$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft File: 5ECB4CADBBADD500F49CA697D566A2761E017608.mft (raw, json) Hash identifier: qKVf3+avsyPga8Sk6bzKoocK5vPsMxMO/UC+0ZJDJc8= Subject key identifier: 89:09:DC:7E:41:0C:24:D5:F9:95:D4:8D:F7:7F:18:70:6B:AE:C2:4D Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Certificate serial: 0BCDE6F730BD1742F49401DE66707E6A880C69DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft Manifest number: 0283 Signing time: Sun 01 Mar 2026 09:26:04 +0000 Manifest this update: Sun 01 Mar 2026 09:21:04 +0000 Manifest next update: Mon 02 Mar 2026 09:42:04 +0000 Files and hashes: 1: 3231332e3235342e3137302e302f32342d3234203d3e20323134393431.roa (hash: WuIyFXGDgkt2cltxoxT/RYao20HHu+r0Sn5rfpjFnHA=) 2: 38362e35342e3137322e302f32342d3234203d3e20323134343332.roa (hash: +6HuSGy13PoSBfdgi660PmTLE8Z52TLvw+ru7fcB7AI=) 3: 5ECB4CADBBADD500F49CA697D566A2761E017608.crl (hash: wtgPX71A75rxl6JIAEIS779Lg462GHQfLcwgh0HdLIg=) 4: 3231332e3235342e3137302e302f32342d3234203d3e20323038343833.roa (hash: gjwDheXZBS8eOtwo7Ja5xPFcujfV7TC07EH1z972oQ4=) 5: 3134312e3139332e3232382e302f32342d3234203d3e20323134323038.roa (hash: p1kuPenqcy6Et0XPjwxcCLB+vpEy3ekHhe4EodnqolI=) 6: 3231332e3235342e3137302e302f32342d3234203d3e203438363738.roa (hash: ttSPLNkVmnmfbB1Jg0U4OFMRv4cZWxzTg6oBluFltrk=) 7: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (hash: Q4yUdFFGtrq1xUVDtHn0DoNWjht0ICRHxiUX7p+xRAQ=) 8: 3137302e36322e3139302e302f32342d3234203d3e203438393235.roa (hash: 8/++60jg7XtzmZ45FRECeqxUVy5048XlFvcQJYMNUjo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:42:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:cd:e6:f7:30:bd:17:42:f4:94:01:de:66:70:7e:6a:88:0c:69:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Validity Not Before: Mar 1 09:21:04 2026 GMT Not After : Mar 2 09:42:04 2026 GMT Subject: CN=8909DC7E410C24D5F995D48DF77F18706BAEC24D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:11:3b:68:5d:59:fb:2a:d6:af:96:8e:40:96: 63:ec:d6:35:a1:cd:36:ec:8e:96:91:51:f2:b7:14: fc:58:d2:06:29:79:c6:31:39:90:05:15:a2:7e:d1: b9:97:ee:cc:b1:eb:9d:eb:d1:9b:66:55:b1:02:c9: bb:6e:dc:db:66:f3:b8:9f:ca:62:ce:63:97:c3:ee: f7:39:1b:8f:33:c8:8c:e7:8f:fe:6c:ab:0a:c5:2a: bf:47:81:32:80:c0:ce:4b:b9:ca:12:7b:4a:8b:ba: 27:60:0f:9b:33:9b:ab:af:dc:87:b0:af:4d:0f:35: 4d:0e:6b:91:5c:b0:b2:d9:f8:47:35:59:74:05:9a: 9e:75:31:d8:c4:d3:1d:49:97:21:09:de:04:71:94: 59:29:5f:fc:9f:86:ab:03:99:55:ad:3a:ee:28:7f: 79:a9:7e:19:06:ee:66:93:ce:90:35:ed:d7:cb:3a: cf:d5:14:67:3e:d7:09:07:77:c2:7e:00:cc:cd:46: 5b:08:f6:6c:98:c7:7b:a6:db:e5:fa:84:b8:53:b4: 