$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft File: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft (raw, json) Hash identifier: antPxUm2UFWoSicB3aQpSNwxNvDkPJb0YllB6IlHSXk= Subject key identifier: 86:1B:10:2D:01:13:11:B2:2A:24:DE:E4:62:5D:6C:C2:1C:89:3F:D4 Authority key identifier: 5E:B2:E5:DA:D0:C6:99:6D:0A:80:A7:B9:0F:3A:2A:A6:0F:B1:A7:AC Certificate issuer: /CN=5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC Certificate serial: 6DB4AD4AFFD40F8F5BEEFF0DDB137F8DC0A8D32A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft Manifest number: 01F0 Signing time: Thu 23 Jul 2026 15:45:00 +0000 Manifest this update: Thu 23 Jul 2026 15:40:00 +0000 Manifest next update: Fri 24 Jul 2026 15:53:00 +0000 Files and hashes: 1: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl (hash: j8Kr6Vjbj/84dB1oDvtNfJ4Sqc+I29JlBvu3K2/tbhg=) 2: 326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa (hash: hR947RLO80MjAy1fUiecS1oEpdE+fjwemP68Afa7Bvc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 15:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:b4:ad:4a:ff:d4:0f:8f:5b:ee:ff:0d:db:13:7f:8d:c0:a8:d3:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC Validity Not Before: Jul 23 15:40:00 2026 GMT Not After : Jul 24 15:53:00 2026 GMT Subject: CN=861B102D011311B22A24DEE4625D6CC21C893FD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ae:0c:50:c2:50:00:24:35:a0:ba:be:d3:16: 5b:e5:f6:1d:6d:dc:37:d3:20:62:02:94:27:25:f9: 98:4c:9a:44:94:a7:9a:1b:d2:76:0b:0c:52:a2:1c: 0c:53:72:a6:73:f4:61:c4:80:8e:65:00:a9:4a:6d: 00:44:95:9a:bb:7e:d5:23:a3:32:51:54:89:11:e5: c8:03:5d:31:bf:65:53:10:12:89:22:be:93:4c:ee: 38:59:d3:4c:b9:8f:c2:ba:da:ef:4e:c8:89:8d:03: de:27:cd:c9:ae:c4:e7:cd:ad:65:1f:8a:ff:1f:67: 06:94:8f:63:3c:e9:3a:92:49:26:34:10:eb:c9:f3: ce:1a:b1:0b:d5:35:d4:1a:79:d0:c6:80:f6:a5:6c: 13:24:12:26:47:16:c7:7a:f2:f7:b2:9a:80:84:56: 8d:0a:9a:1a:0e:cd:c4:ea:c3:db:01:50:c8:ef:c7: 82:ec:75:d5:3c:04:d9:ff:4a:b4:83:ee:1d:92:6c: 31:c8:28:63:07:9e:42:7b:fd:9c:65:f6:a3:68:d0: 9c:06:29:14:53:c4:80:51:cc:62:5f:7c:05:c5:e4: 5c:70:bc:70:3a:9f:f8:4e:8e:b2:36:c0:26:dc:41: 02:ce:b8:f8:2a:0f:91:e9:0f:83:0b:f3:da:40:21: c9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1B:10:2D:01:13:11:B2:2A:24:DE:E4:62:5D:6C:C2:1C:89:3F:D4 X509v3 Authority Key Identifier: keyid:5E:B2:E5:DA:D0:C6:99:6D:0A:80:A7:B9:0F:3A:2A:A6:0F:B1:A7:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:b3:ff:c4:8d:a5:66:df:13:3e:0b:8e:38:bd:51:91:50:df: 