$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft File: 5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft (raw, json) Hash identifier: PBT3OFkDlnq9LCZtVfNoz9raxYEK5q5HfLC1Jxfa9Hs= Subject key identifier: 3F:CE:12:DF:55:AC:F9:A2:10:3A:89:03:1C:F7:C0:52:FB:8E:1C:FB Authority key identifier: 5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3 Certificate issuer: /CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3 Certificate serial: 5A29604BA34332236927895E3E61D9F36F635299 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft Manifest number: 05EE Signing time: Wed 21 Oct 2026 10:46:46 +0000 Manifest this update: Wed 21 Oct 2026 10:41:46 +0000 Manifest next update: Thu 22 Oct 2026 11:59:46 +0000 Files and hashes: 1: 34352e3134362e3136322e302f32342d3234203d3e203138363331.roa (hash: mQKE/0/NnV539NSoXtVCOp3+AeXahl8sUnLhuxaZN7o=) 2: 34352e3134362e3136332e302f32342d3234203d3e203338313336.roa (hash: 2UoYMc+T3VQ81nJuKfdlMgklJP2lCeK6kVAd1Zef4f8=) 3: 34352e3134362e3136332e302f32342d3234203d3e20313937353238.roa (hash: Ebzg/MjqohTGeKwDaLunRaMiyaIF5yHH/QdRNJ9uULY=) 4: 34352e3134362e3136302e302f32332d3233203d3e20323133303031.roa (hash: J60EsWIeYN4a4peosqQOm0lgQhTjR5G5qC6zOtaqQT0=) 5: 34352e3134362e3136332e302f32342d3234203d3e20343031373736.roa (hash: vOmOz2BugVIPRfW7G2v3UGhcWNCUu83kIhIIM2fnK0w=) 6: 34352e3134362e3136302e302f32332d3233203d3e203437343437.roa (hash: 31YTnxmdtZ2cp3Cw9rcOHPD6ZzrVs4b/Az5vMfbmmIM=) 7: 5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl (hash: xuz50iA8goWvBMBxTfjN5V1JmX05cFlu4YqB7F8Cpm8=) 8: 34352e3134362e3136332e302f32342d3234203d3e20323136313833.roa (hash: XTDJATGz+5Q73NiC1c/IBrS41alzR60OgjqgVHPK5mY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Oct 2026 11:59:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:29:60:4b:a3:43:32:23:69:27:89:5e:3e:61:d9:f3:6f:63:52:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3 Validity Not Before: Oct 21 10:41:46 2026 GMT Not After : Oct 22 11:59:46 2026 GMT Subject: CN=3FCE12DF55ACF9A2103A89031CF7C052FB8E1CFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c0:07:e7:3f:b6:1b:cd:1e:a0:ec:83:9c:04: c0:86:5d:a8:bd:7a:2b:69:df:ce:c7:90:b8:02:b2: 1d:30:e7:64:9e:92:da:0a:65:a9:40:81:f2:ef:90: c8:f2:96:cf:f7:03:69:a1:5b:a6:45:53:08:40:ba: 40:61:ae:77:33:98:8e:73:6e:9a:ea:7e:5a:e9:63: dd:bb:c3:3a:7b:cb:6a:5f:58:25:73:e7:9c:f4:57: 84:fa:1b:fd:fa:30:f2:46:18:ca:2b:39:67:b3:82: 65:24:f5:c8:3b:ed:ef:61:9e:c2:c9:e3:e6:27:81: b2:ce:ea:44:ef:9e:74:78:a7:82:a8:38:da:e3:b5: 1a:04:a2:d5:9e:d5:92:ca:04:9e:f0:b4:01:b8:72: 97:f6:1d:2a:90:6e:75:af:e7:4e:fc:52:67:a7:1a: a5:c1:1b:c1:2f:06:4a:f9:cd:78:81:09:07:3d:c3: 2d:82:3b:3f:20:67:e8:48:2d:ed:ec:6a:6e:41:9f: 7c:b1:51:50:fc:3f:bd:3d:30:9b:b9:82:4c:a3:5b: e2:97:7d:05:3a:b5:c1:44:d5:c2:4a:a5:b9:83:41: 