$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft File: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft (raw, json) Hash identifier: p2d37KNp447zca1aAU9gIL03UMoumrDq3BhELa9rF78= Subject key identifier: F7:58:7B:8B:2B:6D:EF:8D:2E:D0:12:C6:AD:4E:05:CE:F9:73:91:5F Authority key identifier: 5E:B2:E5:DA:D0:C6:99:6D:0A:80:A7:B9:0F:3A:2A:A6:0F:B1:A7:AC Certificate issuer: /CN=5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC Certificate serial: 680CBD33F0591F5E41B299E26870E0B15620B0DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft Manifest number: 0190 Signing time: Wed 06 May 2026 17:49:53 +0000 Manifest this update: Wed 06 May 2026 17:44:53 +0000 Manifest next update: Thu 07 May 2026 19:48:53 +0000 Files and hashes: 1: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl (hash: 9YGzdmChmvVO5mxWjBaqsCrNduac7qN7kFbSl3EXPn8=) 2: 326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa (hash: hR947RLO80MjAy1fUiecS1oEpdE+fjwemP68Afa7Bvc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 May 2026 19:28:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:0c:bd:33:f0:59:1f:5e:41:b2:99:e2:68:70:e0:b1:56:20:b0:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC Validity Not Before: May 6 17:44:53 2026 GMT Not After : May 7 19:48:53 2026 GMT Subject: CN=F7587B8B2B6DEF8D2ED012C6AD4E05CEF973915F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3c:d9:5c:08:85:b4:a2:c3:40:4c:72:51:a3: 4d:f4:ec:8a:ca:0b:c0:8b:d8:79:3c:3c:4b:78:3a: 90:f2:ea:f0:8a:7c:5a:4f:f1:e4:1c:e4:f5:13:53: 62:19:2b:16:76:16:c9:bb:fa:cd:44:13:f6:15:3e: cb:25:10:23:58:eb:12:f7:82:e9:07:69:f9:b5:b7: 9a:81:ca:51:65:e5:11:6b:fc:87:21:a9:2a:09:ee: 7d:c3:2e:9b:d2:91:84:3d:bc:7b:8c:a4:e0:ea:5a: 55:04:eb:e1:bf:88:c8:91:73:05:39:8b:53:dc:94: 3d:df:f1:c6:33:25:c2:65:39:40:dd:94:af:c6:13: 4a:af:4f:7b:e2:48:97:9c:2d:a1:f3:04:35:16:f1: 93:1b:71:8d:9d:65:94:51:ff:43:ff:54:e3:7e:c9: 21:c9:0e:cf:ca:25:fc:5d:30:ea:65:a6:f1:a3:c4: f7:4c:a7:c2:b0:65:0c:92:14:86:d1:c2:af:cd:7f: 94:c6:2c:3e:1a:fa:0d:82:0e:bd:5f:cf:dc:90:53: f0:cd:0c:0b:17:5c:f1:2a:48:74:e2:87:2f:5f:88: ce:f1:4f:b7:88:de:d5:07:1e:9d:6d:4a:14:4d:d9: d9:02:6c:65:96:62:76:56:bc:e7:c0:1c:4c:95:89: 2c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:58:7B:8B:2B:6D:EF:8D:2E:D0:12:C6:AD:4E:05:CE:F9:73:91:5F X509v3 Authority Key Identifier: keyid:5E:B2:E5:DA:D0:C6:99:6D:0A:80:A7:B9:0F:3A:2A:A6:0F:B1:A7:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:5e:6f:0d:26:f2:c3:a6:3d:51:d6:ca:81:01:79:ad:1f:bb: 