$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft File: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft (raw, json) Hash identifier: KM5r03g9mi55scwVZtlyC6M+FceP1PKAY/yk++Gggo4= Subject key identifier: 24:67:B1:DB:99:C1:A9:3F:5A:99:88:B0:7F:D7:88:C1:9F:39:5F:A9 Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE Certificate issuer: /CN=5da3215abfa4621d57709f838a92801f2e90ddfe Certificate serial: 02737A88954B05AC0ABD34F990A2A284063EE208 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft Manifest number: 0702 Signing time: Mon 19 Oct 2026 03:11:33 +0000 Manifest this update: Mon 19 Oct 2026 03:06:33 +0000 Manifest next update: Tue 20 Oct 2026 05:06:33 +0000 Files and hashes: 1: 34352e38312e35382e302f32342d3234203d3e203133333335.roa (hash: q1odFkTeiB/pBEbWg5JpQkAxpmrH9S0QmR2/CtllItc=) 2: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl (hash: qu3Qwxacr2N1vYYenoDvZu6DqoWLNGBpN7SZp0JLu/A=) 3: 34352e38312e35362e302f32342d3234203d3e20313436383133.roa (hash: wGKyD0VlVLPsmHNfS0lf7D1m+l3sPyJ8Ebu71cyonAg=) 4: 34352e38312e35382e302f32342d3234203d3e20323039323432.roa (hash: UKvcqUxUrgd2F0qduNt/9nJuPUaDtCItgdXC0fI9BhQ=) 5: 34352e38312e35392e302f32342d3234203d3e20323132333834.roa (hash: Z55LDvJNhjuOlIMhPU51UoeT0VK3qlu4pE/EHJdIaDE=) 6: 326130393a643634303a3a2f32392d3239203d3e20313938333435.roa (hash: 2ZJoizA2XrGcopsLwhs8oaMaqFtkP0G9iClmvxEJgnM=) 7: 34352e38312e35372e302f32342d3234203d3e20313436383133.roa (hash: hHONwC8tHkVgEmziYCsSxG5xBVIdPuV2Hinm0EWw2ZY=) 8: 34352e38312e35392e302f32342d3234203d3e20323131343339.roa (hash: PzQrEpsLL9icV7+wAMJ22TsUek+9+7dTOPFgPD6vtOM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 05:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:73:7a:88:95:4b:05:ac:0a:bd:34:f9:90:a2:a2:84:06:3e:e2:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe Validity Not Before: Oct 19 03:06:33 2026 GMT Not After : Oct 20 05:06:33 2026 GMT Subject: CN=2467B1DB99C1A93F5A9988B07FD788C19F395FA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:26:08:04:10:ae:b8:6e:1a:3e:d3:52:cd:b4: a8:5f:32:f6:37:dc:c1:ff:14:05:9c:20:a5:11:5d: 1a:28:a9:65:41:f2:0c:41:f4:d5:09:76:d0:e0:63: 28:e6:12:95:48:d5:8e:51:f3:76:7b:f3:5c:46:0b: c9:21:2b:4d:2c:e5:e0:44:9a:7e:81:0b:2b:a2:48: ed:b9:a2:84:fd:a9:23:83:2a:62:5c:d3:ff:75:4c: 08:77:9d:28:96:aa:98:5d:da:78:b6:9a:93:e9:93: 78:1c:6c:73:a0:67:d3:15:6d:b5:0e:1d:c6:b3:95: 91:d8:b5:8b:1d:95:63:35:96:e0:e9:cf:1c:5a:da: 38:c5:3b:13:a2:c0:8d:3a:3c:e0:ae:26:a4:7d:84: 6b:5b:30:db:3c:a3:5e:1e:7d:a7:43:0e:f4:91:0c: 19:bc:5a:69:70:9a:d9:e3:c5:65:29:3d:ae:1d:05: 82:36:f7:c7:df:37:30:b8:80:0f:3d:cb:fa:72:dd: 8c:de:ec:71:cb:25:f6:3e:b1:ea:98:75:09:12:48: ee:9e:e0:65:af:dc:10:3a:2c:6e:3f:43:c7:b3:8a: eb:a8:dd:37:09:5b:ae:b4:bb:bb:b0:9e:53:14:40: 