$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft File: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft (raw, json) Hash identifier: K7kLY52B8ah5b+1/tjU/Fg+1pAa8j9ooBSYiTvwrlyk= Subject key identifier: A1:E7:09:8E:50:26:78:86:B6:52:43:4C:B2:09:B7:FB:99:E0:16:53 Authority key identifier: 5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F Certificate issuer: /CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Certificate serial: 6B2E5D116E03C98EE1F751C49F81C0E27EF8ECE2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft Manifest number: 0215 Signing time: Tue 04 Aug 2026 13:30:33 +0000 Manifest this update: Tue 04 Aug 2026 13:25:33 +0000 Manifest next update: Wed 05 Aug 2026 16:17:33 +0000 Files and hashes: 1: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl (hash: sJNUBTi3Ru6l8SoFzEE1JVaWxunufFa+PJD5LtVM2Bo=) 2: 326130363a396634313a3130303a3a2f34302d3430203d3e20323134373233.roa (hash: OJ83dTsr9Gt4avvo3q3A4eeFV71yGziVsKE7L0soTmM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Aug 2026 14:45:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:2e:5d:11:6e:03:c9:8e:e1:f7:51:c4:9f:81:c0:e2:7e:f8:ec:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Validity Not Before: Aug 4 13:25:33 2026 GMT Not After : Aug 5 16:17:33 2026 GMT Subject: CN=A1E7098E50267886B652434CB209B7FB99E01653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bb:1d:53:68:6d:55:37:aa:e0:5b:f2:c4:99: 3c:7c:79:61:cd:6f:89:65:e2:47:19:72:5f:76:58: 14:1c:45:c7:66:65:ff:d4:45:2e:2a:2f:a7:8d:84: 15:cc:c0:7d:b6:d3:30:6d:22:8b:36:73:e7:b7:46: 8b:1d:fc:a4:1d:ea:10:f3:f6:6d:e7:ec:c4:3e:cf: f2:ec:f5:62:9e:12:5e:86:b5:e4:c3:44:0d:c9:4e: 38:88:c2:61:77:ae:43:e8:2e:04:4b:0f:95:47:6f: db:40:c2:e4:d0:62:b7:ec:aa:9f:97:f7:f6:1e:4c: e0:de:e5:66:02:c7:53:24:db:e3:fd:04:cd:7f:00: a5:1c:f8:fe:a5:75:72:5b:e0:bb:2f:b0:ef:a1:fc: 8e:99:01:9c:1c:f0:66:12:71:ba:79:43:a5:d5:71: 06:25:ed:5e:3b:81:16:99:5e:27:f9:8f:20:04:ac: 9f:75:91:34:52:e0:95:00:5c:7a:e0:f2:6a:42:b8: f7:73:06:0c:4d:57:46:8f:80:b6:ec:de:6a:ad:5a: f6:a0:03:e5:bc:c5:36:f9:27:a3:5a:3c:a0:60:2e: c4:29:75:e5:d6:03:5a:f8:0a:29:9f:b4:98:03:71: 12:6e:bd:27:50:0d:1c:06:ce:2a:f6:3a:4b:c2:ba: 55:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E7:09:8E:50:26:78:86:B6:52:43:4C:B2:09:B7:FB:99:E0:16:53 X509v3 Authority Key Identifier: keyid:5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:0c:af:21:63:6c:b2:d7:a8:6f:af:a2:f8:2b:7e:65:ff:23: 