4f:9d:6f:5b:f4:f3:0b:22:04:9e:fb:f9:d7:d6:b2:48:9f:06: cd:3d:42:94:05:32:ab:e5:59:52:93:7b:3b:7d:15:46:aa:25: ca:aa:cc:1d:98:83:39:8d:69:39:2c:80:5e:52:19:2b:86:8e: 71:5f:b3:b6:56:e9:02:3e:f0:9c:41:e3:0b:54:d3:a4:68:77: 20:0c:e6:b9:c7:b6:b1:b9:06:7c:98:38:5c:fa:00:e5:09:d1: a1:ba:7f:bc:e9:a7:d8:c0:2c:7a:7c:80:ff:20:c0:94:96:44: 00:94:af:24:5d:b3:27:66:67:b0:52:1c:11:4b:f9:5b:5f:80: 89:e2:ca:6d:9e:aa:a4:e2:df:2b:e2:a9:18:6a:d5:86:ef:48: 08:4e:4e:ef:b6:16:65:af:e9:dc:6b:83:5c:47:48:34:a0:46: 1e:5e:a0:eb:8e:db:25:7b:d8:71:1e:4c:0a:1c:f1:f3:23:ac: 3a:2e:71:06:4f:14:69:fd:b7:03:b7:11:41:01:ba:1c:7e:8f: c5:c7:b7:69:52:ba:ad:a7:e3:c0:56:84:b0:6e:29:5f:13:0d: 06:8e:28:cf:13:5d:d4:da:97:ac:2a:78:0f:a0:62:10:d2:07: 3f:19:85:ea -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUaAy9M/BZH15BspniaHDgsVYgsN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVCMkU1REFEMEM2OTk2RDBBODBBN0I5MEYzQTJBQTYw RkIxQTdBQzAeFw0yNjA1MDYxNzQ0NTNaFw0yNjA1MDcxOTQ4NTNaMDMxMTAvBgNV BAMTKEY3NTg3QjhCMkI2REVGOEQyRUQwMTJDNkFENEUwNUNFRjk3MzkxNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfPNlcCIW0osNATHJRo0307IrK C8CL2Hk8PEt4OpDy6vCKfFpP8eQc5PUTU2IZKxZ2Fsm7+s1EE/YVPsslECNY6xL3 gukHafm1t5qBylFl5RFr/IchqSoJ7n3DLpvSkYQ9vHuMpODqWlUE6+G/iMiRcwU5 i1PclD3f8cYzJcJlOUDdlK/GE0qvT3viSJecLaHzBDUW8ZMbcY2dZZRR/0P/VON+ ySHJDs/KJfxdMOplpvGjxPdMp8KwZQySFIbRwq/Nf5TGLD4a+g2CDr1fz9yQU/DN DAsXXPEqSHTihy9fiM7xT7eI3tUHHp1tShRN2dkCbGWWYnZWvOfAHEyViSwJAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU91h7iytt740u0BLGrU4FzvlzkV8wHwYDVR0j BBgwFoAUXrLl2tDGmW0KgKe5Dzoqpg+xp6wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVl YjdkLzQvNUVCMkU1REFEMEM2OTk2RDBBODBBN0I5MEYzQTJBQTYwRkIxQTdBQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC81RUIyRTVEQUQwQzY5OTZEMEE4MEE3Qjkw RjNBMkFBNjBGQjFBN0FDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M5OTI2NWVmLTIyYTktNDEwMC1hMjNkLTUxYTlkOWZlZWI3ZC80LzVFQjJFNURB RDBDNjk5NkQwQTgwQTdCOTBGM0EyQUE2MEZCMUE3QUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAnXm8N JvLDpj1R1sqBAXmtH7tPnW9b9PMLIgSe+/nX1rJInwbNPUKUBTKr5VlSk3s7fRVG qiXKqswdmIM5jWk5LIBeUhkrho5xX7O2VukCPvCcQeMLVNOkaHcgDOa5x7axuQZ8 mDhc+gDlCdGhun+86afYwCx6fID/IMCUlkQAlK8kXbMnZmewUhwRS/lbX4CJ4spt nqqk4t8r4qkYatWG70gITk7vthZlr+nca4NcR0g0oEYeXqDrjtsle9hxHkwKHPHz I6w6LnEGTxRp/bcDtxFBAbocfo/Fx7dpUrqtp+PAVoSwbilfEw0GjijPE13U2pes KngPoGIQ0gc/GYXq -----END CERTIFICATE-----Generated at Thu May 7 07:06:32 2026 by rpki-client