$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft File: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft (raw, json) Hash identifier: 1GBExe/KSPEiH5SEp9LTVL53CtOAVC1YgPI9uyc5d+w= Subject key identifier: 32:08:2A:C6:35:EA:B0:29:C3:AE:E9:2E:DA:66:88:8D:AB:3F:77:02 Authority key identifier: DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 Certificate issuer: /CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Certificate serial: 24B683C05492E0EC51A4B0777A02448E48458BE0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft Manifest number: 40 Signing time: Sun 01 Mar 2026 14:51:59 +0000 Manifest this update: Sun 01 Mar 2026 14:46:59 +0000 Manifest next update: Mon 02 Mar 2026 16:03:59 +0000 Files and hashes: 1: 326130663a316363353a326430323a3a2f34382d3438203d3e20323134393535.roa (hash: VVawYWTXQjQEBU4mla6uw3/riEywDPfxqIz2zpx9eTU=) 2: 326130663a316363353a326430313a3a2f34382d3438203d3e20323134393535.roa (hash: l0RMqMiAhgGDzLpuD3ZJuPudrozfegvLREqyl+4aP2I=) 3: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl (hash: dio1su8E8xF4Z0BtGH+bKC7Ep7BJUkZGpDehX39q0YM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:b6:83:c0:54:92:e0:ec:51:a4:b0:77:7a:02:44:8e:48:45:8b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Validity Not Before: Mar 1 14:46:59 2026 GMT Not After : Mar 2 16:03:59 2026 GMT Subject: CN=32082AC635EAB029C3AEE92EDA66888DAB3F7702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2c:d9:68:2d:64:0d:2f:26:47:09:8a:9a:94: 72:dc:d2:b4:a1:a0:66:a1:39:6d:7b:7f:dc:d8:35: 16:41:ca:ca:21:88:3e:04:82:11:d6:a7:9f:32:05: 9c:02:05:1e:cb:e2:8e:ec:db:b4:d0:70:2c:17:6b: e9:f6:a2:b3:1c:79:64:04:d4:13:fe:c4:0e:90:5c: 01:7b:ac:69:06:50:23:a7:bb:47:58:b1:bd:9e:83: b9:ef:71:d0:ed:22:dd:bc:71:76:87:1a:12:9b:b5: ee:06:b7:4c:e9:95:25:f8:2e:fa:54:89:64:db:8a: 3f:6d:0e:3e:26:1f:40:27:4a:0d:6d:cc:12:8f:ba: f0:bd:77:06:66:e1:c1:fa:e1:02:fd:6f:8d:0f:b2: 98:4a:05:15:71:99:fa:b1:3d:cf:92:5d:1f:99:f4: 2d:ca:b2:c3:9d:3c:df:bc:1a:ee:6e:2f:44:29:f6: 2b:d0:d2:c2:45:38:48:93:81:0e:14:58:c7:e9:13: 40:1f:44:03:02:67:60:6f:61:c5:80:45:78:ab:d8: 64:4c:c0:8b:97:0d:73:92:65:ec:63:11:47:4f:5e: 90:3c:a0:2c:3a:55:b1:22:e1:26:0e:93:cc:11:d3: 8d:ad:94:db:a1:da:ee:89:ae:0f:ca:23:26:b2:a8: 43:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:08:2A:C6:35:EA:B0:29:C3:AE:E9:2E:DA:66:88:8D:AB:3F:77:02 X509v3 Authority Key Identifier: keyid:DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:3b:59:ac:4a:8a:04:36:9b:ea:3d:2c:6d:4b:d2:c2:7d:f8: 