$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft File: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft (raw, json) Hash identifier: 0Gv2vT32kOSz3xKMn0LiQfHUEvK7c/mGQ3QWX8pSjT0= Subject key identifier: 56:6D:6A:0C:9B:C4:42:7E:0B:1A:D7:98:50:D7:0A:34:D5:8A:37:95 Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE Certificate issuer: /CN=5da3215abfa4621d57709f838a92801f2e90ddfe Certificate serial: 66D6859226D77EBE2F6AA86428082394A6FCB2EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft Manifest number: 062C Signing time: Thu 14 May 2026 16:21:33 +0000 Manifest this update: Thu 14 May 2026 16:16:33 +0000 Manifest next update: Fri 15 May 2026 18:50:33 +0000 Files and hashes: 1: 34352e38312e35392e302f32342d3234203d3e20323131343339.roa (hash: PzQrEpsLL9icV7+wAMJ22TsUek+9+7dTOPFgPD6vtOM=) 2: 34352e38312e35392e302f32342d3234203d3e20323132333834.roa (hash: Z55LDvJNhjuOlIMhPU51UoeT0VK3qlu4pE/EHJdIaDE=) 3: 34352e38312e35362e302f32342d3234203d3e20383334.roa (hash: RvBwqpsMFaC4kQ3VLDNfZDDqspDe1yGNu+5Eo3ESLBg=) 4: 34352e38312e35382e302f32342d3234203d3e20323039323432.roa (hash: UKvcqUxUrgd2F0qduNt/9nJuPUaDtCItgdXC0fI9BhQ=) 5: 326130393a643634303a3a2f32392d3239203d3e20313938333435.roa (hash: 2ZJoizA2XrGcopsLwhs8oaMaqFtkP0G9iClmvxEJgnM=) 6: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl (hash: yPbTpV834v97gC/lw5zd7T+gpB+Asu0ivuYISvLp7AE=) 7: 34352e38312e35372e302f32342d3234203d3e203631333137.roa (hash: wLY+uAAZaapza9rnm+rvcKy/RGqb5OINBZoQF5pW50I=) 8: 34352e38312e35382e302f32342d3234203d3e203133333335.roa (hash: q1odFkTeiB/pBEbWg5JpQkAxpmrH9S0QmR2/CtllItc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 15 May 2026 18:50:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:d6:85:92:26:d7:7e:be:2f:6a:a8:64:28:08:23:94:a6:fc:b2:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe Validity Not Before: May 14 16:16:33 2026 GMT Not After : May 15 18:50:33 2026 GMT Subject: CN=566D6A0C9BC4427E0B1AD79850D70A34D58A3795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c3:d0:a4:fb:1d:d5:8c:90:c4:83:64:f5:ae: 8a:9f:24:16:26:ef:d9:2a:42:8f:3c:1b:57:37:63: af:9f:ef:50:13:96:0c:24:4e:4b:f3:c6:1c:f4:cd: 21:39:a0:ab:3d:4c:86:49:8b:31:8b:49:59:72:5e: c4:47:37:90:3a:ac:5a:eb:d0:a7:64:cd:d5:3e:16: 09:34:38:58:17:58:6a:a6:9b:bc:e5:59:4a:2a:44: a8:cf:52:5d:46:0a:a9:40:8b:4b:1c:59:3c:b7:b9: d0:cb:3e:05:b6:b1:ab:6c:59:69:e2:0c:52:eb:db: 0f:66:ab:fa:90:a6:22:ff:58:f4:68:ef:d8:77:bb: 1e:44:d2:7c:63:cf:74:cd:a4:f2:22:e6:ee:50:39: 92:87:50:1d:58:20:50:2d:fd:a5:97:a2:85:fc:e0: df:d9:a0:59:2d:2e:a6:5d:df:8d:43:b6:d8:5d:74: b4:40:b3:75:b9:9d:32:48:e1:d1:a0:9b:1d:5b:60: ca:a7:c3:31:40:d3:a8:4f:66:a5:32:d8:e3:b7:3b: 27:39:b3:63:a8:84:b3:31:19:71:9c:f1:e2:b1:5f: 28:9a:ca:c7:74:b0:6d:c0:4e:05:1d:71:41:b4:31: 