$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft File: 0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft (raw, json) Hash identifier: 0hkNNLetXD/HNDmzEGnNjh82BRxeSkCt9qSaPEHhUZc= Subject key identifier: C8:DD:E0:E0:12:9D:D3:F3:96:28:A0:2E:A9:AA:80:0D:E6:3D:72:08 Authority key identifier: 0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA Certificate issuer: /CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea Certificate serial: 648EB33B9408EB13C75D7326D17A3B472AA9E554 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft Manifest number: DA Signing time: Sun 20 Sep 2026 08:04:10 +0000 Manifest this update: Sun 20 Sep 2026 07:59:10 +0000 Manifest next update: Mon 21 Sep 2026 09:01:10 +0000 Files and hashes: 1: 326130613a643638303a3a2f33322d3438203d3e20313339333137.roa (hash: 9uxdhCWJM/sIXCpTZUmH78FRG6qiNbULLGusY6bMbzg=) 2: 326130613a643638373a666630323a3a2f34382d3438203d3e20323139323037.roa (hash: 5JWWZDi+y2DIDiFR71Ufp8CF8RxIHJzTGTA47i2VuYE=) 3: 326130613a643638323a653030303a3a2f33362d3438203d3e20323139323037.roa (hash: /hbUb7P8tvehfjH0Hs94vC86vj3k0KrkZvYJd6dLPnA=) 4: 326130613a643638373a666630303a3a2f34382d3438203d3e20313937323133.roa (hash: SkwT1h/rOaQClLo9nHFAVUlnnxxHoz85B/heCrM8trg=) 5: 326130613a643638373a663130303a3a2f34342d3438203d3e20313937323133.roa (hash: bHHSi5wagGdCluZPsKdv0VQ8BFQU3w+P+YxMSNDafL4=) 6: 326130613a643638373a666630333a3a2f34382d3438203d3e20323139323038.roa (hash: S/8ZK1ErCZvTRtQCq1QRmXQBY3n8crW0uhTdSwe8qG0=) 7: 326130613a643638373a653130303a3a2f34332d3438203d3e20323139343333.roa (hash: g1wT/6cmNUPL0/+gCGthFM4aX0wibSOImG3Rr13sSvQ=) 8: 326130613a643638313a3a2f33322d3438203d3e20313339373931.roa (hash: LD70u5QlVqEB9vvyRbLQY7rIc7jKzVNRzxV1VLwEmOE=) 9: 238A11AE245357E72FEB39785C7BC03A973A44E1.cer (hash: R+HEqGQkKX3kuC+uAGVikvyFGt/9CvxJ0iCn1j10oDE=) 10: 326130613a643638373a666630313a3a2f34382d3438203d3e20323139353435.roa (hash: rL8ASD59Ti8nB9XD3UXOLC8XxvqgDesYATRPUcKVSuY=) 11: 326130613a643638373a666630363a3a2f34382d3438203d3e20323138373031.roa (hash: 1T45wJGc9qWA/I6HYWiBwXOEkTOAa5L1s8+wvsXsnRY=) 12: 326130613a643638373a663030303a3a2f34342d3438203d3e20313432343333.roa (hash: AMQEmk2Gamce4CGjOhcsatfMgR2ITuuPxLRE5OPFALo=) 13: 326130613a643638373a666630343a3a2f34382d3438203d3e20323138383638.roa (hash: /Qn7vWpWpCtp1RtdEsraoox42aGCAAZITsl1NydtXls=) 14: 326130613a643638373a666630353a3a2f34382d3438203d3e20323138383637.roa (hash: sQzmM+cfjw9OGqZLZbYBKONhAU1u7EoEQyRU3OqTZ8U=) 15: 326130613a643638373a653030303a3a2f34332d3438203d3e20323139343333.roa (hash: tW+nGNlDGvPdAUmeC4K3mnasXAgQn+DooLTJQYmn1dE=) 16: 326130613a643638323a663030303a3a2f33362d3438203d3e20323139323833.roa (hash: 8/Dy4zPyPwRTfYS2Cii0dXxY7IAyPHqGc67WcpaHY8g=) 17: 0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl (hash: R6gA9pCF8fNXpI+etJfPicXS/Ry0BenYJsGgyYoEmgw=) 18: 326130613a643638323a643030303a3a2f33362d3438203d3e20323139323038.roa (hash: v/BWIbyLFdNKWIJBTAMGuH9YaifhTiluWVcVxi+Fhlk=) 19: 326130613a643638333a3a2f33322d3438203d3e2030.roa (hash: 1AoAuE4mRiqziiHkgepF+g+OjuGOS1bv+xQ+rN/5kXU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 09:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:8e:b3:3b:94:08:eb:13:c7:5d:73:26:d1:7a:3b:47:2a:a9:e5:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea Validity Not Before: Sep 20 07:59:10 2026 GMT Not After : Sep 21 09:01:10 2026 GMT Subject: CN=C8DDE0E0129DD3F39628A02EA9AA800DE63D7208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:16:8e:83:4a:ce:be:01:fb:c5:1d:8b:38:f4: e1:1e:23:4b:07:c8:dc:ab:48:18:c5:ef:d9:0f:b0: d2:fd:8b:ee:dd:68:16:cc:22:f7:49:9a:fb:c9:ab: 92:33:85:22:32:b8:06:80:ed:c3:15:94:1d:17:c5: f2:95:45:31:9f:4e:b7:16:97:c9:7c:ea:88:d9:35: 3d:48:8c:b0:73:1b:3e:6c:af:53:bb:3d:e2:da:0d: 50:0b:d8:0e:ed:d1:56:87:89:61:42:e1:41:4f:e6: 5c:59:75:c1:3b:94:8d:ce:31:2a:c0:02:bf:24:f2: 79:fe:79:f4:e4:08:f7:00:b3:ac:e3:a7:bf:23:4b: 4a:f4:db:d0:ef:85:81:37:b2:54:6f:d6:41:23:97: ad:17:f3:d6:38:32:68:7c:c3:c6:ea:ca:96:5c:ea: 1a:c6:b6:a1:2d:a6:bc:6e:4b:58:9d:7a:b8:aa:db: ce:25:80:01:a7:d8:8f:5b:82:43:f9:d0:ca:8a:fb: 5f:73:32:88:dd:f5:e6:ea:50:98:08:3f:41:48:e8: 58:01:6c:e8:16:f1:ab:a0:7b:7a:54:00:ab:fb:10: 1f:d6:2f:6a:d6:7c:cc:ab:4b:9b:7c:94:f9:18:da: 4f:8f:08:da:6d:2d:f5:8f:43:17:14:90:2a:35:fc: 4f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:DD:E0:E0:12:9D:D3:F3:96:28:A0:2E:A9:AA:80:0D:E6:3D:72:08 X509v3 Authority Key Identifier: keyid:0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:4c:75:1b:f1:60:96:a8:e9:b5:e5:f5:8a:ce:a8:52:f5:ec: 3e:48:4d:69:7a:54:da:90:8e:80:b7:1e:ae:32:3a:50:5f:c1: b1:de:f4:e3:91:8a:c5:3e:96:6d:bf:4a:34:54:f1:e9:5e:0f: 9c:2d:75:f7:0e:0d:eb:36:9c:62:b7:64:e0:06:a9:73:5e:7e: 30:56:5b:3b:ff:72:07:87:11:04:54:d5:a0:fa:e1:ba:97:94: 2f:90:e9:7d:f9:e7:22:bc:09:f5:5d:0d:f9:5f:16:61:46:df: 88:1d:e2:c6:cd:38:07:5b:08:e9:8d:f1:83:3a:f4:29:ec:68: 0c:35:b2:be:13:63:ed:93:2e:f2:c1:1c:2f:e4:c3:28:76:63: ec:9c:ce:4c:cd:de:64:d0:a4:12:09:46:ff:12:dc:3e:27:ba: 84:28:c1:39:88:63:a0:9d:c0:39:ea:83:54:cf:c6:e6:86:f1: 67:cb:79:70:a3:ab:f1:ac:86:d4:b6:cd:80:b4:c7:8c:7d:6b: 5b:7a:43:86:ee:8b:9b:03:66:79:5b:ea:2a:7f:aa:f6:1d:96: ce:33:21:65:85:09:e3:ba:00:04:b9:bc:32:e9:a6:8a:54:f2: 17:f6:62:73:25:f4:60:8b:90:fc:87:bf:4b:20:33:f1:91:82: bc:e8:c0:20 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZI6zO5QI6xPHXXMm0Xo7Ryqp5VQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGU3MGFlMGFjZDBiZTgzZDJkNDU4Y2EyMDdiMWQ0ZmZh M2MzZTRlYTAeFw0yNjA5MjAwNzU5MTBaFw0yNjA5MjEwOTAxMTBaMDMxMTAvBgNV BAMTKEM4RERFMEUwMTI5REQzRjM5NjI4QTAyRUE5QUE4MDBERTYzRDcyMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuFo6DSs6+AfvFHYs49OEeI0sH yNyrSBjF79kPsNL9i+7daBbMIvdJmvvJq5IzhSIyuAaA7cMVlB0XxfKVRTGfTrcW l8l86ojZNT1IjLBzGz5sr1O7PeLaDVAL2A7t0VaHiWFC4UFP5lxZdcE7lI3OMSrA Ar8k8nn+efTkCPcAs6zjp78jS0r029DvhYE3slRv1kEjl60X89Y4Mmh8w8bqypZc 6hrGtqEtprxuS1ideriq284lgAGn2I9bgkP50MqK+19zMojd9ebqUJgIP0FI6FgB bOgW8auge3pUAKv7EB/WL2rWfMyrS5t8lPkY2k+PCNptLfWPQxcUkCo1/E/lAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUyN3g4BKd0/OWKKAuqaqADeY9cggwHwYDVR0j BBgwFoAUDnCuCs0L6D0tRYyiB7HU/6PD5OowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjNmMmFhYWUtMjNjZi00YTM3LTk0MDMtNzQzYjE1ZWMy YThlLzAvMEU3MEFFMEFDRDBCRTgzRDJENDU4Q0EyMDdCMUQ0RkZBM0MzRTRFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RuQ3VDczBMNkQwdFJZeWlCN0hVXzZQ RDVPby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMC8wRTcwQUUwQUNEMEJFODNEMkQ0 NThDQTIwN0IxRDRGRkEzQzNFNEVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKUx1G/FglqjpteX1is6o UvXsPkhNaXpU2pCOgLcerjI6UF/Bsd7045GKxT6Wbb9KNFTx6V4PnC119w4N6zac Yrdk4Aapc15+MFZbO/9yB4cRBFTVoPrhupeUL5DpffnnIrwJ9V0N+V8WYUbfiB3i xs04B1sI6Y3xgzr0KexoDDWyvhNj7ZMu8sEcL+TDKHZj7JzOTM3eZNCkEglG/xLc Pie6hCjBOYhjoJ3AOeqDVM/G5obxZ8t5cKOr8ayG1LbNgLTHjH1rW3pDhu6LmwNm eVvqKn+q9h2WzjMhZYUJ47oABLm8MummilTyF/ZicyX0YIuQ/Ie/SyAz8ZGCvOjA IA== -----END CERTIFICATE-----Generated at Sun Sep 20 19:24:51 2026 by rpki-client