$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft File: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft (raw, json) Hash identifier: zz34hGoP9ufPo768B5VDUm9t2YX6Tcgpg7InibOkbw0= Subject key identifier: 8A:D3:DC:A1:7E:E6:8B:30:41:F7:E1:A9:C8:5B:FD:14:C5:F2:C7:30 Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE Certificate issuer: /CN=5da3215abfa4621d57709f838a92801f2e90ddfe Certificate serial: 7B90CECE7CD455A658A87459AAC7B8421216084D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft Manifest number: 06D9 Signing time: Sun 20 Sep 2026 08:05:43 +0000 Manifest this update: Sun 20 Sep 2026 08:00:43 +0000 Manifest next update: Mon 21 Sep 2026 08:39:43 +0000 Files and hashes: 1: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl (hash: 6koaaXWDE7dzyAW7Q2XGoDouT5Nr5n1dVu95U6LUMJo=) 2: 34352e38312e35392e302f32342d3234203d3e20323132333834.roa (hash: Z55LDvJNhjuOlIMhPU51UoeT0VK3qlu4pE/EHJdIaDE=) 3: 326130393a643634303a3a2f32392d3239203d3e20313938333435.roa (hash: 2ZJoizA2XrGcopsLwhs8oaMaqFtkP0G9iClmvxEJgnM=) 4: 34352e38312e35392e302f32342d3234203d3e20323131343339.roa (hash: PzQrEpsLL9icV7+wAMJ22TsUek+9+7dTOPFgPD6vtOM=) 5: 34352e38312e35382e302f32342d3234203d3e20323039323432.roa (hash: UKvcqUxUrgd2F0qduNt/9nJuPUaDtCItgdXC0fI9BhQ=) 6: 34352e38312e35362e302f32332d3234203d3e20323134343332.roa (hash: jTYk6R8qRCYlAGPxNdkm45gT8NS2V3wjwOqhFHVfbDc=) 7: 34352e38312e35382e302f32342d3234203d3e203133333335.roa (hash: q1odFkTeiB/pBEbWg5JpQkAxpmrH9S0QmR2/CtllItc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 08:39:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:90:ce:ce:7c:d4:55:a6:58:a8:74:59:aa:c7:b8:42:12:16:08:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe Validity Not Before: Sep 20 08:00:43 2026 GMT Not After : Sep 21 08:39:43 2026 GMT Subject: CN=8AD3DCA17EE68B3041F7E1A9C85BFD14C5F2C730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:23:72:4e:2e:ae:cf:47:ee:0b:91:54:30:37: 56:1f:0f:88:aa:71:31:52:32:02:55:65:42:a7:22: 52:b6:9a:52:37:c2:40:27:e2:07:66:2b:18:f5:43: 3b:54:e6:df:04:5e:ae:04:93:38:50:74:71:e0:29: 2a:e8:27:64:0a:30:78:1a:03:2b:0f:de:f3:b0:25: 6b:6f:35:a8:63:0e:01:24:f0:24:e7:a2:9f:e2:a6: 92:4a:af:32:ef:19:44:9e:8e:bb:84:fa:4b:95:15: c8:4c:7e:66:4e:fd:30:9f:8d:60:2b:1e:d6:19:c4: 54:a3:7b:76:d8:ba:50:62:6d:f0:37:37:41:a6:e2: 74:8e:c4:47:90:80:9b:f3:c0:43:d9:cc:f1:45:85: 71:1b:49:ca:44:2e:73:fd:17:d4:5b:e0:34:49:f5: cf:9c:cb:d6:ec:ff:63:b4:6e:81:52:09:ee:85:ff: 42:76:70:c7:f8:71:7c:8d:ae:ed:c5:61:d1:44:f5: 79:0e:3e:b0:8d:10:97:5e:84:64:5d:06:e5:98:1d: fc:8b:45:08:68:11:52:90:cd:b2:35:5d:46:81:88: 71:5b:65:47:2a:e0:0d:6a:c8:f8:fb:24:47:51:c3: 21:ce:50:6e:1e:c6:45:c7:84:3e:c1:0f:43:1c:2d: b1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D3:DC:A1:7E:E6:8B:30:41:F7:E1:A9:C8:5B:FD:14:C5:F2:C7:30 X509v3 Authority Key Identifier: keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:08:68:e5:2f:14:68:aa:a9:ec:5b:b9:26:83:53:6c:00:0b: da:45:2b:f8:e3:01:6a:8e:53:ea:05:bc:6b:73:1f:0a:01:1f: 70:89:f2:89:bf:9d:79:b6:b2:e3:4f:65:32:d6:7e:e8:f5:01: 48:6d:eb:9d:ce:cc:af:94:99:ab:fd:36:2d:0f:eb:93:70:99: 54:80:a4:41:3b:3a:9e:82:d0:fd:14:1c:c2:cc:c1:a8:7d:a2: 78:37:22:65:54:84:8d:a0:7e:74:13:9f:64:94:10:21:6f:50: 04:92:24:9d:81:0a:3b:01:37:6c:d1:28:c3:b5:30:e2:87:56: d9:f6:b6:3f:bc:41:50:72:3a:ac:c9:5d:1f:af:2f:5e:a2:38: 62:0e:db:ce:ec:c0:97:70:12:1f:3b:27:7c:12:ad:6a:f9:18: f7:2a:36:3f:16:fc:5e:14:06:f2:86:a5:06:ee:92:71:61:f3: d3:a4:08:2f:ff:9a:6c:c2:74:c3:74:ff:6a:d1:78:de:50:da: a2:5f:a1:59:da:fd:bb:90:b4:83:ad:98:42:dc:c2:55:2c:8d: df:30:48:f5:04:ff:d6:a2:6d:51:8c:c1:ae:5a:01:b9:fe:b9: 40:d3:ed:30:b7:43:7f:3f:8f:2e:d5:2b:97:72:1a:19:d4:43: 9d:6a:52:3f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUe5DOznzUVaZYqHRZqse4QhIWCE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRhMzIxNWFiZmE0NjIxZDU3NzA5ZjgzOGE5MjgwMWYy ZTkwZGRmZTAeFw0yNjA5MjAwODAwNDNaFw0yNjA5MjEwODM5NDNaMDMxMTAvBgNV BAMTKDhBRDNEQ0ExN0VFNjhCMzA0MUY3RTFBOUM4NUJGRDE0QzVGMkM3MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjI3JOLq7PR+4LkVQwN1YfD4iq cTFSMgJVZUKnIlK2mlI3wkAn4gdmKxj1QztU5t8EXq4EkzhQdHHgKSroJ2QKMHga AysP3vOwJWtvNahjDgEk8CTnop/ippJKrzLvGUSejruE+kuVFchMfmZO/TCfjWAr HtYZxFSje3bYulBibfA3N0Gm4nSOxEeQgJvzwEPZzPFFhXEbScpELnP9F9Rb4DRJ 9c+cy9bs/2O0boFSCe6F/0J2cMf4cXyNru3FYdFE9XkOPrCNEJdehGRdBuWYHfyL RQhoEVKQzbI1XUaBiHFbZUcq4A1qyPj7JEdRwyHOUG4exkXHhD7BD0McLbEFAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUitPcoX7mizBB9+GpyFv9FMXyxzAwHwYDVR0j BBgwFoAUXaMhWr+kYh1XcJ+DipKAHy6Q3f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYyNDU2N2ItN2E3NC00YzFmLWFhODUtZGQyNGFmNzNj Y2JiLzAvNURBMzIxNUFCRkE0NjIxRDU3NzA5RjgzOEE5MjgwMUYyRTkwRERGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hhTWhXci1rWWgxWGNKLURpcEtBSHk2 UTNmNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjI0NTY3Yi03 YTc0LTRjMWYtYWE4NS1kZDI0YWY3M2NjYmIvMC81REEzMjE1QUJGQTQ2MjFENTc3 MDlGODM4QTkyODAxRjJFOTBEREZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmwho5S8UaKqp7Fu5JoNT bAAL2kUr+OMBao5T6gW8a3MfCgEfcInyib+debay409lMtZ+6PUBSG3rnc7Mr5SZ q/02LQ/rk3CZVICkQTs6noLQ/RQcwszBqH2ieDciZVSEjaB+dBOfZJQQIW9QBJIk nYEKOwE3bNEow7Uw4odW2fa2P7xBUHI6rMldH68vXqI4Yg7bzuzAl3ASHzsnfBKt avkY9yo2Pxb8XhQG8oalBu6ScWHz06QIL/+abMJ0w3T/atF43lDaol+hWdr9u5C0 g62YQtzCVSyN3zBI9QT/1qJtUYzBrloBuf65QNPtMLdDfz+PLtUrl3IaGdRDnWpS Pw== -----END CERTIFICATE-----Generated at Sun Sep 20 23:54:03 2026 by rpki-client