6e:6a:39:cf:16:c7:ff:b6:d6:27:e7:21:b7:e0:7a: 7e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:6D:6A:0C:9B:C4:42:7E:0B:1A:D7:98:50:D7:0A:34:D5:8A:37:95 X509v3 Authority Key Identifier: keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:f4:67:02:fc:56:36:06:88:d3:59:28:5e:28:e2:e8:e3:89: e6:c4:a5:c9:fe:e7:3f:6f:d3:30:ee:fa:32:5b:08:8f:2a:5a: 66:09:a7:97:45:c1:df:e7:36:78:94:be:14:91:71:1c:42:7e: d6:1a:38:96:78:44:27:5e:66:34:8f:28:d3:ba:d9:92:c7:ed: 3e:9e:5d:1d:d2:71:20:4b:10:64:46:a0:e4:e9:88:33:52:8b: 6c:7d:da:93:d5:ea:64:91:cb:78:27:aa:5c:24:ae:df:c4:ce: 0a:8c:a7:e4:56:d4:83:d8:97:07:f8:79:7c:4b:b9:ff:2b:71: 14:17:6e:c3:15:52:7a:eb:27:fe:a1:bb:a8:90:11:5b:3e:59: 2e:49:b8:5f:63:e3:c4:0a:79:39:95:b3:02:8a:cb:30:61:a3: 13:f6:7e:fd:4e:fd:84:37:9f:18:e0:26:bb:1a:6d:85:63:63: db:d6:e1:80:1f:a6:2d:de:22:27:4b:5b:20:55:e1:fe:03:52: 63:fd:ab:b8:ec:aa:3f:20:ab:f5:05:a2:a2:fe:7d:a0:f6:48: e1:b9:98:65:f9:1f:93:76:a6:c3:f1:89:4a:9a:bd:dc:a0:b6: b6:dd:fe:69:85:4b:a5:1a:16:83:da:1d:52:d9:94:d3:2a:df: 3a:94:48:03 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZtaFkibXfr4vaqhkKAgjlKb8su4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRhMzIxNWFiZmE0NjIxZDU3NzA5ZjgzOGE5MjgwMWYy ZTkwZGRmZTAeFw0yNjA1MTQxNjE2MzNaFw0yNjA1MTUxODUwMzNaMDMxMTAvBgNV BAMTKDU2NkQ2QTBDOUJDNDQyN0UwQjFBRDc5ODUwRDcwQTM0RDU4QTM3OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKw9Ck+x3VjJDEg2T1roqfJBYm 79kqQo88G1c3Y6+f71ATlgwkTkvzxhz0zSE5oKs9TIZJizGLSVlyXsRHN5A6rFrr 0KdkzdU+Fgk0OFgXWGqmm7zlWUoqRKjPUl1GCqlAi0scWTy3udDLPgW2satsWWni DFLr2w9mq/qQpiL/WPRo79h3ux5E0nxjz3TNpPIi5u5QOZKHUB1YIFAt/aWXooX8 4N/ZoFktLqZd341DtthddLRAs3W5nTJI4dGgmx1bYMqnwzFA06hPZqUy2OO3Oyc5 s2OohLMxGXGc8eKxXyiaysd0sG3ATgUdcUG0MW5qOc8Wx/+21ifnIbfgen4TAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUVm1qDJvEQn4LGteYUNcKNNWKN5UwHwYDVR0j BBgwFoAUXaMhWr+kYh1XcJ+DipKAHy6Q3f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYyNDU2N2ItN2E3NC00YzFmLWFhODUtZGQyNGFmNzNj Y2JiLzAvNURBMzIxNUFCRkE0NjIxRDU3NzA5RjgzOEE5MjgwMUYyRTkwRERGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hhTWhXci1rWWgxWGNKLURpcEtBSHk2 UTNmNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjI0NTY3Yi03 YTc0LTRjMWYtYWE4NS1kZDI0YWY3M2NjYmIvMC81REEzMjE1QUJGQTQ2MjFENTc3 MDlGODM4QTkyODAxRjJFOTBEREZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPRnAvxWNgaI01koXiji 6OOJ5sSlyf7nP2/TMO76MlsIjypaZgmnl0XB3+c2eJS+FJFxHEJ+1ho4lnhEJ15m NI8o07rZksftPp5dHdJxIEsQZEag5OmIM1KLbH3ak9XqZJHLeCeqXCSu38TOCoyn 5FbUg9iXB/h5fEu5/ytxFBduwxVSeusn/qG7qJARWz5ZLkm4X2PjxAp5OZWzAorL MGGjE/Z+/U79hDefGOAmuxpthWNj29bhgB+mLd4iJ0tbIFXh/gNSY/2ruOyqPyCr 9QWiov59oPZI4bmYZfkfk3amw/GJSpq93KC2tt3+aYVLpRoWg9odUtmU0yrfOpRI Aw== -----END CERTIFICATE-----Generated at Fri May 15 09:51:27 2026 by rpki-client