$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft File: D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft (raw, json) Hash identifier: zE8lBRwzOIedzU8JMfCn4HvsqLfDk3jxvUmOLQjrYVQ= Subject key identifier: DE:09:CE:C3:4F:D8:9D:19:95:B4:93:6B:B8:E5:FF:B4:F7:83:DE:7B Authority key identifier: D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9 Certificate issuer: /CN=D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9 Certificate serial: 09AAF844D0A58B922C2CEFCB74F2CB3102D02DBB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft Manifest number: 3C Signing time: Sun 01 Mar 2026 01:17:55 +0000 Manifest this update: Sun 01 Mar 2026 01:12:55 +0000 Manifest next update: Mon 02 Mar 2026 03:56:55 +0000 Files and hashes: 1: D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl (hash: U0kESRPaMV5A36Q2uBbccMuYRRnX7LCDAtwOI2aQ9uI=) 2: 326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa (hash: Qe+s8/fAnIQEeutwNPKlMCYxj4th5oSw8TX5K8siNS0=) 3: 326130663a316363353a6666663a3a2f34382d3438203d3e20323131353735.roa (hash: 9OCqZ/d+1rU6CR9p3YDhWbf8ZADN9O93ycDA5zxlgcg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 03:56:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:aa:f8:44:d0:a5:8b:92:2c:2c:ef:cb:74:f2:cb:31:02:d0:2d:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9 Validity Not Before: Mar 1 01:12:55 2026 GMT Not After : Mar 2 03:56:55 2026 GMT Subject: CN=DE09CEC34FD89D1995B4936BB8E5FFB4F783DE7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e8:13:21:60:75:76:0f:c9:fe:01:42:2d:43: 35:e3:b5:cc:64:2e:c0:ef:7d:58:94:b4:80:11:58: 4f:d9:75:98:e3:c4:29:37:3c:66:02:f1:32:64:64: e2:2d:7f:35:a8:b3:d3:8e:84:83:5e:87:02:9f:d4: c5:ca:5f:2b:6d:72:b5:89:fe:b4:9f:79:4d:79:ab: be:83:0a:6d:5d:76:7b:2d:10:82:c5:7f:cf:8d:5c: 5a:80:80:c0:88:03:2b:ff:c9:a8:a5:95:01:3c:6f: 52:62:7a:b6:09:07:c0:57:97:21:58:bf:fb:20:b9: fb:ba:d6:e3:5f:d0:96:be:bc:88:3b:5f:4a:d5:27: 1b:02:0c:e8:13:dd:eb:2a:14:21:66:ff:21:f7:5d: a7:d5:81:cf:8e:8a:52:45:39:d2:20:a5:9c:98:c1: 3e:48:1f:12:f1:1d:c1:71:f3:5a:7d:29:60:8d:24: 74:52:f4:a9:c6:69:3c:d0:28:8e:6c:f0:30:ec:bb: 17:a2:93:81:d5:ae:2c:02:06:ef:26:dd:b1:5d:f2: fa:90:9c:3d:d1:79:50:fc:11:a4:e9:6b:fc:c9:53: 6d:06:57:bd:6e:4d:3a:41:f5:29:7f:41:86:8c:02: 37:e3:bf:f0:a7:5f:8d:36:af:59:c0:ea:22:8c:8a: 27:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:09:CE:C3:4F:D8:9D:19:95:B4:93:6B:B8:E5:FF:B4:F7:83:DE:7B X509v3 Authority Key Identifier: keyid:D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:68:fa:9f:70:5b:8e:2c:dc:38:f6:ce:a9:8e:7d:5f:cb:35: d4:6a:67:81:54:95:b7:21:df:41:11:33:61:1d:bc:8c:38:e3: d5:ee:65:65:5d:ff:fb:7b:70:7e:43:2f:be:75:fc:16:14:19: b4:55:8f:cc:06:05:22:9a:b8:11:f1:63:d2:ea:cd:88:e9:d1: 92:6c:7e:34:fc:64:1d:2c:5b:e2:36:37:29:a0:41:0f:50:e8: ea:a8:bb:c6:1e:45:c4:a8:81:ed:b5:e0:a4:8c:ec:f8:cf:f2: ee:28:2d:ae:45:33:b3:de:9c:d6:56:2d:a3:05:ac:1b:58:36: 5e:69:38:40:43:35:e9:8e:9c:20:a7:a0:23:01:6c:00:be:0a: 7d:58:04:55:b9:97:5c:f2:c4:e0:e8:9e:1d:b6:aa:05:86:85: f1:5d:e6:e0:08:37:6b:ea:f5:48:49:b2:89:ee:75:7c:b6:e4: 6b:1e:24:71:54:8e:38:b6:50:e8:92:2a:37:5e:70:2a:f7:e0: 72:61:7e:64:75:0e:c1:fe:3d:05:ab:66:5b:1d:73:a0:11:36: 37:02:9d:0e:67:19:6c:28:b7:0e:fe:2f:e5:9c:ad:83:99:b2: e1:2c:0c:71:8c:bf:3e:50:66:78:66:da:7c:0a:79:61:0b:93: 8e:83:ca:dd -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUCar4RNCli5IsLO/LdPLLMQLQLbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVFRTYzRDlCMUQyRDVDNkZBREM5QTE2OUU5QjRBRjY0 NENGMzdFOTAeFw0yNjAzMDEwMTEyNTVaFw0yNjAzMDIwMzU2NTVaMDMxMTAvBgNV BAMTKERFMDlDRUMzNEZEODlEMTk5NUI0OTM2QkI4RTVGRkI0Rjc4M0RFN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM6BMhYHV2D8n+AUItQzXjtcxk LsDvfViUtIARWE/ZdZjjxCk3PGYC8TJkZOItfzWos9OOhINehwKf1MXKXyttcrWJ /rSfeU15q76DCm1ddnstEILFf8+NXFqAgMCIAyv/yaillQE8b1JierYJB8BXlyFY v/sgufu61uNf0Ja+vIg7X0rVJxsCDOgT3esqFCFm/yH3XafVgc+OilJFOdIgpZyY wT5IHxLxHcFx81p9KWCNJHRS9KnGaTzQKI5s8DDsuxeik4HVriwCBu8m3bFd8vqQ nD3ReVD8EaTpa/zJU20GV71uTTpB9Sl/QYaMAjfjv/CnX402r1nA6iKMiicTAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU3gnOw0/YnRmVtJNruOX/tPeD3nswHwYDVR0j BBgwFoAU1e5j2bHS1cb63JoWnptK9kTPN+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzQvRDVFRTYzRDlCMUQyRDVDNkZBREM5QTE2OUU5QjRBRjY0NENGMzdFOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9ENUVFNjNEOUIxRDJENUM2RkFEQzlBMTY5 RTlCNEFGNjQ0Q0YzN0U5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi80L0Q1RUU2M0Q5 QjFEMkQ1QzZGQURDOUExNjlFOUI0QUY2NDRDRjM3RTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCGaPqf cFuOLNw49s6pjn1fyzXUameBVJW3Id9BETNhHbyMOOPV7mVlXf/7e3B+Qy++dfwW FBm0VY/MBgUimrgR8WPS6s2I6dGSbH40/GQdLFviNjcpoEEPUOjqqLvGHkXEqIHt teCkjOz4z/LuKC2uRTOz3pzWVi2jBawbWDZeaThAQzXpjpwgp6AjAWwAvgp9WARV uZdc8sTg6J4dtqoFhoXxXebgCDdr6vVISbKJ7nV8tuRrHiRxVI44tlDokio3XnAq 9+ByYX5kdQ7B/j0Fq2ZbHXOgETY3Ap0OZxlsKLcO/i/lnK2DmbLhLAxxjL8+UGZ4 Ztp8CnlhC5OOg8rd -----END CERTIFICATE-----Generated at Sun Mar 1 18:09:56 2026 by rpki-client