$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft File: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json) Hash identifier: BJsy3BL6J9LZ1no0Bw6SFpn6AhViasURQrtMDfm52Aw= Subject key identifier: 62:C8:4F:5D:D4:DD:65:32:E9:3A:16:21:AB:A5:71:9D:D0:D0:35:97 Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Certificate serial: 09CD9148694D3564EBE47B9614D484BC83BA22F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft Manifest number: 0298 Signing time: Tue 28 Jul 2026 04:22:11 +0000 Manifest this update: Tue 28 Jul 2026 04:17:11 +0000 Manifest next update: Wed 29 Jul 2026 05:33:11 +0000 Files and hashes: 1: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: LZdhd8babbehfkgcaQ2p0QEt4TultBt5ttf3MMRXRbI=) 2: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: AFVeOnsvdfn5zr4jds6KNtr7n93z5bGnJNsS8Ufaz0U=) 3: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: HzAN9ywzH3R4tgGHlz5ec2Bib9+nQQlSPhjXFH+uvKQ=) 4: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: unIb/pLoJEr1pBLYhSY4VQ/RprOtasUPRROCGuOA9r4=) 5: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: DZU46gedNFYz2v7yvGIXeVWs+yworgKzdoKm6wBF9RY=) 6: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: hJUy+WAsteHuyZTTylubys83kZZc4LE0LX6QYeU4v/U=) 7: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: NZmbB1AD2okfoNYoNRF6VSo9hkwhlpFlsxSprSq+6Jk=) 8: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: b5xBss8x50/mTCwdi3YpTgkBRxgxQIEDRJCrw4DZBZw=) 9: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: 7RbGKTX0T75GWL+U9cYx0V2iGn8DIPgdGtE6PSL/e9k=) 10: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: wDL3d4A1d+S+hyAjhYBLt0XksiIY4fLz7lOilgNj2Q4=) 11: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: ys4GcQr92xf16wQYlCYeGPMDsfyEnGKsrz3bvGtNWC8=) 12: 3139342e3132342e3233342e302f32342d3234203d3e203632303638.roa (hash: VKu+iyAXdNGspkh1hqCECAzpccaJ3+JyjcRyNO0/DAw=) 13: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: vlI3tYFCLzWNGXLpIFZR5AHPwN6r5z5t+7vGqUPF4to=) 14: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: ABkHDQKjEeANharZO1hp0RDKdEsWdRf0F4prEwfZnFs=) 15: 326130663a336363333a343030303a3a2f34342d3434203d3e20323032333036.roa (hash: fxbR5GcPyoWqODdA3f1yyd4v8P4uCsBii+08ii9bg1w=) 16: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: 2NkN1XhDllxZ/BNiXds+6EBxcRMIO6wqiMjUhDWV2TE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 05:33:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:cd:91:48:69:4d:35:64:eb:e4:7b:96:14:d4:84:bc:83:ba:22:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Validity Not Before: Jul 28 04:17:11 2026 GMT Not After : Jul 29 05:33:11 2026 GMT Subject: CN=62C84F5DD4DD6532E93A1621ABA5719DD0D03597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b3:ad:96:4f:92:04:3c:36:1b:47:4a:a0:5e: 81:8a:9e:a7:de:ac:5e:c4:49:9b:6f:91:86:a6:17: 58:d3:58:72:f6:2f:d6:6a:f1:b3:11:c4:2d:3b:5a: 43:1c:24:7e:94:2f:82:48:42:b0:00:3f:66:59:8a: cf:bd:9d:e0:9a:1d:35:c7:19:5a:17:b0:7d:28:b6: b8:32:11:49:dd:38:0b:40:cb:ba:de:6e:85:6e:c6: 64:91:3d:29:56:bf:25:ca:de:9c:92:b2:22:a6:a7: 30:27:57:ac:2c:e1:ce:95:50:1a:07:51:80:a4:49: 