$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft File: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft (raw, json) Hash identifier: Q1wdUiek6JqWWg4wb9t4kczwInL67h2YmOfzCBbEvO0= Subject key identifier: D2:BE:CC:F6:AA:85:72:B8:D1:4D:EC:EC:53:6F:D1:64:E4:C0:6A:58 Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE Certificate issuer: /CN=5da3215abfa4621d57709f838a92801f2e90ddfe Certificate serial: 20B02E6C36640F98A3ADB40C3293051AFCD7867A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft Manifest number: 06DD Signing time: Wed 23 Sep 2026 07:50:49 +0000 Manifest this update: Wed 23 Sep 2026 07:45:49 +0000 Manifest next update: Thu 24 Sep 2026 09:32:49 +0000 Files and hashes: 1: 34352e38312e35362e302f32332d3234203d3e20323134343332.roa (hash: jTYk6R8qRCYlAGPxNdkm45gT8NS2V3wjwOqhFHVfbDc=) 2: 34352e38312e35392e302f32342d3234203d3e20323132333834.roa (hash: Z55LDvJNhjuOlIMhPU51UoeT0VK3qlu4pE/EHJdIaDE=) 3: 34352e38312e35382e302f32342d3234203d3e20323039323432.roa (hash: UKvcqUxUrgd2F0qduNt/9nJuPUaDtCItgdXC0fI9BhQ=) 4: 326130393a643634303a3a2f32392d3239203d3e20313938333435.roa (hash: 2ZJoizA2XrGcopsLwhs8oaMaqFtkP0G9iClmvxEJgnM=) 5: 34352e38312e35382e302f32342d3234203d3e203133333335.roa (hash: q1odFkTeiB/pBEbWg5JpQkAxpmrH9S0QmR2/CtllItc=) 6: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl (hash: 7bwu+5BRvpaVZYGv2LDbhNw2NDSgGpGZbv1pzZs3MPc=) 7: 34352e38312e35392e302f32342d3234203d3e20323131343339.roa (hash: PzQrEpsLL9icV7+wAMJ22TsUek+9+7dTOPFgPD6vtOM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 09:32:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:b0:2e:6c:36:64:0f:98:a3:ad:b4:0c:32:93:05:1a:fc:d7:86:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe Validity Not Before: Sep 23 07:45:49 2026 GMT Not After : Sep 24 09:32:49 2026 GMT Subject: CN=D2BECCF6AA8572B8D14DECEC536FD164E4C06A58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a0:7d:22:33:b8:b9:4e:a2:57:1e:9e:d7:e6: 87:4d:3a:42:5a:75:21:08:5d:2c:02:e5:40:d3:c4: 60:bd:fe:33:f3:ee:25:79:c6:d3:86:04:09:b1:b9: 8d:97:ca:2e:96:85:62:b2:5a:ec:6a:8e:b2:fc:ee: 7a:c6:ab:74:00:a1:19:a9:de:ba:85:8b:95:af:68: 51:8c:62:71:1d:99:7e:04:c9:b9:2c:5d:bd:c0:88: ce:67:a7:2e:bc:0a:0a:01:76:ba:19:8e:59:c0:d1: 27:b3:48:31:04:32:63:7d:db:df:6e:8b:f9:4e:00: 73:dd:a8:fa:15:1e:39:1c:f6:b4:0f:60:31:6f:d0: 1e:ee:30:0a:3f:49:58:78:b9:5c:21:15:bf:2c:21: b0:9e:18:76:94:8f:21:00:bc:f7:f3:bd:65:77:cc: 39:8e:ed:6c:27:8d:a2:5b:c1:70:ae:5e:02:4c:91: 87:b4:6c:11:c5:27:e2:38:2a:ef:99:1f:25:bd:71: 0a:3a:c1:55:0d:15:f5:0b:7f:69:bc:b6:de:bc:24: 71:36:16:4b:0a:42:b5:2b:bd:34:68:04:7a:25:57: 95:fd:82:40:49:12:9e:15:65:96:af:f5:62:dc:17: a9:f2:de:19:92:ea:b9:ce:74:86:07:f3:51:f7:10: 02:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BE:CC:F6:AA:85:72:B8:D1:4D:EC:EC:53:6F:D1:64:E4:C0:6A:58 X509v3 Authority Key Identifier: keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:a9:1a:15:4a:75:49:1a:ab:d8:f2:61:88:5b:f8:63:f7:d6: 39:7d:a4:c4:54:e0:a7:76:4f:8b:68:ee:6a:f5:3e:21:bc:95: 35:83:3f:91:5f:cc:b3:c9:e3:29:b7:11:04:70:cb:09:49:f4: ff:4e:99:f3:dc:68:db:dd:ab:d8:13:56:09:6b:bf:97:a5:17: 55:a5:3b:b5:37:0c:60:ad:d8:89:7f:fd:13:1a:57:a7:16:64: 28:8c:98:95:c2:45:d1:87:1b:bd:3f:fc:cf:4b:96:d6:97:d3: 18:c7:f6:f0:bc:40:8b:16:d5:52:38:2c:9d:b8:01:89:3b:f3: 4c:0c:25:f1:4e:c6:2e:53:cf:75:6b:e0:de:65:5b:d1:92:33: 8f:53:58:02:69:44:f2:13:b1:7c:4c:32:f9:ef:9a:d1:cc:75: 4a:11:2c:12:d2:78:78:9f:71:f9:9b:3c:af:f2:14:ce:6a:98: cf:e7:ca:cd:d3:d3:89:f3:33:63:21:3b:2c:26:43:82:3a:b8: ce:ba:61:8b:8b:f7:ae:47:bf:e8:eb:6d:d1:7b:3d:46:d6:07: 35:55:69:da:bf:04:c8:89:95:92:c2:05:b6:14:2a:5d:1b:5d: 2b:80:a8:5a:06:49:bb:8d:67:b8:ee:cf:56:70:e6:c7:22:90: fc:90:55:88 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUILAubDZkD5ijrbQMMpMFGvzXhnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRhMzIxNWFiZmE0NjIxZDU3NzA5ZjgzOGE5MjgwMWYy ZTkwZGRmZTAeFw0yNjA5MjMwNzQ1NDlaFw0yNjA5MjQwOTMyNDlaMDMxMTAvBgNV BAMTKEQyQkVDQ0Y2QUE4NTcyQjhEMTRERUNFQzUzNkZEMTY0RTRDMDZBNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVoH0iM7i5TqJXHp7X5odNOkJa dSEIXSwC5UDTxGC9/jPz7iV5xtOGBAmxuY2Xyi6WhWKyWuxqjrL87nrGq3QAoRmp 3rqFi5WvaFGMYnEdmX4EybksXb3AiM5npy68CgoBdroZjlnA0SezSDEEMmN9299u i/lOAHPdqPoVHjkc9rQPYDFv0B7uMAo/SVh4uVwhFb8sIbCeGHaUjyEAvPfzvWV3 zDmO7WwnjaJbwXCuXgJMkYe0bBHFJ+I4Ku+ZHyW9cQo6wVUNFfULf2m8tt68JHE2 FksKQrUrvTRoBHolV5X9gkBJEp4VZZav9WLcF6ny3hmS6rnOdIYH81H3EAJTAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU0r7M9qqFcrjRTezsU2/RZOTAalgwHwYDVR0j BBgwFoAUXaMhWr+kYh1XcJ+DipKAHy6Q3f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYyNDU2N2ItN2E3NC00YzFmLWFhODUtZGQyNGFmNzNj Y2JiLzAvNURBMzIxNUFCRkE0NjIxRDU3NzA5RjgzOEE5MjgwMUYyRTkwRERGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hhTWhXci1rWWgxWGNKLURpcEtBSHk2 UTNmNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjI0NTY3Yi03 YTc0LTRjMWYtYWE4NS1kZDI0YWY3M2NjYmIvMC81REEzMjE1QUJGQTQ2MjFENTc3 MDlGODM4QTkyODAxRjJFOTBEREZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6kaFUp1SRqr2PJhiFv4 Y/fWOX2kxFTgp3ZPi2juavU+IbyVNYM/kV/Ms8njKbcRBHDLCUn0/06Z89xo292r 2BNWCWu/l6UXVaU7tTcMYK3YiX/9ExpXpxZkKIyYlcJF0YcbvT/8z0uW1pfTGMf2 8LxAixbVUjgsnbgBiTvzTAwl8U7GLlPPdWvg3mVb0ZIzj1NYAmlE8hOxfEwy+e+a 0cx1ShEsEtJ4eJ9x+Zs8r/IUzmqYz+fKzdPTifMzYyE7LCZDgjq4zrphi4v3rke/ 6Ott0Xs9RtYHNVVp2r8EyImVksIFthQqXRtdK4CoWgZJu41nuO7PVnDmxyKQ/JBV iA== -----END CERTIFICATE-----Generated at Wed Sep 23 19:37:36 2026 by rpki-client