$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft File: 5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft (raw, json) Hash identifier: JE9a6Oo23j6bnLnvYQBMmMoBgCZRuEu4fPSFJb2Da+M= Subject key identifier: 83:59:1A:2D:BE:3E:3E:3B:DE:B7:ED:BA:75:96:BA:A4:32:56:D4:12 Authority key identifier: 5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3 Certificate issuer: /CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3 Certificate serial: 51A5408B6457BE7EA8DB3DE408484479791B131B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft Manifest number: 0573 Signing time: Tue 21 Jul 2026 10:01:56 +0000 Manifest this update: Tue 21 Jul 2026 09:56:56 +0000 Manifest next update: Wed 22 Jul 2026 10:44:56 +0000 Files and hashes: 1: 34352e3134362e3136332e302f32342d3234203d3e20323136313833.roa (hash: dEyrefnnKSg66lfx459XJ2SroTggGi4go9Zp+DRZdvU=) 2: 34352e3134362e3136302e302f32332d3233203d3e203437343437.roa (hash: 31YTnxmdtZ2cp3Cw9rcOHPD6ZzrVs4b/Az5vMfbmmIM=) 3: 34352e3134362e3136332e302f32342d3234203d3e20343031373736.roa (hash: vOmOz2BugVIPRfW7G2v3UGhcWNCUu83kIhIIM2fnK0w=) 4: 34352e3134362e3136332e302f32342d3234203d3e203338313336.roa (hash: 2UoYMc+T3VQ81nJuKfdlMgklJP2lCeK6kVAd1Zef4f8=) 5: 34352e3134362e3136322e302f32342d3234203d3e203138363331.roa (hash: mQKE/0/NnV539NSoXtVCOp3+AeXahl8sUnLhuxaZN7o=) 6: 5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl (hash: J5JX0KAvge4Gw6G3q0JvwzT/AIwys6l5e+hblSY5uRY=) 7: 34352e3134362e3136332e302f32342d3234203d3e20313937353238.roa (hash: Ebzg/MjqohTGeKwDaLunRaMiyaIF5yHH/QdRNJ9uULY=) 8: 34352e3134362e3136302e302f32332d3233203d3e20323133303031.roa (hash: J60EsWIeYN4a4peosqQOm0lgQhTjR5G5qC6zOtaqQT0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 10:44:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:a5:40:8b:64:57:be:7e:a8:db:3d:e4:08:48:44:79:79:1b:13:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3 Validity Not Before: Jul 21 09:56:56 2026 GMT Not After : Jul 22 10:44:56 2026 GMT Subject: CN=83591A2DBE3E3E3BDEB7EDBA7596BAA43256D412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8f:f8:91:c9:e9:e9:dd:b5:84:48:3a:1f:7f: cf:70:69:3c:1f:11:f4:bb:a0:e8:83:d1:6b:16:38: d1:04:bb:dd:db:91:1e:d9:fb:0f:92:7f:b0:4f:42: 56:89:84:ff:42:bc:4d:2b:4c:f0:42:e5:44:e3:f1: ac:64:0e:c2:6e:47:61:73:c5:44:19:c0:70:19:f2: 9d:34:48:cb:40:b5:37:af:61:a7:79:92:7b:3f:b7: 10:53:3e:76:44:cc:8d:23:5f:bd:38:dc:3f:e4:32: aa:75:9d:d9:18:a8:9c:3f:22:66:df:72:e3:42:68: 55:14:4c:54:2a:e7:3f:9e:ed:93:b3:4f:f6:bd:da: 77:a2:9e:da:29:cd:a5:3f:06:b1:02:0d:a5:52:a3: be:83:f5:fe:a7:c3:86:93:17:e9:42:14:a8:00:20: 87:a7:44:b0:5c:c1:68:68:c9:3d:d4:d7:39:9f:58: b9:0a:ad:8d:fc:5f:65:11:fd:30:c7:e0:00:a2:ef: 35:28:67:f5:3b:2f:00:3c:b2:e6:92:7c:0e:3f:3c: 97:03:75:fd:5f:41:f0:b6:38:66:54:ce:ef:e6:cb: f8:29:ae:89:6a:b2:28:82:6e:cc:de:60:a6:ef:aa: 6b:43:87:55:3e:40:16:78:41:cb:33:2b:83:3e:de: dc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:59:1A:2D:BE:3E:3E:3B:DE:B7:ED:BA:75:96:BA:A4:32:56:D4:12 X509v3 Authority Key Identifier: keyid:5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:ef:b0:72:81:b4:18:b2:37:4f:bd:bd:63:2b:96:6e:e9:fa: cc:68:8a:b8:b2:0c:d1:db:35:e2:65:8b:5f:00:47:ca:ee:55: 83:5d:91:da:f7:2e:71:ab:0a:a9:ca:a4:92:04:10:f0:ba:84: c9:6b:5d:f2:b9:80:bd:a0:c8:e8:17:03:44:f6:d4:d7:54:0d: 1a:1f:4b:e6:37:cc:42:4d:c3:4a:26:4d:d6:ef:94:02:4a:d8: 33:a8:6b:e4:ef:3a:03:9b:96:74:5e:60:90:7c:a0:6e:05:d4: 4f:8b:12:72:c2:4a:d5:d2:7c:fb:b7:87:e6:c3:74:2e:9e:b0: 65:41:21:5f:45:98:9e:3a:2c:fe:5b:2c:8f:cd:f6:a3:08:c1: c5:66:13:75:f0:17:9a:e0:c6:85:78:d6:53:d2:ad:2c:ed:78: 3e:80:a4:aa:90:78:c1:71:3d:46:a5:df:cc:d6:e9:f4:60:01: d7:5d:c4:1a:c9:6c:4c:7b:88:f9:d8:28:0a:b6:8e:ef:4f:8d: a6:87:4b:97:b0:43:a1:f8:f0:c5:2b:64:b0:9c:84:7b:63:5c: 8c:0c:87:ca:b6:c0:dd:00:8b:7e:db:5d:d4:7e:f4:c9:ee:da: 83:1e:ec:ea:28:a3:9d:c9:28:49:32:51:f2:d7:4a:9f:a2:3a: b3:a2:96:5e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUaVAi2RXvn6o2z3kCEhEeXkbExswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRlZmUwOTIyZjRmNTUyNzBkY2Q1YzA4ZjA0ZjFjN2Jm MjYwNzNjMzAeFw0yNjA3MjEwOTU2NTZaFw0yNjA3MjIxMDQ0NTZaMDMxMTAvBgNV BAMTKDgzNTkxQTJEQkUzRTNFM0JERUI3RURCQTc1OTZCQUE0MzI1NkQ0MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRj/iRyenp3bWESDoff89waTwf EfS7oOiD0WsWONEEu93bkR7Z+w+Sf7BPQlaJhP9CvE0rTPBC5UTj8axkDsJuR2Fz xUQZwHAZ8p00SMtAtTevYad5kns/txBTPnZEzI0jX7043D/kMqp1ndkYqJw/Imbf cuNCaFUUTFQq5z+e7ZOzT/a92neintopzaU/BrECDaVSo76D9f6nw4aTF+lCFKgA IIenRLBcwWhoyT3U1zmfWLkKrY38X2UR/TDH4ACi7zUoZ/U7LwA8suaSfA4/PJcD df1fQfC2OGZUzu/my/gprolqsiiCbszeYKbvqmtDh1U+QBZ4QcszK4M+3tzdAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUg1kaLb4+Pjvet+26dZa6pDJW1BIwHwYDVR0j BBgwFoAUXe/gki9PVScNzVwI8E8ce/Jgc8MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmZlMmIyN2EtMWVjNS00YWI3LTk3OGUtNmRhOWNmOWYz NzkwLzAvNURFRkUwOTIyRjRGNTUyNzBEQ0Q1QzA4RjA0RjFDN0JGMjYwNzNDMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hlX2draTlQVlNjTnpWd0k4RThjZV9K Z2M4TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yZmUyYjI3YS0x ZWM1LTRhYjctOTc4ZS02ZGE5Y2Y5ZjM3OTAvMC81REVGRTA5MjJGNEY1NTI3MERD RDVDMDhGMDRGMUM3QkYyNjA3M0MzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcu+wcoG0GLI3T729YyuW bun6zGiKuLIM0ds14mWLXwBHyu5Vg12R2vcucasKqcqkkgQQ8LqEyWtd8rmAvaDI 6BcDRPbU11QNGh9L5jfMQk3DSiZN1u+UAkrYM6hr5O86A5uWdF5gkHygbgXUT4sS csJK1dJ8+7eH5sN0Lp6wZUEhX0WYnjos/lssj832owjBxWYTdfAXmuDGhXjWU9Kt LO14PoCkqpB4wXE9RqXfzNbp9GAB113EGslsTHuI+dgoCraO70+NpodLl7BDofjw xStksJyEe2NcjAyHyrbA3QCLfttd1H70ye7agx7s6iijnckoSTJR8tdKn6I6s6KW Xg== -----END CERTIFICATE-----Generated at Tue Jul 21 17:09:28 2026 by rpki-client