$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft File: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft (raw, json) Hash identifier: CZU9eKQvsXeI913I1JSRKuJDhmnLyh6cLEKedFID1wk= Subject key identifier: D3:88:C3:3D:B9:06:2A:BE:87:73:DB:89:A5:BE:53:96:0D:5E:B4:6A Authority key identifier: DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 Certificate issuer: /CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Certificate serial: 1DD35A9CDDCCBC6C3FA937C6F20CDA16520DADD6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft Manifest number: CE Signing time: Sat 13 Jun 2026 13:59:48 +0000 Manifest this update: Sat 13 Jun 2026 13:54:48 +0000 Manifest next update: Sun 14 Jun 2026 16:39:48 +0000 Files and hashes: 1: 326130663a316363353a326430333a3a2f34382d3438203d3e20323134393535.roa (hash: FhiRWcOhFd1e57IfPQu+2j0uinj7188+3VOrSYUtQ6c=) 2: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl (hash: TIb3+PjvAx3ObaWoKQuKK5HZmlO0LODqmQyA+CmGPeQ=) 3: 326130663a316363353a326430313a3a2f34382d3438203d3e20323134393535.roa (hash: l0RMqMiAhgGDzLpuD3ZJuPudrozfegvLREqyl+4aP2I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 16:39:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:d3:5a:9c:dd:cc:bc:6c:3f:a9:37:c6:f2:0c:da:16:52:0d:ad:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Validity Not Before: Jun 13 13:54:48 2026 GMT Not After : Jun 14 16:39:48 2026 GMT Subject: CN=D388C33DB9062ABE8773DB89A5BE53960D5EB46A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:82:ef:8f:4e:51:51:54:7c:ad:aa:74:6b:47: 57:49:95:8c:5b:b0:d8:0b:7c:52:d9:32:37:14:9a: 23:61:58:f8:31:f4:df:53:b8:90:35:c2:ea:a6:51: df:e9:a6:33:33:05:78:76:25:13:31:b0:b8:d8:11: 98:10:98:32:31:53:b6:ea:82:fb:9d:44:06:d7:ec: 08:99:8e:2d:37:01:50:f6:b8:59:7f:61:24:65:25: 91:83:2e:9b:d0:ba:09:0a:4e:51:8d:89:14:55:cc: 12:95:bb:87:f5:29:54:be:ea:92:e4:1d:3f:22:2d: 19:3d:ba:fc:33:e8:d4:80:4f:c8:31:d6:19:f6:82: 69:de:5e:62:f0:f3:de:84:46:29:87:50:db:b9:8a: 2d:e4:aa:d4:b7:81:4f:49:23:45:b3:9e:2c:87:dd: 4e:ed:7d:af:80:3d:0d:7c:a2:2b:13:33:04:a6:c3: 10:12:5b:aa:59:2c:7f:5a:e9:bb:ff:00:a9:3f:8c: b2:c8:bb:20:d4:96:e4:44:62:3f:97:75:0b:2b:6b: e8:33:6e:bd:55:35:47:fd:c8:26:91:d2:99:86:ee: bf:56:df:74:d7:7a:0f:bf:f3:60:8b:97:5d:48:23: a4:aa:38:a1:ec:86:6b:9d:e8:10:79:83:4d:55:99: 2a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:88:C3:3D:B9:06:2A:BE:87:73:DB:89:A5:BE:53:96:0D:5E:B4:6A X509v3 Authority Key Identifier: keyid:DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ec:5e:68:8b:24:ec:55:3a:b9:4f:02:51:7d:af:83:dd:39: f8:b5:e8:2b:7e:d8:b1:04:29:aa:db:78:e3:c1:f4:5c:35:0e: 60:15:ff:03:2d:5a:bb:69:3c:9d:b9:00:76:c3:24:5a:2d:f8: 78:8e:1f:d8:95:50:2d:a7:6e:03:56:68:bf:0b:cd:a0:83:c1: 46:ca:0e:2f:bf:80:9e:08:bc:e2:d2:34:fd:90:15:b4:7f:43: ff:85:c8:ef:ab:16:e7:83:da:55:48:56:36:58:b0:dd:fe:75: 07:7b:ce:50:1a:25:7b:cf:75:96:05:0f:19:c2:5e:ae:ca:47: 1c:8e:2e:ff:b8:e0:98:b8:b3:f3:bb:78:d9:d6:22:02:f2:c3: da:57:a3:77:ea:91:8f:6a:a2:33:89:93:1c:65:7a:b8:3d:ac: 2a:19:ec:16:85:4b:e0:d1:9a:94:1b:4e:73:93:a4:f4:d8:d7: 36:15:04:51:47:a3:02:ea:71:c8:f1:b2:6a:05:59:7a:7d:c6: 1b:25:ae:f0:c8:d3:d6:bb:68:a2:31:33:1e:c4:2b:4f:c7:59: 4d:4b:c5:00:f0:93:cb:24:0a:68:a5:44:d5:b5:5f:16:06:fc: 31:bb:31:4e:50:8c:eb:e8:a8:2e:3f:2d:ee:bf:c2:00:4b:82: 09:44:05:a0 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUHdNanN3MvGw/qTfG8gzaFlINrdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4 NUZBNEVFMTAeFw0yNjA2MTMxMzU0NDhaFw0yNjA2MTQxNjM5NDhaMDMxMTAvBgNV BAMTKEQzODhDMzNEQjkwNjJBQkU4NzczREI4OUE1QkU1Mzk2MEQ1RUI0NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAgu+PTlFRVHytqnRrR1dJlYxb sNgLfFLZMjcUmiNhWPgx9N9TuJA1wuqmUd/ppjMzBXh2JRMxsLjYEZgQmDIxU7bq gvudRAbX7AiZji03AVD2uFl/YSRlJZGDLpvQugkKTlGNiRRVzBKVu4f1KVS+6pLk HT8iLRk9uvwz6NSAT8gx1hn2gmneXmLw896ERimHUNu5ii3kqtS3gU9JI0WzniyH 3U7tfa+APQ18oisTMwSmwxASW6pZLH9a6bv/AKk/jLLIuyDUluREYj+XdQsra+gz br1VNUf9yCaR0pmG7r9W33TXeg+/82CLl11II6SqOKHshmud6BB5g01VmSrbAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU04jDPbkGKr6Hc9uJpb5Tlg1etGowHwYDVR0j BBgwFoAU21u9swIQMU6QQLbJnb9p7oX6TuEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzMvREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4NUZBNEVFMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9EQjVCQkRCMzAyMTAzMTRFOTA0MEI2Qzk5 REJGNjlFRTg1RkE0RUUxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzNmOTllNjZkLTRjN2ItNDEzMC05MWQ1LTRmYmQ4NDM1Nzc5Mi8zL0RCNUJCREIz MDIxMDMxNEU5MDQwQjZDOTlEQkY2OUVFODVGQTRFRTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBq7F5o iyTsVTq5TwJRfa+D3Tn4tegrftixBCmq23jjwfRcNQ5gFf8DLVq7aTyduQB2wyRa Lfh4jh/YlVAtp24DVmi/C82gg8FGyg4vv4CeCLzi0jT9kBW0f0P/hcjvqxbng9pV SFY2WLDd/nUHe85QGiV7z3WWBQ8Zwl6uykccji7/uOCYuLPzu3jZ1iIC8sPaV6N3 6pGPaqIziZMcZXq4PawqGewWhUvg0ZqUG05zk6T02Nc2FQRRR6MC6nHI8bJqBVl6 fcYbJa7wyNPWu2iiMTMexCtPx1lNS8UA8JPLJApopUTVtV8WBvwxuzFOUIzr6Kgu Py3uv8IAS4IJRAWg -----END CERTIFICATE-----Generated at Sun Jun 14 02:51:00 2026 by rpki-client