$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft File: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft (raw, json) Hash identifier: Gi5FcY0J2N0lLg9mKZhLb9QYcyZoU4ZlqPktbWE8oXA= Subject key identifier: 0B:A5:83:1B:BA:D3:59:3B:FA:DB:DD:84:33:B1:A1:33:74:6E:D0:E4 Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Certificate serial: 0FAE3ECCCD44AEAD90BFC6C1165A7CDA7D88CE54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft Manifest number: 02AC Signing time: Thu 14 May 2026 14:37:07 +0000 Manifest this update: Thu 14 May 2026 14:32:07 +0000 Manifest next update: Fri 15 May 2026 14:39:07 +0000 Files and hashes: 1: 3136372e3130342e35352e302f32342d3234203d3e20323135323936.roa (hash: SV9ucGr+4h+fuaELn2IQUJABWEK0Rjvz/iTGykXuEuY=) 2: 326131343a333863303a3130343a3a2f34382d3438203d3e20333936303634.roa (hash: uQC+ycpajw6LG1MwmEH2bQGDaDjqft9mY/Ula5mB0Rs=) 3: 326131343a333863303a313a3a2f34382d3438203d3e20323135323438.roa (hash: hYvWm7RFlZS1l2LX8NsvpkNf0MsxvPiQn7slmgwssck=) 4: 326131343a333863303a333a3a2f34382d3438203d3e20323135323438.roa (hash: rQvL6z8yuqUS7v24/Ra9en3S8KmIgkMtv1rcn8o1sfA=) 5: 326131343a333863303a323a3a2f34382d3438203d3e20323135323438.roa (hash: e6DNGKmUmYh4KhA4h67tF7nM55oym+8oQ84yYdEmy64=) 6: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl (hash: 2VQW75CMY6Y2N6WmEFgDsv9zqxa/p/a52EhsJg5/NAI=) 7: 326131343a333863303a343a3a2f34382d3438203d3e20333936303634.roa (hash: c/SHLHo2u//fub298bFboq1gpoyciy9cj/euJmiNfvQ=) 8: 326131343a333863303a313a3a2f34382d3438203d3e20333936303634.roa (hash: hT2vS1KxZCIrrbIeX36lXo5PB7z3bFiXrMszQcpSghE=) 9: AS215248.asa (hash: DkcS3cmdltQErLXLkB7mngryjKe15n7TPiy42wbBtNA=) 10: 326131343a333863303a3130343a3a2f34382d3438203d3e20323135323438.roa (hash: QZeJi0O4ini6QNF1syA5gZ8HehGzsGo0INWd9T4WodA=) 11: 326131343a333863303a333a3a2f34382d3438203d3e20333936303634.roa (hash: RQOZ0GeuB2hc8N96mezhBhXKeCrh7X17R4TSsdmASyE=) 12: 326131343a333863303a3a2f32392d3239203d3e20323135323438.roa (hash: bqsY4FQ10AI29Vxl2YGsNnTvNpFvBsuO3ChiwTJi6QE=) 13: 326131343a333863303a3a2f32392d3239203d3e20333936303634.roa (hash: izH2bRAdoHB65ZOfP1RgM/881EkkTABDPPywFSiQ9f4=) 14: 326131343a333863303a323a3a2f34382d3438203d3e20333936303634.roa (hash: b3AvMY9Sl1B0jVsJOJivHhqGlksNlQ/JV9muHKrGSGQ=) 15: 3130332e3134392e3136382e302f32342d3234203d3e20323135323438.roa (hash: ePbF2vyH2L99pKVYNfid/LRmeBkCDC+g6PeSrnBn10Y=) 16: 3139342e3131372e36392e302f32342d3234203d3e20323030353538.roa (hash: bnShsDW1be2bODK39k9j4f1BlMu3O894jpQkGkz2kLA=) 17: 3130332e3134392e3136392e302f32342d3234203d3e203630373831.roa (hash: M972A2zux5bp2vtM/yV/ifXNBlJMRB7g6qDIDzpgNsU=) 18: 326131343a333863303a343a3a2f34382d3438203d3e20323135323438.roa (hash: WXZZhktlKD9T2nrBzZ0hLrkDPYKvkgJO3m6d5vMac1U=) 19: 3130332e3134392e3136382e302f32342d3234203d3e20333936303634.roa (hash: R5Epn5BQnUqfS0avyFJajv46KVwt1XNS+Hn4NVwwElQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 15 May 2026 14:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ae:3e:cc:cd:44:ae:ad:90:bf:c6:c1:16:5a:7c:da:7d:88:ce:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Validity Not Before: May 14 14:32:07 2026 GMT Not After : May 15 14:39:07 2026 GMT Subject: CN=0BA5831BBAD3593BFADBDD8433B1A133746ED0E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a1:48:ec:26:21:61:64:97:5c:de:bc:71:2d: 82:f6:a2:7a:c4:d5:61:0e:20:2c:74:ec:2c:d3:02: 