$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft File: 879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft (raw, json) Hash identifier: 44yLIEspirjFdFXr4bJbLWU7vX9dnBtZ+hsCWhMTPEQ= Subject key identifier: 60:32:03:55:72:26:F5:9B:3D:CA:0D:F7:5C:9B:5B:AE:0A:6E:44:87 Authority key identifier: 87:92:80:A7:D9:E6:DD:DD:CC:B2:9E:9A:77:81:9D:5C:E3:82:31:85 Certificate issuer: /CN=879280A7D9E6DDDDCCB29E9A77819D5CE3823185 Certificate serial: 70EE8DE3AFD230B59CCBCA79AA0A37F50FF8874B Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft Manifest number: A9 Signing time: Fri 17 Apr 2026 15:43:30 +0000 Manifest this update: Fri 17 Apr 2026 15:38:30 +0000 Manifest next update: Sat 18 Apr 2026 17:53:30 +0000 Files and hashes: 1: 326130623a346530373a6330303a3a2f33382d3438203d3e20323135373630.roa (hash: YPrQ7rMdq3JvlF7MZ9xUnQFGrFDCIgYUVgYATMFPJvs=) 2: 879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl (hash: OmvRF76TxL3XIvboypBJ379orUiIHYKPV8OI5LAtGKE=) 3: 326130623a346530373a6362393a3a2f34382d3438203d3e20333936393832.roa (hash: dqTuq88lK2siPMjsitpQHSHuFkGIuzl+tsULr9aboBE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 04:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ee:8d:e3:af:d2:30:b5:9c:cb:ca:79:aa:0a:37:f5:0f:f8:87:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=879280A7D9E6DDDDCCB29E9A77819D5CE3823185 Validity Not Before: Apr 17 15:38:30 2026 GMT Not After : Apr 18 17:53:30 2026 GMT Subject: CN=603203557226F59B3DCA0DF75C9B5BAE0A6E4487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:97:3b:3c:57:71:22:5e:8b:26:88:13:d9:34: ef:a2:4f:3f:8c:10:7d:a7:e4:78:05:59:76:7a:4b: 3d:b4:16:31:81:7f:f9:a6:57:de:91:f7:a5:b4:90: 76:30:92:d7:3e:98:32:b1:0e:7d:01:b7:32:2c:97: 43:0b:19:78:1a:42:c6:97:f0:ab:c4:ed:9b:4d:f6: a7:20:fb:e7:01:0b:db:06:5c:7f:ab:c2:ea:3e:7c: c1:16:be:3b:50:14:d2:bb:ec:e6:b6:49:0a:12:90: 1f:16:82:ba:c4:17:85:73:aa:6b:35:de:c2:dd:a4: 61:73:4c:aa:01:34:a3:c0:1c:27:ee:0a:65:5b:52: bd:37:99:2c:28:34:25:7d:ef:6c:af:ed:e4:a3:26: 22:0b:11:27:57:53:89:fa:01:df:b4:0b:6a:03:26: 38:37:6c:43:10:47:8f:4c:e0:94:9b:00:0d:68:f1: 0f:a1:e4:36:4f:e8:d7:f1:52:69:36:87:28:1c:e4: b2:fa:06:88:ae:bb:6b:14:bf:7d:47:4d:dc:0d:ee: ef:b8:cb:60:68:7c:49:32:c5:88:df:dd:1d:c0:3c: b2:1d:86:71:20:92:60:ab:1a:38:58:64:24:8b:c4: b4:f6:31:8c:33:ed:88:6c:7c:2a:ec:6e:98:d2:92: 55:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:32:03:55:72:26:F5:9B:3D:CA:0D:F7:5C:9B:5B:AE:0A:6E:44:87 X509v3 Authority Key Identifier: keyid:87:92:80:A7:D9:E6:DD:DD:CC:B2:9E:9A:77:81:9D:5C:E3:82:31:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:af:b8:01:69:30:09:f7:58:6a:a3:8f:23:46:8f:23:79:5f: 47:1c:c5:46:f3:78:e1:38:1d:ef:6b:ec:cb:cf:57:d3:40:24: 6e:5f:8f:b4:9e:55:de:ad:23:15:d5:78:1e:e1:16:51:0c:3c: e1:04:ec:a1:99:d3:1d:eb:ab:e0:30:94:1c:73:35:27:e3:db: 0f:96:a2:28:4b:08:d0:c7:8c:af:ce:6e:56:bc:d6:ed:a6:61: 72:71:bc:c1:b8:d9:d5:73:e0:f7:00:24:ab:b6:21:69:27:51: 25:ae:0f:c5:3a:2b:1f:31:47:c9:cf:0d:d0:2c:03:60:14:f0: c9:7b:58:bf:0c:3e:46:ed:7a:55:c1:bb:19:ad:81:02:c9:51: 70:bb:61:ca:90:b0:7a:8f:8b:12:b3:fa:53:e7:6a:b0:db:fa: bc:ad:8c:15:d1:e8:31:aa:0a:a6:4f:5c:d7:0e:cf:92:d6:d3: a5:e8:2a:59:5d:1c:2e:34:62:c9:39:db:47:82:03:a2:0b:48: cc:28:9c:32:e9:3d:19:11:d1:29:c0:46:84:47:b5:5b:3d:60: 3f:e2:e4:79:d5:e3:65:04:87:29:ec:35:18:f8:44:b1:1f:22: 8a:f8:19:df:3d:79:e9:3d:42:55:ec:f7:42:a5:a5:bc:59:b9: 6e:d0:1a:99 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUcO6N46/SMLWcy8p5qgo39Q/4h0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNF MzgyMzE4NTAeFw0yNjA0MTcxNTM4MzBaFw0yNjA0MTgxNzUzMzBaMDMxMTAvBgNV BAMTKDYwMzIwMzU1NzIyNkY1OUIzRENBMERGNzVDOUI1QkFFMEE2RTQ0ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCglzs8V3EiXosmiBPZNO+iTz+M EH2n5HgFWXZ6Sz20FjGBf/mmV96R96W0kHYwktc+mDKxDn0BtzIsl0MLGXgaQsaX 8KvE7ZtN9qcg++cBC9sGXH+rwuo+fMEWvjtQFNK77Oa2SQoSkB8WgrrEF4Vzqms1 3sLdpGFzTKoBNKPAHCfuCmVbUr03mSwoNCV972yv7eSjJiILESdXU4n6Ad+0C2oD Jjg3bEMQR49M4JSbAA1o8Q+h5DZP6NfxUmk2hygc5LL6Boiuu2sUv31HTdwN7u+4 y2BofEkyxYjf3R3APLIdhnEgkmCrGjhYZCSLxLT2MYwz7YhsfCrsbpjSklXfAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUYDIDVXIm9Zs9yg33XJtbrgpuRIcwHwYDVR0j BBgwFoAUh5KAp9nm3d3Msp6ad4GdXOOCMYUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2 ZDAzLzEvODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNFMzgyMzE4NS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNFMzgy MzE4NS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mN2Q5MjU1OC0y NThlLTRiNDQtYWQxNi04YzEwMjJjNDZkMDMvMS84NzkyODBBN0Q5RTZEREREQ0NC MjlFOUE3NzgxOUQ1Q0UzODIzMTg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvK+4AWkwCfdYaqOPI0aP I3lfRxzFRvN44Tgd72vsy89X00Akbl+PtJ5V3q0jFdV4HuEWUQw84QTsoZnTHeur 4DCUHHM1J+PbD5aiKEsI0MeMr85uVrzW7aZhcnG8wbjZ1XPg9wAkq7YhaSdRJa4P xTorHzFHyc8N0CwDYBTwyXtYvww+Ru16VcG7Ga2BAslRcLthypCweo+LErP6U+dq sNv6vK2MFdHoMaoKpk9c1w7PktbTpegqWV0cLjRiyTnbR4IDogtIzCicMuk9GRHR KcBGhEe1Wz1gP+LkedXjZQSHKew1GPhEsR8iivgZ3z156T1CVez3QqWlvFm5btAa mQ== -----END CERTIFICATE-----Generated at Fri Apr 17 19:56:33 2026 by rpki-client