$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft File: 5ECB4CADBBADD500F49CA697D566A2761E017608.mft (raw, json) Hash identifier: 0UxqfzQhtuXkMJh1eB5zWeca4QRiTouxzqxKJg3Cuhc= Subject key identifier: DD:FD:C8:9B:8C:C6:07:4F:88:0F:EF:21:99:1F:B9:86:25:8F:C2:B9 Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Certificate serial: 596D25B98FE76684399984FDFF548BA27B13A19C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft Manifest number: 034C Signing time: Tue 28 Jul 2026 20:59:42 +0000 Manifest this update: Tue 28 Jul 2026 20:54:42 +0000 Manifest next update: Wed 29 Jul 2026 22:30:42 +0000 Files and hashes: 1: 3134312e3139332e3232382e302f32342d3234203d3e20323134323038.roa (hash: ifyEdtBW0BhdKWJrpJ6bYfBeNzyrtZtj9JtftvgAsco=) 2: 3231332e3235342e3137302e302f32342d3234203d3e20323139313339.roa (hash: 1Vl9oWFR11Yoo0iTLsVc/HDIQkucPHAPz/peYfql2NQ=) 3: 5ECB4CADBBADD500F49CA697D566A2761E017608.crl (hash: UpSj/o3PjuMsWdjFFGardvhrMDkdYBQ/lv4NA7nGPFc=) 4: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (hash: Q4yUdFFGtrq1xUVDtHn0DoNWjht0ICRHxiUX7p+xRAQ=) 5: 3231332e3235342e3137302e302f32342d3234203d3e203438363738.roa (hash: ttSPLNkVmnmfbB1Jg0U4OFMRv4cZWxzTg6oBluFltrk=) 6: 3231332e3235342e3137302e302f32342d3234203d3e20323038343833.roa (hash: LH3qwxx3cFGEc2nT11lVGioc4VsEH2u028n8n+GZTy8=) 7: 3231332e3235342e3137302e302f32342d3234203d3e20323134393431.roa (hash: WuIyFXGDgkt2cltxoxT/RYao20HHu+r0Sn5rfpjFnHA=) 8: 38362e35342e3137322e302f32342d3234203d3e20323134343332.roa (hash: +6HuSGy13PoSBfdgi660PmTLE8Z52TLvw+ru7fcB7AI=) 9: 3137302e36322e3139302e302f32342d3234203d3e203438393235.roa (hash: 8/++60jg7XtzmZ45FRECeqxUVy5048XlFvcQJYMNUjo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 22:30:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:6d:25:b9:8f:e7:66:84:39:99:84:fd:ff:54:8b:a2:7b:13:a1:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Validity Not Before: Jul 28 20:54:42 2026 GMT Not After : Jul 29 22:30:42 2026 GMT Subject: CN=DDFDC89B8CC6074F880FEF21991FB986258FC2B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:db:57:31:3b:67:90:ae:62:43:cb:6e:71:a6: 9a:84:60:45:12:df:bb:5b:18:0f:9a:36:a6:85:d6: d9:c6:e4:81:78:63:a6:44:af:23:f5:92:a7:46:61: f1:8d:5e:1f:d4:8e:f6:fb:85:60:c3:63:bd:52:02: b3:e5:2d:6c:82:aa:df:db:06:ec:2d:3d:25:6d:df: 54:b2:2e:59:6b:6c:2d:8b:7f:8b:c0:1c:c2:4b:e0: e6:ef:46:ee:e2:f9:52:d9:7e:10:d7:2c:b2:58:79: c6:ce:1b:cf:bc:33:76:1e:24:07:56:7d:47:63:e9: a0:90:22:31:23:f1:01:d5:04:d0:c4:ee:f9:bf:c1: 96:4a:f1:39:30:06:03:a9:f1:dd:f7:76:33:4c:8a: 74:33:96:22:21:23:c9:db:61:ca:29:f3:68:b4:04: 04:06:d8:80:7a:6a:85:41:72:fd:59:4b:ca:65:bc: 