$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft File: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json) Hash identifier: BskCfmm3PG/1BrHi1uZgNiTbug7GjrrsxpecShNggEY= Subject key identifier: F2:67:8D:75:CF:07:75:FA:7C:76:FD:03:45:BE:C4:2D:40:3E:72:92 Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Certificate serial: 5C9D9ECEEC87CAE7B8CABC492A9070D98C4B9C23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft Manifest number: 02E1 Signing time: Mon 21 Sep 2026 06:25:45 +0000 Manifest this update: Mon 21 Sep 2026 06:20:45 +0000 Manifest next update: Tue 22 Sep 2026 07:51:45 +0000 Files and hashes: 1: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: DZU46gedNFYz2v7yvGIXeVWs+yworgKzdoKm6wBF9RY=) 2: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: AFVeOnsvdfn5zr4jds6KNtr7n93z5bGnJNsS8Ufaz0U=) 3: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: ys4GcQr92xf16wQYlCYeGPMDsfyEnGKsrz3bvGtNWC8=) 4: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: b5xBss8x50/mTCwdi3YpTgkBRxgxQIEDRJCrw4DZBZw=) 5: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: LZdhd8babbehfkgcaQ2p0QEt4TultBt5ttf3MMRXRbI=) 6: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: HzAN9ywzH3R4tgGHlz5ec2Bib9+nQQlSPhjXFH+uvKQ=) 7: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: unIb/pLoJEr1pBLYhSY4VQ/RprOtasUPRROCGuOA9r4=) 8: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: wDL3d4A1d+S+hyAjhYBLt0XksiIY4fLz7lOilgNj2Q4=) 9: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: ABkHDQKjEeANharZO1hp0RDKdEsWdRf0F4prEwfZnFs=) 10: 326130663a336363333a343030303a3a2f34342d3434203d3e20323032333036.roa (hash: fxbR5GcPyoWqODdA3f1yyd4v8P4uCsBii+08ii9bg1w=) 11: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: hJUy+WAsteHuyZTTylubys83kZZc4LE0LX6QYeU4v/U=) 12: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: NZmbB1AD2okfoNYoNRF6VSo9hkwhlpFlsxSprSq+6Jk=) 13: 3139342e3132342e3233342e302f32342d3234203d3e203632303638.roa (hash: VKu+iyAXdNGspkh1hqCECAzpccaJ3+JyjcRyNO0/DAw=) 14: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: vlI3tYFCLzWNGXLpIFZR5AHPwN6r5z5t+7vGqUPF4to=) 15: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: 6jjJw8jPytZBaCqa4aKnZol1mteXhyZaleRXgtJYHyg=) 16: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: 7RbGKTX0T75GWL+U9cYx0V2iGn8DIPgdGtE6PSL/e9k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 07:51:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:9d:9e:ce:ec:87:ca:e7:b8:ca:bc:49:2a:90:70:d9:8c:4b:9c:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Validity Not Before: Sep 21 06:20:45 2026 GMT Not After : Sep 22 07:51:45 2026 GMT Subject: CN=F2678D75CF0775FA7C76FD0345BEC42D403E7292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:58:17:a3:53:10:4b:8f:3e:86:80:08:82:81: 5b:e1:a7:9b:99:f1:fd:df:0a:bc:93:83:77:3d:3a: 4c:37:37:21:ef:46:dd:9f:96:7b:7f:1f:ee:79:bb: b9:29:fb:b1:41:af:f1:65:27:c8:30:f4:82:9e:dc: de:ba:0e:04:48:aa:46:e4:95:21:bf:c2:52:27:7e: e4:50:f8:dc:5a:79:27:31:48:bc:3e:bf:5f:95:db: 78:de:55:b6:3e:26:35:df:a1:7e:0c:93:d1:21:37: 37:6f:71:fb:5b:bc:06:6d:61:6b:0c:2c:5d:dc:03: 