$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft File: D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft (raw, json) Hash identifier: iuT+qYBhJI9ufq353YTXfMkjhiq4k+BAt0nDRa2ieRs= Subject key identifier: C7:FD:49:4D:9F:FC:75:43:5C:27:98:40:07:09:C0:8D:2D:EE:83:F5 Authority key identifier: D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9 Certificate issuer: /CN=D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9 Certificate serial: 3B9C7416621773BBEB883706510B0A8CE69C9F60 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft Manifest number: 9D Signing time: Tue 12 May 2026 18:09:11 +0000 Manifest this update: Tue 12 May 2026 18:04:11 +0000 Manifest next update: Wed 13 May 2026 18:23:11 +0000 Files and hashes: 1: 326130663a316363353a6666663a3a2f34382d3438203d3e20323131353735.roa (hash: 9OCqZ/d+1rU6CR9p3YDhWbf8ZADN9O93ycDA5zxlgcg=) 2: D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl (hash: EBK5JYJCsyGKQrS1aPwetNPbBukWwDxGW690gCgCYss=) 3: 326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa (hash: Qe+s8/fAnIQEeutwNPKlMCYxj4th5oSw8TX5K8siNS0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 18:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:9c:74:16:62:17:73:bb:eb:88:37:06:51:0b:0a:8c:e6:9c:9f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9 Validity Not Before: May 12 18:04:11 2026 GMT Not After : May 13 18:23:11 2026 GMT Subject: CN=C7FD494D9FFC75435C2798400709C08D2DEE83F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:78:47:79:33:c7:ca:33:92:16:bd:2a:78:af: 05:35:54:ca:31:3d:a5:dd:de:c7:a3:7d:1c:fa:a3: b2:55:a1:b7:f8:17:3e:49:2b:5c:99:9c:70:1b:bf: b0:d7:b1:f4:33:c0:24:e7:27:f7:28:ec:59:f0:12: cf:0f:bc:3d:58:97:9c:ef:d7:54:9e:25:be:18:74: df:78:9a:18:26:cf:c8:31:85:8c:33:e2:49:e3:01: f8:26:de:fa:e9:14:00:17:11:51:97:63:33:05:51: 39:79:07:65:28:9b:f2:7f:a4:9c:8e:d9:b7:20:83: 73:aa:cb:d2:ea:71:ee:f1:30:9e:ac:25:b1:ce:35: 62:67:d9:8d:a4:45:ee:ea:2c:00:11:21:6d:06:20: aa:f1:cc:c4:20:77:75:38:d2:48:1d:a2:bf:f3:1d: 9f:53:b9:58:56:a3:62:f6:c7:8e:52:e8:0a:31:ec: 81:80:44:9d:90:43:18:1d:40:f3:12:09:c5:4f:90: 0c:06:ec:86:4d:5d:64:ea:88:43:d3:01:fc:63:a6: 50:67:09:4e:e1:14:2c:5a:fc:d3:06:4a:ab:fb:ec: d0:b0:30:cf:d6:91:69:57:29:2e:ad:62:75:bf:42: 20:e2:cc:0f:4a:06:b9:3e:3a:ce:8e:50:ef:a0:49: a7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:FD:49:4D:9F:FC:75:43:5C:27:98:40:07:09:C0:8D:2D:EE:83:F5 X509v3 Authority Key Identifier: keyid:D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:72:af:a4:a0:11:a7:92:9d:5a:1a:06:1c:42:36:4e:c2:23: 0a:aa:6f:18:4f:b4:e5:a8:e7:2d:47:fa:1e:55:9b:ca:a4:07: 90:3e:75:31:60:94:47:5d:3b:22:f5:12:87:1c:55:de:96:9b: 37:b9:1e:ad:da:71:77:89:c1:28:6b:c3:40:ad:9c:ee:98:3f: 83:7d:ec:50:0a:4e:dc:65:d8:72:78:21:b6:12:ab:cc:da:02: 65:aa:bc:02:23:05:bc:80:4d:71:93:f4:17:a6:5c:71:ca:26: 09:20:ba:02:c0:b5:b5:94:76:65:de:52:47:9f:0d:c8:e4:76: f9:bc:bc:69:10:e3:a3:74:5a:a8:ed:4c:8f:76:69:d5:1c:2c: dc:e4:1c:68:ad:77:1d:cb:cd:0d:3e:0b:d5:b8:c5:2a:64:89: 6f:9c:d6:52:91:dd:40:30:2e:a1:7e:6d:24:15:94:bd:b4:e8: 35:50:24:f0:b2:9c:4d:83:fd:bd:73:92:ee:79:e3:66:c8:f4: a3:8c:70:3a:c8:f9:66:fb:5d:9e:f0:8b:d9:0c:d7:27:27:51: ce:b3:8d:3a:53:fc:96:cc:80:21:e9:47:8e:45:e0:83:7c:12: f8:b2:ec:81:7f:ba:88:5d:17:69:b5:4b:4b:19:c5:24:a5:21: 28:ad:6d:3e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUO5x0FmIXc7vriDcGUQsKjOacn2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVFRTYzRDlCMUQyRDVDNkZBREM5QTE2OUU5QjRBRjY0 NENGMzdFOTAeFw0yNjA1MTIxODA0MTFaFw0yNjA1MTMxODIzMTFaMDMxMTAvBgNV BAMTKEM3RkQ0OTREOUZGQzc1NDM1QzI3OTg0MDA3MDlDMDhEMkRFRTgzRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPeEd5M8fKM5IWvSp4rwU1VMox PaXd3sejfRz6o7JVobf4Fz5JK1yZnHAbv7DXsfQzwCTnJ/co7FnwEs8PvD1Yl5zv 11SeJb4YdN94mhgmz8gxhYwz4knjAfgm3vrpFAAXEVGXYzMFUTl5B2Uom/J/pJyO 2bcgg3Oqy9Lqce7xMJ6sJbHONWJn2Y2kRe7qLAARIW0GIKrxzMQgd3U40kgdor/z HZ9TuVhWo2L2x45S6Aox7IGARJ2QQxgdQPMSCcVPkAwG7IZNXWTqiEPTAfxjplBn CU7hFCxa/NMGSqv77NCwMM/WkWlXKS6tYnW/QiDizA9KBrk+Os6OUO+gSadPAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUx/1JTZ/8dUNcJ5hABwnAjS3ug/UwHwYDVR0j BBgwFoAU1e5j2bHS1cb63JoWnptK9kTPN+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzQvRDVFRTYzRDlCMUQyRDVDNkZBREM5QTE2OUU5QjRBRjY0NENGMzdFOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9ENUVFNjNEOUIxRDJENUM2RkFEQzlBMTY5 RTlCNEFGNjQ0Q0YzN0U5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi80L0Q1RUU2M0Q5 QjFEMkQ1QzZGQURDOUExNjlFOUI0QUY2NDRDRjM3RTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCWcq+k oBGnkp1aGgYcQjZOwiMKqm8YT7TlqOctR/oeVZvKpAeQPnUxYJRHXTsi9RKHHFXe lps3uR6t2nF3icEoa8NArZzumD+DfexQCk7cZdhyeCG2EqvM2gJlqrwCIwW8gE1x k/QXplxxyiYJILoCwLW1lHZl3lJHnw3I5Hb5vLxpEOOjdFqo7UyPdmnVHCzc5Bxo rXcdy80NPgvVuMUqZIlvnNZSkd1AMC6hfm0kFZS9tOg1UCTwspxNg/29c5LueeNm yPSjjHA6yPlm+12e8IvZDNcnJ1HOs406U/yWzIAh6UeOReCDfBL4suyBf7qIXRdp tUtLGcUkpSEorW0+ -----END CERTIFICATE-----Generated at Wed May 13 03:38:17 2026 by rpki-client