$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft File: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft (raw, json) Hash identifier: Nyz71VhZBBGza5cRvNjqGOLl98OGi6u9XFQEMUtf03Y= Subject key identifier: BD:6E:A4:4D:F9:83:9A:A2:C6:C8:D4:EE:57:62:4A:12:CB:C9:32:8F Authority key identifier: 5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F Certificate issuer: /CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Certificate serial: 21A5CB92FB61A5B68680AAA2347BB109F54787DB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft Manifest number: 0252 Signing time: Fri 18 Sep 2026 21:30:42 +0000 Manifest this update: Fri 18 Sep 2026 21:25:42 +0000 Manifest next update: Sat 19 Sep 2026 23:34:42 +0000 Files and hashes: 1: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl (hash: Sr/BvpXhluG61Z5pVkFf4m3+kgnwAhWbB52ieA58zYw=) 2: 326130363a396634313a3130303a3a2f34302d3430203d3e20323134373233.roa (hash: OJ83dTsr9Gt4avvo3q3A4eeFV71yGziVsKE7L0soTmM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 14:29:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:a5:cb:92:fb:61:a5:b6:86:80:aa:a2:34:7b:b1:09:f5:47:87:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Validity Not Before: Sep 18 21:25:42 2026 GMT Not After : Sep 19 23:34:42 2026 GMT Subject: CN=BD6EA44DF9839AA2C6C8D4EE57624A12CBC9328F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:76:72:59:93:e5:54:fb:d4:fc:15:c2:4f:fe: 2e:28:9e:82:7b:1b:15:3e:90:30:48:8a:d0:12:3b: fd:1b:6a:a5:a5:98:4d:8c:51:6e:b3:d0:3e:e8:1a: ed:5e:c1:9f:f7:17:0d:84:dc:43:b0:47:48:c4:82: c0:83:dc:66:b8:7d:f8:e9:f7:6e:bc:c1:56:bf:54: 84:65:5f:e6:e5:89:0e:8d:a6:f3:c8:a4:6a:5a:9e: be:a8:6e:e9:57:ea:60:52:58:07:77:e9:65:51:14: bc:08:d5:ae:ab:54:9f:1a:6d:71:e2:18:8d:8c:4c: 15:15:cf:60:ba:2c:13:cf:1b:e4:05:97:c8:d4:11: a0:ba:9b:00:79:62:24:36:03:4e:90:28:b9:5a:85: 5a:cb:14:a8:65:9d:ed:7a:e3:01:8c:9a:90:9c:97: 24:c0:e3:df:07:7d:b2:a5:d3:f7:c4:4a:71:29:02: 5e:8b:1e:cb:94:bc:bf:cd:61:45:4c:cf:10:87:78: 7f:ec:8f:69:cc:a7:af:d4:66:59:9e:54:8f:a3:9f: eb:87:95:a1:aa:14:b2:e3:dd:8d:be:33:cc:2a:72: 8c:df:9c:2a:27:25:b8:43:ad:05:23:5b:e3:01:57: 58:9c:02:46:9d:50:f8:73:38:39:93:2a:bd:5d:83: 07:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:6E:A4:4D:F9:83:9A:A2:C6:C8:D4:EE:57:62:4A:12:CB:C9:32:8F X509v3 Authority Key Identifier: keyid:5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:2f:0c:be:f2:d8:05:57:9f:32:b6:9a:68:ef:9a:1f:e9:48: 