34:72:f4:f2:be:64:7a:c5:35:d8:dc:9f:dd:01:ff: 4d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:67:B1:DB:99:C1:A9:3F:5A:99:88:B0:7F:D7:88:C1:9F:39:5F:A9 X509v3 Authority Key Identifier: keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:d6:a3:f9:d1:9f:2c:3b:a5:77:64:4d:1a:76:fe:87:e2:b7: cb:38:3b:f5:b6:9e:64:e7:84:c6:9f:a7:b9:1a:07:da:3e:d9: 4f:30:18:50:bc:8b:84:5c:1f:c1:51:37:23:54:a2:8f:d1:07: 45:58:b0:bb:72:65:27:f1:1d:5a:c0:2e:f3:df:dd:56:2e:be: 2c:80:61:af:51:f2:a8:99:d9:4c:1b:f9:98:e8:13:42:5a:bf: 85:8e:7b:67:fc:dd:b1:f5:f8:0b:97:01:95:f3:50:f2:86:03: 40:8c:3d:5c:1a:3b:65:0b:c4:1d:a0:d6:6e:22:fd:70:db:a8: 9f:0a:79:43:4c:2f:2d:d2:d6:63:78:7a:39:95:b0:13:b8:9f: 49:46:e3:be:ef:d6:f8:67:f7:00:32:97:90:b6:31:0d:54:07: e9:81:bd:4c:49:53:a5:0a:db:b0:c3:02:9e:d0:2f:37:ed:d8: b8:8a:fa:c4:14:5c:27:e4:3c:96:f2:26:79:1e:0b:e4:9b:88: 43:17:bf:60:0e:8e:10:e3:5e:cb:ea:ce:89:87:c2:bb:9e:1d: 0e:43:0d:13:34:37:42:01:3a:19:20:5e:9e:3a:06:f6:89:ee: f2:95:a0:45:39:d5:49:d0:31:e0:71:a3:91:37:3b:bf:2f:79: bb:6b:7d:66 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUAnN6iJVLBawKvTT5kKKihAY+4ggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRhMzIxNWFiZmE0NjIxZDU3NzA5ZjgzOGE5MjgwMWYy ZTkwZGRmZTAeFw0yNjEwMTkwMzA2MzNaFw0yNjEwMjAwNTA2MzNaMDMxMTAvBgNV BAMTKDI0NjdCMURCOTlDMUE5M0Y1QTk5ODhCMDdGRDc4OEMxOUYzOTVGQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9JggEEK64bho+01LNtKhfMvY3 3MH/FAWcIKURXRooqWVB8gxB9NUJdtDgYyjmEpVI1Y5R83Z781xGC8khK00s5eBE mn6BCyuiSO25ooT9qSODKmJc0/91TAh3nSiWqphd2ni2mpPpk3gcbHOgZ9MVbbUO HcazlZHYtYsdlWM1luDpzxxa2jjFOxOiwI06POCuJqR9hGtbMNs8o14efadDDvSR DBm8WmlwmtnjxWUpPa4dBYI298ffNzC4gA89y/py3Yze7HHLJfY+seqYdQkSSO6e 4GWv3BA6LG4/Q8eziuuo3TcJW660u7uwnlMUQDRy9PK+ZHrFNdjcn90B/00bAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUJGex25nBqT9amYiwf9eIwZ85X6kwHwYDVR0j BBgwFoAUXaMhWr+kYh1XcJ+DipKAHy6Q3f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYyNDU2N2ItN2E3NC00YzFmLWFhODUtZGQyNGFmNzNj Y2JiLzAvNURBMzIxNUFCRkE0NjIxRDU3NzA5RjgzOEE5MjgwMUYyRTkwRERGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hhTWhXci1rWWgxWGNKLURpcEtBSHk2 UTNmNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjI0NTY3Yi03 YTc0LTRjMWYtYWE4NS1kZDI0YWY3M2NjYmIvMC81REEzMjE1QUJGQTQ2MjFENTc3 MDlGODM4QTkyODAxRjJFOTBEREZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqNaj+dGfLDuld2RNGnb+ h+K3yzg79baeZOeExp+nuRoH2j7ZTzAYULyLhFwfwVE3I1Sij9EHRViwu3JlJ/Ed WsAu89/dVi6+LIBhr1HyqJnZTBv5mOgTQlq/hY57Z/zdsfX4C5cBlfNQ8oYDQIw9 XBo7ZQvEHaDWbiL9cNuonwp5Q0wvLdLWY3h6OZWwE7ifSUbjvu/W+Gf3ADKXkLYx DVQH6YG9TElTpQrbsMMCntAvN+3YuIr6xBRcJ+Q8lvImeR4L5JuIQxe/YA6OEONe y+rOiYfCu54dDkMNEzQ3QgE6GSBenjoG9onu8pWgRTnVSdAx4HGjkTc7vy95u2t9 Zg== -----END CERTIFICATE-----Generated at Mon Oct 19 22:44:02 2026 by rpki-client