$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft File: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft (raw, json) Hash identifier: MP6ccrHrhjHmqL+vqTKn7aGPCFa5hbCZwJhDfHYwEKA= Subject key identifier: 6B:56:25:60:C9:62:D2:3E:41:A3:F9:D7:86:2B:AD:25:C2:34:D5:1C Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 593D2253738A0C7D61942836BB78713DE81DC10B Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft Manifest number: 0229 Signing time: Sun 01 Mar 2026 13:52:33 +0000 Manifest this update: Sun 01 Mar 2026 13:47:33 +0000 Manifest next update: Tue 03 Mar 2026 05:39:33 +0000 Files and hashes: 1: 326130623a346530373a363030303a3a2f34302d3438203d3e20323134373031.roa (hash: mhaYla+UsHdOX7ijGa8kmFH/Ey3jwcszbuWBzNvxxRw=) 2: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl (hash: wXSPNdygBXt2CgYcqsdIRDJABVNBB+cH5hcIXtF91hU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 05:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:3d:22:53:73:8a:0c:7d:61:94:28:36:bb:78:71:3d:e8:1d:c1:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: Mar 1 13:47:33 2026 GMT Not After : Mar 3 05:39:33 2026 GMT Subject: CN=6B562560C962D23E41A3F9D7862BAD25C234D51C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:10:a4:c0:53:fe:9d:a5:6f:63:5d:86:f4:55: 4f:6e:b1:03:64:ac:ca:fe:b9:47:61:d3:ee:fb:7d: 15:12:38:ea:f6:51:06:61:a1:61:81:89:78:16:b3: 61:e4:cc:43:9b:8a:91:11:2b:89:cb:71:6c:22:5d: c3:28:53:0b:f9:66:9a:1e:3f:90:d0:cd:e0:0b:2f: 4c:83:9a:30:d4:8e:b6:6c:33:51:00:98:72:b8:37: db:cc:46:e4:e2:27:e1:a4:48:00:14:33:7a:44:6b: c3:5f:d4:82:fe:23:a8:9a:86:77:cc:67:4f:97:57: 69:f5:49:10:ed:d8:dd:5b:60:71:0f:6c:5f:d2:43: f6:1c:a9:af:69:5a:35:96:89:ae:6f:87:24:1b:75: 04:6b:82:d3:cb:5b:db:c8:8f:45:54:86:6c:4c:49: 78:e6:52:6f:22:32:ca:e5:28:94:4a:1b:0b:76:4f: 76:b0:9b:a1:c5:23:07:73:a9:56:0b:47:49:35:50: 5a:33:ab:e6:32:23:57:42:3b:12:58:b0:bb:19:ee: d5:ae:58:9a:85:82:ea:2b:6d:f9:9a:fa:a0:71:93: 0b:d0:75:93:45:10:3e:da:ca:91:e1:08:65:ed:8e: 3c:78:69:dd:c0:03:d9:19:80:8a:7e:30:75:47:3d: 2e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:56:25:60:C9:62:D2:3E:41:A3:F9:D7:86:2B:AD:25:C2:34:D5:1C X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:7c:71:51:1a:19:2b:11:11:8d:41:e6:fc:3a:d7:bc:74:df: 43:a5:f5:ff:a0:ac:7d:1c:7e:1e:41:f8:df:b2:41:1f:d2:bc: 35:5b:d2:33:d6:e2:ea:6d:0d:8c:64:c5:9c:de:29:0a:e4:4b: cb:3f:72:aa:84:25:de:a2:a7:7b:20:83:53:a9:70:4d:01:08: 98:13:1f:8e:a7:31:51:e2:a0:3e:42:e6:95:8f:8f:51:c5:31: a0:ce:b2:ca:a7:ed:33:22:16:7e:08:11:2f:2d:6a:dd:32:25: 71:48:2b:91:88:b4:ac:99:17:ff:b8:a9:11:83:62:b0:30:74: 03:59:a5:45:f4:15:52:14:d0:6c:78:5f:b4:f2:d9:0b:12:ee: c6:d3:fa:50:59:d5:66:78:4c:00:47:95:df:c3:2c:40:81:ca: 68:87:56:05:f5:4f:f0:1d:83:13:ca:ec:5e:cc:28:c2:f8:58: 7e:da:66:00:f0:51:18:be:af:6c:7c:80:2a:27:25:79:c2:20: 89:16:14:27:a2:4e:9f:e2:77:3c:a2:00:7f:b9:21:f6:65:6a: e4:38:09:b7:e7:79:34:be:97:b1:ee:22:c8:ec:1e:df:58:06: 89:53:77:1b:46:3e:c2:30:3c:52:57:a2:26:10:2c:38:8a:a2: a6:5b:f7:e0 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUWT0iU3OKDH1hlCg2u3hxPegdwQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNjAzMDExMzQ3MzNaFw0yNjAzMDMwNTM5MzNaMDMxMTAvBgNV BAMTKDZCNTYyNTYwQzk2MkQyM0U0MUEzRjlENzg2MkJBRDI1QzIzNEQ1MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2EKTAU/6dpW9jXYb0VU9usQNk rMr+uUdh0+77fRUSOOr2UQZhoWGBiXgWs2HkzEObipERK4nLcWwiXcMoUwv5Zpoe P5DQzeALL0yDmjDUjrZsM1EAmHK4N9vMRuTiJ+GkSAAUM3pEa8Nf1IL+I6iahnfM Z0+XV2n1SRDt2N1bYHEPbF/SQ/Ycqa9pWjWWia5vhyQbdQRrgtPLW9vIj0VUhmxM SXjmUm8iMsrlKJRKGwt2T3awm6HFIwdzqVYLR0k1UFozq+YyI1dCOxJYsLsZ7tWu WJqFguorbfma+qBxkwvQdZNFED7aypHhCGXtjjx4ad3AA9kZgIp+MHVHPS75AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUa1YlYMli0j5Bo/nXhiutJcI01RwwHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMy9EREMyNUFEMkYxQTQ4OTI0Nzcx M0VFMzlCMUMwM0VBMkZEREE0MTE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZHxxURoZKxERjUHm/DrX vHTfQ6X1/6CsfRx+HkH437JBH9K8NVvSM9bi6m0NjGTFnN4pCuRLyz9yqoQl3qKn eyCDU6lwTQEImBMfjqcxUeKgPkLmlY+PUcUxoM6yyqftMyIWfggRLy1q3TIlcUgr kYi0rJkX/7ipEYNisDB0A1mlRfQVUhTQbHhftPLZCxLuxtP6UFnVZnhMAEeV38Ms QIHKaIdWBfVP8B2DE8rsXswowvhYftpmAPBRGL6vbHyAKiclecIgiRYUJ6JOn+J3 PKIAf7kh9mVq5DgJt+d5NL6Xse4iyOwe31gGiVN3G0Y+wjA8UleiJhAsOIqiplv3 4A== -----END CERTIFICATE-----Generated at Sun Mar 1 22:14:04 2026 by rpki-client