84:c6:ac:83:64:a9:4a:1e:b0:8a:ad:c0:16:46:41: 3c:ec:93:55:44:4e:04:75:50:f5:ae:94:c1:7a:5d: 65:f5:e5:1b:d7:c3:bf:d0:0b:d0:40:71:09:d7:6c: b9:02:c7:b0:77:16:bf:1a:ef:5a:0e:9a:f8:ce:4e: a3:99:b5:f0:c3:43:5f:f4:f2:74:3f:0d:f8:c4:b2: 97:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FD:C8:9B:8C:C6:07:4F:88:0F:EF:21:99:1F:B9:86:25:8F:C2:B9 X509v3 Authority Key Identifier: keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:d5:9a:30:75:02:55:ea:f7:f6:a0:b7:77:fb:68:d5:3f:8d: 0a:87:f1:70:7a:6a:20:38:7c:40:fa:19:b6:ad:f8:49:f5:5f: d6:c8:f7:99:e3:18:95:10:7b:7c:d5:45:78:71:49:0d:80:d0: c7:d0:f0:82:55:79:67:79:18:ec:18:c2:69:2d:83:0a:8c:54: df:6d:0e:ed:12:3b:e5:2b:32:2e:c2:f0:a5:bb:be:ed:d4:27: b7:4a:79:e6:c5:21:46:10:23:39:a3:3e:a7:01:02:a7:90:f8: 3e:cc:35:f5:a5:19:fb:b5:ab:b1:6d:2f:3b:1b:a3:c3:d9:00: 00:9a:b8:bb:4f:e9:48:97:52:39:63:9b:78:f0:ed:4d:da:e1: 9d:4d:f6:1c:73:13:30:56:c4:a7:7b:21:11:78:38:d6:1b:22: ea:1c:29:f7:c6:f9:fa:63:a9:f5:5e:11:05:8b:ff:e5:78:7e: c9:dc:e0:73:e3:5e:c3:5d:15:c7:0a:fc:56:d4:dd:45:3d:00: 97:28:cc:a7:6f:f5:47:64:5a:00:75:3a:4b:1c:b0:f9:3c:93: b1:c8:e8:e6:c1:2f:a6:1e:83:64:d5:df:24:1f:42:03:c8:03: 64:dc:03:b9:55:e7:a8:12:2b:4d:92:54:0e:a2:bd:37:78:f8: 2c:9b:cf:33 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWW0luY/nZoQ5mYT9/1SLonsToZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx ZTAxNzYwODAeFw0yNjA3MjgyMDU0NDJaFw0yNjA3MjkyMjMwNDJaMDMxMTAvBgNV BAMTKERERkRDODlCOENDNjA3NEY4ODBGRUYyMTk5MUZCOTg2MjU4RkMyQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp21cxO2eQrmJDy25xppqEYEUS 37tbGA+aNqaF1tnG5IF4Y6ZEryP1kqdGYfGNXh/Ujvb7hWDDY71SArPlLWyCqt/b BuwtPSVt31SyLllrbC2Lf4vAHMJL4ObvRu7i+VLZfhDXLLJYecbOG8+8M3YeJAdW fUdj6aCQIjEj8QHVBNDE7vm/wZZK8TkwBgOp8d33djNMinQzliIhI8nbYcop82i0 BAQG2IB6aoVBcv1ZS8plvITGrINkqUoesIqtwBZGQTzsk1VETgR1UPWulMF6XWX1 5RvXw7/QC9BAcQnXbLkCx7B3Fr8a71oOmvjOTqOZtfDDQ1/08nQ/DfjEspfVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU3f3Im4zGB0+ID+8hmR+5hiWPwrkwHwYDVR0j BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0 QmRnZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzBlMTNkOC1i ZmUwLTQyMzUtYWZiNC1kNTNlZGZiYWNkZDIvMC81RUNCNENBREJCQURENTAwRjQ5 Q0E2OTdENTY2QTI3NjFFMDE3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMtWaMHUCVer39qC3d/to 1T+NCofxcHpqIDh8QPoZtq34SfVf1sj3meMYlRB7fNVFeHFJDYDQx9DwglV5Z3kY 7BjCaS2DCoxU320O7RI75SsyLsLwpbu+7dQnt0p55sUhRhAjOaM+pwECp5D4Psw1 9aUZ+7WrsW0vOxujw9kAAJq4u0/pSJdSOWObePDtTdrhnU32HHMTMFbEp3shEXg4 1hsi6hwp98b5+mOp9V4RBYv/5Xh+ydzgc+New10Vxwr8VtTdRT0AlyjMp2/1R2Ra AHU6Sxyw+TyTscjo5sEvph6DZNXfJB9CA8gDZNwDuVXnqBIrTZJUDqK9N3j4LJvP Mw== -----END CERTIFICATE-----Generated at Wed Jul 29 08:34:52 2026 by rpki-client