$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft File: 5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft (raw, json) Hash identifier: 12Ir4jDG+kkDAFVLll6psJwWHJuleZAY9TlMrfYHjx0= Subject key identifier: 2A:8A:9E:DB:1D:86:57:14:C9:5D:BA:2A:57:4B:C6:AA:E2:8C:2B:90 Authority key identifier: 5E:F4:C7:50:B1:93:5E:E4:BF:7F:C2:44:1A:2E:E4:90:47:7A:91:AE Certificate issuer: /CN=5EF4C750B1935EE4BF7FC2441A2EE490477A91AE Certificate serial: 66B3E4936D3A10EB4C93D4C2CF72922114DFC165 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft Manifest number: 6B Signing time: Sun 04 Oct 2026 02:39:11 +0000 Manifest this update: Sun 04 Oct 2026 02:34:11 +0000 Manifest next update: Mon 05 Oct 2026 05:55:11 +0000 Files and hashes: 1: 326131333a633863313a3131313a3a2f34382d3438203d3e20323135383238.roa (hash: 2lS2H8IBJxOyjnm2BZrwuj7Pk6jZjmGW1zgNbopUg+c=) 2: 326131333a633863313a3a2f33322d3438203d3e20323135383238.roa (hash: hNZRvs/OBGGhL+Wi/pJl/tEWWCNS71UB0iGh83Kwf+4=) 3: 5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.crl (hash: ODTtTm57ZWC0MljUhzA5Zv5mek4fBO3oc9ACpNWMaoU=) 4: 326131333a633863313a3a2f33322d3438203d3e20323139313130.roa (hash: cGZdSXuuzOKIoqdr5hUFzzLSPkhIhMJaOMKrWyrRuhw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.crl rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Oct 2026 05:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:b3:e4:93:6d:3a:10:eb:4c:93:d4:c2:cf:72:92:21:14:df:c1:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EF4C750B1935EE4BF7FC2441A2EE490477A91AE Validity Not Before: Oct 4 02:34:11 2026 GMT Not After : Oct 5 05:55:11 2026 GMT Subject: CN=2A8A9EDB1D865714C95DBA2A574BC6AAE28C2B90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:91:64:2d:ab:be:90:a5:91:55:6b:27:dc:21: e1:23:fa:e4:fb:65:64:ec:01:5e:3b:34:02:a4:47: c4:16:24:62:9c:e3:85:d8:ca:80:b0:26:19:e4:5c: 39:60:f2:9e:fc:50:4e:58:99:1c:20:e7:26:22:a1: 31:a1:9f:51:59:af:4e:1b:61:85:2c:02:3c:f0:7e: e8:d1:f2:c6:d3:f5:30:ff:e5:94:d8:84:73:b2:2d: 39:a6:70:46:ff:7b:46:c9:e9:88:4e:67:0a:b1:d6: 49:e3:0b:40:a9:44:45:44:62:7c:85:4e:89:bd:af: 03:9a:6f:72:ad:bf:a2:f9:9c:48:a7:b9:41:2f:47: bf:3e:a5:6f:66:c4:c1:6b:f8:fb:33:f6:c0:0f:86: fb:1d:01:79:c6:28:c1:ce:73:40:bc:2c:02:5f:0e: 05:aa:32:b3:43:f7:64:ab:40:82:df:40:68:52:b2: 73:91:33:13:8a:7c:bc:d0:54:7c:f0:a0:ca:2a:28: b2:2a:12:0a:95:c3:56:f8:95:e6:50:67:d8:0a:da: 1d:8c:cb:c3:31:67:62:6a:42:0d:64:47:46:0f:1b: 91:18:ce:5e:22:89:e3:d0:ee:89:c4:66:5a:69:ea: 5f:48:00:a5:40:01:78:2a:5d:3a:1e:68:7d:62:f4: f9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8A:9E:DB:1D:86:57:14:C9:5D:BA:2A:57:4B:C6:AA:E2:8C:2B:90 X509v3 Authority Key Identifier: keyid:5E:F4:C7:50:B1:93:5E:E4:BF:7F:C2:44:1A:2E:E4:90:47:7A:91:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:1d:02:58:69:42:8e:8f:28:3a:72:30:99:7a:db:b5:38:10: d3:6d:3b:ef:fe:66:d2:5a:2f:9c:03:79:af:cf:2f:dd:da:84: 72:85:0c:e4:c1:fe:3a:e8:76:0d:5d:5e:ba:87:b9:e8:89:45: 3e:40:aa:d6:ff:c2:f1:fb:46:07:f2:36:e4:32:95:4e:57:b9: 08:19:59:b1:1f:b6:ef:74:3a:04:4c:d9:49:29:c7:e9:01:c6: 67:31:10:8f:70:6c:36:a3:38:bd:70:83:be:93:8a:a3:8f:60: b3:60:cf:66:5f:64:c7:0d:89:82:f4:78:4d:f7:40:67:d4:9c: ae:71:06:28:e0:50:f1:6f:a2:ba:23:28:21:89:1f:9a:51:dd: e0:de:fd:79:3e:2e:60:53:e5:e6:2f:bb:e2:88:99:7a:7e:3a: 32:6a:45:10:28:e1:88:ab:df:eb:8b:9f:1a:26:1c:01:57:e6: 9d:c1:44:3f:ba:4b:0a:68:cc:70:de:dc:ac:9c:b0:7b:0e:4c: 22:90:15:6e:f3:a8:62:2f:5d:dc:46:a6:f7:0b:77:22:68:c8: 28:89:07:89:3f:fb:aa:68:c1:bb:d2:22:5a:86:17:0b:6e:99: b8:37:42:4a:0c:65:19:08:ed:fe:c5:ee:7d:71:82:43:4c:d6: f9:9c:c4:64 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUZrPkk206EOtMk9TCz3KSIRTfwWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVGNEM3NTBCMTkzNUVFNEJGN0ZDMjQ0MUEyRUU0OTA0 NzdBOTFBRTAeFw0yNjEwMDQwMjM0MTFaFw0yNjEwMDUwNTU1MTFaMDMxMTAvBgNV BAMTKDJBOEE5RURCMUQ4NjU3MTRDOTVEQkEyQTU3NEJDNkFBRTI4QzJCOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNkWQtq76QpZFVayfcIeEj+uT7 ZWTsAV47NAKkR8QWJGKc44XYyoCwJhnkXDlg8p78UE5YmRwg5yYioTGhn1FZr04b YYUsAjzwfujR8sbT9TD/5ZTYhHOyLTmmcEb/e0bJ6YhOZwqx1knjC0CpREVEYnyF Tom9rwOab3Ktv6L5nEinuUEvR78+pW9mxMFr+Psz9sAPhvsdAXnGKMHOc0C8LAJf DgWqMrND92SrQILfQGhSsnORMxOKfLzQVHzwoMoqKLIqEgqVw1b4leZQZ9gK2h2M y8MxZ2JqQg1kR0YPG5EYzl4iiePQ7onEZlpp6l9IAKVAAXgqXToeaH1i9PnHAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUKoqe2x2GVxTJXboqV0vGquKMK5AwHwYDVR0j BBgwFoAUXvTHULGTXuS/f8JEGi7kkEd6ka4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWMwZWQwNDYtZmE5NS00NWMzLTkxNDYtOTcxZGI4YTll OGJiLzgvNUVGNEM3NTBCMTkzNUVFNEJGN0ZDMjQ0MUEyRUU0OTA0NzdBOTFBRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03ZDEzLTQ4 OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC81RUY0Qzc1MEIxOTM1RUU0QkY3RkMyNDQx QTJFRTQ5MDQ3N0E5MUFFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzljMGVkMDQ2LWZhOTUtNDVjMy05MTQ2LTk3MWRiOGE5ZThiYi84LzVFRjRDNzUw QjE5MzVFRTRCRjdGQzI0NDFBMkVFNDkwNDc3QTkxQUUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB8HQJY aUKOjyg6cjCZetu1OBDTbTvv/mbSWi+cA3mvzy/d2oRyhQzkwf466HYNXV66h7no iUU+QKrW/8Lx+0YH8jbkMpVOV7kIGVmxH7bvdDoETNlJKcfpAcZnMRCPcGw2ozi9 cIO+k4qjj2CzYM9mX2THDYmC9HhN90Bn1JyucQYo4FDxb6K6IyghiR+aUd3g3v15 Pi5gU+XmL7viiJl6fjoyakUQKOGIq9/ri58aJhwBV+adwUQ/uksKaMxw3tysnLB7 DkwikBVu86hiL13cRqb3C3ciaMgoiQeJP/uqaMG70iJahhcLbpm4N0JKDGUZCO3+ xe59cYJDTNb5nMRk -----END CERTIFICATE-----Generated at Sun Oct 4 19:53:19 2026 by rpki-client