$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft File: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json) Hash identifier: y0Cm3V44Lo+C6JK4mNnQK4pfzJ+i79ivhzEPp08p9n0= Subject key identifier: 91:D9:C8:92:A0:86:E0:8D:C8:B4:C3:7E:82:02:92:30:0A:9F:C4:5C Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Certificate serial: 08869D4D1EDCE6631F72AF635200E51D04C90963 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft Manifest number: 01D0 Signing time: Sun 01 Mar 2026 05:46:34 +0000 Manifest this update: Sun 01 Mar 2026 05:41:34 +0000 Manifest next update: Mon 02 Mar 2026 08:37:34 +0000 Files and hashes: 1: 3139342e3132342e3233342e302f32342d3234203d3e20323031393037.roa (hash: P1rNrNq0Lsy4Pv36ykUIleWOvoAEcFUYAHvT3IiKS84=) 2: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: HzAN9ywzH3R4tgGHlz5ec2Bib9+nQQlSPhjXFH+uvKQ=) 3: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: 7RbGKTX0T75GWL+U9cYx0V2iGn8DIPgdGtE6PSL/e9k=) 4: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: wDL3d4A1d+S+hyAjhYBLt0XksiIY4fLz7lOilgNj2Q4=) 5: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: LZdhd8babbehfkgcaQ2p0QEt4TultBt5ttf3MMRXRbI=) 6: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: unIb/pLoJEr1pBLYhSY4VQ/RprOtasUPRROCGuOA9r4=) 7: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: b5xBss8x50/mTCwdi3YpTgkBRxgxQIEDRJCrw4DZBZw=) 8: 3139342e3132342e3233342e302f32342d3234203d3e203134363138.roa (hash: jmldibQztUu/uE9gn0LxmihLjuBeh91SIaguqVgH56w=) 9: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: JdRVqwJa3zxSGaxEmPMFPRyKZABPonSuZXOScZrUTH0=) 10: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: ys4GcQr92xf16wQYlCYeGPMDsfyEnGKsrz3bvGtNWC8=) 11: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: AFVeOnsvdfn5zr4jds6KNtr7n93z5bGnJNsS8Ufaz0U=) 12: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: vlI3tYFCLzWNGXLpIFZR5AHPwN6r5z5t+7vGqUPF4to=) 13: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: DZU46gedNFYz2v7yvGIXeVWs+yworgKzdoKm6wBF9RY=) 14: 326130663a336363333a343030303a3a2f34342d3434203d3e20323032333036.roa (hash: fxbR5GcPyoWqODdA3f1yyd4v8P4uCsBii+08ii9bg1w=) 15: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: hJUy+WAsteHuyZTTylubys83kZZc4LE0LX6QYeU4v/U=) 16: 3139342e3132342e3233342e302f32342d3234203d3e203136353039.roa (hash: yz5dw8t6yWoO2T3DnzEAtHSSXtxqaxMtoTJQ4OPxYFQ=) 17: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: ABkHDQKjEeANharZO1hp0RDKdEsWdRf0F4prEwfZnFs=) 18: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: NZmbB1AD2okfoNYoNRF6VSo9hkwhlpFlsxSprSq+6Jk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 08:37:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:86:9d:4d:1e:dc:e6:63:1f:72:af:63:52:00:e5:1d:04:c9:09:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Validity Not Before: Mar 1 05:41:34 2026 GMT Not After : Mar 2 08:37:34 2026 GMT Subject: CN=91D9C892A086E08DC8B4C37E820292300A9FC45C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cb:be:de:32:ad:da:68:c9:b9:f7:08:d2:4b: 48:51:d2:52:71:fd:fa:f8:fd:66:e4:fb:4d:0c:c4: ec:71:ed:8e:84:48:59:c4:a2:1c:3f:2e:1e:ac:1c: 51:ea:e0:a9:c1:1e:f8:2c:ba:17:e9:31:2d:31:d8: c6:43:95:54:cc:f4:d2:b4:d2:d5:9a:32:db:40:30: ef:7a:57:ea:a6:99:2e:ef:18:a5:9e:f8:49:5c:b1: