$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft File: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft (raw, json) Hash identifier: F6qpPCT02CVTldMLkKUCUtwB/t6l5K+qvaB6q5jkDVE= Subject key identifier: 80:79:CC:4E:17:6A:03:8C:EB:9B:50:2E:73:C6:53:E2:AF:D6:C0:F5 Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Certificate serial: 34782FFC1C9E3B31240FB5B2D5159B7693F8DD4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft Manifest number: 025B Signing time: Sun 22 Mar 2026 14:14:05 +0000 Manifest this update: Sun 22 Mar 2026 14:09:05 +0000 Manifest next update: Mon 23 Mar 2026 16:26:05 +0000 Files and hashes: 1: 326131343a333863303a313a3a2f34382d3438203d3e20333936303634.roa (hash: hT2vS1KxZCIrrbIeX36lXo5PB7z3bFiXrMszQcpSghE=) 2: 326131343a333863303a313a3a2f34382d3438203d3e20323135323438.roa (hash: hYvWm7RFlZS1l2LX8NsvpkNf0MsxvPiQn7slmgwssck=) 3: 3130332e3134392e3136382e302f32342d3234203d3e20333936303634.roa (hash: +yFHbjFdcl3OkH9bM82B/wbQvRBlEBGqJ0LTOyulC0Q=) 4: 3139342e3131372e36392e302f32342d3234203d3e20323030353538.roa (hash: bnShsDW1be2bODK39k9j4f1BlMu3O894jpQkGkz2kLA=) 5: 326131343a333863303a343a3a2f34382d3438203d3e20323135323438.roa (hash: WXZZhktlKD9T2nrBzZ0hLrkDPYKvkgJO3m6d5vMac1U=) 6: 326131343a333863303a343a3a2f34382d3438203d3e20333936303634.roa (hash: c/SHLHo2u//fub298bFboq1gpoyciy9cj/euJmiNfvQ=) 7: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl (hash: WOBI/mHI/tdbOr6GBsUBikBi7B8rciaZuejGOHVa9rA=) 8: 326131343a333863303a333a3a2f34382d3438203d3e20323135323438.roa (hash: rQvL6z8yuqUS7v24/Ra9en3S8KmIgkMtv1rcn8o1sfA=) 9: 326131343a333863303a323a3a2f34382d3438203d3e20333936303634.roa (hash: b3AvMY9Sl1B0jVsJOJivHhqGlksNlQ/JV9muHKrGSGQ=) 10: 326131343a333863303a3130343a3a2f34382d3438203d3e20333936303634.roa (hash: uQC+ycpajw6LG1MwmEH2bQGDaDjqft9mY/Ula5mB0Rs=) 11: 326131343a333863303a333a3a2f34382d3438203d3e20333936303634.roa (hash: RQOZ0GeuB2hc8N96mezhBhXKeCrh7X17R4TSsdmASyE=) 12: 326131343a333863303a3a2f32392d3239203d3e20323135323438.roa (hash: bqsY4FQ10AI29Vxl2YGsNnTvNpFvBsuO3ChiwTJi6QE=) 13: 326131343a333863303a3130343a3a2f34382d3438203d3e20323135323438.roa (hash: QZeJi0O4ini6QNF1syA5gZ8HehGzsGo0INWd9T4WodA=) 14: 3130332e3134392e3136382e302f32342d3234203d3e20323135323438.roa (hash: RPFyh+9f4VeLKwhSKFsibkww2V1WrimAJUdSq1OTL10=) 15: 326131343a333863303a3a2f32392d3239203d3e20333936303634.roa (hash: izH2bRAdoHB65ZOfP1RgM/881EkkTABDPPywFSiQ9f4=) 16: 3130332e3134392e3136392e302f32342d3234203d3e203630373831.roa (hash: M972A2zux5bp2vtM/yV/ifXNBlJMRB7g6qDIDzpgNsU=) 17: AS215248.asa (hash: +7bZg/L1iv45A8Lv9ZnYzCCmE84OHieAnUYCYHDgEBc=) 18: 326131343a333863303a323a3a2f34382d3438203d3e20323135323438.roa (hash: e6DNGKmUmYh4KhA4h67tF7nM55oym+8oQ84yYdEmy64=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 23 Mar 2026 16:26:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:78:2f:fc:1c:9e:3b:31:24:0f:b5:b2:d5:15:9b:76:93:f8:dd:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Validity Not Before: Mar 22 14:09:05 2026 GMT Not After : Mar 23 16:26:05 2026 GMT Subject: CN=8079CC4E176A038CEB9B502E73C653E2AFD6C0F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d5:12:2e:5f:a9:91:90:01:c0:58:c3:6e:73: 57:db:94:25:e4:f6:e6:49:49:0b:64:d9:86:4f:81: 85:c3:e6:c2:7c:05:10:7b:25:0b:37:49:f1:56:95: 