$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft File: 5ECB4CADBBADD500F49CA697D566A2761E017608.mft (raw, json) Hash identifier: /gQugRDJFj2a7rnPKVA2mgQ4bf5MU+4QU+s66w/Qheg= Subject key identifier: AA:9D:2E:3A:48:29:82:C1:C6:4D:7C:4B:E8:0E:D9:74:E4:C7:F8:97 Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Certificate serial: 0D32A4D8CEADE0A8A69DED1153A8960F7193CA21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft Manifest number: 030F Signing time: Fri 12 Jun 2026 23:57:34 +0000 Manifest this update: Fri 12 Jun 2026 23:52:34 +0000 Manifest next update: Sun 14 Jun 2026 00:46:34 +0000 Files and hashes: 1: 5ECB4CADBBADD500F49CA697D566A2761E017608.crl (hash: Fy8qZYPvumG1+Mx0a9IADy11Y1912vRNyuB7Vq5KjbI=) 2: 3231332e3235342e3137302e302f32342d3234203d3e20323134393431.roa (hash: WuIyFXGDgkt2cltxoxT/RYao20HHu+r0Sn5rfpjFnHA=) 3: 3134312e3139332e3232382e302f32342d3234203d3e20323134323038.roa (hash: ifyEdtBW0BhdKWJrpJ6bYfBeNzyrtZtj9JtftvgAsco=) 4: 3231332e3235342e3137302e302f32342d3234203d3e20323038343833.roa (hash: LH3qwxx3cFGEc2nT11lVGioc4VsEH2u028n8n+GZTy8=) 5: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (hash: Q4yUdFFGtrq1xUVDtHn0DoNWjht0ICRHxiUX7p+xRAQ=) 6: 38362e35342e3137322e302f32342d3234203d3e20323134343332.roa (hash: +6HuSGy13PoSBfdgi660PmTLE8Z52TLvw+ru7fcB7AI=) 7: 3231332e3235342e3137302e302f32342d3234203d3e203438363738.roa (hash: ttSPLNkVmnmfbB1Jg0U4OFMRv4cZWxzTg6oBluFltrk=) 8: 3137302e36322e3139302e302f32342d3234203d3e203438393235.roa (hash: 8/++60jg7XtzmZ45FRECeqxUVy5048XlFvcQJYMNUjo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 00:46:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:32:a4:d8:ce:ad:e0:a8:a6:9d:ed:11:53:a8:96:0f:71:93:ca:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Validity Not Before: Jun 12 23:52:34 2026 GMT Not After : Jun 14 00:46:34 2026 GMT Subject: CN=AA9D2E3A482982C1C64D7C4BE80ED974E4C7F897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:44:73:43:32:a5:86:b5:ec:af:13:aa:c7:a8: f8:d1:e2:65:61:94:5a:99:40:8e:f0:93:13:26:d1: 3a:ef:b6:2b:48:cf:31:cb:a7:e3:c5:1f:96:de:d4: d2:be:a5:21:b0:20:60:c0:86:b6:72:7c:eb:c1:75: bb:a3:ec:41:17:63:8c:7e:00:88:36:4c:48:b4:16: 3c:b8:d1:0d:39:8d:a1:7b:90:9e:d5:ff:4c:3d:31: 30:87:a8:16:2a:57:a8:24:0a:ff:b8:be:02:3b:27: 97:df:c6:8e:cb:2f:39:35:6a:e7:0a:a3:31:45:50: 63:07:14:10:ce:cc:af:ff:c1:69:d0:8d:0f:93:aa: 24:7f:c6:5b:48:a0:37:8c:86:bd:18:6c:94:5f:c0: a9:76:40:46:54:f4:77:10:83:cd:4a:3a:18:41:61: 4a:04:5c:d1:60:da:db:52:8e:05:5a:12:c1:52:63: 66:b7:7a:c6:95:03:07:7a:3a:7e:d3:53:bb:4f:a5: 3b:14:0e:f3:7d:6e:09:e4:c2:6b:d9:da:60:e6:6a: e1:3f:f8:4d:9e:f8:be:77:4e:7a:c2:02:e0:ad:19: 8b:1a:1d:5c:22:e9:09:78:21:47:3c:fa:ee:46:ef: df:f3:2b:e1:98:06:55:3e:18:8a:14:6a:44:72:d1: 24:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:9D:2E:3A:48:29:82:C1:C6:4D:7C:4B:E8:0E:D9:74:E4:C7:F8:97 X509v3 Authority Key Identifier: keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:e9:47:bd:5e:85:06:f5:f3:be:15:dd:91:f8:78:1e:6e:35: d4:26:59:8e:f6:a3:dd:ef:51:3f:ba:00:6b:8f:28:62:a1:50: 54:2d:54:be:a3:57:51:e3:38:18:98:c1:28:b4:f6:6f:7e:51: 21:7e:1a:4c:93:09:d3:81:d2:dd:d4:4c:d3:18:8c:ad:e3:2e: ae:18:19:7f:df:32:35:f5:af:41:db:5f:e9:08:5a:ee:e6:e2: d7:3b:49:ee:11:88:e3:c2:2b:5c:ef:60:60:df:08:9a:d0:72: 17:58:86:05:55:a3:3b:4c:6f:43:20:1a:b2:32:05:02:f2:d9: b1:05:10:ce:f7:18:44:a9:f7:6a:9d:7a:bf:e1:ce:04:79:1b: ce:cf:f3:5a:88:6d:09:f3:e8:c0:6f:de:fa:6b:35:4a:ab:fc: 6a:6b:f8:78:67:bd:41:c2:04:82:c0:94:99:76:53:de:ff:fb: 01:ce:14:0e:b1:c8:1f:57:82:7e:7b:c6:34:11:5b:fb:86:4f: 6d:df:91:64:f6:80:5a:4f:62:db:cb:11:85:32:02:5b:e7:50: a1:b1:9e:24:36:80:c8:86:ac:d4:e4:d9:78:20:d5:8d:09:14: 6c:d7:1f:f0:4c:4f:95:34:e0:f2:ac:cf:77:de:d4:f5:80:65: de:9c:82:9a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDTKk2M6t4Kimne0RU6iWD3GTyiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx ZTAxNzYwODAeFw0yNjA2MTIyMzUyMzRaFw0yNjA2MTQwMDQ2MzRaMDMxMTAvBgNV BAMTKEFBOUQyRTNBNDgyOTgyQzFDNjREN0M0QkU4MEVEOTc0RTRDN0Y4OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbRHNDMqWGteyvE6rHqPjR4mVh lFqZQI7wkxMm0TrvtitIzzHLp+PFH5be1NK+pSGwIGDAhrZyfOvBdbuj7EEXY4x+ AIg2TEi0Fjy40Q05jaF7kJ7V/0w9MTCHqBYqV6gkCv+4vgI7J5ffxo7LLzk1aucK ozFFUGMHFBDOzK//wWnQjQ+TqiR/xltIoDeMhr0YbJRfwKl2QEZU9HcQg81KOhhB YUoEXNFg2ttSjgVaEsFSY2a3esaVAwd6On7TU7tPpTsUDvN9bgnkwmvZ2mDmauE/ +E2e+L53TnrCAuCtGYsaHVwi6Ql4IUc8+u5G79/zK+GYBlU+GIoUakRy0STZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUqp0uOkgpgsHGTXxL6A7ZdOTH+JcwHwYDVR0j BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0 QmRnZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzBlMTNkOC1i ZmUwLTQyMzUtYWZiNC1kNTNlZGZiYWNkZDIvMC81RUNCNENBREJCQURENTAwRjQ5 Q0E2OTdENTY2QTI3NjFFMDE3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoOlHvV6FBvXzvhXdkfh4 Hm411CZZjvaj3e9RP7oAa48oYqFQVC1UvqNXUeM4GJjBKLT2b35RIX4aTJMJ04HS 3dRM0xiMreMurhgZf98yNfWvQdtf6Qha7ubi1ztJ7hGI48IrXO9gYN8ImtByF1iG BVWjO0xvQyAasjIFAvLZsQUQzvcYRKn3ap16v+HOBHkbzs/zWohtCfPowG/e+ms1 Sqv8amv4eGe9QcIEgsCUmXZT3v/7Ac4UDrHIH1eCfnvGNBFb+4ZPbd+RZPaAWk9i 28sRhTICW+dQobGeJDaAyIas1OTZeCDVjQkUbNcf8ExPlTTg8qzPd97U9YBl3pyC mg== -----END CERTIFICATE-----Generated at Sat Jun 13 08:29:07 2026 by rpki-client