2a:19:a1:89:80:21:79:0c:25:b9:8d:58:7b:c1:e6:16:e9:78: c0:c0:75:34:da:83:21:5c:43:10:9c:4a:60:0c:b2:c2:0f:86: 23:d0:0b:6d:02:3b:19:de:d6:eb:2f:ba:0c:d2:17:d4:2e:b7: db:f0:84:d8:e5:37:75:15:50:88:1c:e3:e7:c6:a7:e1:a2:4a: cf:2d:47:b8:29:49:95:8b:99:f4:32:e2:cf:62:fe:76:f2:9c: 94:61:84:36:9b:b2:68:bc:60:8e:01:5d:4a:83:aa:87:99:91: 21:f2:4c:8d:e0:9d:68:60:c7:b5:51:15:e2:7a:e8:62:f2:e0: 46:9e:6a:a7:fe:e8:ed:65:29:77:82:ff:14:45:05:54:a4:9d: d2:65:2c:54:d0:09:23:3c:cc:7c:3d:eb:c9:5d:a2:cf:23:f9: 2f:78:57:30:a8:8f:83:3f:56:03:42:82:9e:69:7d:d0:7c:7e: 34:53:f0:8a:44:51:d7:81:81:7e:89:87:ac:81:cb:1e:f6:6d: 89:59:9d:df:a6:07:b2:64:b8:e4:96:10:1a:83:3a:94:cf:f2: 4a:2e:c3:a8:be:d9:f3:2c:1e:66:6c:f7:32:4b:8f:59:af:c7: 87:db:48:5d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUbbStSv/UD49b7v8N2xN/jcCo0yowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVCMkU1REFEMEM2OTk2RDBBODBBN0I5MEYzQTJBQTYw RkIxQTdBQzAeFw0yNjA3MjMxNTQwMDBaFw0yNjA3MjQxNTUzMDBaMDMxMTAvBgNV BAMTKDg2MUIxMDJEMDExMzExQjIyQTI0REVFNDYyNUQ2Q0MyMUM4OTNGRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClrgxQwlAAJDWgur7TFlvl9h1t 3DfTIGIClCcl+ZhMmkSUp5ob0nYLDFKiHAxTcqZz9GHEgI5lAKlKbQBElZq7ftUj ozJRVIkR5cgDXTG/ZVMQEokivpNM7jhZ00y5j8K62u9OyImNA94nzcmuxOfNrWUf iv8fZwaUj2M86TqSSSY0EOvJ884asQvVNdQaedDGgPalbBMkEiZHFsd68veymoCE Vo0KmhoOzcTqw9sBUMjvx4LsddU8BNn/SrSD7h2SbDHIKGMHnkJ7/Zxl9qNo0JwG KRRTxIBRzGJffAXF5FxwvHA6n/hOjrI2wCbcQQLOuPgqD5HpD4ML89pAIclDAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUhhsQLQETEbIqJN7kYl1swhyJP9QwHwYDVR0j BBgwFoAUXrLl2tDGmW0KgKe5Dzoqpg+xp6wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVl YjdkLzQvNUVCMkU1REFEMEM2OTk2RDBBODBBN0I5MEYzQTJBQTYwRkIxQTdBQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC81RUIyRTVEQUQwQzY5OTZEMEE4MEE3Qjkw RjNBMkFBNjBGQjFBN0FDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M5OTI2NWVmLTIyYTktNDEwMC1hMjNkLTUxYTlkOWZlZWI3ZC80LzVFQjJFNURB RDBDNjk5NkQwQTgwQTdCOTBGM0EyQUE2MEZCMUE3QUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCas//E jaVm3xM+C444vVGRUN8qGaGJgCF5DCW5jVh7weYW6XjAwHU02oMhXEMQnEpgDLLC D4Yj0AttAjsZ3tbrL7oM0hfULrfb8ITY5Td1FVCIHOPnxqfhokrPLUe4KUmVi5n0 MuLPYv528pyUYYQ2m7JovGCOAV1Kg6qHmZEh8kyN4J1oYMe1URXieuhi8uBGnmqn /ujtZSl3gv8URQVUpJ3SZSxU0AkjPMx8PevJXaLPI/kveFcwqI+DP1YDQoKeaX3Q fH40U/CKRFHXgYF+iYesgcse9m2JWZ3fpgeyZLjklhAagzqUz/JKLsOovtnzLB5m bPcyS49Zr8eH20hd -----END CERTIFICATE-----Generated at Fri Jul 24 03:52:15 2026 by rpki-client