$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft File: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft (raw, json) Hash identifier: 7b7VsOmlmyM54aQcMHnj9J825X/SdNjRWLyu6Wy+tiY= Subject key identifier: 0E:80:A9:3C:23:A6:D5:38:49:F8:80:EA:03:B2:3B:0D:E5:3E:A7:04 Authority key identifier: 5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F Certificate issuer: /CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Certificate serial: 44E188AB5E8BF908F08543CF5C3A97AF04CCB279 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft Manifest number: 0182 Signing time: Fri 17 Apr 2026 09:34:47 +0000 Manifest this update: Fri 17 Apr 2026 09:29:47 +0000 Manifest next update: Sat 18 Apr 2026 10:09:47 +0000 Files and hashes: 1: 326130363a396634313a3130303a3a2f34302d3430203d3e20323134373233.roa (hash: sTs8O8KBp3/QEgTlhnDJhb+nhykdynr848iPv4Z/TIo=) 2: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl (hash: /qnDPpJt2ojQBxVbk7sHAM7Ku5twvvPTAAETyhpAWPE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 10:09:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:e1:88:ab:5e:8b:f9:08:f0:85:43:cf:5c:3a:97:af:04:cc:b2:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Validity Not Before: Apr 17 09:29:47 2026 GMT Not After : Apr 18 10:09:47 2026 GMT Subject: CN=0E80A93C23A6D53849F880EA03B23B0DE53EA704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2b:00:78:13:16:4d:77:d4:d1:31:40:81:87: 80:34:94:6e:51:26:19:6a:b6:fd:6c:2a:0d:2b:f0: 92:2b:72:02:d6:04:c3:71:cd:98:1e:af:3a:dc:1d: 08:0a:a1:c4:b1:b2:a1:fe:5a:a5:71:8d:62:1a:2e: bf:97:99:1b:cc:bb:48:d1:4b:89:d0:06:d4:0b:62: 53:fd:63:eb:da:e9:a2:73:09:4b:45:ef:61:e7:6f: 6d:59:cf:79:4b:a3:0e:ff:17:bb:43:b3:e5:2a:53: 91:9e:57:02:76:cb:e7:67:a8:a4:91:17:84:c8:fd: 12:f3:7f:d0:c0:8d:9b:5d:44:8f:65:01:2b:88:3a: c9:e9:04:c9:1d:e6:d4:83:d1:36:7c:64:56:23:00: a9:1a:6a:73:bb:dd:16:15:c0:18:bc:3b:3f:bf:8b: 78:aa:c6:a3:e8:d0:ee:05:0d:12:57:f7:ad:c5:92: 53:e4:0d:63:01:5f:21:ab:f3:1f:1f:85:8e:b0:28: f1:5c:56:b6:df:7c:a6:e9:05:92:3a:b3:99:8b:f7: 24:25:ca:4d:32:96:8b:bf:52:26:25:98:34:76:87: 91:6c:fe:f8:36:25:7f:27:06:31:c1:b7:2d:57:73: 29:09:b8:76:60:c2:0e:12:93:2f:34:ee:5a:59:af: de:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:80:A9:3C:23:A6:D5:38:49:F8:80:EA:03:B2:3B:0D:E5:3E:A7:04 X509v3 Authority Key Identifier: keyid:5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:88:a3:10:23:d0:a9:d8:68:a2:b1:54:b8:d5:91:b3:42:cf: 7d:3a:31:25:0e:f3:ec:d5:35:ba:59:20:09:a6:2a:ce:73:f1: 6b:bc:01:fa:ea:69:06:b6:de:02:13:85:b5:35:91:99:5b:f3: 4e:4d:fc:37:af:ba:82:a2:1f:7f:e2:f7:12:c0:fa:7f:a2:1c: 79:b3:f3:09:10:bb:ef:f7:92:0a:1c:18:2c:ca:f7:94:15:31: 2a:83:1f:af:55:b4:fe:08:a1:89:8a:d7:b1:3d:5e:20:e7:8a: f1:7d:56:6e:fd:b6:c9:79:97:4a:75:23:63:40:9a:54:93:24: 7b:6c:da:b4:b1:c1:33:e9:c5:62:dc:c7:b5:05:59:be:fc:e9: b0:25:7a:b2:21:53:24:3c:65:68:93:ea:35:a5:7c:83:ef:a4: d0:ab:26:ac:e3:8d:0e:70:5d:fa:d6:b8:b0:1d:51:54:1e:ca: 1e:ed:71:b8:0f:52:43:88:68:7c:68:4d:4c:62:19:75:96:53: 6c:4a:4e:48:67:15:e6:a0:55:4a:7b:dc:ee:5d:45:31:fe:c1: 40:f2:b0:89:82:67:50:05:f4:c8:f1:20:27:02:70:ee:1d:d8: 39:85:3a:12:37:ea:a4:a9:7c:05:c2:13:33:19:38:2d:de:72: 32:42:4b:16 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUROGIq16L+QjwhUPPXDqXrwTMsnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQw QkY1OTE1RjAeFw0yNjA0MTcwOTI5NDdaFw0yNjA0MTgxMDA5NDdaMDMxMTAvBgNV BAMTKDBFODBBOTNDMjNBNkQ1Mzg0OUY4ODBFQTAzQjIzQjBERTUzRUE3MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMKwB4ExZNd9TRMUCBh4A0lG5R Jhlqtv1sKg0r8JIrcgLWBMNxzZgerzrcHQgKocSxsqH+WqVxjWIaLr+XmRvMu0jR S4nQBtQLYlP9Y+va6aJzCUtF72Hnb21Zz3lLow7/F7tDs+UqU5GeVwJ2y+dnqKSR F4TI/RLzf9DAjZtdRI9lASuIOsnpBMkd5tSD0TZ8ZFYjAKkaanO73RYVwBi8Oz+/ i3iqxqPo0O4FDRJX963FklPkDWMBXyGr8x8fhY6wKPFcVrbffKbpBZI6s5mL9yQl yk0ylou/UiYlmDR2h5Fs/vg2JX8nBjHBty1XcykJuHZgwg4Sky807lpZr95hAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUDoCpPCOm1ThJ+IDqA7I7DeU+pwQwHwYDVR0j BBgwFoAUWj94GTU84P0TuP/Ny4g37Qv1kV8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzUvNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQwQkY1OTE1Ri5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03ZWIzLTRm NjMtYTE1OS1jZmYwMmMwMjZhYmYvMi81QTNGNzgxOTM1M0NFMEZEMTNCOEZGQ0RD Qjg4MzdFRDBCRjU5MTVGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy81LzVBM0Y3ODE5 MzUzQ0UwRkQxM0I4RkZDRENCODgzN0VEMEJGNTkxNUYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCViKMQ I9Cp2GiisVS41ZGzQs99OjElDvPs1TW6WSAJpirOc/FrvAH66mkGtt4CE4W1NZGZ W/NOTfw3r7qCoh9/4vcSwPp/ohx5s/MJELvv95IKHBgsyveUFTEqgx+vVbT+CKGJ itexPV4g54rxfVZu/bbJeZdKdSNjQJpUkyR7bNq0scEz6cVi3Me1BVm+/OmwJXqy IVMkPGVok+o1pXyD76TQqyas440OcF361riwHVFUHsoe7XG4D1JDiGh8aE1MYhl1 llNsSk5IZxXmoFVKe9zuXUUx/sFA8rCJgmdQBfTI8SAnAnDuHdg5hToSN+qkqXwF whMzGTgt3nIyQksW -----END CERTIFICATE-----Generated at Sat Apr 18 04:16:57 2026 by rpki-client