$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft File: 5ECB4CADBBADD500F49CA697D566A2761E017608.mft (raw, json) Hash identifier: VzDGcdCtv7FiOsM/gHccHfg9V/2hXF3M8yKJReoD+U0= Subject key identifier: 60:C0:C7:0F:C1:72:6F:FB:BF:40:16:2F:4D:FD:04:22:1A:67:9A:92 Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Certificate serial: 7FDE93CDADF96FB3C931290110C28867A6AB5C79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft Manifest number: 02C4 Signing time: Sat 18 Apr 2026 19:54:54 +0000 Manifest this update: Sat 18 Apr 2026 19:49:54 +0000 Manifest next update: Sun 19 Apr 2026 21:25:54 +0000 Files and hashes: 1: 5ECB4CADBBADD500F49CA697D566A2761E017608.crl (hash: rddiHl3x84Q0dDBScPnbbnL7edKS/Mc9nGoHzfhQ2+M=) 2: 3231332e3235342e3137302e302f32342d3234203d3e203438363738.roa (hash: ttSPLNkVmnmfbB1Jg0U4OFMRv4cZWxzTg6oBluFltrk=) 3: 3231332e3235342e3137302e302f32342d3234203d3e20323134393431.roa (hash: WuIyFXGDgkt2cltxoxT/RYao20HHu+r0Sn5rfpjFnHA=) 4: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (hash: Q4yUdFFGtrq1xUVDtHn0DoNWjht0ICRHxiUX7p+xRAQ=) 5: 38362e35342e3137322e302f32342d3234203d3e20323134343332.roa (hash: +6HuSGy13PoSBfdgi660PmTLE8Z52TLvw+ru7fcB7AI=) 6: 3137302e36322e3139302e302f32342d3234203d3e203438393235.roa (hash: 8/++60jg7XtzmZ45FRECeqxUVy5048XlFvcQJYMNUjo=) 7: 3134312e3139332e3232382e302f32342d3234203d3e20323134323038.roa (hash: p1kuPenqcy6Et0XPjwxcCLB+vpEy3ekHhe4EodnqolI=) 8: 3231332e3235342e3137302e302f32342d3234203d3e20323038343833.roa (hash: gjwDheXZBS8eOtwo7Ja5xPFcujfV7TC07EH1z972oQ4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 Apr 2026 21:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:de:93:cd:ad:f9:6f:b3:c9:31:29:01:10:c2:88:67:a6:ab:5c:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Validity Not Before: Apr 18 19:49:54 2026 GMT Not After : Apr 19 21:25:54 2026 GMT Subject: CN=60C0C70FC1726FFBBF40162F4DFD04221A679A92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:08:ba:ea:f5:37:a2:da:f7:d2:55:5f:b1:3b: 1d:da:ac:be:96:d4:25:89:f6:40:7c:2d:a9:29:36: 8c:c6:9e:36:74:a6:26:0d:f3:03:a0:69:04:7b:b2: 4a:06:cb:82:fb:13:2c:36:db:35:57:0b:38:74:20: 29:0a:e9:cd:b0:2d:5a:89:78:16:a6:40:c1:f2:4b: 28:83:2c:db:b7:7e:07:bd:5e:9d:03:c5:eb:da:b5: 2c:af:8d:49:9c:87:23:18:49:75:ab:4e:e5:56:90: eb:fe:07:45:1c:06:5c:e9:0b:eb:d5:88:e4:d6:b1: 68:b3:da:11:cb:aa:56:67:fe:83:22:84:4c:9b:a8: f4:3b:c0:37:a5:68:38:bc:d0:3c:09:c9:23:6a:56: d6:67:01:9e:fc:1f:1f:54:5f:a8:9b:57:9b:8f:71: 26:71:78:60:f8:b7:ad:be:66:e2:95:6b:e9:96:53: 06:11:d8:e6:08:0b:d9:a3:83:df:d6:35:7b:7f:a0: 61:a3:3e:96:4e:ec:2f:fe:ae:a9:54:60:65:dd:ed: 