$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft File: 5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft (raw, json) Hash identifier: s7cSNrHs0AwNc2DRfNRKlK5UZ/2s49VLn93LspxK2/8= Subject key identifier: 7F:93:6B:C2:21:BC:D3:64:4D:7F:5F:41:62:E5:F5:23:5A:01:03:F3 Authority key identifier: 5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3 Certificate issuer: /CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3 Certificate serial: 208B1B2E0D108705EC11C3C3ABC378FAFAE7DD31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft Manifest number: 053E Signing time: Fri 12 Jun 2026 20:06:48 +0000 Manifest this update: Fri 12 Jun 2026 20:01:48 +0000 Manifest next update: Sat 13 Jun 2026 22:45:48 +0000 Files and hashes: 1: 34352e3134362e3136332e302f32342d3234203d3e203338313336.roa (hash: 2UoYMc+T3VQ81nJuKfdlMgklJP2lCeK6kVAd1Zef4f8=) 2: 34352e3134362e3136322e302f32342d3234203d3e203138363331.roa (hash: mQKE/0/NnV539NSoXtVCOp3+AeXahl8sUnLhuxaZN7o=) 3: 34352e3134362e3136302e302f32332d3233203d3e203437343437.roa (hash: 31YTnxmdtZ2cp3Cw9rcOHPD6ZzrVs4b/Az5vMfbmmIM=) 4: 5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl (hash: w1ifWpNLHiG4Ti1gsGqfEau6odXgUQbBCK8r1AeeiYY=) 5: 34352e3134362e3136332e302f32342d3234203d3e20343031373736.roa (hash: vOmOz2BugVIPRfW7G2v3UGhcWNCUu83kIhIIM2fnK0w=) 6: 34352e3134362e3136332e302f32342d3234203d3e20323136313833.roa (hash: dEyrefnnKSg66lfx459XJ2SroTggGi4go9Zp+DRZdvU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:8b:1b:2e:0d:10:87:05:ec:11:c3:c3:ab:c3:78:fa:fa:e7:dd:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3 Validity Not Before: Jun 12 20:01:48 2026 GMT Not After : Jun 13 22:45:48 2026 GMT Subject: CN=7F936BC221BCD3644D7F5F4162E5F5235A0103F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:bf:8d:46:0e:54:6a:2a:57:58:52:6a:98:df: 46:2e:7b:a4:12:96:b0:1e:df:f7:bd:27:e4:51:d7: a5:f7:83:8d:fb:b7:02:e0:c2:8a:7a:ff:6f:ae:4a: 44:3e:99:b9:04:04:b0:b8:e2:ac:b5:6c:e4:2d:73: 91:b6:67:83:aa:63:28:26:86:a8:69:e9:dc:4b:28: 72:22:15:75:0d:06:4c:99:1f:a3:ef:0c:3a:3e:5b: a2:db:b9:9e:36:8e:e0:ed:20:77:bc:27:2f:d5:22: c6:d6:71:b4:f5:e3:ec:07:5a:23:e9:a9:7c:72:d3: 65:ea:c6:bc:66:90:d9:f4:b2:3b:d4:7f:bb:01:46: bd:0f:4f:85:72:ad:23:86:e7:3e:a7:25:7c:dd:64: 1d:34:ba:ec:41:b6:aa:92:a4:a0:67:af:a2:04:75: 87:20:85:e4:b7:bf:5c:2a:53:b0:fc:13:4a:7c:5a: 23:8f:9f:a9:01:5e:6d:02:cd:f8:2f:0a:31:b7:70: 19:4c:2e:7b:49:aa:ce:3f:1e:75:08:86:4f:71:ce: 60:af:24:75:33:03:51:dd:c8:5a:9b:7b:d3:e3:1d: b0:fe:0c:f2:4b:88:0c:ea:a1:9b:37:05:2d:90:cc: c6:ac:b9:ed:4d:9a:16:5f:34:b2:fd:3d:2f:98:55: f3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:93:6B:C2:21:BC:D3:64:4D:7F:5F:41:62:E5:F5:23:5A:01:03:F3 