$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft File: 295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft (raw, json) Hash identifier: 3zsJJPIPF02kjq1suSBCVfhx3Z+gugrW/eJXzMjdqHQ= Subject key identifier: 2F:31:36:09:D5:E9:BA:7A:AE:9A:12:F4:40:41:A8:92:C2:56:3B:78 Authority key identifier: 29:5B:60:BB:0C:BB:4A:53:D9:54:5B:C2:0B:77:4F:FA:03:6B:4A:46 Certificate issuer: /CN=295b60bb0cbb4a53d9545bc20b774ffa036b4a46 Certificate serial: 3C9ACE992243F56A56546D3299F2CA1E7C66EB7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVtguwy7SlPZVFvCC3dP-gNrSkY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft Manifest number: 29 Signing time: Sat 13 Jun 2026 14:49:28 +0000 Manifest this update: Sat 13 Jun 2026 14:44:28 +0000 Manifest next update: Sun 14 Jun 2026 17:41:28 +0000 Files and hashes: 1: 326130313a6234303a3a2f32392d3438203d3e203134363138.roa (hash: aQ7Zs1GXD2YhsOFRwSIq/T9v5bNh9rH0xnn29aQh438=) 2: 326130313a6234303a3a2f32392d3438203d3e203438373030.roa (hash: zprKAfMxuhh44vBmZdJyS4oUsSHm80ESOd6bFepuvfw=) 3: AS48700.asa (hash: vc5Bz0waDsfQ0bs/Gu6racwgW1gSmnJnpEJHohHaeIg=) 4: 326130313a6234303a3a2f32392d3438203d3e203136353039.roa (hash: CivQf/u/Gk+LE+nokddTRzH9kTLqet4Y/E+g0q0KfIo=) 5: 295B60BB0CBB4A53D9545BC20B774FFA036B4A46.crl (hash: ZP0GEE+/9EJYC0eMD1jAyL+XeQuTbsvfYRjhlpy15Ps=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft rsync://rpki.ripe.net/repository/DEFAULT/KVtguwy7SlPZVFvCC3dP-gNrSkY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 08:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:9a:ce:99:22:43:f5:6a:56:54:6d:32:99:f2:ca:1e:7c:66:eb:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295b60bb0cbb4a53d9545bc20b774ffa036b4a46 Validity Not Before: Jun 13 14:44:28 2026 GMT Not After : Jun 14 17:41:28 2026 GMT Subject: CN=2F313609D5E9BA7AAE9A12F44041A892C2563B78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:40:ed:a0:0b:ee:af:0a:35:73:b6:8e:6b:49: 4e:13:2d:01:62:1c:9d:e0:19:53:e1:97:dc:8a:64: 7b:09:5c:13:e2:29:45:9e:57:5c:13:0e:ce:7b:e7: 7f:42:ea:84:e4:7a:e3:53:dd:26:10:ad:ec:75:c2: f6:93:ce:04:63:2f:00:ac:3f:4c:8d:1f:37:7e:78: db:22:aa:e4:a7:48:2d:ef:ed:6c:ed:2e:e2:95:d8: ac:f2:0b:a1:91:4f:e5:4f:d5:53:ed:cc:e4:69:3a: ae:ed:9b:04:9a:af:11:0e:c5:e3:cd:2d:96:1f:06: df:b8:d4:04:4e:ec:17:51:b5:73:f5:c7:ae:36:60: 81:f3:d5:8d:90:41:5e:6d:ce:e4:80:69:da:ea:d5: af:7d:42:e5:88:3e:e0:5a:dc:4f:7e:13:d7:ef:f2: 8d:b1:db:5a:83:bb:39:a0:0e:a6:71:a0:94:c3:e2: 83:3d:13:60:05:d9:71:6e:05:b0:ab:11:3d:fb:82: c2:bd:b4:ec:b2:38:65:94:fc:a6:d2:5f:12:18:79: 94:dd:03:7f:c4:c3:c9:d6:41:3c:2d:f5:ea:49:46: df:8d:70:27:a5:6f:12:5a:c5:4f:51:3d:72:97:b7: 95:30:b7:fa:ac:2c:93:43:df:61:12:29:6d:0a:ce: b4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:31:36:09:D5:E9:BA:7A:AE:9A:12:F4:40:41:A8:92:C2:56:3B:78 X509v3 Authority Key Identifier: keyid:29:5B:60:BB:0C:BB:4A:53:D9:54:5B:C2:0B:77:4F:FA:03:6B:4A:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVtguwy7SlPZVFvCC3dP-gNrSkY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:84:9c:89:f9:c2:80:e0:e2:45:b7:23:bc:79:5a:c3:1b:6d: 3b:9a:ac:76:dd:ae:a1:be:e3:17:bf:1d:8b:0f:ad:a6:4d:3e: 61:83:07:b4:0f:35:e8:f5:8c:83:93:97:92:f8:0d:66:0a:92: 2d:fa:e5:14:a1:87:ad:74:ab:65:0e:fe:2b:c7:f0:22:de:bf: 8b:c0:e4:59:08:f4:ae:dd:0c:77:ad:0a:7b:cb:d3:82:8b:09: bd:72:56:e9:b5:d6:05:a6:6f:91:c4:c7:d8:1e:39:bc:4c:30: c1:56:bb:7e:56:02:c4:32:f1:15:ac:52:2e:66:ca:a6:78:0a: cd:db:0c:fc:d4:05:eb:7a:aa:49:4b:fa:0b:e8:f4:cd:94:18: cb:7d:d9:31:21:24:e6:64:41:fe:34:b3:14:20:7d:c0:89:20: 98:fe:19:e5:52:bd:b9:3a:47:af:a7:de:60:43:ea:b4:60:75: 83:75:a5:ed:73:52:84:f5:0f:a3:db:2a:ed:fc:ff:b2:01:05: cf:e6:0f:fe:be:7d:3d:04:47:60:00:88:86:f9:8d:ed:9e:52: 67:4e:ae:04:0e:68:74:35:a0:76:c9:1a:87:e1:ae:ec:35:79: 83:5b:99:ff:fe:02:66:11:7f:8e:90:52:a9:23:31:94:82:6a: d1:7d:8d:6a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPJrOmSJD9WpWVG0ymfLKHnxm634wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1YjYwYmIwY2JiNGE1M2Q5NTQ1YmMyMGI3NzRmZmEw MzZiNGE0NjAeFw0yNjA2MTMxNDQ0MjhaFw0yNjA2MTQxNzQxMjhaMDMxMTAvBgNV BAMTKDJGMzEzNjA5RDVFOUJBN0FBRTlBMTJGNDQwNDFBODkyQzI1NjNCNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrQO2gC+6vCjVzto5rSU4TLQFi HJ3gGVPhl9yKZHsJXBPiKUWeV1wTDs57539C6oTkeuNT3SYQrex1wvaTzgRjLwCs P0yNHzd+eNsiquSnSC3v7WztLuKV2KzyC6GRT+VP1VPtzORpOq7tmwSarxEOxePN LZYfBt+41ARO7BdRtXP1x642YIHz1Y2QQV5tzuSAadrq1a99QuWIPuBa3E9+E9fv 8o2x21qDuzmgDqZxoJTD4oM9E2AF2XFuBbCrET37gsK9tOyyOGWU/KbSXxIYeZTd A3/Ew8nWQTwt9epJRt+NcCelbxJaxU9RPXKXt5Uwt/qsLJND32ESKW0KzrQrAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQULzE2CdXpunqumhL0QEGoksJWO3gwHwYDVR0j BBgwFoAUKVtguwy7SlPZVFvCC3dP+gNrSkYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzUvMjk1QjYwQkIwQ0JCNEE1M0Q5NTQ1QkMyMEI3NzRGRkEwMzZCNEE0Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0tWdGd1d3k3U2xQWlZGdkNDM2RQLWdO clNrWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0y MDU4LTQzYmItOWFjNi01YWI0MmRmYmY0MDkvNS8yOTVCNjBCQjBDQkI0QTUzRDk1 NDVCQzIwQjc3NEZGQTAzNkI0QTQ2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkoScifnCgODiRbcjvHla wxttO5qsdt2uob7jF78diw+tpk0+YYMHtA816PWMg5OXkvgNZgqSLfrlFKGHrXSr ZQ7+K8fwIt6/i8DkWQj0rt0Md60Ke8vTgosJvXJW6bXWBaZvkcTH2B45vEwwwVa7 flYCxDLxFaxSLmbKpngKzdsM/NQF63qqSUv6C+j0zZQYy33ZMSEk5mRB/jSzFCB9 wIkgmP4Z5VK9uTpHr6feYEPqtGB1g3Wl7XNShPUPo9sq7fz/sgEFz+YP/r59PQRH YACIhvmN7Z5SZ06uBA5odDWgdskah+Gu7DV5g1uZ//4CZhF/jpBSqSMxlIJq0X2N ag== -----END CERTIFICATE-----Generated at Sat Jun 13 19:03:52 2026 by rpki-client