$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft File: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json) Hash identifier: o+/EIXYdoCZBVziaXIkY3iN6LBP7bZ9AkZCzYXIzr3I= Subject key identifier: 04:CD:69:44:9A:E7:1A:AF:3A:E6:24:FE:F9:76:30:BD:A3:4F:CF:FD Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Certificate serial: 1E5E6ED67FCD143ADE7C9E3E77F186104710056F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft Manifest number: 0210 Signing time: Fri 17 Apr 2026 09:49:42 +0000 Manifest this update: Fri 17 Apr 2026 09:44:42 +0000 Manifest next update: Sat 18 Apr 2026 12:04:42 +0000 Files and hashes: 1: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: ABkHDQKjEeANharZO1hp0RDKdEsWdRf0F4prEwfZnFs=) 2: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: DZU46gedNFYz2v7yvGIXeVWs+yworgKzdoKm6wBF9RY=) 3: 3139342e3132342e3233342e302f32342d3234203d3e20343032323537.roa (hash: 5rmxgyIU21hGeEtmNvOYYXEGrcLd8Upf4P8MtYYDSlk=) 4: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: vlI3tYFCLzWNGXLpIFZR5AHPwN6r5z5t+7vGqUPF4to=) 5: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: ys4GcQr92xf16wQYlCYeGPMDsfyEnGKsrz3bvGtNWC8=) 6: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: 88bVFAtYPniU1x2d8Sxc2SKMP0vOFCXz4nqy/NPz27U=) 7: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: unIb/pLoJEr1pBLYhSY4VQ/RprOtasUPRROCGuOA9r4=) 8: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: AFVeOnsvdfn5zr4jds6KNtr7n93z5bGnJNsS8Ufaz0U=) 9: 326130663a336363333a343030303a3a2f34342d3434203d3e20323032333036.roa (hash: fxbR5GcPyoWqODdA3f1yyd4v8P4uCsBii+08ii9bg1w=) 10: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: LZdhd8babbehfkgcaQ2p0QEt4TultBt5ttf3MMRXRbI=) 11: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: HzAN9ywzH3R4tgGHlz5ec2Bib9+nQQlSPhjXFH+uvKQ=) 12: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: 7RbGKTX0T75GWL+U9cYx0V2iGn8DIPgdGtE6PSL/e9k=) 13: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: wDL3d4A1d+S+hyAjhYBLt0XksiIY4fLz7lOilgNj2Q4=) 14: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: hJUy+WAsteHuyZTTylubys83kZZc4LE0LX6QYeU4v/U=) 15: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: b5xBss8x50/mTCwdi3YpTgkBRxgxQIEDRJCrw4DZBZw=) 16: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: NZmbB1AD2okfoNYoNRF6VSo9hkwhlpFlsxSprSq+6Jk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 12:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:5e:6e:d6:7f:cd:14:3a:de:7c:9e:3e:77:f1:86:10:47:10:05:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Validity Not Before: Apr 17 09:44:42 2026 GMT Not After : Apr 18 12:04:42 2026 GMT Subject: CN=04CD69449AE71AAF3AE624FEF97630BDA34FCFFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:73:c9:64:06:1b:50:25:2c:08:84:81:11:9b: 93:42:0a:9c:5e:49:1d:e9:d0:e3:91:65:51:05:e5: 5e:0b:0a:f4:b9:b1:4c:03:04:87:44:4e:aa:eb:77: b4:cb:1c:6c:18:a5:12:d8:9b:62:03:df:d5:8d:79: ed:0d:9b:4e:9e:54:ea:82:c4:c1:98:e2:cf:9a:af: b0:88:b1:8e:8d:50:7c:72:50:32:8c:32:0d:67:43: bd:cd:05:85:35:23:9f:69:09:c4:fd:80:34:17:11: 46:9a:30:08:34:14:31:ff:16:e4:53:2d:40:06:7f: 