$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft File: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft (raw, json) Hash identifier: yTE6XpmbvKoeURDPFTZSCCxnoIp92toxxO5MfY1ARx8= Subject key identifier: BB:D4:A9:43:A9:F0:51:76:E3:F0:BD:0B:92:92:18:FE:D0:5A:B0:8E Authority key identifier: 5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F Certificate issuer: /CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Certificate serial: 4DD897EC6E24D398F1BC1A70948437525677F64C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft Manifest number: 025D Signing time: Sun 27 Sep 2026 01:56:11 +0000 Manifest this update: Sun 27 Sep 2026 01:51:11 +0000 Manifest next update: Mon 28 Sep 2026 05:37:11 +0000 Files and hashes: 1: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl (hash: j+CEvcUSw4AGibvIpEov9eqx3ql5+VXzbGkf+6wOU1k=) 2: 326130363a396634313a3130303a3a2f34302d3430203d3e20323134373233.roa (hash: OJ83dTsr9Gt4avvo3q3A4eeFV71yGziVsKE7L0soTmM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Sep 2026 05:37:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:d8:97:ec:6e:24:d3:98:f1:bc:1a:70:94:84:37:52:56:77:f6:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Validity Not Before: Sep 27 01:51:11 2026 GMT Not After : Sep 28 05:37:11 2026 GMT Subject: CN=BBD4A943A9F05176E3F0BD0B929218FED05AB08E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f5:4a:d5:a5:b7:ec:75:3b:16:22:50:9c:0e: 90:5e:64:1f:82:20:36:7f:3a:14:e4:2d:58:0c:c9: b3:dd:aa:cf:c2:bb:2a:7d:06:13:6f:72:32:95:6e: ae:63:52:19:b8:df:d1:31:2c:f9:bc:e8:ed:d4:34: ee:8e:c0:8e:c1:9e:88:2a:1b:23:34:e1:a4:c5:de: 35:4c:73:0f:3a:14:ed:b7:cc:81:46:8d:25:04:aa: cf:0a:4b:61:69:f5:3b:5e:a9:0a:3c:95:a6:0b:20: 73:e1:5c:b1:f5:2c:ee:bc:aa:e5:5a:3c:80:a5:2d: 98:bd:7d:d3:5f:2c:90:18:da:48:b8:fd:44:82:17: 46:29:ba:d5:5c:da:c5:04:6a:b2:dd:91:02:81:aa: 73:9f:03:11:af:7f:b0:8d:e7:5d:cc:0a:02:74:fb: 3b:53:da:62:0c:73:3f:aa:b7:d9:dc:a2:af:c9:26: c2:28:68:4d:f5:95:86:50:63:13:17:7a:97:2c:21: bf:54:47:41:6d:a4:7f:ed:c6:5e:58:c4:bd:0c:89: ba:36:6c:df:41:2c:ba:79:ff:0a:9d:e0:28:d4:d5: e0:30:3c:83:0e:1c:fe:da:67:3b:8f:d7:af:95:ec: 24:80:66:91:d1:27:ed:cc:f4:d2:78:73:38:eb:26: 1e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D4:A9:43:A9:F0:51:76:E3:F0:BD:0B:92:92:18:FE:D0:5A:B0:8E X509v3 Authority Key Identifier: keyid:5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:44:f2:46:49:eb:17:25:04:bf:03:45:f7:19:23:36:f5:bb: 34:26:e9:df:28:0a:67:b2:03:ad:22:00:9b:cd:03:64:be:a9: 82:96:22:45:fb:72:9a:43:69:5a:9c:74:63:11:7a:cd:48:3e: 76:5d:79:f2:fa:dd:26:6d:7e:a0:8e:61:9f:56:c5:d4:b6:20: 49:a9:2e:56:a6:41:81:b9:15:f4:9b:fe:c0:c5:14:4a:41:ac: b2:da:a0:a5:60:c5:4d:a7:ca:e8:5e:68:81:5f:3b:d2:73:80: ef:03:eb:0b:0a:d8:08:18:e0:42:ff:55:69:47:79:e3:04:8a: 70:4f:6a:b0:42:f1:29:20:d5:00:9b:40:83:40:d7:13:81:d6: 10:df:2b:0a:14:35:e2:89:a8:ec:87:43:33:4c:75:7f:43:03: da:f9:03:5b:93:53:48:55:e1:2e:55:1b:17:47:7e:10:8d:e4: c5:64:c8:7e:a8:bc:9e:6c:67:1e:4e:c2:d7:22:22:19:e7:14: ff:23:7f:06:97:e0:2e:13:59:71:de:67:d5:0f:43:50:a7:4b: cb:86:ac:89:01:b4:9e:c7:5b:e6:55:09:cc:35:9f:dd:05:bc: d3:3f:d3:bf:31:ce:dc:bc:58:07:bc:75:ec:5c:f7:a7:71:e0: 76:8c:3b:04 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUTdiX7G4k05jxvBpwlIQ3UlZ39kwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQw QkY1OTE1RjAeFw0yNjA5MjcwMTUxMTFaFw0yNjA5MjgwNTM3MTFaMDMxMTAvBgNV BAMTKEJCRDRBOTQzQTlGMDUxNzZFM0YwQkQwQjkyOTIxOEZFRDA1QUIwOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv9UrVpbfsdTsWIlCcDpBeZB+C IDZ/OhTkLVgMybPdqs/Cuyp9BhNvcjKVbq5jUhm439ExLPm86O3UNO6OwI7Bnogq GyM04aTF3jVMcw86FO23zIFGjSUEqs8KS2Fp9TteqQo8laYLIHPhXLH1LO68quVa PIClLZi9fdNfLJAY2ki4/USCF0YputVc2sUEarLdkQKBqnOfAxGvf7CN513MCgJ0 +ztT2mIMcz+qt9ncoq/JJsIoaE31lYZQYxMXepcsIb9UR0FtpH/txl5YxL0Mibo2 bN9BLLp5/wqd4CjU1eAwPIMOHP7aZzuP16+V7CSAZpHRJ+3M9NJ4czjrJh47AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUu9SpQ6nwUXbj8L0LkpIY/tBasI4wHwYDVR0j BBgwFoAUWj94GTU84P0TuP/Ny4g37Qv1kV8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzUvNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQwQkY1OTE1Ri5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03ZWIzLTRm NjMtYTE1OS1jZmYwMmMwMjZhYmYvMi81QTNGNzgxOTM1M0NFMEZEMTNCOEZGQ0RD Qjg4MzdFRDBCRjU5MTVGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy81LzVBM0Y3ODE5 MzUzQ0UwRkQxM0I4RkZDRENCODgzN0VEMEJGNTkxNUYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB7RPJG SesXJQS/A0X3GSM29bs0JunfKApnsgOtIgCbzQNkvqmCliJF+3KaQ2lanHRjEXrN SD52XXny+t0mbX6gjmGfVsXUtiBJqS5WpkGBuRX0m/7AxRRKQayy2qClYMVNp8ro XmiBXzvSc4DvA+sLCtgIGOBC/1VpR3njBIpwT2qwQvEpINUAm0CDQNcTgdYQ3ysK FDXiiajsh0MzTHV/QwPa+QNbk1NIVeEuVRsXR34QjeTFZMh+qLyebGceTsLXIiIZ 5xT/I38Gl+AuE1lx3mfVD0NQp0vLhqyJAbSex1vmVQnMNZ/dBbzTP9O/Mc7cvFgH vHXsXPenceB2jDsE -----END CERTIFICATE-----Generated at Sun Sep 27 21:35:50 2026 by rpki-client