$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft File: 0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft (raw, json) Hash identifier: JQ2LyFDoS1CX+1YQHLfQF9VEBwHR6yKgwdK63/DFoHg= Subject key identifier: B5:A7:EA:C8:2E:DF:3D:92:CB:6F:93:48:E7:F4:5D:39:4B:00:E5:4E Authority key identifier: 0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA Certificate issuer: /CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea Certificate serial: 4D5F6ECB01E8A21607781F83D2979007A4319AFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft Manifest number: 78 Signing time: Tue 28 Jul 2026 14:44:26 +0000 Manifest this update: Tue 28 Jul 2026 14:39:26 +0000 Manifest next update: Wed 29 Jul 2026 14:56:26 +0000 Files and hashes: 1: 326130613a643638323a643030303a3a2f33362d3438203d3e20323139323038.roa (hash: v/BWIbyLFdNKWIJBTAMGuH9YaifhTiluWVcVxi+Fhlk=) 2: 0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl (hash: HRFy3SE4OqKR2tQKVY16GPAmYNd7TPbPWdFBq4Q54XQ=) 3: 326130613a643638313a3a2f33322d3438203d3e20313339373931.roa (hash: LD70u5QlVqEB9vvyRbLQY7rIc7jKzVNRzxV1VLwEmOE=) 4: 326130613a643638373a663130303a3a2f34342d3438203d3e20313937323133.roa (hash: bHHSi5wagGdCluZPsKdv0VQ8BFQU3w+P+YxMSNDafL4=) 5: 326130613a643638373a663030303a3a2f34342d3438203d3e20313432343333.roa (hash: AMQEmk2Gamce4CGjOhcsatfMgR2ITuuPxLRE5OPFALo=) 6: 326130613a643638303a3a2f33322d3438203d3e20313339333137.roa (hash: 9uxdhCWJM/sIXCpTZUmH78FRG6qiNbULLGusY6bMbzg=) 7: 326130613a643638323a663030303a3a2f33362d3438203d3e20323139323833.roa (hash: 8/Dy4zPyPwRTfYS2Cii0dXxY7IAyPHqGc67WcpaHY8g=) 8: 326130613a643638373a666630313a3a2f34382d3438203d3e20323139353435.roa (hash: rL8ASD59Ti8nB9XD3UXOLC8XxvqgDesYATRPUcKVSuY=) 9: 326130613a643638373a666630323a3a2f34382d3438203d3e20323139323037.roa (hash: 5JWWZDi+y2DIDiFR71Ufp8CF8RxIHJzTGTA47i2VuYE=) 10: 326130613a643638323a653030303a3a2f33362d3438203d3e20323139323037.roa (hash: /hbUb7P8tvehfjH0Hs94vC86vj3k0KrkZvYJd6dLPnA=) 11: 80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer (hash: TYsfkHtNOfK76uqy14SYaCemKP3HftisBSZd+5DPrVE=) 12: 326130613a643638373a666630303a3a2f34382d3438203d3e20313937323133.roa (hash: SkwT1h/rOaQClLo9nHFAVUlnnxxHoz85B/heCrM8trg=) 13: 326130613a643638373a653030303a3a2f34332d3438203d3e20323139343333.roa (hash: tW+nGNlDGvPdAUmeC4K3mnasXAgQn+DooLTJQYmn1dE=) 14: 326130613a643638333a3a2f33322d3438203d3e2030.roa (hash: 1AoAuE4mRiqziiHkgepF+g+OjuGOS1bv+xQ+rN/5kXU=) 15: 326130613a643638373a666630333a3a2f34382d3438203d3e20323139323038.roa (hash: S/8ZK1ErCZvTRtQCq1QRmXQBY3n8crW0uhTdSwe8qG0=) 16: 326130613a643638373a653130303a3a2f34332d3438203d3e20323139343333.roa (hash: g1wT/6cmNUPL0/+gCGthFM4aX0wibSOImG3Rr13sSvQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:5f:6e:cb:01:e8:a2:16:07:78:1f:83:d2:97:90:07:a4:31:9a:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea Validity Not Before: Jul 28 14:39:26 2026 GMT Not After : Jul 29 14:56:26 2026 GMT Subject: CN=B5A7EAC82EDF3D92CB6F9348E7F45D394B00E54E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a2:54:41:e7:6e:1e:e1:7a:e2:8f:e8:03:bf: 8d:e0:d2:d2:00:e6:a9:54:63:57:0e:71:c4:b3:f4: 6e:2d:a2:85:d5:e5:14:08:bc:10:3b:9f:0e:c5:68: dc:46:67:92:dc:e2:ff:80:21:f0:de:e5:25:69:20: e6:6e:10:63:9d:e9:c9:e7:ed:c0:72:66:e6:e5:7a: ae:01:3c:fd:03:f4:45:41:35:7a:51:50:60:45:b8: 98:eb:33:78:39:9a:7d:75:23:cc:72:08:12:8f:03: 96:49:e4:d7:8c:f3:80:6a:30:33:4c:49:eb:bf:36: d7:df:97:cd:45:de:c7:a4:34:bd:cf:a0:89:36:e0: 7a:e1:bf:19:e3:40:e8:9c:b1:7a:fd:32:b5:4f:79: 9a:89:ac:5c:ff:05:68:82:fc:ff:50:69:88:84:88: 0e:69:86:72:07:d2:a6:8e:90:8e:dc:00:0a:3b:bf: 07:5d:90:c3:11:4e:6c:fe:7e:dc:c0:17:ec:9a:e4: 2c:5c:08:a9:4a:46:28:af:aa:3e:50:a6:98:3a:f0: 51:7b:bd:a2:9e:cd:79:f5:b4:e2:3a:6e:0e:c3:02: 25:9c:cb:28:01:3e:11:60:12:93:d4:ec:6b:36:bf: a7:a4:51:0d:59:93:56:21:62:0c:37:77:e2:2d:2b: 9d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A7:EA:C8:2E:DF:3D:92:CB:6F:93:48:E7:F4:5D:39:4B:00:E5:4E X509v3 Authority Key Identifier: keyid:0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:9c:c2:79:dc:30:3b:a5:c2:20:47:b4:f3:07:0f:f5:fd:91: 4f:c7:6c:4a:00:9e:14:92:b1:7d:c4:8f:d1:0f:61:1b:14:cc: f5:04:bb:0b:a6:b6:54:cf:fd:bf:cf:b8:6b:15:15:26:fe:e5: 1b:61:30:06:6c:90:b4:48:df:d0:7a:73:e1:ba:da:67:3b:e5: 57:9f:d0:ac:ff:3f:c8:14:42:88:39:47:66:92:39:3f:8b:bd: a2:de:e6:ea:6e:6b:1d:a8:81:c9:02:0e:aa:43:9b:35:88:e1: 55:a8:27:53:56:63:e8:b8:7a:f1:d9:99:cf:60:17:6e:f9:e0: f6:b0:b7:1d:10:63:d6:c7:9e:45:bc:c2:a1:31:df:9b:40:f7: 9c:ee:db:82:16:a0:11:a9:7c:b3:35:a6:d2:fe:19:cd:e8:5e: 61:cb:28:0c:1d:33:b9:e0:d3:af:78:7d:73:89:9d:ca:49:74: a0:6e:58:5d:d6:97:a7:89:3d:55:60:d3:9e:3e:45:49:36:20: 2e:8d:d3:6f:3a:d7:6d:ea:f9:b6:e6:14:aa:b9:34:11:b7:f4: 88:78:b8:3d:8c:f5:17:84:4c:99:fe:33:68:3f:94:8f:e3:33: 63:d2:1e:4e:dd:be:69:bf:c7:64:bc:04:ed:7c:d0:6a:36:95: f1:24:c5:12 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTV9uywHoohYHeB+D0peQB6QxmvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGU3MGFlMGFjZDBiZTgzZDJkNDU4Y2EyMDdiMWQ0ZmZh M2MzZTRlYTAeFw0yNjA3MjgxNDM5MjZaFw0yNjA3MjkxNDU2MjZaMDMxMTAvBgNV BAMTKEI1QTdFQUM4MkVERjNEOTJDQjZGOTM0OEU3RjQ1RDM5NEIwMEU1NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjolRB524e4Xrij+gDv43g0tIA 5qlUY1cOccSz9G4tooXV5RQIvBA7nw7FaNxGZ5Lc4v+AIfDe5SVpIOZuEGOd6cnn 7cByZubleq4BPP0D9EVBNXpRUGBFuJjrM3g5mn11I8xyCBKPA5ZJ5NeM84BqMDNM Seu/Ntffl81F3sekNL3PoIk24HrhvxnjQOicsXr9MrVPeZqJrFz/BWiC/P9QaYiE iA5phnIH0qaOkI7cAAo7vwddkMMRTmz+ftzAF+ya5CxcCKlKRiivqj5Qppg68FF7 vaKezXn1tOI6bg7DAiWcyygBPhFgEpPU7Gs2v6ekUQ1Zk1YhYgw3d+ItK53DAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUtafqyC7fPZLLb5NI5/RdOUsA5U4wHwYDVR0j BBgwFoAUDnCuCs0L6D0tRYyiB7HU/6PD5OowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjNmMmFhYWUtMjNjZi00YTM3LTk0MDMtNzQzYjE1ZWMy YThlLzAvMEU3MEFFMEFDRDBCRTgzRDJENDU4Q0EyMDdCMUQ0RkZBM0MzRTRFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RuQ3VDczBMNkQwdFJZeWlCN0hVXzZQ RDVPby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMC8wRTcwQUUwQUNEMEJFODNEMkQ0 NThDQTIwN0IxRDRGRkEzQzNFNEVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKpzCedwwO6XCIEe08wcP 9f2RT8dsSgCeFJKxfcSP0Q9hGxTM9QS7C6a2VM/9v8+4axUVJv7lG2EwBmyQtEjf 0Hpz4braZzvlV5/QrP8/yBRCiDlHZpI5P4u9ot7m6m5rHaiByQIOqkObNYjhVagn U1Zj6Lh68dmZz2AXbvng9rC3HRBj1seeRbzCoTHfm0D3nO7bghagEal8szWm0v4Z zeheYcsoDB0zueDTr3h9c4mdykl0oG5YXdaXp4k9VWDTnj5FSTYgLo3TbzrXber5 tuYUqrk0Ebf0iHi4PYz1F4RMmf4zaD+Uj+MzY9IeTt2+ab/HZLwE7XzQajaV8STF Eg== -----END CERTIFICATE-----Generated at Tue Jul 28 19:06:39 2026 by rpki-client