$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft File: 5ECB4CADBBADD500F49CA697D566A2761E017608.mft (raw, json) Hash identifier: xgztAaHbpj6WmXz8b3Mz8LA0dy8+AMI/Zzk8LGtsQCY= Subject key identifier: 28:B3:6B:C7:11:15:03:6D:BD:CD:08:28:FF:FD:89:68:00:8F:B0:95 Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Certificate serial: 4A2960AC92CD041268C5722FD5F0471C6F1EE5D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft Manifest number: 0345 Signing time: Thu 23 Jul 2026 19:29:27 +0000 Manifest this update: Thu 23 Jul 2026 19:24:27 +0000 Manifest next update: Fri 24 Jul 2026 20:08:27 +0000 Files and hashes: 1: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (hash: Q4yUdFFGtrq1xUVDtHn0DoNWjht0ICRHxiUX7p+xRAQ=) 2: 5ECB4CADBBADD500F49CA697D566A2761E017608.crl (hash: 5xu2cNTWH9+yPw33IkkA+eTnE4w8fbUNqqfd5nuzRuY=) 3: 3231332e3235342e3137302e302f32342d3234203d3e20323038343833.roa (hash: LH3qwxx3cFGEc2nT11lVGioc4VsEH2u028n8n+GZTy8=) 4: 3231332e3235342e3137302e302f32342d3234203d3e203438363738.roa (hash: ttSPLNkVmnmfbB1Jg0U4OFMRv4cZWxzTg6oBluFltrk=) 5: 38362e35342e3137322e302f32342d3234203d3e20323134343332.roa (hash: +6HuSGy13PoSBfdgi660PmTLE8Z52TLvw+ru7fcB7AI=) 6: 3231332e3235342e3137302e302f32342d3234203d3e20323134393431.roa (hash: WuIyFXGDgkt2cltxoxT/RYao20HHu+r0Sn5rfpjFnHA=) 7: 3137302e36322e3139302e302f32342d3234203d3e203438393235.roa (hash: 8/++60jg7XtzmZ45FRECeqxUVy5048XlFvcQJYMNUjo=) 8: 3134312e3139332e3232382e302f32342d3234203d3e20323134323038.roa (hash: ifyEdtBW0BhdKWJrpJ6bYfBeNzyrtZtj9JtftvgAsco=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:29:60:ac:92:cd:04:12:68:c5:72:2f:d5:f0:47:1c:6f:1e:e5:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Validity Not Before: Jul 23 19:24:27 2026 GMT Not After : Jul 24 20:08:27 2026 GMT Subject: CN=28B36BC71115036DBDCD0828FFFD8968008FB095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:df:11:f3:24:a2:4a:fd:d3:58:3f:5a:d9:ad: 5a:e8:f0:2a:a1:27:ff:c0:73:d4:0f:58:eb:d0:f0: 36:f4:31:3c:e1:15:a3:0e:75:00:c1:1e:2e:b1:18: 29:07:53:7a:f5:b8:05:45:44:8f:41:c4:bf:ae:29: 06:74:b6:6f:86:2c:a6:92:a1:4b:7d:56:93:8d:1b: 32:c3:49:8b:ee:e7:99:81:57:69:90:ff:7d:c4:90: e7:c8:e6:2e:de:bf:01:38:f6:dd:ad:83:75:c3:92: 19:be:39:ed:a5:9f:a3:97:30:1e:c5:95:63:13:fc: c9:60:a9:b3:ec:e2:ff:d7:23:5c:5c:04:c9:d8:31: 55:8b:10:8b:20:28:4c:40:ed:84:97:b5:f9:33:04: 3c:b3:d8:ea:52:42:4a:2a:01:23:de:03:ab:a0:78: 2e:5e:f2:02:0b:7a:63:c5:5a:57:f9:34:ef:84:97: be:1a:03:9b:80:53:3f:f4:09:c7:b6:68:46:0b:05: 99:7f:14:f5:c9:a7:8b:c8:f8:d4:2a:62:07:47:24: 