98:b2:91:8b:c2:a1:f4:c8:f0:05:6c:3d:c1:6c:e5:70:b3:9f: fa:93:9e:bc:93:a9:a3:f9:36:d3:44:bb:2f:62:00:b6:a4:30: ee:a8:d0:16:a2:c4:14:f1:ec:d1:42:45:d5:5f:8e:5a:67:cd: 1e:62:b1:2c:fc:31:dc:b5:b6:d3:62:3f:e0:ca:97:81:da:91: 50:13:b2:30:5e:c3:a3:4f:09:71:3a:ce:bd:ae:8c:a7:48:39: 25:2b:23:b3:a0:a9:c7:8d:28:d7:59:6d:e3:b4:f8:f0:54:b3: db:f9:93:ce:95:9f:07:a7:2d:6b:a1:84:d8:8c:66:39:3c:1e: a5:ee:a4:10:ef:43:39:7f:2a:d6:50:c6:04:b0:fe:96:a5:9c: c6:24:27:d6:cf:e3:ee:18:43:f2:0d:ac:d7:bc:d1:6e:65:a6: 61:77:62:ca:86:95:3d:04:32:57:c7:f6:1f:3c:c4:1f:ad:1a: 6b:1e:69:41:41:02:a3:3f:75:c7:b9:0e:9f:7a:5c:36:fd:2c: c0:f2:54:f6:9d:38:3f:0b:3d:af:e4:eb:25:28:d6:3b:05:f8: 6c:8d:fe:df:2b:ec:4d:36:78:11:e3:6b:3e:25:84:18:db:16: 42:7d:9e:e8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUIaXLkvthpbaGgKqiNHuxCfVHh9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQw QkY1OTE1RjAeFw0yNjA5MTgyMTI1NDJaFw0yNjA5MTkyMzM0NDJaMDMxMTAvBgNV BAMTKEJENkVBNDRERjk4MzlBQTJDNkM4RDRFRTU3NjI0QTEyQ0JDOTMyOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6dnJZk+VU+9T8FcJP/i4onoJ7 GxU+kDBIitASO/0baqWlmE2MUW6z0D7oGu1ewZ/3Fw2E3EOwR0jEgsCD3Ga4ffjp 9268wVa/VIRlX+bliQ6NpvPIpGpanr6obulX6mBSWAd36WVRFLwI1a6rVJ8abXHi GI2MTBUVz2C6LBPPG+QFl8jUEaC6mwB5YiQ2A06QKLlahVrLFKhlne164wGMmpCc lyTA498HfbKl0/fESnEpAl6LHsuUvL/NYUVMzxCHeH/sj2nMp6/UZlmeVI+jn+uH laGqFLLj3Y2+M8wqcozfnConJbhDrQUjW+MBV1icAkadUPhzODmTKr1dgwd9AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUvW6kTfmDmqLGyNTuV2JKEsvJMo8wHwYDVR0j BBgwFoAUWj94GTU84P0TuP/Ny4g37Qv1kV8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzUvNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQwQkY1OTE1Ri5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03ZWIzLTRm NjMtYTE1OS1jZmYwMmMwMjZhYmYvMi81QTNGNzgxOTM1M0NFMEZEMTNCOEZGQ0RD Qjg4MzdFRDBCRjU5MTVGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy81LzVBM0Y3ODE5 MzUzQ0UwRkQxM0I4RkZDRENCODgzN0VEMEJGNTkxNUYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCcLwy+ 8tgFV58ytppo75of6UiYspGLwqH0yPAFbD3BbOVws5/6k568k6mj+TbTRLsvYgC2 pDDuqNAWosQU8ezRQkXVX45aZ80eYrEs/DHctbbTYj/gypeB2pFQE7IwXsOjTwlx Os69roynSDklKyOzoKnHjSjXWW3jtPjwVLPb+ZPOlZ8Hpy1roYTYjGY5PB6l7qQQ 70M5fyrWUMYEsP6WpZzGJCfWz+PuGEPyDazXvNFuZaZhd2LKhpU9BDJXx/YfPMQf rRprHmlBQQKjP3XHuQ6felw2/SzA8lT2nTg/Cz2v5OslKNY7Bfhsjf7fK+xNNngR 42s+JYQY2xZCfZ7o -----END CERTIFICATE-----Generated at Sat Sep 19 02:58:39 2026 by rpki-client