$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft File: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft (raw, json) Hash identifier: Xi6XzA8mefM9z5+Ih/s+49LYmNJkkHFe3tW6CcYc9qc= Subject key identifier: E2:14:73:0A:DF:72:97:BC:7F:12:28:6B:B6:D7:7F:9B:B9:33:DE:DC Authority key identifier: DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 Certificate issuer: /CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Certificate serial: 72BB3F0D29354ED0ECCC57AE7C1E393E3BF0A9B7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft Manifest number: 82 Signing time: Fri 17 Apr 2026 12:40:50 +0000 Manifest this update: Fri 17 Apr 2026 12:35:50 +0000 Manifest next update: Sat 18 Apr 2026 15:03:50 +0000 Files and hashes: 1: 326130663a316363353a326430333a3a2f34382d3438203d3e20323134393535.roa (hash: FhiRWcOhFd1e57IfPQu+2j0uinj7188+3VOrSYUtQ6c=) 2: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl (hash: MyxQLVFPVZ0lEb4W30bhGb+b67SquI8/s4XDfHJZAu0=) 3: 326130663a316363353a326430313a3a2f34382d3438203d3e20323134393535.roa (hash: l0RMqMiAhgGDzLpuD3ZJuPudrozfegvLREqyl+4aP2I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:bb:3f:0d:29:35:4e:d0:ec:cc:57:ae:7c:1e:39:3e:3b:f0:a9:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Validity Not Before: Apr 17 12:35:50 2026 GMT Not After : Apr 18 15:03:50 2026 GMT Subject: CN=E214730ADF7297BC7F12286BB6D77F9BB933DEDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a7:a8:1f:6b:33:ad:d5:3b:fe:6e:11:b1:a7: c4:26:d8:ae:57:34:f4:74:c3:b0:1d:58:cb:fb:ac: 64:42:d4:cd:8c:af:41:76:1a:21:6b:a9:b2:03:b9: d7:35:77:f9:d2:89:1c:d1:13:a0:30:b3:d8:d8:c0: 78:88:0a:d4:48:5d:f6:bb:67:40:31:f5:b3:e5:e8: 44:95:15:e0:9f:95:bd:92:bb:16:20:49:e5:85:83: 88:83:cc:f5:7d:17:06:89:cc:f5:1e:68:9e:7d:ec: 90:b8:a8:91:f0:ab:b4:63:d4:40:4f:ad:06:07:8e: 54:97:24:94:89:4d:7a:b8:df:d2:8a:44:bd:68:6f: d0:93:bb:84:06:1a:0d:6a:ae:73:0e:32:1f:b3:42: de:53:06:47:80:31:ec:e3:2d:bb:83:9b:3d:55:42: 46:43:cc:9e:78:1f:0b:e3:eb:c3:8f:2a:c0:7e:29: 5f:60:f4:e0:7e:e3:84:fb:8f:66:81:be:24:95:df: b8:00:85:65:4e:66:52:13:f5:22:f9:dd:f8:59:ad: eb:aa:33:a5:ba:8f:4f:74:7e:5d:2a:f8:52:38:a6: a9:3b:c3:1c:a9:f9:98:90:4d:36:13:c2:1f:09:a5: 5a:5b:50:54:8d:c3:48:4e:2c:ba:b4:18:47:22:97: ee:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:14:73:0A:DF:72:97:BC:7F:12:28:6B:B6:D7:7F:9B:B9:33:DE:DC X509v3 Authority Key Identifier: keyid:DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:4a:4f:9a:c2:3d:28:d2:0c:f5:61:8d:7b:e5:42:bb:8b:ea: 