$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft File: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft (raw, json) Hash identifier: Ugb2KaCbomnbVnJYxYVwXOt/xg/zBAgOsgbNq4jUwOw= Subject key identifier: D6:35:61:2C:89:0B:8B:C9:7E:AF:93:5E:D0:4E:0F:DF:0A:35:1C:66 Authority key identifier: 5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F Certificate issuer: /CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Certificate serial: 788BC6EA07925917AEF432225876FCA85CBAFC11 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft Manifest number: 020B Signing time: Tue 28 Jul 2026 04:23:27 +0000 Manifest this update: Tue 28 Jul 2026 04:18:27 +0000 Manifest next update: Wed 29 Jul 2026 06:30:27 +0000 Files and hashes: 1: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl (hash: XFzkMVxZr6MnJ/WWyvfr2NtSdQYrdKbdpnc7tx8ylQ4=) 2: 326130363a396634313a3130303a3a2f34302d3430203d3e20323134373233.roa (hash: OJ83dTsr9Gt4avvo3q3A4eeFV71yGziVsKE7L0soTmM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 02:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:8b:c6:ea:07:92:59:17:ae:f4:32:22:58:76:fc:a8:5c:ba:fc:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Validity Not Before: Jul 28 04:18:27 2026 GMT Not After : Jul 29 06:30:27 2026 GMT Subject: CN=D635612C890B8BC97EAF935ED04E0FDF0A351C66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d1:a7:1b:0a:e6:c4:c6:a5:6c:83:d7:3a:d2: d7:de:31:2a:70:16:35:ab:a1:97:7d:98:c5:02:99: 60:87:a6:91:38:40:f1:c3:09:09:bc:c4:28:7c:1b: 90:0c:0e:b7:3f:b4:91:08:ea:2b:5f:60:29:de:c6: 9d:06:43:70:c0:56:b8:cb:1d:f0:e3:f4:6f:1c:41: 62:cc:df:a5:30:13:8b:f9:1f:d8:12:04:cb:52:9b: 8a:3f:aa:77:bc:f0:6c:23:97:06:71:b5:54:18:de: 3f:0e:98:1e:ba:a1:5f:08:be:5a:05:8f:0d:1f:f1: 9d:7c:c1:d7:89:63:76:81:69:de:40:3d:f0:ed:3d: 54:0b:e7:52:7a:8c:11:1f:f1:d3:28:e8:09:f3:f7: 97:43:47:f1:f9:cb:da:00:b0:9a:72:db:97:ad:e8: 5c:e6:14:3f:24:95:28:3f:37:49:31:4d:47:40:0a: 74:cd:3f:21:b0:05:ef:0a:9b:18:be:39:c4:aa:c8: 5e:2e:3e:e3:cf:61:e2:27:23:cc:51:61:66:23:a5: 4b:3d:6f:cc:1f:3c:3e:13:a8:c2:20:39:d1:8b:73: 19:9a:78:bb:5e:57:ee:5f:7a:b8:56:47:0d:cb:e4: 29:9c:e8:ec:15:ce:47:1d:d1:c9:e2:dd:b3:4d:4e: 85:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:35:61:2C:89:0B:8B:C9:7E:AF:93:5E:D0:4E:0F:DF:0A:35:1C:66 X509v3 Authority Key Identifier: keyid:5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:5d:49:0d:28:f6:7d:18:c4:d5:9c:bf:0a:e5:25:b1:a4:9d: 