$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft File: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft (raw, json) Hash identifier: dUqZafo8hexCBcl108s7HtvaMWZdiQTA00cjIj8p+ws= Subject key identifier: 30:86:79:5B:51:D9:34:1B:DD:69:CD:7E:91:A9:11:E3:4C:C4:21:1B Authority key identifier: DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 Certificate issuer: /CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Certificate serial: 123D40589F54840CF68C28C50B47F0C4B4A24DAA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft Manifest number: 014C Signing time: Thu 10 Sep 2026 07:46:46 +0000 Manifest this update: Thu 10 Sep 2026 07:41:46 +0000 Manifest next update: Fri 11 Sep 2026 09:53:46 +0000 Files and hashes: 1: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl (hash: NmS0NPn4X11x+egVGtN0xqS8oy2PUt/gY/CPRLUVGg8=) 2: 326130663a316363353a326430333a3a2f34382d3438203d3e20323134393535.roa (hash: FhiRWcOhFd1e57IfPQu+2j0uinj7188+3VOrSYUtQ6c=) 3: 326130663a316363353a326430313a3a2f34382d3438203d3e20323134393535.roa (hash: l0RMqMiAhgGDzLpuD3ZJuPudrozfegvLREqyl+4aP2I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 04:35:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:3d:40:58:9f:54:84:0c:f6:8c:28:c5:0b:47:f0:c4:b4:a2:4d:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Validity Not Before: Sep 10 07:41:46 2026 GMT Not After : Sep 11 09:53:46 2026 GMT Subject: CN=3086795B51D9341BDD69CD7E91A911E34CC4211B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f2:09:6e:bc:42:e9:45:01:f4:11:db:42:70: ce:a6:74:77:22:45:99:07:0a:81:99:eb:b2:95:df: 4f:79:9f:f3:7b:ba:f7:c4:f1:29:66:0c:79:8e:ff: bb:bf:c7:d0:7f:bc:0f:32:33:22:f8:66:84:90:6b: e2:de:8f:33:bd:7c:3d:7f:e5:7e:1d:4a:fb:5e:44: 0d:18:f7:f6:2d:21:4d:1f:6b:8b:83:4a:c2:f5:be: 2b:76:24:59:20:7b:be:e1:2d:b3:b7:ef:50:ec:ee: 6e:41:14:93:2d:04:28:14:d9:ec:a7:aa:0d:b8:e2: 0e:96:d0:06:b9:8a:3d:ed:bc:c9:c8:00:50:eb:56: b2:a2:51:be:a3:95:ec:7a:72:e5:8c:f7:d6:81:44: 1f:87:6a:41:09:cf:49:15:06:df:f0:08:0f:6e:ff: b6:4a:be:fe:f2:cb:a6:bb:31:ea:08:b1:a4:65:a6: 36:ac:f8:f5:c2:32:06:92:aa:9e:3c:c8:57:44:15: 0f:34:b6:cb:59:ca:70:f8:30:f1:2d:4e:6b:1c:a7: 5a:77:80:1b:14:ec:cc:b0:2f:aa:16:23:a0:1a:58: d6:e1:d4:07:55:48:03:62:f0:80:4c:07:94:ed:1a: 99:67:5b:5d:37:ca:f8:7f:4d:c3:20:81:8b:79:3c: 32:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:86:79:5B:51:D9:34:1B:DD:69:CD:7E:91:A9:11:E3:4C:C4:21:1B X509v3 Authority Key Identifier: keyid:DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:91:d4:17:bc:0c:b5:33:05:81:d3:68:95:79:23:36:25:e3: 90:11:45:bc:b7:f8:31:d8:31:9a:99:64:79:34:65:14:74:70: 18:c2:dd:44:80:9b:e7:c8:a9:36:7b:b2:03:8b:8d:ea:29:66: 75:76:32:f0:98:69:09:98:b5:5b:12:b3:c9:41:0a:53:6c:27: 49:75:79:06:6e:61:06:c9:69:ac:29:c7:9e:b4:26:e5:eb:a2: 0e:13:71:7f:2a:9b:ea:72:42:43:d4:2c:14:cf:c7:fb:bd:e1: be:f8:88:72:1c:fa:5d:c4:bb:bf:0d:c3:0e:b7:38:f7:bc:92: 4e:2e:1c:05:75:3a:33:80:bb:fb:d7:3b:e6:96:fe:9b:fd:98: f7:da:d3:fe:42:c7:cd:27:44:ec:da:fe:85:d0:92:8b:51:75: 12:05:9b:69:cf:2e:de:60:97:9a:4f:4a:00:eb:9e:c2:9f:08: 9a:a1:d5:39:c1:63:0c:db:a4:bc:ce:c9:24:4d:7c:ce:04:7c: 1a:ee:a9:74:cd:61:c7:ec:11:9b:d3:8a:73:26:36:f0:7c:86: f9:50:d0:58:e4:79:1c:76:52:5f:c0:24:01:eb:34:df:c1:ef: a8:f0:0c:86:14:ef:29:db:11:2f:f4:ec:90:80:d0:06:82:22: ae:d0:d6:08 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUEj1AWJ9UhAz2jCjFC0fwxLSiTaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4 NUZBNEVFMTAeFw0yNjA5MTAwNzQxNDZaFw0yNjA5MTEwOTUzNDZaMDMxMTAvBgNV BAMTKDMwODY3OTVCNTFEOTM0MUJERDY5Q0Q3RTkxQTkxMUUzNENDNDIxMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCK8gluvELpRQH0EdtCcM6mdHci RZkHCoGZ67KV3095n/N7uvfE8SlmDHmO/7u/x9B/vA8yMyL4ZoSQa+LejzO9fD1/ 5X4dSvteRA0Y9/YtIU0fa4uDSsL1vit2JFkge77hLbO371Ds7m5BFJMtBCgU2eyn qg244g6W0Aa5ij3tvMnIAFDrVrKiUb6jlex6cuWM99aBRB+HakEJz0kVBt/wCA9u /7ZKvv7yy6a7MeoIsaRlpjas+PXCMgaSqp48yFdEFQ80tstZynD4MPEtTmscp1p3 gBsU7MywL6oWI6AaWNbh1AdVSANi8IBMB5TtGplnW103yvh/TcMggYt5PDLnAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUMIZ5W1HZNBvdac1+kakR40zEIRswHwYDVR0j BBgwFoAU21u9swIQMU6QQLbJnb9p7oX6TuEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzMvREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4NUZBNEVFMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9EQjVCQkRCMzAyMTAzMTRFOTA0MEI2Qzk5 REJGNjlFRTg1RkE0RUUxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzNmOTllNjZkLTRjN2ItNDEzMC05MWQ1LTRmYmQ4NDM1Nzc5Mi8zL0RCNUJCREIz MDIxMDMxNEU5MDQwQjZDOTlEQkY2OUVFODVGQTRFRTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAEkdQX vAy1MwWB02iVeSM2JeOQEUW8t/gx2DGamWR5NGUUdHAYwt1EgJvnyKk2e7IDi43q KWZ1djLwmGkJmLVbErPJQQpTbCdJdXkGbmEGyWmsKceetCbl66IOE3F/KpvqckJD 1CwUz8f7veG++IhyHPpdxLu/DcMOtzj3vJJOLhwFdTozgLv71zvmlv6b/Zj32tP+ QsfNJ0Ts2v6F0JKLUXUSBZtpzy7eYJeaT0oA657CnwiaodU5wWMM26S8zskkTXzO BHwa7ql0zWHH7BGb04pzJjbwfIb5UNBY5HkcdlJfwCQB6zTfwe+o8AyGFO8p2xEv 9OyQgNAGgiKu0NYI -----END CERTIFICATE-----Generated at Thu Sep 10 14:49:35 2026 by rpki-client