$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft File: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft (raw, json) Hash identifier: nPgn0jLSUxjkO7s3kxOwTzRJE/9ymLRGDJc9ywjjDx0= Subject key identifier: 43:1D:46:E8:ED:A8:AA:86:84:CC:83:27:A4:EB:CC:D9:36:18:1F:AD Authority key identifier: DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 Certificate issuer: /CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Certificate serial: 2144967CA72A6993D89665A394CAD91487A3D2F4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft Manifest number: 45 Signing time: Wed 04 Mar 2026 16:17:20 +0000 Manifest this update: Wed 04 Mar 2026 16:12:20 +0000 Manifest next update: Thu 05 Mar 2026 19:42:20 +0000 Files and hashes: 1: 326130663a316363353a326430323a3a2f34382d3438203d3e20323134393535.roa (hash: VVawYWTXQjQEBU4mla6uw3/riEywDPfxqIz2zpx9eTU=) 2: 326130663a316363353a326430313a3a2f34382d3438203d3e20323134393535.roa (hash: l0RMqMiAhgGDzLpuD3ZJuPudrozfegvLREqyl+4aP2I=) 3: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl (hash: u0/q9y5A5jy1XvFR5pyu2WZonsk5zQ5uLr2GwZgjCkw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Mar 2026 14:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:44:96:7c:a7:2a:69:93:d8:96:65:a3:94:ca:d9:14:87:a3:d2:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Validity Not Before: Mar 4 16:12:20 2026 GMT Not After : Mar 5 19:42:20 2026 GMT Subject: CN=431D46E8EDA8AA8684CC8327A4EBCCD936181FAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f9:a5:04:3e:a1:2c:98:b8:60:c6:6c:f6:b8: ed:55:c0:8c:b6:ee:32:43:1c:6d:a4:97:9e:72:90: 64:0c:6b:2f:af:47:57:36:7b:4c:ab:94:bb:df:df: 15:07:61:1a:a9:8d:41:31:0b:43:7e:98:38:cb:fa: 1c:86:a6:89:6a:4b:06:af:cb:2d:4e:fe:07:3f:f9: c7:1c:da:f6:5a:e4:c6:53:5e:e9:8e:e9:99:29:5d: 14:1a:2c:0b:68:41:a3:e3:e4:d8:b1:1b:3c:cd:17: 2e:0b:f2:68:3b:f1:bb:05:11:ee:e3:9c:60:9e:ba: 98:dc:33:ee:54:02:1d:0c:0d:f3:52:ac:20:cf:cb: 54:cb:04:ee:d8:be:c7:34:0d:5e:b7:91:2b:f2:bf: 0a:6c:84:04:1a:cb:1a:8c:85:96:8e:c6:10:54:e0: 77:9a:cb:20:00:d1:06:05:39:37:7f:6c:23:1e:25: 55:a5:ab:d1:3a:cd:d8:7c:38:ac:e9:b4:49:68:18: d2:aa:13:4d:35:82:e2:ea:ad:fc:37:2f:c8:87:2f: ef:1f:7e:75:ac:16:fc:a1:92:52:9f:1d:bf:bf:6f: 4c:51:ea:7b:c6:e9:bd:93:15:25:18:4e:de:46:76: 24:e9:bc:f3:a8:1a:34:ef:cd:f0:a0:33:d7:7f:47: 93:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1D:46:E8:ED:A8:AA:86:84:CC:83:27:A4:EB:CC:D9:36:18:1F:AD X509v3 Authority Key Identifier: