$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft File: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft (raw, json) Hash identifier: KnMZRSsbfFHeUDEsinvXUWVChDIxraYtOsBytw8Kay4= Subject key identifier: D6:97:87:14:DA:07:3B:15:B0:82:D6:12:0A:68:59:53:AA:6C:DA:40 Authority key identifier: DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 Certificate issuer: /CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Certificate serial: 4756E99E610752844B4AF66D6954199FDB599342 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft Manifest number: 015F Signing time: Thu 24 Sep 2026 14:12:49 +0000 Manifest this update: Thu 24 Sep 2026 14:07:49 +0000 Manifest next update: Fri 25 Sep 2026 16:19:49 +0000 Files and hashes: 1: 326130663a316363353a326430333a3a2f34382d3438203d3e20323134393535.roa (hash: FhiRWcOhFd1e57IfPQu+2j0uinj7188+3VOrSYUtQ6c=) 2: 326130663a316363353a326430313a3a2f34382d3438203d3e20323134393535.roa (hash: l0RMqMiAhgGDzLpuD3ZJuPudrozfegvLREqyl+4aP2I=) 3: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl (hash: PN4juYWaHcPPvyrU+ztIsQgMmI7bn5cdpxVcFBRRnhw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 08:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:56:e9:9e:61:07:52:84:4b:4a:f6:6d:69:54:19:9f:db:59:93:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Validity Not Before: Sep 24 14:07:49 2026 GMT Not After : Sep 25 16:19:49 2026 GMT Subject: CN=D6978714DA073B15B082D6120A685953AA6CDA40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:31:90:7b:9c:25:ce:25:ec:00:98:d7:2b:4a: 88:d0:0f:1e:a4:2d:eb:45:cc:c8:55:29:18:a3:02: 70:19:64:24:e0:cb:99:7c:6b:e0:23:62:f3:5f:e9: 11:54:63:e4:55:36:a4:73:38:2d:43:a9:be:a5:b7: 59:9c:f7:2f:7c:09:e1:af:4b:8f:f1:65:7f:43:4e: af:0c:7d:54:9b:51:71:79:93:f0:5f:90:a7:31:a9: 52:0f:3e:7f:83:8b:c1:f0:87:ab:f4:41:20:80:27: cb:25:d5:52:00:d6:cf:84:9d:2f:b5:a9:10:2b:01: fa:35:62:1c:b4:3d:63:54:d5:3b:de:f7:63:3a:71: 6a:d9:f9:18:98:f8:a0:e4:15:e1:7a:b2:28:48:dd: ba:fb:6e:40:4c:40:6e:6f:10:46:af:3d:09:73:cb: 95:bb:f0:32:5b:5f:7a:a8:ed:36:2c:f4:78:ea:8c: 44:7a:8b:bd:87:25:0a:fb:b5:17:51:68:60:40:3a: 4c:77:a6:e2:87:66:25:ae:c8:8c:61:d1:6a:84:69: 27:d2:f2:ae:cf:87:24:66:00:5b:cc:58:64:c1:75: 33:7e:37:28:d1:f9:f1:41:4a:92:cb:40:09:ab:06: 0e:ee:de:e4:9c:c7:da:fd:59:27:b7:9a:a5:cc:1b: af:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:97:87:14:DA:07:3B:15:B0:82:D6:12:0A:68:59:53:AA:6C:DA:40 X509v3 Authority Key Identifier: keyid:DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:28:65:61:7d:24:70:79:f6:6e:99:59:1e:71:52:c2:61:2e: f9:c5:7a:91:75:6d:2f:94:41:e0:73:8f:44:45:ca:2d:45:1e: 70:56:84:f6:d1:10:3d:33:a9:e9:12:dd:cf:99:f0:44:e4:13: 28:1a:d5:10:77:83:f8:95:5b:c3:e8:ae:3b:17:65:a6:a9:e8: 0d:32:e1:ed:84:ff:e1:53:30:c9:06:ff:6d:ca:9e:24:19:86: 81:8e:fc:d4:79:7b:16:f5:6a:8b:0c:9f:f4:a5:80:5d:a0:ae: 8d:13:81:eb:70:24:db:5f:1e:8f:20:b1:18:27:21:94:52:af: 18:3a:e1:e1:ab:29:b0:08:79:df:0a:3a:2c:c3:1b:97:b2:51: 6e:f2:9d:d3:f6:7d:8f:d7:e1:37:a2:88:20:55:31:e4:15:1c: 1a:7c:d5:1e:14:59:a1:80:f9:83:be:21:7b:02:2c:ac:e6:dc: 41:94:df:bf:bf:f5:59:84:7e:99:2b:31:95:af:ac:c5:5a:49: 2d:5d:a2:ed:59:ce:d5:8b:71:5a:0f:86:2e:a9:25:9c:fa:e0: 5f:a9:e0:cf:89:e1:f6:0a:1b:41:bb:86:71:ec:24:57:53:bd: 1e:28:76:24:58:6b:1b:be:af:d9:ff:24:c4:8a:79:a8:ad:51: 6f:69:d5:58 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUR1bpnmEHUoRLSvZtaVQZn9tZk0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4 NUZBNEVFMTAeFw0yNjA5MjQxNDA3NDlaFw0yNjA5MjUxNjE5NDlaMDMxMTAvBgNV BAMTKEQ2OTc4NzE0REEwNzNCMTVCMDgyRDYxMjBBNjg1OTUzQUE2Q0RBNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2MZB7nCXOJewAmNcrSojQDx6k LetFzMhVKRijAnAZZCTgy5l8a+AjYvNf6RFUY+RVNqRzOC1Dqb6lt1mc9y98CeGv S4/xZX9DTq8MfVSbUXF5k/BfkKcxqVIPPn+Di8Hwh6v0QSCAJ8sl1VIA1s+EnS+1 qRArAfo1Yhy0PWNU1Tve92M6cWrZ+RiY+KDkFeF6sihI3br7bkBMQG5vEEavPQlz y5W78DJbX3qo7TYs9HjqjER6i72HJQr7tRdRaGBAOkx3puKHZiWuyIxh0WqEaSfS 8q7PhyRmAFvMWGTBdTN+NyjR+fFBSpLLQAmrBg7u3uScx9r9WSe3mqXMG6/lAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU1peHFNoHOxWwgtYSCmhZU6ps2kAwHwYDVR0j BBgwFoAU21u9swIQMU6QQLbJnb9p7oX6TuEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzMvREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4NUZBNEVFMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9EQjVCQkRCMzAyMTAzMTRFOTA0MEI2Qzk5 REJGNjlFRTg1RkE0RUUxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzNmOTllNjZkLTRjN2ItNDEzMC05MWQ1LTRmYmQ4NDM1Nzc5Mi8zL0RCNUJCREIz MDIxMDMxNEU5MDQwQjZDOTlEQkY2OUVFODVGQTRFRTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC8KGVh fSRwefZumVkecVLCYS75xXqRdW0vlEHgc49ERcotRR5wVoT20RA9M6npEt3PmfBE 5BMoGtUQd4P4lVvD6K47F2WmqegNMuHthP/hUzDJBv9typ4kGYaBjvzUeXsW9WqL DJ/0pYBdoK6NE4HrcCTbXx6PILEYJyGUUq8YOuHhqymwCHnfCjoswxuXslFu8p3T 9n2P1+E3ooggVTHkFRwafNUeFFmhgPmDviF7Aiys5txBlN+/v/VZhH6ZKzGVr6zF WkktXaLtWc7Vi3FaD4YuqSWc+uBfqeDPieH2ChtBu4Zx7CRXU70eKHYkWGsbvq/Z /yTEinmorVFvadVY -----END CERTIFICATE-----Generated at Thu Sep 24 17:51:33 2026 by rpki-client