mon 02 Mar 2026 12:55:48 +0000 Files and hashes: 1: 326130623a346530373a62303a3a2f34382d3438203d3e20323031333938.roa (hash: /uTqT5JLie3E28kiPUEQaB1WxPf4ESjtP7GgXWWmEIg=) 2: 326130623a346530373a62313a3a2f34382d3438203d3e20323031333938.roa (hash: 1RCf60dXQ/oUKmGHAZtweCBKcxHUn9CNbfMBr9zQkkk=) 3: 326130623a346530373a62333a3a2f34382d3438203d3e20323031333938.roa (hash: qsLlFxGXc9WfPWNVKXZeaayMCuoiW6Y+K24Q7W63kCI=) 4: 326130623a346530373a323030303a3a2f33372d3337203d3e20323031333938.roa (hash: YaxPcCxHWXHEcz9z+CQU+GZfaoDKa2sEqx89Of12/vc=) 5: 326130623a346530373a62303a3a2f34362d3436203d3e20323031333938.roa (hash: Vj8pBup2nRsVCRRZZonBMO1mLcSOjU3VQ9IXLrIX7W4=) 6: C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.crl (hash: aZ7Wy+9WnEwjs8wdlBqYme6fIiM/nYW8KG9V3Bskb8k=) 7: 326130623a346530373a62323a3a2f34382d3438203d3e20323031333938.roa (hash: LS3BrlYZK8SbNX6J/CClnGQfo8ZO+l7g9dfo7FOeS6Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.crl rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 05:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:9d:41:9f:1f:24:17:6e:be:5b:be:76:b9:6b:8f:b9:ce:6d:b2:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C73FB7033F23C95958FCFBE50E4C65AA95C03EF0 Validity Not Before: Mar 1 10:40:48 2026 GMT Not After : Mar 2 12:55:48 2026 GMT Subject: CN=9088FBAD135EB022571F1016B184C053E612E03D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:38:b9:fe:a9:cd:3c:94:34:e1:b3:5c:02:da: 60:b3:d4:99:03:05:24:09:dd:56:34:ec:bd:7b:80: 6a:f2:16:88:54:4f:a5:3e:e0:b6:b1:55:f2:81:d0: 69:50:bf:a4:87:9d:14:91:59:94:21:62:55:39:f6: 47:e3:a0:ff:87:85:da:32:b9:1d:01:ad:e0:95:0a: c8:1f:18:c0:37:f2:86:32:4a:95:6a:ce:8d:84:e9: 61:eb:49:b4:1b:f9:29:3a:a4:df:fe:1d:17:ee:0b: e7:07:15:e8:1a:0b:fe:3c:e4:85:08:eb:db:97:18: 64:7d:f4:6f:fb:cd:fa:a0:fd:32:74:d6:c5:fe:40: a4:b7:d1:88:43:15:72:1b:19:c3:11:51:b9:fb:03: e4:5c:d0:f2:74:a9:a0:2c:5b:74:c5:69:5a:93:b1: b7:0a:eb:86:20:36:39:90:a1:4b:d6:43:9b:d8:a3: 1f:fd:42:4d:e3:3a:1a:80:2d:83:7f:80:3c:1b:33: 8e:a9:38:4a:e8:2c:03:3a:c4:1d:a7:05:4a:b8:b0: 5b:37:7b:12:a5:c8:b4:48:92:bb:97:62:83:2a:f1: e3:49:2e:52:6a:38:13:d0:3c:86:fd:79:d4:09:12: dc:30:39:c7:2a:a6:9f:bc:f0:7e:32:66:ea:f3:69: d9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:88:FB:AD:13:5E:B0:22:57:1F:10:16:B1:84:C0:53:E6:12:E0:3D X509v3 Authority Key Identifier: keyid:C7:3F:B7:03:3F:23:C9:59:58:FC:FB:E5:0E:4C:65:AA:95:C0:3E:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a1:00:64:74:71:08:7d:5f:6b:ce:26:02:b2:20:c5:50:ac: 