$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft File: B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft (raw, json) Hash identifier: /yGYQyY+j4SS5HvtEQC9Ayw+wLwrZy5Sphzv9qKQoVw= Subject key identifier: 59:9F:66:0A:91:73:E7:13:46:C5:13:02:FA:C8:39:92:D6:E7:C9:5F Authority key identifier: B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C Certificate issuer: /CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C Certificate serial: 14F02C4487E22BF10A9071CB219CF2C8549D21D9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft Manifest number: 024A Signing time: Wed 21 Oct 2026 04:04:31 +0000 Manifest this update: Wed 21 Oct 2026 03:59:31 +0000 Manifest next update: Thu 22 Oct 2026 05:07:31 +0000 Files and hashes: 1: 326130623a396534323a3a2f34342d3434203d3e20323134343531.roa (hash: Zck6J2syHDIk/NrGxsNjciGhnmYGMCo7e0kQNyx+lQM=) 2: 326130623a396534373a666666663a3a2f34382d3438203d3e20323132333936.roa (hash: e3h2ZTUNZXjv98ArysnYSYWhaEkUBmjS0VqOuj8+VAI=) 3: 326130623a396534303a3a2f33312d3332203d3e20323134343531.roa (hash: Kwvgoy8rYmD0xpV60BQdFB5n1PMXF0SutBXK7a1aRaY=) 4: B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl (hash: 8ZqlljnCuGDcR72tTTaL5m3dyPGSPHH8GTyNY9nBlbc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Oct 2026 05:07:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:f0:2c:44:87:e2:2b:f1:0a:90:71:cb:21:9c:f2:c8:54:9d:21:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C Validity Not Before: Oct 21 03:59:31 2026 GMT Not After : Oct 22 05:07:31 2026 GMT Subject: CN=599F660A9173E71346C51302FAC83992D6E7C95F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c4:8f:ff:5e:8b:c5:00:2f:1f:b4:72:ac:1b: 04:cf:ea:e5:55:e5:e1:bd:b7:c3:0b:54:8e:a2:6a: 1c:56:c3:10:3c:a5:5f:c6:69:f6:f3:75:09:66:f4: 5f:e8:47:6e:52:cc:9f:82:3f:6a:3e:5b:e7:f1:93: 58:25:98:f3:e0:1d:b9:96:00:63:14:65:3c:9b:c8: 05:91:7b:34:67:41:b2:89:1c:cc:78:f9:d0:29:a4: a9:83:4b:aa:e8:1c:54:ae:14:e8:ce:6a:ec:b4:5c: 00:fd:51:66:6f:13:92:3b:56:57:f0:a1:e2:b9:ac: 3b:b0:7a:e4:3d:75:6a:50:a4:55:0e:21:f3:0d:22: 11:e2:0f:af:7e:69:99:5d:35:85:57:4a:5a:a8:b3: 85:16:9b:63:8d:84:dd:04:c7:b1:63:25:cc:8e:74: a2:c9:85:84:18:62:6a:c9:98:04:3b:e6:33:0c:dd: a8:c7:2a:a1:82:fb:32:7f:3e:7a:a3:96:47:8a:c6: 12:0b:77:5d:be:88:51:f0:f4:31:60:fb:8e:72:db: b3:d2:b3:96:e0:68:5e:5d:13:f8:fe:e7:cb:a1:c6: 46:81:76:7d:d1:cb:ef:b5:50:e1:0a:d3:01:ef:b6: 8f:1f:e7:b1:66:b4:10:4d:0c:7a:54:79:8d:02:0e: e0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:9F:66:0A:91:73:E7:13:46:C5:13:02:FA:C8:39:92:D6:E7:C9:5F X509v3 Authority Key Identifier: keyid:B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:20:ce:db:33:48:60:8a:d6:40:80:10:1d:13:58:38:9d:51: 8b:18:de:a9:2a:58:09:08:e2:29:10:a6:2b:ce:5a:9a:7e:10: 48:20:06:2a:de:b5:4c:3f:ba:c7:06:f2:21:6d:41:99:8a:91: 87:3c:b7:e4:6d:9e:d2:d1:1b:af:54:47:6b:1b:4f:23:26:f5: 54:bb:27:8a:c6:2d:f4:23:d4:a4:49:5b:1a:8a:0d:68:17:40: b7:fe:d8:62:f0:2f:97:56:01:18:11:12:be:ed:ec:ea:82:6f: 50:bb:98:eb:e4:18:98:ec:15:a5:e7:72:d1:2a:4e:11:79:2f: c7:af:1d:15:09:da:57:6c:8c:c3:ce:12:0a:f9:76:b6:b1:44: 18:63:ff:8f:40:f9:a5:d7:4b:e7:4e:ce:c9:ac:d3:32:5d:8e: 80:5d:fd:07:35:a2:96:46:90:bc:fc:ec:2e:28:ae:2f:f9:fe: 5f:a3:39:6e:e2:e2:28:51:56:89:21:16:d2:97:f0:21:f2:ff: 3b:d9:40:ab:38:ec:7a:b9:67:15:13:e5:cd:20:98:9c:24:12: c3:aa:c7:73:8e:a9:a3:03:c8:f6:20:b2:b7:24:0c:8b:6e:bb: 37:3c:54:2e:f4:d4:b5:8b:a5:58:45:16:97:60:66:b0:46:f4: cf:25:80:62 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUFPAsRIfiK/EKkHHLIZzyyFSdIdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVGNUVDNUM1NjdGRDQ4OUJFNzM5MDI4NjJFQkVFODFD Q0RFRTM1QzAeFw0yNjEwMjEwMzU5MzFaFw0yNjEwMjIwNTA3MzFaMDMxMTAvBgNV BAMTKDU5OUY2NjBBOTE3M0U3MTM0NkM1MTMwMkZBQzgzOTkyRDZFN0M5NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtxI//XovFAC8ftHKsGwTP6uVV 5eG9t8MLVI6iahxWwxA8pV/GafbzdQlm9F/oR25SzJ+CP2o+W+fxk1glmPPgHbmW AGMUZTybyAWRezRnQbKJHMx4+dAppKmDS6roHFSuFOjOauy0XAD9UWZvE5I7Vlfw oeK5rDuweuQ9dWpQpFUOIfMNIhHiD69+aZldNYVXSlqos4UWm2ONhN0Ex7FjJcyO dKLJhYQYYmrJmAQ75jMM3ajHKqGC+zJ/PnqjlkeKxhILd12+iFHw9DFg+45y27PS s5bgaF5dE/j+58uhxkaBdn3Ry++1UOEK0wHvto8f57FmtBBNDHpUeY0CDuCvAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUWZ9mCpFz5xNGxRMC+sg5ktbnyV8wHwYDVR0j BBgwFoAUtfXsXFZ/1Im+c5AoYuvugcze41wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJjZjhiYTctY2IwMi00MThiLWJlMDQtNGQ5ZjNhMDdl OTUwLzUvQjVGNUVDNUM1NjdGRDQ4OUJFNzM5MDI4NjJFQkVFODFDQ0RFRTM1Qy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQjVGNUVDNUM1NjdGRDQ4OUJFNzM5MDI4NjJFQkVFODFDQ0RF RTM1Qy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMmNmOGJhNy1j YjAyLTQxOGItYmUwNC00ZDlmM2EwN2U5NTAvNS9CNUY1RUM1QzU2N0ZENDg5QkU3 MzkwMjg2MkVCRUU4MUNDREVFMzVDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANCDO2zNIYIrWQIAQHRNY OJ1RixjeqSpYCQjiKRCmK85amn4QSCAGKt61TD+6xwbyIW1BmYqRhzy35G2e0tEb r1RHaxtPIyb1VLsnisYt9CPUpElbGooNaBdAt/7YYvAvl1YBGBESvu3s6oJvULuY 6+QYmOwVpedy0SpOEXkvx68dFQnaV2yMw84SCvl2trFEGGP/j0D5pddL507OyazT Ml2OgF39BzWilkaQvPzsLiiuL/n+X6M5buLiKFFWiSEW0pfwIfL/O9lAqzjserln FRPlzSCYnCQSw6rHc46powPI9iCytyQMi267NzxULvTUtYulWEUWl2BmsEb0zyWA Yg== -----END CERTIFICATE-----Generated at Wed Oct 21 21:09:26 2026 by rpki-client