$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft File: 544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft (raw, json) Hash identifier: QtN10HxSbJJ9vYwinE6y9ZatF204FmiNpwE6O8Hd+Hg= Subject key identifier: E9:15:9D:EE:47:94:79:53:B5:17:F8:9C:96:7C:F1:44:10:02:83:F8 Authority key identifier: 54:4B:D5:A1:9A:1C:B1:A9:4E:1A:4B:76:B0:DF:45:55:F1:BB:A1:D8 Certificate issuer: /CN=544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8 Certificate serial: 46014E87E9294084F7955780F28079702EBC9326 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft Manifest number: 4C Signing time: Fri 17 Apr 2026 07:38:49 +0000 Manifest this update: Fri 17 Apr 2026 07:33:49 +0000 Manifest next update: Sat 18 Apr 2026 08:23:49 +0000 Files and hashes: 1: 326130363a313238353a616435353a3a2f34382d3438203d3e203331383938.roa (hash: gEq1PyQ0/WyvK1nTs6bKynEeXPOPYcgFZMOk1v3GFlk=) 2: 544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.crl (hash: rhDyFDr9WWjQ6MmqQgKaSjXvnFanyYb/6bhu0ex94hw=) 3: 326130363a313238353a3a2f33322d3332203d3e20323036393831.roa (hash: egrN8k6Xk0Kwig5ye5zQFDYGrtcNNmET1Xfnp7uE4Hk=) 4: 326130363a313238353a646561643a3a2f34382d3438203d3e20323036393831.roa (hash: /MFLzAsvOCJeLOEWlbPKnenIdyo3QrpeZg15YJwkcZI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.crl rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:01:4e:87:e9:29:40:84:f7:95:57:80:f2:80:79:70:2e:bc:93:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8 Validity Not Before: Apr 17 07:33:49 2026 GMT Not After : Apr 18 08:23:49 2026 GMT Subject: CN=E9159DEE47947953B517F89C967CF144100283F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:06:0b:65:cf:22:a0:7c:80:6a:9d:d4:15:f8: 08:21:4e:ea:88:74:16:6a:f8:ce:2a:57:16:dd:57: 02:d8:9a:e8:c4:e7:9d:ff:a1:0e:90:83:64:1f:11: 1d:71:64:36:0f:8d:1e:9d:07:69:4a:03:e7:d9:7d: 2b:ac:bc:13:55:11:4d:8f:a1:a3:c0:bf:11:3d:62: 7e:23:d7:2f:08:73:79:51:25:7b:41:5d:1a:42:d7: 36:5d:0d:07:bd:4f:d4:c9:56:83:f9:b3:09:bd:4d: 0d:9b:e6:9c:c8:a7:14:8a:88:84:35:d6:fd:9a:d5: 0f:36:76:d5:3a:f4:61:6c:da:d7:8c:bc:0f:32:11: cd:89:bc:da:f9:8d:c0:e3:04:38:eb:65:b4:53:84: e2:fc:c2:0a:15:ff:01:2c:82:a9:74:de:32:3f:57: 0c:18:41:85:6e:b3:80:f4:d8:bf:3f:29:5e:00:29: 26:59:e0:b9:44:9a:7e:61:0d:93:ec:23:02:78:0a: ca:62:06:bc:fd:06:5f:af:4a:bf:48:c3:3f:d4:bc: d7:98:3f:4a:3b:e6:27:78:bf:9e:2c:ea:a0:cd:b4: 1b:81:0c:70:d1:8f:6a:c9:4f:39:8e:7e:cf:30:6b: a1:2a:fb:92:ec:1c:3d:bb:f3:60:25:8c:32:ff:54: 24:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:15:9D:EE:47:94:79:53:B5:17:F8:9C:96:7C:F1:44:10:02:83:F8 X509v3 Authority Key Identifier: keyid:54:4B:D5:A1:9A:1C:B1:A9:4E:1A:4B:76:B0:DF:45:55:F1:BB:A1:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:69:9c:b8:72:99:b1:97:6c:b3:6d:00:a2:c6:0d:3c:95:a9: eb:82:e7:3c:e8:83:23:37:fb:e1:ba:32:29:16:07:1c:69:0c: 7b:49:96:95:ce:6a:80:70:5c:7f:dc:d3:1a:48:f6:29:4e:39: 80:31:47:14:73:ed:aa:3a:7a:70:46:f3:74:dd:b0:2e:b4:19: 84:b2:e6:91:6e:11:2c:9d:6f:11:d7:75:05:db:7e:58:a8:35: d8:d4:05:42:da:1e:c2:86:31:70:28:86:15:44:ef:36:ec:63: 3d:91:2b:e4:28:a1:02:64:14:c5:5f:ce:d5:42:29:56:1d:b9: 18:ce:da:2b:66:fe:52:9d:98:08:9d:e9:7c:29:f0:1b:c3:0d: e9:0b:7a:83:83:04:d1:4c:42:6a:0e:d8:1d:30:c4:7c:fb:99: 31:58:fe:ee:36:76:60:1d:94:43:41:3b:0a:d2:d8:53:48:bd: 8b:ec:1d:f5:26:5d:49:5b:e8:d1:d9:c5:1f:c4:df:09:ae:50: 0e:20:8a:e5:c0:fe:a2:34:28:b6:f4:a7:56:6f:83:17:a2:79: 75:44:a5:47:57:05:05:8c:e5:3d:9e:2b:6b:50:e8:f9:00:7e: 6e:0e:75:02:98:b1:81:60:92:5d:03:1a:86:17:c5:48:8a:c2: 0a:f5:42:e3 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIURgFOh+kpQIT3lVeA8oB5cC68kyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ0QkQ1QTE5QTFDQjFBOTRFMUE0Qjc2QjBERjQ1NTVG MUJCQTFEODAeFw0yNjA0MTcwNzMzNDlaFw0yNjA0MTgwODIzNDlaMDMxMTAvBgNV BAMTKEU5MTU5REVFNDc5NDc5NTNCNTE3Rjg5Qzk2N0NGMTQ0MTAwMjgzRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKBgtlzyKgfIBqndQV+AghTuqI dBZq+M4qVxbdVwLYmujE553/oQ6Qg2QfER1xZDYPjR6dB2lKA+fZfSusvBNVEU2P oaPAvxE9Yn4j1y8Ic3lRJXtBXRpC1zZdDQe9T9TJVoP5swm9TQ2b5pzIpxSKiIQ1 1v2a1Q82dtU69GFs2teMvA8yEc2JvNr5jcDjBDjrZbRThOL8wgoV/wEsgql03jI/ VwwYQYVus4D02L8/KV4AKSZZ4LlEmn5hDZPsIwJ4CspiBrz9Bl+vSr9Iwz/UvNeY P0o75id4v54s6qDNtBuBDHDRj2rJTzmOfs8wa6Eq+5LsHD2782AljDL/VCQ9AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU6RWd7keUeVO1F/iclnzxRBACg/gwHwYDVR0j BBgwFoAUVEvVoZocsalOGkt2sN9FVfG7odgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjIyZjY3YTQtZjA4NS00ZDY4LTk2ZWUtYzFiZjQ5OTI2 MjQxLzAvNTQ0QkQ1QTE5QTFDQjFBOTRFMUE0Qjc2QjBERjQ1NTVGMUJCQTFEOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNTQ0QkQ1QTE5QTFDQjFBOTRFMUE0Qjc2QjBERjQ1NTVGMUJC QTFEOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mMjJmNjdhNC1m MDg1LTRkNjgtOTZlZS1jMWJmNDk5MjYyNDEvMC81NDRCRDVBMTlBMUNCMUE5NEUx QTRCNzZCMERGNDU1NUYxQkJBMUQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU2mcuHKZsZdss20AosYN PJWp64LnPOiDIzf74boyKRYHHGkMe0mWlc5qgHBcf9zTGkj2KU45gDFHFHPtqjp6 cEbzdN2wLrQZhLLmkW4RLJ1vEdd1Bdt+WKg12NQFQtoewoYxcCiGFUTvNuxjPZEr 5CihAmQUxV/O1UIpVh25GM7aK2b+Up2YCJ3pfCnwG8MN6Qt6g4ME0UxCag7YHTDE fPuZMVj+7jZ2YB2UQ0E7CtLYU0i9i+wd9SZdSVvo0dnFH8TfCa5QDiCK5cD+ojQo tvSnVm+DF6J5dUSlR1cFBYzlPZ4ra1Do+QB+bg51ApixgWCSXQMahhfFSIrCCvVC 4w== -----END CERTIFICATE-----Generated at Fri Apr 17 16:52:35 2026 by rpki-client