$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft File: D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft (raw, json) Hash identifier: 93FHRDku7W+zh0T7sIGhn3TirbaKc5mksXLRO0beIG4= Subject key identifier: 4D:60:5A:D2:E0:AC:01:F1:D6:3D:42:EE:BC:BC:B2:D1:2A:E6:1D:B2 Authority key identifier: D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9 Certificate issuer: /CN=D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9 Certificate serial: 38BF782F07E9703171C411D81E4A35BB1A695EFE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft Manifest number: 0183 Signing time: Wed 28 Oct 2026 21:37:04 +0000 Manifest this update: Wed 28 Oct 2026 21:32:04 +0000 Manifest next update: Thu 29 Oct 2026 22:47:04 +0000 Files and hashes: 1: 326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa (hash: Qe+s8/fAnIQEeutwNPKlMCYxj4th5oSw8TX5K8siNS0=) 2: D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl (hash: SWTFVBLCmoMVDpZM2CaPwaJDmAqFQxRl2L82L/YVxR4=) 3: 326130663a316363353a6666663a3a2f34382d3438203d3e20323131353735.roa (hash: 9OCqZ/d+1rU6CR9p3YDhWbf8ZADN9O93ycDA5zxlgcg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Oct 2026 18:41:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:bf:78:2f:07:e9:70:31:71:c4:11:d8:1e:4a:35:bb:1a:69:5e:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9 Validity Not Before: Oct 28 21:32:04 2026 GMT Not After : Oct 29 22:47:04 2026 GMT Subject: CN=4D605AD2E0AC01F1D63D42EEBCBCB2D12AE61DB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:32:73:57:9c:59:9b:d4:fa:42:e7:13:e1:38: 02:bd:f2:2d:d0:c9:18:6e:03:8e:56:54:a1:2c:13: b8:ff:78:83:b8:ac:df:df:b8:ee:57:f8:2a:62:58: 88:12:25:d9:88:b8:da:93:24:b0:30:b0:9b:45:91: aa:4b:53:c3:f4:3a:df:84:63:6b:db:e7:39:c9:38: 85:4e:a7:da:98:96:79:2c:8e:f5:84:69:6a:23:82: 4a:b5:1e:33:d9:b1:89:c7:1c:eb:5d:1d:c3:c6:c0: 89:9f:d1:6f:b0:39:c3:b5:2f:5a:14:5f:c0:14:20: 93:63:42:93:b9:3c:cd:d7:7a:ca:a2:c8:6c:5a:34: 7e:ef:12:3b:20:68:ea:65:1a:36:dc:cb:16:34:34: b7:be:df:4e:34:b3:5e:d5:6c:67:5d:48:78:f7:a5: 3f:9c:be:1f:3c:f5:3d:ff:5d:b1:49:8b:cb:e6:cc: 0b:06:37:25:a4:68:18:b2:9f:cc:12:dc:50:e0:f8: fb:10:54:81:2a:c7:1f:fd:98:8d:8f:c4:57:8a:65: 5f:29:18:11:83:fd:9d:48:28:7e:e5:ec:83:43:6b: f3:18:0f:fb:70:d3:97:3e:70:4b:b7:21:61:bd:48: ef:87:7d:be:9c:06:f2:97:cd:14:12:bd:c0:17:d9: 7c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:60:5A:D2:E0:AC:01:F1:D6:3D:42:EE:BC:BC:B2:D1:2A:E6:1D:B2 X509v3 Authority Key Identifier: keyid:D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:63:95:d6:41:d7:4d:05:43:09:92:75:f0:af:39:ad:13:6f: d6:d4:f1:91:b0:cb:3a:8f:ac:85:42:68:bc:76:e2:e6:0e:d7: b6:ed:96:14:4a:b6:d4:96:1b:98:5e:ae:d5:d6:d6:ad:b3:d3: db:20:3a:17:23:c8:18:df:32:59:5e:ef:39:24:b2:1c:9f:2a: 3b:9b:06:b4:21:cb:82:7c:5c:9b:2d:a0:b9:f7:a8:6b:a2:fd: 35:ae:0b:b1:4c:ad:ce:6d:59:bd:bf:b8:d9:b1:3f:ef:81:25: b1:d3:3f:a2:d2:ae:d6:f8:79:c7:cd:2f:97:26:c9:f6:66:78: 4b:4b:11:88:97:53:82:d2:a1:2f:51:0c:f9:2a:15:35:3c:fb: 64:1e:4d:86:ce:93:4e:a5:cf:4f:9b:86:19:bc:59:86:2a:28: f3:22:fc:cf:40:ed:98:e7:63:0a:23:c4:90:52:85:59:03:0c: da:b6:78:57:57:4e:08:91:10:9c:21:70:99:91:5f:a6:e4:74: 55:fe:e2:26:1e:1f:48:9b:3f:58:dc:75:74:bf:49:3b:44:66: 4a:d7:69:fa:43:d8:58:22:a4:f2:f4:f0:52:d0:39:bd:01:e7: 39:64:16:a4:1d:68:41:0b:82:5d:26:d5:e0:b0:4f:f0:e7:86: 39:66:58:c2 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUOL94LwfpcDFxxBHYHko1uxppXv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVFRTYzRDlCMUQyRDVDNkZBREM5QTE2OUU5QjRBRjY0 NENGMzdFOTAeFw0yNjEwMjgyMTMyMDRaFw0yNjEwMjkyMjQ3MDRaMDMxMTAvBgNV BAMTKDRENjA1QUQyRTBBQzAxRjFENjNENDJFRUJDQkNCMkQxMkFFNjFEQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7MnNXnFmb1PpC5xPhOAK98i3Q yRhuA45WVKEsE7j/eIO4rN/fuO5X+CpiWIgSJdmIuNqTJLAwsJtFkapLU8P0Ot+E Y2vb5znJOIVOp9qYlnksjvWEaWojgkq1HjPZsYnHHOtdHcPGwImf0W+wOcO1L1oU X8AUIJNjQpO5PM3XesqiyGxaNH7vEjsgaOplGjbcyxY0NLe+3040s17VbGddSHj3 pT+cvh889T3/XbFJi8vmzAsGNyWkaBiyn8wS3FDg+PsQVIEqxx/9mI2PxFeKZV8p GBGD/Z1IKH7l7INDa/MYD/tw05c+cEu3IWG9SO+Hfb6cBvKXzRQSvcAX2XzDAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUTWBa0uCsAfHWPULuvLyy0SrmHbIwHwYDVR0j BBgwFoAU1e5j2bHS1cb63JoWnptK9kTPN+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzQvRDVFRTYzRDlCMUQyRDVDNkZBREM5QTE2OUU5QjRBRjY0NENGMzdFOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9ENUVFNjNEOUIxRDJENUM2RkFEQzlBMTY5 RTlCNEFGNjQ0Q0YzN0U5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi80L0Q1RUU2M0Q5 QjFEMkQ1QzZGQURDOUExNjlFOUI0QUY2NDRDRjM3RTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQALY5XW QddNBUMJknXwrzmtE2/W1PGRsMs6j6yFQmi8duLmDte27ZYUSrbUlhuYXq7V1tat s9PbIDoXI8gY3zJZXu85JLIcnyo7mwa0IcuCfFybLaC596hrov01rguxTK3ObVm9 v7jZsT/vgSWx0z+i0q7W+HnHzS+XJsn2ZnhLSxGIl1OC0qEvUQz5KhU1PPtkHk2G zpNOpc9Pm4YZvFmGKijzIvzPQO2Y52MKI8SQUoVZAwzatnhXV04IkRCcIXCZkV+m 5HRV/uImHh9Imz9Y3HV0v0k7RGZK12n6Q9hYIqTy9PBS0Dm9Aec5ZBakHWhBC4Jd JtXgsE/w54Y5ZljC -----END CERTIFICATE-----Generated at Thu Oct 29 01:44:13 2026 by rpki-client