$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft File: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft (raw, json) Hash identifier: PG3LsJ0OcpCqlOCjLPC8qGeljNYQl1cKppk5/Z1gcbI= Subject key identifier: F7:EF:7F:EE:C3:56:34:57:0D:08:DC:E1:DD:93:63:AF:06:23:6D:AB Authority key identifier: DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 Certificate issuer: /CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Certificate serial: 6EC2CD100C565D2B1880F53E79C2874B1BDF8D6C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft Manifest number: A3 Signing time: Tue 12 May 2026 12:07:27 +0000 Manifest this update: Tue 12 May 2026 12:02:27 +0000 Manifest next update: Wed 13 May 2026 13:54:27 +0000 Files and hashes: 1: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl (hash: wrjpQV6AdMLb7PS4so5pj5fgbdtG6Qe7y4kqQBzLqOQ=) 2: 326130663a316363353a326430333a3a2f34382d3438203d3e20323134393535.roa (hash: FhiRWcOhFd1e57IfPQu+2j0uinj7188+3VOrSYUtQ6c=) 3: 326130663a316363353a326430313a3a2f34382d3438203d3e20323134393535.roa (hash: l0RMqMiAhgGDzLpuD3ZJuPudrozfegvLREqyl+4aP2I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 04:46:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:c2:cd:10:0c:56:5d:2b:18:80:f5:3e:79:c2:87:4b:1b:df:8d:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Validity Not Before: May 12 12:02:27 2026 GMT Not After : May 13 13:54:27 2026 GMT Subject: CN=F7EF7FEEC35634570D08DCE1DD9363AF06236DAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cb:67:83:78:bc:34:d7:a0:ca:80:64:91:c3: a0:bd:8f:72:a9:5f:27:0e:4a:1b:ee:81:96:40:db: 32:43:24:ff:ae:c8:90:77:4c:42:6a:06:6c:a5:ff: 68:33:1d:3f:b6:fa:3a:ed:48:25:f0:f2:8b:16:04: aa:2f:af:f4:a7:8c:b0:cf:3c:dd:c3:b2:ce:59:bb: 2d:52:96:95:36:82:73:23:4f:ae:88:59:41:aa:73: 09:24:d5:ec:16:76:cf:03:b3:c5:76:4a:63:c3:c9: 3a:bd:6a:af:83:af:de:51:e6:79:d3:9e:d7:f2:aa: d3:16:fa:c0:4d:1a:2c:64:b3:e0:c1:28:1b:56:db: bb:2a:96:37:83:5c:c2:d9:cc:d8:93:dc:f2:e1:57: 20:ad:57:f7:fd:29:69:3f:ad:9d:cd:70:49:f0:38: 9b:63:7c:8e:33:c9:54:2b:73:88:80:fa:0a:97:86: e9:6d:28:ef:4c:d3:95:59:a9:bd:7e:f6:a7:36:6f: 3c:02:1b:8f:ad:93:94:ef:a0:a2:14:32:cd:73:55: 55:08:01:78:f4:ea:17:26:8d:e7:cf:cc:99:44:71: 68:dd:dd:ac:79:51:ad:38:57:b1:ad:61:c0:5a:15: 8a:12:ec:e5:3e:97:f0:cd:3f:cb:7e:de:98:6e:79: 96:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:EF:7F:EE:C3:56:34:57:0D:08:DC:E1:DD:93:63:AF:06:23:6D:AB X509v3 Authority Key Identifier: keyid:DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:f2:ab:45:e8:55:6b:41:85:b4:96:f7:e3:20:8e:60:2a:1f: d0:68:32:7f:d9:39:58:5c:d0:03:be:54:9f:88:e1:99:de:cd: 46:66:b4:ca:7a:05:61:8b:9d:71:8c:3d:7d:b2:41:2a:fe:c3: ed:25:5a:55:11:56:89:9e:18:af:37:94:77:74:03:83:d9:77: 38:48:83:bf:20:c3:5b:58:ef:a0:1c:ba:b4:4d:b6:78:df:2e: b1:86:e6:63:2f:43:db:86:9c:7c:d8:53:5a:1a:5f:79:ab:cb: 3d:cf:6f:a3:41:e4:69:4d:8d:aa:7c:97:7d:e4:96:f6:08:1a: 24:bb:d2:6f:db:a3:4f:46:27:f5:1e:c1:5b:9c:0d:0a:e4:e5: 43:7d:84:db:2a:cf:d6:c2:8c:21:a4:a2:34:db:f2:81:0c:5d: 02:1a:95:6d:ad:82:45:09:6f:96:b0:3b:53:90:92:6b:96:7a: 52:bb:c0:76:28:62:5f:84:b2:7a:d5:f1:14:f0:05:6c:02:a0: 81:d4:c9:c9:04:ed:90:62:c5:ef:84:4c:d3:90:32:82:7c:bb: 61:11:a0:5a:cc:92:5f:97:b1:f2:14:ee:0e:1a:f6:17:1c:5d: 68:08:54:b1:b8:f5:fd:9b:e3:4b:db:f7:ba:ed:45:a5:11:38: 2c:47:d6:33 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUbsLNEAxWXSsYgPU+ecKHSxvfjWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4 NUZBNEVFMTAeFw0yNjA1MTIxMjAyMjdaFw0yNjA1MTMxMzU0MjdaMDMxMTAvBgNV BAMTKEY3RUY3RkVFQzM1NjM0NTcwRDA4RENFMUREOTM2M0FGMDYyMzZEQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+y2eDeLw016DKgGSRw6C9j3Kp XycOShvugZZA2zJDJP+uyJB3TEJqBmyl/2gzHT+2+jrtSCXw8osWBKovr/SnjLDP PN3Dss5Zuy1SlpU2gnMjT66IWUGqcwkk1ewWds8Ds8V2SmPDyTq9aq+Dr95R5nnT ntfyqtMW+sBNGixks+DBKBtW27sqljeDXMLZzNiT3PLhVyCtV/f9KWk/rZ3NcEnw OJtjfI4zyVQrc4iA+gqXhultKO9M05VZqb1+9qc2bzwCG4+tk5TvoKIUMs1zVVUI AXj06hcmjefPzJlEcWjd3ax5Ua04V7GtYcBaFYoS7OU+l/DNP8t+3phueZazAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU9+9/7sNWNFcNCNzh3ZNjrwYjbaswHwYDVR0j BBgwFoAU21u9swIQMU6QQLbJnb9p7oX6TuEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzMvREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4NUZBNEVFMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9EQjVCQkRCMzAyMTAzMTRFOTA0MEI2Qzk5 REJGNjlFRTg1RkE0RUUxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzNmOTllNjZkLTRjN2ItNDEzMC05MWQ1LTRmYmQ4NDM1Nzc5Mi8zL0RCNUJCREIz MDIxMDMxNEU5MDQwQjZDOTlEQkY2OUVFODVGQTRFRTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCj8qtF 6FVrQYW0lvfjII5gKh/QaDJ/2TlYXNADvlSfiOGZ3s1GZrTKegVhi51xjD19skEq /sPtJVpVEVaJnhivN5R3dAOD2Xc4SIO/IMNbWO+gHLq0TbZ43y6xhuZjL0Pbhpx8 2FNaGl95q8s9z2+jQeRpTY2qfJd95Jb2CBoku9Jv26NPRif1HsFbnA0K5OVDfYTb Ks/WwowhpKI02/KBDF0CGpVtrYJFCW+WsDtTkJJrlnpSu8B2KGJfhLJ61fEU8AVs AqCB1MnJBO2QYsXvhEzTkDKCfLthEaBazJJfl7HyFO4OGvYXHF1oCFSxuPX9m+NL 2/e67UWlETgsR9Yz -----END CERTIFICATE-----Generated at Tue May 12 22:27:50 2026 by rpki-client