$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft File: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft (raw, json) Hash identifier: DR+ZO74tDc6hJmK+Xo8Yz6iJJVbwnKhIP12uMpZ6LBA= Subject key identifier: 3E:A4:C2:1F:BC:BA:DA:9B:19:4C:3F:EC:3D:9E:A8:3E:82:EE:6F:20 Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Certificate serial: 3EBCE54C776D5437801BE5383872CB73D9B3E00A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft Manifest number: 033A Signing time: Sat 15 Aug 2026 08:41:39 +0000 Manifest this update: Sat 15 Aug 2026 08:36:39 +0000 Manifest next update: Sun 16 Aug 2026 09:18:39 +0000 Files and hashes: 1: 3130332e3134392e3136392e302f32342d3234203d3e203630373831.roa (hash: LW6kn7JmXaDtlgwub/TPDMUxsW78GAEBeOP03pg/4Ko=) 2: 3136372e3130342e35352e302f32342d3234203d3e20323135323936.roa (hash: SV9ucGr+4h+fuaELn2IQUJABWEK0Rjvz/iTGykXuEuY=) 3: 326131343a333863303a3130343a3a2f34382d3438203d3e20323135323438.roa (hash: 4FcEdfeTo0+Jky2+dtu3oW4JSykidOJrfRq9Wn0jmuU=) 4: 326131343a333863303a3130343a3a2f34382d3438203d3e20333936303634.roa (hash: PSyqDUSSGWFciwSkriMI3jwSQFjheGM8BVR6XqAmftA=) 5: 326131343a333863303a313a3a2f34382d3438203d3e20323135323438.roa (hash: G4G7qpeiXc1dZVsN/BNStkgkB9ctxJY8dVaZnuFV5eA=) 6: 326131343a333863303a313a3a2f34382d3438203d3e20333936303634.roa (hash: 7gGIPAnlG4b/UkUjKnAxgbeLd3KfOqg2CBMhQZ58dWk=) 7: 3139342e3131372e36392e302f32342d3234203d3e20323030353538.roa (hash: bnShsDW1be2bODK39k9j4f1BlMu3O894jpQkGkz2kLA=) 8: 326131343a333863303a333a3a2f34382d3438203d3e20323135323438.roa (hash: z+CH+oI+Hp/F381dhXEnc80+9gwH3lVem7Z/rJ0QrxE=) 9: 326131343a333863303a323a3a2f34382d3438203d3e20323135323438.roa (hash: Gt/gvNKWEvpZiOgSTjOiNmwq6g9bcdEcu0fhoPo4ZiM=) 10: 326131343a333863303a323a3a2f34382d3438203d3e20333936303634.roa (hash: 4ywChVru+Mr51BXc7GfSQJrEjIwczwnAeZX2cm5y+x0=) 11: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl (hash: aRh6pbOY+gzkBZ/MHTQTn2ku3VhTtzToGUhd+tOIxV4=) 12: AS215248.asa (hash: Ks58Ctz2hRVGrTaVNMmyrZzvbMUZa4toHgyrb8iY6Wc=) 13: 3130332e3134392e3136382e302f32342d3234203d3e20333936303634.roa (hash: R5Epn5BQnUqfS0avyFJajv46KVwt1XNS+Hn4NVwwElQ=) 14: 3130332e3134392e3136382e302f32342d3234203d3e20323135323438.roa (hash: ePbF2vyH2L99pKVYNfid/LRmeBkCDC+g6PeSrnBn10Y=) 15: 326131343a333863303a3a2f32392d3239203d3e20333936303634.roa (hash: i/cX6lQlTJGwnE6H+YCxQ9GOxa5PQSUkSRvWXrHtbS8=) 16: 326131343a333863303a333a3a2f34382d3438203d3e20333936303634.roa (hash: hXmtXtl9GXfZkTMFxLpLxRdTsVn4I7OwMy1faULzKXw=) 17: 326131343a333863303a343a3a2f34382d3438203d3e20333936303634.roa (hash: c/SHLHo2u//fub298bFboq1gpoyciy9cj/euJmiNfvQ=) 18: 326131343a333863303a3a2f32392d3239203d3e20323135323438.roa (hash: bqsY4FQ10AI29Vxl2YGsNnTvNpFvBsuO3ChiwTJi6QE=) 19: 326131343a333863303a343a3a2f34382d3438203d3e20323135323438.roa (hash: WXZZhktlKD9T2nrBzZ0hLrkDPYKvkgJO3m6d5vMac1U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 16 Aug 2026 09:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:bc:e5:4c:77:6d:54:37:80:1b:e5:38:38:72:cb:73:d9:b3:e0:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Validity Not Before: Aug 15 08:36:39 2026 GMT Not After : Aug 16 09:18:39 2026 GMT Subject: CN=3EA4C21FBCBADA9B194C3FEC3D9EA83E82EE6F20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c4:22:5d:3c:bb:4d:ae:f6:80:09:ed:b0:7d: 94:18:bb:12:98:02:a7:b1:4f:5b:c9:b3:f7:05:45: