$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft File: D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft (raw, json) Hash identifier: nzg8z03UzilbwFoTpzzHFsDrHxK2Qxi98FWey2Das9s= Subject key identifier: 7F:8D:00:D8:7A:2D:17:B9:B6:68:F6:B8:72:BD:E3:58:2B:1D:16:66 Authority key identifier: D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9 Certificate issuer: /CN=D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9 Certificate serial: 7BCFF0BE55668AC922E853E7AD1893D16AE37AD6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft Manifest number: 014F Signing time: Mon 21 Sep 2026 22:51:50 +0000 Manifest this update: Mon 21 Sep 2026 22:46:50 +0000 Manifest next update: Tue 22 Sep 2026 23:40:50 +0000 Files and hashes: 1: 326130663a316363353a6666663a3a2f34382d3438203d3e20323131353735.roa (hash: 9OCqZ/d+1rU6CR9p3YDhWbf8ZADN9O93ycDA5zxlgcg=) 2: D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl (hash: iJLmLzv3yMLNbfDodwRJshhzCVXMCx+1/OKRT1f7nZY=) 3: 326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa (hash: Qe+s8/fAnIQEeutwNPKlMCYxj4th5oSw8TX5K8siNS0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 15:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:cf:f0:be:55:66:8a:c9:22:e8:53:e7:ad:18:93:d1:6a:e3:7a:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9 Validity Not Before: Sep 21 22:46:50 2026 GMT Not After : Sep 22 23:40:50 2026 GMT Subject: CN=7F8D00D87A2D17B9B668F6B872BDE3582B1D1666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:11:53:ff:6e:73:49:e0:40:57:e7:3e:22:d0: a3:8f:6d:33:af:3e:a5:7d:a0:52:4a:35:b6:df:4b: 26:52:93:d2:6c:ab:03:b9:af:5a:37:f1:e1:34:2e: 69:86:ca:fa:c4:39:02:87:e2:14:17:2d:ed:1c:07: b0:e9:36:61:a9:2f:d2:fe:8b:6f:b8:b1:c7:9e:0a: 9d:8b:cd:19:ae:d7:75:d0:c2:05:90:0a:62:3b:a0: 4c:ee:ff:e9:cc:80:53:09:70:32:e7:c0:29:4d:61: 33:b1:79:1a:53:7d:1a:bc:b8:a3:04:0a:63:bb:df: f0:f8:53:7b:76:cb:d5:36:e0:8b:c1:45:47:9d:59: ef:db:e4:ca:b4:ec:53:9d:a6:ab:1f:4c:86:68:c4: d2:c6:ec:b5:4f:9d:fd:a4:c5:90:fd:c6:a6:cf:e3: f7:7d:b7:36:a6:9d:ac:63:29:21:a4:69:82:ed:23: a3:51:34:a7:59:d7:b5:c0:a2:e0:4c:b7:d9:78:62: d7:d6:f6:a9:f0:ba:f6:fa:04:9c:73:6f:b2:9a:7d: 4e:19:6b:64:8e:69:fd:0b:84:2b:59:0e:3a:22:2b: 14:e3:c9:ba:04:d5:56:ce:b4:e4:36:0e:f7:68:99: c7:7d:e2:0a:b3:9b:4e:08:d2:0a:1b:cb:2d:c0:c5: 7d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8D:00:D8:7A:2D:17:B9:B6:68:F6:B8:72:BD:E3:58:2B:1D:16:66 X509v3 Authority Key Identifier: keyid:D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:a0:93:92:49:9f:2d:8b:bc:c1:36:13:88:b0:fd:b6:d4:34: 11:a6:fc:ce:a8:35:67:8a:8b:58:fe:1c:aa:e0:f5:64:a4:e9: 73:92:74:e1:10:d5:90:40:1b:88:c1:11:12:e8:07:94:26:6e: 20:7d:45:3b:80:ba:77:dd:36:fc:1a:69:34:02:ce:0a:fc:83: 29:25:77:52:1b:c9:57:26:c6:1c:6b:85:7a:2a:60:86:66:9c: 5c:6b:f6:b8:fe:7f:63:7c:40:53:5e:ec:97:66:81:77:b0:61: 90:eb:3e:36:8a:89:6e:de:93:fc:a9:2b:62:fd:5d:78:cb:d6: 2b:e8:3a:d3:65:8e:22:d7:6d:2d:92:6f:a5:ff:c9:a7:0b:35: 00:49:f7:cf:80:cf:b5:77:7d:47:b0:84:15:95:22:b3:cf:ca: 84:f1:bc:a6:37:32:42:ba:68:74:cb:92:2f:e6:fe:86:bc:14: 3b:5d:f9:5a:00:dd:17:ea:c7:45:3b:83:af:b2:43:d5:eb:b3: b0:38:c4:49:74:a2:d3:3f:6b:97:cc:32:0e:51:de:70:fd:e1: 70:88:82:70:e0:7b:dd:f7:70:c1:5a:c2:ec:b9:3b:2b:7c:67: 09:2e:06:f7:63:a9:9c:31:b1:51:ad:de:a0:52:8a:7e:76:a6: 4f:f8:6c:ca -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUe8/wvlVmiski6FPnrRiT0WrjetYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVFRTYzRDlCMUQyRDVDNkZBREM5QTE2OUU5QjRBRjY0 NENGMzdFOTAeFw0yNjA5MjEyMjQ2NTBaFw0yNjA5MjIyMzQwNTBaMDMxMTAvBgNV BAMTKDdGOEQwMEQ4N0EyRDE3QjlCNjY4RjZCODcyQkRFMzU4MkIxRDE2NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFEVP/bnNJ4EBX5z4i0KOPbTOv PqV9oFJKNbbfSyZSk9JsqwO5r1o38eE0LmmGyvrEOQKH4hQXLe0cB7DpNmGpL9L+ i2+4sceeCp2LzRmu13XQwgWQCmI7oEzu/+nMgFMJcDLnwClNYTOxeRpTfRq8uKME CmO73/D4U3t2y9U24IvBRUedWe/b5Mq07FOdpqsfTIZoxNLG7LVPnf2kxZD9xqbP 4/d9tzamnaxjKSGkaYLtI6NRNKdZ17XAouBMt9l4YtfW9qnwuvb6BJxzb7KafU4Z a2SOaf0LhCtZDjoiKxTjyboE1VbOtOQ2Dvdomcd94gqzm04I0gobyy3AxX3TAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUf40A2HotF7m2aPa4cr3jWCsdFmYwHwYDVR0j BBgwFoAU1e5j2bHS1cb63JoWnptK9kTPN+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzQvRDVFRTYzRDlCMUQyRDVDNkZBREM5QTE2OUU5QjRBRjY0NENGMzdFOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9ENUVFNjNEOUIxRDJENUM2RkFEQzlBMTY5 RTlCNEFGNjQ0Q0YzN0U5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi80L0Q1RUU2M0Q5 QjFEMkQ1QzZGQURDOUExNjlFOUI0QUY2NDRDRjM3RTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBRoJOS SZ8ti7zBNhOIsP221DQRpvzOqDVniotY/hyq4PVkpOlzknThENWQQBuIwRES6AeU Jm4gfUU7gLp33Tb8Gmk0As4K/IMpJXdSG8lXJsYca4V6KmCGZpxca/a4/n9jfEBT XuyXZoF3sGGQ6z42iolu3pP8qSti/V14y9Yr6DrTZY4i120tkm+l/8mnCzUASffP gM+1d31HsIQVlSKzz8qE8bymNzJCumh0y5Iv5v6GvBQ7XflaAN0X6sdFO4OvskPV 67OwOMRJdKLTP2uXzDIOUd5w/eFwiIJw4Hvd93DBWsLsuTsrfGcJLgb3Y6mcMbFR rd6gUop+dqZP+GzK -----END CERTIFICATE-----Generated at Tue Sep 22 03:06:18 2026 by rpki-client