64:1e:a2:63:f2:98:e5:87:55:1c:8c:74:dc:53:1d:31:20:55: 70:c0:28:23:ab:52:7d:5e:7b:de:f2:c3:eb:8c:05:d0:6b:87: cb:6d:35:1c:e3:83:da:08:46:02:e1:3f:88:7d:18:82:18:13: 8c:c6:18:ad:31:c1:3a:f0:07:61:65:b1:a5:5b:40:63:77:e6: 35:56:d3:b3:71:84:3d:e5:52:c0:e0:6b:0e:f8:e3:22:ea:f6: c4:fb:2c:af:3d:64:32:cc:d8:16:a0:fc:86:0e:a3:c4:3e:11: 6f:68:cc:14:ee:3e:38:6c:a7:66:45:a4:a0:18:2f:04:e8:e1: 39:cd:04:27:05:38:eb:69:e4:d0:09:c9:0a:05:cc:06:2d:7e: c9:72:d6:06:7c:24:8d:73:94:02:9a:03:d0:d2:57:36:df:62: b0:c9:9c:10:3e:a1:5f:11:23:4f:df:f5:7a:7b:21:a5:87:dc: 9c:58:1b:bf:d1:4f:71:cb:ba:fd:d3:26:91:8d:c2:f2:eb:f3: ab:ca:6b:71:12:8d:35:86:91:ea:81:91:46:4c:eb:09:49:b6: 92:fd:72:50:88:fd:da:e9:6d:0f:dd:c8:f1:db:4b:8a:f3:38: ab:50:33:a7 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUPp1Bnx8kF26+W752uWuPuc5tspIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzczRkI3MDMzRjIzQzk1OTU4RkNGQkU1MEU0QzY1QUE5 NUMwM0VGMDAeFw0yNjAzMDExMDQwNDhaFw0yNjAzMDIxMjU1NDhaMDMxMTAvBgNV BAMTKDkwODhGQkFEMTM1RUIwMjI1NzFGMTAxNkIxODRDMDUzRTYxMkUwM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDROLn+qc08lDThs1wC2mCz1JkD BSQJ3VY07L17gGryFohUT6U+4LaxVfKB0GlQv6SHnRSRWZQhYlU59kfjoP+Hhdoy uR0BreCVCsgfGMA38oYySpVqzo2E6WHrSbQb+Sk6pN/+HRfuC+cHFegaC/485IUI 69uXGGR99G/7zfqg/TJ01sX+QKS30YhDFXIbGcMRUbn7A+Rc0PJ0qaAsW3TFaVqT sbcK64YgNjmQoUvWQ5vYox/9Qk3jOhqALYN/gDwbM46pOEroLAM6xB2nBUq4sFs3 exKlyLRIkruXYoMq8eNJLlJqOBPQPIb9edQJEtwwOccqpp+88H4yZurzadnTAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUkIj7rRNesCJXHxAWsYTAU+YS4D0wHwYDVR0j BBgwFoAUxz+3Az8jyVlY/PvlDkxlqpXAPvAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTlmODA4ZDItMWYxNS00ZGYzLWI1MWUtZDU1YzUyM2I2 MmZjLzEvQzczRkI3MDMzRjIzQzk1OTU4RkNGQkU1MEU0QzY1QUE5NUMwM0VGMC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvQzczRkI3MDMzRjIzQzk1OTU4RkNGQkU1MEU0QzY1QUE5NUMw M0VGMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85OWY4MDhkMi0x ZjE1LTRkZjMtYjUxZS1kNTVjNTIzYjYyZmMvMS9DNzNGQjcwMzNGMjNDOTU5NThG Q0ZCRTUwRTRDNjVBQTk1QzAzRUYwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALKEAZHRxCH1fa84mArIg xVCsZB6iY/KY5YdVHIx03FMdMSBVcMAoI6tSfV573vLD64wF0GuHy201HOOD2ghG AuE/iH0YghgTjMYYrTHBOvAHYWWxpVtAY3fmNVbTs3GEPeVSwOBrDvjjIur2xPss rz1kMszYFqD8hg6jxD4Rb2jMFO4+OGynZkWkoBgvBOjhOc0EJwU462nk0AnJCgXM Bi1+yXLWBnwkjXOUApoD0NJXNt9isMmcED6hXxEjT9/1enshpYfcnFgbv9FPccu6 /dMmkY3C8uvzq8prcRKNNYaR6oGRRkzrCUm2kv1yUIj92ultD93I8dtLivM4q1Az pw== -----END CERTIFICATE-----Generated at Sun Mar 1 18:09:54 2026 by rpki-client