5c:53:67:08:de:50:86:42:3a:89:49:70:31:44:8f: 73:74:ad:0c:ba:73:22:af:66:2b:fc:40:9d:d7:52: 3b:29:35:f6:5d:b4:d3:da:78:5f:9f:ad:75:63:d4: 30:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C0:C7:0F:C1:72:6F:FB:BF:40:16:2F:4D:FD:04:22:1A:67:9A:92 X509v3 Authority Key Identifier: keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:1d:68:d7:b4:39:df:8e:2f:01:2d:64:d7:94:b1:0b:89:5e: fd:d7:28:57:0c:0a:42:5f:7f:15:b0:4c:e6:04:12:e9:9d:2d: b0:2c:00:6a:74:55:24:16:fc:e4:51:95:f7:7e:57:cd:97:42: 5e:18:29:26:5e:3a:68:67:51:77:55:86:ca:ab:11:0d:a8:ee: fd:02:31:ce:af:c1:53:c6:93:63:28:22:88:fd:24:2c:65:ce: 00:3c:77:80:77:eb:43:7f:50:f0:d8:c1:44:dd:c7:6f:59:67: 3d:cd:ce:d5:f0:11:7c:80:51:19:58:ef:39:47:f7:d0:de:f3: c0:3e:1a:c5:fd:b3:6d:88:c4:ac:72:d4:02:9a:3d:4a:fc:d1: a5:5e:31:17:c1:0c:bd:60:8e:7d:43:e9:b7:0e:25:f7:5e:f1: 7c:24:f1:01:e6:de:c9:d2:4d:2c:6a:25:10:8e:d3:ec:e9:e0: 9c:40:fc:d9:e2:d2:0b:e5:ae:f5:2f:36:ff:38:1f:95:e5:b2: e2:a3:eb:77:47:b6:83:21:47:90:11:2b:7b:36:71:24:da:0b: da:f8:6c:a8:50:50:a9:06:01:08:88:7f:75:47:8d:5f:bf:82: 69:59:7f:9c:12:a8:62:1e:b2:f8:e9:53:7b:ca:02:8b:87:08: e8:30:47:68 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUf96Tza35b7PJMSkBEMKIZ6arXHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx ZTAxNzYwODAeFw0yNjA0MTgxOTQ5NTRaFw0yNjA0MTkyMTI1NTRaMDMxMTAvBgNV BAMTKDYwQzBDNzBGQzE3MjZGRkJCRjQwMTYyRjRERkQwNDIyMUE2NzlBOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoCLrq9Tei2vfSVV+xOx3arL6W 1CWJ9kB8LakpNozGnjZ0piYN8wOgaQR7skoGy4L7Eyw22zVXCzh0ICkK6c2wLVqJ eBamQMHySyiDLNu3fge9Xp0DxevatSyvjUmchyMYSXWrTuVWkOv+B0UcBlzpC+vV iOTWsWiz2hHLqlZn/oMihEybqPQ7wDelaDi80DwJySNqVtZnAZ78Hx9UX6ibV5uP cSZxeGD4t62+ZuKVa+mWUwYR2OYIC9mjg9/WNXt/oGGjPpZO7C/+rqlUYGXd7VxT ZwjeUIZCOolJcDFEj3N0rQy6cyKvZiv8QJ3XUjspNfZdtNPaeF+frXVj1DDPAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUYMDHD8Fyb/u/QBYvTf0EIhpnmpIwHwYDVR0j BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0 QmRnZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzBlMTNkOC1i ZmUwLTQyMzUtYWZiNC1kNTNlZGZiYWNkZDIvMC81RUNCNENBREJCQURENTAwRjQ5 Q0E2OTdENTY2QTI3NjFFMDE3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjB1o17Q5344vAS1k15Sx C4le/dcoVwwKQl9/FbBM5gQS6Z0tsCwAanRVJBb85FGV935XzZdCXhgpJl46aGdR d1WGyqsRDaju/QIxzq/BU8aTYygiiP0kLGXOADx3gHfrQ39Q8NjBRN3Hb1lnPc3O 1fARfIBRGVjvOUf30N7zwD4axf2zbYjErHLUApo9SvzRpV4xF8EMvWCOfUPptw4l 917xfCTxAebeydJNLGolEI7T7OngnED82eLSC+Wu9S82/zgfleWy4qPrd0e2gyFH kBErezZxJNoL2vhsqFBQqQYBCIh/dUeNX7+CaVl/nBKoYh6y+OlTe8oCi4cI6DBH aA== -----END CERTIFICATE-----Generated at Sun Apr 19 08:21:59 2026 by rpki-client