10:be:db:cb:5e:14:6b:f6:35:5c:b3:a1:87:61:9c: 86:6a:58:9f:05:18:9b:8b:d3:4b:78:c2:8d:49:52: 9e:11:bd:40:e6:e0:ae:5d:57:76:24:cc:d3:d7:31: 68:ce:c9:f9:f0:b6:48:7f:2e:b2:cd:ed:09:0e:5a: 5c:c8:80:d8:87:bf:78:6f:a9:fd:b9:3b:5d:9e:15: b0:c4:8e:98:3e:fd:f0:db:53:81:f3:8d:61:a4:cb: 87:7a:3f:ec:5d:3d:90:85:48:5c:ce:81:da:e2:46: dc:02:b9:e1:c9:30:74:53:46:da:0a:a5:10:62:79: 7a:95:98:fd:54:b5:ea:a7:0c:9c:e8:ee:9c:6d:61: b5:8b:6c:31:d5:27:27:a5:48:01:4c:43:58:88:49: 03:42:20:66:58:39:d9:69:33:dd:03:f8:bd:2f:d8: 2d:d3:77:ef:80:3e:d3:fc:d8:ff:89:57:47:5b:91: b4:67:79:b4:02:c0:55:49:99:39:fd:a7:7f:2d:d4: ab:c5:96:1f:2c:6d:e8:08:fa:fd:b0:52:79:4f:eb: 8d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:79:CC:4E:17:6A:03:8C:EB:9B:50:2E:73:C6:53:E2:AF:D6:C0:F5 X509v3 Authority Key Identifier: keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:f4:7c:15:8c:b8:91:a2:ab:0a:79:df:71:61:87:55:d4:03: 24:6e:00:c0:b8:00:b7:fd:d1:48:bf:13:57:2b:48:41:b2:eb: 38:c0:fa:83:a8:01:a2:be:a8:fe:d6:e2:01:b7:03:e2:37:a1: 6b:81:aa:c6:1a:eb:a5:24:8f:72:8e:d1:be:0f:c1:49:15:1d: 5a:a6:cc:aa:27:93:ed:38:f8:9e:eb:0b:ce:2f:81:f9:c2:f9: 95:30:fa:af:d5:64:ff:8f:41:4f:3d:83:07:2e:30:98:48:48: a3:6d:f6:af:42:2c:6e:4c:d5:3b:41:2f:44:09:33:26:53:99: 24:29:da:6b:f2:22:be:e6:72:02:0e:62:4b:57:55:52:09:96: 71:de:f5:06:71:ab:62:45:36:92:62:c3:cb:25:69:f8:21:ad: 7a:ab:fc:19:48:aa:4b:32:91:2d:f9:0b:3b:35:19:a4:20:e6: b7:f0:66:d8:76:8e:d7:9d:1a:26:24:2a:09:58:45:12:35:fa: 94:c8:a3:ab:5f:8e:eb:44:29:ff:8e:5a:a4:9e:cc:7b:0e:75: f0:91:79:a2:aa:51:99:89:d9:53:26:02:26:b9:b6:45:94:b7: 4c:64:cb:3c:fd:11:eb:b4:d6:bb:f8:8b:cc:ff:c2:e1:30:1e: 07:e8:fb:30 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNHgv/ByeOzEkD7Wy1RWbdpP43UwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWNkYzA0YmIyM2VhYTRjZWNjNzkxZGZlMDRiYjAyOGI3 ZTc5N2I2ODAeFw0yNjAzMjIxNDA5MDVaFw0yNjAzMjMxNjI2MDVaMDMxMTAvBgNV BAMTKDgwNzlDQzRFMTc2QTAzOENFQjlCNTAyRTczQzY1M0UyQUZENkMwRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH1RIuX6mRkAHAWMNuc1fblCXk 9uZJSQtk2YZPgYXD5sJ8BRB7JQs3SfFWlRC+28teFGv2NVyzoYdhnIZqWJ8FGJuL 00t4wo1JUp4RvUDm4K5dV3YkzNPXMWjOyfnwtkh/LrLN7QkOWlzIgNiHv3hvqf25 O12eFbDEjpg+/fDbU4HzjWGky4d6P+xdPZCFSFzOgdriRtwCueHJMHRTRtoKpRBi eXqVmP1UteqnDJzo7pxtYbWLbDHVJyelSAFMQ1iISQNCIGZYOdlpM90D+L0v2C3T d++APtP82P+JV0dbkbRnebQCwFVJmTn9p38t1KvFlh8sbegI+v2wUnlP643jAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUgHnMThdqA4zrm1Auc8ZT4q/WwPUwHwYDVR0j BBgwFoAUXNwEuyPqpM7MeR3+BLsCi355e2gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjli N2M0LzAvNUNEQzA0QkIyM0VBQTRDRUNDNzkxREZFMDRCQjAyOEI3RTc5N0I2OC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hOd0V1eVBxcE03TWVSMy1CTHNDaTM1 NWUyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZDE5ZGIyMC00 NjUzLTQ4ZDQtOGZjNC01ODBkMTM2OWI3YzQvMC81Q0RDMDRCQjIzRUFBNENFQ0M3 OTFERkUwNEJCMDI4QjdFNzk3QjY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUvR8FYy4kaKrCnnfcWGH VdQDJG4AwLgAt/3RSL8TVytIQbLrOMD6g6gBor6o/tbiAbcD4jeha4GqxhrrpSSP co7Rvg/BSRUdWqbMqieT7Tj4nusLzi+B+cL5lTD6r9Vk/49BTz2DBy4wmEhIo232 r0IsbkzVO0EvRAkzJlOZJCnaa/IivuZyAg5iS1dVUgmWcd71BnGrYkU2kmLDyyVp +CGteqv8GUiqSzKRLfkLOzUZpCDmt/Bm2HaO150aJiQqCVhFEjX6lMijq1+O60Qp /45apJ7Mew518JF5oqpRmYnZUyYCJrm2RZS3TGTLPP0R67TWu/iLzP/C4TAeB+j7 MA== -----END CERTIFICATE-----Generated at Mon Mar 23 00:23:21 2026 by rpki-client