$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft File: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft (raw, json) Hash identifier: 9FLDmSRRioy2u959XuKIj16Pobky4aEXv+InAVxfWbk= Subject key identifier: ED:EF:18:F3:69:EC:1C:E8:77:5E:42:8B:1A:C9:AA:0E:08:26:D9:20 Authority key identifier: 5E:B2:E5:DA:D0:C6:99:6D:0A:80:A7:B9:0F:3A:2A:A6:0F:B1:A7:AC Certificate issuer: /CN=5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC Certificate serial: 4EE666720AB27F736A0AAEC699AF577AB6588663 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft Manifest number: 0198 Signing time: Tue 12 May 2026 18:58:49 +0000 Manifest this update: Tue 12 May 2026 18:53:49 +0000 Manifest next update: Wed 13 May 2026 20:04:49 +0000 Files and hashes: 1: 326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa (hash: hR947RLO80MjAy1fUiecS1oEpdE+fjwemP68Afa7Bvc=) 2: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl (hash: mVYIsKH2bBkiWDhD5fJ5f3SdzUL6Oqlngx5g7VhlWUE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:e6:66:72:0a:b2:7f:73:6a:0a:ae:c6:99:af:57:7a:b6:58:86:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC Validity Not Before: May 12 18:53:49 2026 GMT Not After : May 13 20:04:49 2026 GMT Subject: CN=EDEF18F369EC1CE8775E428B1AC9AA0E0826D920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e8:1f:af:aa:9f:ce:8a:b2:e2:9e:02:f5:dc: 3f:18:72:3a:53:d6:01:7b:b5:4f:51:90:32:13:63: 7b:44:30:27:e4:de:9c:ad:70:38:6a:0a:7e:3a:e0: 2c:da:cc:2a:ac:5e:26:0b:22:8c:a8:7a:e8:70:4f: 56:4b:25:94:e1:41:32:ec:32:1f:a1:76:3f:a0:3e: f2:ab:fe:10:b8:71:23:b4:54:31:37:d3:48:3c:0c: 5a:15:1a:e6:e2:8f:7c:40:ad:73:94:fe:32:d3:8a: d8:42:ea:31:da:8d:0e:51:e8:c8:22:3c:20:43:0a: 4c:28:0f:cc:03:cd:7d:68:43:ea:2a:2d:05:e6:b7: 33:dc:12:ef:79:2e:61:2f:a2:60:2c:d9:75:6b:34: 31:ff:1e:0a:35:9d:43:22:9e:45:00:5a:9b:81:7e: ec:13:d8:a2:82:8b:99:ee:09:ce:b6:3d:0b:fa:79: 54:bd:68:05:58:27:54:77:bc:e9:17:82:08:90:f3: 24:55:bc:16:ef:9e:42:cf:ae:a2:4d:dd:bb:09:92: 89:b2:68:4e:a5:07:3a:f6:17:ee:98:54:bb:22:44: 7b:1f:0a:c3:1a:bc:19:6b:80:3e:ff:bc:17:b1:ef: 87:b4:61:78:a1:50:0a:0b:ed:6b:a0:f2:2d:fa:b4: 5f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:EF:18:F3:69:EC:1C:E8:77:5E:42:8B:1A:C9:AA:0E:08:26:D9:20 X509v3 Authority Key Identifier: keyid:5E:B2:E5:DA:D0:C6:99:6D:0A:80:A7:B9:0F:3A:2A:A6:0F:B1:A7:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:26:0c:a0:a3:25:3b:a1:09:31:8c:54:c3:7d:f4:c4:cf:18: 