$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft File: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft (raw, json) Hash identifier: wUeozVhl9jXzHiLCBx+w4tbdmi7dx404SSzY5GQJOIg= Subject key identifier: EC:5B:5A:49:FE:6B:43:E1:06:17:1D:FC:58:CE:6F:53:45:9D:15:23 Authority key identifier: 5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F Certificate issuer: /CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Certificate serial: 6F1E5F349F5DFE5480DCAB3D196C82E7A1BD36F0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft Manifest number: 0184 Signing time: Sat 18 Apr 2026 19:54:47 +0000 Manifest this update: Sat 18 Apr 2026 19:49:47 +0000 Manifest next update: Sun 19 Apr 2026 22:43:47 +0000 Files and hashes: 1: 326130363a396634313a3130303a3a2f34302d3430203d3e20323134373233.roa (hash: sTs8O8KBp3/QEgTlhnDJhb+nhykdynr848iPv4Z/TIo=) 2: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl (hash: UWbJgpK+3F9uH4Wn4c9Y/KZVwP2uAdzZfIR9mqg7du0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 Apr 2026 17:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:1e:5f:34:9f:5d:fe:54:80:dc:ab:3d:19:6c:82:e7:a1:bd:36:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Validity Not Before: Apr 18 19:49:47 2026 GMT Not After : Apr 19 22:43:47 2026 GMT Subject: CN=EC5B5A49FE6B43E106171DFC58CE6F53459D1523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f4:be:5a:06:57:22:46:ca:ad:57:b2:53:f4: 6f:c0:84:88:f0:be:fb:1b:10:ab:f7:36:62:a3:40: e5:7a:a4:44:f4:a0:a0:b2:d2:70:f3:85:95:d8:2f: d2:27:6f:98:8c:93:46:f3:dd:81:37:64:68:ce:5a: 05:37:ba:c4:cc:3b:4e:2c:01:a2:39:cc:7c:48:81: aa:30:52:de:72:56:ec:2d:01:5e:0a:f4:ae:db:53: ef:fd:8d:4e:30:1a:3b:ae:5f:2f:01:74:c8:5a:a6: 0a:13:e1:ac:0a:0c:6b:29:48:18:13:77:30:4c:ef: 7b:d1:c2:7d:be:b9:3e:6b:99:e7:b6:4a:6b:cc:f9: 44:e7:c0:34:41:e0:f6:f4:4d:09:ff:22:86:0c:4e: 08:2b:68:ad:d4:fb:8a:95:b3:d2:ce:b4:57:96:dc: 1e:d6:91:87:a0:24:84:9f:d8:bd:84:ac:22:83:ab: 32:c1:7c:b7:c8:ca:30:9a:90:a6:7f:e7:0e:bc:3e: 9e:8e:cb:01:61:33:41:93:84:5f:30:d7:f7:25:97: c8:0c:04:d1:e4:9c:9e:b3:31:26:03:09:17:6c:5f: ec:80:55:19:fb:32:24:3e:6d:fd:48:c1:31:7a:56: 62:ac:2a:fa:1f:1f:c5:8d:75:99:2b:c5:68:8f:55: 69:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:5B:5A:49:FE:6B:43:E1:06:17:1D:FC:58:CE:6F:53:45:9D:15:23 X509v3 Authority Key Identifier: keyid:5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:75:36:d8:c7:31:67:55:95:12:7d:44:59:c3:8e:9c:b4:1e: 