$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft File: 5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft (raw, json) Hash identifier: T0s9qkZJgvGEYtxYfQPcCsUQH+59vLL9SNpyH8SCrG0= Subject key identifier: 82:98:D6:BB:FA:34:1F:D8:AC:1F:E2:2F:41:52:4B:8A:91:E8:40:C5 Authority key identifier: 5E:F4:C7:50:B1:93:5E:E4:BF:7F:C2:44:1A:2E:E4:90:47:7A:91:AE Certificate issuer: /CN=5EF4C750B1935EE4BF7FC2441A2EE490477A91AE Certificate serial: 5F7578E53403EB60F4A3503D257496D23F1D3B77 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft Manifest number: 6E Signing time: Tue 06 Oct 2026 07:44:11 +0000 Manifest this update: Tue 06 Oct 2026 07:39:11 +0000 Manifest next update: Wed 07 Oct 2026 08:27:11 +0000 Files and hashes: 1: 326131333a633863313a3a2f33322d3438203d3e20323135383238.roa (hash: hNZRvs/OBGGhL+Wi/pJl/tEWWCNS71UB0iGh83Kwf+4=) 2: 326131333a633863313a3131313a3a2f34382d3438203d3e20323135383238.roa (hash: 2lS2H8IBJxOyjnm2BZrwuj7Pk6jZjmGW1zgNbopUg+c=) 3: 326131333a633863313a3a2f33322d3438203d3e20323139313130.roa (hash: cGZdSXuuzOKIoqdr5hUFzzLSPkhIhMJaOMKrWyrRuhw=) 4: 5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.crl (hash: eYYnAl04HtvpfO6zSGOfG5r2JYqarqcM5l/E92uniYk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.crl rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Oct 2026 22:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:75:78:e5:34:03:eb:60:f4:a3:50:3d:25:74:96:d2:3f:1d:3b:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EF4C750B1935EE4BF7FC2441A2EE490477A91AE Validity Not Before: Oct 6 07:39:11 2026 GMT Not After : Oct 7 08:27:11 2026 GMT Subject: CN=8298D6BBFA341FD8AC1FE22F41524B8A91E840C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ce:3f:11:2d:9d:29:fb:5c:34:08:84:81:fa: 2d:66:f3:17:30:72:77:3b:f0:f3:00:dd:20:21:95: b1:bd:2f:b1:38:7e:57:1c:05:a0:0b:93:6e:2b:56: f0:61:f2:54:ba:19:6c:6e:fb:68:4b:ab:7b:31:c4: ea:be:39:3f:53:fc:44:3e:98:76:62:5f:08:33:f6: b7:a7:8b:f2:d4:0d:07:28:e8:9f:b9:9d:15:8f:b4: 0c:cb:54:15:89:8d:5d:82:b9:64:91:fd:93:5e:83: f3:67:a0:c8:92:8f:9d:dd:f0:e3:dc:8b:52:ec:1b: 1b:aa:0d:d9:0c:34:1b:76:4e:62:b9:1c:71:d1:95: e5:83:c4:a7:ac:54:c1:5c:69:f6:21:12:81:49:a7: 70:f5:18:5c:1b:ab:63:39:f8:49:6a:3c:fc:ec:de: 55:a4:fc:b7:db:82:23:74:27:7e:43:4b:f9:bb:03: a4:16:c7:cf:6e:d8:47:f6:9e:82:88:b0:62:e5:0f: c5:12:2b:02:20:43:95:7b:3b:2b:df:e9:ab:81:6d: 2c:f3:a9:f8:96:a4:ac:41:3d:31:4b:32:02:73:d3: 39:08:3f:15:c2:71:53:ea:3d:63:cc:b4:13:53:bf: 1e:9f:2f:8b:bf:2b:24:68:b1:04:f8:f0:14:69:20: 78:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:98:D6:BB:FA:34:1F:D8:AC:1F:E2:2F:41:52:4B:8A:91:E8:40:C5 X509v3 Authority Key Identifier: keyid:5E:F4:C7:50:B1:93:5E:E4:BF:7F:C2:44:1A:2E:E4:90:47:7A:91:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:1e:f5:fa:2a:27:02:92:70:12:4a:0c:19:83:eb:06:60:f3: 42:4a:d2:72:d2:be:a4:70:4c:91:8f:45:25:81:b0:fc:82:09: 1a:ad:89:af:52:de:5e:6d:2e:b9:da:92:68:98:93:ae:17:e1: 8b:7d:e9:0a:82:cf:d3:15:61:1d:17:2a:cb:e6:89:e4:66:7c: b3:4f:92:c5:a7:34:46:89:27:74:0c:72:22:4e:6a:27:f2:8b: 2e:9a:16:a5:c6:42:24:0c:8e:e6:36:4f:75:53:f8:70:bd:d7: d0:ca:34:00:d7:b0:cf:e6:a2:30:3f:74:c6:c8:21:3d:fa:12: 19:65:97:83:86:d2:8f:fa:c5:e6:fd:3f:17:99:57:3d:f6:18: 20:a6:4c:84:24:d7:52:c1:15:cc:6f:06:85:76:09:eb:e3:10: 3e:38:6f:6e:08:03:60:48:49:34:10:02:ea:66:a6:3e:59:a1: c1:24:09:b6:fb:26:6e:c5:82:ce:1f:24:a2:6b:17:7b:18:c0: d1:0c:31:85:38:04:07:43:93:97:eb:3f:09:0b:ff:17:ec:8c: 09:ec:55:80:c4:76:58:1a:de:4b:b1:ae:9c:00:04:a7:97:79: d2:54:ad:14:84:7b:be:cd:fe:04:52:d3:62:50:5c:01:74:18: f4:8e:9f:ce -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUX3V45TQD62D0o1A9JXSW0j8dO3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVGNEM3NTBCMTkzNUVFNEJGN0ZDMjQ0MUEyRUU0OTA0 NzdBOTFBRTAeFw0yNjEwMDYwNzM5MTFaFw0yNjEwMDcwODI3MTFaMDMxMTAvBgNV BAMTKDgyOThENkJCRkEzNDFGRDhBQzFGRTIyRjQxNTI0QjhBOTFFODQwQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLzj8RLZ0p+1w0CISB+i1m8xcw cnc78PMA3SAhlbG9L7E4flccBaALk24rVvBh8lS6GWxu+2hLq3sxxOq+OT9T/EQ+ mHZiXwgz9reni/LUDQco6J+5nRWPtAzLVBWJjV2CuWSR/ZNeg/NnoMiSj53d8OPc i1LsGxuqDdkMNBt2TmK5HHHRleWDxKesVMFcafYhEoFJp3D1GFwbq2M5+ElqPPzs 3lWk/LfbgiN0J35DS/m7A6QWx89u2Ef2noKIsGLlD8USKwIgQ5V7Oyvf6auBbSzz qfiWpKxBPTFLMgJz0zkIPxXCcVPqPWPMtBNTvx6fL4u/KyRosQT48BRpIHhZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUgpjWu/o0H9isH+IvQVJLipHoQMUwHwYDVR0j BBgwFoAUXvTHULGTXuS/f8JEGi7kkEd6ka4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWMwZWQwNDYtZmE5NS00NWMzLTkxNDYtOTcxZGI4YTll OGJiLzgvNUVGNEM3NTBCMTkzNUVFNEJGN0ZDMjQ0MUEyRUU0OTA0NzdBOTFBRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03ZDEzLTQ4 OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC81RUY0Qzc1MEIxOTM1RUU0QkY3RkMyNDQx QTJFRTQ5MDQ3N0E5MUFFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzljMGVkMDQ2LWZhOTUtNDVjMy05MTQ2LTk3MWRiOGE5ZThiYi84LzVFRjRDNzUw QjE5MzVFRTRCRjdGQzI0NDFBMkVFNDkwNDc3QTkxQUUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCfHvX6 KicCknASSgwZg+sGYPNCStJy0r6kcEyRj0UlgbD8ggkarYmvUt5ebS652pJomJOu F+GLfekKgs/TFWEdFyrL5onkZnyzT5LFpzRGiSd0DHIiTmon8osumhalxkIkDI7m Nk91U/hwvdfQyjQA17DP5qIwP3TGyCE9+hIZZZeDhtKP+sXm/T8XmVc99hggpkyE JNdSwRXMbwaFdgnr4xA+OG9uCANgSEk0EALqZqY+WaHBJAm2+yZuxYLOHySiaxd7 GMDRDDGFOAQHQ5OX6z8JC/8X7IwJ7FWAxHZYGt5Lsa6cAASnl3nSVK0UhHu+zf4E UtNiUFwBdBj0jp/O -----END CERTIFICATE-----Generated at Tue Oct 6 11:58:46 2026 by rpki-client