$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft File: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft (raw, json) Hash identifier: Z04T2fTBa0dm/+zS8SR9INffEqFKitCmapZMS1g1kno= Subject key identifier: C1:C4:8C:F1:EF:3C:FC:46:50:2C:23:E2:A4:66:5C:16:7E:C9:56:3E Authority key identifier: 5E:B2:E5:DA:D0:C6:99:6D:0A:80:A7:B9:0F:3A:2A:A6:0F:B1:A7:AC Certificate issuer: /CN=5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC Certificate serial: 370F0FD231CCD57BB1DB2536FAB510BAB3C7797E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft Manifest number: 014F Signing time: Mon 16 Mar 2026 17:16:31 +0000 Manifest this update: Mon 16 Mar 2026 17:11:31 +0000 Manifest next update: Tue 17 Mar 2026 17:19:31 +0000 Files and hashes: 1: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl (hash: GP2P3dV8AOiZOEYlofX4op3NpiAVGbC9Ij1SGG0Apog=) 2: 326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa (hash: hR947RLO80MjAy1fUiecS1oEpdE+fjwemP68Afa7Bvc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Mar 2026 10:05:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:0f:0f:d2:31:cc:d5:7b:b1:db:25:36:fa:b5:10:ba:b3:c7:79:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC Validity Not Before: Mar 16 17:11:31 2026 GMT Not After : Mar 17 17:19:31 2026 GMT Subject: CN=C1C48CF1EF3CFC46502C23E2A4665C167EC9563E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5d:6e:e1:78:c8:f7:53:54:32:77:a2:72:55: 17:51:8f:5c:96:4c:10:76:8e:1e:f0:00:50:19:f1: b6:ec:87:39:eb:d9:ad:86:1e:76:58:d9:a7:cc:b3: 17:1f:88:0e:15:74:c1:35:f8:5e:42:67:1f:32:66: 58:7d:f1:19:12:25:df:89:75:db:19:2e:d1:8e:1e: c4:44:0c:7d:0c:ac:62:1f:19:bd:f6:3c:78:cd:5d: 81:4e:31:d1:f6:54:7b:f8:02:d0:7e:71:28:6f:93: 96:75:1d:38:35:f3:b4:49:03:5c:67:2d:d5:04:be: b6:76:fe:c4:4a:83:5b:67:e2:94:d0:0d:91:27:8b: 5d:e8:cf:dc:50:16:e4:4d:9c:bc:8a:06:02:ba:46: d1:1b:8f:07:51:fc:77:f4:b0:dc:93:08:f0:8b:69: 82:ac:58:e5:ae:81:6f:1a:7d:2c:d3:7f:f8:fe:6b: 53:15:81:70:89:7a:b3:f6:ff:71:eb:7c:82:56:d3: 80:87:f4:88:2c:1d:9c:13:48:8b:ca:7e:09:b7:9e: 11:cc:4e:3e:48:d6:6b:3e:37:f1:1e:e8:2c:e9:32: 2c:20:2f:3d:d2:1d:86:9f:c9:fc:78:0b:a0:4a:26: df:67:52:6e:82:e4:9f:6a:d8:d8:67:c7:e3:b4:06: 7d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C4:8C:F1:EF:3C:FC:46:50:2C:23:E2:A4:66:5C:16:7E:C9:56:3E X509v3 Authority Key Identifier: keyid:5E:B2:E5:DA:D0:C6:99:6D:0A:80:A7:B9:0F:3A:2A:A6:0F:B1:A7:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:4d:54:fc:d7:55:6a:1e:c9:4e:2b:8b:a3:72:c7:11:28:b1: df:36:fd:5c:23:44:42:4a:10:56:fa:2d:de:a8:f1:d6:1e:50: 93:13:58:33:1b:18:ea:23:b6:a8:5d:f8:6b:dc:be:65:13:22: a4:e7:9c:03:ba:8f:6d:c2:71:75:24:34:5b:ed:0a:6f:1b:fc: 29:23:1e:a4:38:46:8b:f8:bc:aa:5a:a8:ff:a6:59:7d:c7:7e: 04:ba:94:61:f8:35:2e:2d:1f:51:89:b1:cd:0c:74:11:04:10: a6:41:a1:75:67:da:7d:fb:e9:25:9f:23:59:24:96:ef:4b:71: 9f:e3:9f:58:d1:4b:2d:40:a0:b5:fb:9c:1e:65:60:e4:c7:e3: 46:27:aa:b7:f5:f9:c5:41:80:a8:48:6b:88:23:7e:59:91:fa: 53:4f:7b:49:81:65:70:6c:ea:53:a6:9f:35:24:3b:0e:f6:47: 72:88:8c:ab:a7:1a:31:f8:db:c1:75:85:78:88:4b:43:41:9c: 7a:6a:ac:d9:91:c8:e1:4c:dd:7e:cb:9f:fc:00:8a:05:06:23: 5f:81:84:71:38:26:4d:4d:07:05:50:6c:1f:41:ad:1d:22:f4: ae:f7:25:06:6d:69:23:5f:8a:41:a8:a7:b9:f4:4d:8f:05:47: 41:78:e5:3e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUNw8P0jHM1Xux2yU2+rUQurPHeX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVCMkU1REFEMEM2OTk2RDBBODBBN0I5MEYzQTJBQTYw RkIxQTdBQzAeFw0yNjAzMTYxNzExMzFaFw0yNjAzMTcxNzE5MzFaMDMxMTAvBgNV BAMTKEMxQzQ4Q0YxRUYzQ0ZDNDY1MDJDMjNFMkE0NjY1QzE2N0VDOTU2M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1XW7heMj3U1Qyd6JyVRdRj1yW TBB2jh7wAFAZ8bbshznr2a2GHnZY2afMsxcfiA4VdME1+F5CZx8yZlh98RkSJd+J ddsZLtGOHsREDH0MrGIfGb32PHjNXYFOMdH2VHv4AtB+cShvk5Z1HTg187RJA1xn LdUEvrZ2/sRKg1tn4pTQDZEni13oz9xQFuRNnLyKBgK6RtEbjwdR/Hf0sNyTCPCL aYKsWOWugW8afSzTf/j+a1MVgXCJerP2/3HrfIJW04CH9IgsHZwTSIvKfgm3nhHM Tj5I1ms+N/Ee6CzpMiwgLz3SHYafyfx4C6BKJt9nUm6C5J9q2Nhnx+O0Bn2xAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUwcSM8e88/EZQLCPipGZcFn7JVj4wHwYDVR0j BBgwFoAUXrLl2tDGmW0KgKe5Dzoqpg+xp6wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVl YjdkLzQvNUVCMkU1REFEMEM2OTk2RDBBODBBN0I5MEYzQTJBQTYwRkIxQTdBQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC81RUIyRTVEQUQwQzY5OTZEMEE4MEE3Qjkw RjNBMkFBNjBGQjFBN0FDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M5OTI2NWVmLTIyYTktNDEwMC1hMjNkLTUxYTlkOWZlZWI3ZC80LzVFQjJFNURB RDBDNjk5NkQwQTgwQTdCOTBGM0EyQUE2MEZCMUE3QUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA5TVT8 11VqHslOK4ujcscRKLHfNv1cI0RCShBW+i3eqPHWHlCTE1gzGxjqI7aoXfhr3L5l EyKk55wDuo9twnF1JDRb7QpvG/wpIx6kOEaL+LyqWqj/pll9x34EupRh+DUuLR9R ibHNDHQRBBCmQaF1Z9p9++klnyNZJJbvS3Gf459Y0UstQKC1+5weZWDkx+NGJ6q3 9fnFQYCoSGuII35ZkfpTT3tJgWVwbOpTpp81JDsO9kdyiIyrpxox+NvBdYV4iEtD QZx6aqzZkcjhTN1+y5/8AIoFBiNfgYRxOCZNTQcFUGwfQa0dIvSu9yUGbWkjX4pB qKe59E2PBUdBeOU+ -----END CERTIFICATE-----Generated at Tue Mar 17 00:40:26 2026 by rpki-client