$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft File: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft (raw, json) Hash identifier: LqmlLNPB7TsC7kK0V/sxpRwB655fJiBRyo2cw48rOe4= Subject key identifier: 67:04:0F:F5:2F:05:0E:F8:3B:49:C4:12:06:47:89:33:10:75:09:7E Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE Certificate issuer: /CN=5da3215abfa4621d57709f838a92801f2e90ddfe Certificate serial: 581A2A6EB0C7614B6FE143F83C911E2C18E5AACE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft Manifest number: 05ED Signing time: Sat 28 Mar 2026 22:25:38 +0000 Manifest this update: Sat 28 Mar 2026 22:20:38 +0000 Manifest next update: Sun 29 Mar 2026 22:58:38 +0000 Files and hashes: 1: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl (hash: BE/tQ+jtK1UQAHYGQqg8fip4z5DLYGAKelCpbS0Hxjk=) 2: 34352e38312e35382e302f32342d3234203d3e203133333335.roa (hash: q1odFkTeiB/pBEbWg5JpQkAxpmrH9S0QmR2/CtllItc=) 3: 34352e38312e35392e302f32342d3234203d3e20323131343339.roa (hash: PzQrEpsLL9icV7+wAMJ22TsUek+9+7dTOPFgPD6vtOM=) 4: 326130393a643634303a3a2f32392d3239203d3e20313938333435.roa (hash: 2ZJoizA2XrGcopsLwhs8oaMaqFtkP0G9iClmvxEJgnM=) 5: 34352e38312e35362e302f32342d3234203d3e20383334.roa (hash: RvBwqpsMFaC4kQ3VLDNfZDDqspDe1yGNu+5Eo3ESLBg=) 6: 34352e38312e35382e302f32342d3234203d3e20323039323432.roa (hash: UKvcqUxUrgd2F0qduNt/9nJuPUaDtCItgdXC0fI9BhQ=) 7: 34352e38312e35392e302f32342d3234203d3e20323132333834.roa (hash: Z55LDvJNhjuOlIMhPU51UoeT0VK3qlu4pE/EHJdIaDE=) 8: 34352e38312e35372e302f32342d3234203d3e203631333137.roa (hash: wLY+uAAZaapza9rnm+rvcKy/RGqb5OINBZoQF5pW50I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 22:58:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:1a:2a:6e:b0:c7:61:4b:6f:e1:43:f8:3c:91:1e:2c:18:e5:aa:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe Validity Not Before: Mar 28 22:20:38 2026 GMT Not After : Mar 29 22:58:38 2026 GMT Subject: CN=67040FF52F050EF83B49C412064789331075097E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cc:c5:f2:76:5a:0d:e5:d9:73:9f:54:7e:d0: fe:4b:66:d0:ca:9f:98:f3:8a:cd:5c:08:ac:42:9b: 1c:8e:f0:44:9f:74:36:20:bc:f9:21:d2:af:05:e8: 22:fd:a1:7f:3f:ba:34:83:1c:e4:61:36:a3:c6:1a: ef:26:54:de:38:b8:2f:84:36:25:87:da:31:62:12: 16:d2:97:9e:b4:7a:a2:56:b1:e5:4b:15:a5:33:de: bf:57:71:9a:a7:0b:a9:39:6f:0e:46:80:f9:c9:a4: 5f:38:12:5f:52:0f:5a:7a:80:a9:ae:a4:d6:99:7e: da:20:c2:62:c8:6e:49:e7:0d:13:0c:f1:1f:3d:20: 54:8e:25:1f:71:54:5b:0a:71:4c:f6:00:69:e3:5d: 80:b8:70:06:b4:a0:b4:6d:e9:b5:22:7e:9d:c5:fb: 57:6e:c2:54:ce:ba:d2:aa:ee:61:03:1b:b0:1f:b9: 73:22:37:94:6c:ae:42:00:6a:dd:a4:7b:14:d0:d6: 20:fc:8e:5a:ab:5b:7b:a7:8d:36:88:00:05:49:b2: 64:16:0b:c6:97:ab:3b:b8:f8:7f:be:f0:81:43:28: 0d:1a:8f:81:86:9b:e6:5e:f0:5a:a3:d8:d5:d4:43: d6:3b:60:2d:9e:9d:7a:ea:25:65:fc:ce:1a:ba:89: f7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:04:0F:F5:2F:05:0E:F8:3B:49:C4:12:06:47:89:33:10:75:09:7E X509v3 Authority Key Identifier: keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:06:e4:9c:27:37:48:ac:07:3f:d5:97:95:c3:1c:1e:a6:ed: 5a:21:1b:df:05:04:0d:2a:69:60:92:88:89:0e:2e:d3:64:06: ba:a5:6c:4b:5f:df:f3:19:98:f3:d1:08:24:b5:3d:bd:f8:2a: 3c:09:c5:eb:e1:b2:5c:d5:6f:42:4e:06:24:9e:01:83:86:5b: a3:1d:bb:d4:ff:6d:c0:75:e4:30:0a:28:11:45:54:f9:af:0d: 51:67:7d:e8:c9:b2:a7:cb:90:99:29:61:b4:79:26:e6:b0:b1: 16:9f:88:93:f5:66:74:c3:ce:3a:c2:e8:32:02:fc:95:b6:02: d4:29:42:34:a1:50:f5:f2:22:25:43:82:91:9a:2b:c1:d6:95: c5:b0:a7:f7:8d:70:7e:b8:cc:e2:9e:d7:a2:f8:46:92:c2:d1: 73:f1:25:01:05:cc:9d:d2:a0:33:16:d1:e8:21:e4:0c:b7:30: 41:26:4d:24:d1:09:8e:29:1a:28:b4:6b:71:9c:17:fa:eb:b6: 4b:af:f7:e3:9d:b3:54:a8:0b:fd:88:f3:0e:0c:99:29:c7:c8: e3:bc:80:13:e8:46:5c:1d:06:73:a3:99:40:e6:e7:ac:cb:a6: f1:5b:be:de:30:77:bf:71:2e:01:ef:c6:01:44:c9:5e:97:18: e8:73:49:46 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWBoqbrDHYUtv4UP4PJEeLBjlqs4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRhMzIxNWFiZmE0NjIxZDU3NzA5ZjgzOGE5MjgwMWYy ZTkwZGRmZTAeFw0yNjAzMjgyMjIwMzhaFw0yNjAzMjkyMjU4MzhaMDMxMTAvBgNV BAMTKDY3MDQwRkY1MkYwNTBFRjgzQjQ5QzQxMjA2NDc4OTMzMTA3NTA5N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDazMXydloN5dlzn1R+0P5LZtDK n5jzis1cCKxCmxyO8ESfdDYgvPkh0q8F6CL9oX8/ujSDHORhNqPGGu8mVN44uC+E NiWH2jFiEhbSl560eqJWseVLFaUz3r9XcZqnC6k5bw5GgPnJpF84El9SD1p6gKmu pNaZftogwmLIbknnDRMM8R89IFSOJR9xVFsKcUz2AGnjXYC4cAa0oLRt6bUifp3F +1duwlTOutKq7mEDG7AfuXMiN5RsrkIAat2kexTQ1iD8jlqrW3unjTaIAAVJsmQW C8aXqzu4+H++8IFDKA0aj4GGm+Ze8Fqj2NXUQ9Y7YC2enXrqJWX8zhq6iffLAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUZwQP9S8FDvg7ScQSBkeJMxB1CX4wHwYDVR0j BBgwFoAUXaMhWr+kYh1XcJ+DipKAHy6Q3f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYyNDU2N2ItN2E3NC00YzFmLWFhODUtZGQyNGFmNzNj Y2JiLzAvNURBMzIxNUFCRkE0NjIxRDU3NzA5RjgzOEE5MjgwMUYyRTkwRERGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hhTWhXci1rWWgxWGNKLURpcEtBSHk2 UTNmNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjI0NTY3Yi03 YTc0LTRjMWYtYWE4NS1kZDI0YWY3M2NjYmIvMC81REEzMjE1QUJGQTQ2MjFENTc3 MDlGODM4QTkyODAxRjJFOTBEREZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVwbknCc3SKwHP9WXlcMc HqbtWiEb3wUEDSppYJKIiQ4u02QGuqVsS1/f8xmY89EIJLU9vfgqPAnF6+GyXNVv Qk4GJJ4Bg4Zbox271P9twHXkMAooEUVU+a8NUWd96Mmyp8uQmSlhtHkm5rCxFp+I k/VmdMPOOsLoMgL8lbYC1ClCNKFQ9fIiJUOCkZorwdaVxbCn941wfrjM4p7XovhG ksLRc/ElAQXMndKgMxbR6CHkDLcwQSZNJNEJjikaKLRrcZwX+uu2S6/3452zVKgL /YjzDgyZKcfI47yAE+hGXB0Gc6OZQObnrMum8Vu+3jB3v3EuAe/GAUTJXpcY6HNJ Rg== -----END CERTIFICATE-----Generated at Sun Mar 29 12:35:13 2026 by rpki-client