31:51:c1:22:f4:8b:55:d3:84:16:15:9b:4f:f5:20:60:e1:15: 23:d9:3d:23:02:ad:df:be:1a:e0:cc:8a:dc:21:57:e3:97:61: 58:f4:78:b6:05:27:70:e8:9e:28:45:9e:49:fb:db:44:18:b4: 8b:53:73:7e:20:31:53:0d:af:1f:ca:43:16:5e:aa:c2:8e:a7: 74:20:f7:92:bd:15:ee:37:14:b1:ef:18:3e:60:a8:f3:86:1e: d0:29:90:96:76:c9:7a:12:0b:e5:14:ff:61:e9:6f:2d:0c:f9: ff:18:92:ae:c8:44:f3:fd:d9:e4:09:ab:3f:70:b4:31:0b:eb: aa:e6:aa:57:23:37:66:76:e9:d1:fe:5c:a2:64:39:0a:ee:bd: f6:2b:20:13:8f:e6:79:f8:7c:ca:08:55:9b:78:87:a2:23:cc: 12:74:da:da:21:9e:a5:f6:e5:7a:ce:56:bd:b7:ea:4b:25:1c: a7:f4:83:5d:3d:f6:d0:14:9a:b6:9d:ea:22:c7:2b:08:51:69: 86:7e:ca:94:33:46:a1:9d:23:5a:96:61:6d:70:96:3c:63:bd: f9:89:73:fc:4e:1d:b5:0e:99:1c:fd:83:01:10:0e:9f:b6:b5: 3b:1f:5f:a1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUbx5fNJ9d/lSA3Ks9GWyC56G9NvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQw QkY1OTE1RjAeFw0yNjA0MTgxOTQ5NDdaFw0yNjA0MTkyMjQzNDdaMDMxMTAvBgNV BAMTKEVDNUI1QTQ5RkU2QjQzRTEwNjE3MURGQzU4Q0U2RjUzNDU5RDE1MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP9L5aBlciRsqtV7JT9G/AhIjw vvsbEKv3NmKjQOV6pET0oKCy0nDzhZXYL9Inb5iMk0bz3YE3ZGjOWgU3usTMO04s AaI5zHxIgaowUt5yVuwtAV4K9K7bU+/9jU4wGjuuXy8BdMhapgoT4awKDGspSBgT dzBM73vRwn2+uT5rmee2SmvM+UTnwDRB4Pb0TQn/IoYMTggraK3U+4qVs9LOtFeW 3B7WkYegJISf2L2ErCKDqzLBfLfIyjCakKZ/5w68Pp6OywFhM0GThF8w1/cll8gM BNHknJ6zMSYDCRdsX+yAVRn7MiQ+bf1IwTF6VmKsKvofH8WNdZkrxWiPVWkdAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU7FtaSf5rQ+EGFx38WM5vU0WdFSMwHwYDVR0j BBgwFoAUWj94GTU84P0TuP/Ny4g37Qv1kV8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzUvNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQwQkY1OTE1Ri5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03ZWIzLTRm NjMtYTE1OS1jZmYwMmMwMjZhYmYvMi81QTNGNzgxOTM1M0NFMEZEMTNCOEZGQ0RD Qjg4MzdFRDBCRjU5MTVGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy81LzVBM0Y3ODE5 MzUzQ0UwRkQxM0I4RkZDRENCODgzN0VEMEJGNTkxNUYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBjdTbY xzFnVZUSfURZw46ctB4xUcEi9ItV04QWFZtP9SBg4RUj2T0jAq3fvhrgzIrcIVfj l2FY9Hi2BSdw6J4oRZ5J+9tEGLSLU3N+IDFTDa8fykMWXqrCjqd0IPeSvRXuNxSx 7xg+YKjzhh7QKZCWdsl6EgvlFP9h6W8tDPn/GJKuyETz/dnkCas/cLQxC+uq5qpX IzdmdunR/lyiZDkK7r32KyATj+Z5+HzKCFWbeIeiI8wSdNraIZ6l9uV6zla9t+pL JRyn9INdPfbQFJq2neoixysIUWmGfsqUM0ahnSNalmFtcJY8Y735iXP8Th21Dpkc /YMBEA6ftrU7H1+h -----END CERTIFICATE-----Generated at Sun Apr 19 02:37:46 2026 by rpki-client