$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft File: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft (raw, json) Hash identifier: 8W/GAQY7R5Wf+lG9OFFiGTl2E6dvnkzcSN3uDP/8oFo= Subject key identifier: 6C:FC:8A:8A:F8:09:89:54:C4:16:96:29:66:F3:80:64:42:B1:42:0D Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE Certificate issuer: /CN=5da3215abfa4621d57709f838a92801f2e90ddfe Certificate serial: 248F8226D33347EA59CECAA568D61903BCD0AA74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft Manifest number: 0669 Signing time: Sun 28 Jun 2026 15:17:05 +0000 Manifest this update: Sun 28 Jun 2026 15:12:05 +0000 Manifest next update: Mon 29 Jun 2026 18:37:05 +0000 Files and hashes: 1: 34352e38312e35382e302f32342d3234203d3e20323039323432.roa (hash: UKvcqUxUrgd2F0qduNt/9nJuPUaDtCItgdXC0fI9BhQ=) 2: 34352e38312e35362e302f32332d3234203d3e20383334.roa (hash: Owft5MlrXPzDCqAtIj6Xho5F1QHToynJvYlpIsxaEgQ=) 3: 326130393a643634303a3a2f32392d3239203d3e20313938333435.roa (hash: 2ZJoizA2XrGcopsLwhs8oaMaqFtkP0G9iClmvxEJgnM=) 4: 34352e38312e35392e302f32342d3234203d3e20323131343339.roa (hash: PzQrEpsLL9icV7+wAMJ22TsUek+9+7dTOPFgPD6vtOM=) 5: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl (hash: AdRjgTf7I3Dj5m2+1A5T9ZmTgZZN/jDqGGIUxoN+J48=) 6: 34352e38312e35392e302f32342d3234203d3e20323132333834.roa (hash: Z55LDvJNhjuOlIMhPU51UoeT0VK3qlu4pE/EHJdIaDE=) 7: 34352e38312e35382e302f32342d3234203d3e203133333335.roa (hash: q1odFkTeiB/pBEbWg5JpQkAxpmrH9S0QmR2/CtllItc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Jun 2026 18:37:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:8f:82:26:d3:33:47:ea:59:ce:ca:a5:68:d6:19:03:bc:d0:aa:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe Validity Not Before: Jun 28 15:12:05 2026 GMT Not After : Jun 29 18:37:05 2026 GMT Subject: CN=6CFC8A8AF8098954C416962966F3806442B1420D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:07:89:d3:84:c6:78:74:e2:60:fd:40:9e:40: 79:9c:53:80:94:17:4c:10:73:d0:49:aa:1e:a3:92: aa:80:69:3b:5f:af:a5:14:b6:e5:26:bb:7b:b3:40: 17:27:cf:55:3d:8b:fa:87:f3:9b:57:e5:b1:3a:14: df:79:6e:7b:1a:fa:76:05:e5:cc:e6:bf:cf:cb:22: bd:82:4a:0e:75:e8:79:9f:cd:0c:93:83:bb:e6:0d: 5b:1f:5e:5d:8d:f0:1a:18:a0:87:e8:1c:30:17:3e: fe:05:19:da:a3:56:25:18:cd:42:a4:b0:56:b5:b9: 71:bf:09:36:9f:36:67:f0:20:49:62:5f:40:cd:76: 16:86:c7:ff:83:3d:59:8d:cb:34:7e:44:6b:78:ef: 51:c1:2a:d0:9f:58:ff:be:2a:e9:3c:d0:76:20:9a: 22:a3:8c:6c:6b:1c:79:10:70:e3:66:9b:30:5f:31: 89:e0:96:a8:0a:38:9e:e1:16:e7:a5:a7:e0:06:7e: 64:00:60:a0:02:49:46:a3:2c:69:13:87:58:53:a2: 61:23:4c:13:17:13:00:c0:70:e7:16:d3:6d:3a:36: 46:7d:10:31:2c:cf:73:7e:66:59:4b:eb:a6:ef:6a: 58:d7:f2:09:32:b9:ab:d8:a5:cf:a1:18:29:26:4e: 29:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:FC:8A:8A:F8:09:89:54:C4:16:96:29:66:F3:80:64:42:B1:42:0D X509v3 Authority Key Identifier: keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:77:4d:d6:6a:ae:e7:d7:43:fb:eb:b0:68:a1:0c:87:7a:8f: 4f:27:67:52:99:a7:bd:9a:69:0a:a2:a1:d9:b1:ec:d2:78:a5: 1d:76:28:4e:55:ca:7e:0b:3e:90:75:2b:f4:b5:f0:56:54:6f: c3:c3:ae:2b:3a:7f:1f:b2:96:1c:79:64:20:fb:02:d8:28:a7: d3:85:4c:69:08:18:67:03:50:5e:2e:45:bf:48:3d:8d:d7:df: d6:20:9f:92:e6:e0:8e:42:f3:05:5e:7e:41:b0:94:98:8d:fa: 56:f6:ee:94:51:32:7d:a3:95:76:02:71:52:45:b1:87:2b:d2: 6f:12:b8:0e:11:3a:77:59:67:fa:9a:a5:ab:d5:6a:f1:46:f5: da:8b:d6:81:49:df:ca:7a:dd:0c:67:65:07:33:1d:00:ac:34: 39:55:9c:20:99:06:50:04:df:4b:79:20:a6:15:9a:91:5b:8f: 22:57:58:f5:22:d0:c5:de:e0:68:40:2c:d1:1c:03:a1:cc:8c: 36:3a:1a:92:ef:c4:da:fe:78:4a:c7:03:6c:86:da:cb:3e:f0: 82:42:74:ac:84:28:10:52:b2:64:c1:02:0b:f3:90:dc:a6:8c: df:88:c0:83:98:69:ac:14:5c:8c:29:ec:39:2b:ec:03:f7:b8: d4:27:3e:29 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJI+CJtMzR+pZzsqlaNYZA7zQqnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRhMzIxNWFiZmE0NjIxZDU3NzA5ZjgzOGE5MjgwMWYy ZTkwZGRmZTAeFw0yNjA2MjgxNTEyMDVaFw0yNjA2MjkxODM3MDVaMDMxMTAvBgNV BAMTKDZDRkM4QThBRjgwOTg5NTRDNDE2OTYyOTY2RjM4MDY0NDJCMTQyMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZB4nThMZ4dOJg/UCeQHmcU4CU F0wQc9BJqh6jkqqAaTtfr6UUtuUmu3uzQBcnz1U9i/qH85tX5bE6FN95bnsa+nYF 5czmv8/LIr2CSg516HmfzQyTg7vmDVsfXl2N8BoYoIfoHDAXPv4FGdqjViUYzUKk sFa1uXG/CTafNmfwIEliX0DNdhaGx/+DPVmNyzR+RGt471HBKtCfWP++Kuk80HYg miKjjGxrHHkQcONmmzBfMYnglqgKOJ7hFuelp+AGfmQAYKACSUajLGkTh1hTomEj TBMXEwDAcOcW0206NkZ9EDEsz3N+ZllL66bvaljX8gkyuavYpc+hGCkmTinZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUbPyKivgJiVTEFpYpZvOAZEKxQg0wHwYDVR0j BBgwFoAUXaMhWr+kYh1XcJ+DipKAHy6Q3f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYyNDU2N2ItN2E3NC00YzFmLWFhODUtZGQyNGFmNzNj Y2JiLzAvNURBMzIxNUFCRkE0NjIxRDU3NzA5RjgzOEE5MjgwMUYyRTkwRERGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hhTWhXci1rWWgxWGNKLURpcEtBSHk2 UTNmNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjI0NTY3Yi03 YTc0LTRjMWYtYWE4NS1kZDI0YWY3M2NjYmIvMC81REEzMjE1QUJGQTQ2MjFENTc3 MDlGODM4QTkyODAxRjJFOTBEREZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHdN1mqu59dD++uwaKEM h3qPTydnUpmnvZppCqKh2bHs0nilHXYoTlXKfgs+kHUr9LXwVlRvw8OuKzp/H7KW HHlkIPsC2Cin04VMaQgYZwNQXi5Fv0g9jdff1iCfkubgjkLzBV5+QbCUmI36Vvbu lFEyfaOVdgJxUkWxhyvSbxK4DhE6d1ln+pqlq9Vq8Ub12ovWgUnfynrdDGdlBzMd AKw0OVWcIJkGUATfS3kgphWakVuPIldY9SLQxd7gaEAs0RwDocyMNjoaku/E2v54 SscDbIbayz7wgkJ0rIQoEFKyZMECC/OQ3KaM34jAg5hprBRcjCnsOSvsA/e41Cc+ KQ== -----END CERTIFICATE-----Generated at Mon Jun 29 11:09:48 2026 by rpki-client