$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft File: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft (raw, json) Hash identifier: /J4rsxPTYMbOKcf29Ucl/xiJHQP4iMs2/klRYzYBzy4= Subject key identifier: EA:C1:85:5C:32:F4:35:77:EE:32:5B:74:2D:7C:36:8C:FB:7A:6C:60 Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE Certificate issuer: /CN=5da3215abfa4621d57709f838a92801f2e90ddfe Certificate serial: 323DA465AC80B07F9E71FD10D7B55636E3FB4FA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft Manifest number: 0690 Signing time: Tue 28 Jul 2026 16:14:08 +0000 Manifest this update: Tue 28 Jul 2026 16:09:08 +0000 Manifest next update: Wed 29 Jul 2026 18:53:08 +0000 Files and hashes: 1: 34352e38312e35382e302f32342d3234203d3e203133333335.roa (hash: q1odFkTeiB/pBEbWg5JpQkAxpmrH9S0QmR2/CtllItc=) 2: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl (hash: w1zpcfBXVseawRBOv0EiZVIavT4OylbrWzgbQLwOGw4=) 3: 34352e38312e35392e302f32342d3234203d3e20323131343339.roa (hash: PzQrEpsLL9icV7+wAMJ22TsUek+9+7dTOPFgPD6vtOM=) 4: 326130393a643634303a3a2f32392d3239203d3e20313938333435.roa (hash: 2ZJoizA2XrGcopsLwhs8oaMaqFtkP0G9iClmvxEJgnM=) 5: 34352e38312e35382e302f32342d3234203d3e20323039323432.roa (hash: UKvcqUxUrgd2F0qduNt/9nJuPUaDtCItgdXC0fI9BhQ=) 6: 34352e38312e35392e302f32342d3234203d3e20323132333834.roa (hash: Z55LDvJNhjuOlIMhPU51UoeT0VK3qlu4pE/EHJdIaDE=) 7: 34352e38312e35362e302f32332d3234203d3e20383334.roa (hash: Owft5MlrXPzDCqAtIj6Xho5F1QHToynJvYlpIsxaEgQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:3d:a4:65:ac:80:b0:7f:9e:71:fd:10:d7:b5:56:36:e3:fb:4f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe Validity Not Before: Jul 28 16:09:08 2026 GMT Not After : Jul 29 18:53:08 2026 GMT Subject: CN=EAC1855C32F43577EE325B742D7C368CFB7A6C60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5d:d3:48:ab:d3:d3:9c:21:ab:df:2b:3f:81: 0b:48:a1:e0:05:04:15:9c:3f:9e:55:41:f0:d2:c5: be:9f:78:52:2c:5f:43:eb:cf:ef:1a:69:d0:3f:ce: 87:10:a5:0c:19:21:b3:23:4f:8b:85:60:be:55:e4: 4b:98:fb:fe:c2:74:fd:b9:a5:f7:1b:4d:e8:df:ad: 61:64:e9:fa:81:4d:24:47:d5:58:81:be:6f:5b:0e: 91:71:6c:fd:e2:71:56:b8:35:0a:b5:c3:35:a5:cc: b5:80:a9:fe:1c:65:00:7a:22:80:ea:1c:b3:f0:0a: 97:27:cd:40:b2:0d:7a:36:12:31:f6:8c:45:9b:16: 9a:bd:0b:93:30:ec:86:1b:1f:ed:13:41:5b:ec:0b: d7:b2:69:da:78:ed:65:b6:d7:8d:8e:de:0f:5e:6e: 64:46:18:34:92:c3:4b:c0:69:e1:7e:b2:f5:4c:d0: bd:2b:b8:75:34:b1:22:70:d5:9d:86:43:77:47:8d: 7d:91:47:84:8f:c8:0d:20:b9:7f:ce:e8:a4:64:5d: 56:43:a1:13:04:04:a2:fb:13:03:0f:fb:19:16:c0: ff:7d:2d:0e:71:9a:4f:7e:63:63:e4:f8:3c:f7:ed: 6d:67:00:f3:54:a2:e5:4f:90:0e:ec:86:39:dd:88: 