$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft File: 5ECB4CADBBADD500F49CA697D566A2761E017608.mft (raw, json) Hash identifier: uY30evu7kWSCXKUjlv20+/E9QtwrLQswqPQSqqe76hs= Subject key identifier: D9:E1:2B:13:CA:23:45:B3:D2:21:E4:BB:05:A2:C6:DF:30:85:DA:46 Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Certificate serial: 0F2A28550268CFDDAB82FB2D2E76566BB2439315 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft Manifest number: 0306 Signing time: Sat 06 Jun 2026 15:32:15 +0000 Manifest this update: Sat 06 Jun 2026 15:27:15 +0000 Manifest next update: Sun 07 Jun 2026 17:19:15 +0000 Files and hashes: 1: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (hash: Q4yUdFFGtrq1xUVDtHn0DoNWjht0ICRHxiUX7p+xRAQ=) 2: 38362e35342e3137322e302f32342d3234203d3e20323134343332.roa (hash: +6HuSGy13PoSBfdgi660PmTLE8Z52TLvw+ru7fcB7AI=) 3: 3137302e36322e3139302e302f32342d3234203d3e203438393235.roa (hash: 8/++60jg7XtzmZ45FRECeqxUVy5048XlFvcQJYMNUjo=) 4: 3231332e3235342e3137302e302f32342d3234203d3e20323134393431.roa (hash: WuIyFXGDgkt2cltxoxT/RYao20HHu+r0Sn5rfpjFnHA=) 5: 5ECB4CADBBADD500F49CA697D566A2761E017608.crl (hash: zQ1GFJc6WQoZkrxW9nTx9FECKhKI0VREfIEr2e0A+/k=) 6: 3134312e3139332e3232382e302f32342d3234203d3e20323134323038.roa (hash: p1kuPenqcy6Et0XPjwxcCLB+vpEy3ekHhe4EodnqolI=) 7: 3231332e3235342e3137302e302f32342d3234203d3e20323038343833.roa (hash: LH3qwxx3cFGEc2nT11lVGioc4VsEH2u028n8n+GZTy8=) 8: 3231332e3235342e3137302e302f32342d3234203d3e203438363738.roa (hash: ttSPLNkVmnmfbB1Jg0U4OFMRv4cZWxzTg6oBluFltrk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Jun 2026 13:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:2a:28:55:02:68:cf:dd:ab:82:fb:2d:2e:76:56:6b:b2:43:93:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Validity Not Before: Jun 6 15:27:15 2026 GMT Not After : Jun 7 17:19:15 2026 GMT Subject: CN=D9E12B13CA2345B3D221E4BB05A2C6DF3085DA46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c8:9d:e3:29:25:7b:c4:5f:bc:00:a3:d1:a9: 72:0f:18:f4:81:a2:b5:f5:da:77:19:38:13:69:81: 5e:bd:4d:3b:73:8a:67:ee:ad:2d:a6:fb:0f:6b:47: 13:b2:00:2d:a6:05:82:e5:09:8d:ce:8f:48:2e:61: ea:30:d3:ae:b0:85:a3:a1:f7:86:34:a4:c0:43:db: 7c:0c:11:41:13:33:cf:11:b0:74:10:fc:1a:84:21: b7:09:15:97:e8:2f:48:52:de:8a:40:66:79:f4:ee: e8:98:ae:f3:02:a1:55:4c:31:c7:04:d7:d4:7c:d5: bf:cb:b0:6e:c8:0e:63:8e:93:55:48:3c:63:c6:07: d0:d8:3b:1d:12:3e:c4:15:cf:d4:61:43:dd:d3:ea: 73:4e:60:3d:e3:35:97:02:3f:1d:34:73:d6:6e:39: af:af:34:76:25:59:7a:a4:99:df:c6:bd:27:73:70: 32:29:84:2f:a0:dd:2a:1b:94:17:05:c4:8c:84:8c: 2e:f7:b8:19:18:da:68:d2:61:73:11:d1:ec:d4:18: ca:bc:8e:47:2e:3a:46:d4:13:ca:a3:90:9a:ac:ae: c1:af:2e:95:51:f4:ed:20:d3:a3:66:2b:96:da:90: d1:08:be:13:30:d6:ea:dc:ca:99:90:f8:33:44:21: 3f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E1:2B:13:CA:23:45:B3:D2:21:E4:BB:05:A2:C6:DF:30:85:DA:46 X509v3 Authority Key Identifier: keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:8b:18:f3:22:ce:de:78:aa:bd:0c:b5:8b:19:42:79:00:45: e4:f3:9c:b8:3b:11:91:37:42:a4:1e:5b:2e:2e:30:0a:4d:f3: af:2c:92:23:87:e7:95:65:3a:2d:6b:57:9d:0c:96:97:ce:14: a1:94:16:82:80:c0:4d:9d:91:05:88:20:b9:0a:4e:9d:c7:d4: 3f:91:46:20:20:d7:08:cf:e0:4e:65:d5:a2:5d:18:d9:31:29: 4c:75:84:2b:aa:67:de:be:92:94:a6:49:46:57:cf:4d:17:db: fa:5d:34:2b:73:06:82:b8:69:06:96:08:b4:7c:1a:de:9e:f8: f6:2e:20:a7:b3:2c:1a:d3:fb:b0:00:6b:fc:b1:8b:87:7d:ff: b7:4d:79:13:ef:eb:c7:0d:5f:27:3d:a1:b2:cb:fb:f0:0c:14: d8:8b:0c:55:e6:1e:98:cb:e6:97:b0:e0:8a:68:0d:12:78:e3: a1:f2:fe:ba:95:5f:f4:94:ac:a9:05:dd:bb:19:63:c3:89:0f: 6d:2a:fa:ff:b3:2b:f1:c6:22:42:22:ab:d6:ea:1d:4a:24:9b: 56:67:cf:8d:f4:e0:f1:6d:61:b5:33:49:48:dd:4c:c9:cb:ea: 45:07:ea:b5:3d:e0:1f:cd:a3:8f:79:79:06:00:1a:37:f3:f0: 35:d6:5c:19 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDyooVQJoz92rgvstLnZWa7JDkxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx ZTAxNzYwODAeFw0yNjA2MDYxNTI3MTVaFw0yNjA2MDcxNzE5MTVaMDMxMTAvBgNV BAMTKEQ5RTEyQjEzQ0EyMzQ1QjNEMjIxRTRCQjA1QTJDNkRGMzA4NURBNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFyJ3jKSV7xF+8AKPRqXIPGPSB orX12ncZOBNpgV69TTtzimfurS2m+w9rRxOyAC2mBYLlCY3Oj0guYeow066whaOh 94Y0pMBD23wMEUETM88RsHQQ/BqEIbcJFZfoL0hS3opAZnn07uiYrvMCoVVMMccE 19R81b/LsG7IDmOOk1VIPGPGB9DYOx0SPsQVz9RhQ93T6nNOYD3jNZcCPx00c9Zu Oa+vNHYlWXqkmd/GvSdzcDIphC+g3SoblBcFxIyEjC73uBkY2mjSYXMR0ezUGMq8 jkcuOkbUE8qjkJqsrsGvLpVR9O0g06NmK5bakNEIvhMw1urcypmQ+DNEIT/RAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU2eErE8ojRbPSIeS7BaLG3zCF2kYwHwYDVR0j BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0 QmRnZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzBlMTNkOC1i ZmUwLTQyMzUtYWZiNC1kNTNlZGZiYWNkZDIvMC81RUNCNENBREJCQURENTAwRjQ5 Q0E2OTdENTY2QTI3NjFFMDE3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYsY8yLO3niqvQy1ixlC eQBF5POcuDsRkTdCpB5bLi4wCk3zryySI4fnlWU6LWtXnQyWl84UoZQWgoDATZ2R BYgguQpOncfUP5FGICDXCM/gTmXVol0Y2TEpTHWEK6pn3r6SlKZJRlfPTRfb+l00 K3MGgrhpBpYItHwa3p749i4gp7MsGtP7sABr/LGLh33/t015E+/rxw1fJz2hssv7 8AwU2IsMVeYemMvml7DgimgNEnjjofL+upVf9JSsqQXduxljw4kPbSr6/7Mr8cYi QiKr1uodSiSbVmfPjfTg8W1htTNJSN1MycvqRQfqtT3gH82jj3l5BgAaN/PwNdZc GQ== -----END CERTIFICATE-----Generated at Sat Jun 6 18:04:23 2026 by rpki-client