$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft File: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft (raw, json) Hash identifier: nkoH3yPSSVFVr3NxoQJ0KZzWZS+UcaOPS1dOtmYfzmE= Subject key identifier: 6E:39:12:5E:17:4B:4B:16:2D:4E:5E:40:6A:75:D9:50:D0:54:E7:BC Authority key identifier: 5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F Certificate issuer: /CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Certificate serial: 19DDE8B9D516362196F4DD416761AF1A88F26AD9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft Manifest number: 0148 Signing time: Wed 04 Mar 2026 15:14:18 +0000 Manifest this update: Wed 04 Mar 2026 15:09:18 +0000 Manifest next update: Thu 05 Mar 2026 17:50:18 +0000 Files and hashes: 1: 326130363a396634313a3130303a3a2f34302d3430203d3e20323134373233.roa (hash: sTs8O8KBp3/QEgTlhnDJhb+nhykdynr848iPv4Z/TIo=) 2: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl (hash: A+x7+gx5o8dmLOsRc8YIZI3udu217ayU0MTB6/UuXqQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Mar 2026 14:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:dd:e8:b9:d5:16:36:21:96:f4:dd:41:67:61:af:1a:88:f2:6a:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Validity Not Before: Mar 4 15:09:18 2026 GMT Not After : Mar 5 17:50:18 2026 GMT Subject: CN=6E39125E174B4B162D4E5E406A75D950D054E7BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:59:38:bb:66:9c:cc:18:f2:28:60:69:06:a5: 68:5b:cd:0b:b8:d4:05:ac:df:2b:0e:53:d5:90:48: 8f:05:e7:89:a4:fc:2d:94:1c:5b:9e:c8:2d:84:08: fb:c9:51:3a:54:20:d0:c6:21:28:09:47:53:9b:a8: ee:18:a3:74:36:e9:94:e7:e6:c9:ce:7c:1e:d7:fd: d1:c7:3c:73:31:6b:00:31:d1:01:c9:29:8e:ac:12: 7b:07:ea:c7:f8:3a:46:56:ef:99:5e:01:75:5e:62: c5:ee:bf:02:fc:f8:16:32:e3:43:d2:7f:68:69:7f: ca:3d:c0:51:db:15:e6:6d:79:f5:ae:44:c6:b6:53: c3:5c:c5:14:aa:41:19:b6:a4:e9:f1:f4:08:b9:c3: 10:00:25:a9:6c:09:07:ef:b8:4e:64:bd:86:2e:3a: c9:c8:c0:e1:45:44:ba:21:45:e5:c6:5b:56:83:b4: 8f:79:86:79:98:1f:0e:31:22:bc:f2:29:ae:d6:52: df:26:8a:13:8f:71:f4:5d:5c:92:08:50:2d:f2:ac: ed:c8:9f:75:f4:c3:78:30:7d:9f:b9:cb:3c:c9:a7: 49:71:92:d6:3f:d8:ef:8b:da:d5:bb:5a:06:e9:ab: 3d:91:25:90:fe:cb:9c:bf:36:74:75:12:8f:74:f9: 5e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:39:12:5E:17:4B:4B:16:2D:4E:5E:40:6A:75:D9:50:D0:54:E7:BC X509v3 Authority Key Identifier: keyid:5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d7:57:4f:07:f8:19:59:77:e5:74:22:ee:21:bf:ab:ec:c9: 87:06:cd:c9:b8:20:ba:d0:61:ee:24:62:92:ce:f0:d4:dd:9b: 3e:37:ab:f2:d1:5a:b3:25:37:74:e2:0b:15:8d:57:0a:b8:29: a9:66:a8:c2:71:52:eb:56:57:b4:b8:95:f0:3e:2b:8d:88:c8: 74:22:3f:e7:99:18:43:da:d4:57:07:2c:09:de:f5:1c:f9:49: a9:ad:12:66:7c:6d:4b:80:48:e5:3e:41:89:5d:26:72:74:5e: 8e:fa:42:44:f3:79:63:32:1a:e2:48:42:5e:37:74:da:ff:6d: 5d:82:cc:86:45:28:8b:19:b2:e0:ad:f6:0b:99:c6:80:65:ce: 3c:8b:15:61:d7:93:da:4c:0c:ca:52:01:fe:c5:04:5c:12:26: 05:bf:31:6f:20:ba:84:1c:cd:fd:5d:61:db:f8:63:87:e9:41: 7c:0a:16:3f:17:dc:69:95:ce:cf:4a:a7:88:3e:b2:a5:d7:e9: c1:72:31:d2:d0:cd:a5:89:85:7b:c7:9d:9f:fd:83:c8:a1:a4: 62:5c:ae:de:a5:ba:5b:c3:b6:12:d3:d1:42:d1:74:fb:a2:fe: cd:67:2e:eb:de:d9:29:60:ab:de:5a:8c:a8:34:0b:4c:4a:f7: 69:a4:42:5a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUGd3oudUWNiGW9N1BZ2GvGojyatkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQw QkY1OTE1RjAeFw0yNjAzMDQxNTA5MThaFw0yNjAzMDUxNzUwMThaMDMxMTAvBgNV BAMTKDZFMzkxMjVFMTc0QjRCMTYyRDRFNUU0MDZBNzVEOTUwRDA1NEU3QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgWTi7ZpzMGPIoYGkGpWhbzQu4 1AWs3ysOU9WQSI8F54mk/C2UHFueyC2ECPvJUTpUINDGISgJR1ObqO4Yo3Q26ZTn 5snOfB7X/dHHPHMxawAx0QHJKY6sEnsH6sf4OkZW75leAXVeYsXuvwL8+BYy40PS f2hpf8o9wFHbFeZtefWuRMa2U8NcxRSqQRm2pOnx9Ai5wxAAJalsCQfvuE5kvYYu OsnIwOFFRLohReXGW1aDtI95hnmYHw4xIrzyKa7WUt8mihOPcfRdXJIIUC3yrO3I n3X0w3gwfZ+5yzzJp0lxktY/2O+L2tW7Wgbpqz2RJZD+y5y/NnR1Eo90+V7HAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUbjkSXhdLSxYtTl5AanXZUNBU57wwHwYDVR0j BBgwFoAUWj94GTU84P0TuP/Ny4g37Qv1kV8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzUvNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQwQkY1OTE1Ri5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03ZWIzLTRm NjMtYTE1OS1jZmYwMmMwMjZhYmYvMi81QTNGNzgxOTM1M0NFMEZEMTNCOEZGQ0RD Qjg4MzdFRDBCRjU5MTVGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy81LzVBM0Y3ODE5 MzUzQ0UwRkQxM0I4RkZDRENCODgzN0VEMEJGNTkxNUYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBc11dP B/gZWXfldCLuIb+r7MmHBs3JuCC60GHuJGKSzvDU3Zs+N6vy0VqzJTd04gsVjVcK uCmpZqjCcVLrVle0uJXwPiuNiMh0Ij/nmRhD2tRXBywJ3vUc+UmprRJmfG1LgEjl PkGJXSZydF6O+kJE83ljMhriSEJeN3Ta/21dgsyGRSiLGbLgrfYLmcaAZc48ixVh 15PaTAzKUgH+xQRcEiYFvzFvILqEHM39XWHb+GOH6UF8ChY/F9xplc7PSqeIPrKl 1+nBcjHS0M2liYV7x52f/YPIoaRiXK7epbpbw7YS09FC0XT7ov7NZy7r3tkpYKve WoyoNAtMSvdppEJa -----END CERTIFICATE-----Generated at Wed Mar 4 21:56:21 2026 by rpki-client