$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft File: 5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft (raw, json) Hash identifier: WXrV0QFtmvb4AZ9JJXTXC0mgfKdoNqrQWVBqnY7FWVo= Subject key identifier: 06:00:E7:A9:5C:3B:CE:93:FD:EF:31:E4:13:58:46:A1:9F:E6:CC:B2 Authority key identifier: 5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3 Certificate issuer: /CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3 Certificate serial: 06129DFCAD25CB6F77FA5F11DDE476B499D60306 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft Manifest number: 057C Signing time: Tue 28 Jul 2026 03:57:06 +0000 Manifest this update: Tue 28 Jul 2026 03:52:06 +0000 Manifest next update: Wed 29 Jul 2026 06:38:06 +0000 Files and hashes: 1: 34352e3134362e3136322e302f32342d3234203d3e203138363331.roa (hash: mQKE/0/NnV539NSoXtVCOp3+AeXahl8sUnLhuxaZN7o=) 2: 5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl (hash: 2DzbgHL4FHUT7ByPTAGOu7a/HyTzVlRl1IgmgMAkWTY=) 3: 34352e3134362e3136302e302f32332d3233203d3e203437343437.roa (hash: 31YTnxmdtZ2cp3Cw9rcOHPD6ZzrVs4b/Az5vMfbmmIM=) 4: 34352e3134362e3136332e302f32342d3234203d3e20313937353238.roa (hash: Ebzg/MjqohTGeKwDaLunRaMiyaIF5yHH/QdRNJ9uULY=) 5: 34352e3134362e3136302e302f32332d3233203d3e20323133303031.roa (hash: J60EsWIeYN4a4peosqQOm0lgQhTjR5G5qC6zOtaqQT0=) 6: 34352e3134362e3136332e302f32342d3234203d3e203338313336.roa (hash: 2UoYMc+T3VQ81nJuKfdlMgklJP2lCeK6kVAd1Zef4f8=) 7: 34352e3134362e3136332e302f32342d3234203d3e20343031373736.roa (hash: vOmOz2BugVIPRfW7G2v3UGhcWNCUu83kIhIIM2fnK0w=) 8: 34352e3134362e3136332e302f32342d3234203d3e20323136313833.roa (hash: dEyrefnnKSg66lfx459XJ2SroTggGi4go9Zp+DRZdvU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 06:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:12:9d:fc:ad:25:cb:6f:77:fa:5f:11:dd:e4:76:b4:99:d6:03:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3 Validity Not Before: Jul 28 03:52:06 2026 GMT Not After : Jul 29 06:38:06 2026 GMT Subject: CN=0600E7A95C3BCE93FDEF31E4135846A19FE6CCB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9e:fa:08:d0:23:da:2f:2b:20:11:c0:0c:57: 55:6b:36:28:0b:28:4e:0b:3c:3f:93:2f:c6:b4:26: d8:5c:fd:67:0b:aa:92:6e:e9:96:c3:48:81:54:f4: b0:04:0f:a5:9d:52:18:5e:ec:c8:df:c5:5a:3c:52: 80:39:78:1c:b2:72:22:a9:32:4f:1b:03:3c:1e:23: 04:09:89:c6:40:bb:1d:96:c7:53:f3:b2:c8:10:5c: 64:7c:78:cb:95:d8:3c:d8:f8:dc:ee:79:28:b9:1e: af:fd:cf:a4:12:7a:76:b4:d6:3b:8a:f0:9a:4e:4c: d2:9c:3d:82:a1:83:5c:ab:89:ef:66:c6:24:88:03: 4d:f1:5d:af:a4:a6:7d:69:f5:bc:23:0c:4f:ec:b4: 89:9d:fd:5f:ae:5d:fb:2f:27:82:c1:7f:08:5f:92: 59:5b:ed:6c:0f:f1:b7:63:bf:ba:aa:ab:2d:88:d5: 29:d3:12:a8:e3:c2:a8:8d:a0:8c:87:6f:54:ee:27: a0:0e:99:28:a8:8a:b7:4a:f2:10:08:04:d8:7f:56: 1d:bf:73:0a:35:76:fa:ad:84:e6:07:d2:85:71:cf: f4:34:2d:95:7b:0d:54:c8:91:bf:a4:a3:7e:0d:8e: 89:84:d1:10:21:8f:e0:1c:24:3d:df:70:09:ad:54: 48:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:00:E7:A9:5C:3B:CE:93:FD:EF:31:E4:13:58:46:A1:9F:E6:CC:B2 X509v3 Authority Key Identifier: keyid:5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:a7:4e:ee:63:b7:ae:d0:dc:3f:5f:94:66:2c:ae:bb:8e:d7: fb:53:a0:9f:32:7b:7a:d9:b7:0d:06:f6:6a:21:28:25:21:95: cc:66:e7:b2:73:a0:65:d4:43:9f:7f:5d:27:1d:9c:8a:9e:09: d6:6d:9c:c2:27:45:a0:37:83:9e:2c:bd:06:06:5c:96:dc:55: 96:34:99:3e:69:5c:74:76:1c:1c:43:cb:e5:38:88:64:bc:81: 7c:58:11:f8:a3:69:c9:99:2f:c5:56:ab:78:08:90:12:75:c7: b4:82:f3:b9:b7:e1:e8:2a:4e:50:0b:aa:1f:df:18:22:0d:3e: cc:73:ee:3f:15:4f:6c:1f:8d:32:9a:d0:78:a5:20:f9:4f:f7: 45:5f:1c:c6:89:9e:5c:5e:54:e8:9d:d7:c1:c7:43:38:fa:66: 61:6a:6d:11:aa:53:37:d3:d0:94:79:67:53:25:e2:f9:91:f4: 18:3b:6c:85:1e:e4:4b:01:40:67:3f:08:2a:c9:7a:9f:e2:ef: 34:ec:26:69:fd:ef:6e:3c:0d:22:4c:3b:be:90:0a:4c:17:71: c1:e9:12:77:dd:df:38:38:5e:3c:e5:90:63:93:51:a0:48:9c: bf:1e:c0:f6:f5:9f:6d:f7:41:b3:c6:78:06:06:9e:b7:45:eb: dd:b9:28:04 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBhKd/K0ly293+l8R3eR2tJnWAwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRlZmUwOTIyZjRmNTUyNzBkY2Q1YzA4ZjA0ZjFjN2Jm MjYwNzNjMzAeFw0yNjA3MjgwMzUyMDZaFw0yNjA3MjkwNjM4MDZaMDMxMTAvBgNV BAMTKDA2MDBFN0E5NUMzQkNFOTNGREVGMzFFNDEzNTg0NkExOUZFNkNDQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCknvoI0CPaLysgEcAMV1VrNigL KE4LPD+TL8a0Jthc/WcLqpJu6ZbDSIFU9LAED6WdUhhe7MjfxVo8UoA5eByyciKp Mk8bAzweIwQJicZAux2Wx1PzssgQXGR8eMuV2DzY+NzueSi5Hq/9z6QSena01juK 8JpOTNKcPYKhg1yrie9mxiSIA03xXa+kpn1p9bwjDE/stImd/V+uXfsvJ4LBfwhf kllb7WwP8bdjv7qqqy2I1SnTEqjjwqiNoIyHb1TuJ6AOmSioirdK8hAIBNh/Vh2/ cwo1dvqthOYH0oVxz/Q0LZV7DVTIkb+ko34NjomE0RAhj+AcJD3fcAmtVEgzAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUBgDnqVw7zpP97zHkE1hGoZ/mzLIwHwYDVR0j BBgwFoAUXe/gki9PVScNzVwI8E8ce/Jgc8MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmZlMmIyN2EtMWVjNS00YWI3LTk3OGUtNmRhOWNmOWYz NzkwLzAvNURFRkUwOTIyRjRGNTUyNzBEQ0Q1QzA4RjA0RjFDN0JGMjYwNzNDMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hlX2draTlQVlNjTnpWd0k4RThjZV9K Z2M4TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yZmUyYjI3YS0x ZWM1LTRhYjctOTc4ZS02ZGE5Y2Y5ZjM3OTAvMC81REVGRTA5MjJGNEY1NTI3MERD RDVDMDhGMDRGMUM3QkYyNjA3M0MzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcadO7mO3rtDcP1+UZiyu u47X+1OgnzJ7etm3DQb2aiEoJSGVzGbnsnOgZdRDn39dJx2cip4J1m2cwidFoDeD niy9BgZcltxVljSZPmlcdHYcHEPL5TiIZLyBfFgR+KNpyZkvxVareAiQEnXHtILz ubfh6CpOUAuqH98YIg0+zHPuPxVPbB+NMprQeKUg+U/3RV8cxomeXF5U6J3XwcdD OPpmYWptEapTN9PQlHlnUyXi+ZH0GDtshR7kSwFAZz8IKsl6n+LvNOwmaf3vbjwN Ikw7vpAKTBdxwekSd93fODhePOWQY5NRoEicvx7A9vWfbfdBs8Z4Bgaet0Xr3bko BA== -----END CERTIFICATE-----Generated at Tue Jul 28 21:42:15 2026 by rpki-client