f6:a3:aa:79:8c:14:7a:55:3b:3c:f8:a4:e3:d3:20: a6:95:c5:7e:9a:0d:01:14:f3:87:de:08:b4:bd:16: 9e:b5:dc:30:c7:f4:2b:42:22:69:20:9a:59:01:60: 4d:3c:9a:b1:ab:b6:ff:6a:0a:53:75:c3:f0:82:5d: cf:f2:a6:5f:89:85:43:c3:2c:bb:9d:1d:1f:b7:0a: 28:44:c7:c4:d1:f0:ac:79:25:62:81:06:4b:15:3e: 5a:08:72:ac:35:2f:f1:30:83:e8:85:0e:40:20:7f: 34:31:25:9f:55:8b:89:7c:b9:0f:e7:8b:6d:5e:da: f4:35:80:49:94:99:03:ae:c6:f2:e9:ea:f1:44:34: dd:90:ff:59:d7:be:c2:47:c9:dd:e8:e0:ad:43:84: 91:49:eb:4e:d4:de:77:4e:b1:70:d9:e2:69:f1:61: 1c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D9:C8:92:A0:86:E0:8D:C8:B4:C3:7E:82:02:92:30:0A:9F:C4:5C X509v3 Authority Key Identifier: keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:e1:e6:3e:c8:ee:ae:8a:29:ce:5e:fb:5a:95:2f:70:c9:5f: ff:d8:8f:98:4c:6c:9a:c8:18:fd:5a:b7:9a:a2:b4:c5:cb:1b: 73:58:11:59:fd:92:d2:a0:86:c7:92:64:b7:8c:20:b0:7c:73: 14:b5:ac:f4:11:3d:da:92:e5:f2:d7:b7:51:09:14:4e:91:e7: a5:ec:68:05:86:26:d3:fa:18:2a:a9:9c:23:45:7d:13:d7:cb: e8:79:fb:50:c2:1d:5e:04:b1:7e:cd:e1:f7:5f:48:e7:c3:0a: c8:f7:75:63:73:c4:e4:81:b3:10:1b:e6:b5:35:a8:f8:d0:ae: 56:15:f7:57:5b:c0:00:be:74:d6:33:aa:ea:47:e8:ea:ab:f4: 87:b7:73:b9:d3:08:1a:67:e6:c5:72:00:06:58:9f:cc:57:75: 46:9e:b4:75:da:33:7f:1b:97:e4:0a:0f:f0:0b:0f:fd:95:64: 0f:bf:d0:2e:4e:7e:33:30:2b:3d:d7:d6:d6:99:36:3d:2f:19: 91:87:20:b0:e3:fb:60:c4:db:0c:b1:99:49:70:1a:e7:99:2a: 99:ad:92:36:81:e5:56:8c:8d:20:23:21:35:ed:a7:df:bd:31: 69:8d:65:a8:16:d8:28:af:fb:f3:a3:5e:f2:49:f0:b5:fe:c4: f5:bc:66:f5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUCIadTR7c5mMfcq9jUgDlHQTJCWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2IyOWE3NzY2OWRmNWE3YTVjYjUwNmQ4MzllZThhYTQz MzdjY2FhYzAeFw0yNjAzMDEwNTQxMzRaFw0yNjAzMDIwODM3MzRaMDMxMTAvBgNV BAMTKDkxRDlDODkyQTA4NkUwOERDOEI0QzM3RTgyMDI5MjMwMEE5RkM0NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMy77eMq3aaMm59wjSS0hR0lJx /fr4/Wbk+00MxOxx7Y6ESFnEohw/Lh6sHFHq4KnBHvgsuhfpMS0x2MZDlVTM9NK0 0tWaMttAMO96V+qmmS7vGKWe+ElcsfajqnmMFHpVOzz4pOPTIKaVxX6aDQEU84fe CLS9Fp613DDH9CtCImkgmlkBYE08mrGrtv9qClN1w/CCXc/ypl+JhUPDLLudHR+3 CihEx8TR8Kx5JWKBBksVPloIcqw1L/Ewg+iFDkAgfzQxJZ9Vi4l8uQ/ni21e2vQ1 gEmUmQOuxvLp6vFENN2Q/1nXvsJHyd3o4K1DhJFJ607U3ndOsXDZ4mnxYRzVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUkdnIkqCG4I3ItMN+ggKSMAqfxFwwHwYDVR0j BBgwFoAUyymndmnfWnpctQbYOe6KpDN8yqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgtN2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhm MDZlLzAvQ0IyOUE3NzY2OURGNUE3QTVDQjUwNkQ4MzlFRThBQTQzMzdDQ0FBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3l5bW5kbW5mV25wY3RRYllPZTZLcERO OHlxdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iYjI1ZDA2OC03 ZjljLTRiMGUtYTY5NS0xNzc5YjdkOGYwNmUvMC9DQjI5QTc3NjY5REY1QTdBNUNC NTA2RDgzOUVFOEFBNDMzN0NDQUFDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARuHmPsjuroopzl77WpUv cMlf/9iPmExsmsgY/Vq3mqK0xcsbc1gRWf2S0qCGx5Jkt4wgsHxzFLWs9BE92pLl 8te3UQkUTpHnpexoBYYm0/oYKqmcI0V9E9fL6Hn7UMIdXgSxfs3h919I58MKyPd1 Y3PE5IGzEBvmtTWo+NCuVhX3V1vAAL501jOq6kfo6qv0h7dzudMIGmfmxXIABlif zFd1Rp60ddozfxuX5AoP8AsP/ZVkD7/QLk5+MzArPdfW1pk2PS8ZkYcgsOP7YMTb DLGZSXAa55kqma2SNoHlVoyNICMhNe2n370xaY1lqBbYKK/786Ne8knwtf7E9bxm 9Q== -----END CERTIFICATE-----Generated at Mon Mar 2 03:27:42 2026 by rpki-client