92:26:5f:d1:df:fa:95:8c:88:03:7a:b5:60:8f:ec: e6:cc:99:b3:6a:2f:a3:a2:07:d7:66:4d:e1:77:8c: c0:97:39:f5:1c:e6:04:39:6a:c8:77:85:c4:4e:8f: ea:c4:12:e4:61:6a:40:e6:7a:1e:42:0b:4b:60:60: ba:81:1c:c3:b1:69:47:72:74:f0:ea:2a:6e:7e:e5: 21:97:98:a3:c5:c4:2b:97:3c:43:cb:34:bb:41:3a: 57:70:d6:b8:47:3b:f3:5c:d8:90:39:c2:db:cb:c1: 38:0e:2b:2b:7e:91:ea:07:e8:69:84:be:68:9c:05: 1a:72:a7:6a:11:92:c5:ad:cc:17:3f:28:92:85:a9: fd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C8:4F:5D:D4:DD:65:32:E9:3A:16:21:AB:A5:71:9D:D0:D0:35:97 X509v3 Authority Key Identifier: keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:36:13:b8:6d:c8:c9:1b:a7:60:6e:51:72:84:57:b4:4b:2b: 2d:79:47:27:6c:c0:d3:15:25:7a:d6:88:56:13:14:89:05:42: 54:d9:18:cd:1a:bd:e4:34:21:3a:f4:d0:9f:00:10:ab:a8:4b: e7:84:76:0d:75:8f:82:a7:fd:b4:2f:ea:e3:05:4a:92:41:dc: e9:3c:10:e0:ad:69:12:74:2a:ff:d6:4c:08:f1:be:92:ba:c6: 35:de:46:23:e1:bd:53:ec:55:31:e1:67:c9:e4:2d:9e:bd:a2: 75:3b:5e:4d:64:fb:2b:b9:00:24:7f:c2:08:25:a3:b6:37:12: 55:5a:f7:c0:f5:ab:41:d5:02:5c:60:7b:fe:f4:1e:a0:e6:d4: d9:41:e5:0e:69:15:62:db:0c:60:a0:49:78:42:9b:60:3e:4e: a3:ca:1a:ae:dd:a1:6c:5b:03:43:a6:6a:8b:12:fe:f3:d6:34: 0a:b5:b1:b6:1d:5c:db:0d:8d:e4:43:d8:e7:85:39:34:9e:10: 94:4b:8d:85:00:63:64:cc:b8:93:3a:36:ee:e4:1e:25:89:9f: 90:f6:22:8e:44:59:bf:69:c0:06:95:38:52:c8:5d:c4:d3:7c: 32:4e:8b:4f:01:24:71:e1:cb:82:a0:83:7f:ba:fc:e4:a3:c7: 49:99:91:c7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUCc2RSGlNNWTr5HuWFNSEvIO6IvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2IyOWE3NzY2OWRmNWE3YTVjYjUwNmQ4MzllZThhYTQz MzdjY2FhYzAeFw0yNjA3MjgwNDE3MTFaFw0yNjA3MjkwNTMzMTFaMDMxMTAvBgNV BAMTKDYyQzg0RjVERDRERDY1MzJFOTNBMTYyMUFCQTU3MTlERDBEMDM1OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5s62WT5IEPDYbR0qgXoGKnqfe rF7ESZtvkYamF1jTWHL2L9Zq8bMRxC07WkMcJH6UL4JIQrAAP2ZZis+9neCaHTXH GVoXsH0otrgyEUndOAtAy7reboVuxmSRPSlWvyXK3pySsiKmpzAnV6ws4c6VUBoH UYCkSZImX9Hf+pWMiAN6tWCP7ObMmbNqL6OiB9dmTeF3jMCXOfUc5gQ5ash3hcRO j+rEEuRhakDmeh5CC0tgYLqBHMOxaUdydPDqKm5+5SGXmKPFxCuXPEPLNLtBOldw 1rhHO/Nc2JA5wtvLwTgOKyt+keoH6GmEvmicBRpyp2oRksWtzBc/KJKFqf2nAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUYshPXdTdZTLpOhYhq6VxndDQNZcwHwYDVR0j BBgwFoAUyymndmnfWnpctQbYOe6KpDN8yqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgtN2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhm MDZlLzAvQ0IyOUE3NzY2OURGNUE3QTVDQjUwNkQ4MzlFRThBQTQzMzdDQ0FBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3l5bW5kbW5mV25wY3RRYllPZTZLcERO OHlxdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iYjI1ZDA2OC03 ZjljLTRiMGUtYTY5NS0xNzc5YjdkOGYwNmUvMC9DQjI5QTc3NjY5REY1QTdBNUNC NTA2RDgzOUVFOEFBNDMzN0NDQUFDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOTYTuG3IyRunYG5RcoRX tEsrLXlHJ2zA0xUletaIVhMUiQVCVNkYzRq95DQhOvTQnwAQq6hL54R2DXWPgqf9 tC/q4wVKkkHc6TwQ4K1pEnQq/9ZMCPG+krrGNd5GI+G9U+xVMeFnyeQtnr2idTte TWT7K7kAJH/CCCWjtjcSVVr3wPWrQdUCXGB7/vQeoObU2UHlDmkVYtsMYKBJeEKb YD5Oo8oart2hbFsDQ6ZqixL+89Y0CrWxth1c2w2N5EPY54U5NJ4QlEuNhQBjZMy4 kzo27uQeJYmfkPYijkRZv2nABpU4UshdxNN8Mk6LTwEkceHLgqCDf7r85KPHSZmR xw== -----END CERTIFICATE-----Generated at Tue Jul 28 19:30:16 2026 by rpki-client