0b:63:3f:00:b8:c4:b1:66:b2:57:d8:fc:cf:cd:e0:b6:44:a1: 72:44:9f:d5:fe:1f:0c:5e:9f:09:12:42:9b:c8:89:a5:46:b2: 36:96:74:33:23:c5:90:25:fc:60:59:58:e9:f3:66:9f:cf:28: 62:47:19:89:5a:94:b2:42:3d:1b:be:5f:63:4c:75:4a:ec:60: 3d:d7:53:55:80:99:a0:a4:c0:0b:d3:e8:d2:21:ae:68:65:87: e0:1c:bc:62:6d:51:4a:65:be:c4:c7:6d:d2:95:7b:5d:3d:41: e6:fa:68:e2:8f:a5:71:05:c1:12:8f:e4:eb:b3:4f:31:4b:56: 77:90:f4:39:be:83:7f:c9:ed:e9:5e:fc:e6:1f:87:c5:7e:c0: 56:bd:91:6b:58:93:14:fb:2c:27:a7:66:c3:f0:f3:d0:aa:94: 90:e6:2d:73:47:9f:4d:f5:14:13:23:01:6a:75:8f:5f:a2:ca: 88:8d:0d:01:c3:28:83:26:8b:65:88:a0:53:52:c3:da:09:e3: cc:08:04:4c:a2:9a:b4:c4:17:77:17:be:1e:f4:ef:84:65:d4: fc:f4:93:e6:73:ed:49:cc:e1:1e:0e:09:45:f1:d4:a8:cf:c8: dd:ff:db:f3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUay5dEW4DyY7h91HEn4HA4n747OIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQw QkY1OTE1RjAeFw0yNjA4MDQxMzI1MzNaFw0yNjA4MDUxNjE3MzNaMDMxMTAvBgNV BAMTKEExRTcwOThFNTAyNjc4ODZCNjUyNDM0Q0IyMDlCN0ZCOTlFMDE2NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsux1TaG1VN6rgW/LEmTx8eWHN b4ll4kcZcl92WBQcRcdmZf/URS4qL6eNhBXMwH220zBtIos2c+e3Rosd/KQd6hDz 9m3n7MQ+z/Ls9WKeEl6GteTDRA3JTjiIwmF3rkPoLgRLD5VHb9tAwuTQYrfsqp+X 9/YeTODe5WYCx1Mk2+P9BM1/AKUc+P6ldXJb4LsvsO+h/I6ZAZwc8GYScbp5Q6XV cQYl7V47gRaZXif5jyAErJ91kTRS4JUAXHrg8mpCuPdzBgxNV0aPgLbs3mqtWvag A+W8xTb5J6NaPKBgLsQpdeXWA1r4CimftJgDcRJuvSdQDRwGzir2OkvCulW3AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUoecJjlAmeIa2UkNMsgm3+5ngFlMwHwYDVR0j BBgwFoAUWj94GTU84P0TuP/Ny4g37Qv1kV8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzUvNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQwQkY1OTE1Ri5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03ZWIzLTRm NjMtYTE1OS1jZmYwMmMwMjZhYmYvMi81QTNGNzgxOTM1M0NFMEZEMTNCOEZGQ0RD Qjg4MzdFRDBCRjU5MTVGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy81LzVBM0Y3ODE5 MzUzQ0UwRkQxM0I4RkZDRENCODgzN0VEMEJGNTkxNUYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBcDK8h Y2yy16hvr6L4K35l/yMLYz8AuMSxZrJX2PzPzeC2RKFyRJ/V/h8MXp8JEkKbyIml RrI2lnQzI8WQJfxgWVjp82afzyhiRxmJWpSyQj0bvl9jTHVK7GA911NVgJmgpMAL 0+jSIa5oZYfgHLxibVFKZb7Ex23SlXtdPUHm+mjij6VxBcESj+Trs08xS1Z3kPQ5 voN/ye3pXvzmH4fFfsBWvZFrWJMU+ywnp2bD8PPQqpSQ5i1zR59N9RQTIwFqdY9f osqIjQ0BwyiDJotliKBTUsPaCePMCARMopq0xBd3F74e9O+EZdT89JPmc+1JzOEe DglF8dSoz8jd/9vz -----END CERTIFICATE-----Generated at Tue Aug 4 21:27:22 2026 by rpki-client