$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft File: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft (raw, json) Hash identifier: +TmMJ+OplQWmRBKDG12RoCsjaEeiD7pWqPrnRNKdDuE= Subject key identifier: 23:09:7E:22:37:C6:D9:2E:0C:58:D9:B7:D5:E7:48:44:BC:A2:99:A3 Authority key identifier: 5E:B2:E5:DA:D0:C6:99:6D:0A:80:A7:B9:0F:3A:2A:A6:0F:B1:A7:AC Certificate issuer: /CN=5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC Certificate serial: 36699270813FF11D8040B3441C8CE3A424494193 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft Manifest number: 01D2 Signing time: Thu 25 Jun 2026 03:31:40 +0000 Manifest this update: Thu 25 Jun 2026 03:26:40 +0000 Manifest next update: Fri 26 Jun 2026 04:42:40 +0000 Files and hashes: 1: 326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa (hash: hR947RLO80MjAy1fUiecS1oEpdE+fjwemP68Afa7Bvc=) 2: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl (hash: JxkzVDlNIShph/IegLyoFoVqSpfyKOkl5HWyS9O37GI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Jun 2026 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:69:92:70:81:3f:f1:1d:80:40:b3:44:1c:8c:e3:a4:24:49:41:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC Validity Not Before: Jun 25 03:26:40 2026 GMT Not After : Jun 26 04:42:40 2026 GMT Subject: CN=23097E2237C6D92E0C58D9B7D5E74844BCA299A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ec:72:04:59:fa:fd:cf:e0:92:1a:ac:a3:73: 86:5c:c4:a1:0b:5b:30:be:24:d2:43:3c:5c:4c:c2: ec:e5:55:a6:05:48:bb:c1:84:70:ed:50:b8:95:be: bf:1b:ef:27:ee:37:d2:25:40:20:6a:24:71:e7:f8: 75:f5:39:f3:4a:b3:2a:05:6c:35:ba:af:15:24:e7: 96:f5:15:74:db:e1:c8:02:eb:e3:8c:32:9f:cc:6f: dd:fe:49:a1:89:99:9f:b3:73:3f:0f:b7:a0:ea:2e: cc:83:c8:66:6c:9c:7d:50:23:25:9f:5d:ea:6f:03: 9d:6c:9c:10:13:a1:0b:1a:a2:ec:60:c3:39:17:44: b4:2c:76:a0:ee:96:9c:bd:f8:05:1a:17:a6:4a:73: 3a:b4:96:49:90:a7:13:65:e7:7c:ed:7d:bd:94:53: 06:2c:a6:58:3e:3e:db:4a:fb:82:3d:2f:da:20:83: 22:f7:39:8f:ec:7f:e3:e3:b8:71:58:cb:65:8c:36: a8:0e:2d:54:90:73:21:3d:1c:86:4b:43:ce:30:45: e4:f0:3c:cb:b7:61:94:1a:a5:0f:d7:92:43:20:51: 76:d3:57:4f:da:fb:66:c3:52:fd:7d:b6:a1:3b:4b: 23:24:b8:a0:bf:3e:db:6d:df:e7:44:4c:bf:30:eb: fc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:09:7E:22:37:C6:D9:2E:0C:58:D9:B7:D5:E7:48:44:BC:A2:99:A3 X509v3 Authority Key Identifier: keyid:5E:B2:E5:DA:D0:C6:99:6D:0A:80:A7:B9:0F:3A:2A:A6:0F:B1:A7:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c5:f6:36:66:b3:81:34:de:b3:1d:45:a4:f7:61:45:e5:99: 