$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft File: D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft (raw, json) Hash identifier: wlFszFVTWDe3maKcGELSgQ5BwXXekGHQUX9J1Xl5edk= Subject key identifier: 44:EE:0D:D6:F8:EB:95:8D:CF:38:6A:07:79:10:76:42:20:A9:14:EC Authority key identifier: D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9 Certificate issuer: /CN=D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9 Certificate serial: 20EBE7A967ACA4719E3DA2E7CE5C66495098BD77 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft Manifest number: 41 Signing time: Wed 04 Mar 2026 14:47:56 +0000 Manifest this update: Wed 04 Mar 2026 14:42:56 +0000 Manifest next update: Thu 05 Mar 2026 17:23:56 +0000 Files and hashes: 1: D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl (hash: +1XESwXWB9Z0FACoyFYy3FHKMYn1ZAtS8EcExEbv8oA=) 2: 326130663a316363353a6666663a3a2f34382d3438203d3e20323131353735.roa (hash: 9OCqZ/d+1rU6CR9p3YDhWbf8ZADN9O93ycDA5zxlgcg=) 3: 326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa (hash: Qe+s8/fAnIQEeutwNPKlMCYxj4th5oSw8TX5K8siNS0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Mar 2026 14:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:eb:e7:a9:67:ac:a4:71:9e:3d:a2:e7:ce:5c:66:49:50:98:bd:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9 Validity Not Before: Mar 4 14:42:56 2026 GMT Not After : Mar 5 17:23:56 2026 GMT Subject: CN=44EE0DD6F8EB958DCF386A077910764220A914EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7f:04:82:dd:fd:21:27:c0:18:8c:d4:83:3f: 24:d4:0e:12:cf:8f:40:5e:a4:8d:db:1c:29:94:d7: a7:32:df:56:47:4d:35:0a:56:7d:2b:6a:01:98:f6: 55:25:dc:b3:d4:b6:99:9b:f3:d4:17:84:d8:73:8d: 99:9f:20:db:d3:8c:cd:1c:f6:f3:ce:ee:91:a6:4c: b2:b5:cc:6a:13:77:ab:23:6b:03:b1:a6:e6:6b:50: bf:a3:04:1c:74:d9:27:5b:9c:74:cb:fc:75:09:37: 82:60:12:31:01:9b:1e:55:64:7c:06:3d:85:d6:b5: 9c:2a:5b:b5:90:2a:95:c5:12:ed:ed:3b:99:55:43: 43:31:43:43:39:35:a9:6f:6a:5f:72:7e:7e:dc:e9: 09:70:91:4a:45:22:ea:3b:bb:e7:3d:0d:fa:2f:2b: 9c:1f:e7:63:4f:01:c7:14:03:0c:7f:f0:68:64:46: f5:5a:2e:8a:b1:ed:ff:a6:23:5d:8d:a2:86:cc:16: 43:f1:83:68:cc:b5:5e:f1:9b:f2:6f:31:99:2d:fe: b6:6f:4d:8a:93:4b:5e:74:73:26:06:51:f8:8b:95: 07:a5:83:69:c2:eb:5d:2c:06:e4:40:c1:60:b1:28: 83:7c:f7:b4:5e:95:45:a6:f9:2a:51:30:bd:8a:33: ad:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:EE:0D:D6:F8:EB:95:8D:CF:38:6A:07:79:10:76:42:20:A9:14:EC X509v3 Authority Key Identifier: keyid:D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:bd:26:11:5f:f6:8f:28:67:00:e6:01:6e:d5:3b:d7:92:13: db:56:b4:99:ab:29:75:8a:f5:d6:b7:b5:bc:3a:12:dd:f7:86: 41:5d:b0:88:48:bb:3a:ae:08:9a:47:7a:0b:51:60:53:f5:8b: 3c:49:60:81:a4:94:01:ed:ee:3a:0a:f5:b5:c9:e1:7b:e2:b4: 69:a8:7e:4e:98:fa:ba:2e:bd:a0:43:c0:8d:41:b3:b8:00:d2: 25:c2:a9:81:14:7d:b4:9a:ec:f7:38:d7:d6:87:d5:cf:9b:da: dc:67:b3:f7:b5:6b:8b:04:06:0d:5b:26:58:b0:c3:8c:e1:69: 22:d9:dc:7a:ff:f0:e8:db:88:57:c6:04:5f:84:86:02:1b:65: 6e:b8:5d:59:c7:6b:ed:74:d8:e4:dc:48:b1:c1:55:21:d7:17: d9:0d:e6:7f:13:a8:c5:7c:fb:b8:0d:88:dc:ab:d1:73:ed:e3: 32:08:a5:60:17:72:1e:fb:9f:0e:5c:a9:c5:e6:4f:b9:51:4d: 57:4b:cf:8a:12:ae:21:b6:c7:e5:9b:8f:5a:5e:30:c6:bf:04: 6d:8e:34:0d:ab:fb:c6:4e:ba:1d:78:c8:27:b8:1c:80:f3:b1: 6b:ec:d4:95:6d:70:10:dc:d6:d8:8c:9d:5d:ce:d8:09:89:9e: 6c:de:32:65 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUIOvnqWespHGePaLnzlxmSVCYvXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVFRTYzRDlCMUQyRDVDNkZBREM5QTE2OUU5QjRBRjY0 NENGMzdFOTAeFw0yNjAzMDQxNDQyNTZaFw0yNjAzMDUxNzIzNTZaMDMxMTAvBgNV BAMTKDQ0RUUwREQ2RjhFQjk1OERDRjM4NkEwNzc5MTA3NjQyMjBBOTE0RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyfwSC3f0hJ8AYjNSDPyTUDhLP j0BepI3bHCmU16cy31ZHTTUKVn0ragGY9lUl3LPUtpmb89QXhNhzjZmfINvTjM0c 9vPO7pGmTLK1zGoTd6sjawOxpuZrUL+jBBx02SdbnHTL/HUJN4JgEjEBmx5VZHwG PYXWtZwqW7WQKpXFEu3tO5lVQ0MxQ0M5Nalval9yfn7c6QlwkUpFIuo7u+c9Dfov K5wf52NPAccUAwx/8GhkRvVaLoqx7f+mI12NoobMFkPxg2jMtV7xm/JvMZkt/rZv TYqTS150cyYGUfiLlQelg2nC610sBuRAwWCxKIN897RelUWm+SpRML2KM62zAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQURO4N1vjrlY3POGoHeRB2QiCpFOwwHwYDVR0j BBgwFoAU1e5j2bHS1cb63JoWnptK9kTPN+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzQvRDVFRTYzRDlCMUQyRDVDNkZBREM5QTE2OUU5QjRBRjY0NENGMzdFOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9ENUVFNjNEOUIxRDJENUM2RkFEQzlBMTY5 RTlCNEFGNjQ0Q0YzN0U5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi80L0Q1RUU2M0Q5 QjFEMkQ1QzZGQURDOUExNjlFOUI0QUY2NDRDRjM3RTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBcvSYR X/aPKGcA5gFu1TvXkhPbVrSZqyl1ivXWt7W8OhLd94ZBXbCISLs6rgiaR3oLUWBT 9Ys8SWCBpJQB7e46CvW1yeF74rRpqH5OmPq6Lr2gQ8CNQbO4ANIlwqmBFH20muz3 ONfWh9XPm9rcZ7P3tWuLBAYNWyZYsMOM4Wki2dx6//Do24hXxgRfhIYCG2VuuF1Z x2vtdNjk3EixwVUh1xfZDeZ/E6jFfPu4DYjcq9Fz7eMyCKVgF3Ie+58OXKnF5k+5 UU1XS8+KEq4htsflm49aXjDGvwRtjjQNq/vGTrodeMgnuByA87Fr7NSVbXAQ3NbY jJ1dztgJiZ5s3jJl -----END CERTIFICATE-----Generated at Wed Mar 4 19:17:28 2026 by rpki-client