$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft File: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft (raw, json) Hash identifier: Kaw7BsfZ6P3wT45mPXEtwFFuEt6se344Pig8iqA2+Fk= Subject key identifier: CE:53:36:32:57:A4:6A:4C:F1:D7:2F:31:51:80:69:A5:4F:DB:ED:1B Authority key identifier: 5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F Certificate issuer: /CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Certificate serial: 719317374DF60005B4502EC5C4CF7C118A3CEA6C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft Manifest number: 0167 Signing time: Fri 27 Mar 2026 22:06:47 +0000 Manifest this update: Fri 27 Mar 2026 22:01:47 +0000 Manifest next update: Sun 29 Mar 2026 01:27:47 +0000 Files and hashes: 1: 326130363a396634313a3130303a3a2f34302d3430203d3e20323134373233.roa (hash: sTs8O8KBp3/QEgTlhnDJhb+nhykdynr848iPv4Z/TIo=) 2: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl (hash: J4NfgbA2FS/Um7L74Y71F0NT0RaXwuUfRngqLazBou0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 00:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:93:17:37:4d:f6:00:05:b4:50:2e:c5:c4:cf:7c:11:8a:3c:ea:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Validity Not Before: Mar 27 22:01:47 2026 GMT Not After : Mar 29 01:27:47 2026 GMT Subject: CN=CE53363257A46A4CF1D72F31518069A54FDBED1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1c:ee:16:71:fc:4b:fe:35:a9:20:2e:65:5a: a2:0d:36:43:1f:60:89:35:ed:d5:2e:6d:51:24:5d: 40:60:54:37:8d:df:ac:04:a6:1e:19:4c:8f:65:a5: 1b:5d:44:28:cd:f8:6e:8a:69:99:10:e4:ae:98:8f: 9a:fa:ba:9c:6a:30:a2:a0:64:2b:0e:99:d2:4f:71: 4b:a3:27:4b:b5:b3:13:db:03:12:18:eb:3f:e8:72: b8:d7:6b:52:7a:85:ed:4c:f0:3e:f2:2d:4d:68:cd: 8c:04:8f:45:80:7b:4a:da:09:11:62:b5:e2:53:5f: e7:df:d1:2b:5a:fa:5e:2e:76:eb:f4:9c:66:ba:48: c6:13:5f:a4:77:23:5c:9c:61:b5:b0:b9:e7:ed:fb: f5:a3:ac:0b:31:fd:03:81:cb:40:e4:5b:49:bd:40: ad:24:02:76:24:bd:dd:b7:07:ed:e4:07:b6:08:3a: 76:e4:1b:cd:7d:fc:b8:f3:2e:6b:c1:be:fc:92:a8: c0:20:c9:02:8a:04:08:82:81:f6:46:66:21:07:06: 8a:05:58:94:3c:5a:c6:95:3c:3b:09:f0:fc:76:f1: ba:8c:23:c6:29:da:9c:9d:9a:f6:05:ea:47:b4:37: 0a:96:53:4d:ac:0d:0e:89:50:6e:e2:77:9a:cd:f2: 2c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:53:36:32:57:A4:6A:4C:F1:D7:2F:31:51:80:69:A5:4F:DB:ED:1B X509v3 Authority Key Identifier: keyid:5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:eb:2c:7a:a3:e6:d7:cc:e1:c4:c2:b0:06:dd:25:06:e7:7f: 4e:7e:f1:b8:11:17:9c:b6:b4:01:b6:da:68:09:a1:af:74:47: 59:40:1c:a5:aa:30:ef:0e:39:a2:9c:d9:36:91:1a:5d:03:2a: ba:39:98:16:0e:e3:d0:6f:a9:de:b9:7a:24:17:14:1b:6b:cd: 5d:e2:50:71:32:89:3c:43:af:75:54:2f:98:0f:44:ff:2d:53: e3:2e:49:7e:f6:21:b2:7b:bd:7f:5c:cc:1f:31:5b:b9:3f:d1: 52:03:be:58:af:85:56:56:e2:a4:32:c2:3d:c6:2e:7f:6b:00: 9a:d4:7b:12:1f:01:be:cb:8f:a5:f4:69:59:84:d2:2d:87:5c: 16:5f:02:ac:49:c2:46:f4:77:41:f4:75:44:2b:af:0f:4c:28: 36:09:b4:ee:71:4f:b9:d0:6b:25:a3:9f:48:13:b4:e0:05:2f: 65:f4:5e:3f:63:a6:f5:92:e7:93:86:43:82:4f:26:5b:9b:cd: 2d:d5:02:61:0f:d1:15:70:57:64:c7:a5:ac:42:a8:eb:87:20: 60:00:7b:55:a8:14:da:e1:7a:dd:27:d2:04:ac:7b:de:78:b5: bd:45:46:7e:d1:88:a5:b0:b1:34:84:8a:f9:58:5b:75:94:61: da:c5:6b:d8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUcZMXN032AAW0UC7FxM98EYo86mwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQw QkY1OTE1RjAeFw0yNjAzMjcyMjAxNDdaFw0yNjAzMjkwMTI3NDdaMDMxMTAvBgNV BAMTKENFNTMzNjMyNTdBNDZBNENGMUQ3MkYzMTUxODA2OUE1NEZEQkVEMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzHO4WcfxL/jWpIC5lWqINNkMf YIk17dUubVEkXUBgVDeN36wEph4ZTI9lpRtdRCjN+G6KaZkQ5K6Yj5r6upxqMKKg ZCsOmdJPcUujJ0u1sxPbAxIY6z/ocrjXa1J6he1M8D7yLU1ozYwEj0WAe0raCRFi teJTX+ff0Sta+l4uduv0nGa6SMYTX6R3I1ycYbWwueft+/WjrAsx/QOBy0DkW0m9 QK0kAnYkvd23B+3kB7YIOnbkG819/LjzLmvBvvySqMAgyQKKBAiCgfZGZiEHBooF WJQ8WsaVPDsJ8Px28bqMI8Yp2pydmvYF6ke0NwqWU02sDQ6JUG7id5rN8izfAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUzlM2Mlekakzx1y8xUYBppU/b7RswHwYDVR0j BBgwFoAUWj94GTU84P0TuP/Ny4g37Qv1kV8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzUvNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQwQkY1OTE1Ri5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03ZWIzLTRm NjMtYTE1OS1jZmYwMmMwMjZhYmYvMi81QTNGNzgxOTM1M0NFMEZEMTNCOEZGQ0RD Qjg4MzdFRDBCRjU5MTVGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy81LzVBM0Y3ODE5 MzUzQ0UwRkQxM0I4RkZDRENCODgzN0VEMEJGNTkxNUYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCn6yx6 o+bXzOHEwrAG3SUG539OfvG4ERectrQBttpoCaGvdEdZQBylqjDvDjminNk2kRpd Ayq6OZgWDuPQb6neuXokFxQba81d4lBxMok8Q691VC+YD0T/LVPjLkl+9iGye71/ XMwfMVu5P9FSA75Yr4VWVuKkMsI9xi5/awCa1HsSHwG+y4+l9GlZhNIth1wWXwKs ScJG9HdB9HVEK68PTCg2CbTucU+50Gslo59IE7TgBS9l9F4/Y6b1kueThkOCTyZb m80t1QJhD9EVcFdkx6WsQqjrhyBgAHtVqBTa4XrdJ9IErHveeLW9RUZ+0YilsLE0 hIr5WFt1lGHaxWvY -----END CERTIFICATE-----Generated at Sat Mar 28 10:31:20 2026 by rpki-client