38:5e:40:44:f3:27:36:ee:5e:bb:97:0e:cb:36:b8:38:4f:3d: dd:2c:58:85:66:bf:0a:30:b8:f1:cc:90:90:e7:da:6a:80:d5: bf:3e:ed:1a:59:c8:51:0f:44:90:6a:ee:59:df:60:dd:0a:d8: b4:1b:e3:b0:21:5b:0d:78:6e:43:e6:35:a1:d5:0f:b4:9c:38: 63:57:3b:af:6f:a6:32:d6:02:99:f6:c7:a8:24:19:4b:db:fc: 86:62:e1:e6:51:5f:cc:7f:06:62:be:98:dc:55:9e:a3:47:31: 0b:91:5d:d2:bc:46:37:79:cc:65:9e:9f:d7:76:14:c0:9b:c4: e4:1c:2b:e0:17:ef:91:80:76:f3:aa:6a:59:dd:bb:de:83:6d: d6:2e:18:d6:e0:87:79:b4:1a:7c:e8:ef:5b:d3:d1:a6:36:83: 46:ab:70:b7:20:7b:fb:b4:96:1e:c5:ba:5f:5b:b7:83:ac:31: 3b:86:8c:4b:d9:c7:ca:6f:fe:bf:22:82:68:8c:75:9b:7c:62: 1a:2e:30:e4:d1:a7:a1:b4:48:01:f4:22:6b:e6:7e:a1:c7:79: b8:c3:78:80:0f:e9:f1:a0:da:28:d2:68:98:43:5c:2e:e2:35: e5:27:44:1a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUcrs/DSk1TtDszFeufB45PjvwqbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4 NUZBNEVFMTAeFw0yNjA0MTcxMjM1NTBaFw0yNjA0MTgxNTAzNTBaMDMxMTAvBgNV BAMTKEUyMTQ3MzBBREY3Mjk3QkM3RjEyMjg2QkI2RDc3RjlCQjkzM0RFREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6p6gfazOt1Tv+bhGxp8Qm2K5X NPR0w7AdWMv7rGRC1M2Mr0F2GiFrqbIDudc1d/nSiRzRE6Aws9jYwHiICtRIXfa7 Z0Ax9bPl6ESVFeCflb2SuxYgSeWFg4iDzPV9FwaJzPUeaJ597JC4qJHwq7Rj1EBP rQYHjlSXJJSJTXq439KKRL1ob9CTu4QGGg1qrnMOMh+zQt5TBkeAMezjLbuDmz1V QkZDzJ54Hwvj68OPKsB+KV9g9OB+44T7j2aBviSV37gAhWVOZlIT9SL53fhZreuq M6W6j090fl0q+FI4pqk7wxyp+ZiQTTYTwh8JpVpbUFSNw0hOLLq0GEcil+5ZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU4hRzCt9yl7x/Eihrttd/m7kz3twwHwYDVR0j BBgwFoAU21u9swIQMU6QQLbJnb9p7oX6TuEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzMvREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4NUZBNEVFMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9EQjVCQkRCMzAyMTAzMTRFOTA0MEI2Qzk5 REJGNjlFRTg1RkE0RUUxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzNmOTllNjZkLTRjN2ItNDEzMC05MWQ1LTRmYmQ4NDM1Nzc5Mi8zL0RCNUJCREIz MDIxMDMxNEU5MDQwQjZDOTlEQkY2OUVFODVGQTRFRTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB4Sk+a wj0o0gz1YY175UK7i+o4XkBE8yc27l67lw7LNrg4Tz3dLFiFZr8KMLjxzJCQ59pq gNW/Pu0aWchRD0SQau5Z32DdCti0G+OwIVsNeG5D5jWh1Q+0nDhjVzuvb6Yy1gKZ 9seoJBlL2/yGYuHmUV/MfwZivpjcVZ6jRzELkV3SvEY3ecxlnp/XdhTAm8TkHCvg F++RgHbzqmpZ3bveg23WLhjW4Id5tBp86O9b09GmNoNGq3C3IHv7tJYexbpfW7eD rDE7hoxL2cfKb/6/IoJojHWbfGIaLjDk0aehtEgB9CJr5n6hx3m4w3iAD+nxoNoo 0miYQ1wu4jXlJ0Qa -----END CERTIFICATE-----Generated at Fri Apr 17 16:31:38 2026 by rpki-client