$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft File: 5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft (raw, json) Hash identifier: Lga1kyAoA7dneJyzq7xKD78AcNTXrqGIA8wz8MFeKac= Subject key identifier: F8:37:B5:D1:31:81:FA:42:1E:79:13:09:3B:34:C9:F4:82:92:75:DF Authority key identifier: 5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3 Certificate issuer: /CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3 Certificate serial: 5C90ACAB01D9125FE73644F2B1653CDF1EF65A9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft Manifest number: 05B0 Signing time: Fri 04 Sep 2026 15:03:56 +0000 Manifest this update: Fri 04 Sep 2026 14:58:56 +0000 Manifest next update: Sat 05 Sep 2026 18:34:56 +0000 Files and hashes: 1: 34352e3134362e3136332e302f32342d3234203d3e20343031373736.roa (hash: vOmOz2BugVIPRfW7G2v3UGhcWNCUu83kIhIIM2fnK0w=) 2: 34352e3134362e3136322e302f32342d3234203d3e203138363331.roa (hash: mQKE/0/NnV539NSoXtVCOp3+AeXahl8sUnLhuxaZN7o=) 3: 5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl (hash: TO+LF4FcU4tiQ/PsY6Us6BA1FCa866z1desHlBAA80w=) 4: 34352e3134362e3136332e302f32342d3234203d3e203338313336.roa (hash: 2UoYMc+T3VQ81nJuKfdlMgklJP2lCeK6kVAd1Zef4f8=) 5: 34352e3134362e3136302e302f32332d3233203d3e203437343437.roa (hash: 31YTnxmdtZ2cp3Cw9rcOHPD6ZzrVs4b/Az5vMfbmmIM=) 6: 34352e3134362e3136332e302f32342d3234203d3e20313937353238.roa (hash: Ebzg/MjqohTGeKwDaLunRaMiyaIF5yHH/QdRNJ9uULY=) 7: 34352e3134362e3136332e302f32342d3234203d3e20323136313833.roa (hash: XTDJATGz+5Q73NiC1c/IBrS41alzR60OgjqgVHPK5mY=) 8: 34352e3134362e3136302e302f32332d3233203d3e20323133303031.roa (hash: J60EsWIeYN4a4peosqQOm0lgQhTjR5G5qC6zOtaqQT0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 16:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:90:ac:ab:01:d9:12:5f:e7:36:44:f2:b1:65:3c:df:1e:f6:5a:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3 Validity Not Before: Sep 4 14:58:56 2026 GMT Not After : Sep 5 18:34:56 2026 GMT Subject: CN=F837B5D13181FA421E7913093B34C9F4829275DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:17:3a:1f:03:a5:54:1c:86:df:b0:67:fb:67: 2d:2f:25:6b:76:13:f2:d4:fa:ca:f6:d6:ec:ce:40: d7:b7:21:b2:3a:da:9b:95:d4:eb:5f:60:96:e1:21: ef:ea:f9:6c:f0:02:ed:d7:4a:cb:c0:e2:c1:c1:eb: 2b:99:88:59:30:23:c6:d8:26:15:dc:3c:3f:dd:72: 7e:3d:99:3d:c1:66:8f:dd:6b:b0:b4:39:9b:6a:cc: 16:43:6d:01:13:dd:37:7e:1b:d4:94:49:c2:c6:aa: a0:70:cc:15:e0:88:f5:4c:7d:2f:96:22:92:59:9a: de:82:d8:92:92:d9:5e:83:3d:97:fe:c1:7b:79:57: 5c:7c:d8:77:5e:9c:de:f7:01:45:f0:12:27:ec:e9: b3:19:3c:a5:54:ca:29:1b:a3:cc:84:ee:29:ac:b6: 88:60:c1:e2:45:f1:ce:d1:c9:18:b7:c6:c7:48:6d: db:53:b7:bb:db:8a:0a:03:4c:8f:fd:72:fc:94:4a: 94:00:2e:bb:43:69:55:71:8f:51:d3:b7:a7:7d:cd: 24:b6:e0:3f:f7:a5:f2:96:1e:11:c9:bf:5e:b5:a6: 