1e:ad:f1:f5:dc:78:1f:50:6b:4f:fc:34:4a:b2:a4: 1f:97:f5:97:08:a9:8c:0f:ca:00:77:e2:ad:c1:72: f9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CE:12:DF:55:AC:F9:A2:10:3A:89:03:1C:F7:C0:52:FB:8E:1C:FB X509v3 Authority Key Identifier: keyid:5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:57:04:5d:5b:cc:34:d2:47:40:c3:b8:1d:7e:1b:86:80:46: cd:ac:c8:08:c2:82:8f:92:9c:56:a9:52:ef:0b:8f:ed:cf:7a: 37:b5:fe:c9:68:ed:07:0f:8e:8f:ff:8b:2a:10:42:4b:6e:57: 28:63:20:af:15:42:54:59:70:a4:18:13:97:18:94:77:be:5a: fb:88:ee:23:87:3d:66:51:3e:e1:6c:8f:a5:b0:74:e9:40:b6: 9a:df:82:78:16:be:06:31:35:11:26:85:fa:dc:34:07:19:b4: 9b:22:c6:79:80:49:4e:6a:5a:f7:a3:aa:8b:d4:c9:97:20:08: e4:e2:f9:0a:83:3b:0b:ce:41:23:7f:ae:e0:63:fe:ff:92:c2: 7d:81:77:ac:6c:fd:ae:1b:58:65:ee:ef:5d:5e:d2:c1:cb:56: ec:92:13:3f:d0:50:8d:c7:9d:07:80:6e:a8:60:6e:49:1a:f4: 7e:f7:6a:08:66:7f:c3:d2:e2:20:f0:59:d9:91:29:a3:a6:4c: 5b:6c:d6:8f:5d:45:9a:c5:28:8e:46:62:0f:80:d6:00:ee:22: 0e:b5:ec:1a:54:05:7d:f6:ae:02:d1:87:e6:89:31:fc:f5:91: fb:50:a6:50:55:ae:0d:8d:7d:c6:d1:17:6a:46:94:85:9a:d4: 21:35:69:20 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWilgS6NDMiNpJ4lePmHZ829jUpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRlZmUwOTIyZjRmNTUyNzBkY2Q1YzA4ZjA0ZjFjN2Jm MjYwNzNjMzAeFw0yNjEwMjExMDQxNDZaFw0yNjEwMjIxMTU5NDZaMDMxMTAvBgNV BAMTKDNGQ0UxMkRGNTVBQ0Y5QTIxMDNBODkwMzFDRjdDMDUyRkI4RTFDRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpwAfnP7YbzR6g7IOcBMCGXai9 eitp387HkLgCsh0w52SektoKZalAgfLvkMjyls/3A2mhW6ZFUwhAukBhrnczmI5z bprqflrpY927wzp7y2pfWCVz55z0V4T6G/36MPJGGMorOWezgmUk9cg77e9hnsLJ 4+YngbLO6kTvnnR4p4KoONrjtRoEotWe1ZLKBJ7wtAG4cpf2HSqQbnWv5078Umen GqXBG8EvBkr5zXiBCQc9wy2COz8gZ+hILe3sam5Bn3yxUVD8P709MJu5gkyjW+KX fQU6tcFE1cJKpbmDQR6t8fXceB9Qa0/8NEqypB+X9ZcIqYwPygB34q3Bcvn5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUP84S31Ws+aIQOokDHPfAUvuOHPswHwYDVR0j BBgwFoAUXe/gki9PVScNzVwI8E8ce/Jgc8MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmZlMmIyN2EtMWVjNS00YWI3LTk3OGUtNmRhOWNmOWYz NzkwLzAvNURFRkUwOTIyRjRGNTUyNzBEQ0Q1QzA4RjA0RjFDN0JGMjYwNzNDMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hlX2draTlQVlNjTnpWd0k4RThjZV9K Z2M4TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yZmUyYjI3YS0x ZWM1LTRhYjctOTc4ZS02ZGE5Y2Y5ZjM3OTAvMC81REVGRTA5MjJGNEY1NTI3MERD RDVDMDhGMDRGMUM3QkYyNjA3M0MzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABFcEXVvMNNJHQMO4HX4b hoBGzazICMKCj5KcVqlS7wuP7c96N7X+yWjtBw+Oj/+LKhBCS25XKGMgrxVCVFlw pBgTlxiUd75a+4juI4c9ZlE+4WyPpbB06UC2mt+CeBa+BjE1ESaF+tw0Bxm0myLG eYBJTmpa96Oqi9TJlyAI5OL5CoM7C85BI3+u4GP+/5LCfYF3rGz9rhtYZe7vXV7S wctW7JITP9BQjcedB4BuqGBuSRr0fvdqCGZ/w9LiIPBZ2ZEpo6ZMW2zWj11FmsUo jkZiD4DWAO4iDrXsGlQFffauAtGH5okx/PWR+1CmUFWuDY19xtEXakaUhZrUITVp IA== -----END CERTIFICATE-----Generated at Thu Oct 22 03:09:34 2026 by rpki-client