$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft File: D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft (raw, json) Hash identifier: 58zH8CF3tyYZAmyf1JlMHfdke9FR7xjOxVSs74fkc7A= Subject key identifier: CD:96:09:F2:A3:7D:D4:86:D5:CA:EB:35:A8:F8:7B:E7:CB:5B:E0:FD Authority key identifier: D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9 Certificate issuer: /CN=D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9 Certificate serial: 2AF6FE6CEE0D5B70D27170BD5429E00119C7926D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft Manifest number: C5 Signing time: Thu 11 Jun 2026 07:51:42 +0000 Manifest this update: Thu 11 Jun 2026 07:46:42 +0000 Manifest next update: Fri 12 Jun 2026 11:34:42 +0000 Files and hashes: 1: 326130663a316363353a6666663a3a2f34382d3438203d3e20323131353735.roa (hash: 9OCqZ/d+1rU6CR9p3YDhWbf8ZADN9O93ycDA5zxlgcg=) 2: D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl (hash: B9phrTZUxgZPbRKWMpKhUhl/jZJkNhD9TaS/YCsydMI=) 3: 326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa (hash: Qe+s8/fAnIQEeutwNPKlMCYxj4th5oSw8TX5K8siNS0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 10:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:f6:fe:6c:ee:0d:5b:70:d2:71:70:bd:54:29:e0:01:19:c7:92:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9 Validity Not Before: Jun 11 07:46:42 2026 GMT Not After : Jun 12 11:34:42 2026 GMT Subject: CN=CD9609F2A37DD486D5CAEB35A8F87BE7CB5BE0FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:81:f4:c4:14:da:16:bd:d5:71:35:26:34:39: 94:b0:16:f0:1e:0a:28:92:ce:5a:07:78:74:63:d1: 6c:dd:e8:10:61:eb:6f:d5:d7:0a:d6:af:3f:ea:bf: c4:56:db:c5:a4:a0:6e:4c:73:40:f9:aa:13:17:9a: 13:22:ae:2d:00:0e:68:f9:6a:76:a5:03:73:a8:ca: 0a:30:11:6f:74:5b:13:da:50:2e:22:ea:44:79:4c: 0e:08:0a:82:c6:ca:de:3a:8c:e0:cc:d4:88:df:f1: d7:20:ce:d6:ab:a9:d1:b4:cd:10:18:a2:3d:ff:7d: d9:cf:e7:84:b4:83:86:0a:dd:18:1d:7b:5c:4a:dc: fa:e5:58:31:00:33:e0:11:2e:e8:39:ab:fc:74:c3: de:ad:26:dc:68:78:0d:9c:55:da:b1:0d:18:e7:22: e5:5a:eb:96:98:db:e6:cf:ca:76:d1:7d:81:ea:63: 2d:e0:19:a0:4c:eb:c1:4c:ba:ef:bf:0f:f2:b3:f4: 9e:38:bb:e2:f9:5c:56:e7:29:a6:d6:9c:e0:27:ad: 4b:df:77:aa:e5:49:f8:a6:b8:1e:10:b6:63:6c:cb: 74:e0:15:7e:a0:ca:79:05:8b:64:08:5d:29:ba:27: 11:1c:55:e3:2d:f4:b9:19:a4:01:d0:19:ed:74:a0: bd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:96:09:F2:A3:7D:D4:86:D5:CA:EB:35:A8:F8:7B:E7:CB:5B:E0:FD X509v3 Authority Key Identifier: keyid:D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:1f:bd:a4:68:3b:01:b6:d6:21:e7:e5:ed:83:2b:e7:ed:7b: e9:b5:72:16:9e:24:a7:3f:ea:0a:a7:48:96:7a:d0:2a:44:be: 23:19:e0:35:4c:d9:6f:cd:f6:67:0f:8e:78:e4:fa:7f:2d:5f: 72:b2:cf:52:24:18:7b:82:31:bd:3e:3b:8b:e8:7c:45:63:22: f2:39:3a:0d:9c:bf:f1:ca:fa:fb:2d:69:44:54:45:e7:f2:53: 07:fb:9c:d4:46:a8:04:b8:52:b8:8f:59:d1:0e:40:fd:ca:f2: b2:7a:bb:d2:b9:5d:83:29:b2:7c:cb:d7:bc:f9:9e:c4:b3:5a: 39:d7:b8:7d:bd:70:54:4f:ac:9c:25:47:ce:f1:8c:f2:89:7a: 96:7a:4a:18:48:91:f0:ed:c3:5d:86:7f:0b:7b:f6:fe:b2:c5: 08:7f:8b:91:60:80:57:80:e1:a4:53:82:62:bd:0d:e9:0c:df: 75:96:55:99:c3:63:35:48:a9:b7:45:7e:94:ef:11:c4:97:40: 27:76:5f:eb:32:7e:dc:db:67:20:28:db:88:ea:d8:e7:cd:a0: ba:a7:5f:20:bd:89:28:6a:eb:ee:03:6c:94:a7:13:ff:2b:e0: a6:28:c5:ad:1d:d8:1f:36:c2:90:33:08:35:09:e0:cf:7d:a4: e6:f9:6f:12 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUKvb+bO4NW3DScXC9VCngARnHkm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVFRTYzRDlCMUQyRDVDNkZBREM5QTE2OUU5QjRBRjY0 NENGMzdFOTAeFw0yNjA2MTEwNzQ2NDJaFw0yNjA2MTIxMTM0NDJaMDMxMTAvBgNV BAMTKENEOTYwOUYyQTM3REQ0ODZENUNBRUIzNUE4Rjg3QkU3Q0I1QkUwRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1gfTEFNoWvdVxNSY0OZSwFvAe CiiSzloHeHRj0Wzd6BBh62/V1wrWrz/qv8RW28WkoG5Mc0D5qhMXmhMiri0ADmj5 analA3OoygowEW90WxPaUC4i6kR5TA4ICoLGyt46jODM1Ijf8dcgztarqdG0zRAY oj3/fdnP54S0g4YK3Rgde1xK3PrlWDEAM+ARLug5q/x0w96tJtxoeA2cVdqxDRjn IuVa65aY2+bPynbRfYHqYy3gGaBM68FMuu+/D/Kz9J44u+L5XFbnKabWnOAnrUvf d6rlSfimuB4QtmNsy3TgFX6gynkFi2QIXSm6JxEcVeMt9LkZpAHQGe10oL0ZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUzZYJ8qN91IbVyus1qPh758tb4P0wHwYDVR0j BBgwFoAU1e5j2bHS1cb63JoWnptK9kTPN+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzQvRDVFRTYzRDlCMUQyRDVDNkZBREM5QTE2OUU5QjRBRjY0NENGMzdFOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9ENUVFNjNEOUIxRDJENUM2RkFEQzlBMTY5 RTlCNEFGNjQ0Q0YzN0U5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi80L0Q1RUU2M0Q5 QjFEMkQ1QzZGQURDOUExNjlFOUI0QUY2NDRDRjM3RTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAVH72k aDsBttYh5+Xtgyvn7XvptXIWniSnP+oKp0iWetAqRL4jGeA1TNlvzfZnD4545Pp/ LV9yss9SJBh7gjG9PjuL6HxFYyLyOToNnL/xyvr7LWlEVEXn8lMH+5zURqgEuFK4 j1nRDkD9yvKyervSuV2DKbJ8y9e8+Z7Es1o517h9vXBUT6ycJUfO8YzyiXqWekoY SJHw7cNdhn8Le/b+ssUIf4uRYIBXgOGkU4JivQ3pDN91llWZw2M1SKm3RX6U7xHE l0Andl/rMn7c22cgKNuI6tjnzaC6p18gvYkoauvuA2yUpxP/K+CmKMWtHdgfNsKQ Mwg1CeDPfaTm+W8S -----END CERTIFICATE-----Generated at Thu Jun 11 20:39:47 2026 by rpki-client