17:a4:d7:97:48:e3:16:ce:eb:48:48:d6:5c:25:17:cd:83:d5: 04:9f:34:e2:06:42:60:1c:c6:64:cd:d5:82:bc:d4:6b:15:77: c9:8c:7b:98:0f:d4:96:4c:8a:ed:5f:89:5e:b1:28:4b:f6:78: 70:bd:07:09:81:d7:04:c6:ad:4e:45:4e:6f:e4:74:1f:f4:c2: 58:96:d1:c7:b5:bc:68:60:df:1e:81:a5:ca:9d:09:e3:7c:b0: f7:94:37:39:d8:8e:bf:de:30:e5:c0:e2:7f:2b:27:02:28:3f: cc:62:6d:78:ec:1b:0f:63:75:49:59:31:30:fc:2a:07:6d:eb: 41:39:12:60:f6:73:0b:be:42:92:f8:92:bb:5d:e2:39:c4:ad: fb:85:22:d2:f1:12:4a:82:b5:17:47:a3:bd:b4:3c:96:7e:88: 28:99:21:65:ca:f7:85:47:c8:91:a1:29:49:e6:f6:52:60:b1: d7:48:4b:71:ff:fc:21:a6:4e:4b:09:ee:be:25:38:ce:8d:e4: 36:64:d8:e2:92:44:59:65:fc:fb:1a:2c:08:e6:dd:ba:3c:f4: d5:03:01:6a:62:b2:43:36:e5:10:a0:ec:16:e9:60:bd:d8:13: a1:76:8f:69 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUNmmScIE/8R2AQLNEHIzjpCRJQZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVCMkU1REFEMEM2OTk2RDBBODBBN0I5MEYzQTJBQTYw RkIxQTdBQzAeFw0yNjA2MjUwMzI2NDBaFw0yNjA2MjYwNDQyNDBaMDMxMTAvBgNV BAMTKDIzMDk3RTIyMzdDNkQ5MkUwQzU4RDlCN0Q1RTc0ODQ0QkNBMjk5QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt7HIEWfr9z+CSGqyjc4ZcxKEL WzC+JNJDPFxMwuzlVaYFSLvBhHDtULiVvr8b7yfuN9IlQCBqJHHn+HX1OfNKsyoF bDW6rxUk55b1FXTb4cgC6+OMMp/Mb93+SaGJmZ+zcz8Pt6DqLsyDyGZsnH1QIyWf XepvA51snBAToQsaouxgwzkXRLQsdqDulpy9+AUaF6ZKczq0lkmQpxNl53ztfb2U UwYsplg+PttK+4I9L9oggyL3OY/sf+PjuHFYy2WMNqgOLVSQcyE9HIZLQ84wReTw PMu3YZQapQ/XkkMgUXbTV0/a+2bDUv19tqE7SyMkuKC/Pttt3+dETL8w6/yzAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUIwl+IjfG2S4MWNm31edIRLyimaMwHwYDVR0j BBgwFoAUXrLl2tDGmW0KgKe5Dzoqpg+xp6wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVl YjdkLzQvNUVCMkU1REFEMEM2OTk2RDBBODBBN0I5MEYzQTJBQTYwRkIxQTdBQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC81RUIyRTVEQUQwQzY5OTZEMEE4MEE3Qjkw RjNBMkFBNjBGQjFBN0FDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M5OTI2NWVmLTIyYTktNDEwMC1hMjNkLTUxYTlkOWZlZWI3ZC80LzVFQjJFNURB RDBDNjk5NkQwQTgwQTdCOTBGM0EyQUE2MEZCMUE3QUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBOxfY2 ZrOBNN6zHUWk92FF5ZkXpNeXSOMWzutISNZcJRfNg9UEnzTiBkJgHMZkzdWCvNRr FXfJjHuYD9SWTIrtX4lesShL9nhwvQcJgdcExq1ORU5v5HQf9MJYltHHtbxoYN8e gaXKnQnjfLD3lDc52I6/3jDlwOJ/KycCKD/MYm147BsPY3VJWTEw/CoHbetBORJg 9nMLvkKS+JK7XeI5xK37hSLS8RJKgrUXR6O9tDyWfogomSFlyveFR8iRoSlJ5vZS YLHXSEtx//whpk5LCe6+JTjOjeQ2ZNjikkRZZfz7GiwI5t26PPTVAwFqYrJDNuUQ oOwW6WC92BOhdo9p -----END CERTIFICATE-----Generated at Thu Jun 25 09:16:48 2026 by rpki-client