$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft File: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft (raw, json) Hash identifier: qczMFNKKHv8OESBpHd78W9EpA3AGkZ7XD8nsTKSl8L4= Subject key identifier: 69:B1:22:CF:6D:60:CB:6F:68:7B:3F:A7:FE:4B:0D:15:64:D1:9E:3E Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE Certificate issuer: /CN=5da3215abfa4621d57709f838a92801f2e90ddfe Certificate serial: 68D87794D0F9494F6C7A6BE8202874BEC2450020 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft Manifest number: 068A Signing time: Thu 23 Jul 2026 22:59:53 +0000 Manifest this update: Thu 23 Jul 2026 22:54:53 +0000 Manifest next update: Sat 25 Jul 2026 01:41:53 +0000 Files and hashes: 1: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl (hash: WkgdxCr8pJLJIcEoP2Hk93rToSmrDjRG3XB/YnWQy64=) 2: 34352e38312e35382e302f32342d3234203d3e20323039323432.roa (hash: UKvcqUxUrgd2F0qduNt/9nJuPUaDtCItgdXC0fI9BhQ=) 3: 34352e38312e35362e302f32332d3234203d3e20383334.roa (hash: Owft5MlrXPzDCqAtIj6Xho5F1QHToynJvYlpIsxaEgQ=) 4: 34352e38312e35392e302f32342d3234203d3e20323132333834.roa (hash: Z55LDvJNhjuOlIMhPU51UoeT0VK3qlu4pE/EHJdIaDE=) 5: 34352e38312e35382e302f32342d3234203d3e203133333335.roa (hash: q1odFkTeiB/pBEbWg5JpQkAxpmrH9S0QmR2/CtllItc=) 6: 34352e38312e35392e302f32342d3234203d3e20323131343339.roa (hash: PzQrEpsLL9icV7+wAMJ22TsUek+9+7dTOPFgPD6vtOM=) 7: 326130393a643634303a3a2f32392d3239203d3e20313938333435.roa (hash: 2ZJoizA2XrGcopsLwhs8oaMaqFtkP0G9iClmvxEJgnM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:d8:77:94:d0:f9:49:4f:6c:7a:6b:e8:20:28:74:be:c2:45:00:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe Validity Not Before: Jul 23 22:54:53 2026 GMT Not After : Jul 25 01:41:53 2026 GMT Subject: CN=69B122CF6D60CB6F687B3FA7FE4B0D1564D19E3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:76:02:86:9b:27:0f:bf:cc:3b:34:6e:28:2c: 59:8e:41:2c:f5:f0:ef:02:9e:b3:90:6e:07:61:59: fb:61:c1:dc:ac:76:75:22:b0:2b:6b:29:9d:dc:40: 29:43:46:42:f1:01:f5:d6:18:69:3e:9f:b1:e2:95: 67:e8:94:e7:30:23:13:2b:ef:39:09:7b:13:09:be: 2c:81:09:35:6e:a1:4c:77:86:bb:9d:ab:1e:14:35: d4:5c:d3:fc:5b:fd:d7:fc:16:ab:5e:01:74:7b:02: ed:1e:db:48:97:63:32:56:cf:54:3c:58:fb:82:e0: 2f:1d:cf:6f:2f:cd:cc:ae:45:2f:0f:4c:03:af:67: 6b:16:26:6b:57:3e:8c:8b:7a:5b:86:39:c9:d6:82: bd:bd:2d:55:ff:a5:64:bf:69:4f:e1:a6:94:c4:b4: 54:cc:18:32:20:25:16:40:af:01:79:80:4d:62:f1: 58:8b:47:18:d3:54:d8:9a:0a:7e:e1:15:19:d8:01: b0:a2:e6:ee:fe:b3:1d:cb:44:cb:31:bc:7e:87:f5: 80:21:cb:fc:bf:08:9e:99:a3:72:9d:86:ca:e8:d6: ca:61:06:24:02:73:7a:2e:97:a1:6f:2b:f7:e1:1d: 2c:67:90:56:cf:f9:dd:e9:37:01:44:4a:e7:b7:7e: c4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B1:22:CF:6D:60:CB:6F:68:7B:3F:A7:FE:4B:0D:15:64:D1:9E:3E X509v3 Authority Key Identifier: keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:45:9c:b5:96:64:96:7c:23:84:f5:71:54:c1:89:5c:1f:fa: c0:41:6a:bd:72:21:a4:8d:c9:72:df:96:2e:ee:eb:70:e8:4a: d3:cf:f4:ae:0c:51:3f:34:9a:8e:31:5b:b4:9b:e0:0d:50:dc: 2b:f4:86:fa:df:fe:98:77:08:d7:dc:72:dc:93:39:ed:89:6a: 79:8f:92:9e:aa:d2:c2:70:7c:39:0d:9d:70:e2:4e:54:90:77: cf:77:25:1d:7a:d9:62:08:30:20:05:ba:26:68:4d:04:b9:43: db:6f:3b:4a:3d:1e:bb:64:72:5f:f5:00:2a:99:71:7d:75:3d: e0:da:78:23:37:7a:90:f9:a7:4b:ad:33:60:83:20:e4:37:29: c4:67:86:0c:4e:f0:fc:3e:ab:6c:5a:7f:f9:38:5b:96:2a:d8: 0e:9c:2d:c1:92:cf:74:f3:c5:07:e1:67:2a:19:89:1d:14:91: e9:34:26:a6:5d:44:20:c1:ba:77:f4:8d:47:5f:f1:09:34:6b: a1:d2:3f:2c:0c:fa:f8:20:2e:45:37:77:32:08:ff:0f:a0:f9: d5:4d:e2:73:ba:c5:1a:71:ce:c6:f3:da:40:01:0c:35:17:94: 34:bd:e6:df:5b:c9:34:6e:66:fe:a7:46:c1:75:91:b5:ca:41: f4:b3:dc:6e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUaNh3lND5SU9semvoICh0vsJFACAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRhMzIxNWFiZmE0NjIxZDU3NzA5ZjgzOGE5MjgwMWYy ZTkwZGRmZTAeFw0yNjA3MjMyMjU0NTNaFw0yNjA3MjUwMTQxNTNaMDMxMTAvBgNV BAMTKDY5QjEyMkNGNkQ2MENCNkY2ODdCM0ZBN0ZFNEIwRDE1NjREMTlFM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXdgKGmycPv8w7NG4oLFmOQSz1 8O8CnrOQbgdhWfthwdysdnUisCtrKZ3cQClDRkLxAfXWGGk+n7HilWfolOcwIxMr 7zkJexMJviyBCTVuoUx3hrudqx4UNdRc0/xb/df8FqteAXR7Au0e20iXYzJWz1Q8 WPuC4C8dz28vzcyuRS8PTAOvZ2sWJmtXPoyLeluGOcnWgr29LVX/pWS/aU/hppTE tFTMGDIgJRZArwF5gE1i8ViLRxjTVNiaCn7hFRnYAbCi5u7+sx3LRMsxvH6H9YAh y/y/CJ6Zo3Kdhsro1sphBiQCc3oul6FvK/fhHSxnkFbP+d3pNwFESue3fsSrAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUabEiz21gy29oez+n/ksNFWTRnj4wHwYDVR0j BBgwFoAUXaMhWr+kYh1XcJ+DipKAHy6Q3f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYyNDU2N2ItN2E3NC00YzFmLWFhODUtZGQyNGFmNzNj Y2JiLzAvNURBMzIxNUFCRkE0NjIxRDU3NzA5RjgzOEE5MjgwMUYyRTkwRERGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hhTWhXci1rWWgxWGNKLURpcEtBSHk2 UTNmNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjI0NTY3Yi03 YTc0LTRjMWYtYWE4NS1kZDI0YWY3M2NjYmIvMC81REEzMjE1QUJGQTQ2MjFENTc3 MDlGODM4QTkyODAxRjJFOTBEREZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANEWctZZklnwjhPVxVMGJ XB/6wEFqvXIhpI3Jct+WLu7rcOhK08/0rgxRPzSajjFbtJvgDVDcK/SG+t/+mHcI 19xy3JM57YlqeY+SnqrSwnB8OQ2dcOJOVJB3z3clHXrZYggwIAW6JmhNBLlD2287 Sj0eu2RyX/UAKplxfXU94Np4Izd6kPmnS60zYIMg5DcpxGeGDE7w/D6rbFp/+Thb lirYDpwtwZLPdPPFB+FnKhmJHRSR6TQmpl1EIMG6d/SNR1/xCTRrodI/LAz6+CAu RTd3Mgj/D6D51U3ic7rFGnHOxvPaQAEMNReUNL3m31vJNG5m/qdGwXWRtcpB9LPc bg== -----END CERTIFICATE-----Generated at Fri Jul 24 02:58:56 2026 by rpki-client