$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft File: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft (raw, json) Hash identifier: MJ8tQ0OakBcz8QI0yQGWcBlEV6lrx7xdjvDjm7qCMiI= Subject key identifier: 10:FD:03:A9:52:80:DE:AD:9A:22:F0:69:B2:79:26:0B:07:13:07:6F Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE Certificate issuer: /CN=5da3215abfa4621d57709f838a92801f2e90ddfe Certificate serial: 302ADDBE17322797421F2A21C481D4836FB37F97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft Manifest number: 072B Signing time: Sun 15 Nov 2026 12:15:21 +0000 Manifest this update: Sun 15 Nov 2026 12:10:21 +0000 Manifest next update: Mon 16 Nov 2026 14:46:21 +0000 Files and hashes: 1: 34352e38312e35392e302f32342d3234203d3e20323132333834.roa (hash: 9PzlLnPpvyZA7rJY6HgqfVgDM2u6lMeRC6jdfQFzF4g=) 2: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl (hash: SKbrDBgqmWDJX8/wHXXqvEp/0SjCM6m3kb50JNvE2z4=) 3: 326130393a643634303a3a2f32392d3239203d3e20313938333435.roa (hash: +u58M8LV4FFm4aqeyjqDimT0CAwqoBszKttzrEWSjLU=) 4: 34352e38312e35382e302f32342d3234203d3e20323039323432.roa (hash: UKvcqUxUrgd2F0qduNt/9nJuPUaDtCItgdXC0fI9BhQ=) 5: 34352e38312e35392e302f32342d3234203d3e20323131343339.roa (hash: EJJDStzyjRxnAT8gwNp4VLbjswmWGARKzckLhnVkE8Q=) 6: 34352e38312e35362e302f32332d3234203d3e20383334.roa (hash: nfXgpaZNd9mB0VGcuHMjgf9MpEVsciSQ6u+pbuPd+sY=) 7: 34352e38312e35382e302f32342d3234203d3e203133333335.roa (hash: q1odFkTeiB/pBEbWg5JpQkAxpmrH9S0QmR2/CtllItc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:2a:dd:be:17:32:27:97:42:1f:2a:21:c4:81:d4:83:6f:b3:7f:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe Validity Not Before: Nov 15 12:10:21 2026 GMT Not After : Nov 16 14:46:21 2026 GMT Subject: CN=10FD03A95280DEAD9A22F069B279260B0713076F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:99:3d:34:13:b8:c6:0c:78:02:44:1d:48:6a: d7:a6:aa:45:33:d1:40:58:a9:24:22:6c:38:7d:89: d2:f4:7c:72:08:de:e6:8d:ae:8e:1a:67:2c:80:9d: 25:c6:9d:d1:f5:8b:b2:a9:31:4b:f3:77:06:d4:fb: 9b:d0:f6:f3:b6:98:84:cf:76:48:4d:e1:ba:38:8e: 65:b7:a4:69:d6:be:db:c5:7d:22:03:79:2c:e1:45: c2:fd:29:04:18:14:6f:3d:79:2f:fc:42:73:41:1e: 5a:91:23:19:ad:63:b5:75:bd:81:9a:20:0f:ef:de: d9:8b:15:2a:fb:40:5b:c3:05:b3:d0:60:d1:a7:cf: 53:63:0d:fd:a0:91:b1:5a:e5:c8:43:1e:18:71:51: 59:01:5a:4b:05:47:12:54:8f:ce:41:92:18:4e:30: 26:52:b2:80:4c:f7:77:1a:5d:30:fb:24:c6:06:b7: e1:7f:fe:2c:da:ba:78:2a:94:24:9c:d7:f5:dc:67: fa:f9:1a:69:92:2a:72:05:d4:d3:37:10:0c:dd:52: 4e:0e:19:c4:c3:46:df:d4:a1:75:90:f5:a5:62:d3: f1:d4:95:f6:22:7a:d8:89:38:a6:24:ff:14:f5:5f: 4f:05:8e:c7:b9:4b:27:18:7f:51:8b:5e:e6:42:a9: e9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:FD:03:A9:52:80:DE:AD:9A:22:F0:69:B2:79:26:0B:07:13:07:6F X509v3 Authority Key Identifier: keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:56:79:61:03:3b:f8:ee:54:a9:c8:e7:54:a7:22:fe:e1:aa: 21:be:d2:88:d5:ef:74:30:6a:75:ad:18:93:f5:c7:41:61:26: a9:94:ad:31:9a:44:90:94:4b:10:b8:ee:43:c7:8c:8e:26:97: f3:00:59:db:04:a7:eb:70:62:3b:a3:3e:1a:21:90:c3:8c:f7: d0:d3:e9:43:4c:d7:9b:2c:49:a1:24:33:7b:57:ab:91:ca:8e: 8a:bd:ce:11:0a:2d:c6:85:bb:c2:3b:e4:19:12:a3:80:8a:4b: c6:14:64:43:42:d7:0f:f1:9c:58:27:37:e4:48:e9:9d:4f:77: 9a:ee:51:af:f3:b7:8c:13:ac:07:1e:ba:6b:1c:8d:bc:20:16: e0:c7:2f:23:27:3a:b1:58:34:a9:ff:34:c0:24:52:5c:eb:c3: 17:8d:fc:a0:a1:52:e7:99:0b:35:0d:a1:46:58:e2:28:64:29: c9:4c:73:62:18:f3:da:30:16:6b:66:d7:07:42:23:05:5e:95: 7a:98:ca:1d:d7:bb:19:d4:91:fd:93:7a:55:bc:a6:58:43:ee: f8:b5:27:c7:4f:73:2e:f5:c3:ba:9d:7a:b9:74:9f:07:a9:b2: b8:0e:44:58:f8:79:c4:47:a2:1d:c5:ed:8b:cf:c1:c7:e3:c9: dd:52:91:d7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUMCrdvhcyJ5dCHyohxIHUg2+zf5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRhMzIxNWFiZmE0NjIxZDU3NzA5ZjgzOGE5MjgwMWYy ZTkwZGRmZTAeFw0yNjExMTUxMjEwMjFaFw0yNjExMTYxNDQ2MjFaMDMxMTAvBgNV BAMTKDEwRkQwM0E5NTI4MERFQUQ5QTIyRjA2OUIyNzkyNjBCMDcxMzA3NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVmT00E7jGDHgCRB1IatemqkUz 0UBYqSQibDh9idL0fHII3uaNro4aZyyAnSXGndH1i7KpMUvzdwbU+5vQ9vO2mITP dkhN4bo4jmW3pGnWvtvFfSIDeSzhRcL9KQQYFG89eS/8QnNBHlqRIxmtY7V1vYGa IA/v3tmLFSr7QFvDBbPQYNGnz1NjDf2gkbFa5chDHhhxUVkBWksFRxJUj85BkhhO MCZSsoBM93caXTD7JMYGt+F//izaungqlCSc1/XcZ/r5GmmSKnIF1NM3EAzdUk4O GcTDRt/UoXWQ9aVi0/HUlfYietiJOKYk/xT1X08Fjse5SycYf1GLXuZCqekNAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUEP0DqVKA3q2aIvBpsnkmCwcTB28wHwYDVR0j BBgwFoAUXaMhWr+kYh1XcJ+DipKAHy6Q3f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYyNDU2N2ItN2E3NC00YzFmLWFhODUtZGQyNGFmNzNj Y2JiLzAvNURBMzIxNUFCRkE0NjIxRDU3NzA5RjgzOEE5MjgwMUYyRTkwRERGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hhTWhXci1rWWgxWGNKLURpcEtBSHk2 UTNmNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjI0NTY3Yi03 YTc0LTRjMWYtYWE4NS1kZDI0YWY3M2NjYmIvMC81REEzMjE1QUJGQTQ2MjFENTc3 MDlGODM4QTkyODAxRjJFOTBEREZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN1Z5YQM7+O5UqcjnVKci /uGqIb7SiNXvdDBqda0Yk/XHQWEmqZStMZpEkJRLELjuQ8eMjiaX8wBZ2wSn63Bi O6M+GiGQw4z30NPpQ0zXmyxJoSQze1erkcqOir3OEQotxoW7wjvkGRKjgIpLxhRk Q0LXD/GcWCc35EjpnU93mu5Rr/O3jBOsBx66axyNvCAW4McvIyc6sVg0qf80wCRS XOvDF438oKFS55kLNQ2hRljiKGQpyUxzYhjz2jAWa2bXB0IjBV6VepjKHde7GdSR /ZN6VbymWEPu+LUnx09zLvXDup16uXSfB6myuA5EWPh5xEeiHcXti8/Bx+PJ3VKR 1w== -----END CERTIFICATE-----Generated at Sun Nov 15 16:24:20 2026 by rpki-client