$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft File: 5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft (raw, json) Hash identifier: 57eT+BVC71iCOvGxaxs3HJkN7s5lg65OCxi8JD3EqnU= Subject key identifier: ED:29:95:42:EF:17:05:FF:F4:73:03:2A:46:1D:34:88:43:E7:F7:85 Authority key identifier: 5E:F4:C7:50:B1:93:5E:E4:BF:7F:C2:44:1A:2E:E4:90:47:7A:91:AE Certificate issuer: /CN=5EF4C750B1935EE4BF7FC2441A2EE490477A91AE Certificate serial: 53C69B02920F39270527FE9A3332442AECC7A893 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft Manifest number: 5F Signing time: Fri 25 Sep 2026 00:28:52 +0000 Manifest this update: Fri 25 Sep 2026 00:23:52 +0000 Manifest next update: Sat 26 Sep 2026 02:32:52 +0000 Files and hashes: 1: 5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.crl (hash: BLs1Hywn2toGWIlu8KP9G7GVItaaa0174J6GCCE8J9k=) 2: 326131333a633863313a3a2f33322d3438203d3e20323135383238.roa (hash: hNZRvs/OBGGhL+Wi/pJl/tEWWCNS71UB0iGh83Kwf+4=) 3: 326131333a633863313a3a2f33322d3438203d3e20323139313130.roa (hash: cGZdSXuuzOKIoqdr5hUFzzLSPkhIhMJaOMKrWyrRuhw=) 4: 326131333a633863313a3131313a3a2f34382d3438203d3e20323135383238.roa (hash: 2lS2H8IBJxOyjnm2BZrwuj7Pk6jZjmGW1zgNbopUg+c=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.crl rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 02:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:c6:9b:02:92:0f:39:27:05:27:fe:9a:33:32:44:2a:ec:c7:a8:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EF4C750B1935EE4BF7FC2441A2EE490477A91AE Validity Not Before: Sep 25 00:23:52 2026 GMT Not After : Sep 26 02:32:52 2026 GMT Subject: CN=ED299542EF1705FFF473032A461D348843E7F785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:32:cb:c2:8b:99:5c:c1:c8:24:c0:69:01:24: c4:6d:44:49:e9:9e:32:1e:49:8e:e8:df:69:9b:63: 71:60:81:a4:82:99:75:c5:0c:95:22:70:24:70:6f: d3:2b:66:6b:58:24:97:b1:ae:b7:b3:2b:d3:12:dc: 71:b9:b6:34:6f:18:15:38:b5:1f:be:44:9e:32:4c: 1c:49:3a:e1:82:eb:23:36:05:0f:af:97:e6:4d:30: ef:b0:02:95:3d:1e:6e:aa:d2:fc:4f:9d:b1:76:a9: 1a:bf:d2:d7:5e:d2:29:68:53:00:b7:0a:a6:b5:55: db:48:d5:fc:cd:5b:d7:b2:d4:0f:74:1f:39:d6:4d: 8d:76:25:01:a4:38:b0:d4:29:ba:55:dd:d8:7b:4d: 1c:d9:17:0c:81:26:16:6e:0f:d2:bf:a8:b2:8b:60: 29:c2:c6:37:7c:0f:7d:4c:1a:6f:09:9f:02:a0:1b: 9d:1d:8a:15:d3:c1:a3:9a:83:63:34:44:87:a8:c2: 55:6a:f4:50:6d:30:f9:ea:21:91:05:41:ab:d8:0c: ca:ee:37:68:6c:35:ef:9f:ea:c8:b8:29:93:cb:9d: 64:17:cd:0e:a8:0c:a5:a1:f8:5c:79:b1:b6:62:2f: 2d:c7:9c:90:df:5d:b8:ff:fa:ce:3a:9d:13:fa:e9: 94:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:29:95:42:EF:17:05:FF:F4:73:03:2A:46:1D:34:88:43:E7:F7:85 X509v3 Authority Key Identifier: keyid:5E:F4:C7:50:B1:93:5E:E4:BF:7F:C2:44:1A:2E:E4:90:47:7A:91:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:79:50:0f:ab:78:4b:be:4c:38:22:07:09:a4:b1:ea:6d:61: cb:f4:f9:9f:6d:a4:a3:6a:72:f3:f2:a2:b1:1f:98:45:c9:5c: 76:ab:0b:77:20:fc:f0:9b:56:11:06:51:79:1c:fc:72:28:bd: dd:ef:a1:2b:e2:16:8e:73:67:5d:24:3f:3c:01:64:ed:9a:4c: 3a:4d:29:9d:2f:de:41:53:ea:cc:1b:df:40:83:cc:78:bb:7d: 74:93:33:2d:ec:f7:91:d5:93:4e:60:8a:ee:88:04:84:21:d5: b9:0b:58:e0:ad:38:6d:80:6d:74:4b:8f:8a:8d:40:28:4e:99: 84:ba:87:3c:4f:af:b1:7e:f0:43:91:3c:d7:85:28:58:3d:79: 1f:f3:74:52:00:cb:5a:59:6b:80:23:98:a9:05:cd:91:a4:74: d3:33:2d:e5:6f:26:03:fa:e9:0c:a5:b4:70:50:2e:83:ac:9a: 4f:6c:71:b9:8a:f2:fd:c2:19:fc:84:d8:66:68:83:f2:9f:04: f7:e5:70:bd:f7:fa:cd:e5:cb:bc:a8:cd:ca:8f:b6:64:e6:d4: 21:51:8a:c1:ff:e8:18:8b:b9:9e:56:0c:08:80:d9:5d:25:6c: 12:a9:a1:5e:0d:e4:2b:b3:0a:b0:6f:c6:d2:79:4d:9f:1a:e9: 3e:5d:ac:31 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUU8abApIPOScFJ/6aMzJEKuzHqJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVGNEM3NTBCMTkzNUVFNEJGN0ZDMjQ0MUEyRUU0OTA0 NzdBOTFBRTAeFw0yNjA5MjUwMDIzNTJaFw0yNjA5MjYwMjMyNTJaMDMxMTAvBgNV BAMTKEVEMjk5NTQyRUYxNzA1RkZGNDczMDMyQTQ2MUQzNDg4NDNFN0Y3ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5MsvCi5lcwcgkwGkBJMRtREnp njIeSY7o32mbY3FggaSCmXXFDJUicCRwb9MrZmtYJJexrrezK9MS3HG5tjRvGBU4 tR++RJ4yTBxJOuGC6yM2BQ+vl+ZNMO+wApU9Hm6q0vxPnbF2qRq/0tde0iloUwC3 Cqa1VdtI1fzNW9ey1A90HznWTY12JQGkOLDUKbpV3dh7TRzZFwyBJhZuD9K/qLKL YCnCxjd8D31MGm8JnwKgG50dihXTwaOag2M0RIeowlVq9FBtMPnqIZEFQavYDMru N2hsNe+f6si4KZPLnWQXzQ6oDKWh+Fx5sbZiLy3HnJDfXbj/+s46nRP66ZTXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU7SmVQu8XBf/0cwMqRh00iEPn94UwHwYDVR0j BBgwFoAUXvTHULGTXuS/f8JEGi7kkEd6ka4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWMwZWQwNDYtZmE5NS00NWMzLTkxNDYtOTcxZGI4YTll OGJiLzgvNUVGNEM3NTBCMTkzNUVFNEJGN0ZDMjQ0MUEyRUU0OTA0NzdBOTFBRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03ZDEzLTQ4 OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC81RUY0Qzc1MEIxOTM1RUU0QkY3RkMyNDQx QTJFRTQ5MDQ3N0E5MUFFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzljMGVkMDQ2LWZhOTUtNDVjMy05MTQ2LTk3MWRiOGE5ZThiYi84LzVFRjRDNzUw QjE5MzVFRTRCRjdGQzI0NDFBMkVFNDkwNDc3QTkxQUUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAqeVAP q3hLvkw4IgcJpLHqbWHL9PmfbaSjanLz8qKxH5hFyVx2qwt3IPzwm1YRBlF5HPxy KL3d76Er4haOc2ddJD88AWTtmkw6TSmdL95BU+rMG99Ag8x4u310kzMt7PeR1ZNO YIruiASEIdW5C1jgrThtgG10S4+KjUAoTpmEuoc8T6+xfvBDkTzXhShYPXkf83RS AMtaWWuAI5ipBc2RpHTTMy3lbyYD+ukMpbRwUC6DrJpPbHG5ivL9whn8hNhmaIPy nwT35XC99/rN5cu8qM3Kj7Zk5tQhUYrB/+gYi7meVgwIgNldJWwSqaFeDeQrswqw b8bSeU2fGuk+Xawx -----END CERTIFICATE-----Generated at Fri Sep 25 17:36:55 2026 by rpki-client