$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft File: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft (raw, json) Hash identifier: i+RF1qNAdTs1if6zWSMROS/3J0BdaMLucttweD5oAus= Subject key identifier: 97:EA:6E:0A:8E:A3:BA:DE:B1:26:77:E3:28:3E:4F:0C:34:1C:B8:B5 Authority key identifier: DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 Certificate issuer: /CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Certificate serial: 114E95464CCD6134D0659DAA6243559E879E3DA5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft Manifest number: 83 Signing time: Sat 18 Apr 2026 07:05:50 +0000 Manifest this update: Sat 18 Apr 2026 07:00:50 +0000 Manifest next update: Sun 19 Apr 2026 09:57:50 +0000 Files and hashes: 1: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl (hash: ZU6hVSdsRa0zvoE1MgFpyJeJHUnNwd/U0dClxfvVO4I=) 2: 326130663a316363353a326430313a3a2f34382d3438203d3e20323134393535.roa (hash: l0RMqMiAhgGDzLpuD3ZJuPudrozfegvLREqyl+4aP2I=) 3: 326130663a316363353a326430333a3a2f34382d3438203d3e20323134393535.roa (hash: FhiRWcOhFd1e57IfPQu+2j0uinj7188+3VOrSYUtQ6c=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 Apr 2026 09:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:4e:95:46:4c:cd:61:34:d0:65:9d:aa:62:43:55:9e:87:9e:3d:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Validity Not Before: Apr 18 07:00:50 2026 GMT Not After : Apr 19 09:57:50 2026 GMT Subject: CN=97EA6E0A8EA3BADEB12677E3283E4F0C341CB8B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0f:15:00:24:3d:ae:58:45:1f:8f:e9:a1:81: b7:fd:88:22:7e:d9:fd:4e:1e:9d:77:86:b4:c6:a6: cf:9c:4e:d4:09:b6:e4:86:94:d4:21:13:dd:04:7b: fd:a8:e5:b0:44:11:47:aa:37:11:74:56:98:5f:3e: d3:b3:60:bc:8c:94:af:ac:99:9f:af:8b:17:de:c4: 9a:b6:ea:01:bf:0f:9b:54:eb:a3:dd:b9:cd:b4:a1: a2:1e:94:db:5d:0f:9c:87:c2:8a:75:b4:13:45:4a: 9f:4b:ee:dd:b7:90:6b:c6:61:a7:93:98:71:b7:e6: 0e:4c:2f:5b:f8:59:5e:e0:c3:e4:09:c4:d6:13:98: 0c:30:8a:31:f4:d7:75:a6:89:cd:7a:49:dd:ab:b7: b2:01:46:7b:26:b4:98:90:ff:2e:73:2f:28:0b:a8: 2b:5f:31:5c:57:64:70:b7:cb:ec:f1:37:11:92:45: 7d:b1:3c:8b:a4:e4:16:53:96:a3:5f:a5:2b:45:e0: b6:bb:fa:52:86:cb:c3:5d:cf:e0:de:fa:bd:db:4c: 1a:00:51:ec:ce:ef:ff:c5:da:87:0d:37:35:d6:f1: 67:5a:5f:bf:5f:4c:be:bc:8c:02:f9:88:ec:f0:7b: 75:20:f0:c1:e5:79:f9:07:25:bd:08:34:3b:a2:88: 03:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:EA:6E:0A:8E:A3:BA:DE:B1:26:77:E3:28:3E:4F:0C:34:1C:B8:B5 X509v3 Authority Key Identifier: keyid:DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:83:99:7e:ea:15:28:39:88:be:91:34:6a:2f:44:56:a4:83: 77:aa:20:2a:b4:b2:36:f2:7e:02:c3:70:c8:b8:26:49:9b:65: 13:1d:fd:ee:fb:5b:ee:22:cf:c1:87:08:6b:55:65:36:83:b4: d1:3b:4a:c6:9e:6f:37:52:b6:f9:74:a4:d9:e2:17:9b:5f:e2: 1f:73:e6:6a:e9:47:0e:fc:43:51:ef:d8:14:6a:57:99:f6:0d: 07:6b:82:2c:ad:c2:7c:c8:a8:9f:b6:cc:63:37:7c:dd:3c:5e: 62:77:dc:6b:55:c5:08:3e:01:7d:c0:8d:1d:d0:78:60:a9:2f: 91:b8:6b:14:79:26:6f:58:88:f3:98:12:92:d9:dc:08:f5:ae: c5:ca:a6:82:d4:05:1a:22:8f:b4:45:d2:ff:59:b4:88:a2:e0: af:95:1c:38:9d:6b:8e:2e:19:d7:e2:01:36:7e:cb:5b:c0:54: b1:08:d2:b1:c3:e2:dc:61:7c:fd:e7:46:b4:c0:87:a2:ed:ef: 71:8a:8f:50:a0:7c:22:01:94:35:e2:66:d5:da:73:5e:cc:79: 53:2b:35:1d:5f:f9:e1:26:df:e2:ed:58:fc:24:7e:bc:ca:4a: ad:fe:2d:85:99:53:a5:83:20:73:f0:1a:95:e0:37:08:48:69: 63:78:44:a6 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUEU6VRkzNYTTQZZ2qYkNVnoeePaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4 NUZBNEVFMTAeFw0yNjA0MTgwNzAwNTBaFw0yNjA0MTkwOTU3NTBaMDMxMTAvBgNV BAMTKDk3RUE2RTBBOEVBM0JBREVCMTI2NzdFMzI4M0U0RjBDMzQxQ0I4QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgDxUAJD2uWEUfj+mhgbf9iCJ+ 2f1OHp13hrTGps+cTtQJtuSGlNQhE90Ee/2o5bBEEUeqNxF0VphfPtOzYLyMlK+s mZ+vixfexJq26gG/D5tU66Pduc20oaIelNtdD5yHwop1tBNFSp9L7t23kGvGYaeT mHG35g5ML1v4WV7gw+QJxNYTmAwwijH013Wmic16Sd2rt7IBRnsmtJiQ/y5zLygL qCtfMVxXZHC3y+zxNxGSRX2xPIuk5BZTlqNfpStF4La7+lKGy8Ndz+De+r3bTBoA UezO7//F2ocNNzXW8WdaX79fTL68jAL5iOzwe3Ug8MHlefkHJb0INDuiiAPFAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUl+puCo6jut6xJnfjKD5PDDQcuLUwHwYDVR0j BBgwFoAU21u9swIQMU6QQLbJnb9p7oX6TuEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzMvREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4NUZBNEVFMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9EQjVCQkRCMzAyMTAzMTRFOTA0MEI2Qzk5 REJGNjlFRTg1RkE0RUUxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzNmOTllNjZkLTRjN2ItNDEzMC05MWQ1LTRmYmQ4NDM1Nzc5Mi8zL0RCNUJCREIz MDIxMDMxNEU5MDQwQjZDOTlEQkY2OUVFODVGQTRFRTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAig5l+ 6hUoOYi+kTRqL0RWpIN3qiAqtLI28n4Cw3DIuCZJm2UTHf3u+1vuIs/BhwhrVWU2 g7TRO0rGnm83Urb5dKTZ4hebX+Ifc+Zq6UcO/ENR79gUaleZ9g0Ha4IsrcJ8yKif tsxjN3zdPF5id9xrVcUIPgF9wI0d0HhgqS+RuGsUeSZvWIjzmBKS2dwI9a7FyqaC 1AUaIo+0RdL/WbSIouCvlRw4nWuOLhnX4gE2fstbwFSxCNKxw+LcYXz950a0wIei 7e9xio9QoHwiAZQ14mbV2nNezHlTKzUdX/nhJt/i7Vj8JH68ykqt/i2FmVOlgyBz 8BqV4DcISGljeESm -----END CERTIFICATE-----Generated at Sun Apr 19 02:37:41 2026 by rpki-client