98:2c:da:d8:cd:2b:3e:18:d1:71:4b:87:ee:37:29: 61:af:de:29:55:7d:fc:a9:c8:67:19:44:04:b8:93: 1c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:37:B5:D1:31:81:FA:42:1E:79:13:09:3B:34:C9:F4:82:92:75:DF X509v3 Authority Key Identifier: keyid:5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:0a:73:d3:26:1b:6f:e9:84:e2:0a:74:50:09:db:13:d6:98: fb:dd:e2:8d:45:86:dc:f6:ec:91:77:4a:a7:91:6a:46:6c:65: 1e:16:05:1b:44:81:52:1b:b0:0e:6b:1c:78:61:b0:44:fe:0e: cf:35:31:27:b6:41:67:cb:5f:09:0c:6e:4c:bd:72:a4:a1:10: fe:97:62:01:74:dc:a4:60:b9:34:96:10:a5:a3:e1:3d:2b:19: 5d:b4:0a:9a:4c:5a:89:bd:fb:10:2a:b6:71:38:4f:5c:7d:46: 55:a6:b5:e3:6f:87:7e:f0:6c:a7:6c:98:bb:ff:67:1f:e6:8d: e1:c6:1f:cc:ac:6f:e9:80:73:3a:6f:5a:a3:be:c4:42:32:a5: 30:37:24:30:fb:da:57:2b:46:6e:a2:f0:3f:f7:a9:eb:6c:dc: 06:bf:6f:bf:3c:23:c3:09:30:51:41:ef:20:b0:09:15:72:05: a1:58:86:da:67:23:ef:f3:97:89:35:fe:96:fc:8f:e5:bb:da: d0:d0:de:df:17:97:31:d2:c5:4b:43:b7:0f:03:6f:1e:8e:de: 25:1f:a7:db:10:07:d4:f7:64:a0:73:cc:e3:51:da:ef:9a:5a: 9c:d4:91:83:13:83:b8:ec:ab:34:cc:31:81:29:1d:55:a6:cf: 8d:b8:e2:56 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXJCsqwHZEl/nNkTysWU83x72WpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRlZmUwOTIyZjRmNTUyNzBkY2Q1YzA4ZjA0ZjFjN2Jm MjYwNzNjMzAeFw0yNjA5MDQxNDU4NTZaFw0yNjA5MDUxODM0NTZaMDMxMTAvBgNV BAMTKEY4MzdCNUQxMzE4MUZBNDIxRTc5MTMwOTNCMzRDOUY0ODI5Mjc1REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3FzofA6VUHIbfsGf7Zy0vJWt2 E/LU+sr21uzOQNe3IbI62puV1OtfYJbhIe/q+WzwAu3XSsvA4sHB6yuZiFkwI8bY JhXcPD/dcn49mT3BZo/da7C0OZtqzBZDbQET3Td+G9SUScLGqqBwzBXgiPVMfS+W IpJZmt6C2JKS2V6DPZf+wXt5V1x82HdenN73AUXwEifs6bMZPKVUyikbo8yE7ims tohgweJF8c7RyRi3xsdIbdtTt7vbigoDTI/9cvyUSpQALrtDaVVxj1HTt6d9zSS2 4D/3pfKWHhHJv161ppgs2tjNKz4Y0XFLh+43KWGv3ilVffypyGcZRAS4kxxBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU+De10TGB+kIeeRMJOzTJ9IKSdd8wHwYDVR0j BBgwFoAUXe/gki9PVScNzVwI8E8ce/Jgc8MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmZlMmIyN2EtMWVjNS00YWI3LTk3OGUtNmRhOWNmOWYz NzkwLzAvNURFRkUwOTIyRjRGNTUyNzBEQ0Q1QzA4RjA0RjFDN0JGMjYwNzNDMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hlX2draTlQVlNjTnpWd0k4RThjZV9K Z2M4TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yZmUyYjI3YS0x ZWM1LTRhYjctOTc4ZS02ZGE5Y2Y5ZjM3OTAvMC81REVGRTA5MjJGNEY1NTI3MERD RDVDMDhGMDRGMUM3QkYyNjA3M0MzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtApz0yYbb+mE4gp0UAnb E9aY+93ijUWG3PbskXdKp5FqRmxlHhYFG0SBUhuwDmsceGGwRP4OzzUxJ7ZBZ8tf CQxuTL1ypKEQ/pdiAXTcpGC5NJYQpaPhPSsZXbQKmkxaib37ECq2cThPXH1GVaa1 42+HfvBsp2yYu/9nH+aN4cYfzKxv6YBzOm9ao77EQjKlMDckMPvaVytGbqLwP/ep 62zcBr9vvzwjwwkwUUHvILAJFXIFoViG2mcj7/OXiTX+lvyP5bva0NDe3xeXMdLF S0O3DwNvHo7eJR+n2xAH1PdkoHPM41Ha75panNSRgxODuOyrNMwxgSkdVabPjbji Vg== -----END CERTIFICATE-----Generated at Fri Sep 4 22:12:31 2026 by rpki-client