$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft File: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft (raw, json) Hash identifier: VRM34+o98ZvXPJdTKr62ecCvt9gVhUb05mkBJjBLZcY= Subject key identifier: 00:E8:F4:18:5F:9E:4A:45:06:34:93:BB:05:C3:4E:D1:93:6D:F4:27 Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE Certificate issuer: /CN=5da3215abfa4621d57709f838a92801f2e90ddfe Certificate serial: 4813B99B1E434F152C6295C33F022624C75CDB8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft Manifest number: 06A5 Signing time: Thu 13 Aug 2026 02:33:02 +0000 Manifest this update: Thu 13 Aug 2026 02:28:02 +0000 Manifest next update: Fri 14 Aug 2026 05:36:02 +0000 Files and hashes: 1: 34352e38312e35382e302f32342d3234203d3e203133333335.roa (hash: q1odFkTeiB/pBEbWg5JpQkAxpmrH9S0QmR2/CtllItc=) 2: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl (hash: OGJXAaZ9UgXVmusHQ66FYNMJBWFE1mnRUdkdoyMmcWo=) 3: 34352e38312e35362e302f32332d3234203d3e20383334.roa (hash: Owft5MlrXPzDCqAtIj6Xho5F1QHToynJvYlpIsxaEgQ=) 4: 34352e38312e35382e302f32342d3234203d3e20323039323432.roa (hash: UKvcqUxUrgd2F0qduNt/9nJuPUaDtCItgdXC0fI9BhQ=) 5: 34352e38312e35392e302f32342d3234203d3e20323131343339.roa (hash: PzQrEpsLL9icV7+wAMJ22TsUek+9+7dTOPFgPD6vtOM=) 6: 326130393a643634303a3a2f32392d3239203d3e20313938333435.roa (hash: 2ZJoizA2XrGcopsLwhs8oaMaqFtkP0G9iClmvxEJgnM=) 7: 34352e38312e35392e302f32342d3234203d3e20323132333834.roa (hash: Z55LDvJNhjuOlIMhPU51UoeT0VK3qlu4pE/EHJdIaDE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 14 Aug 2026 05:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:13:b9:9b:1e:43:4f:15:2c:62:95:c3:3f:02:26:24:c7:5c:db:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe Validity Not Before: Aug 13 02:28:02 2026 GMT Not After : Aug 14 05:36:02 2026 GMT Subject: CN=00E8F4185F9E4A45063493BB05C34ED1936DF427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:64:52:da:e5:5d:f4:9d:ff:97:7c:bc:28:97: 5e:3f:88:64:4b:a1:56:29:c2:07:bb:4f:d7:71:3c: 50:40:b2:65:f7:26:ef:32:cd:71:57:c5:ae:ce:6d: 5d:c6:cf:5d:44:2e:d8:e4:c0:fa:27:bf:e8:22:9e: c6:71:c4:36:50:77:53:00:c1:65:67:88:7d:b0:c6: 42:3f:4c:4a:a8:b5:9e:20:3e:4f:86:fd:04:89:65: 68:1d:2b:87:33:d5:15:36:66:04:34:7e:23:bd:3d: 87:e0:07:ee:7c:4f:f2:f9:68:a3:bc:2e:f2:5a:0d: 68:50:49:f3:15:e2:db:a1:ef:ff:13:3f:58:aa:4d: 52:00:3a:23:86:2d:f4:ea:03:13:39:84:f9:12:d3: a1:7a:1d:75:8b:e5:9d:b2:32:ef:25:74:bd:0b:94: ff:1d:6f:34:5a:5d:8e:3f:46:1d:f1:86:ab:fe:2a: ae:ca:92:09:76:6a:b5:5f:4b:0c:3e:d3:d0:d9:9c: 13:46:72:42:4c:85:ac:b8:49:3e:26:67:2c:c9:39: b2:55:3e:32:7d:19:4e:79:e5:e3:36:ea:4c:12:19: 47:d1:20:ee:af:45:07:5e:b5:4c:43:b4:3d:c9:7b: d7:ff:f4:95:a3:e3:64:0e:6e:29:70:71:db:34:a8: 