$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft File: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft (raw, json) Hash identifier: IWsiBSsWTSRUZdl7jAAtBUAOlgjEu7KDHgacdfIVtVM= Subject key identifier: 36:3E:7A:7E:64:E3:3A:C9:46:7A:37:BA:7A:0A:E8:B8:33:38:05:D9 Authority key identifier: 5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F Certificate issuer: /CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Certificate serial: 4B02E39CC1A91EC5682560EF7299853058DB8C20 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft Manifest number: 01CE Signing time: Sat 13 Jun 2026 00:58:13 +0000 Manifest this update: Sat 13 Jun 2026 00:53:13 +0000 Manifest next update: Sun 14 Jun 2026 03:08:13 +0000 Files and hashes: 1: 326130363a396634313a3130303a3a2f34302d3430203d3e20323134373233.roa (hash: OJ83dTsr9Gt4avvo3q3A4eeFV71yGziVsKE7L0soTmM=) 2: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl (hash: PFCTi4A+KHTRZA3Acs9YZWvLLgO7kJ3hguEn5dB23O0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:02:e3:9c:c1:a9:1e:c5:68:25:60:ef:72:99:85:30:58:db:8c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Validity Not Before: Jun 13 00:53:13 2026 GMT Not After : Jun 14 03:08:13 2026 GMT Subject: CN=363E7A7E64E33AC9467A37BA7A0AE8B8333805D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:60:2f:bd:87:e8:1c:1a:4d:88:15:6e:e0:25: 5b:3b:57:fc:95:4d:ca:26:0b:c8:8d:33:7c:9e:9d: b0:ce:b5:6a:88:5a:ec:be:c6:72:97:7f:4c:39:59: cf:4d:bd:95:fc:f1:eb:35:1a:ec:d4:c8:8c:db:32: ff:5e:7b:7c:df:66:f1:60:89:58:53:1e:2c:27:ca: 7d:b0:a5:e3:a0:7b:ba:a6:b6:bf:8f:3f:ca:2d:44: 28:bd:2b:28:f5:35:f8:75:3d:f5:ea:cd:66:48:b7: a4:d5:60:ca:15:73:79:4a:c6:71:30:d0:63:79:5f: 3e:be:e7:66:f7:16:e3:e6:05:bd:f9:1b:c3:b9:f5: 97:db:ae:27:ed:da:a8:0c:ed:3e:b7:d3:e0:a8:f1: fe:34:87:b5:4c:42:ef:32:0a:f8:02:47:79:8b:67: ee:22:5c:01:1a:3c:07:10:3f:a6:b4:c3:3b:45:40: bc:ab:3e:e3:a2:58:38:12:5b:22:dc:75:19:48:97: e0:4f:8a:30:f4:d0:d4:96:68:49:97:4a:f3:1f:25: 03:ae:72:41:4f:3a:78:b4:60:a0:33:bb:db:a6:3b: 35:87:6d:5b:a6:76:47:55:31:3b:58:33:01:a6:1d: 94:c4:58:e2:93:4f:fd:1e:b5:5d:ec:18:a6:1e:c7: 9f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3E:7A:7E:64:E3:3A:C9:46:7A:37:BA:7A:0A:E8:B8:33:38:05:D9 X509v3 Authority Key Identifier: keyid:5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:3a:e7:93:72:f6:fe:7f:50:45:59:9a:54:2e:ff:5e:fa:78: 6e:4c:8c:ac:d0:8e:a4:8c:ab:56:b7:b1:6f:6f:36:a6:9f:dc: 52:26:69:ce:04:13:9d:b8:aa:e7:8e:f8:32:b6:5b:e8:56:bc: 5f:66:c0:36:de:98:fe:19:3c:af:ab:b4:f6:8b:b7:f4:34:60: 5a:9d:c6:57:8d:b1:8e:25:15:e6:7a:bd:30:aa:41:c6:00:42: 8c:7c:f6:73:5a:3d:d8:65:a0:66:19:8f:59:71:df:03:8f:ec: cc:fc:3a:06:b9:70:a3:b0:af:53:6c:9b:ea:1f:02:8f:cf:ac: a7:15:1a:cb:59:13:8a:99:92:b8:67:96:fd:09:f7:3b:b6:d6: 37:3b:fd:2b:2d:9d:32:de:84:25:d9:b1:93:85:10:97:a9:73: bc:16:69:b7:99:88:8c:c9:b0:af:ea:aa:e7:61:fe:90:05:38: 07:8d:53:da:77:a7:d6:11:00:63:78:09:35:f0:b4:05:37:53: 82:61:42:c1:44:68:a4:a3:41:29:b0:80:42:aa:91:e3:a0:16: 31:c2:4d:bb:e1:fb:6d:e8:43:16:a6:0c:7c:66:10:c9:40:8e: d7:ef:da:29:ce:2c:a6:02:4d:b5:b3:e9:92:d9:19:93:64:02: db:8a:78:8e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSwLjnMGpHsVoJWDvcpmFMFjbjCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQw QkY1OTE1RjAeFw0yNjA2MTMwMDUzMTNaFw0yNjA2MTQwMzA4MTNaMDMxMTAvBgNV BAMTKDM2M0U3QTdFNjRFMzNBQzk0NjdBMzdCQTdBMEFFOEI4MzMzODA1RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaYC+9h+gcGk2IFW7gJVs7V/yV TcomC8iNM3yenbDOtWqIWuy+xnKXf0w5Wc9NvZX88es1GuzUyIzbMv9ee3zfZvFg iVhTHiwnyn2wpeOge7qmtr+PP8otRCi9Kyj1Nfh1PfXqzWZIt6TVYMoVc3lKxnEw 0GN5Xz6+52b3FuPmBb35G8O59Zfbrift2qgM7T630+Co8f40h7VMQu8yCvgCR3mL Z+4iXAEaPAcQP6a0wztFQLyrPuOiWDgSWyLcdRlIl+BPijD00NSWaEmXSvMfJQOu ckFPOni0YKAzu9umOzWHbVumdkdVMTtYMwGmHZTEWOKTT/0etV3sGKYex5/7AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUNj56fmTjOslGeje6egrouDM4BdkwHwYDVR0j BBgwFoAUWj94GTU84P0TuP/Ny4g37Qv1kV8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzUvNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQwQkY1OTE1Ri5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03ZWIzLTRm NjMtYTE1OS1jZmYwMmMwMjZhYmYvMi81QTNGNzgxOTM1M0NFMEZEMTNCOEZGQ0RD Qjg4MzdFRDBCRjU5MTVGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy81LzVBM0Y3ODE5 MzUzQ0UwRkQxM0I4RkZDRENCODgzN0VEMEJGNTkxNUYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAoOueT cvb+f1BFWZpULv9e+nhuTIys0I6kjKtWt7Fvbzamn9xSJmnOBBOduKrnjvgytlvo VrxfZsA23pj+GTyvq7T2i7f0NGBancZXjbGOJRXmer0wqkHGAEKMfPZzWj3YZaBm GY9Zcd8Dj+zM/DoGuXCjsK9TbJvqHwKPz6ynFRrLWROKmZK4Z5b9Cfc7ttY3O/0r LZ0y3oQl2bGThRCXqXO8Fmm3mYiMybCv6qrnYf6QBTgHjVPad6fWEQBjeAk18LQF N1OCYULBRGiko0EpsIBCqpHjoBYxwk274ftt6EMWpgx8ZhDJQI7X79opziymAk21 s+mS2RmTZALbiniO -----END CERTIFICATE-----Generated at Sat Jun 13 08:43:15 2026 by rpki-client