$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/5C7539DD21725D2C2DF2782A4101A5369C3C013F.mft File: 5C7539DD21725D2C2DF2782A4101A5369C3C013F.mft (raw, json) Hash identifier: Xn4Dd0l5uAhxDTkCUmEl2SOwzAA6xziX0JqYKPYWfPY= Subject key identifier: 59:81:46:05:15:8D:A3:90:75:4D:7C:B3:F2:22:72:6F:9A:F6:C9:8C Authority key identifier: 5C:75:39:DD:21:72:5D:2C:2D:F2:78:2A:41:01:A5:36:9C:3C:01:3F Certificate issuer: /CN=5C7539DD21725D2C2DF2782A4101A5369C3C013F Certificate serial: 0D38D204DBDEEB88FFFAF3D78E6397C3B517783B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5C7539DD21725D2C2DF2782A4101A5369C3C013F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/5C7539DD21725D2C2DF2782A4101A5369C3C013F.mft Manifest number: 11 Signing time: Wed 21 Oct 2026 19:13:21 +0000 Manifest this update: Wed 21 Oct 2026 19:08:21 +0000 Manifest next update: Thu 22 Oct 2026 22:46:21 +0000 Files and hashes: 1: 326131343a373538313a353036303a3a2f34342d3438203d3e20323138343730.roa (hash: E5TUkzsoXixE1UHQjocswgEgtrUuo742Pnd7YhTr9bk=) 2: 326131343a373538313a353033303a3a2f34342d3438203d3e20323138383332.roa (hash: aWBAs03xU1HpzGC/SG8VtaUD3JAfP9wV5kcakR38yVQ=) 3: 326131343a373538313a353031303a3a2f34342d3438203d3e20323034343634.roa (hash: YrRd+aAbyt8L1JYjDgSXoXSZjKCory+pIJS2RslmRHY=) 4: 5C7539DD21725D2C2DF2782A4101A5369C3C013F.crl (hash: ipTFGbSUdg7O8TW+4wttz0EHxpXkVi+scUxNvgCosLI=) 5: 326131343a373538313a353038303a3a2f34342d3438203d3e20323034343634.roa (hash: WNXih2xaQ+feyXkdt/VVcAzZRvnCdFUpjBtr29OgZhE=) 6: 326131343a373538313a353037303a3a2f34342d3438203d3e20323138343731.roa (hash: xZSyf8tuaQMy8IWk2/+qMG+yIh0GUvoRB3ZqCCv+8wY=) 7: 326131343a373538313a353035303a3a2f34342d3438203d3e20323139313537.roa (hash: 2lTOYiGFfMrG7QXt6csGU6tXjd4M56QUmlLjcf3vco0=) 8: 326131343a373538313a353034303a3a2f34342d3438203d3e20323138393034.roa (hash: olY89yTABZjQ0ftteHnlRH1moi3gjSYsqLAwYW3Vjro=) 9: 326131343a373538313a353032303a3a2f34342d3438203d3e20313939373436.roa (hash: 6Gkz1XPzCR78SppHa5ALVp9GHlDa5Cm9UBqbMqOjOZs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/5C7539DD21725D2C2DF2782A4101A5369C3C013F.crl rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/5C7539DD21725D2C2DF2782A4101A5369C3C013F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5C7539DD21725D2C2DF2782A4101A5369C3C013F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Oct 2026 22:46:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:38:d2:04:db:de:eb:88:ff:fa:f3:d7:8e:63:97:c3:b5:17:78:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7539DD21725D2C2DF2782A4101A5369C3C013F Validity Not Before: Oct 21 19:08:21 2026 GMT Not After : Oct 22 22:46:21 2026 GMT Subject: CN=59814605158DA390754D7CB3F222726F9AF6C98C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:06:b7:1b:23:80:3e:0d:51:a4:e4:49:30:c6: 44:4d:28:91:d4:c9:a1:cc:8d:67:44:27:e5:ae:12: 79:57:ac:34:52:6f:91:bf:3c:e3:52:d8:d6:2f:79: ea:84:35:8d:8b:e1:92:f9:b0:68:e6:cb:ba:ce:3e: 16:51:bd:ba:da:b7:f0:70:00:d6:ac:f1:68:15:b6: e1:c6:e0:27:76:3b:5d:34:ac:f9:78:c1:99:6c:a9: 7e:ed:26:b8:7f:43:c5:d4:ae:7b:11:b3:53:42:68: 27:ec:ac:79:a6:78:59:92:cc:b7:57:d7:a3:59:9a: c4:fe:2f:fe:e4:e8:a5:90:d2:cd:e5:fa:b4:f9:42: 52:1d:d5:3a:76:84:a5:57:1f:b2:06:37:f3:83:f3: 56:e4:85:9b:66:6b:56:95:b8:d2:f7:50:14:a9:71: 9a:a7:e3:7a:e5:17:1a:ca:6a:70:08:5c:f2:96:94: 