83:b0:ea:f2:dc:b1:8d:5f:91:02:55:7d:3d:97:6d: 96:3a:b9:78:50:6d:47:b4:2d:2b:39:2c:cb:de:d2: 34:1a:7b:2a:e6:08:63:87:51:64:b5:03:35:74:6f: a4:61:d0:86:83:d8:41:77:a8:b8:74:51:04:f1:bd: 0a:01:e2:0d:9e:07:dd:7f:a8:98:0c:3c:04:76:41: 22:85:a1:13:63:cb:c3:9f:99:b7:b5:da:50:f4:4f: d9:96:7f:3c:2f:e7:eb:26:8e:36:ca:a7:52:73:70: 8e:fb:cd:d0:76:18:34:e9:aa:f4:29:46:91:a9:c2: d2:8f:9d:f6:2b:2c:7d:3b:20:d7:a1:70:16:86:56: c8:31:c5:a1:85:1e:e8:1f:64:08:72:50:f7:41:7e: f7:72:e1:d9:94:e2:e0:b4:c4:dc:79:57:ae:2e:03: 15:d3:84:84:dd:e4:75:89:5e:d1:31:66:4b:08:67: 32:2d:9e:74:05:65:06:cd:33:04:dd:e0:f8:83:d6: b4:9a:22:b6:ec:ca:da:ae:f9:13:75:d2:87:10:9c: dc:da:1a:34:b9:3b:f2:df:2b:b0:49:ab:be:48:75: 8f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A5:83:1B:BA:D3:59:3B:FA:DB:DD:84:33:B1:A1:33:74:6E:D0:E4 X509v3 Authority Key Identifier: keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:1b:f8:fc:54:5b:83:cf:ff:f5:19:0c:3b:24:32:e2:8d:00: 75:73:fd:05:ec:e0:3c:28:09:94:0b:59:dc:9b:f7:9a:7f:e6: 53:8f:2d:dd:b5:78:ab:88:06:31:a6:3b:38:a0:b5:f4:fb:3c: 42:21:a9:0e:ae:9a:7f:7b:9d:a6:49:97:5a:7f:fc:af:de:3f: ee:cc:e5:ba:f2:5c:0c:d6:e1:3d:72:89:e9:01:5c:3a:42:6a: c4:c1:d1:21:40:e1:71:a6:7d:f9:66:89:72:2d:2e:77:ad:a9: 70:94:8d:5c:5b:bf:aa:14:10:cc:24:53:54:d0:45:7e:25:95: 8a:c3:ba:04:84:73:ec:f9:fd:45:e9:5d:59:81:59:ff:8e:3e: 81:1a:1d:da:6b:2c:4c:97:58:91:e6:44:13:e0:ac:82:34:f0: cb:54:13:fe:69:b2:d1:73:79:37:56:01:4e:19:40:63:ce:21: 7d:16:14:f7:f9:77:bb:fb:f0:94:d8:0e:b8:1e:78:97:dc:f2: 01:f0:45:3c:42:b9:aa:bc:79:8f:ba:f0:42:f2:db:b8:b3:70: 4c:b4:d6:b4:67:30:ed:75:87:f0:84:17:1c:e6:f3:3e:b0:48: 79:fd:79:c0:27:e5:a3:30:c8:b5:41:55:f3:f5:b9:c7:28:d6: 81:b2:a1:c5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUD64+zM1Erq2Qv8bBFlp82n2IzlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWNkYzA0YmIyM2VhYTRjZWNjNzkxZGZlMDRiYjAyOGI3 ZTc5N2I2ODAeFw0yNjA1MTQxNDMyMDdaFw0yNjA1MTUxNDM5MDdaMDMxMTAvBgNV BAMTKDBCQTU4MzFCQkFEMzU5M0JGQURCREQ4NDMzQjFBMTMzNzQ2RUQwRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5oUjsJiFhZJdc3rxxLYL2onrE 1WEOICx07CzTAoOw6vLcsY1fkQJVfT2XbZY6uXhQbUe0LSs5LMve0jQaeyrmCGOH UWS1AzV0b6Rh0IaD2EF3qLh0UQTxvQoB4g2eB91/qJgMPAR2QSKFoRNjy8Ofmbe1 2lD0T9mWfzwv5+smjjbKp1JzcI77zdB2GDTpqvQpRpGpwtKPnfYrLH07INehcBaG VsgxxaGFHugfZAhyUPdBfvdy4dmU4uC0xNx5V64uAxXThITd5HWJXtExZksIZzIt nnQFZQbNMwTd4PiD1rSaIrbsytqu+RN10ocQnNzaGjS5O/LfK7BJq75IdY/5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUC6WDG7rTWTv6292EM7GhM3Ru0OQwHwYDVR0j BBgwFoAUXNwEuyPqpM7MeR3+BLsCi355e2gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjli N2M0LzAvNUNEQzA0QkIyM0VBQTRDRUNDNzkxREZFMDRCQjAyOEI3RTc5N0I2OC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hOd0V1eVBxcE03TWVSMy1CTHNDaTM1 NWUyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZDE5ZGIyMC00 NjUzLTQ4ZDQtOGZjNC01ODBkMTM2OWI3YzQvMC81Q0RDMDRCQjIzRUFBNENFQ0M3 OTFERkUwNEJCMDI4QjdFNzk3QjY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxv4/FRbg8//9RkMOyQy 4o0AdXP9BezgPCgJlAtZ3Jv3mn/mU48t3bV4q4gGMaY7OKC19Ps8QiGpDq6af3ud pkmXWn/8r94/7szluvJcDNbhPXKJ6QFcOkJqxMHRIUDhcaZ9+WaJci0ud62pcJSN XFu/qhQQzCRTVNBFfiWVisO6BIRz7Pn9ReldWYFZ/44+gRod2mssTJdYkeZEE+Cs gjTwy1QT/mmy0XN5N1YBThlAY84hfRYU9/l3u/vwlNgOuB54l9zyAfBFPEK5qrx5 j7rwQvLbuLNwTLTWtGcw7XWH8IQXHObzPrBIef15wCflozDItUFV8/W5xyjWgbKh xQ== -----END CERTIFICATE-----Generated at Fri May 15 06:20:30 2026 by rpki-client