$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft File: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft (raw, json) Hash identifier: WG4QhkHeMbrJRE75bf/PJvRFvH7wraGUXEIfCLo5FLU= Subject key identifier: E5:6C:3B:B0:E4:C0:C9:D8:9B:C8:B3:2A:AA:1F:34:7B:0E:D6:10:FB Authority key identifier: 5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F Certificate issuer: /CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Certificate serial: 6AE79610E13EE66B1DA147A30D2AF499B63812C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft Manifest number: 0258 Signing time: Wed 23 Sep 2026 06:40:56 +0000 Manifest this update: Wed 23 Sep 2026 06:35:56 +0000 Manifest next update: Thu 24 Sep 2026 09:34:56 +0000 Files and hashes: 1: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl (hash: zmWv9Z1HwZaZA5/+6MtZMGQMYUVOXijcIGrRpYI5skI=) 2: 326130363a396634313a3130303a3a2f34302d3430203d3e20323134373233.roa (hash: OJ83dTsr9Gt4avvo3q3A4eeFV71yGziVsKE7L0soTmM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 06:25:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:e7:96:10:e1:3e:e6:6b:1d:a1:47:a3:0d:2a:f4:99:b6:38:12:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Validity Not Before: Sep 23 06:35:56 2026 GMT Not After : Sep 24 09:34:56 2026 GMT Subject: CN=E56C3BB0E4C0C9D89BC8B32AAA1F347B0ED610FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3b:d5:2e:6a:18:34:c3:e3:28:86:b1:82:63: 53:96:d4:72:25:2c:a2:3f:2c:49:f7:d5:66:dc:06: bf:29:ad:e1:b3:be:c3:af:0e:2a:b3:7f:13:e8:09: eb:39:67:e6:c5:92:9e:de:9b:56:5a:bf:f8:d5:e6: 6a:b6:0f:c1:5f:42:b9:49:59:d1:a1:ab:ff:1e:8a: 75:f4:36:89:f7:93:85:11:36:b4:2b:25:b0:38:f4: 07:17:90:66:6a:6d:d6:12:45:5f:f5:65:f3:d4:72: 0e:5d:7d:d6:c8:7a:68:05:5a:d6:9a:22:bb:91:6e: 8c:86:85:4d:7c:6c:09:dd:a7:d8:64:72:64:cb:92: 64:75:30:7b:48:4d:81:f7:94:64:e0:ca:bd:07:db: 70:2d:95:f5:79:ae:d8:79:cb:67:03:2e:67:86:32: dd:a4:0c:0a:d8:7a:99:f4:2e:77:df:22:52:57:d1: ae:bc:c8:9f:27:3a:56:d5:ec:28:e9:15:39:69:fb: 3e:ba:6b:e3:1a:e0:f5:03:1a:10:1f:80:bd:9b:fc: 28:e8:81:6a:41:a2:f5:eb:a7:cd:c4:97:78:c0:cb: d7:c4:8b:aa:00:40:51:9f:60:08:97:a4:d5:7f:2c: c8:55:0b:16:c3:7f:de:f0:c5:38:ed:7a:de:84:14: ef:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:6C:3B:B0:E4:C0:C9:D8:9B:C8:B3:2A:AA:1F:34:7B:0E:D6:10:FB X509v3 Authority Key Identifier: keyid:5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:d2:ab:11:54:af:86:08:ad:16:ad:c1:54:07:d4:1a:7e:a9: 