$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft File: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft (raw, json) Hash identifier: cGRRPOKj7u6+3YH90VbkBaaM6XkS6JVlppjtA+ITWlw= Subject key identifier: C1:0E:F3:6C:B4:32:D1:F2:2B:5A:1E:44:A9:99:C1:89:EE:58:26:2F Authority key identifier: DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 Certificate issuer: /CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Certificate serial: 6E59BE9E74C7E1241FD69BE38C3A913DDAC4EEA3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft Manifest number: CB Signing time: Thu 11 Jun 2026 07:44:44 +0000 Manifest this update: Thu 11 Jun 2026 07:39:44 +0000 Manifest next update: Fri 12 Jun 2026 09:29:44 +0000 Files and hashes: 1: 326130663a316363353a326430313a3a2f34382d3438203d3e20323134393535.roa (hash: l0RMqMiAhgGDzLpuD3ZJuPudrozfegvLREqyl+4aP2I=) 2: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl (hash: UJeGH459J0QmR0lUJpRLkck+J3Zvxd/WsnNut5O6jQk=) 3: 326130663a316363353a326430333a3a2f34382d3438203d3e20323134393535.roa (hash: FhiRWcOhFd1e57IfPQu+2j0uinj7188+3VOrSYUtQ6c=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 09:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:59:be:9e:74:c7:e1:24:1f:d6:9b:e3:8c:3a:91:3d:da:c4:ee:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Validity Not Before: Jun 11 07:39:44 2026 GMT Not After : Jun 12 09:29:44 2026 GMT Subject: CN=C10EF36CB432D1F22B5A1E44A999C189EE58262F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:99:11:61:f7:71:48:55:30:3d:49:33:c7:20: 5c:cc:b3:6b:78:73:6e:66:4a:03:55:01:16:d3:e0: 70:b4:32:88:ad:3e:e4:e7:9d:c8:d9:2b:4c:e2:ea: 2c:db:da:62:d8:72:41:60:e9:6f:0f:cb:03:da:87: ad:b9:ee:0f:fb:fe:76:68:be:a7:d8:5f:93:e8:46: 6f:11:b2:9a:57:92:94:33:84:5e:2e:cd:f3:28:1c: 9c:50:bf:72:9e:3b:fd:bc:fd:25:46:7f:6e:ce:21: 98:df:02:10:b7:72:08:f1:25:0a:6d:5d:bb:3a:e4: 7a:b0:c1:51:27:be:ec:04:3c:75:5e:85:15:b4:dd: 99:e8:c5:be:8b:bf:ad:42:6f:7b:aa:18:c3:bd:df: ee:6f:d1:ec:25:96:09:fa:03:ec:f6:81:8f:91:56: ce:17:3d:3f:6d:6a:62:1e:9d:4e:11:dc:06:ac:c5: a5:6e:af:3e:ab:e7:18:a4:d6:ea:a1:bc:ec:f3:ab: 8b:ee:f0:a3:b5:74:f0:68:f6:07:af:04:ab:84:d2: c3:cb:d6:d6:13:2f:33:2d:3b:a4:86:84:c1:47:99: ae:4b:f1:b1:eb:06:8c:fb:fb:b0:1f:04:36:33:52: 70:ce:79:df:72:08:8e:19:2f:7f:65:87:03:a9:6b: 82:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:0E:F3:6C:B4:32:D1:F2:2B:5A:1E:44:A9:99:C1:89:EE:58:26:2F X509v3 Authority Key Identifier: keyid:DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:b6:b2:a8:7a:e7:c6:73:e3:0d:bf:4c:41:15:35:e3:64:48: 91:0f:64:43:a3:e8:ad:d7:02:71:f8:82:7f:07:9b:cc:d2:63: e3:ff:d8:d9:bd:7b:46:b6:09:9f:bd:a2:36:08:38:51:4d:12: 3b:4d:51:85:bf:67:6d:27:59:d8:57:85:53:c2:77:a2:24:bc: ab:2f:01:ac:ae:41:19:3f:a1:c0:71:db:7e:9b:5e:06:3d:5f: 2e:31:67:c3:be:44:b8:22:33:4d:49:d7:be:17:4b:74:2d:c3: 9a:5a:c3:8d:10:f7:a9:5f:1d:52:c0:81:bb:d8:e2:df:c5:ed: eb:a9:70:66:9c:3e:51:57:8b:6d:97:60:a2:9c:da:6a:a4:34: 8f:48:da:6c:bd:cf:dc:e8:41:5b:03:bf:d2:e1:f3:ed:93:af: df:69:51:ca:e1:88:13:2c:d1:4f:3d:4c:b7:9a:1c:b1:71:ec: ff:b5:9b:08:78:fb:71:b8:5e:b9:25:aa:05:19:a8:8e:13:52: 75:93:53:1b:2e:08:a3:23:c8:3e:5b:21:88:ec:14:c1:77:c8: d2:24:b5:7e:38:bb:2b:d1:d5:47:7e:21:87:d4:00:5c:61:dd: dd:c5:cb:4c:70:bc:46:5f:ef:61:73:48:09:1b:07:73:47:b4: b1:00:ed:af -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUblm+nnTH4SQf1pvjjDqRPdrE7qMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4 NUZBNEVFMTAeFw0yNjA2MTEwNzM5NDRaFw0yNjA2MTIwOTI5NDRaMDMxMTAvBgNV BAMTKEMxMEVGMzZDQjQzMkQxRjIyQjVBMUU0NEE5OTlDMTg5RUU1ODI2MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCimRFh93FIVTA9STPHIFzMs2t4 c25mSgNVARbT4HC0MoitPuTnncjZK0zi6izb2mLYckFg6W8PywPah6257g/7/nZo vqfYX5PoRm8RsppXkpQzhF4uzfMoHJxQv3KeO/28/SVGf27OIZjfAhC3cgjxJQpt Xbs65HqwwVEnvuwEPHVehRW03Znoxb6Lv61Cb3uqGMO93+5v0ewllgn6A+z2gY+R Vs4XPT9tamIenU4R3AasxaVurz6r5xik1uqhvOzzq4vu8KO1dPBo9gevBKuE0sPL 1tYTLzMtO6SGhMFHma5L8bHrBoz7+7AfBDYzUnDOed9yCI4ZL39lhwOpa4IxAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUwQ7zbLQy0fIrWh5EqZnBie5YJi8wHwYDVR0j BBgwFoAU21u9swIQMU6QQLbJnb9p7oX6TuEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzMvREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4NUZBNEVFMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9EQjVCQkRCMzAyMTAzMTRFOTA0MEI2Qzk5 REJGNjlFRTg1RkE0RUUxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzNmOTllNjZkLTRjN2ItNDEzMC05MWQ1LTRmYmQ4NDM1Nzc5Mi8zL0RCNUJCREIz MDIxMDMxNEU5MDQwQjZDOTlEQkY2OUVFODVGQTRFRTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC5trKo eufGc+MNv0xBFTXjZEiRD2RDo+it1wJx+IJ/B5vM0mPj/9jZvXtGtgmfvaI2CDhR TRI7TVGFv2dtJ1nYV4VTwneiJLyrLwGsrkEZP6HAcdt+m14GPV8uMWfDvkS4IjNN Sde+F0t0LcOaWsONEPepXx1SwIG72OLfxe3rqXBmnD5RV4ttl2CinNpqpDSPSNps vc/c6EFbA7/S4fPtk6/faVHK4YgTLNFPPUy3mhyxcez/tZsIePtxuF65JaoFGaiO E1J1k1MbLgijI8g+WyGI7BTBd8jSJLV+OLsr0dVHfiGH1ABcYd3dxctMcLxGX+9h c0gJGwdzR7SxAO2v -----END CERTIFICATE-----Generated at Thu Jun 11 20:30:54 2026 by rpki-client