$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft File: 5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft (raw, json) Hash identifier: eR+3HvghB1Nl9uWDy7pw1Zq7ORtz76UDbPTjYyNYH0M= Subject key identifier: D9:C8:65:8C:8A:DE:38:2D:BB:D7:D4:8B:A5:1F:A5:DF:63:50:9A:83 Authority key identifier: 5E:F4:C7:50:B1:93:5E:E4:BF:7F:C2:44:1A:2E:E4:90:47:7A:91:AE Certificate issuer: /CN=5EF4C750B1935EE4BF7FC2441A2EE490477A91AE Certificate serial: 262ECA6AB4A6DB70F35D4A7A141553DC9CB2DC49 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft Manifest number: 0E Signing time: Tue 28 Jul 2026 11:00:09 +0000 Manifest this update: Tue 28 Jul 2026 10:55:09 +0000 Manifest next update: Wed 29 Jul 2026 11:46:09 +0000 Files and hashes: 1: 326131333a633863313a3131313a3a2f34382d3438203d3e20323135383238.roa (hash: 2lS2H8IBJxOyjnm2BZrwuj7Pk6jZjmGW1zgNbopUg+c=) 2: 326131333a633863313a3a2f33322d3332203d3e20323135383238.roa (hash: IlMOSvLFq4VX7HZnUVxC1UdUITR3M7tj8HQPD7Fh/uM=) 3: 5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.crl (hash: aVZbZvp+d7fnAaTYp1FYXUvnB2bsokdS1CBf2ResjTk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.crl rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 03:52:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:2e:ca:6a:b4:a6:db:70:f3:5d:4a:7a:14:15:53:dc:9c:b2:dc:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EF4C750B1935EE4BF7FC2441A2EE490477A91AE Validity Not Before: Jul 28 10:55:09 2026 GMT Not After : Jul 29 11:46:09 2026 GMT Subject: CN=D9C8658C8ADE382DBBD7D48BA51FA5DF63509A83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f9:7c:24:cf:63:27:88:17:19:d1:b2:b8:86: 5d:ec:d8:0f:1d:73:77:af:2d:ec:15:30:f1:49:b1: b1:7c:52:d1:1f:1c:c1:c1:5c:de:bf:57:be:8b:89: c6:1a:9c:18:4d:c7:e0:49:cf:17:d9:2f:be:02:63: 7b:21:75:27:86:5d:99:d2:34:d7:12:48:61:d3:a1: 39:ad:a5:7a:26:76:36:ef:13:7b:dc:31:5f:e7:ea: 72:ae:07:d9:3f:c0:d6:23:56:77:22:c4:73:88:75: 36:36:ed:02:61:42:44:e5:2a:94:44:58:6d:3c:8f: 52:4f:82:b4:d3:c4:9b:e6:df:52:b3:04:2b:c6:5b: ac:d9:0b:b9:19:12:47:ff:75:6c:0e:d0:56:61:b6: 55:cb:37:51:27:4b:18:e7:b5:3d:64:9f:c0:9c:10: 78:d8:3a:e4:07:7b:de:8d:1b:28:51:f1:b7:a2:10: 33:99:ca:1a:26:0b:e0:01:9d:56:bb:9e:5c:87:45: 22:e8:54:bb:89:8c:ec:ed:41:c4:24:da:99:81:ba: 6f:8a:53:c5:65:27:01:ea:d3:05:9d:72:ca:7b:67: 9f:49:44:2b:4e:d5:c7:08:a4:21:74:93:df:d3:64: 83:08:55:03:09:d6:77:93:56:42:c3:e4:12:76:86: 6b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C8:65:8C:8A:DE:38:2D:BB:D7:D4:8B:A5:1F:A5:DF:63:50:9A:83 X509v3 Authority Key Identifier: keyid:5E:F4:C7:50:B1:93:5E:E4:BF:7F:C2:44:1A:2E:E4:90:47:7A:91:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:51:9e:32:39:9a:8c:e8:21:95:1d:49:6f:44:53:87:d9:9b: f3:a2:59:ea:2f:ef:74:bb:14:cd:42:c7:9a:a0:49:57:16:47: 78:db:3d:a1:03:7b:b4:6f:98:99:ff:75:07:84:cd:26:cd:e3: 66:d7:26:bb:2e:aa:87:9f:6b:95:3c:a4:64:9c:98:0c:0a:f6: a2:72:91:94:37:1d:4f:b9:51:9f:54:c7:ff:95:d7:f8:74:3f: 50:66:00:93:e3:26:b6:37:88:a7:64:2a:4c:0c:bd:ea:06:4e: 5a:73:8e:51:fd:fe:e1:ba:ae:a3:be:a6:8a:fe:a2:65:3e:51: 5c:96:2e:56:03:83:36:36:c3:00:ee:07:fb:34:93:72:8a:52: 13:3a:d1:07:f0:ed:b7:72:42:03:5e:6a:0f:67:7e:c1:39:ae: c2:75:64:75:44:c6:3d:1f:1a:52:49:7c:1a:ab:df:43:8c:a1: f0:af:a6:e4:29:c5:de:ac:4d:ec:40:9d:cf:7b:68:77:2a:35: c8:76:01:59:a9:01:71:fc:d9:96:e2:74:fb:0e:ed:b4:66:80: 8d:15:34:cb:a2:25:37:e6:24:cf:32:50:55:ca:38:b8:d6:7f: 98:5a:fd:ea:96:44:e1:d3:28:5c:72:01:6e:0e:d7:77:83:fc: 20:9e:fa:84 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUJi7KarSm23DzXUp6FBVT3Jyy3EkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVGNEM3NTBCMTkzNUVFNEJGN0ZDMjQ0MUEyRUU0OTA0 NzdBOTFBRTAeFw0yNjA3MjgxMDU1MDlaFw0yNjA3MjkxMTQ2MDlaMDMxMTAvBgNV BAMTKEQ5Qzg2NThDOEFERTM4MkRCQkQ3RDQ4QkE1MUZBNURGNjM1MDlBODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW+Xwkz2MniBcZ0bK4hl3s2A8d c3evLewVMPFJsbF8UtEfHMHBXN6/V76LicYanBhNx+BJzxfZL74CY3shdSeGXZnS NNcSSGHToTmtpXomdjbvE3vcMV/n6nKuB9k/wNYjVncixHOIdTY27QJhQkTlKpRE WG08j1JPgrTTxJvm31KzBCvGW6zZC7kZEkf/dWwO0FZhtlXLN1EnSxjntT1kn8Cc EHjYOuQHe96NGyhR8beiEDOZyhomC+ABnVa7nlyHRSLoVLuJjOztQcQk2pmBum+K U8VlJwHq0wWdcsp7Z59JRCtO1ccIpCF0k9/TZIMIVQMJ1neTVkLD5BJ2hmtZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU2chljIreOC2719SLpR+l32NQmoMwHwYDVR0j BBgwFoAUXvTHULGTXuS/f8JEGi7kkEd6ka4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWMwZWQwNDYtZmE5NS00NWMzLTkxNDYtOTcxZGI4YTll OGJiLzgvNUVGNEM3NTBCMTkzNUVFNEJGN0ZDMjQ0MUEyRUU0OTA0NzdBOTFBRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03ZDEzLTQ4 OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC81RUY0Qzc1MEIxOTM1RUU0QkY3RkMyNDQx QTJFRTQ5MDQ3N0E5MUFFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzljMGVkMDQ2LWZhOTUtNDVjMy05MTQ2LTk3MWRiOGE5ZThiYi84LzVFRjRDNzUw QjE5MzVFRTRCRjdGQzI0NDFBMkVFNDkwNDc3QTkxQUUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCwUZ4y OZqM6CGVHUlvRFOH2ZvzolnqL+90uxTNQseaoElXFkd42z2hA3u0b5iZ/3UHhM0m zeNm1ya7LqqHn2uVPKRknJgMCvaicpGUNx1PuVGfVMf/ldf4dD9QZgCT4ya2N4in ZCpMDL3qBk5ac45R/f7huq6jvqaK/qJlPlFcli5WA4M2NsMA7gf7NJNyilITOtEH 8O23ckIDXmoPZ37BOa7CdWR1RMY9HxpSSXwaq99DjKHwr6bkKcXerE3sQJ3Pe2h3 KjXIdgFZqQFx/NmW4nT7Du20ZoCNFTTLoiU35iTPMlBVyji41n+YWv3qlkTh0yhc cgFuDtd3g/wgnvqE -----END CERTIFICATE-----Generated at Tue Jul 28 15:53:52 2026 by rpki-client