77:0f:a9:c8:2d:f5:a2:f7:21:c7:f4:5a:0f:4c:93: 86:8d:ef:42:9e:0e:a3:b2:9f:28:25:14:c2:97:10: d7:b5:17:58:ef:5e:af:0e:1d:9b:ae:cd:bf:0d:1e: 49:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B3:6B:C7:11:15:03:6D:BD:CD:08:28:FF:FD:89:68:00:8F:B0:95 X509v3 Authority Key Identifier: keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:df:e3:01:f5:e0:99:ab:a0:43:fa:82:79:4d:a1:b4:31:05: 69:b5:c4:df:01:41:ee:da:89:e0:a5:d6:fb:63:d7:4e:88:c3: eb:5a:7e:b6:e4:c8:eb:1f:93:d4:52:76:13:dc:e2:8e:b3:cb: ae:ce:cd:9e:3e:b7:d2:f2:54:73:4d:14:4a:14:0b:90:f6:51: 91:3c:8b:de:cc:32:52:b3:a0:85:57:0a:ba:9e:42:4b:da:8c: 96:43:e5:16:28:e6:eb:37:e6:18:40:71:ad:1f:a1:eb:33:54: 11:8d:0d:6a:2e:40:b5:84:47:2a:2e:df:32:fd:8b:5f:38:f5: 2d:a3:f0:31:28:e7:1d:5a:f4:6c:14:f5:a4:2a:91:21:f8:2e: 62:65:8d:58:a5:60:2b:ab:e6:4b:f3:ef:47:74:52:6a:99:95: d6:01:81:fd:d8:34:a9:30:38:5b:24:1d:6c:6e:e8:b2:5b:4f: a3:cf:90:5e:92:fc:a8:b9:a1:50:41:bc:80:59:43:71:d4:3c: 12:8f:7c:6e:83:f7:63:71:42:93:b4:13:b4:ca:5b:02:33:aa: 42:7a:8c:cd:91:1f:32:66:e8:bd:08:d1:3a:5c:9c:0f:51:4e: b8:11:61:e1:1e:c2:80:9b:69:52:5e:98:40:f7:d0:b4:0a:32: 49:07:1f:9c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUSilgrJLNBBJoxXIv1fBHHG8e5dcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx ZTAxNzYwODAeFw0yNjA3MjMxOTI0MjdaFw0yNjA3MjQyMDA4MjdaMDMxMTAvBgNV BAMTKDI4QjM2QkM3MTExNTAzNkRCRENEMDgyOEZGRkQ4OTY4MDA4RkIwOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb3xHzJKJK/dNYP1rZrVro8Cqh J//Ac9QPWOvQ8Db0MTzhFaMOdQDBHi6xGCkHU3r1uAVFRI9BxL+uKQZ0tm+GLKaS oUt9VpONGzLDSYvu55mBV2mQ/33EkOfI5i7evwE49t2tg3XDkhm+Oe2ln6OXMB7F lWMT/MlgqbPs4v/XI1xcBMnYMVWLEIsgKExA7YSXtfkzBDyz2OpSQkoqASPeA6ug eC5e8gILemPFWlf5NO+El74aA5uAUz/0Cce2aEYLBZl/FPXJp4vI+NQqYgdHJHcP qcgt9aL3Icf0Wg9Mk4aN70KeDqOynyglFMKXENe1F1jvXq8OHZuuzb8NHklRAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUKLNrxxEVA229zQgo//2JaACPsJUwHwYDVR0j BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0 QmRnZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzBlMTNkOC1i ZmUwLTQyMzUtYWZiNC1kNTNlZGZiYWNkZDIvMC81RUNCNENBREJCQURENTAwRjQ5 Q0E2OTdENTY2QTI3NjFFMDE3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkN/jAfXgmaugQ/qCeU2h tDEFabXE3wFB7tqJ4KXW+2PXTojD61p+tuTI6x+T1FJ2E9zijrPLrs7Nnj630vJU c00UShQLkPZRkTyL3swyUrOghVcKup5CS9qMlkPlFijm6zfmGEBxrR+h6zNUEY0N ai5AtYRHKi7fMv2LXzj1LaPwMSjnHVr0bBT1pCqRIfguYmWNWKVgK6vmS/PvR3RS apmV1gGB/dg0qTA4WyQdbG7osltPo8+QXpL8qLmhUEG8gFlDcdQ8Eo98boP3Y3FC k7QTtMpbAjOqQnqMzZEfMmbovQjROlycD1FOuBFh4R7CgJtpUl6YQPfQtAoySQcf nA== -----END CERTIFICATE-----Generated at Fri Jul 24 01:23:47 2026 by rpki-client