$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft File: 1DB41D8CB909418AA27BBDED06CFB5857401E676.mft (raw, json) Hash identifier: DLIKocLFM6rRGrcpale2GZWXPu60x746xwmdDwdnDxo= Subject key identifier: DD:9A:18:E4:4A:7A:88:F6:49:B7:91:E9:E3:86:39:9D:52:00:6E:00 Authority key identifier: 1D:B4:1D:8C:B9:09:41:8A:A2:7B:BD:ED:06:CF:B5:85:74:01:E6:76 Certificate issuer: /CN=1DB41D8CB909418AA27BBDED06CFB5857401E676 Certificate serial: 2A98168E4F44926B4E1CC9F2149B65E2FEB56D6F Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft Manifest number: 41 Signing time: Thu 16 Apr 2026 19:32:50 +0000 Manifest this update: Thu 16 Apr 2026 19:27:50 +0000 Manifest next update: Fri 17 Apr 2026 21:16:50 +0000 Files and hashes: 1: 1DB41D8CB909418AA27BBDED06CFB5857401E676.crl (hash: jLi6aPCToixY1GT1xqNUzdiSPyD8uvXGDcMLCxAfR6k=) 2: 326130363a613030323a613030323a3a2f34382d3438203d3e20323034303835.roa (hash: l3HYulpvOKCiOuLe10nJcYG8DkTaBY5HNMplHWMB7TA=) 3: 326130363a613030323a3a2f33322d3438203d3e20323135373630.roa (hash: B2caQKU5/hAAuwc57KOaYg2QivgfXC87ZBxhpnuBwec=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.crl rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 21:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:98:16:8e:4f:44:92:6b:4e:1c:c9:f2:14:9b:65:e2:fe:b5:6d:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DB41D8CB909418AA27BBDED06CFB5857401E676 Validity Not Before: Apr 16 19:27:50 2026 GMT Not After : Apr 17 21:16:50 2026 GMT Subject: CN=DD9A18E44A7A88F649B791E9E386399D52006E00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:57:98:52:67:88:00:e1:05:78:45:ac:61:54: 2c:b3:aa:d6:9f:ef:cd:44:6d:c5:e9:03:e9:d4:b6: 5b:82:09:30:ba:b4:8c:97:a1:44:5d:3b:15:63:a6: 46:bf:c4:e1:96:fa:ed:17:7a:15:d2:4b:59:46:00: 3b:06:20:87:32:c6:18:52:a2:41:07:94:23:c7:7e: 0d:9b:d5:72:23:32:02:28:6a:c4:9d:9c:8b:40:92: 48:f2:f0:45:b5:99:c9:18:35:82:b1:68:f0:af:d2: 35:8a:b5:d0:46:20:0a:1c:7b:0e:b9:24:6f:0e:de: f5:91:4d:5c:84:73:46:d1:08:58:7c:8f:b5:09:9d: 23:f2:18:a8:70:8f:a1:d7:66:7c:98:94:40:7d:35: 5e:51:1a:99:a6:19:eb:17:e0:76:f5:6d:72:7e:78: 8f:2f:b9:b2:49:be:93:b0:62:5e:3c:e2:f7:1d:65: aa:cd:3a:48:f9:d3:66:68:54:43:da:a0:ed:8b:96: 16:52:29:ac:66:cc:3d:20:36:0d:ee:0f:1c:14:89: 35:da:65:4c:68:67:b4:51:b3:d8:61:b4:c5:2f:e6: ad:34:db:df:f5:68:60:90:49:3e:68:01:87:46:34: 41:6a:f9:1b:97:bd:10:aa:d9:96:e3:5c:1e:ce:cd: 00:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9A:18:E4:4A:7A:88:F6:49:B7:91:E9:E3:86:39:9D:52:00:6E:00 X509v3 Authority Key Identifier: keyid:1D:B4:1D:8C:B9:09:41:8A:A2:7B:BD:ED:06:CF:B5:85:74:01:E6:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:89:39:bd:11:1d:2c:bd:ab:6a:ff:4e:63:1f:4b:0f:9b:8a: 06:94:e9:de:dc:e1:94:6a:52:a0:b2:5b:41:93:c9:ee:d1:4a: 26:3c:9e:20:d7:0a:91:80:81:8e:59:ad:c3:19:7b:6b:ad:8f: d6:78:86:ce:34:8e:7a:eb:86:1d:26:82:3c:c6:8a:4e:19:d6: 13:db:4b:ec:d5:66:96:c0:a0:f8:d0:fe:c1:4e:24:1c:4a:e7: af:83:f2:bd:25:c7:04:bf:41:6b:c6:04:c5:01:9c:74:c8:d0: f9:ab:25:72:a5:c0:a9:de:81:30:06:3f:f0:13:23:2c:bf:9a: 7b:18:96:2b:09:bc:d1:a2:a0:26:65:bb:47:96:56:90:f7:26: e7:6c:97:1a:4b:65:38:c7:77:7b:a1:9f:f2:33:75:49:46:87: 2d:a0:20:64:13:4e:a8:a1:b1:0d:0e:a5:bf:9a:55:1b:de:6c: 9c:cc:8d:0f:e2:87:69:72:d4:19:aa:21:4b:0b:e5:66:d0:70: 16:73:44:45:e1:b0:b8:4f:da:75:93:42:be:9c:08:41:1f:fc: 62:22:c4:b5:12:cb:0d:00:54:ff:f1:3c:cb:17:64:1e:8d:1d: b6:ba:61:ea:93:15:39:48:93:d0:13:60:99:b4:f7:10:db:72: b8:79:9c:2d -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUKpgWjk9EkmtOHMnyFJtl4v61bW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCNDFEOENCOTA5NDE4QUEyN0JCREVEMDZDRkI1ODU3 NDAxRTY3NjAeFw0yNjA0MTYxOTI3NTBaFw0yNjA0MTcyMTE2NTBaMDMxMTAvBgNV BAMTKEREOUExOEU0NEE3QTg4RjY0OUI3OTFFOUUzODYzOTlENTIwMDZFMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRV5hSZ4gA4QV4RaxhVCyzqtaf 781EbcXpA+nUtluCCTC6tIyXoURdOxVjpka/xOGW+u0XehXSS1lGADsGIIcyxhhS okEHlCPHfg2b1XIjMgIoasSdnItAkkjy8EW1mckYNYKxaPCv0jWKtdBGIAocew65 JG8O3vWRTVyEc0bRCFh8j7UJnSPyGKhwj6HXZnyYlEB9NV5RGpmmGesX4Hb1bXJ+ eI8vubJJvpOwYl484vcdZarNOkj502ZoVEPaoO2LlhZSKaxmzD0gNg3uDxwUiTXa ZUxoZ7RRs9hhtMUv5q0029/1aGCQST5oAYdGNEFq+RuXvRCq2ZbjXB7OzQAvAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU3ZoY5Ep6iPZJt5Hp44Y5nVIAbgAwHwYDVR0j BBgwFoAUHbQdjLkJQYqie73tBs+1hXQB5nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2 ZDAzLzMvMURCNDFEOENCOTA5NDE4QUEyN0JCREVEMDZDRkI1ODU3NDAxRTY3Ni5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMURCNDFEOENCOTA5NDE4QUEyN0JCREVEMDZDRkI1ODU3NDAx RTY3Ni5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mN2Q5MjU1OC0y NThlLTRiNDQtYWQxNi04YzEwMjJjNDZkMDMvMy8xREI0MUQ4Q0I5MDk0MThBQTI3 QkJERUQwNkNGQjU4NTc0MDFFNjc2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4k5vREdLL2rav9OYx9L D5uKBpTp3tzhlGpSoLJbQZPJ7tFKJjyeINcKkYCBjlmtwxl7a62P1niGzjSOeuuG HSaCPMaKThnWE9tL7NVmlsCg+ND+wU4kHErnr4PyvSXHBL9Ba8YExQGcdMjQ+asl cqXAqd6BMAY/8BMjLL+aexiWKwm80aKgJmW7R5ZWkPcm52yXGktlOMd3e6Gf8jN1 SUaHLaAgZBNOqKGxDQ6lv5pVG95snMyND+KHaXLUGaohSwvlZtBwFnNEReGwuE/a dZNCvpwIQR/8YiLEtRLLDQBU//E8yxdkHo0dtrph6pMVOUiT0BNgmbT3ENtyuHmc LQ== -----END CERTIFICATE-----Generated at Fri Apr 17 03:55:28 2026 by rpki-client