keyid:DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:bd:99:d1:b8:76:f1:13:f8:7a:6d:d1:6c:4f:5f:82:85:8b: 73:69:21:58:a6:2f:e8:0a:5e:52:34:7d:6e:19:00:95:d1:7d: 61:4e:2c:89:16:2d:5f:ed:a0:ea:fd:09:24:c6:de:b0:67:c6: ae:be:87:38:04:a0:75:cf:f9:e9:5f:65:f6:3a:31:5a:72:f0: 0c:cf:00:15:3f:00:38:6d:ea:1b:f4:b9:92:1c:eb:e0:2b:bd: b1:70:e1:cd:58:7c:62:00:2f:8b:cc:92:4e:c7:43:cc:11:35: 8c:1b:96:cb:d5:f0:04:26:b9:e7:16:e0:c7:fd:f2:92:f6:6c: 98:15:91:53:5c:e4:2a:c3:2a:57:14:b0:0a:db:30:29:64:56: b2:77:c9:5d:ea:1b:2f:97:62:e4:58:74:60:6a:97:9c:da:99: 83:37:35:41:e8:00:75:b2:f5:13:96:76:21:2d:6d:a3:a3:15: ad:e5:cf:91:b5:cc:7e:83:3c:72:9a:78:68:a0:6d:ae:dc:aa: 46:b2:ce:27:8e:e9:78:48:57:e2:d6:fd:b2:28:06:d6:95:54: be:e8:b8:41:ba:de:35:8c:3b:72:c5:69:dd:85:e6:4f:1c:70: 1b:06:7d:18:74:1c:9d:53:57:60:06:58:88:d2:fa:d2:ba:d7: bd:ee:f4:4c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUIUSWfKcqaZPYlmWjlMrZFIej0vQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4 NUZBNEVFMTAeFw0yNjAzMDQxNjEyMjBaFw0yNjAzMDUxOTQyMjBaMDMxMTAvBgNV BAMTKDQzMUQ0NkU4RURBOEFBODY4NENDODMyN0E0RUJDQ0Q5MzYxODFGQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr+aUEPqEsmLhgxmz2uO1VwIy2 7jJDHG2kl55ykGQMay+vR1c2e0yrlLvf3xUHYRqpjUExC0N+mDjL+hyGpolqSwav yy1O/gc/+ccc2vZa5MZTXumO6ZkpXRQaLAtoQaPj5NixGzzNFy4L8mg78bsFEe7j nGCeupjcM+5UAh0MDfNSrCDPy1TLBO7Yvsc0DV63kSvyvwpshAQayxqMhZaOxhBU 4HeayyAA0QYFOTd/bCMeJVWlq9E6zdh8OKzptEloGNKqE001guLqrfw3L8iHL+8f fnWsFvyhklKfHb+/b0xR6nvG6b2TFSUYTt5GdiTpvPOoGjTvzfCgM9d/R5NFAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUQx1G6O2oqoaEzIMnpOvM2TYYH60wHwYDVR0j BBgwFoAU21u9swIQMU6QQLbJnb9p7oX6TuEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzMvREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4NUZBNEVFMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9EQjVCQkRCMzAyMTAzMTRFOTA0MEI2Qzk5 REJGNjlFRTg1RkE0RUUxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzNmOTllNjZkLTRjN2ItNDEzMC05MWQ1LTRmYmQ4NDM1Nzc5Mi8zL0RCNUJCREIz MDIxMDMxNEU5MDQwQjZDOTlEQkY2OUVFODVGQTRFRTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/vZnR uHbxE/h6bdFsT1+ChYtzaSFYpi/oCl5SNH1uGQCV0X1hTiyJFi1f7aDq/Qkkxt6w Z8auvoc4BKB1z/npX2X2OjFacvAMzwAVPwA4beob9LmSHOvgK72xcOHNWHxiAC+L zJJOx0PMETWMG5bL1fAEJrnnFuDH/fKS9myYFZFTXOQqwypXFLAK2zApZFayd8ld 6hsvl2LkWHRgapec2pmDNzVB6AB1svUTlnYhLW2joxWt5c+Rtcx+gzxymnhooG2u 3KpGss4njul4SFfi1v2yKAbWlVS+6LhBut41jDtyxWndheZPHHAbBn0YdBydU1dg BliI0vrSute97vRM -----END CERTIFICATE-----Generated at Wed Mar 4 19:35:26 2026 by rpki-client