$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft File: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft (raw, json) Hash identifier: nWh9jXZ2syJf3gDNVcJQYhMj+8nw+y7sAWhZmIKqIRs= Subject key identifier: 8C:63:E5:24:D2:1D:AB:DF:08:54:59:DA:ED:0A:A6:66:0D:DF:DD:D2 Authority key identifier: 5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F Certificate issuer: /CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Certificate serial: 1A8CEE510ADD0D5841F29E97E365B769785784DA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft Manifest number: 0205 Signing time: Thu 23 Jul 2026 16:06:09 +0000 Manifest this update: Thu 23 Jul 2026 16:01:09 +0000 Manifest next update: Fri 24 Jul 2026 17:33:09 +0000 Files and hashes: 1: 326130363a396634313a3130303a3a2f34302d3430203d3e20323134373233.roa (hash: OJ83dTsr9Gt4avvo3q3A4eeFV71yGziVsKE7L0soTmM=) 2: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl (hash: zi65nPIQZuIzhp/h9OnCfcWN5IYk8oLpN6TH2GHXYEY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:8c:ee:51:0a:dd:0d:58:41:f2:9e:97:e3:65:b7:69:78:57:84:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Validity Not Before: Jul 23 16:01:09 2026 GMT Not After : Jul 24 17:33:09 2026 GMT Subject: CN=8C63E524D21DABDF085459DAED0AA6660DDFDDD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4b:3f:23:4e:26:86:e0:da:33:99:ac:4e:69: 35:61:73:3d:b7:5b:7e:b4:00:c6:17:6e:0b:c3:26: 25:09:fb:6c:ce:6b:1a:44:09:f7:9c:89:3c:31:dd: 7d:ad:52:c6:e8:9f:6f:58:ad:e1:0f:ac:c7:69:d8: cb:01:d7:db:7a:a0:b3:8b:8e:fb:ad:89:40:58:b5: c5:57:15:9e:f7:11:5f:e7:b3:35:6f:f0:dc:92:ce: bc:4e:62:24:5f:69:19:5a:f1:a8:e8:79:1f:cf:b3: a8:82:30:9d:b0:6e:74:57:04:7c:2c:91:3c:02:2b: 22:3b:3e:e8:69:12:78:21:15:30:c2:fd:1e:eb:f8: 23:7c:cd:12:fc:ce:e0:1e:ab:be:c2:47:b9:ce:e7: 28:67:89:08:ba:78:a6:84:68:e3:a7:9d:8e:4c:4a: e4:5b:77:cd:46:4d:11:eb:f0:ae:11:54:27:7c:c1: 29:ce:28:8b:6f:87:61:2a:7b:c9:31:7d:5f:22:9f: 1c:ba:6c:1e:df:cc:ee:c1:1c:02:45:c0:5a:f4:2d: 31:fa:5b:a5:ce:10:6c:44:24:6d:32:b4:b0:57:69: b7:0a:59:9c:23:c9:10:6a:42:1b:d4:98:fc:c8:05: 77:69:0b:ac:ca:8a:ae:10:35:bd:a0:4c:df:ea:01: b6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:63:E5:24:D2:1D:AB:DF:08:54:59:DA:ED:0A:A6:66:0D:DF:DD:D2 X509v3 Authority Key Identifier: keyid:5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:89:a9:88:a4:e9:28:22:23:08:65:ed:aa:6c:82:1f:78:25: cb:1a:44:74:9b:0f:63:46:c2:59:77:27:3c:25:8e:1a:d9:37: f1:ff:26:5a:ba:dc:df:18:b9:3b:e7:49:d4:d5:af:6d:46:f5: aa:a1:5e:fc:ad:8f:cf:e3:be:67:5d:d5:53:4e:2f:c9:18:e9: c8:f4:7a:68:ab:83:d3:3e:02:4e:58:0e:2a:e4:a1:03:47:95: ce:3d:6a:16:f9:6c:04:0a:e8:cb:55:db:d4:17:b2:ef:40:a5: 23:cb:9f:0a:d8:99:74:7c:ca:bc:00:16:e5:fe:0a:57:28:03: 3d:c8:16:dc:21:31:ca:61:b9:5c:be:6f:38:b4:e8:02:bd:7f: 06:8f:09:27:86:90:77:15:b4:cb:46:fb:83:d0:01:9a:32:08: a3:18:ea:c5:85:31:0e:8a:f7:11:bf:43:34:c0:b2:38:ee:96: 3d:a4:5a:5d:4d:ca:a3:c5:ef:55:ed:f0:1d:06:9f:84:18:d8: 17:8b:1f:ae:35:1c:b5:e5:21:7e:4c:fa:72:4b:4f:6c:8f:9d: 62:90:ba:ab:e5:e4:fb:34:2d:86:f1:7e:2a:5e:ab:a0:5f:a9: f5:a7:0c:4a:01:c3:31:77:6c:0f:29:6d:fc:98:fc:1e:f0:7f: a0:90:e7:cc -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUGozuUQrdDVhB8p6X42W3aXhXhNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQw QkY1OTE1RjAeFw0yNjA3MjMxNjAxMDlaFw0yNjA3MjQxNzMzMDlaMDMxMTAvBgNV BAMTKDhDNjNFNTI0RDIxREFCREYwODU0NTlEQUVEMEFBNjY2MERERkRERDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFSz8jTiaG4NozmaxOaTVhcz23 W360AMYXbgvDJiUJ+2zOaxpECfeciTwx3X2tUsbon29YreEPrMdp2MsB19t6oLOL jvutiUBYtcVXFZ73EV/nszVv8NySzrxOYiRfaRla8ajoeR/Ps6iCMJ2wbnRXBHws kTwCKyI7PuhpEnghFTDC/R7r+CN8zRL8zuAeq77CR7nO5yhniQi6eKaEaOOnnY5M SuRbd81GTRHr8K4RVCd8wSnOKItvh2Eqe8kxfV8inxy6bB7fzO7BHAJFwFr0LTH6 W6XOEGxEJG0ytLBXabcKWZwjyRBqQhvUmPzIBXdpC6zKiq4QNb2gTN/qAbbPAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUjGPlJNIdq98IVFna7QqmZg3f3dIwHwYDVR0j BBgwFoAUWj94GTU84P0TuP/Ny4g37Qv1kV8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzUvNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQwQkY1OTE1Ri5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03ZWIzLTRm NjMtYTE1OS1jZmYwMmMwMjZhYmYvMi81QTNGNzgxOTM1M0NFMEZEMTNCOEZGQ0RD Qjg4MzdFRDBCRjU5MTVGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy81LzVBM0Y3ODE5 MzUzQ0UwRkQxM0I4RkZDRENCODgzN0VEMEJGNTkxNUYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAMiamI pOkoIiMIZe2qbIIfeCXLGkR0mw9jRsJZdyc8JY4a2Tfx/yZautzfGLk750nU1a9t RvWqoV78rY/P475nXdVTTi/JGOnI9Hpoq4PTPgJOWA4q5KEDR5XOPWoW+WwECujL VdvUF7LvQKUjy58K2Jl0fMq8ABbl/gpXKAM9yBbcITHKYblcvm84tOgCvX8Gjwkn hpB3FbTLRvuD0AGaMgijGOrFhTEOivcRv0M0wLI47pY9pFpdTcqjxe9V7fAdBp+E GNgXix+uNRy15SF+TPpyS09sj51ikLqr5eT7NC2G8X4qXqugX6n1pwxKAcMxd2wP KW38mPwe8H+gkOfM -----END CERTIFICATE-----Generated at Fri Jul 24 02:38:48 2026 by rpki-client