0c:5f:9c:72:0c:eb:33:45:85:c9:53:ef:b0:57:cc: f3:90:7f:a7:c9:85:d4:e5:f6:c2:f8:ab:df:ab:b6: 28:f9:09:3b:02:95:14:84:6f:de:46:fb:d5:c8:e8: 8f:ae:a2:0e:a2:87:f3:99:95:af:36:07:4d:29:c1: 36:3c:ce:74:4e:01:12:e9:ee:36:ba:ad:0a:ab:07: f2:89:8e:75:2f:63:d4:f3:bc:fa:25:9c:90:31:4d: 1a:39:16:b6:2e:15:04:be:47:29:19:42:da:12:1f: 12:41:56:27:ca:8c:eb:2e:ee:f4:f8:d8:4e:91:9f: 63:94:cd:21:d8:a8:3e:7f:af:a5:97:14:c3:ef:12: c1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:67:8D:75:CF:07:75:FA:7C:76:FD:03:45:BE:C4:2D:40:3E:72:92 X509v3 Authority Key Identifier: keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:42:4a:80:bd:8d:9c:d4:76:ef:59:d7:2a:b4:91:fe:81:44: 44:f9:92:5a:d7:3f:38:a1:f7:b6:2b:d1:f5:00:2e:9b:ea:10: 6a:3f:6f:8b:9c:ce:03:24:06:90:5b:80:5d:68:98:df:57:0b: 3b:b5:15:ed:70:1f:2f:b8:44:90:f8:1b:86:17:93:90:83:85: dd:a9:fa:92:63:8e:a1:99:02:87:ba:a8:95:83:20:74:7c:30: e3:ab:2f:67:11:f9:d5:f4:5f:9d:48:58:a4:38:c0:d5:4f:66: 06:14:4b:64:69:04:cc:12:4f:67:1c:50:69:03:dc:94:3f:f6: 14:54:1a:36:31:a3:72:ef:f2:45:d7:b8:1d:8b:d1:f4:5a:59: 37:47:1f:6b:f9:ff:0e:28:b5:31:75:57:ff:60:ea:06:ff:ec: 8c:cf:2a:39:89:0c:ba:ec:2e:eb:ae:24:07:e6:f3:25:29:d1: e2:a5:88:64:63:ae:8d:c4:00:cd:76:75:f9:08:e9:cc:ef:37: cb:de:82:ce:cb:88:8b:64:9a:e8:55:3a:13:0f:e2:f8:35:7f: bd:51:f1:52:03:a3:0e:5a:e7:22:2f:29:22:59:ef:9d:e8:dc: 4d:21:ec:c9:b0:18:65:a6:4f:4a:55:cb:bd:71:63:ed:e6:86: 52:91:f0:fb -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXJ2ezuyHyue4yrxJKpBw2YxLnCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2IyOWE3NzY2OWRmNWE3YTVjYjUwNmQ4MzllZThhYTQz MzdjY2FhYzAeFw0yNjA5MjEwNjIwNDVaFw0yNjA5MjIwNzUxNDVaMDMxMTAvBgNV BAMTKEYyNjc4RDc1Q0YwNzc1RkE3Qzc2RkQwMzQ1QkVDNDJENDAzRTcyOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRWBejUxBLjz6GgAiCgVvhp5uZ 8f3fCryTg3c9Okw3NyHvRt2flnt/H+55u7kp+7FBr/FlJ8gw9IKe3N66DgRIqkbk lSG/wlInfuRQ+NxaeScxSLw+v1+V23jeVbY+JjXfoX4Mk9EhNzdvcftbvAZtYWsM LF3cAwxfnHIM6zNFhclT77BXzPOQf6fJhdTl9sL4q9+rtij5CTsClRSEb95G+9XI 6I+uog6ih/OZla82B00pwTY8znROARLp7ja6rQqrB/KJjnUvY9TzvPolnJAxTRo5 FrYuFQS+RykZQtoSHxJBVifKjOsu7vT42E6Rn2OUzSHYqD5/r6WXFMPvEsFvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU8meNdc8Hdfp8dv0DRb7ELUA+cpIwHwYDVR0j BBgwFoAUyymndmnfWnpctQbYOe6KpDN8yqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgtN2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhm MDZlLzAvQ0IyOUE3NzY2OURGNUE3QTVDQjUwNkQ4MzlFRThBQTQzMzdDQ0FBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3l5bW5kbW5mV25wY3RRYllPZTZLcERO OHlxdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iYjI1ZDA2OC03 ZjljLTRiMGUtYTY5NS0xNzc5YjdkOGYwNmUvMC9DQjI5QTc3NjY5REY1QTdBNUNC NTA2RDgzOUVFOEFBNDMzN0NDQUFDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXUJKgL2NnNR271nXKrSR /oFERPmSWtc/OKH3tivR9QAum+oQaj9vi5zOAyQGkFuAXWiY31cLO7UV7XAfL7hE kPgbhheTkIOF3an6kmOOoZkCh7qolYMgdHww46svZxH51fRfnUhYpDjA1U9mBhRL ZGkEzBJPZxxQaQPclD/2FFQaNjGjcu/yRde4HYvR9FpZN0cfa/n/Dii1MXVX/2Dq Bv/sjM8qOYkMuuwu664kB+bzJSnR4qWIZGOujcQAzXZ1+QjpzO83y96CzsuIi2Sa 6FU6Ew/i+DV/vVHxUgOjDlrnIi8pIlnvnejcTSHsybAYZaZPSlXLvXFj7eaGUpHw +w== -----END CERTIFICATE-----Generated at Mon Sep 21 16:58:58 2026 by rpki-client