$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft File: 5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft (raw, json) Hash identifier: wjzH0TXOUenhXPtJQ3JwR1lseaegAHyhEKlq3CTASEc= Subject key identifier: D3:55:2C:C0:98:B3:38:38:A5:15:8B:C2:05:58:BD:F9:A4:E4:E6:4C Authority key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 Certificate issuer: /CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Certificate serial: 69ECC94272F0F1847A5D1AEE73D645DE29CBA0D4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft Manifest number: B2 Signing time: Wed 25 Mar 2026 16:54:43 +0000 Manifest this update: Wed 25 Mar 2026 16:49:43 +0000 Manifest next update: Thu 26 Mar 2026 20:27:43 +0000 Files and hashes: 1: 326130363a313238333a383930373a3a2f34382d3438203d3e20323135303330.roa (hash: VcVUsrYac0pzWJK2F7lpmFfvFDL2ZKG/uypN2LdY9f4=) 2: 326130363a313238333a383931363a3a2f34382d3438203d3e20323133343133.roa (hash: xUGvIyx/a5N+LcKm4jRlraXDt9i9y3juhfko91grU4U=) 3: 326130363a313238333a383931303a3a2f34382d3438203d3e20323034343634.roa (hash: q69dHOwOkc2Q3RdkddNdWABvLCUxxznoxKYiD9lMbNc=) 4: 326130363a313238333a383930303a3a2f34302d3430203d3e20323133343133.roa (hash: 0gYE6skrisUrM06D53bvZrZFAv0EfqoV+nCI7G9OKOs=) 5: 326130363a313238333a383930643a3a2f34382d3438203d3e20323136333637.roa (hash: FnSpyT9OnuvPM/GugFyozsjtsmrHeVUUgj2NyDK1wuc=) 6: 326130363a313238333a383930613a3a2f34382d3438203d3e20323136333637.roa (hash: HuUH/JYH1vthyPEN3kexTHE/fhKQ1xn353p6qv+mYJg=) 7: 326130363a313238333a383931373a3a2f34382d3438203d3e20323035333035.roa (hash: rhL38qg/W10yIpndI3LKqIuuEEEeF98B/XXYMapKGsI=) 8: 326130363a313238333a383930633a3a2f34382d3438203d3e20323134373632.roa (hash: 2rCozjaLN+ORp+rF15yl0cLwnMgwxsdIwkSr5DBlLzo=) 9: 326130363a313238333a383931313a3a2f34382d3438203d3e20323134333138.roa (hash: nxTxBfayiVQT25dQojMI7kQmseMMilAT7TuM473ASuo=) 10: 5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl (hash: uZLK8YyZWfwcdkm9K4VuYXrfL0vOzF+jkGAfonLoKfY=) 11: 326130363a313238333a383930333a3a2f34382d3438203d3e20323133343133.roa (hash: hfsX7O4ssow2aXydnwN9zYa6SNNgkh4xqDb4M6RjByw=) 12: 326130363a313238333a383930313a3a2f34382d3438203d3e20323134323035.roa (hash: cPNCLrbwdymPiqlNCY/iKCMb0/zZMwnLL5M7UNRh5H0=) 13: 326130363a313238333a383931353a3a2f34382d3438203d3e20323034343634.roa (hash: VEluBfu+UVgZrxSe1UipoTLy1fiGHxv2QDcCVFCjUkc=) 14: 326130363a313238333a383930663a3a2f34382d3438203d3e20323133343133.roa (hash: vOy3Hoo12y1MaF1xhG57rJd7z5CmXrBfc6rBSzJ2oUE=) 15: 326130363a313238333a383930343a3a2f34382d3438203d3e20323134373632.roa (hash: +ucDYfCsKINgleLYp642WIR5LEPN0kWQYDVnDQaA83s=) 16: 326130363a313238333a383966303a3a2f34342d3434203d3e20323134303333.roa (hash: uXHhm0ZjjPodrKnjp4qW+YTDv1/Z29fczrFjmi+w+J4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:ec:c9:42:72:f0:f1:84:7a:5d:1a:ee:73:d6:45:de:29:cb:a0:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Validity Not Before: Mar 25 16:49:43 2026 GMT Not After : Mar 26 20:27:43 2026 GMT Subject: CN=D3552CC098B33838A5158BC20558BDF9A4E4E64C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a8:38:c0:55:5a:c9:61:17:01:c4:83:27:48: 8b:0f:c2:55:8e:51:c5:a3:a5:e5:08:63:a1:8e:02: a5:0a:55:3e:57:d3:3a:70:7a:69:bb:c2:19:07:15: bc:e5:f1:1e:9b:b9:cb:50:43:19:5a:8e:49:e6:4b: 6a:3e:1b:fd:38:ac:aa:47:0c:bf:d7:99:5e:fa:1f: 