5a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E8:F4:18:5F:9E:4A:45:06:34:93:BB:05:C3:4E:D1:93:6D:F4:27 X509v3 Authority Key Identifier: keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:8e:cc:db:4a:cf:de:66:28:1f:7e:d4:40:3b:31:99:a7:33: 2e:7e:db:d6:40:88:07:07:28:fd:bc:58:94:7c:30:da:11:f8: c8:f6:ea:3a:87:95:eb:90:34:72:07:01:70:3a:97:9d:a1:7d: b7:3c:f7:fd:4a:ac:45:20:7a:de:1a:b4:12:36:5e:44:83:d7: ee:5f:8c:99:22:5b:e7:cd:12:67:92:00:96:8e:53:8c:e5:19: 13:55:ab:72:94:c1:d4:c7:2f:b9:a7:03:ab:16:6c:01:80:57: 16:16:69:29:8a:71:00:d8:d2:57:90:2c:d3:45:29:a5:1f:22: 40:31:ab:3c:cb:63:e0:4b:13:ba:43:74:9d:20:e8:71:0a:86: ea:4f:f5:4a:3a:ae:0f:28:a5:a6:6b:23:ad:4c:e4:d6:08:14: d4:74:5c:3b:40:c9:98:31:bd:7b:65:57:43:50:80:21:5b:a8: c5:52:15:f6:55:ab:99:50:7c:85:a3:7f:57:30:a8:21:d4:61: ce:ac:24:22:c2:37:8a:bd:c0:13:29:21:92:3e:68:a2:79:ea: c3:c8:84:e1:37:07:2c:8b:4f:e1:87:09:4f:d7:15:35:12:4b: 24:60:d2:81:10:1b:16:38:20:8a:e6:77:0e:e4:09:99:99:e7: 13:31:e1:18 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUSBO5mx5DTxUsYpXDPwImJMdc24swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRhMzIxNWFiZmE0NjIxZDU3NzA5ZjgzOGE5MjgwMWYy ZTkwZGRmZTAeFw0yNjA4MTMwMjI4MDJaFw0yNjA4MTQwNTM2MDJaMDMxMTAvBgNV BAMTKDAwRThGNDE4NUY5RTRBNDUwNjM0OTNCQjA1QzM0RUQxOTM2REY0MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAZFLa5V30nf+XfLwol14/iGRL oVYpwge7T9dxPFBAsmX3Ju8yzXFXxa7ObV3Gz11ELtjkwPonv+ginsZxxDZQd1MA wWVniH2wxkI/TEqotZ4gPk+G/QSJZWgdK4cz1RU2ZgQ0fiO9PYfgB+58T/L5aKO8 LvJaDWhQSfMV4tuh7/8TP1iqTVIAOiOGLfTqAxM5hPkS06F6HXWL5Z2yMu8ldL0L lP8dbzRaXY4/Rh3xhqv+Kq7Kkgl2arVfSww+09DZnBNGckJMhay4ST4mZyzJObJV PjJ9GU555eM26kwSGUfRIO6vRQdetUxDtD3Je9f/9JWj42QObilwcds0qFrrAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUAOj0GF+eSkUGNJO7BcNO0ZNt9CcwHwYDVR0j BBgwFoAUXaMhWr+kYh1XcJ+DipKAHy6Q3f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYyNDU2N2ItN2E3NC00YzFmLWFhODUtZGQyNGFmNzNj Y2JiLzAvNURBMzIxNUFCRkE0NjIxRDU3NzA5RjgzOEE5MjgwMUYyRTkwRERGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hhTWhXci1rWWgxWGNKLURpcEtBSHk2 UTNmNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjI0NTY3Yi03 YTc0LTRjMWYtYWE4NS1kZDI0YWY3M2NjYmIvMC81REEzMjE1QUJGQTQ2MjFENTc3 MDlGODM4QTkyODAxRjJFOTBEREZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl47M20rP3mYoH37UQDsx maczLn7b1kCIBwco/bxYlHww2hH4yPbqOoeV65A0cgcBcDqXnaF9tzz3/UqsRSB6 3hq0EjZeRIPX7l+MmSJb580SZ5IAlo5TjOUZE1WrcpTB1McvuacDqxZsAYBXFhZp KYpxANjSV5As00UppR8iQDGrPMtj4EsTukN0nSDocQqG6k/1SjquDyilpmsjrUzk 1ggU1HRcO0DJmDG9e2VXQ1CAIVuoxVIV9lWrmVB8haN/VzCoIdRhzqwkIsI3ir3A Eykhkj5oonnqw8iE4TcHLItP4YcJT9cVNRJLJGDSgRAbFjggiuZ3DuQJmZnnEzHh GA== -----END CERTIFICATE-----Generated at Thu Aug 13 13:23:19 2026 by rpki-client