$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft File: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft (raw, json) Hash identifier: 6sAV+1/fe5y7p1SllEJYsHmX9oMIVdKe52IqYp0AgLU= Subject key identifier: 51:E4:C4:DC:89:EC:FC:8B:8F:DB:1E:9E:1C:67:50:F3:C8:12:43:3C Authority key identifier: DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 Certificate issuer: /CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Certificate serial: 188030B0DD8A007DF370127C11F54D7C1A11FE0C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft Manifest number: 018B Signing time: Tue 27 Oct 2026 01:00:29 +0000 Manifest this update: Tue 27 Oct 2026 00:55:29 +0000 Manifest next update: Wed 28 Oct 2026 03:57:29 +0000 Files and hashes: 1: 326130663a316363353a326430333a3a2f34382d3438203d3e20323134393535.roa (hash: FhiRWcOhFd1e57IfPQu+2j0uinj7188+3VOrSYUtQ6c=) 2: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl (hash: Fjb2vxoA/X+o07UFFX719fxDi9aa46Usi+rTHxaxBFw=) 3: 326130663a316363353a326430313a3a2f34382d3438203d3e20323134393535.roa (hash: l0RMqMiAhgGDzLpuD3ZJuPudrozfegvLREqyl+4aP2I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 20:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:80:30:b0:dd:8a:00:7d:f3:70:12:7c:11:f5:4d:7c:1a:11:fe:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Validity Not Before: Oct 27 00:55:29 2026 GMT Not After : Oct 28 03:57:29 2026 GMT Subject: CN=51E4C4DC89ECFC8B8FDB1E9E1C6750F3C812433C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7f:b2:99:e3:6e:d1:89:e9:da:c7:22:90:2c: 6a:df:11:74:6a:96:d6:7b:2b:e2:08:67:68:32:cf: 37:70:63:88:6e:ab:04:60:79:bc:3c:fb:28:f4:72: e3:17:53:0a:b2:ef:11:33:c6:03:8f:76:18:52:9c: 38:97:54:4d:58:8f:28:3e:d0:77:0d:db:9b:49:47: 8b:1b:e3:e7:15:13:15:5c:75:6a:4d:f3:d0:29:f6: 1b:b5:be:d9:e9:12:cf:16:5e:14:3a:b3:7f:11:55: 72:c3:5f:f6:c4:8d:96:c0:83:c0:ad:39:65:a6:de: 38:90:35:fd:b4:1a:93:cb:d0:b5:e9:76:31:a6:34: b5:83:5d:7d:74:5b:b8:a1:b4:b6:82:00:c5:68:e9: d3:55:29:63:87:5a:32:e1:37:36:eb:cd:8b:43:c8: fd:9c:7b:80:ae:92:97:ae:75:8d:dd:cb:ae:c6:3b: 93:71:db:3e:38:b5:6b:56:1e:d4:f2:7a:c3:a0:9c: 94:32:62:b9:20:b0:f2:06:18:b2:be:7e:13:38:b1: e3:ca:de:c9:3e:78:bc:6e:5b:9d:c8:3e:9c:49:5c: c1:b1:7a:b3:4a:4b:19:d1:66:03:21:17:ab:ba:27: 89:f1:47:c3:ac:64:61:39:98:0b:73:31:6c:27:6b: d2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E4:C4:DC:89:EC:FC:8B:8F:DB:1E:9E:1C:67:50:F3:C8:12:43:3C X509v3 Authority Key Identifier: keyid:DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:0b:23:7b:33:9d:49:aa:36:9e:7a:32:bf:c6:cf:0a:02:81: b2:8e:e7:0a:9b:de:a9:1a:7d:d6:3f:f7:49:3e:ff:a4:63:63: 79:c9:71:e7:b6:13:c2:69:95:44:ed:be:56:11:9f:cb:f4:e8: 0a:15:bc:d9:55:89:9d:b6:64:0a:69:ae:47:45:ad:a5:ab:f9: 74:58:b5:d1:40:e9:da:ad:39:fe:01:8a:b9:16:c9:57:64:e0: 57:01:fb:68:d7:91:1a:c7:90:e0:ec:df:be:a4:d0:ae:00:c7: 0c:19:31:8c:53:4e:bc:19:4a:ce:9b:c5:09:a0:77:9c:e2:ce: 26:35:c5:62:0e:8e:e7:45:fc:6f:74:e7:a1:ed:c9:fc:69:b0: ac:13:65:d0:fa:1f:94:c8:a5:3b:f6:08:77:3e:7f:c0:56:df: 48:9e:d7:00:ad:95:eb:24:60:b8:db:d6:f9:2c:8e:c6:25:89: c4:3d:49:1a:7b:60:30:88:18:aa:97:61:5c:dd:31:c3:81:3e: 44:46:71:60:27:3c:de:ae:8e:4a:40:2c:97:c4:af:50:28:a4: 98:55:5b:04:f5:1f:21:15:2a:45:f4:70:1a:ba:14:8b:dd:56: 80:8e:a2:e2:75:c7:1c:b7:84:a5:01:f6:96:54:50:0b:5b:83: 61:f1:06:8b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUGIAwsN2KAH3zcBJ8EfVNfBoR/gwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4 NUZBNEVFMTAeFw0yNjEwMjcwMDU1MjlaFw0yNjEwMjgwMzU3MjlaMDMxMTAvBgNV BAMTKDUxRTRDNERDODlFQ0ZDOEI4RkRCMUU5RTFDNjc1MEYzQzgxMjQzM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCff7KZ427RienaxyKQLGrfEXRq ltZ7K+IIZ2gyzzdwY4huqwRgebw8+yj0cuMXUwqy7xEzxgOPdhhSnDiXVE1Yjyg+ 0HcN25tJR4sb4+cVExVcdWpN89Ap9hu1vtnpEs8WXhQ6s38RVXLDX/bEjZbAg8Ct OWWm3jiQNf20GpPL0LXpdjGmNLWDXX10W7ihtLaCAMVo6dNVKWOHWjLhNzbrzYtD yP2ce4CukpeudY3dy67GO5Nx2z44tWtWHtTyesOgnJQyYrkgsPIGGLK+fhM4sePK 3sk+eLxuW53IPpxJXMGxerNKSxnRZgMhF6u6J4nxR8OsZGE5mAtzMWwna9I5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUUeTE3Ins/IuP2x6eHGdQ88gSQzwwHwYDVR0j BBgwFoAU21u9swIQMU6QQLbJnb9p7oX6TuEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzMvREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4NUZBNEVFMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9EQjVCQkRCMzAyMTAzMTRFOTA0MEI2Qzk5 REJGNjlFRTg1RkE0RUUxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzNmOTllNjZkLTRjN2ItNDEzMC05MWQ1LTRmYmQ4NDM1Nzc5Mi8zL0RCNUJCREIz MDIxMDMxNEU5MDQwQjZDOTlEQkY2OUVFODVGQTRFRTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBkCyN7 M51JqjaeejK/xs8KAoGyjucKm96pGn3WP/dJPv+kY2N5yXHnthPCaZVE7b5WEZ/L 9OgKFbzZVYmdtmQKaa5HRa2lq/l0WLXRQOnarTn+AYq5FslXZOBXAfto15Eax5Dg 7N++pNCuAMcMGTGMU068GUrOm8UJoHec4s4mNcViDo7nRfxvdOeh7cn8abCsE2XQ +h+UyKU79gh3Pn/AVt9IntcArZXrJGC429b5LI7GJYnEPUkae2AwiBiql2Fc3THD gT5ERnFgJzzero5KQCyXxK9QKKSYVVsE9R8hFSpF9HAauhSL3VaAjqLidccct4Sl AfaWVFALW4Nh8QaL -----END CERTIFICATE-----Generated at Tue Oct 27 05:58:17 2026 by rpki-client