de:0a:46:45:8b:e1:fa:8f:13:a4:ce:ac:c0:2c:10: 43:2a:bd:cf:71:0a:31:37:b3:7b:95:9a:dc:16:97: f3:eb:3e:aa:46:5c:a2:33:e5:63:80:1a:ef:f1:de: 1c:a5:93:86:db:0b:8b:98:f0:a2:a3:95:f1:6b:8e: 6a:88:95:e9:7f:ac:f8:7d:cb:f8:f0:d2:b4:5c:db: 90:00:ea:b3:81:70:38:15:6a:af:b5:f4:1b:7c:7c: 38:35:ce:ac:42:8a:b2:6b:ae:3c:76:82:79:28:62: 67:e3:7a:22:00:72:ab:0b:ae:da:69:b7:c9:1a:1b: 9e:04:ea:0e:4b:64:a8:89:23:06:d7:38:2a:66:4b: 18:c1:d5:ed:e0:79:15:0c:9e:58:10:a6:19:1f:84: da:5a:62:68:96:91:eb:ef:5e:3c:04:aa:23:76:7a: 5a:d4:7d:fe:7d:3d:ad:1b:38:bf:c2:c3:03:71:0c: 72:d8:71:c5:59:73:0d:a0:82:4a:95:b7:ac:fb:9b: 93:f6:e8:37:99:7c:ba:19:0f:42:53:5f:3d:a5:64: d4:6b:77:9f:27:ed:51:b9:dc:5e:b4:1b:03:82:5d: ab:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A4:C2:1F:BC:BA:DA:9B:19:4C:3F:EC:3D:9E:A8:3E:82:EE:6F:20 X509v3 Authority Key Identifier: keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:a1:16:8b:57:a7:f6:d2:76:9e:73:2d:fa:e6:b2:f0:13:4c: 26:25:c3:46:90:a4:b5:8c:d6:a9:1e:f1:a4:4d:29:43:c6:5e: 1f:9c:67:47:8f:68:3a:b2:fb:5d:9b:50:1b:49:77:3a:90:d3: 22:18:b4:1a:e3:a0:3f:4e:05:c0:e7:0b:27:99:f4:a5:9f:2d: f6:96:bc:d9:c9:31:e9:c0:38:28:b1:a0:b8:05:2f:14:c5:b8: 73:4f:3b:07:b6:5e:d9:6f:21:a4:c5:a2:91:ae:9e:42:3a:2b: 93:b4:ee:60:e6:1c:2b:aa:21:e2:68:0d:a8:e5:04:c3:10:44: 84:f6:3c:ab:43:cb:12:38:86:8f:37:f4:e3:9d:b9:87:55:58: cf:58:23:0b:bd:57:a0:e4:fc:c5:ed:f7:90:ed:be:c8:ee:1a: 13:62:c7:3b:08:77:1c:50:18:36:c1:22:09:3e:63:1b:2f:ce: f8:ab:11:dc:22:44:2b:82:a0:3c:c8:4c:d9:8c:21:1b:10:22: ab:5c:07:62:68:ab:38:49:3c:b4:53:0c:bf:ed:d7:36:46:05: ec:18:97:f9:bb:b7:0d:f4:1f:84:d7:b3:d6:73:ad:6d:cd:91: 1e:43:43:fe:08:20:7b:50:98:a5:85:1f:c1:d1:de:49:3d:0f: 4d:98:28:0d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPrzlTHdtVDeAG+U4OHLLc9mz4AowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWNkYzA0YmIyM2VhYTRjZWNjNzkxZGZlMDRiYjAyOGI3 ZTc5N2I2ODAeFw0yNjA4MTUwODM2MzlaFw0yNjA4MTYwOTE4MzlaMDMxMTAvBgNV BAMTKDNFQTRDMjFGQkNCQURBOUIxOTRDM0ZFQzNEOUVBODNFODJFRTZGMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpxCJdPLtNrvaACe2wfZQYuxKY AqexT1vJs/cFRd4KRkWL4fqPE6TOrMAsEEMqvc9xCjE3s3uVmtwWl/PrPqpGXKIz 5WOAGu/x3hylk4bbC4uY8KKjlfFrjmqIlel/rPh9y/jw0rRc25AA6rOBcDgVaq+1 9Bt8fDg1zqxCirJrrjx2gnkoYmfjeiIAcqsLrtppt8kaG54E6g5LZKiJIwbXOCpm SxjB1e3geRUMnlgQphkfhNpaYmiWkevvXjwEqiN2elrUff59Pa0bOL/CwwNxDHLY ccVZcw2ggkqVt6z7m5P26DeZfLoZD0JTXz2lZNRrd58n7VG53F60GwOCXat7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUPqTCH7y62psZTD/sPZ6oPoLubyAwHwYDVR0j BBgwFoAUXNwEuyPqpM7MeR3+BLsCi355e2gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjli N2M0LzAvNUNEQzA0QkIyM0VBQTRDRUNDNzkxREZFMDRCQjAyOEI3RTc5N0I2OC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hOd0V1eVBxcE03TWVSMy1CTHNDaTM1 NWUyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZDE5ZGIyMC00 NjUzLTQ4ZDQtOGZjNC01ODBkMTM2OWI3YzQvMC81Q0RDMDRCQjIzRUFBNENFQ0M3 OTFERkUwNEJCMDI4QjdFNzk3QjY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKEWi1en9tJ2nnMt+uay 8BNMJiXDRpCktYzWqR7xpE0pQ8ZeH5xnR49oOrL7XZtQG0l3OpDTIhi0GuOgP04F wOcLJ5n0pZ8t9pa82ckx6cA4KLGguAUvFMW4c087B7Ze2W8hpMWika6eQjork7Tu YOYcK6oh4mgNqOUEwxBEhPY8q0PLEjiGjzf04525h1VYz1gjC71XoOT8xe33kO2+ yO4aE2LHOwh3HFAYNsEiCT5jGy/O+KsR3CJEK4KgPMhM2YwhGxAiq1wHYmirOEk8 tFMMv+3XNkYF7BiX+bu3DfQfhNez1nOtbc2RHkND/ggge1CYpYUfwdHeST0PTZgo DQ== -----END CERTIFICATE-----Generated at Sat Aug 15 13:45:55 2026 by rpki-client