$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft File: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft (raw, json) Hash identifier: mmOsgZEwvYUSEl/Fb5z3E6eI9IKgcPCUFTfhcrDlv7c= Subject key identifier: 74:AF:CC:0E:0A:A7:C5:82:08:45:1F:A2:66:D4:30:C7:94:1F:3D:88 Authority key identifier: 5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F Certificate issuer: /CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Certificate serial: 5CD501F19E67649B768FA639DF24F63DAE44808F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft Manifest number: 0144 Signing time: Sun 01 Mar 2026 14:48:51 +0000 Manifest this update: Sun 01 Mar 2026 14:43:51 +0000 Manifest next update: Mon 02 Mar 2026 15:48:51 +0000 Files and hashes: 1: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl (hash: DJeB8HywbJCbCg58kc66xSaWw+5K9/968gwRYSRCOg4=) 2: 326130363a396634313a3130303a3a2f34302d3430203d3e20323134373233.roa (hash: sTs8O8KBp3/QEgTlhnDJhb+nhykdynr848iPv4Z/TIo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:d5:01:f1:9e:67:64:9b:76:8f:a6:39:df:24:f6:3d:ae:44:80:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Validity Not Before: Mar 1 14:43:51 2026 GMT Not After : Mar 2 15:48:51 2026 GMT Subject: CN=74AFCC0E0AA7C58208451FA266D430C7941F3D88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fd:0d:3a:25:41:5d:9e:62:13:ff:06:66:f6: f8:19:cb:67:a4:ff:4c:8e:e4:89:42:ef:2b:10:b5: ed:34:b1:d9:86:c3:64:80:04:44:3b:0a:85:1b:83: ed:6f:69:c9:b3:5b:40:6a:fc:d2:d6:a7:c7:d5:36: 9b:fe:34:5c:62:5e:a7:22:69:fb:20:9d:5d:33:b2: cc:0e:98:cc:0c:b9:7a:5e:b6:4e:b8:1c:41:a3:1b: 85:58:60:9a:c8:94:d9:92:c0:a4:3a:43:a2:6a:2b: 30:88:d0:51:78:c7:cf:7e:31:2c:e2:a0:ea:9b:c8: 65:71:5d:63:ec:4f:fd:9f:0a:e0:04:63:3c:7e:b8: 09:1b:21:ce:15:52:1e:9b:e8:4d:16:a0:1e:9e:05: 8d:73:37:c2:34:59:ef:9c:39:bb:60:c5:f6:c8:78: 59:26:2d:a6:07:a2:8b:de:e4:d1:c5:58:f8:bd:13: 90:9b:ec:b4:b9:0c:52:bb:57:18:a6:47:46:a0:cd: 86:f2:cf:49:75:d4:26:f0:58:1d:c5:e3:0b:d2:5e: f7:63:56:1b:9c:09:42:51:e0:c6:5e:df:b7:fd:99: 94:89:ad:0c:07:f4:ee:f0:a3:3c:33:69:67:f1:8d: af:f4:6a:8c:3a:72:71:a4:7e:e1:3f:a8:5f:bf:55: 98:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:AF:CC:0E:0A:A7:C5:82:08:45:1F:A2:66:D4:30:C7:94:1F:3D:88 X509v3 Authority Key Identifier: keyid:5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:2e:33:3d:f6:eb:d0:01:16:50:cd:f7:e2:7f:a8:1a:16:45: cd:90:4b:d3:3b:0a:2c:c9:d5:33:6a:79:ce:3f:6b:96:db:0d: ea:ed:d6:66:3b:67:54:44:e3:48:1b:14:8e:fa:fd:88:07:ee: 7a:93:2f:77:d0:c5:24:60:a4:67:82:94:75:20:37:e5:8c:21: 9a:8b:23:55:a9:bb:a5:22:fa:d9:dd:e0:6d:ca:18:4a:86:76: 4e:a7:19:69:9e:be:c8:98:dd:25:2f:75:09:58:b3:07:e1:f6: 63:17:6b:7d:07:d1:67:0a:07:1c:e8:b2:a5:1d:44:b5:dd:0e: fc:95:59:49:4c:b3:ea:21:6a:d1:50:56:d6:22:ad:40:2e:d2: ae:70:9d:07:c3:1e:7a:5e:68:50:0d:b6:a6:a9:ef:32:2b:07: 63:fe:aa:ac:b1:fd:eb:e4:d7:ed:4a:0d:3d:8f:93:bc:9c:c8: 17:58:80:dd:21:21:bb:d0:d9:17:b6:22:68:d9:1b:fc:61:ce: b6:5d:74:a6:ac:33:dd:51:6c:8f:16:51:80:43:61:56:65:4a: 63:3a:9e:c2:54:11:53:ac:7a:24:06:f2:e3:f5:7f:d9:aa:e8: ad:26:7f:69:67:2d:4a:a0:19:bc:25:fe:ca:63:4d:7f:12:64: 57:c8:d2:42 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXNUB8Z5nZJt2j6Y53yT2Pa5EgI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQw QkY1OTE1RjAeFw0yNjAzMDExNDQzNTFaFw0yNjAzMDIxNTQ4NTFaMDMxMTAvBgNV BAMTKDc0QUZDQzBFMEFBN0M1ODIwODQ1MUZBMjY2RDQzMEM3OTQxRjNEODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8/Q06JUFdnmIT/wZm9vgZy2ek /0yO5IlC7ysQte00sdmGw2SABEQ7CoUbg+1vacmzW0Bq/NLWp8fVNpv+NFxiXqci afsgnV0zsswOmMwMuXpetk64HEGjG4VYYJrIlNmSwKQ6Q6JqKzCI0FF4x89+MSzi oOqbyGVxXWPsT/2fCuAEYzx+uAkbIc4VUh6b6E0WoB6eBY1zN8I0We+cObtgxfbI eFkmLaYHoove5NHFWPi9E5Cb7LS5DFK7VximR0agzYbyz0l11CbwWB3F4wvSXvdj VhucCUJR4MZe37f9mZSJrQwH9O7wozwzaWfxja/0aow6cnGkfuE/qF+/VZibAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUdK/MDgqnxYIIRR+iZtQwx5QfPYgwHwYDVR0j BBgwFoAUWj94GTU84P0TuP/Ny4g37Qv1kV8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzUvNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQwQkY1OTE1Ri5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03ZWIzLTRm NjMtYTE1OS1jZmYwMmMwMjZhYmYvMi81QTNGNzgxOTM1M0NFMEZEMTNCOEZGQ0RD Qjg4MzdFRDBCRjU5MTVGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy81LzVBM0Y3ODE5 MzUzQ0UwRkQxM0I4RkZDRENCODgzN0VEMEJGNTkxNUYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/LjM9 9uvQARZQzffif6gaFkXNkEvTOwosydUzannOP2uW2w3q7dZmO2dURONIGxSO+v2I B+56ky930MUkYKRngpR1IDfljCGaiyNVqbulIvrZ3eBtyhhKhnZOpxlpnr7ImN0l L3UJWLMH4fZjF2t9B9FnCgcc6LKlHUS13Q78lVlJTLPqIWrRUFbWIq1ALtKucJ0H wx56XmhQDbamqe8yKwdj/qqssf3r5NftSg09j5O8nMgXWIDdISG70NkXtiJo2Rv8 Yc62XXSmrDPdUWyPFlGAQ2FWZUpjOp7CVBFTrHokBvLj9X/ZquitJn9pZy1KoBm8 Jf7KY01/EmRXyNJC -----END CERTIFICATE-----Generated at Mon Mar 2 00:08:37 2026 by rpki-client