$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft File: D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft (raw, json) Hash identifier: CmR5ZPqwp0Fw8vOY2Pq1cK6wx6ox518YKgrC0lv8/GQ= Subject key identifier: F4:A6:B1:21:5A:F7:99:68:15:53:66:2F:DE:CD:CF:45:86:62:45:02 Authority key identifier: D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9 Certificate issuer: /CN=D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9 Certificate serial: 3715FB1AC5D88B1F4674F516434BC0E774ECD317 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft Manifest number: 5D Signing time: Wed 25 Mar 2026 07:02:56 +0000 Manifest this update: Wed 25 Mar 2026 06:57:56 +0000 Manifest next update: Thu 26 Mar 2026 11:01:56 +0000 Files and hashes: 1: 326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa (hash: Qe+s8/fAnIQEeutwNPKlMCYxj4th5oSw8TX5K8siNS0=) 2: D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl (hash: PufvmG9yTOy0+s8MsvO23YDm8MED9IrZRpNtRtXW+4A=) 3: 326130663a316363353a6666663a3a2f34382d3438203d3e20323131353735.roa (hash: 9OCqZ/d+1rU6CR9p3YDhWbf8ZADN9O93ycDA5zxlgcg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 10:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:15:fb:1a:c5:d8:8b:1f:46:74:f5:16:43:4b:c0:e7:74:ec:d3:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9 Validity Not Before: Mar 25 06:57:56 2026 GMT Not After : Mar 26 11:01:56 2026 GMT Subject: CN=F4A6B1215AF799681553662FDECDCF4586624502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d1:17:91:c7:5a:ce:ca:02:ae:5b:e5:56:c4: ad:ac:78:f2:82:dc:51:a3:e4:cf:ed:9d:a4:8c:79: b4:a6:18:9f:05:67:80:6d:63:6c:48:95:6f:b9:67: 66:fe:13:07:15:35:37:d5:cf:5a:01:89:90:8e:ea: 1c:02:af:df:d2:a5:7b:eb:51:07:19:4a:a9:b8:ba: 69:2b:b1:e0:b5:03:49:a2:bb:73:cb:d7:22:8b:52: 39:34:a7:3b:08:01:d1:07:f6:1b:45:f4:11:71:59: 63:92:93:e5:53:5f:2b:fe:00:8f:50:b5:91:03:70: fa:3a:f9:b0:93:6d:06:4e:26:ee:de:a1:30:a1:35: 55:70:4e:31:57:fe:5b:3f:06:2b:be:67:1b:ad:b4: f9:72:de:24:78:ca:eb:73:ee:c6:6c:8e:d8:f3:d2: e0:8c:6b:ab:e9:70:ca:ab:a0:2c:96:2f:94:17:e2: 9d:39:b8:e1:b9:3b:67:ae:12:c6:60:50:8b:f6:b4: a3:2d:28:7b:43:14:f7:52:b7:8c:c7:85:6d:10:fc: c6:5d:26:e4:55:dd:9c:c6:ef:d6:4f:3a:fd:ce:78: 6c:54:a7:0f:4b:a5:fd:0b:52:dd:fe:cf:e0:ba:36: d7:b9:88:59:c6:10:dc:d9:3a:21:6d:84:7c:4c:09: 67:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A6:B1:21:5A:F7:99:68:15:53:66:2F:DE:CD:CF:45:86:62:45:02 X509v3 Authority Key Identifier: