$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft File: D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft (raw, json) Hash identifier: kYl3Hw+Wny7xiokXOf31T8ZvZ4H95jcHlX5Jj8Dn0/M= Subject key identifier: F9:5B:94:DD:42:4A:DB:25:3C:35:50:4A:6B:BD:4F:62:2D:1B:CE:58 Authority key identifier: D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9 Certificate issuer: /CN=D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9 Certificate serial: 2D34811345B30E5523AFF1F016439210976F30C0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft Manifest number: 7B Signing time: Thu 16 Apr 2026 18:27:12 +0000 Manifest this update: Thu 16 Apr 2026 18:22:12 +0000 Manifest next update: Fri 17 Apr 2026 21:32:12 +0000 Files and hashes: 1: 326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa (hash: Qe+s8/fAnIQEeutwNPKlMCYxj4th5oSw8TX5K8siNS0=) 2: D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl (hash: lzmy6FNm5aI5nc/HqkNBqOzw95vd99jbEVe3M6LeIk8=) 3: 326130663a316363353a6666663a3a2f34382d3438203d3e20323131353735.roa (hash: 9OCqZ/d+1rU6CR9p3YDhWbf8ZADN9O93ycDA5zxlgcg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 21:32:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:34:81:13:45:b3:0e:55:23:af:f1:f0:16:43:92:10:97:6f:30:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9 Validity Not Before: Apr 16 18:22:12 2026 GMT Not After : Apr 17 21:32:12 2026 GMT Subject: CN=F95B94DD424ADB253C35504A6BBD4F622D1BCE58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bc:e5:07:2e:91:cb:33:bd:25:01:da:bb:31: 59:0d:7f:38:22:68:5c:85:32:09:e1:76:42:b5:2d: d9:d8:9b:b9:b7:75:b6:66:e5:70:50:a7:09:76:6c: a6:65:b7:8e:8f:45:61:4c:18:5f:50:a0:d2:f9:03: c8:0f:52:dd:a7:ad:c5:df:b5:86:43:7b:b8:b8:c0: 36:3b:26:4d:ad:28:18:ad:22:3c:f9:82:88:a1:9e: 4c:b7:f3:9c:e5:53:c9:7c:20:7c:1e:21:5f:a7:a3: 37:44:2e:8b:4d:8d:5d:91:19:24:03:f8:b9:e0:a5: 0b:87:49:f4:33:d5:99:1e:15:6c:1f:94:20:21:98: 3a:75:d0:a3:fb:28:63:19:58:5e:80:82:b1:b3:90: 82:2a:a2:b1:2d:da:e7:36:c3:99:ad:51:6a:c4:08: d3:f3:e3:dc:9c:2c:a3:10:12:31:b0:cb:64:1b:46: b2:72:1d:bc:0b:4b:0e:ad:98:88:8c:7d:e7:2e:1a: 25:eb:3d:f3:6d:10:56:86:c4:21:d8:6d:ac:dd:44: e8:49:d0:3b:03:5f:3a:de:32:2c:01:ae:41:d4:82: 9b:1f:cd:6c:88:ee:37:a3:0b:8f:f2:1e:93:2d:a9: c5:62:6f:12:cc:30:65:d0:03:90:d7:26:69:de:76: b8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:5B:94:DD:42:4A:DB:25:3C:35:50:4A:6B:BD:4F:62:2D:1B:CE:58 X509v3 Authority Key Identifier: keyid:D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:89:a2:6f:82:75:5c:9a:84:0e:0a:0e:aa:54:75:f8:bc:5d: e1:78:19:58:7f:5d:c7:b5:61:15:5a:ae:9d:bb:62:6f:a7:1c: a9:9d:e6:07:eb:d5:13:30:31:ae:f1:4e:cc:b5:7a:6e:01:51: 33:c5:67:08:fc:dc:31:55:89:2f:10:ee:41:5a:a9:3b:f1:5b: ad:05:ba:f9:48:8f:3b:72:ec:51:1f:a3:4a:a2:69:09:fa:19: 4d:cb:1e:6e:63:99:29:70:50:c1:3f:79:ee:2d:67:3a:87:be: 37:64:0b:f7:ee:34:58:c6:52:43:7f:7c:80:00:1d:a5:99:bb: 46:f0:83:a8:49:a6:84:8a:c3:11:31:5e:68:01:90:72:b0:ca: 85:6a:d2:f7:ef:5f:fa:42:56:6c:4b:4c:1b:c5:54:71:d9:a4: 42:57:2f:bf:c3:5e:ee:6e:12:0d:d6:6b:62:c1:a6:e4:2e:a2: c8:b7:cf:d0:02:79:89:ea:f3:bd:00:df:13:1c:90:89:21:fb: 7a:a7:fb:05:53:16:7b:88:fd:44:a8:8a:27:7c:22:f5:b2:25: 70:3d:da:03:ef:d7:88:24:81:a0:46:37:a7:8f:d6:33:85:7f: b4:8d:ee:ae:6c:0c:e9:1c:27:11:13:41:88:2f:95:2e:27:12: 69:68:72:15 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULTSBE0WzDlUjr/HwFkOSEJdvMMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVFRTYzRDlCMUQyRDVDNkZBREM5QTE2OUU5QjRBRjY0 NENGMzdFOTAeFw0yNjA0MTYxODIyMTJaFw0yNjA0MTcyMTMyMTJaMDMxMTAvBgNV BAMTKEY5NUI5NERENDI0QURCMjUzQzM1NTA0QTZCQkQ0RjYyMkQxQkNFNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHvOUHLpHLM70lAdq7MVkNfzgi aFyFMgnhdkK1LdnYm7m3dbZm5XBQpwl2bKZlt46PRWFMGF9QoNL5A8gPUt2nrcXf tYZDe7i4wDY7Jk2tKBitIjz5goihnky385zlU8l8IHweIV+nozdELotNjV2RGSQD +LngpQuHSfQz1ZkeFWwflCAhmDp10KP7KGMZWF6AgrGzkIIqorEt2uc2w5mtUWrE CNPz49ycLKMQEjGwy2QbRrJyHbwLSw6tmIiMfecuGiXrPfNtEFaGxCHYbazdROhJ 0DsDXzreMiwBrkHUgpsfzWyI7jejC4/yHpMtqcVibxLMMGXQA5DXJmnedrixAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU+VuU3UJK2yU8NVBKa71PYi0bzlgwHwYDVR0j BBgwFoAU1e5j2bHS1cb63JoWnptK9kTPN+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzQvRDVFRTYzRDlCMUQyRDVDNkZBREM5QTE2OUU5QjRBRjY0NENGMzdFOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9ENUVFNjNEOUIxRDJENUM2RkFEQzlBMTY5 RTlCNEFGNjQ0Q0YzN0U5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi80L0Q1RUU2M0Q5 QjFEMkQ1QzZGQURDOUExNjlFOUI0QUY2NDRDRjM3RTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAiiaJv gnVcmoQOCg6qVHX4vF3heBlYf13HtWEVWq6du2JvpxypneYH69UTMDGu8U7MtXpu AVEzxWcI/NwxVYkvEO5BWqk78VutBbr5SI87cuxRH6NKomkJ+hlNyx5uY5kpcFDB P3nuLWc6h743ZAv37jRYxlJDf3yAAB2lmbtG8IOoSaaEisMRMV5oAZBysMqFatL3 71/6QlZsS0wbxVRx2aRCVy+/w17ubhIN1mtiwabkLqLIt8/QAnmJ6vO9AN8THJCJ Ift6p/sFUxZ7iP1EqIonfCL1siVwPdoD79eIJIGgRjenj9YzhX+0je6ubAzpHCcR E0GIL5UuJxJpaHIV -----END CERTIFICATE-----Generated at Fri Apr 17 12:34:16 2026 by rpki-client