$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft File: 5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft (raw, json) Hash identifier: MQxF5KthABWmix9Z87EXsjJnGgooKMEYv6aBk35771Q= Subject key identifier: A1:06:C8:5D:F1:EE:C6:58:2A:1C:80:17:F1:DF:6B:A3:52:5D:65:C5 Authority key identifier: 5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3 Certificate issuer: /CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3 Certificate serial: 42450F9870C47EB6877BD91AF1F34BC3ED5F886F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft Manifest number: 0576 Signing time: Thu 23 Jul 2026 14:18:34 +0000 Manifest this update: Thu 23 Jul 2026 14:13:34 +0000 Manifest next update: Fri 24 Jul 2026 16:38:34 +0000 Files and hashes: 1: 5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl (hash: bYHp0lOTirB64Tws9kJ2Gx1sHMWXDX8lXW2ejcP0qDM=) 2: 34352e3134362e3136332e302f32342d3234203d3e20313937353238.roa (hash: Ebzg/MjqohTGeKwDaLunRaMiyaIF5yHH/QdRNJ9uULY=) 3: 34352e3134362e3136302e302f32332d3233203d3e203437343437.roa (hash: 31YTnxmdtZ2cp3Cw9rcOHPD6ZzrVs4b/Az5vMfbmmIM=) 4: 34352e3134362e3136322e302f32342d3234203d3e203138363331.roa (hash: mQKE/0/NnV539NSoXtVCOp3+AeXahl8sUnLhuxaZN7o=) 5: 34352e3134362e3136302e302f32332d3233203d3e20323133303031.roa (hash: J60EsWIeYN4a4peosqQOm0lgQhTjR5G5qC6zOtaqQT0=) 6: 34352e3134362e3136332e302f32342d3234203d3e203338313336.roa (hash: 2UoYMc+T3VQ81nJuKfdlMgklJP2lCeK6kVAd1Zef4f8=) 7: 34352e3134362e3136332e302f32342d3234203d3e20323136313833.roa (hash: dEyrefnnKSg66lfx459XJ2SroTggGi4go9Zp+DRZdvU=) 8: 34352e3134362e3136332e302f32342d3234203d3e20343031373736.roa (hash: vOmOz2BugVIPRfW7G2v3UGhcWNCUu83kIhIIM2fnK0w=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:38:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:45:0f:98:70:c4:7e:b6:87:7b:d9:1a:f1:f3:4b:c3:ed:5f:88:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3 Validity Not Before: Jul 23 14:13:34 2026 GMT Not After : Jul 24 16:38:34 2026 GMT Subject: CN=A106C85DF1EEC6582A1C8017F1DF6BA3525D65C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:20:f0:b3:f7:32:a5:61:30:81:de:a4:73:b0: d5:3b:6f:65:a3:f2:00:84:bd:e2:13:3a:ad:ad:8d: e4:9c:61:d7:bd:73:1d:49:0f:ed:3f:e0:b8:4e:91: 5a:ad:94:d6:b9:77:35:21:3a:74:38:ad:47:30:db: b2:5d:24:94:f0:ef:c2:aa:10:56:26:5a:d3:0b:62: 00:ec:2c:ed:fe:42:b3:5c:56:67:2f:19:53:d6:8c: 6f:0f:32:1b:ff:ca:cd:a8:31:33:38:8e:67:a6:e9: 3d:1c:21:c0:e7:14:2f:91:96:59:37:b3:cf:2d:c1: 65:91:c0:59:17:e8:20:c4:7b:73:6d:cb:8a:28:90: ea:cf:d8:35:eb:f9:0e:33:75:ca:75:6f:90:e4:6f: 7f:a9:eb:b7:56:67:93:28:25:04:8e:b2:05:43:71: 47:7b:aa:75:99:0c:bc:72:2f:fc:0c:84:aa:98:61: b5:c0:cf:19:00:b7:f8:27:83:5b:e6:17:aa:04:ed: 88:ba:e2:98:5c:dd:c3:c7:f5:e8:31:49:6b:85:fc: 24:b8:94:a2:59:88:37:14:3d:0e:60:af:d6:31:b4: d2:7c:4a:64:d4:c7:7f:d0:2f:d0:19:b7:90:fd:8b: 3d:45:de:f4:12:75:cf:cc:61:45:33:3e:2c:b0:d0: 0b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:06:C8:5D:F1:EE:C6:58:2A:1C:80:17:F1:DF:6B:A3:52:5D:65:C5 X509v3 Authority Key Identifier: keyid:5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:3d:53:60:f4:76:d1:05:14:9c:7e:71:28:c2:0c:47:b8:05: c5:fd:0a:ab:83:09:36:94:b6:b4:24:d8:cb:e9:6c:c0:f3:c5: 58:68:c7:57:95:4a:c1:b5:7e:e2:d5:68:32:66:b1:6b:c0:d4: 5b:cd:8b:80:2e:24:5b:57:74:9f:15:7f:5c:e9:36:55:d1:a4: 7b:a1:b1:e7:4f:6b:64:0c:53:f1:7f:33:aa:b2:c9:65:a0:c8: d1:5e:8c:e0:b4:ac:0c:c3:6c:cf:6b:08:97:20:97:a5:8f:a9: 25:38:e3:6f:ec:58:65:12:bd:89:40:5b:78:ff:a3:ca:96:dd: ae:44:ce:48:ac:98:a3:c2:d8:75:b8:cb:78:05:e2:03:f8:b9: 19:db:df:62:63:b6:b0:2b:4a:2a:f8:61:bf:84:80:5c:d3:e2: 5f:83:d1:f5:05:4a:93:00:28:d0:93:15:c8:45:86:fb:9a:d8: 82:31:12:0e:1e:51:2d:c0:d7:35:6f:c7:92:06:8e:9b:4b:53: f1:83:40:30:2c:17:6c:c1:8c:a1:98:6b:f6:f0:d6:95:c1:94: c8:1b:0e:17:47:b6:10:c7:24:99:6f:19:f7:20:6b:d4:7d:29: d2:68:ab:6d:e0:37:40:cb:2e:d5:68:3d:b1:71:31:65:79:dc: e8:d3:56:6b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQkUPmHDEfraHe9ka8fNLw+1fiG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRlZmUwOTIyZjRmNTUyNzBkY2Q1YzA4ZjA0ZjFjN2Jm MjYwNzNjMzAeFw0yNjA3MjMxNDEzMzRaFw0yNjA3MjQxNjM4MzRaMDMxMTAvBgNV BAMTKEExMDZDODVERjFFRUM2NTgyQTFDODAxN0YxREY2QkEzNTI1RDY1QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbIPCz9zKlYTCB3qRzsNU7b2Wj 8gCEveITOq2tjeScYde9cx1JD+0/4LhOkVqtlNa5dzUhOnQ4rUcw27JdJJTw78Kq EFYmWtMLYgDsLO3+QrNcVmcvGVPWjG8PMhv/ys2oMTM4jmem6T0cIcDnFC+Rllk3 s88twWWRwFkX6CDEe3Nty4ookOrP2DXr+Q4zdcp1b5Dkb3+p67dWZ5MoJQSOsgVD cUd7qnWZDLxyL/wMhKqYYbXAzxkAt/gng1vmF6oE7Yi64phc3cPH9egxSWuF/CS4 lKJZiDcUPQ5gr9YxtNJ8SmTUx3/QL9AZt5D9iz1F3vQSdc/MYUUzPiyw0AuVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUoQbIXfHuxlgqHIAX8d9ro1JdZcUwHwYDVR0j BBgwFoAUXe/gki9PVScNzVwI8E8ce/Jgc8MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmZlMmIyN2EtMWVjNS00YWI3LTk3OGUtNmRhOWNmOWYz NzkwLzAvNURFRkUwOTIyRjRGNTUyNzBEQ0Q1QzA4RjA0RjFDN0JGMjYwNzNDMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hlX2draTlQVlNjTnpWd0k4RThjZV9K Z2M4TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yZmUyYjI3YS0x ZWM1LTRhYjctOTc4ZS02ZGE5Y2Y5ZjM3OTAvMC81REVGRTA5MjJGNEY1NTI3MERD RDVDMDhGMDRGMUM3QkYyNjA3M0MzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGz1TYPR20QUUnH5xKMIM R7gFxf0Kq4MJNpS2tCTYy+lswPPFWGjHV5VKwbV+4tVoMmaxa8DUW82LgC4kW1d0 nxV/XOk2VdGke6Gx509rZAxT8X8zqrLJZaDI0V6M4LSsDMNsz2sIlyCXpY+pJTjj b+xYZRK9iUBbeP+jypbdrkTOSKyYo8LYdbjLeAXiA/i5GdvfYmO2sCtKKvhhv4SA XNPiX4PR9QVKkwAo0JMVyEWG+5rYgjESDh5RLcDXNW/HkgaOm0tT8YNAMCwXbMGM oZhr9vDWlcGUyBsOF0e2EMckmW8Z9yBr1H0p0mirbeA3QMsu1Wg9sXExZXnc6NNW aw== -----END CERTIFICATE-----Generated at Fri Jul 24 01:21:00 2026 by rpki-client