X509v3 Authority Key Identifier: keyid:5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:fc:2f:59:20:35:42:f5:d4:32:b5:f7:1c:16:e5:cd:e3:2c: 7a:36:e7:ba:a2:e0:f2:9f:0a:e5:cb:ce:7e:e9:ad:1f:f5:14: 38:d4:2f:be:42:3f:6b:b7:81:bd:22:c2:ad:f7:73:be:db:37: 82:54:c6:67:a0:66:10:cd:23:d2:2c:ee:ea:83:0b:df:03:d5: 2f:1e:be:76:cb:89:32:92:b4:76:39:90:6f:c9:78:5d:a6:58: 48:2c:56:08:aa:8a:4a:c2:f0:85:00:54:72:04:86:3e:52:ec: 81:0b:c5:ae:74:6e:54:b4:6a:f1:61:14:9e:a9:cf:2f:f4:68: c2:1e:62:b5:55:fa:fb:e1:b5:1d:62:9e:06:18:a2:32:67:ea: 14:cb:eb:c1:50:1e:9b:a5:5a:92:21:ed:04:53:a3:09:27:10: fb:01:b7:9e:3a:20:71:0d:4b:45:02:38:69:f0:2f:6d:9b:cb: c7:e7:c0:5c:d7:34:48:ca:5f:ee:39:d5:d4:65:3d:df:94:71: 4a:ed:97:bc:e9:f5:64:ed:d5:2f:b7:45:17:d3:04:a2:6d:00: 85:db:25:d8:ff:6f:5f:58:2f:36:fc:b5:57:46:5d:82:de:cb: 5c:47:6a:db:de:ec:a0:ac:8a:2c:52:b9:f6:e2:44:67:98:d1: 98:e2:25:04 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIIsbLg0QhwXsEcPDq8N4+vrn3TEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRlZmUwOTIyZjRmNTUyNzBkY2Q1YzA4ZjA0ZjFjN2Jm MjYwNzNjMzAeFw0yNjA2MTIyMDAxNDhaFw0yNjA2MTMyMjQ1NDhaMDMxMTAvBgNV BAMTKDdGOTM2QkMyMjFCQ0QzNjQ0RDdGNUY0MTYyRTVGNTIzNUEwMTAzRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfv41GDlRqKldYUmqY30Yue6QS lrAe3/e9J+RR16X3g437twLgwop6/2+uSkQ+mbkEBLC44qy1bOQtc5G2Z4OqYygm hqhp6dxLKHIiFXUNBkyZH6PvDDo+W6LbuZ42juDtIHe8Jy/VIsbWcbT14+wHWiPp qXxy02XqxrxmkNn0sjvUf7sBRr0PT4VyrSOG5z6nJXzdZB00uuxBtqqSpKBnr6IE dYcgheS3v1wqU7D8E0p8WiOPn6kBXm0CzfgvCjG3cBlMLntJqs4/HnUIhk9xzmCv JHUzA1HdyFqbe9PjHbD+DPJLiAzqoZs3BS2QzMasue1NmhZfNLL9PS+YVfNjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUf5NrwiG802RNf19BYuX1I1oBA/MwHwYDVR0j BBgwFoAUXe/gki9PVScNzVwI8E8ce/Jgc8MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmZlMmIyN2EtMWVjNS00YWI3LTk3OGUtNmRhOWNmOWYz NzkwLzAvNURFRkUwOTIyRjRGNTUyNzBEQ0Q1QzA4RjA0RjFDN0JGMjYwNzNDMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hlX2draTlQVlNjTnpWd0k4RThjZV9K Z2M4TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yZmUyYjI3YS0x ZWM1LTRhYjctOTc4ZS02ZGE5Y2Y5ZjM3OTAvMC81REVGRTA5MjJGNEY1NTI3MERD RDVDMDhGMDRGMUM3QkYyNjA3M0MzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATvwvWSA1QvXUMrX3HBbl zeMsejbnuqLg8p8K5cvOfumtH/UUONQvvkI/a7eBvSLCrfdzvts3glTGZ6BmEM0j 0izu6oML3wPVLx6+dsuJMpK0djmQb8l4XaZYSCxWCKqKSsLwhQBUcgSGPlLsgQvF rnRuVLRq8WEUnqnPL/Rowh5itVX6++G1HWKeBhiiMmfqFMvrwVAem6VakiHtBFOj CScQ+wG3njogcQ1LRQI4afAvbZvLx+fAXNc0SMpf7jnV1GU935RxSu2XvOn1ZO3V L7dFF9MEom0Ahdsl2P9vX1gvNvy1V0Zdgt7LXEdq297soKyKLFK59uJEZ5jRmOIl BA== -----END CERTIFICATE-----Generated at Sat Jun 13 10:26:26 2026 by rpki-client