$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft File: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft (raw, json) Hash identifier: 6qa2lHFSWHIwguOva7ack8M971s81xlbZPk5B8E5pvE= Subject key identifier: 43:A0:4F:28:FC:F6:17:A0:E1:9D:4E:DF:8D:75:39:F8:15:41:AF:44 Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Certificate serial: 6A48B8C2662230EF1F586FF97B71653F07718FF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft Manifest number: 02A9 Signing time: Tue 12 May 2026 05:07:07 +0000 Manifest this update: Tue 12 May 2026 05:02:07 +0000 Manifest next update: Wed 13 May 2026 08:39:07 +0000 Files and hashes: 1: 326131343a333863303a343a3a2f34382d3438203d3e20333936303634.roa (hash: c/SHLHo2u//fub298bFboq1gpoyciy9cj/euJmiNfvQ=) 2: 3130332e3134392e3136382e302f32342d3234203d3e20323135323438.roa (hash: ePbF2vyH2L99pKVYNfid/LRmeBkCDC+g6PeSrnBn10Y=) 3: 326131343a333863303a3a2f32392d3239203d3e20333936303634.roa (hash: izH2bRAdoHB65ZOfP1RgM/881EkkTABDPPywFSiQ9f4=) 4: 3130332e3134392e3136392e302f32342d3234203d3e203630373831.roa (hash: M972A2zux5bp2vtM/yV/ifXNBlJMRB7g6qDIDzpgNsU=) 5: 326131343a333863303a3130343a3a2f34382d3438203d3e20333936303634.roa (hash: uQC+ycpajw6LG1MwmEH2bQGDaDjqft9mY/Ula5mB0Rs=) 6: 326131343a333863303a313a3a2f34382d3438203d3e20323135323438.roa (hash: hYvWm7RFlZS1l2LX8NsvpkNf0MsxvPiQn7slmgwssck=) 7: 326131343a333863303a323a3a2f34382d3438203d3e20323135323438.roa (hash: e6DNGKmUmYh4KhA4h67tF7nM55oym+8oQ84yYdEmy64=) 8: 3130332e3134392e3136382e302f32342d3234203d3e20333936303634.roa (hash: R5Epn5BQnUqfS0avyFJajv46KVwt1XNS+Hn4NVwwElQ=) 9: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl (hash: W2EppmwWRmIV1I8Yj+nvwvAbRxwaWCg3mFEyZniZLTA=) 10: 326131343a333863303a333a3a2f34382d3438203d3e20323135323438.roa (hash: rQvL6z8yuqUS7v24/Ra9en3S8KmIgkMtv1rcn8o1sfA=) 11: 326131343a333863303a3130343a3a2f34382d3438203d3e20323135323438.roa (hash: QZeJi0O4ini6QNF1syA5gZ8HehGzsGo0INWd9T4WodA=) 12: 326131343a333863303a323a3a2f34382d3438203d3e20333936303634.roa (hash: b3AvMY9Sl1B0jVsJOJivHhqGlksNlQ/JV9muHKrGSGQ=) 13: 3136372e3130342e35352e302f32342d3234203d3e20323135323936.roa (hash: SV9ucGr+4h+fuaELn2IQUJABWEK0Rjvz/iTGykXuEuY=) 14: 326131343a333863303a333a3a2f34382d3438203d3e20333936303634.roa (hash: RQOZ0GeuB2hc8N96mezhBhXKeCrh7X17R4TSsdmASyE=) 15: 326131343a333863303a343a3a2f34382d3438203d3e20323135323438.roa (hash: WXZZhktlKD9T2nrBzZ0hLrkDPYKvkgJO3m6d5vMac1U=) 16: 326131343a333863303a313a3a2f34382d3438203d3e20333936303634.roa (hash: hT2vS1KxZCIrrbIeX36lXo5PB7z3bFiXrMszQcpSghE=) 17: AS215248.asa (hash: DkcS3cmdltQErLXLkB7mngryjKe15n7TPiy42wbBtNA=) 18: 3139342e3131372e36392e302f32342d3234203d3e20323030353538.roa (hash: bnShsDW1be2bODK39k9j4f1BlMu3O894jpQkGkz2kLA=) 19: 326131343a333863303a3a2f32392d3239203d3e20323135323438.roa (hash: bqsY4FQ10AI29Vxl2YGsNnTvNpFvBsuO3ChiwTJi6QE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 08:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:48:b8:c2:66:22:30:ef:1f:58:6f:f9:7b:71:65:3f:07:71:8f:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Validity Not Before: May 12 05:02:07 2026 GMT Not After : May 13 08:39:07 2026 GMT Subject: CN=43A04F28FCF617A0E19D4EDF8D7539F81541AF44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:89:20:b6:a5:8e:3f:49:07:61:ad:d6:b3:fc: 24:fb:33:3f:dc:d9:ca:e5:7d:25:1d:2e:f9:99:18: 