8c:24:26:9d:c0:9f:e0:f3:c7:5b:60:bb:24:f0:70: ed:21:c4:5b:fe:2c:d1:db:76:f8:09:02:3e:fb:21: d3:6a:4f:a5:b7:01:81:14:07:80:ec:5a:ce:48:0e: f9:c8:84:67:25:0c:45:8d:cb:f4:b2:d7:0b:1b:e4: dc:ca:22:c2:20:e3:39:a8:e8:77:bb:25:c5:66:ce: a5:1e:64:e1:ef:db:84:36:5a:da:06:69:5d:e9:69: 04:0b:71:4e:90:76:6f:3f:7a:c6:52:10:ab:77:43: cd:c5:6d:ca:ce:8d:87:a6:5d:0d:8a:8c:eb:69:07: 23:4c:cf:54:97:f0:e5:d5:7b:4f:6d:c0:61:a2:e8: 09:48:31:2b:8b:2d:40:df:41:b9:bb:3b:44:88:35: 66:b5:5a:1f:93:b9:ca:84:c5:aa:ac:bb:10:93:37: 8a:8a:3e:ae:08:2f:37:7e:a7:0a:20:0c:38:eb:fc: 73:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:55:2C:C0:98:B3:38:38:A5:15:8B:C2:05:58:BD:F9:A4:E4:E6:4C X509v3 Authority Key Identifier: keyid:5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ba:bd:cb:9e:74:51:26:25:e8:fa:e5:4e:52:88:25:35:83: e5:db:1e:59:9b:4c:8f:01:7d:82:d7:7e:79:a9:33:03:2a:62: ec:da:6b:35:77:81:fe:be:20:8e:8b:cb:87:da:e8:bf:0c:db: f2:5a:39:58:cc:3c:22:bc:0d:59:72:8a:ed:0d:2b:a9:0e:7b: bf:4f:c8:3d:61:3a:c7:05:59:42:7c:13:2a:59:57:ba:fa:e1: 87:9f:dd:48:62:fa:78:91:c0:f7:b2:73:e5:f5:b9:05:2d:32: 1a:96:6a:36:30:74:a2:dd:b9:33:60:ef:ef:99:60:c1:f4:f2: e6:4a:0c:d9:21:d6:47:46:fa:61:27:cb:02:49:c0:f6:4b:b2: 4e:17:aa:69:54:ff:e2:20:6f:72:39:8f:35:58:cb:60:52:26: df:85:33:46:e0:53:6a:59:6b:99:9f:2c:a3:6a:fe:8f:13:37: 00:7b:4f:c5:51:de:cc:78:d5:95:9e:92:6a:ac:1b:0e:43:db: a1:60:b7:48:15:93:85:a2:2d:68:0c:43:0c:98:23:2e:d1:10: 24:31:6f:cb:3b:49:2c:54:9c:be:fe:3a:5a:f2:2f:78:3a:c9: fa:43:c0:d9:f7:72:b0:87:09:ec:53:58:86:9c:53:ef:c6:e4: cb:7a:61:66 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUaezJQnLw8YR6XRruc9ZF3inLoNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNERE M0NEMTNDOTAeFw0yNjAzMjUxNjQ5NDNaFw0yNjAzMjYyMDI3NDNaMDMxMTAvBgNV BAMTKEQzNTUyQ0MwOThCMzM4MzhBNTE1OEJDMjA1NThCREY5QTRFNEU2NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7qDjAVVrJYRcBxIMnSIsPwlWO UcWjpeUIY6GOAqUKVT5X0zpwemm7whkHFbzl8R6buctQQxlajknmS2o+G/04rKpH DL/XmV76H4wkJp3An+Dzx1tguyTwcO0hxFv+LNHbdvgJAj77IdNqT6W3AYEUB4Ds Ws5IDvnIhGclDEWNy/Sy1wsb5NzKIsIg4zmo6He7JcVmzqUeZOHv24Q2WtoGaV3p aQQLcU6Qdm8/esZSEKt3Q83FbcrOjYemXQ2KjOtpByNMz1SX8OXVe09twGGi6AlI MSuLLUDfQbm7O0SINWa1Wh+TucqExaqsuxCTN4qKPq4ILzd+pwogDDjr/HPzAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU01UswJizODilFYvCBVi9+aTk5kwwHwYDVR0j BBgwFoAUX7vQ89e4Hor9meWjS2eDTdPNE8kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzhlNjE2MTEtM2IwYi00MWNlLTg4Y2QtZTU2MDM1M2Y2 OTQyLzEvNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNEREM0NEMTNDOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi81RkJCRDBGM0Q3QjgxRThBRkQ5OUU1QTM0 QjY3ODM0REQzQ0QxM0M5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzc4ZTYxNjExLTNiMGItNDFjZS04OGNkLWU1NjAzNTNmNjk0Mi8xLzVGQkJEMEYz RDdCODFFOEFGRDk5RTVBMzRCNjc4MzRERDNDRDEzQzkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBbur3L nnRRJiXo+uVOUoglNYPl2x5Zm0yPAX2C1355qTMDKmLs2ms1d4H+viCOi8uH2ui/ DNvyWjlYzDwivA1ZcortDSupDnu/T8g9YTrHBVlCfBMqWVe6+uGHn91IYvp4kcD3 snPl9bkFLTIalmo2MHSi3bkzYO/vmWDB9PLmSgzZIdZHRvphJ8sCScD2S7JOF6pp VP/iIG9yOY81WMtgUibfhTNG4FNqWWuZnyyjav6PEzcAe0/FUd7MeNWVnpJqrBsO Q9uhYLdIFZOFoi1oDEMMmCMu0RAkMW/LO0ksVJy+/jpa8i94Osn6Q8DZ93Kwhwns U1iGnFPvxuTLemFm -----END CERTIFICATE-----Generated at Wed Mar 25 23:13:51 2026 by rpki-client