$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft File: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft (raw, json) Hash identifier: 9azhw7X9QTozBYjXMxdDIJNGrz8ovwVW/vxpFGxphWI= Subject key identifier: 10:E1:8F:C7:0E:4D:0E:A5:FD:BA:A6:B4:24:1A:37:B2:0C:CA:33:97 Authority key identifier: 5E:B2:E5:DA:D0:C6:99:6D:0A:80:A7:B9:0F:3A:2A:A6:0F:B1:A7:AC Certificate issuer: /CN=5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC Certificate serial: 09929CDDCC8E76823528D1FC1E2673F13B265A1C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft Manifest number: 015C Signing time: Thu 26 Mar 2026 15:03:57 +0000 Manifest this update: Thu 26 Mar 2026 14:58:57 +0000 Manifest next update: Fri 27 Mar 2026 15:56:57 +0000 Files and hashes: 1: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl (hash: YV6w0YgRUDU71r0e2/LeFRb9d2am75XrAV5VMoz+0Lg=) 2: 326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa (hash: hR947RLO80MjAy1fUiecS1oEpdE+fjwemP68Afa7Bvc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 04:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:92:9c:dd:cc:8e:76:82:35:28:d1:fc:1e:26:73:f1:3b:26:5a:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC Validity Not Before: Mar 26 14:58:57 2026 GMT Not After : Mar 27 15:56:57 2026 GMT Subject: CN=10E18FC70E4D0EA5FDBAA6B4241A37B20CCA3397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:95:7e:4f:22:ce:5d:63:9d:4d:78:e6:e6:12: 7e:92:4c:52:1b:32:9a:cb:2f:c7:ca:0c:d4:de:47: 85:ff:5e:e2:84:43:dd:58:e4:08:92:6c:bf:6c:42: 6d:4f:3f:1a:c7:c1:8a:09:7f:94:bd:8f:16:ea:3e: 5e:40:91:d8:ee:69:ee:03:c0:43:eb:a8:a4:9f:0d: 30:92:35:c3:b9:96:9a:71:c2:a1:e9:8c:83:48:6a: ad:89:d2:ec:d6:4e:69:cd:0e:9b:42:4e:81:1a:61: a8:14:ca:f6:b4:30:e2:d1:6c:c3:81:5e:7f:91:75: 96:73:2b:bb:a2:30:01:9e:32:ee:ba:d3:35:d0:88: 16:0d:c7:34:a7:89:b6:5f:25:b8:47:77:c1:92:8d: 37:c7:85:8b:21:96:6c:d4:b2:74:52:7f:51:91:72: 2f:19:f2:5f:c0:ec:99:f5:0f:ad:ec:d4:e6:bc:1d: 7c:33:5c:db:78:f4:28:b4:2b:13:e6:a2:c3:e8:50: 69:76:a9:e5:1c:72:77:db:20:b4:d8:5e:73:85:9a: a0:bd:11:d1:66:ef:5f:1d:8f:e3:e7:73:4b:42:97: 1f:c2:07:e4:64:29:d0:d3:19:cf:aa:01:f6:96:64: 62:29:8c:23:fe:4c:dc:04:f9:07:4c:b6:d6:c9:93: 3e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E1:8F:C7:0E:4D:0E:A5:FD:BA:A6:B4:24:1A:37:B2:0C:CA:33:97 X509v3 Authority Key Identifier: keyid:5E:B2:E5:DA:D0:C6:99:6D:0A:80:A7:B9:0F:3A:2A:A6:0F:B1:A7:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:bb:f2:5a:7d:00:dc:c4:1d:a1:a8:94:9e:23:7b:79:2f:d1: a0:1d:e4:32:07:0c:4e:a5:08:fa:c9:a4:d7:10:8d:e9:60:75: f4:c5:d7:ae:ca:dd:2e:bb:0d:2b:ac:da:3e:ff:05:ee:cb:b5: 45:21:5b:ce:50:cb:56:09:70:d6:63:be:1c:e0:cc:f9:e1:a8: af:bc:68:86:65:2e:cb:ff:6d:2b:e1:7e:99:8a:35:84:43:8f: 36:2d:64:6f:26:8e:54:ec:06:2e:0c:3a:cf:f4:e5:54:af:b5: 44:79:6e:2a:b2:ff:ae:46:47:2d:d9:af:b7:52:f8:43:7b:88: ba:07:a0:69:5f:c6:29:70:91:61:d2:c9:d9:74:e7:19:1c:f1: d2:96:d1:9b:7e:e1:a9:78:72:a3:b9:d3:ca:fc:d5:f2:27:34: a8:dc:9b:ed:9b:4c:25:ce:6a:57:26:6e:d7:1d:76:76:44:a4: f1:54:1c:ce:ed:52:9a:83:0c:a0:e2:25:09:20:db:7d:23:c6: d9:eb:17:c5:80:8b:9a:31:7e:87:49:a4:07:c9:3f:8c:f2:92: dc:88:a5:00:25:61:fa:b0:fd:26:fd:55:7a:af:53:21:a0:e7: 3c:6a:57:4f:59:c8:a1:98:35:56:77:70:ac:40:29:53:10:a2: 85:f9:01:d9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUCZKc3cyOdoI1KNH8HiZz8TsmWhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVCMkU1REFEMEM2OTk2RDBBODBBN0I5MEYzQTJBQTYw RkIxQTdBQzAeFw0yNjAzMjYxNDU4NTdaFw0yNjAzMjcxNTU2NTdaMDMxMTAvBgNV BAMTKDEwRTE4RkM3MEU0RDBFQTVGREJBQTZCNDI0MUEzN0IyMENDQTMzOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDlX5PIs5dY51NeObmEn6STFIb MprLL8fKDNTeR4X/XuKEQ91Y5AiSbL9sQm1PPxrHwYoJf5S9jxbqPl5Akdjuae4D wEPrqKSfDTCSNcO5lppxwqHpjINIaq2J0uzWTmnNDptCToEaYagUyva0MOLRbMOB Xn+RdZZzK7uiMAGeMu660zXQiBYNxzSnibZfJbhHd8GSjTfHhYshlmzUsnRSf1GR ci8Z8l/A7Jn1D63s1Oa8HXwzXNt49Ci0KxPmosPoUGl2qeUccnfbILTYXnOFmqC9 EdFm718dj+Pnc0tClx/CB+RkKdDTGc+qAfaWZGIpjCP+TNwE+QdMttbJkz5xAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUEOGPxw5NDqX9uqa0JBo3sgzKM5cwHwYDVR0j BBgwFoAUXrLl2tDGmW0KgKe5Dzoqpg+xp6wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVl YjdkLzQvNUVCMkU1REFEMEM2OTk2RDBBODBBN0I5MEYzQTJBQTYwRkIxQTdBQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC81RUIyRTVEQUQwQzY5OTZEMEE4MEE3Qjkw RjNBMkFBNjBGQjFBN0FDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M5OTI2NWVmLTIyYTktNDEwMC1hMjNkLTUxYTlkOWZlZWI3ZC80LzVFQjJFNURB RDBDNjk5NkQwQTgwQTdCOTBGM0EyQUE2MEZCMUE3QUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAZu/Ja fQDcxB2hqJSeI3t5L9GgHeQyBwxOpQj6yaTXEI3pYHX0xdeuyt0uuw0rrNo+/wXu y7VFIVvOUMtWCXDWY74c4Mz54aivvGiGZS7L/20r4X6ZijWEQ482LWRvJo5U7AYu DDrP9OVUr7VEeW4qsv+uRkct2a+3UvhDe4i6B6BpX8YpcJFh0snZdOcZHPHSltGb fuGpeHKjudPK/NXyJzSo3Jvtm0wlzmpXJm7XHXZ2RKTxVBzO7VKagwyg4iUJINt9 I8bZ6xfFgIuaMX6HSaQHyT+M8pLciKUAJWH6sP0m/VV6r1MhoOc8aldPWcihmDVW d3CsQClTEKKF+QHZ -----END CERTIFICATE-----Generated at Thu Mar 26 19:03:31 2026 by rpki-client