$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft File: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft (raw, json) Hash identifier: Tqw4UziUoUqR8vVQZRkvktGaEp3FV8Eb34JbPrdluBk= Subject key identifier: D1:00:8A:24:F9:D3:4E:CA:9E:71:FB:78:EA:9A:AE:5E:B4:95:14:82 Authority key identifier: 5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F Certificate issuer: /CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Certificate serial: 7E6FDC14311B09657C2968C5FA707080D7A74556 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft Manifest number: 01D8 Signing time: Sat 20 Jun 2026 11:18:23 +0000 Manifest this update: Sat 20 Jun 2026 11:13:23 +0000 Manifest next update: Sun 21 Jun 2026 12:09:23 +0000 Files and hashes: 1: 326130363a396634313a3130303a3a2f34302d3430203d3e20323134373233.roa (hash: OJ83dTsr9Gt4avvo3q3A4eeFV71yGziVsKE7L0soTmM=) 2: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl (hash: XS2ltmU8g8N96h5L4HQZm/L+4v+lbQ+9PVjrrCOWgyA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Jun 2026 04:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:6f:dc:14:31:1b:09:65:7c:29:68:c5:fa:70:70:80:d7:a7:45:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Validity Not Before: Jun 20 11:13:23 2026 GMT Not After : Jun 21 12:09:23 2026 GMT Subject: CN=D1008A24F9D34ECA9E71FB78EA9AAE5EB4951482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d3:a3:39:2e:68:c6:bd:46:c4:30:7b:15:56: 9a:9c:09:ae:bb:52:ff:82:bb:35:83:03:f1:65:20: 38:a8:57:74:e2:81:26:d5:1f:d6:78:8f:d2:ba:ec: 47:4f:f8:bb:57:aa:35:d7:62:a3:b4:64:d6:76:4f: 92:2e:fb:4d:61:74:4c:00:27:91:43:d6:18:5e:50: a9:95:75:ee:5b:24:38:8a:64:b7:8e:01:12:59:00: a7:84:9f:94:38:0f:d1:bf:1f:12:51:bb:ff:38:a5: 2f:76:5b:06:03:33:c0:d0:87:69:3c:c1:c8:a8:66: 1b:20:4e:d8:b7:a6:83:be:08:9f:85:22:f9:1d:dd: 85:2b:73:ad:9c:b0:31:05:f4:f1:85:d7:25:93:08: 25:82:6a:97:68:af:4c:65:ac:f2:9a:7f:9c:77:23: 54:83:90:76:51:bf:9e:f2:4c:ea:c2:87:6d:78:63: 8f:1c:de:6d:6b:5f:ae:e8:ae:cc:a4:d8:ac:88:68: 48:1c:c5:23:7a:d3:7d:1d:20:20:ff:b2:4c:c9:d2: 01:e4:59:b4:fe:cb:a3:d5:18:73:43:ce:0e:52:0e: ff:b9:92:67:56:25:e4:94:84:7e:7a:d8:93:fa:f0: 3c:67:f8:1d:58:83:c8:1d:6c:41:73:b9:1f:de:f5: 02:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:00:8A:24:F9:D3:4E:CA:9E:71:FB:78:EA:9A:AE:5E:B4:95:14:82 X509v3 Authority Key Identifier: keyid:5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:a0:ef:d1:c4:70:11:8a:41:66:30:05:9b:c5:b2:16:64:cb: b7:33:76:31:55:19:e0:54:3c:9c:8c:2a:d4:35:91:57:15:3c: a7:28:42:a0:10:20:bb:82:19:6b:ba:38:02:c3:c8:c1:62:ea: 48:9e:d9:06:24:ee:e4:b0:5d:13:3b:9d:7c:f7:1b:4b:7e:6d: 8a:ab:eb:1c:99:cb:b9:34:a5:cf:51:5a:3e:1d:d1:91:5f:12: 19:e7:49:4b:66:ff:17:54:05:02:c3:ca:05:36:6c:b1:33:ac: 34:40:6f:d6:3e:da:8c:14:fa:4c:c2:dc:04:4f:f9:93:81:34: 01:9b:2c:54:d7:ed:c3:8d:2e:d8:66:02:e9:3c:90:b8:b0:cc: 5e:3a:52:c7:a3:aa:03:2a:e1:23:07:09:83:e8:5f:c6:29:83: de:da:da:86:5b:6e:4a:e4:05:76:85:9f:41:11:90:ce:de:39: 7a:11:aa:9c:e4:e2:ce:15:7c:a1:03:43:3c:70:67:2f:f9:26: 30:de:46:2b:72:8e:2f:40:41:cc:76:b8:f8:98:b2:fe:c0:20: 0b:eb:3b:25:4b:62:43:ae:75:8e:15:07:37:77:67:40:5c:ad: f4:b7:49:90:0f:e6:31:d3:23:32:ae:a9:e4:ae:cb:18:b8:7a: 8f:1b:43:56 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfm/cFDEbCWV8KWjF+nBwgNenRVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQw QkY1OTE1RjAeFw0yNjA2MjAxMTEzMjNaFw0yNjA2MjExMjA5MjNaMDMxMTAvBgNV BAMTKEQxMDA4QTI0RjlEMzRFQ0E5RTcxRkI3OEVBOUFBRTVFQjQ5NTE0ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX06M5LmjGvUbEMHsVVpqcCa67 Uv+CuzWDA/FlIDioV3TigSbVH9Z4j9K67EdP+LtXqjXXYqO0ZNZ2T5Iu+01hdEwA J5FD1hheUKmVde5bJDiKZLeOARJZAKeEn5Q4D9G/HxJRu/84pS92WwYDM8DQh2k8 wcioZhsgTti3poO+CJ+FIvkd3YUrc62csDEF9PGF1yWTCCWCapdor0xlrPKaf5x3 I1SDkHZRv57yTOrCh214Y48c3m1rX67orsyk2KyIaEgcxSN6030dICD/skzJ0gHk WbT+y6PVGHNDzg5SDv+5kmdWJeSUhH562JP68Dxn+B1Yg8gdbEFzuR/e9QLXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU0QCKJPnTTsqecft46pquXrSVFIIwHwYDVR0j BBgwFoAUWj94GTU84P0TuP/Ny4g37Qv1kV8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzUvNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQwQkY1OTE1Ri5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03ZWIzLTRm NjMtYTE1OS1jZmYwMmMwMjZhYmYvMi81QTNGNzgxOTM1M0NFMEZEMTNCOEZGQ0RD Qjg4MzdFRDBCRjU5MTVGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy81LzVBM0Y3ODE5 MzUzQ0UwRkQxM0I4RkZDRENCODgzN0VEMEJGNTkxNUYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCRoO/R xHARikFmMAWbxbIWZMu3M3YxVRngVDycjCrUNZFXFTynKEKgECC7ghlrujgCw8jB YupIntkGJO7ksF0TO5189xtLfm2Kq+scmcu5NKXPUVo+HdGRXxIZ50lLZv8XVAUC w8oFNmyxM6w0QG/WPtqMFPpMwtwET/mTgTQBmyxU1+3DjS7YZgLpPJC4sMxeOlLH o6oDKuEjBwmD6F/GKYPe2tqGW25K5AV2hZ9BEZDO3jl6Eaqc5OLOFXyhA0M8cGcv +SYw3kYrco4vQEHMdrj4mLL+wCAL6zslS2JDrnWOFQc3d2dAXK30t0mQD+Yx0yMy rqnkrssYuHqPG0NW -----END CERTIFICATE-----Generated at Sat Jun 20 14:10:14 2026 by rpki-client