$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft File: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft (raw, json) Hash identifier: kHrblcignaA0Y5BoF/ysmrvzJTCQKZQFI1yWDh20dVQ= Subject key identifier: 67:D3:DD:7F:75:66:67:75:FE:58:08:1C:9A:EB:B3:A6:FB:C8:23:7F Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Certificate serial: 6A7F25E2DD5B83F8EB3B1D701693A9914DC105D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft Manifest number: 025F Signing time: Wed 25 Mar 2026 13:49:07 +0000 Manifest this update: Wed 25 Mar 2026 13:44:07 +0000 Manifest next update: Thu 26 Mar 2026 15:14:07 +0000 Files and hashes: 1: 3130332e3134392e3136382e302f32342d3234203d3e20323135323438.roa (hash: RPFyh+9f4VeLKwhSKFsibkww2V1WrimAJUdSq1OTL10=) 2: AS215248.asa (hash: +7bZg/L1iv45A8Lv9ZnYzCCmE84OHieAnUYCYHDgEBc=) 3: 326131343a333863303a3a2f32392d3239203d3e20333936303634.roa (hash: izH2bRAdoHB65ZOfP1RgM/881EkkTABDPPywFSiQ9f4=) 4: 326131343a333863303a333a3a2f34382d3438203d3e20333936303634.roa (hash: RQOZ0GeuB2hc8N96mezhBhXKeCrh7X17R4TSsdmASyE=) 5: 326131343a333863303a323a3a2f34382d3438203d3e20333936303634.roa (hash: b3AvMY9Sl1B0jVsJOJivHhqGlksNlQ/JV9muHKrGSGQ=) 6: 3130332e3134392e3136392e302f32342d3234203d3e203630373831.roa (hash: M972A2zux5bp2vtM/yV/ifXNBlJMRB7g6qDIDzpgNsU=) 7: 3139342e3131372e36392e302f32342d3234203d3e20323030353538.roa (hash: bnShsDW1be2bODK39k9j4f1BlMu3O894jpQkGkz2kLA=) 8: 326131343a333863303a333a3a2f34382d3438203d3e20323135323438.roa (hash: rQvL6z8yuqUS7v24/Ra9en3S8KmIgkMtv1rcn8o1sfA=) 9: 326131343a333863303a343a3a2f34382d3438203d3e20333936303634.roa (hash: c/SHLHo2u//fub298bFboq1gpoyciy9cj/euJmiNfvQ=) 10: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl (hash: 54QuhhMYFGKacUvnxKbNV7JVQitjQ8xEv0BcRR1kZ3A=) 11: 326131343a333863303a3a2f32392d3239203d3e20323135323438.roa (hash: bqsY4FQ10AI29Vxl2YGsNnTvNpFvBsuO3ChiwTJi6QE=) 12: 326131343a333863303a3130343a3a2f34382d3438203d3e20323135323438.roa (hash: QZeJi0O4ini6QNF1syA5gZ8HehGzsGo0INWd9T4WodA=) 13: 326131343a333863303a323a3a2f34382d3438203d3e20323135323438.roa (hash: e6DNGKmUmYh4KhA4h67tF7nM55oym+8oQ84yYdEmy64=) 14: 326131343a333863303a313a3a2f34382d3438203d3e20323135323438.roa (hash: hYvWm7RFlZS1l2LX8NsvpkNf0MsxvPiQn7slmgwssck=) 15: 3130332e3134392e3136382e302f32342d3234203d3e20333936303634.roa (hash: +yFHbjFdcl3OkH9bM82B/wbQvRBlEBGqJ0LTOyulC0Q=) 16: 326131343a333863303a313a3a2f34382d3438203d3e20333936303634.roa (hash: hT2vS1KxZCIrrbIeX36lXo5PB7z3bFiXrMszQcpSghE=) 17: 326131343a333863303a3130343a3a2f34382d3438203d3e20333936303634.roa (hash: uQC+ycpajw6LG1MwmEH2bQGDaDjqft9mY/Ula5mB0Rs=) 18: 326131343a333863303a343a3a2f34382d3438203d3e20323135323438.roa (hash: WXZZhktlKD9T2nrBzZ0hLrkDPYKvkgJO3m6d5vMac1U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:7f:25:e2:dd:5b:83:f8:eb:3b:1d:70:16:93:a9:91:4d:c1:05:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Validity Not Before: Mar 25 13:44:07 2026 GMT Not After : Mar 26 15:14:07 2026 GMT Subject: CN=67D3DD7F75666775FE58081C9AEBB3A6FBC8237F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:27:fc:48:33:89:ce:53:fe:17:01:46:55:b0: 62:46:5d:72:58:b1:a9:50:b9:24:d4:be:7d:09:dc: 0b:d6:43:9d:71:07:b2:f9:08:a1:70:fb:1b:98:57: 82:47:68:3c:1c:27:8c:e8:f8:bb:b8:bd:fb:b1:74: a2:02:6c:67:29:b6:50:69:f0:66:7b:a2:02:1a:75: fa:ac:24:17:b6:bc:e4:7b:64:1a:a8:de:98:2e:1f: 70:4d:65:04:11:78:55:8d:9f:4d:46:d8:48:f3:5d: 94:62:11:2c:03:a5:74:e8:ce:2d:e9:60:6c:65:bd: fe:fa:3b:d3:aa:76:3f:aa:89:b6:6c:35:47:53:49: 3e:34:c7:6a:22:97:b9:c2:0a:65:ee:05:7d:6f:2d: a6:d6:2b:0b:be:fe:4e:e7:7d:f5:28:1f:d1:14:9e: 9f:0b:da:7f:88:f7:ad:fa:44:56:ed:36:29:d0:9c: 56:92:bb:9d:fa:da:1b:9c:17:b9:82:bf:36:f0:3f: 6f:d2:9e:07:e3:91:06:42:6c:f5:96:08:52:86:a5: 7f:e4:bf:d7:a5:c9:3d:a0:5f:de:89:98:81:64:21: 6c:87:16:8e:51:44:f6:6e:9e:9e:6a:8e:44:d0:ee: e1:3d:cd:fd:57:e0:70:c0:0b:85:23:b4:1e:8b:85: b0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D3:DD:7F:75:66:67:75:FE:58:08:1C:9A:EB:B3:A6:FB:C8:23:7F X509v3 Authority Key Identifier: keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:c3:2a:18:ad:e0:86:59:91:3f:1b:95:c1:4d:47:a8:b6:cc: dc:3b:62:da:6c:1f:f2:39:5c:ab:44:00:b7:b7:b4:1f:86:03: 68:5b:84:ba:b8:e2:98:37:59:c8:00:a3:66:29:72:f0:84:43: d6:93:a1:cd:95:cb:1d:09:88:a3:1b:dc:db:34:2a:1b:b7:39: 67:14:c8:b6:19:fb:54:3d:2f:66:55:14:90:74:13:d0:ff:78: 19:d2:b6:16:f3:6e:9d:bb:4a:ab:ef:33:8f:83:2e:1a:68:95: 32:02:1e:4b:d3:83:52:a9:d4:62:c2:b8:f6:52:75:fd:cc:5e: 5d:28:30:19:fc:07:c8:69:82:40:1a:12:86:77:c1:fa:8f:78: d3:70:be:83:59:19:35:c5:ea:a5:3a:7c:77:74:e1:5c:ea:35: fa:59:c8:5e:9e:a8:3f:a1:aa:38:6c:d0:ba:79:e0:ba:1f:bc: 70:f2:fb:cb:5f:d0:3a:c2:b4:c0:0a:aa:2a:76:73:cf:ec:8d: 99:96:4d:e9:28:b7:4b:11:48:b0:f8:27:35:dd:b1:d2:d8:19: 65:69:39:3e:e6:06:5c:9f:25:94:73:ec:18:18:cc:53:b4:ce: 1b:d1:d1:1d:e6:b9:f6:c3:f4:87:be:ce:22:f9:f3:07:a9:80: d1:45:31:1c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUan8l4t1bg/jrOx1wFpOpkU3BBdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWNkYzA0YmIyM2VhYTRjZWNjNzkxZGZlMDRiYjAyOGI3 ZTc5N2I2ODAeFw0yNjAzMjUxMzQ0MDdaFw0yNjAzMjYxNTE0MDdaMDMxMTAvBgNV BAMTKDY3RDNERDdGNzU2NjY3NzVGRTU4MDgxQzlBRUJCM0E2RkJDODIzN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvJ/xIM4nOU/4XAUZVsGJGXXJY salQuSTUvn0J3AvWQ51xB7L5CKFw+xuYV4JHaDwcJ4zo+Lu4vfuxdKICbGcptlBp 8GZ7ogIadfqsJBe2vOR7ZBqo3pguH3BNZQQReFWNn01G2EjzXZRiESwDpXTozi3p YGxlvf76O9Oqdj+qibZsNUdTST40x2oil7nCCmXuBX1vLabWKwu+/k7nffUoH9EU np8L2n+I9636RFbtNinQnFaSu5362hucF7mCvzbwP2/SngfjkQZCbPWWCFKGpX/k v9elyT2gX96JmIFkIWyHFo5RRPZunp5qjkTQ7uE9zf1X4HDAC4UjtB6LhbBrAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUZ9Pdf3VmZ3X+WAgcmuuzpvvII38wHwYDVR0j BBgwFoAUXNwEuyPqpM7MeR3+BLsCi355e2gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjli N2M0LzAvNUNEQzA0QkIyM0VBQTRDRUNDNzkxREZFMDRCQjAyOEI3RTc5N0I2OC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hOd0V1eVBxcE03TWVSMy1CTHNDaTM1 NWUyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZDE5ZGIyMC00 NjUzLTQ4ZDQtOGZjNC01ODBkMTM2OWI3YzQvMC81Q0RDMDRCQjIzRUFBNENFQ0M3 OTFERkUwNEJCMDI4QjdFNzk3QjY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANMMqGK3ghlmRPxuVwU1H qLbM3Dti2mwf8jlcq0QAt7e0H4YDaFuEurjimDdZyACjZily8IRD1pOhzZXLHQmI oxvc2zQqG7c5ZxTIthn7VD0vZlUUkHQT0P94GdK2FvNunbtKq+8zj4MuGmiVMgIe S9ODUqnUYsK49lJ1/cxeXSgwGfwHyGmCQBoShnfB+o9403C+g1kZNcXqpTp8d3Th XOo1+lnIXp6oP6GqOGzQunnguh+8cPL7y1/QOsK0wAqqKnZzz+yNmZZN6Si3SxFI sPgnNd2x0tgZZWk5PuYGXJ8llHPsGBjMU7TOG9HRHea59sP0h77OIvnzB6mA0UUx HA== -----END CERTIFICATE-----Generated at Thu Mar 26 00:52:16 2026 by rpki-client