$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft File: 5ECB4CADBBADD500F49CA697D566A2761E017608.mft (raw, json) Hash identifier: ynO5qavq43o15q2RSs18g2PqFihBM/aQLcq0vRh8XHY= Subject key identifier: AC:24:6F:43:FF:AE:C5:47:43:C4:A3:5A:D4:90:D2:DA:A7:EC:86:79 Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Certificate serial: 63FE9253FF00AE6C532EE6D95CD23F59EBD2BB5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft Manifest number: 0342 Signing time: Tue 21 Jul 2026 13:12:29 +0000 Manifest this update: Tue 21 Jul 2026 13:07:29 +0000 Manifest next update: Wed 22 Jul 2026 16:07:29 +0000 Files and hashes: 1: 3231332e3235342e3137302e302f32342d3234203d3e20323038343833.roa (hash: LH3qwxx3cFGEc2nT11lVGioc4VsEH2u028n8n+GZTy8=) 2: 3134312e3139332e3232382e302f32342d3234203d3e20323134323038.roa (hash: ifyEdtBW0BhdKWJrpJ6bYfBeNzyrtZtj9JtftvgAsco=) 3: 3231332e3235342e3137302e302f32342d3234203d3e203438363738.roa (hash: ttSPLNkVmnmfbB1Jg0U4OFMRv4cZWxzTg6oBluFltrk=) 4: 3137302e36322e3139302e302f32342d3234203d3e203438393235.roa (hash: 8/++60jg7XtzmZ45FRECeqxUVy5048XlFvcQJYMNUjo=) 5: 5ECB4CADBBADD500F49CA697D566A2761E017608.crl (hash: 7OqXpDYgmZQMJBP97tK7JVYun+ANzqmULfttfsfi4+I=) 6: 3231332e3235342e3137302e302f32342d3234203d3e20323134393431.roa (hash: WuIyFXGDgkt2cltxoxT/RYao20HHu+r0Sn5rfpjFnHA=) 7: 38362e35342e3137322e302f32342d3234203d3e20323134343332.roa (hash: +6HuSGy13PoSBfdgi660PmTLE8Z52TLvw+ru7fcB7AI=) 8: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (hash: Q4yUdFFGtrq1xUVDtHn0DoNWjht0ICRHxiUX7p+xRAQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 16:07:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:fe:92:53:ff:00:ae:6c:53:2e:e6:d9:5c:d2:3f:59:eb:d2:bb:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Validity Not Before: Jul 21 13:07:29 2026 GMT Not After : Jul 22 16:07:29 2026 GMT Subject: CN=AC246F43FFAEC54743C4A35AD490D2DAA7EC8679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e5:fe:38:a8:e1:8a:a0:21:4b:1c:3a:13:26: 48:92:8c:d5:00:21:b4:1e:bc:07:00:d8:24:11:42: f6:01:2f:cf:ce:14:a6:bd:09:ae:c4:d6:a3:86:b3: f2:02:f9:9b:38:82:d8:5e:6f:a8:1f:73:d9:d8:26: bc:05:41:59:bf:46:91:9d:a4:f2:9a:71:72:30:75: e2:e1:a1:01:62:1a:37:17:4f:a2:27:e1:d9:4b:f9: 9b:3e:37:68:b4:6a:03:08:6c:a9:77:9b:32:99:6b: ea:89:08:7e:f9:41:7f:d0:ac:9c:13:3a:3f:4c:23: 8f:3f:2f:e8:98:08:7c:73:05:c9:18:84:a0:ce:3c: 2a:4f:7c:34:c8:a0:92:2d:fa:a5:47:78:69:f9:f4: 77:18:0f:19:5c:65:33:7b:ab:ac:c1:e6:f6:3d:66: 57:78:cb:d2:09:02:52:2e:4a:ad:ef:99:6a:82:a1: ae:cb:c2:ed:ae:1a:05:8c:bf:e9:56:ee:eb:c1:a0: 32:28:c4:bd:61:fe:da:77:9f:69:05:d0:0d:fe:5c: 