8f:4d:15:1d:7c:09:2a:84:e8:51:35:7d:7e:1f:96: b8:82:73:05:8b:37:c0:06:a8:cf:73:93:21:5d:de: f2:ac:60:73:76:67:b1:a8:4f:c6:9e:b7:bc:5c:88: e7:bd:16:f3:0e:ef:ec:e1:e1:1d:c1:8c:31:53:89: a4:6a:24:61:5e:33:5d:66:bd:a4:a5:f1:84:1b:88: f3:8c:18:0d:10:7f:24:8b:48:a8:06:8b:48:6a:48: da:f3:8e:22:0f:50:5f:bc:85:6f:8b:c4:9b:71:05: 76:15:d4:f0:ee:38:15:b9:98:cd:6f:1d:7e:f1:c4: c2:e9:ea:5e:1d:be:f6:4b:cd:a1:ad:1b:7c:59:2c: e2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:CD:69:44:9A:E7:1A:AF:3A:E6:24:FE:F9:76:30:BD:A3:4F:CF:FD X509v3 Authority Key Identifier: keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:7a:ee:51:98:89:2e:7e:01:a9:d5:fa:88:ec:7a:a7:49:72: 2a:a7:7f:7e:8b:57:5a:5a:10:09:e3:23:e3:8b:c9:fd:91:c0: a3:e9:e1:e1:8d:6c:c8:73:2b:43:1a:80:42:53:bc:59:83:c0: bb:d5:00:f5:bd:f3:80:55:e2:d5:a6:ce:5c:10:53:ed:c8:5c: 86:37:31:d2:2b:d3:6c:28:b8:48:05:2d:bf:49:9f:24:a0:2d: a0:63:2c:2e:b9:e2:7b:0a:92:96:fa:7c:c6:43:b9:a8:f2:bc: e8:0c:31:81:e8:62:ff:25:0b:25:81:2b:95:07:a9:9f:0e:9d: 75:d0:0a:34:ef:51:85:94:6f:1a:3c:bb:9f:be:39:31:6d:cf: 27:67:d0:74:5b:30:2c:15:44:0a:0a:eb:02:02:6e:e7:d3:ca: e3:af:f5:a6:46:81:4b:3a:b7:44:de:f0:70:4b:60:c5:26:a1: b8:9e:a8:bf:63:09:97:f2:53:cb:ab:81:d4:dc:15:98:cf:11: f7:78:a1:32:23:b8:1a:91:e6:8d:94:33:74:82:1d:99:83:6d: 79:78:c8:0f:b3:b8:81:69:75:17:61:04:b3:b7:8c:31:a2:20: 13:55:b0:30:16:3c:1c:f0:f3:0f:92:47:a4:6c:e9:77:96:41: b9:37:13:87 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUHl5u1n/NFDrefJ4+d/GGEEcQBW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2IyOWE3NzY2OWRmNWE3YTVjYjUwNmQ4MzllZThhYTQz MzdjY2FhYzAeFw0yNjA0MTcwOTQ0NDJaFw0yNjA0MTgxMjA0NDJaMDMxMTAvBgNV BAMTKDA0Q0Q2OTQ0OUFFNzFBQUYzQUU2MjRGRUY5NzYzMEJEQTM0RkNGRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNc8lkBhtQJSwIhIERm5NCCpxe SR3p0OORZVEF5V4LCvS5sUwDBIdETqrrd7TLHGwYpRLYm2ID39WNee0Nm06eVOqC xMGY4s+ar7CIsY6NUHxyUDKMMg1nQ73NBYU1I59pCcT9gDQXEUaaMAg0FDH/FuRT LUAGf49NFR18CSqE6FE1fX4flriCcwWLN8AGqM9zkyFd3vKsYHN2Z7GoT8aet7xc iOe9FvMO7+zh4R3BjDFTiaRqJGFeM11mvaSl8YQbiPOMGA0QfySLSKgGi0hqSNrz jiIPUF+8hW+LxJtxBXYV1PDuOBW5mM1vHX7xxMLp6l4dvvZLzaGtG3xZLOJPAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUBM1pRJrnGq865iT++XYwvaNPz/0wHwYDVR0j BBgwFoAUyymndmnfWnpctQbYOe6KpDN8yqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgtN2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhm MDZlLzAvQ0IyOUE3NzY2OURGNUE3QTVDQjUwNkQ4MzlFRThBQTQzMzdDQ0FBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3l5bW5kbW5mV25wY3RRYllPZTZLcERO OHlxdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iYjI1ZDA2OC03 ZjljLTRiMGUtYTY5NS0xNzc5YjdkOGYwNmUvMC9DQjI5QTc3NjY5REY1QTdBNUNC NTA2RDgzOUVFOEFBNDMzN0NDQUFDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKHruUZiJLn4BqdX6iOx6 p0lyKqd/fotXWloQCeMj44vJ/ZHAo+nh4Y1syHMrQxqAQlO8WYPAu9UA9b3zgFXi 1abOXBBT7chchjcx0ivTbCi4SAUtv0mfJKAtoGMsLrniewqSlvp8xkO5qPK86Awx gehi/yULJYErlQepnw6dddAKNO9RhZRvGjy7n745MW3PJ2fQdFswLBVECgrrAgJu 59PK46/1pkaBSzq3RN7wcEtgxSahuJ6ov2MJl/JTy6uB1NwVmM8R93ihMiO4GpHm jZQzdIIdmYNteXjID7O4gWl1F2EEs7eMMaIgE1WwMBY8HPDzD5JHpGzpd5ZBuTcT hw== -----END CERTIFICATE-----Generated at Fri Apr 17 18:15:45 2026 by rpki-client