04:2e:6b:b9:9e:d3:b9:ab:db:ea:f0:6f:8a:8d:62: 5e:8c:06:74:50:71:cd:f1:b0:28:b3:18:11:04:5b: c5:e8:ad:23:a5:74:08:f2:55:15:3a:67:42:e6:ea: 95:a4:80:97:06:23:3f:e7:89:bc:1b:07:8a:d5:af: 75:5f:3a:2e:ed:62:c9:0f:a5:37:ba:28:9d:2f:f7: bd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:81:46:05:15:8D:A3:90:75:4D:7C:B3:F2:22:72:6F:9A:F6:C9:8C X509v3 Authority Key Identifier: keyid:5C:75:39:DD:21:72:5D:2C:2D:F2:78:2A:41:01:A5:36:9C:3C:01:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/5C7539DD21725D2C2DF2782A4101A5369C3C013F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5C7539DD21725D2C2DF2782A4101A5369C3C013F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/5C7539DD21725D2C2DF2782A4101A5369C3C013F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:d3:93:77:fb:73:2b:af:a4:36:65:fe:a7:c4:5a:20:43:62: 7c:3a:7f:b7:a8:ce:ed:0c:13:97:a8:6b:52:ed:61:94:52:cd: d7:7b:e6:df:c1:6d:8a:c6:ab:b3:45:79:80:03:8b:c9:cf:41: d9:c3:21:bd:7b:c9:bc:3d:da:8d:d6:8a:da:d8:44:46:e5:51: f1:af:57:0e:d3:be:85:f4:64:ff:64:f0:47:d0:f9:0e:85:16: 94:f8:aa:ef:1c:42:cb:6e:5d:c4:b0:1c:17:06:5f:d8:74:5b: 59:06:fc:17:78:8d:ac:73:0a:5e:02:95:9f:72:22:af:dd:0b: 66:07:0d:00:05:1c:7a:1d:5d:dd:06:8f:19:fc:53:be:49:2f: f3:d5:20:04:ab:ce:23:33:92:28:59:6c:59:87:1f:20:9c:96: 19:3c:f1:b2:cc:e1:4d:6d:5c:5c:3c:85:4d:e8:1e:5b:30:9a: 48:13:a1:58:ed:51:9f:ff:c1:53:ab:75:9b:df:23:93:3b:09: 0e:66:88:db:16:b0:b1:8a:9e:78:68:38:37:5a:49:24:27:49: 49:0b:5f:09:8c:b2:fd:3b:75:f9:33:b4:29:2b:c6:96:f3:94: ca:b1:d3:86:fc:fd:e2:5c:30:c5:53:b3:33:29:00:4e:f2:8e: 3f:0f:28:c8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUDTjSBNve64j/+vPXjmOXw7UXeDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3NTM5REQyMTcyNUQyQzJERjI3ODJBNDEwMUE1MzY5 QzNDMDEzRjAeFw0yNjEwMjExOTA4MjFaFw0yNjEwMjIyMjQ2MjFaMDMxMTAvBgNV BAMTKDU5ODE0NjA1MTU4REEzOTA3NTREN0NCM0YyMjI3MjZGOUFGNkM5OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCBrcbI4A+DVGk5EkwxkRNKJHU yaHMjWdEJ+WuEnlXrDRSb5G/PONS2NYveeqENY2L4ZL5sGjmy7rOPhZRvbrat/Bw ANas8WgVtuHG4Cd2O100rPl4wZlsqX7tJrh/Q8XUrnsRs1NCaCfsrHmmeFmSzLdX 16NZmsT+L/7k6KWQ0s3l+rT5QlId1Tp2hKVXH7IGN/OD81bkhZtma1aVuNL3UBSp cZqn43rlFxrKanAIXPKWlAQua7me07mr2+rwb4qNYl6MBnRQcc3xsCizGBEEW8Xo rSOldAjyVRU6Z0Lm6pWkgJcGIz/nibwbB4rVr3VfOi7tYskPpTe6KJ0v972NAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUWYFGBRWNo5B1TXyz8iJyb5r2yYwwHwYDVR0j BBgwFoAUXHU53SFyXSwt8ngqQQGlNpw8AT8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2NiZmFkOTYtNzk0Ny00ZTQ5LWFjZTEtOGJmODk5OTNi ZDQyLzcvNUM3NTM5REQyMTcyNUQyQzJERjI3ODJBNDEwMUE1MzY5QzNDMDEzRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81Qzc1MzlERDIxNzI1RDJDMkRGMjc4MkE0 MTAxQTUzNjlDM0MwMTNGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzNjYmZhZDk2LTc5NDctNGU0OS1hY2UxLThiZjg5OTkzYmQ0Mi83LzVDNzUzOURE MjE3MjVEMkMyREYyNzgyQTQxMDFBNTM2OUMzQzAxM0YubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA405N3 +3Mrr6Q2Zf6nxFogQ2J8On+3qM7tDBOXqGtS7WGUUs3Xe+bfwW2KxquzRXmAA4vJ z0HZwyG9e8m8PdqN1ora2ERG5VHxr1cO076F9GT/ZPBH0PkOhRaU+KrvHELLbl3E sBwXBl/YdFtZBvwXeI2scwpeApWfciKv3QtmBw0ABRx6HV3dBo8Z/FO+SS/z1SAE q84jM5IoWWxZhx8gnJYZPPGyzOFNbVxcPIVN6B5bMJpIE6FY7VGf/8FTq3Wb3yOT OwkOZojbFrCxip54aDg3WkkkJ0lJC18JjLL9O3X5M7QpK8aW85TKsdOG/P3iXDDF U7MzKQBO8o4/DyjI -----END CERTIFICATE-----Generated at Thu Oct 22 11:43:33 2026 by rpki-client