9f:39:a4:6c:34:be:00:a7:ad:92:9a:4a:ec:80:5a: bf:c4:a3:e3:65:6b:3d:8a:b4:63:78:0a:eb:ad:53: b8:7b:ee:60:84:56:58:f6:fd:8c:0f:67:15:6f:f6: 0c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:09:DC:7E:41:0C:24:D5:F9:95:D4:8D:F7:7F:18:70:6B:AE:C2:4D X509v3 Authority Key Identifier: keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:70:9d:f4:56:d0:39:9b:94:14:08:09:26:a5:74:98:e9:71: d0:52:ce:5b:10:36:80:e1:23:a0:6e:53:95:9d:05:ec:9b:7e: 81:76:1a:8a:5d:28:16:ae:38:d0:67:c9:d2:c7:bc:5b:30:8b: 67:b0:98:51:4c:ed:a1:57:ae:b9:40:25:38:b0:ac:47:e8:fe: d9:4b:29:cc:0e:2e:62:8a:b4:35:53:13:0c:d4:5a:11:a5:89: e8:78:10:5e:05:29:d3:b5:44:63:62:45:6b:ee:c1:20:ac:f0: 23:ba:c7:a2:24:9d:0c:31:94:56:56:4a:85:90:6e:79:3d:d5: 1e:9d:91:04:0a:ce:c7:18:38:0f:b1:84:1b:bd:0b:29:d8:0a: 13:49:55:97:ca:62:92:a9:29:80:e0:c4:da:83:ee:69:0f:1c: 36:95:32:83:94:92:e0:1c:d5:0a:f9:31:1f:50:71:5a:c6:9c: 26:05:3a:c9:72:0c:c1:b7:92:06:b7:d8:3f:12:52:eb:61:6e: 54:c3:0b:da:ba:01:d9:b9:7c:04:49:87:00:75:0a:61:4d:4e: a2:2c:37:1a:c6:e1:9b:72:b0:12:0b:8a:03:25:39:b0:9e:78: f9:c6:ab:53:ab:82:88:91:76:73:d4:9f:ad:0a:d5:53:c0:0b: b6:21:b6:3a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUC83m9zC9F0L0lAHeZnB+aogMad0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx ZTAxNzYwODAeFw0yNjAzMDEwOTIxMDRaFw0yNjAzMDIwOTQyMDRaMDMxMTAvBgNV BAMTKDg5MDlEQzdFNDEwQzI0RDVGOTk1RDQ4REY3N0YxODcwNkJBRUMyNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRETtoXVn7Ktavlo5AlmPs1jWh zTbsjpaRUfK3FPxY0gYpecYxOZAFFaJ+0bmX7syx653r0ZtmVbECybtu3Ntm87if ymLOY5fD7vc5G48zyIznj/5sqwrFKr9HgTKAwM5LucoSe0qLuidgD5szm6uv3Iew r00PNU0Oa5FcsLLZ+Ec1WXQFmp51MdjE0x1JlyEJ3gRxlFkpX/yfhqsDmVWtOu4o f3mpfhkG7maTzpA17dfLOs/VFGc+1wkHd8J+AMzNRlsI9myYx3um2+X6hLhTtJ85 pGw0vgCnrZKaSuyAWr/Eo+Nlaz2KtGN4CuutU7h77mCEVlj2/YwPZxVv9gyXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUiQncfkEMJNX5ldSN938YcGuuwk0wHwYDVR0j BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0 QmRnZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzBlMTNkOC1i ZmUwLTQyMzUtYWZiNC1kNTNlZGZiYWNkZDIvMC81RUNCNENBREJCQURENTAwRjQ5 Q0E2OTdENTY2QTI3NjFFMDE3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMHCd9FbQOZuUFAgJJqV0 mOlx0FLOWxA2gOEjoG5TlZ0F7Jt+gXYail0oFq440GfJ0se8WzCLZ7CYUUztoVeu uUAlOLCsR+j+2UspzA4uYoq0NVMTDNRaEaWJ6HgQXgUp07VEY2JFa+7BIKzwI7rH oiSdDDGUVlZKhZBueT3VHp2RBArOxxg4D7GEG70LKdgKE0lVl8pikqkpgODE2oPu aQ8cNpUyg5SS4BzVCvkxH1BxWsacJgU6yXIMwbeSBrfYPxJS62FuVMML2roB2bl8 BEmHAHUKYU1Ooiw3Gsbhm3KwEguKAyU5sJ54+carU6uCiJF2c9SfrQrVU8ALtiG2 Og== -----END CERTIFICATE-----Generated at Sun Mar 1 23:56:54 2026 by rpki-client