$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft File: A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft (raw, json) Hash identifier: gI/CI/wvvnhOWmdmJDRear7qu65vRHAd64l8CBmT89w= Subject key identifier: 35:94:44:E4:CD:59:8B:8A:7D:C5:29:19:EE:C1:1F:74:D2:E3:BB:D2 Authority key identifier: A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E Certificate issuer: /CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e Certificate serial: 62EB431368231963794E5712EFBBDB7B4B2FA241 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft Manifest number: 21 Signing time: Thu 16 Apr 2026 20:54:00 +0000 Manifest this update: Thu 16 Apr 2026 20:49:00 +0000 Manifest next update: Fri 17 Apr 2026 23:06:00 +0000 Files and hashes: 1: 3137382e3233362e3232362e302f32342d3234203d3e203137353631.roa (hash: CAMbXIY1N8VhXT+Q3NZkXi8aaoa4UsQXngYC7GnBD9g=) 2: 3137382e3233362e3232382e302f32322d3232203d3e203335393136.roa (hash: A62qyB1loeqHPOgqTh+NyCLJ9k3Q15qAZyXGth/Mn84=) 3: A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl (hash: 5WIxrPiljC9N56sTvVxWLnBvwa7RiP2/ARE8Bg4sUks=) 4: 3138352e322e34392e302f32342d3234203d3e203136323736.roa (hash: LIh0DIx2IImYPrbtKl5UIaWrpsZNhrwgJffZtWjbQqI=) 5: 3137382e3233362e3232382e302f32342d3234203d3e203335393136.roa (hash: a++fo1ZwWeohzZL4au1Gv3n+pN7wCIzdhg0ArbQ5nTE=) 6: 3138352e322e35302e302f32342d3234203d3e203137353631.roa (hash: qB0BB6ZhKcaJO+ugI4LyxfHcrE+NQHHBJFGIgs1wC9c=) 7: 3137382e3233362e3233322e302f32342d3234203d3e20313334353438.roa (hash: 7DgYKwKtLZSr7DRHabJtbuC0B6ix/bKEQ0cR0pfd3rY=) 8: 3137382e3233362e3233382e302f32342d3234203d3e203136353039.roa (hash: Kzu9AijEtaMDzMw/4Xk47K37j84ocZpz0R373WBe8UU=) 9: 3137382e3233362e3233362e302f32342d3234203d3e203136353039.roa (hash: 0Mm/V7Wp1ZSi2mt8rDpaa6kvf12GFpAfRZvXodrVnHg=) 10: 3138352e322e35312e302f32342d3234203d3e203137353631.roa (hash: 35sh4qa6md8PSSqaFmFo8K1ywirF77Kr0DSJ4bj3Ok0=) 11: 3137382e3233362e3232342e302f32342d3234203d3e203136353039.roa (hash: DODPiqmKWn4fEQV41JgzryXPssmZ8/IlY16gySvomeE=) 12: 3137382e3233362e3232372e302f32342d3234203d3e203136353039.roa (hash: VnGJ5//x+EFhKJMb3ZAld7d7CF6EreU1gC/ATQCq4mA=) 13: 3137382e3233362e3232352e302f32342d3234203d3e203136353039.roa (hash: bVv/8FZz1Mo+LMMAfRoMNi+St0h3DR5SK9VVKl37ktc=) 14: 3137382e3233362e3233392e302f32342d3234203d3e203136353039.roa (hash: cMFFY6a6WGGwVpE9OONltKLNaqlkFqqAE9xOwe8uKmY=) 15: 3137382e3233362e3233332e302f32342d3234203d3e203137353631.roa (hash: IaXCjgu5vZTh/itUXhcfbJx9MSY5NSRMA9XWogXno2s=) 16: 3137382e3233362e3233352e302f32342d3234203d3e203136353039.roa (hash: hccha8AKtVyQcbSAnDX8P2RW49RRKPpiXx52OSiKEoE=) 17: 3137382e3233362e3233372e302f32342d3234203d3e203137353631.roa (hash: fHBBYbGG2NzQNQY3fmD8FeYtYam6rWl3rBV+v3fAJU4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:eb:43:13:68:23:19:63:79:4e:57:12:ef:bb:db:7b:4b:2f:a2:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e Validity Not Before: Apr 16 20:49:00 2026 GMT Not After : Apr 17 23:06:00 2026 GMT Subject: CN=359444E4CD598B8A7DC52919EEC11F74D2E3BBD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:64:df:ba:ff:03:39:fb:b6:a6:59:50:a1:59: d5:2e:4e:41:27:cb:1f:0e:fe:3a:64:c7:7b:fa:41: 40:d1:1e:e1:13:86:be:4f:bc:a3:b2:03:cb:65:2c: 7b:35:79:03:99:ff:8a:7e:80:77:b9:0a:09:25:54: c5:a7:76:3b:9c:fb:b0:7d:e8:3b:bd:5a:39:15:e8: 7f:7e:64:bc:f5:c5:10:15:ac:cf:f0:e4:00:15:45: 11:a3:e0:07:60:05:0a:04:0e:fa:03:0f:50:bc:fd: d8:c7:1e:53:9b:72:cc:f8:28:42:83:4b:dd:5d:bc: 0d:fd:57:b8:43:84:3d:ba:fc:69:6a:f4:da:d8:85: fa:1c:8a:80:24:e4:98:82:ad:58:b6:78:20:28:7b: 51:ae:f3:aa:79:31:38:79:ee:7e:c9:92:aa:9c:8f: 84:d1:bc:a6:4b:2a:f4:33:f6:dd:9c:51:43:6e:ef: 94:74:5c:8a:e9:62:f3:d7:7d:77:87:75:c5:ef:55: 6f:af:36:fd:df:46:6a:50:6c:c5:8b:a7:ae:a5:20: 9e:b6:bb:f4:17:90:e4:e1:06:52:83:0b:9a:2c:3a: 80:4a:8a:ed:5e:1c:58:62:54:65:47:7b:ac:8a:e7: f3:cb:1e:b6:61:70:b4:22:77:4b:e6:0e:6c:90:61: a5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:94:44:E4:CD:59:8B:8A:7D:C5:29:19:EE:C1:1F:74:D2:E3:BB:D2 X509v3 Authority Key Identifier: keyid:A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:aa:93:c3:97:50:68:8a:34:c0:c4:79:10:96:ab:b2:65:88: 1d:6d:72:7f:86:5c:7a:c4:6b:46:a6:a6:a9:e6:9e:a3:57:04: 63:ea:d4:8a:05:c4:5e:b0:b6:43:4d:f6:7d:82:97:55:81:74: 0a:3a:39:7c:23:1d:72:47:8d:d8:68:f3:aa:27:3b:e2:5e:eb: 78:9b:dc:c5:96:68:d5:63:7a:36:10:df:bb:b5:e3:ac:64:d4: e7:f9:5b:d5:6b:37:0c:5e:87:14:41:0b:fa:f6:7a:0a:ea:32: 22:ab:c4:3f:10:3e:ea:a7:50:da:66:98:71:bb:14:18:06:16: 84:a7:3b:80:6d:7d:84:3b:ba:9d:41:03:c0:a7:1d:fa:cd:92: b9:c6:1b:af:5c:b0:31:ac:40:5b:43:b2:6a:a4:91:dd:fb:13: 06:3d:5f:db:e5:05:1d:7e:e4:df:74:5f:ab:d0:f4:fd:d5:59: 54:bf:3d:28:09:ae:e1:65:ff:2e:09:9c:c2:b6:3f:c3:f9:e6: c0:22:26:34:7a:fa:6f:82:c6:fb:cb:e2:26:27:8a:5a:0e:66: c0:08:7d:5b:39:69:fa:a5:0d:ca:54:07:cc:5d:12:82:2b:24: d3:a8:f8:95:c2:be:56:ac:9f:d5:3f:35:5a:af:a2:aa:c6:17: f6:6d:c4:37 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYutDE2gjGWN5TlcS77vbe0svokEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTI5ZWYyMWMxMzk3YWI0YjJmMDg3NzgzMDVhMzdmZmQx Y2MyNWM0ZTAeFw0yNjA0MTYyMDQ5MDBaFw0yNjA0MTcyMzA2MDBaMDMxMTAvBgNV BAMTKDM1OTQ0NEU0Q0Q1OThCOEE3REM1MjkxOUVFQzExRjc0RDJFM0JCRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSZN+6/wM5+7amWVChWdUuTkEn yx8O/jpkx3v6QUDRHuEThr5PvKOyA8tlLHs1eQOZ/4p+gHe5CgklVMWndjuc+7B9 6Du9WjkV6H9+ZLz1xRAVrM/w5AAVRRGj4AdgBQoEDvoDD1C8/djHHlObcsz4KEKD S91dvA39V7hDhD26/Glq9NrYhfocioAk5JiCrVi2eCAoe1Gu86p5MTh57n7Jkqqc j4TRvKZLKvQz9t2cUUNu75R0XIrpYvPXfXeHdcXvVW+vNv3fRmpQbMWLp66lIJ62 u/QXkOThBlKDC5osOoBKiu1eHFhiVGVHe6yK5/PLHrZhcLQid0vmDmyQYaVzAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUNZRE5M1Zi4p9xSkZ7sEfdNLju9IwHwYDVR0j BBgwFoAUop7yHBOXq0svCHeDBaN//RzCXE4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1 NmI2LzIvQTI5RUYyMUMxMzk3QUI0QjJGMDg3NzgzMDVBMzdGRkQxQ0MyNUM0RS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL29wN3lIQk9YcTBzdkNIZURCYU5fX1J6 Q1hFNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZTQxNzA0Zi03 ODE1LTRmMmMtYTUwMy01OGFlMDhlNTU2YjYvMi9BMjlFRjIxQzEzOTdBQjRCMkYw ODc3ODMwNUEzN0ZGRDFDQzI1QzRFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK6qTw5dQaIo0wMR5EJar smWIHW1yf4ZcesRrRqamqeaeo1cEY+rUigXEXrC2Q032fYKXVYF0Cjo5fCMdckeN 2Gjzqic74l7reJvcxZZo1WN6NhDfu7XjrGTU5/lb1Ws3DF6HFEEL+vZ6CuoyIqvE PxA+6qdQ2maYcbsUGAYWhKc7gG19hDu6nUEDwKcd+s2SucYbr1ywMaxAW0OyaqSR 3fsTBj1f2+UFHX7k33Rfq9D0/dVZVL89KAmu4WX/LgmcwrY/w/nmwCImNHr6b4LG +8viJieKWg5mwAh9Wzlp+qUNylQHzF0Sgisk06j4lcK+Vqyf1T81Wq+iqsYX9m3E Nw== -----END CERTIFICATE-----Generated at Fri Apr 17 06:52:14 2026 by rpki-client