9e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C1:85:5C:32:F4:35:77:EE:32:5B:74:2D:7C:36:8C:FB:7A:6C:60 X509v3 Authority Key Identifier: keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:a8:e7:51:8e:20:7f:8d:29:c4:3e:e0:a2:33:48:c8:e7:f4: b8:c7:57:36:07:6a:12:00:5f:82:46:24:61:d0:83:82:03:2f: a9:51:2c:0b:38:55:e9:a3:b5:01:57:e5:dc:8e:8f:bd:74:e1: 78:09:e0:51:64:19:c9:30:7c:a6:2a:17:67:51:b3:ac:10:d1: bf:bf:91:13:45:2f:48:2e:83:1a:db:70:fc:36:6d:d4:06:b6: 1d:4e:e2:68:c4:d3:c0:8d:f7:75:94:c3:d3:f3:db:e1:73:1f: b8:29:36:15:43:c2:f8:d4:a6:de:64:b6:13:00:5c:cd:aa:fb: dc:ed:db:92:05:6b:c1:86:b2:38:fb:e5:ce:9e:41:c2:1a:a3: eb:f0:87:c3:8c:0f:70:3e:76:8d:74:38:1c:85:cf:87:61:20: 3e:02:07:2c:02:32:72:73:27:9f:3e:84:c5:f3:99:2e:50:97: a9:51:0b:aa:2d:54:3b:c4:29:a8:3e:8a:e0:43:b9:de:ae:4e: 4a:b9:d4:8a:ff:36:d5:48:ba:32:c0:fc:c3:73:ac:0e:bd:cd: 31:f7:32:fb:ad:fb:37:06:34:c3:ff:16:eb:bf:b3:e2:1e:46: 8a:f3:39:37:9b:b6:67:6a:9f:44:9c:bd:8d:39:6b:b6:c7:52: 05:30:6c:30 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUMj2kZayAsH+ecf0Q17VWNuP7T6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRhMzIxNWFiZmE0NjIxZDU3NzA5ZjgzOGE5MjgwMWYy ZTkwZGRmZTAeFw0yNjA3MjgxNjA5MDhaFw0yNjA3MjkxODUzMDhaMDMxMTAvBgNV BAMTKEVBQzE4NTVDMzJGNDM1NzdFRTMyNUI3NDJEN0MzNjhDRkI3QTZDNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCXdNIq9PTnCGr3ys/gQtIoeAF BBWcP55VQfDSxb6feFIsX0Prz+8aadA/zocQpQwZIbMjT4uFYL5V5EuY+/7CdP25 pfcbTejfrWFk6fqBTSRH1ViBvm9bDpFxbP3icVa4NQq1wzWlzLWAqf4cZQB6IoDq HLPwCpcnzUCyDXo2EjH2jEWbFpq9C5Mw7IYbH+0TQVvsC9eyadp47WW2142O3g9e bmRGGDSSw0vAaeF+svVM0L0ruHU0sSJw1Z2GQ3dHjX2RR4SPyA0guX/O6KRkXVZD oRMEBKL7EwMP+xkWwP99LQ5xmk9+Y2Pk+Dz37W1nAPNUouVPkA7shjndiJ67AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU6sGFXDL0NXfuMlt0LXw2jPt6bGAwHwYDVR0j BBgwFoAUXaMhWr+kYh1XcJ+DipKAHy6Q3f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYyNDU2N2ItN2E3NC00YzFmLWFhODUtZGQyNGFmNzNj Y2JiLzAvNURBMzIxNUFCRkE0NjIxRDU3NzA5RjgzOEE5MjgwMUYyRTkwRERGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hhTWhXci1rWWgxWGNKLURpcEtBSHk2 UTNmNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjI0NTY3Yi03 YTc0LTRjMWYtYWE4NS1kZDI0YWY3M2NjYmIvMC81REEzMjE1QUJGQTQ2MjFENTc3 MDlGODM4QTkyODAxRjJFOTBEREZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATajnUY4gf40pxD7gojNI yOf0uMdXNgdqEgBfgkYkYdCDggMvqVEsCzhV6aO1AVfl3I6PvXTheAngUWQZyTB8 pioXZ1GzrBDRv7+RE0UvSC6DGttw/DZt1Aa2HU7iaMTTwI33dZTD0/Pb4XMfuCk2 FUPC+NSm3mS2EwBczar73O3bkgVrwYayOPvlzp5Bwhqj6/CHw4wPcD52jXQ4HIXP h2EgPgIHLAIycnMnnz6ExfOZLlCXqVELqi1UO8QpqD6K4EO53q5OSrnUiv821Ui6 MsD8w3OsDr3NMfcy+637NwY0w/8W67+z4h5GivM5N5u2Z2qfRJy9jTlrtsdSBTBs MA== -----END CERTIFICATE-----Generated at Tue Jul 28 20:36:16 2026 by rpki-client