$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft File: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft (raw, json) Hash identifier: 7tobR3Tj43FEVZvoeuunl5IY4haifeXiPmCT4T7NRZ8= Subject key identifier: 37:70:CC:F5:A7:34:E4:F2:6C:0A:D3:F3:2F:A3:5D:1A:72:5C:6E:11 Authority key identifier: 5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F Certificate issuer: /CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Certificate serial: 52089777AC7827F742D84F7B471870A9D4B5786C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft Manifest number: 01A4 Signing time: Tue 12 May 2026 20:36:43 +0000 Manifest this update: Tue 12 May 2026 20:31:43 +0000 Manifest next update: Wed 13 May 2026 21:08:43 +0000 Files and hashes: 1: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl (hash: J/jgWtDP46QsEnX6o4XLQKGgASwEP7ONgZfIRt/KOKs=) 2: 326130363a396634313a3130303a3a2f34302d3430203d3e20323134373233.roa (hash: sTs8O8KBp3/QEgTlhnDJhb+nhykdynr848iPv4Z/TIo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 13:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:08:97:77:ac:78:27:f7:42:d8:4f:7b:47:18:70:a9:d4:b5:78:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Validity Not Before: May 12 20:31:43 2026 GMT Not After : May 13 21:08:43 2026 GMT Subject: CN=3770CCF5A734E4F26C0AD3F32FA35D1A725C6E11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:61:d4:3e:7c:28:e3:ec:de:f3:1a:08:cd:3b: e1:05:3f:e4:d1:84:64:86:a0:45:f3:3c:7b:63:55: 8d:c3:a5:a2:97:54:6e:45:26:95:2c:96:6b:df:c2: f9:61:8a:1c:3d:9d:bb:a7:9e:0f:81:dd:ae:94:1c: 14:31:d2:3d:b3:f0:28:ac:c0:ad:12:fb:4d:c4:dd: ae:55:91:bb:2d:cc:4f:eb:bd:63:75:7d:72:ad:d7: d8:92:1c:99:b2:0e:a9:3d:dd:63:61:b3:5d:4e:e2: 1c:36:ce:55:f4:33:d8:ed:74:8d:61:22:70:e6:3e: 86:1a:0c:d2:77:86:48:71:7e:14:0e:e2:69:c0:74: d7:ef:88:b0:82:d1:33:b4:4d:4f:d2:e7:cc:ae:9e: 58:b1:cc:63:67:b6:59:c4:07:f6:11:fa:bb:1f:07: a8:56:ed:33:12:e1:d6:4e:9b:54:ef:8e:8a:6e:e5: 5b:36:b9:f4:db:78:8a:23:0d:67:79:53:d5:2d:8a: bf:37:f7:17:31:0e:fa:e4:19:8d:6f:ac:3c:1a:5c: ca:ae:33:9a:29:cd:9d:e0:ba:e0:7d:de:e3:15:53: 24:05:41:d8:44:32:6f:6e:df:4b:f1:f2:45:ae:27: 19:c2:73:78:c8:4f:af:a5:e2:fc:ae:2d:a2:65:d2: 88:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:70:CC:F5:A7:34:E4:F2:6C:0A:D3:F3:2F:A3:5D:1A:72:5C:6E:11 X509v3 Authority Key Identifier: keyid:5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:71:ca:26:9a:39:93:bf:37:e2:80:80:09:a3:3f:0a:44:39: 47:a3:86:9b:d1:77:8c:85:61:45:de:52:dc:ae:cb:ab:2e:c3: 49:bf:18:62:18:75:2f:ba:60:b1:65:dd:a2:6d:37:14:1f:57: 6d:3c:9b:e8:e2:44:08:73:e5:74:9a:f4:d3:6a:d1:33:c9:ad: a8:e0:ea:57:26:79:b3:89:6b:d5:47:7d:a0:fa:fe:bf:15:ed: 79:f3:42:45:b5:75:1c:9e:50:67:7b:99:7c:fa:dd:4a:ca:c9: 71:49:94:3b:b5:be:aa:21:8e:af:93:1a:5a:35:70:6b:0f:90: b0:8d:60:f8:26:fe:d6:be:d6:da:fc:99:f5:0e:6a:6f:06:26: 51:b1:28:e9:ec:1f:9d:e8:26:e5:9d:0c:4d:88:2a:0f:33:0a: b4:37:1c:fd:24:00:86:39:0a:b5:5d:a9:94:6b:fa:58:b4:ec: 39:f8:5b:92:84:16:d7:85:74:e2:d9:ef:ad:20:cf:01:6e:d6: 1e:13:cb:1b:62:3f:fc:76:71:be:f0:78:75:67:0c:05:ec:3b: 95:37:ff:e1:bd:85:e2:05:00:cf:c9:36:7e:5c:5d:ca:8a:db: af:a7:5c:74:53:64:de:a3:7c:90:a6:0e:3e:7f:44:cb:c7:55: 6c:f4:1b:21 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUUgiXd6x4J/dC2E97RxhwqdS1eGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQw QkY1OTE1RjAeFw0yNjA1MTIyMDMxNDNaFw0yNjA1MTMyMTA4NDNaMDMxMTAvBgNV BAMTKDM3NzBDQ0Y1QTczNEU0RjI2QzBBRDNGMzJGQTM1RDFBNzI1QzZFMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiYdQ+fCjj7N7zGgjNO+EFP+TR hGSGoEXzPHtjVY3DpaKXVG5FJpUslmvfwvlhihw9nbunng+B3a6UHBQx0j2z8Cis wK0S+03E3a5VkbstzE/rvWN1fXKt19iSHJmyDqk93WNhs11O4hw2zlX0M9jtdI1h InDmPoYaDNJ3hkhxfhQO4mnAdNfviLCC0TO0TU/S58yunlixzGNntlnEB/YR+rsf B6hW7TMS4dZOm1Tvjopu5Vs2ufTbeIojDWd5U9Utir839xcxDvrkGY1vrDwaXMqu M5opzZ3guuB93uMVUyQFQdhEMm9u30vx8kWuJxnCc3jIT6+l4vyuLaJl0ogjAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUN3DM9ac05PJsCtPzL6NdGnJcbhEwHwYDVR0j BBgwFoAUWj94GTU84P0TuP/Ny4g37Qv1kV8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzUvNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQwQkY1OTE1Ri5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03ZWIzLTRm NjMtYTE1OS1jZmYwMmMwMjZhYmYvMi81QTNGNzgxOTM1M0NFMEZEMTNCOEZGQ0RD Qjg4MzdFRDBCRjU5MTVGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy81LzVBM0Y3ODE5 MzUzQ0UwRkQxM0I4RkZDRENCODgzN0VEMEJGNTkxNUYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCzccom mjmTvzfigIAJoz8KRDlHo4ab0XeMhWFF3lLcrsurLsNJvxhiGHUvumCxZd2ibTcU H1dtPJvo4kQIc+V0mvTTatEzya2o4OpXJnmziWvVR32g+v6/Fe1580JFtXUcnlBn e5l8+t1KyslxSZQ7tb6qIY6vkxpaNXBrD5CwjWD4Jv7Wvtba/Jn1DmpvBiZRsSjp 7B+d6CblnQxNiCoPMwq0Nxz9JACGOQq1XamUa/pYtOw5+FuShBbXhXTi2e+tIM8B btYeE8sbYj/8dnG+8Hh1ZwwF7DuVN//hvYXiBQDPyTZ+XF3Kituvp1x0U2Teo3yQ pg4+f0TLx1Vs9Bsh -----END CERTIFICATE-----Generated at Wed May 13 02:43:40 2026 by rpki-client