$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft File: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft (raw, json) Hash identifier: AjIigaZlOs9i7I689rcljcFQQM5jywBhfSC6Z9nrBwU= Subject key identifier: 8B:CB:42:39:43:24:0F:00:37:B2:7F:20:DF:FA:1F:12:CE:B4:FE:00 Authority key identifier: DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 Certificate issuer: /CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Certificate serial: 2386FAC5A238868A6407C9B5DC6B3C55501D5EDF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft Manifest number: 0104 Signing time: Thu 23 Jul 2026 17:57:58 +0000 Manifest this update: Thu 23 Jul 2026 17:52:58 +0000 Manifest next update: Fri 24 Jul 2026 20:28:58 +0000 Files and hashes: 1: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl (hash: tBw54ub6kcV9gGmoDxs2Sn6+gewxpnkWY8QyY6qex5s=) 2: 326130663a316363353a326430313a3a2f34382d3438203d3e20323134393535.roa (hash: l0RMqMiAhgGDzLpuD3ZJuPudrozfegvLREqyl+4aP2I=) 3: 326130663a316363353a326430333a3a2f34382d3438203d3e20323134393535.roa (hash: FhiRWcOhFd1e57IfPQu+2j0uinj7188+3VOrSYUtQ6c=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:86:fa:c5:a2:38:86:8a:64:07:c9:b5:dc:6b:3c:55:50:1d:5e:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Validity Not Before: Jul 23 17:52:58 2026 GMT Not After : Jul 24 20:28:58 2026 GMT Subject: CN=8BCB423943240F0037B27F20DFFA1F12CEB4FE00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:26:6b:76:b9:93:89:c4:a3:59:6a:b5:9f:9c: 84:c2:a4:86:c4:98:b2:77:d7:97:1a:d6:db:82:13: 81:d2:4f:a2:5a:84:6e:c4:6a:eb:c6:fb:93:6f:e7: a1:6c:04:2e:01:b8:ce:86:7b:e8:63:ee:39:30:5c: 5f:08:6e:51:7e:2d:f1:c7:7e:9d:22:5b:39:b2:cd: 23:9f:74:b1:37:58:cd:bf:fe:7d:d9:9b:15:aa:cf: a0:72:08:70:94:eb:a5:fd:e0:64:63:42:90:09:db: 1b:d6:76:7c:3a:4b:2a:3e:33:4b:3f:9d:8b:86:8c: 81:f7:12:ae:45:bd:74:28:00:da:1f:f6:3c:59:f7: be:60:1b:5f:48:4d:36:56:0a:0a:6e:81:b3:b2:ef: f3:fd:d8:c5:d2:66:38:21:a6:a2:69:c5:17:01:a9: ea:36:95:98:b5:b5:70:e4:a1:a1:33:b9:d3:34:2b: e9:d9:1c:10:dc:00:72:27:7d:04:a8:98:0b:05:1a: d2:5e:d9:b4:63:55:a7:29:97:c6:88:d7:ed:60:50: 5e:e0:80:c4:f9:d3:74:fb:c2:7d:31:8f:dd:ce:ed: 25:47:bb:0b:5d:2a:17:12:35:8f:64:94:be:8b:35: 21:31:7f:18:02:4a:ec:2b:d4:1e:3e:b6:7e:5d:99: fb:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CB:42:39:43:24:0F:00:37:B2:7F:20:DF:FA:1F:12:CE:B4:FE:00 X509v3 Authority Key Identifier: keyid:DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:ca:69:90:70:76:16:e6:df:cc:24:98:f5:1b:6d:2c:f6:b5: b1:50:d8:a2:59:a1:7b:ec:af:f8:a9:59:61:52:2a:bc:b1:f7: 68:d0:ba:73:cb:4f:b5:09:c8:c1:57:eb:6e:e9:8d:d3:5e:50: ed:c9:38:c1:1f:ca:11:37:a7:ab:ef:8e:f6:84:c9:ba:e7:17: d3:cb:87:a2:7d:ae:67:08:fa:7a:7a:5b:2b:76:a8:5c:90:06: 21:47:4c:41:f5:41:19:0c:7e:1a:66:41:fe:ea:7c:da:cf:f9: 9b:29:e2:4e:7f:2b:6c:81:77:f4:96:86:7a:e2:a6:ae:ea:42: d2:9b:21:c0:cf:cf:82:11:bf:67:6d:05:b5:1a:58:b9:2a:1c: 79:c3:6a:c9:e4:49:68:2e:0e:68:10:39:1a:69:c6:eb:ce:55: 0c:ed:57:48:bf:e1:6c:00:7e:ba:88:7d:02:9b:8c:0f:71:12: 35:21:7c:e4:2f:e9:a5:60:80:12:51:d4:b4:65:46:02:4c:bd: b5:28:0e:e8:b0:27:56:8b:c7:3e:fc:e5:aa:61:75:68:72:90: 52:7a:5e:db:fa:6e:c6:be:6e:1e:bb:41:d1:4c:dd:9a:ad:d8: 7f:3c:05:d8:1d:62:55:7f:ac:dd:b6:61:46:b2:ed:82:23:4f: 7b:06:0c:b5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUI4b6xaI4hopkB8m13Gs8VVAdXt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4 NUZBNEVFMTAeFw0yNjA3MjMxNzUyNThaFw0yNjA3MjQyMDI4NThaMDMxMTAvBgNV BAMTKDhCQ0I0MjM5NDMyNDBGMDAzN0IyN0YyMERGRkExRjEyQ0VCNEZFMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjJmt2uZOJxKNZarWfnITCpIbE mLJ315ca1tuCE4HST6JahG7EauvG+5Nv56FsBC4BuM6Ge+hj7jkwXF8IblF+LfHH fp0iWzmyzSOfdLE3WM2//n3ZmxWqz6ByCHCU66X94GRjQpAJ2xvWdnw6Syo+M0s/ nYuGjIH3Eq5FvXQoANof9jxZ975gG19ITTZWCgpugbOy7/P92MXSZjghpqJpxRcB qeo2lZi1tXDkoaEzudM0K+nZHBDcAHInfQSomAsFGtJe2bRjVacpl8aI1+1gUF7g gMT503T7wn0xj93O7SVHuwtdKhcSNY9klL6LNSExfxgCSuwr1B4+tn5dmfsxAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUi8tCOUMkDwA3sn8g3/ofEs60/gAwHwYDVR0j BBgwFoAU21u9swIQMU6QQLbJnb9p7oX6TuEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzMvREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4NUZBNEVFMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9EQjVCQkRCMzAyMTAzMTRFOTA0MEI2Qzk5 REJGNjlFRTg1RkE0RUUxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzNmOTllNjZkLTRjN2ItNDEzMC05MWQ1LTRmYmQ4NDM1Nzc5Mi8zL0RCNUJCREIz MDIxMDMxNEU5MDQwQjZDOTlEQkY2OUVFODVGQTRFRTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCpymmQ cHYW5t/MJJj1G20s9rWxUNiiWaF77K/4qVlhUiq8sfdo0Lpzy0+1CcjBV+tu6Y3T XlDtyTjBH8oRN6er7472hMm65xfTy4eifa5nCPp6elsrdqhckAYhR0xB9UEZDH4a ZkH+6nzaz/mbKeJOfytsgXf0loZ64qau6kLSmyHAz8+CEb9nbQW1Gli5Khx5w2rJ 5EloLg5oEDkaacbrzlUM7VdIv+FsAH66iH0Cm4wPcRI1IXzkL+mlYIASUdS0ZUYC TL21KA7osCdWi8c+/OWqYXVocpBSel7b+m7Gvm4eu0HRTN2ardh/PAXYHWJVf6zd tmFGsu2CI097Bgy1 -----END CERTIFICATE-----Generated at Fri Jul 24 02:35:42 2026 by rpki-client