0c:8a:56:4e:2c:d1:f2:a7:01:89:f7:42:f4:95:d1:ab:7d:32: 9c:52:ab:25:ea:f6:49:8d:c8:b7:f6:09:81:de:e6:c5:ce:37: e2:91:6b:f3:3f:43:e5:b2:1e:59:71:23:fb:fd:e7:b3:2b:f1: 06:1f:3e:e6:9f:d5:14:16:47:8e:0e:ac:55:31:ad:97:37:a5: 13:29:d9:cf:e3:a8:b2:2a:ae:65:aa:d6:c6:96:e8:f9:2e:e8: 74:b7:e8:d8:94:bc:9a:d6:72:a6:fd:6d:a6:4b:4f:f6:87:28: 92:de:bb:9f:27:89:6c:a2:b1:97:81:b2:64:cc:72:ff:05:a0: 21:2e:3c:9c:5c:95:b1:ef:14:04:3b:80:73:d7:bb:ec:7f:98: 60:aa:9f:ed:aa:7b:a5:00:b4:fb:e4:12:ff:6c:8c:1e:5e:f2: 28:2f:e8:a4:63:71:38:85:c3:97:e3:58:73:83:c1:58:64:74: fb:89:4e:96:3c:2c:90:36:f3:14:0c:ba:a9:4a:4d:0c:91:2d: 66:62:49:fc:05:57:3d:d7:3c:2c:c6:b6:99:4c:57:19:65:51: 8a:29:06:c6:f5:c1:ff:de:04:2e:66:e1:8e:ff:8b:99:a5:31: 99:20:4f:71 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUaueWEOE+5msdoUejDSr0mbY4EsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQw QkY1OTE1RjAeFw0yNjA5MjMwNjM1NTZaFw0yNjA5MjQwOTM0NTZaMDMxMTAvBgNV BAMTKEU1NkMzQkIwRTRDMEM5RDg5QkM4QjMyQUFBMUYzNDdCMEVENjEwRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTO9Uuahg0w+MohrGCY1OW1HIl LKI/LEn31WbcBr8preGzvsOvDiqzfxPoCes5Z+bFkp7em1Zav/jV5mq2D8FfQrlJ WdGhq/8einX0Non3k4URNrQrJbA49AcXkGZqbdYSRV/1ZfPUcg5dfdbIemgFWtaa IruRboyGhU18bAndp9hkcmTLkmR1MHtITYH3lGTgyr0H23AtlfV5rth5y2cDLmeG Mt2kDArYepn0LnffIlJX0a68yJ8nOlbV7CjpFTlp+z66a+Ma4PUDGhAfgL2b/Cjo gWpBovXrp83El3jAy9fEi6oAQFGfYAiXpNV/LMhVCxbDf97wxTjtet6EFO8xAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU5Ww7sOTAydibyLMqqh80ew7WEPswHwYDVR0j BBgwFoAUWj94GTU84P0TuP/Ny4g37Qv1kV8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzUvNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQwQkY1OTE1Ri5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03ZWIzLTRm NjMtYTE1OS1jZmYwMmMwMjZhYmYvMi81QTNGNzgxOTM1M0NFMEZEMTNCOEZGQ0RD Qjg4MzdFRDBCRjU5MTVGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy81LzVBM0Y3ODE5 MzUzQ0UwRkQxM0I4RkZDRENCODgzN0VEMEJGNTkxNUYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBR0qsR VK+GCK0WrcFUB9QafqkMilZOLNHypwGJ90L0ldGrfTKcUqsl6vZJjci39gmB3ubF zjfikWvzP0Plsh5ZcSP7/eezK/EGHz7mn9UUFkeODqxVMa2XN6UTKdnP46iyKq5l qtbGluj5Luh0t+jYlLya1nKm/W2mS0/2hyiS3rufJ4lsorGXgbJkzHL/BaAhLjyc XJWx7xQEO4Bz17vsf5hgqp/tqnulALT75BL/bIweXvIoL+ikY3E4hcOX41hzg8FY ZHT7iU6WPCyQNvMUDLqpSk0MkS1mYkn8BVc91zwsxraZTFcZZVGKKQbG9cH/3gQu ZuGO/4uZpTGZIE9x -----END CERTIFICATE-----Generated at Wed Sep 23 14:59:59 2026 by rpki-client