$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft File: 5ECB4CADBBADD500F49CA697D566A2761E017608.mft (raw, json) Hash identifier: ttsWgvpR0EgH3DOXJmmUZ0cEFXN71ZkzHaJLYnmQAcw= Subject key identifier: 56:D3:30:D3:60:B3:BD:C7:27:9D:68:BF:CE:27:48:02:78:26:49:5D Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Certificate serial: 62A50261EC6AE7E1114B7CB650F2549DC477060E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft Manifest number: 02A4 Signing time: Wed 25 Mar 2026 21:41:53 +0000 Manifest this update: Wed 25 Mar 2026 21:36:53 +0000 Manifest next update: Thu 26 Mar 2026 22:01:53 +0000 Files and hashes: 1: 3231332e3235342e3137302e302f32342d3234203d3e203438363738.roa (hash: ttSPLNkVmnmfbB1Jg0U4OFMRv4cZWxzTg6oBluFltrk=) 2: 38362e35342e3137322e302f32342d3234203d3e20323134343332.roa (hash: +6HuSGy13PoSBfdgi660PmTLE8Z52TLvw+ru7fcB7AI=) 3: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (hash: Q4yUdFFGtrq1xUVDtHn0DoNWjht0ICRHxiUX7p+xRAQ=) 4: 5ECB4CADBBADD500F49CA697D566A2761E017608.crl (hash: SeevWmYtnNe4UicM1lEhZoK6Mmt8wOotJ6Uyd0zLhUw=) 5: 3134312e3139332e3232382e302f32342d3234203d3e20323134323038.roa (hash: p1kuPenqcy6Et0XPjwxcCLB+vpEy3ekHhe4EodnqolI=) 6: 3231332e3235342e3137302e302f32342d3234203d3e20323038343833.roa (hash: gjwDheXZBS8eOtwo7Ja5xPFcujfV7TC07EH1z972oQ4=) 7: 3231332e3235342e3137302e302f32342d3234203d3e20323134393431.roa (hash: WuIyFXGDgkt2cltxoxT/RYao20HHu+r0Sn5rfpjFnHA=) 8: 3137302e36322e3139302e302f32342d3234203d3e203438393235.roa (hash: 8/++60jg7XtzmZ45FRECeqxUVy5048XlFvcQJYMNUjo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 22:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:a5:02:61:ec:6a:e7:e1:11:4b:7c:b6:50:f2:54:9d:c4:77:06:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Validity Not Before: Mar 25 21:36:53 2026 GMT Not After : Mar 26 22:01:53 2026 GMT Subject: CN=56D330D360B3BDC7279D68BFCE2748027826495D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9e:d0:2a:3c:1d:05:51:38:47:c0:35:d5:c7: 6b:cb:a3:e4:5b:de:5b:72:0d:06:b8:8a:95:e7:e8: 8c:40:82:51:af:3c:de:5d:6c:52:a3:30:af:7a:ac: 1d:40:e4:4e:d1:e7:39:31:ef:e3:b5:6c:a9:59:89: ff:34:36:e7:e1:3c:c1:a0:52:a5:14:70:32:46:0c: c7:94:ad:e9:a6:ec:a7:b7:23:98:7c:d2:4d:fd:df: 61:e4:3b:c8:ee:9c:75:e3:b9:0e:ae:a0:0c:70:26: ca:95:bc:e4:72:5b:12:13:fe:bf:55:13:39:86:a0: f2:6d:a2:97:0a:0d:da:ac:e2:98:c1:7a:76:cd:12: 69:83:c7:c6:7a:fe:e0:46:1f:7f:24:39:74:c6:32: f5:5f:26:09:86:22:f3:2b:8c:e0:ab:f6:83:55:e0: c8:82:57:1f:72:aa:d5:69:7b:b9:8f:f3:0a:d1:73: b7:54:88:b6:ae:2a:e5:d1:35:ff:a1:bd:39:47:fc: be:31:f5:30:d3:10:ba:cc:0d:a6:9a:2f:2a:5f:4c: af:40:78:bd:04:10:1c:6b:28:d6:56:39:72:d8:b1: e6:22:b0:0b:7c:82:ad:ff:dc:37:cb:2d:4a:6d:fc: 36:52:fd:09:f0:44:46:80:c9:3f:7e:34:2a:f5:ec: 66:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D3:30:D3:60:B3:BD:C7:27:9D:68:BF:CE:27:48:02:78:26:49:5D X509v3 Authority Key Identifier: keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:1a:f3:33:f2:6f:8b:ce:6f:80:4f:5f:d9:bc:f2:04:82:17: 06:3b:be:de:df:8a:72:be:4a:e1:5c:e2:ff:f3:c5:6f:69:3f: b1:b3:a5:41:1e:58:0f:62:d5:d9:89:42:83:a1:5e:8a:05:30: 07:08:87:7e:d3:95:86:f8:f9:50:f1:64:e4:e5:c1:5e:50:25: 2d:50:44:23:21:c0:2e:c0:43:c6:86:3f:c5:3b:42:55:ab:b5: 5a:dc:9b:43:45:22:7f:e5:e3:6d:d1:e8:e8:7a:e4:bc:88:dd: 99:9e:2d:6a:b3:17:b1:c3:15:dc:45:db:83:04:c1:98:97:38: ca:c2:bc:71:d0:07:29:08:ed:4f:be:0a:9d:70:a5:6b:93:fd: 76:8a:59:6d:3a:3f:d5:74:42:94:99:54:57:60:ad:9f:0c:c5: c6:89:77:4d:7b:e7:dc:44:a3:36:c5:4a:89:c1:93:9e:42:27: 9b:f0:b4:4e:41:55:3b:5c:28:32:a7:87:d1:8d:bd:70:7f:79: 59:b7:94:7f:65:99:f3:6f:ae:e8:07:e0:99:46:78:95:f2:67: fe:d2:3b:e2:e8:6c:d6:4c:2e:10:df:ed:25:86:70:36:3b:29: ff:36:9d:51:91:8f:50:58:8c:67:74:1b:ea:a8:5f:35:72:86: 8d:b8:8e:7d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYqUCYexq5+ERS3y2UPJUncR3Bg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx ZTAxNzYwODAeFw0yNjAzMjUyMTM2NTNaFw0yNjAzMjYyMjAxNTNaMDMxMTAvBgNV BAMTKDU2RDMzMEQzNjBCM0JEQzcyNzlENjhCRkNFMjc0ODAyNzgyNjQ5NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjntAqPB0FUThHwDXVx2vLo+Rb 3ltyDQa4ipXn6IxAglGvPN5dbFKjMK96rB1A5E7R5zkx7+O1bKlZif80NufhPMGg UqUUcDJGDMeUremm7Ke3I5h80k3932HkO8junHXjuQ6uoAxwJsqVvORyWxIT/r9V EzmGoPJtopcKDdqs4pjBenbNEmmDx8Z6/uBGH38kOXTGMvVfJgmGIvMrjOCr9oNV 4MiCVx9yqtVpe7mP8wrRc7dUiLauKuXRNf+hvTlH/L4x9TDTELrMDaaaLypfTK9A eL0EEBxrKNZWOXLYseYisAt8gq3/3DfLLUpt/DZS/QnwREaAyT9+NCr17GZPAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUVtMw02CzvccnnWi/zidIAngmSV0wHwYDVR0j BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0 QmRnZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzBlMTNkOC1i ZmUwLTQyMzUtYWZiNC1kNTNlZGZiYWNkZDIvMC81RUNCNENBREJCQURENTAwRjQ5 Q0E2OTdENTY2QTI3NjFFMDE3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmhrzM/Jvi85vgE9f2bzy BIIXBju+3t+Kcr5K4Vzi//PFb2k/sbOlQR5YD2LV2YlCg6FeigUwBwiHftOVhvj5 UPFk5OXBXlAlLVBEIyHALsBDxoY/xTtCVau1WtybQ0Uif+XjbdHo6HrkvIjdmZ4t arMXscMV3EXbgwTBmJc4ysK8cdAHKQjtT74KnXCla5P9dopZbTo/1XRClJlUV2Ct nwzFxol3TXvn3ESjNsVKicGTnkInm/C0TkFVO1woMqeH0Y29cH95WbeUf2WZ82+u 6AfgmUZ4lfJn/tI74uhs1kwuEN/tJYZwNjsp/zadUZGPUFiMZ3Qb6qhfNXKGjbiO fQ== -----END CERTIFICATE-----Generated at Thu Mar 26 07:13:45 2026 by rpki-client