keyid:D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:2b:97:32:f7:ff:77:a6:65:f6:e9:8c:ec:ae:d9:6e:1c:92: bb:53:c4:6a:61:38:b6:b3:55:78:5e:01:9c:9a:b9:a1:ba:32: 03:43:3d:cb:60:8c:4a:8d:e1:47:84:06:bb:52:76:99:20:da: a1:d9:0d:ac:97:b1:81:36:b5:ce:03:f0:57:9f:b8:e8:e5:f5: 20:3d:d1:21:16:30:7a:ab:de:08:88:19:30:cc:3f:8a:d1:60: d7:fa:60:8a:a6:5f:a6:ea:50:1d:06:41:5c:2d:15:fa:6e:ee: be:23:06:83:53:35:78:d4:ed:4a:47:77:dd:a5:52:3f:bd:19: 46:c2:a9:12:d3:58:1a:15:3d:24:bd:10:c6:24:58:ed:6d:e3: 6b:e1:7e:44:36:2a:06:96:3c:f6:b7:01:fa:8c:3f:25:fd:b3: 1d:7a:3c:2b:fc:ce:8e:39:d0:0a:24:c6:74:8f:44:24:28:d8: 81:3d:40:c5:9e:77:2d:7a:91:df:1a:ee:02:66:41:a4:11:19: 98:8d:52:0a:42:ad:55:55:71:a7:ba:40:4c:7d:17:47:6f:13: 92:7e:75:97:3d:cc:3c:8d:b9:ab:a6:a6:82:0c:c0:de:e8:17: 9d:94:e0:0d:98:54:54:34:9e:78:0f:ea:01:97:e8:66:e4:eb: 01:0d:89:1e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUNxX7GsXYix9GdPUWQ0vA53Ts0xcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVFRTYzRDlCMUQyRDVDNkZBREM5QTE2OUU5QjRBRjY0 NENGMzdFOTAeFw0yNjAzMjUwNjU3NTZaFw0yNjAzMjYxMTAxNTZaMDMxMTAvBgNV BAMTKEY0QTZCMTIxNUFGNzk5NjgxNTUzNjYyRkRFQ0RDRjQ1ODY2MjQ1MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy0ReRx1rOygKuW+VWxK2sePKC 3FGj5M/tnaSMebSmGJ8FZ4BtY2xIlW+5Z2b+EwcVNTfVz1oBiZCO6hwCr9/SpXvr UQcZSqm4umkrseC1A0miu3PL1yKLUjk0pzsIAdEH9htF9BFxWWOSk+VTXyv+AI9Q tZEDcPo6+bCTbQZOJu7eoTChNVVwTjFX/ls/Biu+ZxuttPly3iR4yutz7sZsjtjz 0uCMa6vpcMqroCyWL5QX4p05uOG5O2euEsZgUIv2tKMtKHtDFPdSt4zHhW0Q/MZd JuRV3ZzG79ZPOv3OeGxUpw9Lpf0LUt3+z+C6Nte5iFnGENzZOiFthHxMCWe/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU9KaxIVr3mWgVU2Yv3s3PRYZiRQIwHwYDVR0j BBgwFoAU1e5j2bHS1cb63JoWnptK9kTPN+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzQvRDVFRTYzRDlCMUQyRDVDNkZBREM5QTE2OUU5QjRBRjY0NENGMzdFOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9ENUVFNjNEOUIxRDJENUM2RkFEQzlBMTY5 RTlCNEFGNjQ0Q0YzN0U5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi80L0Q1RUU2M0Q5 QjFEMkQ1QzZGQURDOUExNjlFOUI0QUY2NDRDRjM3RTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAIK5cy 9/93pmX26YzsrtluHJK7U8RqYTi2s1V4XgGcmrmhujIDQz3LYIxKjeFHhAa7UnaZ INqh2Q2sl7GBNrXOA/BXn7jo5fUgPdEhFjB6q94IiBkwzD+K0WDX+mCKpl+m6lAd BkFcLRX6bu6+IwaDUzV41O1KR3fdpVI/vRlGwqkS01gaFT0kvRDGJFjtbeNr4X5E NioGljz2twH6jD8l/bMdejwr/M6OOdAKJMZ0j0QkKNiBPUDFnnctepHfGu4CZkGk ERmYjVIKQq1VVXGnukBMfRdHbxOSfnWXPcw8jbmrpqaCDMDe6BedlOANmFRUNJ54 D+oBl+hm5OsBDYke -----END CERTIFICATE-----Generated at Thu Mar 26 04:18:36 2026 by rpki-client