$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft File: D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft (raw, json) Hash identifier: n7f1oMDXU0DRmklbvjBY4+FtJv9egSP0ivJ9RSm7X64= Subject key identifier: 5A:5E:89:CC:18:DA:3B:B9:C0:E6:D2:3B:EB:AF:BD:88:1A:FD:ED:C9 Authority key identifier: D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9 Certificate issuer: /CN=D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9 Certificate serial: 158CFA0499ED50DEABC6D6552CA976A81F8A8CF2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft Manifest number: 0152 Signing time: Thu 24 Sep 2026 03:56:53 +0000 Manifest this update: Thu 24 Sep 2026 03:51:53 +0000 Manifest next update: Fri 25 Sep 2026 05:07:53 +0000 Files and hashes: 1: D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl (hash: TBXws/6xRCk0Bw0Ys+b0a4FW5BCkIIoMBnvLGM7u/SE=) 2: 326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa (hash: Qe+s8/fAnIQEeutwNPKlMCYxj4th5oSw8TX5K8siNS0=) 3: 326130663a316363353a6666663a3a2f34382d3438203d3e20323131353735.roa (hash: 9OCqZ/d+1rU6CR9p3YDhWbf8ZADN9O93ycDA5zxlgcg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 05:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:8c:fa:04:99:ed:50:de:ab:c6:d6:55:2c:a9:76:a8:1f:8a:8c:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9 Validity Not Before: Sep 24 03:51:53 2026 GMT Not After : Sep 25 05:07:53 2026 GMT Subject: CN=5A5E89CC18DA3BB9C0E6D23BEBAFBD881AFDEDC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8f:51:4a:ad:9c:9c:75:8f:9d:9f:e8:d9:4b: 37:7a:07:4e:98:4b:50:48:4b:10:db:30:c7:b9:e2: 3e:f1:27:69:dd:b6:09:fb:37:6f:ca:00:47:4d:85: 8c:f4:67:51:79:2a:3c:e5:49:41:f7:39:2d:a8:61: 3c:b3:7a:70:df:40:4e:d2:44:5c:ea:70:f3:a6:b3: 76:6f:dd:78:ad:a1:c3:13:5e:94:36:51:97:ca:c7: c8:59:f6:85:b1:cf:6d:81:1b:be:10:ca:15:84:6f: d5:72:41:43:28:f6:cf:7f:25:64:a4:94:85:c5:4d: b1:aa:04:e0:8d:3f:b3:6d:ad:8f:7a:fb:52:d6:0c: dd:25:68:c2:08:5e:50:c2:65:fa:a0:d4:be:9c:18: b3:60:0f:f1:8d:cf:63:6d:00:ce:3c:20:23:be:c4: 99:77:e4:f3:bc:c5:78:2c:8d:af:ed:71:9f:7d:04: fc:6d:c8:28:b8:4d:85:5e:ed:23:af:bc:fa:f0:74: 50:ee:97:13:2a:87:09:b7:f0:e2:c3:20:1c:a4:e4: e5:a9:b3:9d:c4:18:03:93:66:d6:02:b5:1a:b6:82: 87:82:69:cf:ee:dd:9a:75:8a:e6:06:8a:3a:8b:0f: 0d:3a:ff:46:36:f6:e1:1e:33:91:d3:19:34:ec:79: 21:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:5E:89:CC:18:DA:3B:B9:C0:E6:D2:3B:EB:AF:BD:88:1A:FD:ED:C9 X509v3 Authority Key Identifier: keyid:D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:72:9d:2b:f0:48:6b:5a:f7:b8:71:6c:23:f1:7e:f5:a5:13: d6:67:7a:d2:87:e5:70:94:6c:fe:fd:03:53:c1:a4:83:02:ed: e7:4a:e6:91:58:ce:5c:ef:49:7e:11:57:22:9c:33:45:e7:5f: d2:4c:d9:6e:ab:46:7c:ea:b0:74:c2:72:77:21:c9:4b:94:ae: 8d:08:f9:8a:75:84:67:73:46:3c:e8:30:1d:d8:c1:1e:56:2f: 2a:62:b1:54:06:b3:a4:a3:12:92:5d:e9:7e:d9:6f:3b:96:a7: a7:4b:de:c2:88:8c:39:6b:a7:a9:18:d7:e3:39:01:21:ad:46: d5:86:b7:a1:a1:0c:c9:36:3b:e5:e8:bc:e6:87:20:43:20:60: e3:6b:6e:17:79:6f:c3:3f:f8:eb:b3:71:cb:a3:f5:07:d0:37: 55:9a:c8:b1:02:de:d5:10:e0:40:22:ba:7b:88:56:f2:7a:c5: 8a:78:53:f3:43:63:e1:aa:ec:ff:06:12:8f:f8:9b:08:e5:ac: 71:14:f6:82:10:ed:d8:f4:54:7b:bb:91:eb:67:53:ef:9e:94: 69:96:69:9b:76:0d:4e:a8:07:11:8d:55:c7:10:d6:6e:a5:e0: 9b:9a:a3:fc:c2:40:d3:d9:e1:c4:3f:ef:9c:72:02:b9:c0:25: 81:15:5c:3b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUFYz6BJntUN6rxtZVLKl2qB+KjPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVFRTYzRDlCMUQyRDVDNkZBREM5QTE2OUU5QjRBRjY0 NENGMzdFOTAeFw0yNjA5MjQwMzUxNTNaFw0yNjA5MjUwNTA3NTNaMDMxMTAvBgNV BAMTKDVBNUU4OUNDMThEQTNCQjlDMEU2RDIzQkVCQUZCRDg4MUFGREVEQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqj1FKrZycdY+dn+jZSzd6B06Y S1BISxDbMMe54j7xJ2ndtgn7N2/KAEdNhYz0Z1F5KjzlSUH3OS2oYTyzenDfQE7S RFzqcPOms3Zv3XitocMTXpQ2UZfKx8hZ9oWxz22BG74QyhWEb9VyQUMo9s9/JWSk lIXFTbGqBOCNP7NtrY96+1LWDN0laMIIXlDCZfqg1L6cGLNgD/GNz2NtAM48ICO+ xJl35PO8xXgsja/tcZ99BPxtyCi4TYVe7SOvvPrwdFDulxMqhwm38OLDIByk5OWp s53EGAOTZtYCtRq2goeCac/u3Zp1iuYGijqLDw06/0Y29uEeM5HTGTTseSEHAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUWl6JzBjaO7nA5tI766+9iBr97ckwHwYDVR0j BBgwFoAU1e5j2bHS1cb63JoWnptK9kTPN+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzQvRDVFRTYzRDlCMUQyRDVDNkZBREM5QTE2OUU5QjRBRjY0NENGMzdFOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9ENUVFNjNEOUIxRDJENUM2RkFEQzlBMTY5 RTlCNEFGNjQ0Q0YzN0U5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi80L0Q1RUU2M0Q5 QjFEMkQ1QzZGQURDOUExNjlFOUI0QUY2NDRDRjM3RTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBAcp0r 8EhrWve4cWwj8X71pRPWZ3rSh+VwlGz+/QNTwaSDAu3nSuaRWM5c70l+EVcinDNF 51/STNluq0Z86rB0wnJ3IclLlK6NCPmKdYRnc0Y86DAd2MEeVi8qYrFUBrOkoxKS Xel+2W87lqenS97CiIw5a6epGNfjOQEhrUbVhrehoQzJNjvl6LzmhyBDIGDja24X eW/DP/jrs3HLo/UH0DdVmsixAt7VEOBAIrp7iFbyesWKeFPzQ2Phquz/BhKP+JsI 5axxFPaCEO3Y9FR7u5HrZ1PvnpRplmmbdg1OqAcRjVXHENZupeCbmqP8wkDT2eHE P++ccgK5wCWBFVw7 -----END CERTIFICATE-----Generated at Thu Sep 24 23:33:49 2026 by rpki-client