1f:05:17:a0:7d:27:45:0c:c2:fc:55:43:cc:19:6d: 57:9b:17:74:ad:06:0b:e0:b4:ef:85:3c:78:0a:2b: 6b:11:f6:2d:89:51:4e:1a:c3:6c:0c:45:22:96:6c: 71:42:b2:4f:1c:e9:a4:c9:18:cc:b5:fb:2e:77:85: 63:22:0b:aa:93:f0:37:11:b2:f9:1d:a5:02:15:7d: 2d:d1:d9:b7:6f:d2:b9:b4:97:5f:5a:a0:9b:d1:1f: dc:62:c4:8f:8f:4c:cf:19:ad:58:ea:01:f9:74:c2: 4c:e7:15:df:fa:27:2a:7f:53:53:6b:8a:a0:91:ea: 80:c6:66:5b:23:68:c8:b9:7b:d9:f3:55:3f:a7:9a: 98:c2:fa:af:43:44:11:89:90:58:91:c0:5b:36:c9: 60:d6:31:d4:35:6f:6b:3e:7a:56:ff:82:ed:ff:05: 4b:7e:1e:61:16:64:10:c4:26:5a:36:de:6c:3c:c1: e8:32:84:1d:dc:9b:c3:cf:a9:df:31:0f:e5:89:18: ce:75:9b:2c:4a:55:8e:96:1e:26:f5:ae:6d:c6:81: a0:dd:a2:13:55:d9:00:32:a0:9e:a4:9c:4f:e6:d1: 32:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A0:4F:28:FC:F6:17:A0:E1:9D:4E:DF:8D:75:39:F8:15:41:AF:44 X509v3 Authority Key Identifier: keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:9a:ad:d4:1d:3e:48:e7:fd:af:bb:e5:ca:c1:32:77:5c:89: df:f3:1c:b7:fd:d4:1d:eb:0f:41:e6:37:7c:97:9b:8e:d1:53: 80:b7:4e:71:aa:fc:7f:d9:39:c5:00:76:1f:00:6b:d2:c9:3a: d2:12:a5:97:cb:2b:c9:ec:55:7e:3a:3e:81:49:41:e0:82:54: 34:ef:e1:7e:c9:75:ca:ff:e1:03:65:bd:ae:95:54:c8:b5:f0: 2c:ad:c0:ec:d0:e7:72:5c:93:28:9a:a9:75:d6:9e:3c:1e:04: 97:26:73:d3:7e:c1:95:9b:73:1c:b8:0d:ba:31:37:0b:15:32: e0:6e:31:c9:29:d9:9d:01:44:a3:5d:2a:16:22:f4:7c:9d:82: df:f0:66:eb:ce:9b:d1:c4:c3:2d:ac:a4:68:4f:70:e0:6c:e8: f6:64:14:ab:61:2e:23:74:c6:32:ed:5b:fb:21:dd:b4:fe:14: 8b:ab:3f:53:4c:a9:ed:38:f0:be:6e:ed:f7:ce:cf:9d:dd:8d: 30:7d:d3:33:c0:bd:48:74:22:48:55:6f:26:0e:79:97:d8:15: 2b:fb:37:0e:32:af:53:03:73:7d:e6:29:4f:ae:9b:86:32:11: 1d:8c:bb:d3:04:b5:9a:5d:0d:8d:7f:f6:80:e6:73:ca:eb:c2: 5d:94:ac:1e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUaki4wmYiMO8fWG/5e3FlPwdxj/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWNkYzA0YmIyM2VhYTRjZWNjNzkxZGZlMDRiYjAyOGI3 ZTc5N2I2ODAeFw0yNjA1MTIwNTAyMDdaFw0yNjA1MTMwODM5MDdaMDMxMTAvBgNV BAMTKDQzQTA0RjI4RkNGNjE3QTBFMTlENEVERjhENzUzOUY4MTU0MUFGNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOiSC2pY4/SQdhrdaz/CT7Mz/c 2crlfSUdLvmZGB8FF6B9J0UMwvxVQ8wZbVebF3StBgvgtO+FPHgKK2sR9i2JUU4a w2wMRSKWbHFCsk8c6aTJGMy1+y53hWMiC6qT8DcRsvkdpQIVfS3R2bdv0rm0l19a oJvRH9xixI+PTM8ZrVjqAfl0wkznFd/6Jyp/U1NriqCR6oDGZlsjaMi5e9nzVT+n mpjC+q9DRBGJkFiRwFs2yWDWMdQ1b2s+elb/gu3/BUt+HmEWZBDEJlo23mw8wegy hB3cm8PPqd8xD+WJGM51myxKVY6WHib1rm3GgaDdohNV2QAyoJ6knE/m0TJ1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUQ6BPKPz2F6DhnU7fjXU5+BVBr0QwHwYDVR0j BBgwFoAUXNwEuyPqpM7MeR3+BLsCi355e2gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjli N2M0LzAvNUNEQzA0QkIyM0VBQTRDRUNDNzkxREZFMDRCQjAyOEI3RTc5N0I2OC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hOd0V1eVBxcE03TWVSMy1CTHNDaTM1 NWUyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZDE5ZGIyMC00 NjUzLTQ4ZDQtOGZjNC01ODBkMTM2OWI3YzQvMC81Q0RDMDRCQjIzRUFBNENFQ0M3 OTFERkUwNEJCMDI4QjdFNzk3QjY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5qt1B0+SOf9r7vlysEy d1yJ3/Mct/3UHesPQeY3fJebjtFTgLdOcar8f9k5xQB2HwBr0sk60hKll8sryexV fjo+gUlB4IJUNO/hfsl1yv/hA2W9rpVUyLXwLK3A7NDnclyTKJqpddaePB4ElyZz 037BlZtzHLgNujE3CxUy4G4xySnZnQFEo10qFiL0fJ2C3/Bm686b0cTDLaykaE9w 4Gzo9mQUq2EuI3TGMu1b+yHdtP4Ui6s/U0yp7Tjwvm7t987Pnd2NMH3TM8C9SHQi SFVvJg55l9gVK/s3DjKvUwNzfeYpT66bhjIRHYy70wS1ml0NjX/2gOZzyuvCXZSs Hg== -----END CERTIFICATE-----Generated at Tue May 12 21:29:48 2026 by rpki-client