$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft File: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft (raw, json) Hash identifier: Dx2tXmMQ/6VMsRLrm3eD34trab2lHpESiy2YrEES67g= Subject key identifier: CD:4C:73:0F:17:A5:B2:88:51:8C:4C:7C:B6:F4:28:0D:CF:E9:F7:76 Authority key identifier: DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 Certificate issuer: /CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Certificate serial: 381CE4943EEBFF444466BF790F392BEC5096D1B1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft Manifest number: 015A Signing time: Sun 20 Sep 2026 21:17:41 +0000 Manifest this update: Sun 20 Sep 2026 21:12:41 +0000 Manifest next update: Tue 22 Sep 2026 00:40:41 +0000 Files and hashes: 1: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl (hash: uulKWDFF7WLWN37hyFXGLRFFlyYMbUPbAv9n0QGZLlk=) 2: 326130663a316363353a326430313a3a2f34382d3438203d3e20323134393535.roa (hash: l0RMqMiAhgGDzLpuD3ZJuPudrozfegvLREqyl+4aP2I=) 3: 326130663a316363353a326430333a3a2f34382d3438203d3e20323134393535.roa (hash: FhiRWcOhFd1e57IfPQu+2j0uinj7188+3VOrSYUtQ6c=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 15:21:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:1c:e4:94:3e:eb:ff:44:44:66:bf:79:0f:39:2b:ec:50:96:d1:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Validity Not Before: Sep 20 21:12:41 2026 GMT Not After : Sep 22 00:40:41 2026 GMT Subject: CN=CD4C730F17A5B288518C4C7CB6F4280DCFE9F776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:19:d0:4e:47:e8:5f:cf:41:fa:9c:45:5a:0d: c8:75:5a:31:56:f6:3a:41:ca:e1:2f:78:7d:41:60: a0:a0:76:e0:30:f4:42:f2:74:1b:1e:39:f4:48:d6: 06:f2:d6:56:3d:71:d8:72:41:73:df:ae:5d:79:83: 84:07:8d:90:8b:7e:d0:2e:e8:7b:92:93:16:25:a9: 85:fd:4c:3a:3b:9f:76:9f:f6:2a:07:4b:0a:3c:5b: 69:1d:3e:66:74:81:5c:ea:54:79:bf:22:80:14:37: b1:a3:81:c8:65:4c:ea:71:0a:a4:a7:1a:d4:52:f6: 54:e9:2a:1f:69:36:e0:cf:9e:7a:0f:83:5c:3d:45: be:c0:83:a4:df:64:52:f8:92:36:8c:53:49:80:a6: 42:ba:6a:06:1a:18:4e:fa:e0:9f:96:de:e7:2b:86: e8:12:88:54:6c:f0:f3:39:1c:99:ce:9c:3c:e2:34: 19:b3:8c:cf:f3:66:d6:cf:dd:7c:62:0f:75:96:aa: 84:06:58:fc:cf:33:f7:fb:68:58:29:8e:dc:b8:c8: 7e:55:b3:df:87:e2:e7:3f:b8:8e:66:78:10:05:19: ca:58:0a:aa:71:a4:4e:38:3c:98:14:b9:46:4c:a4: 83:2b:72:1d:15:81:a5:3f:21:7f:a0:97:db:70:98: 0b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:4C:73:0F:17:A5:B2:88:51:8C:4C:7C:B6:F4:28:0D:CF:E9:F7:76 X509v3 Authority Key Identifier: keyid:DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:ae:92:78:a9:97:94:a7:c4:aa:d5:0c:27:ac:80:c3:97:aa: 03:99:a2:87:76:e9:e2:b0:61:42:06:85:33:97:57:f7:59:76: f5:9b:52:f8:f9:59:a6:c7:31:54:eb:3d:c3:5b:6a:b6:a7:74: e8:2f:2e:3a:26:6e:3e:c6:a8:d5:13:71:43:a7:e6:4c:cd:ce: b5:dc:ce:00:83:25:4f:cd:8c:90:5d:62:02:c5:d4:32:9e:93: 09:f9:88:5f:15:bc:2f:8e:10:9c:49:05:a9:74:6a:0a:8b:3a: 7e:43:6d:80:cc:c2:0c:7c:2b:73:c5:3e:ae:d6:59:84:7b:28: 78:97:c9:92:73:d3:b7:88:86:89:04:78:00:e0:05:65:84:bd: 06:90:cb:aa:07:d2:9e:e8:11:70:83:7f:3b:26:bc:28:3e:55: b8:45:82:0b:29:27:4f:8c:75:44:99:a6:6f:a9:35:19:7f:27: 63:dd:e1:ee:27:7c:b6:7d:f1:1a:05:8d:bc:a8:3f:b9:a9:ef: 48:6c:ad:8d:5c:bd:03:cc:dc:fc:f0:06:21:56:d9:1b:07:52: 58:54:e2:22:05:4c:4a:4a:83:3a:d6:c1:5c:e5:fa:32:76:4b: 5b:5d:91:28:ff:91:ba:87:c3:f5:ba:96:ce:30:9f:b8:2e:09: 0d:d5:2f:38 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUOBzklD7r/0REZr95Dzkr7FCW0bEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4 NUZBNEVFMTAeFw0yNjA5MjAyMTEyNDFaFw0yNjA5MjIwMDQwNDFaMDMxMTAvBgNV BAMTKENENEM3MzBGMTdBNUIyODg1MThDNEM3Q0I2RjQyODBEQ0ZFOUY3NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUGdBOR+hfz0H6nEVaDch1WjFW 9jpByuEveH1BYKCgduAw9ELydBseOfRI1gby1lY9cdhyQXPfrl15g4QHjZCLftAu 6HuSkxYlqYX9TDo7n3af9ioHSwo8W2kdPmZ0gVzqVHm/IoAUN7GjgchlTOpxCqSn GtRS9lTpKh9pNuDPnnoPg1w9Rb7Ag6TfZFL4kjaMU0mApkK6agYaGE764J+W3ucr hugSiFRs8PM5HJnOnDziNBmzjM/zZtbP3XxiD3WWqoQGWPzPM/f7aFgpjty4yH5V s9+H4uc/uI5meBAFGcpYCqpxpE44PJgUuUZMpIMrch0VgaU/IX+gl9twmAsBAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUzUxzDxelsohRjEx8tvQoDc/p93YwHwYDVR0j BBgwFoAU21u9swIQMU6QQLbJnb9p7oX6TuEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzMvREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4NUZBNEVFMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9EQjVCQkRCMzAyMTAzMTRFOTA0MEI2Qzk5 REJGNjlFRTg1RkE0RUUxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzNmOTllNjZkLTRjN2ItNDEzMC05MWQ1LTRmYmQ4NDM1Nzc5Mi8zL0RCNUJCREIz MDIxMDMxNEU5MDQwQjZDOTlEQkY2OUVFODVGQTRFRTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAFrpJ4 qZeUp8Sq1QwnrIDDl6oDmaKHdunisGFCBoUzl1f3WXb1m1L4+VmmxzFU6z3DW2q2 p3ToLy46Jm4+xqjVE3FDp+ZMzc613M4AgyVPzYyQXWICxdQynpMJ+YhfFbwvjhCc SQWpdGoKizp+Q22AzMIMfCtzxT6u1lmEeyh4l8mSc9O3iIaJBHgA4AVlhL0GkMuq B9Ke6BFwg387JrwoPlW4RYILKSdPjHVEmaZvqTUZfydj3eHuJ3y2ffEaBY28qD+5 qe9IbK2NXL0DzNz88AYhVtkbB1JYVOIiBUxKSoM61sFc5foydktbXZEo/5G6h8P1 upbOMJ+4LgkN1S84 -----END CERTIFICATE-----Generated at Mon Sep 21 05:19:26 2026 by rpki-client