$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft File: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft (raw, json) Hash identifier: 726u4z1BUDMLw2OlkBgXW8PlxDQqSrpUmopJBYUgpaY= Subject key identifier: C8:42:76:4E:3E:2F:13:24:D0:27:02:6F:2F:D4:D6:DC:12:75:66:0C Authority key identifier: DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 Certificate issuer: /CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Certificate serial: 42BB1DB2159EDA7C2E54002ED956ABAD9CD67A22 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft Manifest number: 0108 Signing time: Sun 26 Jul 2026 18:18:19 +0000 Manifest this update: Sun 26 Jul 2026 18:13:19 +0000 Manifest next update: Mon 27 Jul 2026 20:24:19 +0000 Files and hashes: 1: 326130663a316363353a326430333a3a2f34382d3438203d3e20323134393535.roa (hash: FhiRWcOhFd1e57IfPQu+2j0uinj7188+3VOrSYUtQ6c=) 2: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl (hash: 92w78a8vTNCraCnol47W9LpdcaPky148DJZbAmtbN/s=) 3: 326130663a316363353a326430313a3a2f34382d3438203d3e20323134393535.roa (hash: l0RMqMiAhgGDzLpuD3ZJuPudrozfegvLREqyl+4aP2I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 15:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:bb:1d:b2:15:9e:da:7c:2e:54:00:2e:d9:56:ab:ad:9c:d6:7a:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Validity Not Before: Jul 26 18:13:19 2026 GMT Not After : Jul 27 20:24:19 2026 GMT Subject: CN=C842764E3E2F1324D027026F2FD4D6DC1275660C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:48:b8:2b:19:5e:54:bf:13:98:46:34:6d:dd: 42:58:9e:d1:b2:01:5e:d9:57:8a:3e:ab:0a:3b:b7: e7:75:e4:d4:53:0a:11:c2:d4:46:48:e2:d3:46:10: 66:74:04:06:3a:76:9c:6b:aa:13:95:b0:40:61:36: 0f:82:c2:20:15:64:c5:90:f1:50:76:76:29:3e:b1: 36:0e:b8:c9:4c:2b:93:97:08:2b:47:d8:66:17:33: 6a:47:d6:9e:e5:c3:f1:88:5f:2b:e1:99:33:d6:d3: c3:b1:a8:08:d1:83:6e:ad:05:1f:27:4e:4b:8a:73: 36:f5:1b:c4:7b:dc:05:c5:44:dc:89:2c:e0:93:19: b9:f3:5d:24:50:4f:de:8b:d5:82:41:45:bb:91:5d: 17:7f:1c:a0:1d:8b:15:b3:aa:f3:1b:09:92:fc:65: 9d:33:fe:9e:bd:35:84:b9:90:d5:a5:a9:a3:2d:9d: 81:ad:33:c9:8f:d8:03:ea:50:06:d9:a1:00:08:8d: e0:7d:ad:85:c7:80:e0:5a:53:1d:00:e3:9e:3c:9a: d7:f5:f4:b6:b5:0f:62:cf:c0:91:6d:03:a1:5b:f6: 40:05:d9:c4:db:9d:0b:cd:9f:ad:9e:c9:ac:84:07: c4:83:d3:de:19:ab:a1:e3:46:18:6c:73:93:05:ac: cd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:42:76:4E:3E:2F:13:24:D0:27:02:6F:2F:D4:D6:DC:12:75:66:0C X509v3 Authority Key Identifier: keyid:DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:fc:95:aa:ee:14:99:33:40:bd:f5:64:a8:7b:d5:5c:5d:02: 56:9c:cb:6c:39:43:fb:9b:b1:f4:d7:37:14:19:38:ab:c1:b6: 18:ae:3e:5f:8f:1c:78:3a:ca:10:09:c4:06:7d:3a:fc:8d:e0: 8e:3a:74:6a:00:5a:db:39:05:fb:8d:76:78:dc:7c:0d:41:9c: 01:d4:fe:82:46:ca:4f:b4:80:bb:0a:55:a9:24:7f:d8:17:74: 29:64:71:fa:47:34:05:92:f5:af:88:f7:2b:93:3b:ba:3f:92: 69:dd:01:a4:7b:2a:46:41:18:34:97:c7:c8:9c:96:94:de:20: 5e:47:5b:6c:05:f3:ab:3d:f2:21:0b:c9:4f:d6:ba:30:0c:b1: 0b:fb:10:4e:3c:dd:4b:fb:8a:9f:9d:4f:cc:4d:d2:15:ca:c1: e0:97:6b:c0:9f:2f:4e:6b:51:9e:86:bd:23:4c:9e:d8:c8:68: 8a:9e:e3:f5:20:97:00:7e:1d:c0:74:7c:90:22:cb:a4:b2:0c: 3d:cc:b1:76:f4:45:7a:84:cf:94:6c:bd:5d:1f:2b:ea:ce:f2: 07:c2:2b:19:5e:a2:e5:ca:45:bb:5c:65:34:81:49:90:4c:1b: 31:ed:ff:e9:24:10:f5:49:9f:37:67:89:82:78:c9:de:a2:59: c3:3d:fa:28 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUQrsdshWe2nwuVAAu2VarrZzWeiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4 NUZBNEVFMTAeFw0yNjA3MjYxODEzMTlaFw0yNjA3MjcyMDI0MTlaMDMxMTAvBgNV BAMTKEM4NDI3NjRFM0UyRjEzMjREMDI3MDI2RjJGRDRENkRDMTI3NTY2MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvSLgrGV5UvxOYRjRt3UJYntGy AV7ZV4o+qwo7t+d15NRTChHC1EZI4tNGEGZ0BAY6dpxrqhOVsEBhNg+CwiAVZMWQ 8VB2dik+sTYOuMlMK5OXCCtH2GYXM2pH1p7lw/GIXyvhmTPW08OxqAjRg26tBR8n TkuKczb1G8R73AXFRNyJLOCTGbnzXSRQT96L1YJBRbuRXRd/HKAdixWzqvMbCZL8 ZZ0z/p69NYS5kNWlqaMtnYGtM8mP2APqUAbZoQAIjeB9rYXHgOBaUx0A4548mtf1 9La1D2LPwJFtA6Fb9kAF2cTbnQvNn62eyayEB8SD094Zq6HjRhhsc5MFrM23AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUyEJ2Tj4vEyTQJwJvL9TW3BJ1ZgwwHwYDVR0j BBgwFoAU21u9swIQMU6QQLbJnb9p7oX6TuEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzMvREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4NUZBNEVFMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9EQjVCQkRCMzAyMTAzMTRFOTA0MEI2Qzk5 REJGNjlFRTg1RkE0RUUxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzNmOTllNjZkLTRjN2ItNDEzMC05MWQ1LTRmYmQ4NDM1Nzc5Mi8zL0RCNUJCREIz MDIxMDMxNEU5MDQwQjZDOTlEQkY2OUVFODVGQTRFRTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAI/JWq 7hSZM0C99WSoe9VcXQJWnMtsOUP7m7H01zcUGTirwbYYrj5fjxx4OsoQCcQGfTr8 jeCOOnRqAFrbOQX7jXZ43HwNQZwB1P6CRspPtIC7ClWpJH/YF3QpZHH6RzQFkvWv iPcrkzu6P5Jp3QGkeypGQRg0l8fInJaU3iBeR1tsBfOrPfIhC8lP1rowDLEL+xBO PN1L+4qfnU/MTdIVysHgl2vAny9Oa1Gehr0jTJ7YyGiKnuP1IJcAfh3AdHyQIsuk sgw9zLF29EV6hM+UbL1dHyvqzvIHwisZXqLlykW7XGU0gUmQTBsx7f/pJBD1SZ83 Z4mCeMneolnDPfoo -----END CERTIFICATE-----Generated at Mon Jul 27 00:51:05 2026 by rpki-client