9f:bd:4c:54:4e:e0:3d:43:3f:d7:ee:c0:44:dd:5d: 11:a0:ae:60:56:42:72:b0:46:7c:60:57:62:a7:d5: 52:a0:17:12:de:73:19:36:49:f7:a7:3c:6c:5b:7d: c5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:24:6F:43:FF:AE:C5:47:43:C4:A3:5A:D4:90:D2:DA:A7:EC:86:79 X509v3 Authority Key Identifier: keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:da:f1:25:1d:9d:b3:13:cd:4b:91:36:2f:b7:82:1d:a1:c5: 33:8f:90:30:e7:8c:cd:bb:5d:12:5e:24:95:dd:17:e6:29:28: 1f:7a:fd:dc:b0:f7:b2:3c:d6:27:d9:f0:54:cf:c3:78:15:14: 83:af:19:f6:f7:4c:3d:36:ff:6e:50:e2:1f:59:dc:f2:32:0b: eb:bd:e3:ab:62:f0:17:b7:26:44:ce:30:25:f1:56:21:7f:42: e4:b6:48:e1:93:af:02:55:2d:4b:74:6e:38:01:7b:b6:fa:44: da:02:6f:11:1a:85:47:32:30:9b:1f:3c:59:52:ff:61:db:95: 30:71:f7:d0:56:4f:83:91:d9:c7:b3:24:d2:f0:04:91:db:a4: 63:68:73:56:e2:a2:92:89:58:c2:2c:51:17:ad:bd:46:18:fd: c4:45:28:4a:34:e7:19:8f:75:a9:57:d4:62:c1:bd:63:a3:2d: bf:bb:84:47:dd:f5:28:a4:8c:1d:06:52:e8:a8:db:12:3c:10: 53:00:90:98:ed:21:b0:4e:10:8b:3e:14:f7:5e:75:c4:55:c4: 22:d8:57:41:f8:a4:92:24:81:86:6b:bb:7a:19:4d:23:a9:5f: 7c:83:8a:e9:23:55:53:ff:68:d3:09:dd:a2:b3:89:ec:01:ad: d5:bd:2b:23 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUY/6SU/8ArmxTLubZXNI/WevSu18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx ZTAxNzYwODAeFw0yNjA3MjExMzA3MjlaFw0yNjA3MjIxNjA3MjlaMDMxMTAvBgNV BAMTKEFDMjQ2RjQzRkZBRUM1NDc0M0M0QTM1QUQ0OTBEMkRBQTdFQzg2NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY5f44qOGKoCFLHDoTJkiSjNUA IbQevAcA2CQRQvYBL8/OFKa9Ca7E1qOGs/IC+Zs4gtheb6gfc9nYJrwFQVm/RpGd pPKacXIwdeLhoQFiGjcXT6In4dlL+Zs+N2i0agMIbKl3mzKZa+qJCH75QX/QrJwT Oj9MI48/L+iYCHxzBckYhKDOPCpPfDTIoJIt+qVHeGn59HcYDxlcZTN7q6zB5vY9 Zld4y9IJAlIuSq3vmWqCoa7Lwu2uGgWMv+lW7uvBoDIoxL1h/tp3n2kF0A3+XJ+9 TFRO4D1DP9fuwETdXRGgrmBWQnKwRnxgV2Kn1VKgFxLecxk2SfenPGxbfcXfAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUrCRvQ/+uxUdDxKNa1JDS2qfshnkwHwYDVR0j BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0 QmRnZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzBlMTNkOC1i ZmUwLTQyMzUtYWZiNC1kNTNlZGZiYWNkZDIvMC81RUNCNENBREJCQURENTAwRjQ5 Q0E2OTdENTY2QTI3NjFFMDE3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNrxJR2dsxPNS5E2L7eC HaHFM4+QMOeMzbtdEl4kld0X5ikoH3r93LD3sjzWJ9nwVM/DeBUUg68Z9vdMPTb/ blDiH1nc8jIL673jq2LwF7cmRM4wJfFWIX9C5LZI4ZOvAlUtS3RuOAF7tvpE2gJv ERqFRzIwmx88WVL/YduVMHH30FZPg5HZx7Mk0vAEkdukY2hzVuKikolYwixRF629 Rhj9xEUoSjTnGY91qVfUYsG9Y6Mtv7uER931KKSMHQZS6KjbEjwQUwCQmO0hsE4Q iz4U9151xFXEIthXQfikkiSBhmu7ehlNI6lffIOK6SNVU/9o0wndorOJ7AGt1b0r Iw== -----END CERTIFICATE-----Generated at Wed Jul 22 03:05:45 2026 by rpki-client