$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft File: D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft (raw, json) Hash identifier: SSXhPcnpAiKKFuoN3BbN5TJ6GqCzP5KYlkT4xIGOjcI= Subject key identifier: 4B:09:A4:E3:52:FF:EF:F8:A2:E4:B9:46:BB:22:FF:86:A5:C6:CA:6B Authority key identifier: D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9 Certificate issuer: /CN=D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9 Certificate serial: 73C03C8C3D7EBA4D6BCCBF18FB4FE6EFFB2CFABE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft Manifest number: 7E Signing time: Sun 19 Apr 2026 01:29:44 +0000 Manifest this update: Sun 19 Apr 2026 01:24:44 +0000 Manifest next update: Mon 20 Apr 2026 04:00:44 +0000 Files and hashes: 1: 326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa (hash: Qe+s8/fAnIQEeutwNPKlMCYxj4th5oSw8TX5K8siNS0=) 2: 326130663a316363353a6666663a3a2f34382d3438203d3e20323131353735.roa (hash: 9OCqZ/d+1rU6CR9p3YDhWbf8ZADN9O93ycDA5zxlgcg=) 3: D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl (hash: hxCWNxC2T9eht+FfixAczdcV1GZBRcEowjTHX6/ZmLQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 Apr 2026 13:54:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:c0:3c:8c:3d:7e:ba:4d:6b:cc:bf:18:fb:4f:e6:ef:fb:2c:fa:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9 Validity Not Before: Apr 19 01:24:44 2026 GMT Not After : Apr 20 04:00:44 2026 GMT Subject: CN=4B09A4E352FFEFF8A2E4B946BB22FF86A5C6CA6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:da:16:8b:2d:c9:8f:7a:59:33:44:97:4a:ca: 5e:14:09:25:0e:b2:cd:54:10:95:d6:b6:c6:2e:8e: f9:a5:8e:08:8f:0b:5a:c4:c5:d5:5e:5a:c5:67:d8: 0d:c4:0e:1e:5d:df:8e:4e:8b:b4:04:1f:4f:3d:80: db:d9:15:a6:fa:a2:64:82:d1:f5:b9:49:c0:ce:8a: 83:9d:41:dc:4e:f8:97:66:fb:dc:3c:9f:64:81:7c: 25:69:84:52:cb:e7:ac:3d:af:f2:02:4d:5c:c2:67: 8d:65:ac:e8:6a:5f:7f:de:5b:9b:b7:66:a1:f8:7e: 0b:92:55:0f:75:10:75:f7:54:c6:6a:9c:06:bb:0b: e2:86:e5:dc:6c:a3:67:0f:17:35:52:05:93:54:e1: 6d:73:76:72:5d:c4:c8:59:bd:75:f4:fc:94:01:07: 8a:ec:75:73:94:40:1b:66:74:e1:ae:af:1b:77:d4: 30:53:11:28:e0:60:78:00:3b:97:17:c1:c1:f5:16: 62:07:c3:84:a4:8f:a8:9a:96:79:6c:2b:5b:97:f4: 15:50:38:78:51:04:72:fb:05:a1:52:39:cc:4c:4c: f4:80:50:dc:9e:5c:9b:57:67:d3:56:59:ad:02:48: c7:f0:e9:17:aa:1a:48:5c:d7:b8:c3:88:62:f5:c5: 19:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:09:A4:E3:52:FF:EF:F8:A2:E4:B9:46:BB:22:FF:86:A5:C6:CA:6B X509v3 Authority Key Identifier: keyid:D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:40:1e:e8:0b:98:d3:6f:94:0a:13:d9:03:af:0f:3e:4f:7d: d2:a5:8d:05:78:23:71:d6:69:36:4d:fb:26:ca:e7:54:5b:fd: 3f:60:37:0a:68:f5:d2:be:c2:8c:b2:c9:22:3a:f1:f2:1b:0e: 7b:ec:e7:89:12:08:78:6b:06:8c:45:5e:ba:09:af:1c:fa:00: e2:31:d1:92:f8:f1:f9:15:d7:86:29:e9:ec:61:86:f9:89:9b: 94:8a:1e:46:19:63:ce:5d:c1:c5:95:91:f9:f3:9b:57:dc:ba: c0:72:11:4a:df:22:38:8c:98:71:e3:86:f6:b9:be:5c:7b:ab: 33:4d:1e:3b:89:55:ce:ba:4c:de:6c:47:96:55:61:52:7e:b3: 24:2f:4f:b0:5d:49:69:13:d9:37:ac:f0:60:fb:3e:23:43:bf: 58:1b:71:d7:b3:97:27:16:ec:e6:20:0e:09:78:c1:35:93:6a: 85:11:2f:f0:fd:cf:27:69:40:9c:7a:75:e2:fb:a6:7a:f4:ac: 7b:82:18:a2:5d:4d:8d:48:25:23:75:48:a8:2e:eb:b9:c1:da: ae:0d:c8:82:2b:08:1d:43:49:26:0e:f8:81:9c:6c:6d:91:6f: da:b7:41:7f:68:e0:ac:80:90:ba:17:bf:60:1d:5c:40:40:2d: f1:1b:93:38 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUc8A8jD1+uk1rzL8Y+0/m7/ss+r4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVFRTYzRDlCMUQyRDVDNkZBREM5QTE2OUU5QjRBRjY0 NENGMzdFOTAeFw0yNjA0MTkwMTI0NDRaFw0yNjA0MjAwNDAwNDRaMDMxMTAvBgNV BAMTKDRCMDlBNEUzNTJGRkVGRjhBMkU0Qjk0NkJCMjJGRjg2QTVDNkNBNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe2haLLcmPelkzRJdKyl4UCSUO ss1UEJXWtsYujvmljgiPC1rExdVeWsVn2A3EDh5d345Oi7QEH089gNvZFab6omSC 0fW5ScDOioOdQdxO+Jdm+9w8n2SBfCVphFLL56w9r/ICTVzCZ41lrOhqX3/eW5u3 ZqH4fguSVQ91EHX3VMZqnAa7C+KG5dxso2cPFzVSBZNU4W1zdnJdxMhZvXX0/JQB B4rsdXOUQBtmdOGurxt31DBTESjgYHgAO5cXwcH1FmIHw4Skj6ialnlsK1uX9BVQ OHhRBHL7BaFSOcxMTPSAUNyeXJtXZ9NWWa0CSMfw6ReqGkhc17jDiGL1xRlbAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUSwmk41L/7/ii5LlGuyL/hqXGymswHwYDVR0j BBgwFoAU1e5j2bHS1cb63JoWnptK9kTPN+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzQvRDVFRTYzRDlCMUQyRDVDNkZBREM5QTE2OUU5QjRBRjY0NENGMzdFOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9ENUVFNjNEOUIxRDJENUM2RkFEQzlBMTY5 RTlCNEFGNjQ0Q0YzN0U5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi80L0Q1RUU2M0Q5 QjFEMkQ1QzZGQURDOUExNjlFOUI0QUY2NDRDRjM3RTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCVQB7o C5jTb5QKE9kDrw8+T33SpY0FeCNx1mk2TfsmyudUW/0/YDcKaPXSvsKMsskiOvHy Gw577OeJEgh4awaMRV66Ca8c+gDiMdGS+PH5FdeGKensYYb5iZuUih5GGWPOXcHF lZH585tX3LrAchFK3yI4jJhx44b2ub5ce6szTR47iVXOukzebEeWVWFSfrMkL0+w XUlpE9k3rPBg+z4jQ79YG3HXs5cnFuzmIA4JeME1k2qFES/w/c8naUCcenXi+6Z6 9Kx7ghiiXU2NSCUjdUioLuu5wdquDciCKwgdQ0kmDviBnGxtkW/at0F/aOCsgJC6 F79gHVxAQC3xG5M4 -----END CERTIFICATE-----Generated at Sun Apr 19 02:38:53 2026 by rpki-client