38:28:d2:1f:1b:9a:58:3d:4f:23:3a:d0:6c:da:d8:dd:98:eb: 9a:79:1c:28:d0:7f:e3:e0:e8:27:6a:94:58:14:7b:1b:92:84: 58:b6:16:14:4f:8f:cd:85:37:9e:bc:c0:6f:6d:2f:d8:4d:83: 8c:c7:3b:b0:18:1e:ec:9e:0e:53:1c:af:c8:a1:fb:7c:29:d5: 89:33:c5:b0:1c:b6:3c:5a:ed:d7:80:4a:ec:a9:d7:0e:8a:90: df:1a:cd:59:60:d1:a4:27:0f:f1:ad:ec:ab:b1:77:39:da:05: c8:7f:2d:92:ae:ce:c1:cc:70:25:e9:ed:12:47:21:43:e3:48: 81:f3:c6:ff:46:7a:44:c3:76:b9:a2:ec:6d:6a:2d:7f:61:8f: ab:e9:5a:2d:f3:72:fc:64:ee:1d:6d:db:cb:60:2c:39:2c:8f: 14:0c:73:8b:d0:f3:23:0e:ca:86:ed:fc:2a:43:ee:65:ad:b5: 4c:a4:bf:a9:fe:35:9f:4e:43:e8:11:1c:27:5a:49:aa:49:57: d9:e0:2b:24:e3:79:b9:e5:6c:20:d2:b8:04:6f:4c:00:37:cb: 07:b7:5e:8e:54:93:3e:27:fa:97:2f:dd:78:3f:06:85:b2:ae: 4a:f5:f5:d4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUJLaDwFSS4OxRpLB3egJEjkhFi+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4 NUZBNEVFMTAeFw0yNjAzMDExNDQ2NTlaFw0yNjAzMDIxNjAzNTlaMDMxMTAvBgNV BAMTKDMyMDgyQUM2MzVFQUIwMjlDM0FFRTkyRURBNjY4ODhEQUIzRjc3MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCILNloLWQNLyZHCYqalHLc0rSh oGahOW17f9zYNRZBysohiD4EghHWp58yBZwCBR7L4o7s27TQcCwXa+n2orMceWQE 1BP+xA6QXAF7rGkGUCOnu0dYsb2eg7nvcdDtIt28cXaHGhKbte4Gt0zplSX4LvpU iWTbij9tDj4mH0AnSg1tzBKPuvC9dwZm4cH64QL9b40PsphKBRVxmfqxPc+SXR+Z 9C3KssOdPN+8Gu5uL0Qp9ivQ0sJFOEiTgQ4UWMfpE0AfRAMCZ2BvYcWARXir2GRM wIuXDXOSZexjEUdPXpA8oCw6VbEi4SYOk8wR042tlNuh2u6Jrg/KIyayqENzAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUMggqxjXqsCnDruku2maIjas/dwIwHwYDVR0j BBgwFoAU21u9swIQMU6QQLbJnb9p7oX6TuEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzMvREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4NUZBNEVFMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9EQjVCQkRCMzAyMTAzMTRFOTA0MEI2Qzk5 REJGNjlFRTg1RkE0RUUxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzNmOTllNjZkLTRjN2ItNDEzMC05MWQ1LTRmYmQ4NDM1Nzc5Mi8zL0RCNUJCREIz MDIxMDMxNEU5MDQwQjZDOTlEQkY2OUVFODVGQTRFRTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCKO1ms SooENpvqPSxtS9LCffg4KNIfG5pYPU8jOtBs2tjdmOuaeRwo0H/j4OgnapRYFHsb koRYthYUT4/NhTeevMBvbS/YTYOMxzuwGB7sng5THK/Ioft8KdWJM8WwHLY8Wu3X gErsqdcOipDfGs1ZYNGkJw/xreyrsXc52gXIfy2Srs7BzHAl6e0SRyFD40iB88b/ RnpEw3a5ouxtai1/YY+r6Vot83L8ZO4dbdvLYCw5LI8UDHOL0PMjDsqG7fwqQ+5l rbVMpL+p/jWfTkPoERwnWkmqSVfZ4Csk43m55Wwg0rgEb0wAN8sHt16OVJM+J/qX L914PwaFsq5K9fXU -----END CERTIFICATE-----Generated at Sun Mar 1 21:47:08 2026 by rpki-client