$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft File: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft (raw, json) Hash identifier: PODPuzcP6EHuetlrMYzlmvYKQ2fEVbfKRk2nrdgO7Ig= Subject key identifier: 75:58:F0:53:05:10:DC:AA:53:86:A6:28:7D:D4:7D:02:93:EC:69:94 Authority key identifier: DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 Certificate issuer: /CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Certificate serial: 01A1097594CAEE6FCB0D3E9C2144D21EC0EDBE86 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft Manifest number: 64 Signing time: Thu 26 Mar 2026 00:34:31 +0000 Manifest this update: Thu 26 Mar 2026 00:29:31 +0000 Manifest next update: Fri 27 Mar 2026 00:48:31 +0000 Files and hashes: 1: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl (hash: 258FNPmuzyPhQyelnlSIcMOQFL4iTWElgjOmf21qBlQ=) 2: 326130663a316363353a326430313a3a2f34382d3438203d3e20323134393535.roa (hash: l0RMqMiAhgGDzLpuD3ZJuPudrozfegvLREqyl+4aP2I=) 3: 326130663a316363353a326430333a3a2f34382d3438203d3e20323134393535.roa (hash: FhiRWcOhFd1e57IfPQu+2j0uinj7188+3VOrSYUtQ6c=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:09:75:94:ca:ee:6f:cb:0d:3e:9c:21:44:d2:1e:c0:ed:be:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Validity Not Before: Mar 26 00:29:31 2026 GMT Not After : Mar 27 00:48:31 2026 GMT Subject: CN=7558F0530510DCAA5386A6287DD47D0293EC6994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8d:05:31:ce:ce:c7:4c:5e:c5:eb:d1:67:9e: cc:95:c0:dc:f6:5e:10:5d:c2:30:f2:77:1c:09:33: 48:1c:84:f5:82:23:d4:34:7a:72:9a:26:02:fd:65: 27:0a:00:a5:e0:72:cc:76:e8:24:a5:4a:ab:cd:11: 7f:6e:74:17:7a:f7:dd:1e:93:fc:3d:91:a6:95:7a: b2:7c:a8:5d:8e:9d:2a:3f:7b:4a:c0:a3:78:95:00: 90:5d:c7:b0:5a:19:9b:d0:77:2d:da:f9:21:58:82: 5a:e9:c5:9f:c2:bf:7b:5a:be:70:7a:7b:79:5c:53: 19:fe:58:28:da:12:3f:35:3b:07:1f:4b:bd:2b:b1: 4b:56:84:f3:75:c5:60:56:19:7f:3d:5b:ec:28:81: d3:80:d6:9a:ce:32:94:74:a8:ea:b7:86:fd:85:19: 22:cc:20:27:d0:12:68:04:c5:d3:c1:15:02:6a:2e: dc:3a:7a:9b:00:fa:f3:f5:0b:82:40:7d:c8:fa:52: f3:8d:b9:04:f2:35:a3:63:c7:59:3e:38:b2:27:09: 11:32:76:82:3e:cc:49:81:c6:50:f4:70:91:10:71: fd:39:11:77:0f:6b:0a:32:43:52:5b:8e:ec:d2:fe: 36:cc:61:28:ca:e9:13:0a:ba:cf:63:ab:df:cd:0b: 9c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:58:F0:53:05:10:DC:AA:53:86:A6:28:7D:D4:7D:02:93:EC:69:94 X509v3 Authority Key Identifier: keyid:DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:03:16:02:ec:3b:75:37:c7:b5:a2:c2:ef:e6:17:02:28:3e: a9:0b:ca:2a:17:8a:3a:36:3f:6e:ed:34:49:38:ba:dd:b2:e0: a1:30:37:01:8f:2e:51:d1:e9:aa:39:03:d9:d3:58:c5:79:bf: b9:52:fe:38:48:eb:ae:c3:f2:54:91:d9:04:0e:eb:33:37:af: ad:a8:b4:ac:14:52:59:e1:7a:74:08:5c:4c:67:53:3a:2a:57: d9:9a:1f:76:f4:fc:ca:5f:d2:7f:de:39:ba:c2:f6:3a:57:08: 35:c4:16:ee:b1:ce:1b:01:45:4b:53:95:a2:39:a3:6f:52:3f: bd:cb:a3:58:ae:41:e7:9a:59:ad:0e:18:12:d2:4e:a3:d1:d0: f2:61:11:8d:72:37:eb:d0:3d:0a:15:de:10:d2:a2:c6:e2:78: be:2f:28:ce:23:f0:3b:45:0c:15:9b:12:67:d6:ac:d1:78:3c: eb:fd:6b:b9:60:3f:c4:e8:7c:e9:a0:1f:35:fe:fc:c9:af:e6: 26:19:6c:12:b3:26:7d:60:4a:14:7a:b5:e5:8b:4b:2a:f7:b2: b1:c3:56:ce:0c:8c:76:4e:69:6e:04:14:14:ab:f9:66:8a:97: 8c:b5:e2:8f:07:0b:96:68:b5:02:d1:3a:8b:b6:fe:c0:1f:aa: 11:20:02:d0 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUAaEJdZTK7m/LDT6cIUTSHsDtvoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4 NUZBNEVFMTAeFw0yNjAzMjYwMDI5MzFaFw0yNjAzMjcwMDQ4MzFaMDMxMTAvBgNV BAMTKDc1NThGMDUzMDUxMERDQUE1Mzg2QTYyODdERDQ3RDAyOTNFQzY5OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTjQUxzs7HTF7F69FnnsyVwNz2 XhBdwjDydxwJM0gchPWCI9Q0enKaJgL9ZScKAKXgcsx26CSlSqvNEX9udBd6990e k/w9kaaVerJ8qF2OnSo/e0rAo3iVAJBdx7BaGZvQdy3a+SFYglrpxZ/Cv3tavnB6 e3lcUxn+WCjaEj81OwcfS70rsUtWhPN1xWBWGX89W+wogdOA1prOMpR0qOq3hv2F GSLMICfQEmgExdPBFQJqLtw6epsA+vP1C4JAfcj6UvONuQTyNaNjx1k+OLInCREy doI+zEmBxlD0cJEQcf05EXcPawoyQ1JbjuzS/jbMYSjK6RMKus9jq9/NC5x9AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUdVjwUwUQ3KpThqYofdR9ApPsaZQwHwYDVR0j BBgwFoAU21u9swIQMU6QQLbJnb9p7oX6TuEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzMvREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4NUZBNEVFMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9EQjVCQkRCMzAyMTAzMTRFOTA0MEI2Qzk5 REJGNjlFRTg1RkE0RUUxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzNmOTllNjZkLTRjN2ItNDEzMC05MWQ1LTRmYmQ4NDM1Nzc5Mi8zL0RCNUJCREIz MDIxMDMxNEU5MDQwQjZDOTlEQkY2OUVFODVGQTRFRTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCEAxYC 7Dt1N8e1osLv5hcCKD6pC8oqF4o6Nj9u7TRJOLrdsuChMDcBjy5R0emqOQPZ01jF eb+5Uv44SOuuw/JUkdkEDuszN6+tqLSsFFJZ4Xp0CFxMZ1M6KlfZmh929PzKX9J/ 3jm6wvY6Vwg1xBbusc4bAUVLU5WiOaNvUj+9y6NYrkHnmlmtDhgS0k6j0dDyYRGN cjfr0D0KFd4Q0qLG4ni+LyjOI/A7RQwVmxJn1qzReDzr/Wu5YD/E6HzpoB81/vzJ r+YmGWwSsyZ9YEoUerXli0sq97Kxw1bODIx2TmluBBQUq/lmipeMteKPBwuWaLUC 0TqLtv7AH6oRIALQ -----END CERTIFICATE-----Generated at Thu Mar 26 11:24:21 2026 by rpki-client