56:e3:88:a3:24:e1:3f:23:7d:6a:0d:e3:17:31:96:d6:2e:b2: 7c:b6:06:6b:c4:68:8c:ee:a7:7e:be:d6:cb:be:34:be:49:b2: fc:5a:35:ab:4d:b6:ff:ff:a5:bf:4b:bf:1c:f5:79:76:71:3f: 5f:e1:58:70:bc:7f:7f:c2:a4:e5:65:a6:d6:35:43:8a:ed:28: e0:30:1c:e9:84:90:58:19:85:62:c3:dc:a1:0d:1d:b6:56:23: 1d:b3:47:bd:bf:94:1d:44:71:9a:03:43:6a:3d:01:05:db:4b: 61:f3:41:ff:1c:d1:d1:31:72:fb:8f:21:4a:78:74:88:90:f8: bf:99:2c:c4:ea:cb:23:1e:1c:60:a1:c6:d3:cc:e9:60:52:75: 6e:bf:88:c0:48:ea:5d:a8:c8:95:e3:cb:86:31:96:46:35:4c: e6:f1:72:7a:cd:fa:21:1f:b1:b5:96:cc:0a:f8:8d:79:fe:77: ab:ba:0f:2b:93:f8:0c:bc:37:27:7e:3a:44:d9:7d:d2:fb:5a: 72:11:3f:07:b9:87:c3:c0:e9:43:55:5e:f6:97:fc:47:9e:a3: 0c:ee:49:bf:e0:7d:6a:43:52:87:e9:e2:97:9b:8a:05:43:ef: c2:e5:c1:ea -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUTuZmcgqyf3NqCq7Gma9XerZYhmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVCMkU1REFEMEM2OTk2RDBBODBBN0I5MEYzQTJBQTYw RkIxQTdBQzAeFw0yNjA1MTIxODUzNDlaFw0yNjA1MTMyMDA0NDlaMDMxMTAvBgNV BAMTKEVERUYxOEYzNjlFQzFDRTg3NzVFNDI4QjFBQzlBQTBFMDgyNkQ5MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+6B+vqp/OirLingL13D8YcjpT 1gF7tU9RkDITY3tEMCfk3pytcDhqCn464CzazCqsXiYLIoyoeuhwT1ZLJZThQTLs Mh+hdj+gPvKr/hC4cSO0VDE300g8DFoVGubij3xArXOU/jLTithC6jHajQ5R6Mgi PCBDCkwoD8wDzX1oQ+oqLQXmtzPcEu95LmEvomAs2XVrNDH/Hgo1nUMinkUAWpuB fuwT2KKCi5nuCc62PQv6eVS9aAVYJ1R3vOkXggiQ8yRVvBbvnkLPrqJN3bsJkomy aE6lBzr2F+6YVLsiRHsfCsMavBlrgD7/vBex74e0YXihUAoL7Wug8i36tF8zAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU7e8Y82nsHOh3XkKLGsmqDggm2SAwHwYDVR0j BBgwFoAUXrLl2tDGmW0KgKe5Dzoqpg+xp6wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVl YjdkLzQvNUVCMkU1REFEMEM2OTk2RDBBODBBN0I5MEYzQTJBQTYwRkIxQTdBQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC81RUIyRTVEQUQwQzY5OTZEMEE4MEE3Qjkw RjNBMkFBNjBGQjFBN0FDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M5OTI2NWVmLTIyYTktNDEwMC1hMjNkLTUxYTlkOWZlZWI3ZC80LzVFQjJFNURB RDBDNjk5NkQwQTgwQTdCOTBGM0EyQUE2MEZCMUE3QUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCCJgyg oyU7oQkxjFTDffTEzxhW44ijJOE/I31qDeMXMZbWLrJ8tgZrxGiM7qd+vtbLvjS+ SbL8WjWrTbb//6W/S78c9Xl2cT9f4VhwvH9/wqTlZabWNUOK7SjgMBzphJBYGYVi w9yhDR22ViMds0e9v5QdRHGaA0NqPQEF20th80H/HNHRMXL7jyFKeHSIkPi/mSzE 6ssjHhxgocbTzOlgUnVuv4jASOpdqMiV48uGMZZGNUzm8XJ6zfohH7G1lswK+I15 /nerug8rk/gMvDcnfjpE2X3S+1pyET8HuYfDwOlDVV72l/xHnqMM7km/4H1qQ1KH 6eKXm4oFQ+/C5cHq -----END CERTIFICATE-----Generated at Wed May 13 00:15:36 2026 by rpki-client