18:a7:df:8c:16:03:1a:64:94:06:c4:80:a6:59:fb:2a:72:52: 8c:00:e8:6c:f0:da:99:ac:94:15:48:b5:cd:e7:a8:5b:0c:3c: de:78:fc:6f:ae:7a:ce:7e:4d:f6:10:c0:d8:d4:e4:96:a3:56: c1:b0:be:28:c9:86:35:f8:3b:3a:ab:5e:ba:3d:6f:67:04:e8: 69:f9:4b:db:cd:1b:9a:3b:8c:35:bf:f3:4d:22:0a:31:9d:1f: 9f:c5:39:37:a1:5e:8d:d8:fa:74:00:85:bf:c1:7c:51:4a:d3: ff:31:28:48:d3:38:43:af:f0:e1:65:16:b2:d1:84:e4:55:06: 3e:9c:41:3b:c9:f3:7d:11:92:b3:f9:5d:02:3b:27:24:76:23: b9:50:37:ad:d2:e2:5b:1d:28:4d:5f:d2:d1:e5:52:2c:00:fc: f0:27:88:ab:41:18:88:ef:72:d1:d0:77:62:86:5a:ae:b5:b6: c6:52:71:51:98:bb:91:a2:ee:29:e2:59:ad:a9:dc:64:d2:60: 5a:ae:da:19:18:43:8e:0c:d1:c1:63:00:a7:99:d0:ba:f5:5e: f7:0b:f9:fb:a5:d6:ec:62:62:a2:08:78:65:c2:52:74:23:32: 13:e9:af:ac -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUeIvG6geSWReu9DIiWHb8qFy6/BEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQw QkY1OTE1RjAeFw0yNjA3MjgwNDE4MjdaFw0yNjA3MjkwNjMwMjdaMDMxMTAvBgNV BAMTKEQ2MzU2MTJDODkwQjhCQzk3RUFGOTM1RUQwNEUwRkRGMEEzNTFDNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP0acbCubExqVsg9c60tfeMSpw FjWroZd9mMUCmWCHppE4QPHDCQm8xCh8G5AMDrc/tJEI6itfYCnexp0GQ3DAVrjL HfDj9G8cQWLM36UwE4v5H9gSBMtSm4o/qne88GwjlwZxtVQY3j8OmB66oV8IvloF jw0f8Z18wdeJY3aBad5APfDtPVQL51J6jBEf8dMo6Anz95dDR/H5y9oAsJpy25et 6FzmFD8klSg/N0kxTUdACnTNPyGwBe8Kmxi+OcSqyF4uPuPPYeInI8xRYWYjpUs9 b8wfPD4TqMIgOdGLcxmaeLteV+5ferhWRw3L5Cmc6OwVzkcd0cni3bNNToWtAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU1jVhLIkLi8l+r5Ne0E4P3wo1HGYwHwYDVR0j BBgwFoAUWj94GTU84P0TuP/Ny4g37Qv1kV8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzUvNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQwQkY1OTE1Ri5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03ZWIzLTRm NjMtYTE1OS1jZmYwMmMwMjZhYmYvMi81QTNGNzgxOTM1M0NFMEZEMTNCOEZGQ0RD Qjg4MzdFRDBCRjU5MTVGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy81LzVBM0Y3ODE5 MzUzQ0UwRkQxM0I4RkZDRENCODgzN0VEMEJGNTkxNUYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB9XUkN KPZ9GMTVnL8K5SWxpJ0Yp9+MFgMaZJQGxICmWfsqclKMAOhs8NqZrJQVSLXN56hb DDzeePxvrnrOfk32EMDY1OSWo1bBsL4oyYY1+Ds6q166PW9nBOhp+UvbzRuaO4w1 v/NNIgoxnR+fxTk3oV6N2Pp0AIW/wXxRStP/MShI0zhDr/DhZRay0YTkVQY+nEE7 yfN9EZKz+V0COyckdiO5UDet0uJbHShNX9LR5VIsAPzwJ4irQRiI73LR0Hdihlqu tbbGUnFRmLuRou4p4lmtqdxk0mBartoZGEOODNHBYwCnmdC69V73C/n7pdbsYmKi CHhlwlJ0IzIT6a+s -----END CERTIFICATE-----Generated at Tue Jul 28 17:09:44 2026 by rpki-client