$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft File: A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft (raw, json) Hash identifier: leh8Ou+EpHfFTw0QpjceLveT5em+yzV4wejygiijxDc= Subject key identifier: 94:FE:4F:03:89:57:F0:B2:C0:7D:CE:DE:43:0C:44:52:25:24:9E:14 Authority key identifier: A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E Certificate issuer: /CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e Certificate serial: 461C4B0EE656F548F8897839BFED1E56D6EC4470 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft Manifest number: 0301 Signing time: Tue 28 Jul 2026 10:21:46 +0000 Manifest this update: Tue 28 Jul 2026 10:16:46 +0000 Manifest next update: Wed 29 Jul 2026 13:36:46 +0000 Files and hashes: 1: 3137382e3233362e3233352e302f32342d3234203d3e203134363138.roa (hash: 0gJhuGPSwbYe37kAa8m7YV7yXKIUVPzMQPHSJAUJKZ0=) 2: 3137382e3233362e3232372e302f32342d3234203d3e203136353039.roa (hash: s9LY+Vjkw5WtsXM7RfsOHHY+7wEN6VML/ihlFBnhNco=) 3: 3137382e3233362e3232382e302f32322d3234203d3e203335393136.roa (hash: Uj6qVhvkl5aO5WvtBsGs2hifXenpCHeFu2xN3NsemDU=) 4: 3137382e3233362e3233342e302f32342d3234203d3e203137353631.roa (hash: 9Fhp6MCOd+X2RA59heYecj22kZJd6g79ksb5ZL538E4=) 5: 3138352e322e35302e302f32342d3234203d3e203632303832.roa (hash: zw2xB7te/CtSwWJJPc9d/2yAtUjaghXOjJZIncUw2jI=) 6: 3138352e322e34382e302f32342d3234203d3e203137353631.roa (hash: 7wcegcT5K98XgAg+XQMcAdixoXoYKu4tzsSbp2VeJ64=) 7: 3137382e3233362e3233372e302f32342d3234203d3e203137353631.roa (hash: tVXgDczh1Jz7wXt3P0yPpo1PmevC5I4Bn+9xw+6RHtQ=) 8: 3138352e322e34392e302f32342d3234203d3e203136323736.roa (hash: c24x2J+0/kPthk+wNeBkwc8WUqBu80LvdoO/pr6X9w0=) 9: 3137382e3233362e3233322e302f32342d3234203d3e20313334353438.roa (hash: KG184dA45IxUmVto869OJN9+pFKdNyvWFLe/t2XGJRs=) 10: 3137382e3233362e3233352e302f32342d3234203d3e203136353039.roa (hash: bWfkodHT7E5HimunFdGnoIBAIfbUWSMFLrgQXGVbeTU=) 11: 3137382e3233362e3233362e302f32342d3234203d3e203136353039.roa (hash: /oMyhrzhRwrf9TS7pL2lkO0wvw/pL1iHf4xSJA6baFs=) 12: A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl (hash: n3/iYBzCax0DTDUfoBi5JldR46X6kxpRHR6iDSqYUD8=) 13: 3137382e3233362e3233332e302f32342d3234203d3e203137353631.roa (hash: BDvbJBn4PdPpKswpqhygiWIr2d5q+v6X7XYvNKW1Ayo=) 14: 3137382e3233362e3232362e302f32342d3234203d3e20313938313230.roa (hash: GnErXvMYkgTDg7TWOsi8+AQsBWxWsGMeGB8q8hH51Ag=) 15: 3137382e3233362e3233382e302f32332d3234203d3e203136353039.roa (hash: +d+v6sp5knpRtoxQqdZeuiFzOqF0m2ybqFYPkrOxp/A=) 16: 3138352e322e35312e302f32342d3234203d3e20313939313835.roa (hash: 9WxLlbTQRGoCUsas6s2luj6jANja7S/u+Q4U4i5hg2E=) 17: 3137382e3233362e3232342e302f32332d3234203d3e203136353039.roa (hash: RKASj5Gz0g7xxLnHb9KEoWbO+w1nl9AqbgRZ3sNE+ho=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 13:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:1c:4b:0e:e6:56:f5:48:f8:89:78:39:bf:ed:1e:56:d6:ec:44:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e Validity Not Before: Jul 28 10:16:46 2026 GMT Not After : Jul 29 13:36:46 2026 GMT Subject: CN=94FE4F038957F0B2C07DCEDE430C445225249E14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a3:b8:0c:54:04:53:1e:6c:37:12:20:bc:58: a4:94:98:8b:e9:f6:95:31:a1:8b:39:7f:94:ab:cd: e7:c8:4f:07:24:a6:b8:2d:65:86:b5:d1:27:6d:6c: a4:44:cd:88:7f:0e:04:90:01:ba:2e:f1:50:df:49: 86:50:0a:e4:65:f2:55:50:d8:b1:a7:04:29:4a:24: ba:5b:8a:c6:6d:58:74:b6:ee:31:c3:f8:02:0a:52: 9d:ee:80:5f:6e:d2:06:8f:bc:78:c1:80:ae:06:0c: 7d:3b:0a:c3:63:d2:b3:6d:a0:7c:d0:b0:af:09:43: b9:bf:08:d7:a0:57:1d:cb:fc:c6:ca:dc:14:71:e2: 14:e0:74:d8:d8:ed:73:a1:83:45:11:89:c9:00:99: db:76:9a:e8:65:b5:ab:5d:81:fb:9e:62:68:b7:2f: 20:d2:8f:5f:63:c5:12:e1:88:4b:f9:a1:9a:de:b2: ac:59:27:45:ae:0f:c6:21:d4:95:cb:50:ac:e2:37: b3:fe:79:f6:c9:ae:74:4c:78:cc:67:ad:46:61:18: 0b:a8:f1:fa:c6:8b:b1:18:1c:e4:9e:a3:e7:3a:f7: 73:e4:2e:a5:b8:66:c1:34:eb:d2:09:5e:f6:b5:a6: 80:d3:8d:cb:3a:af:6a:57:29:ea:ca:21:8a:c1:1d: 43:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:FE:4F:03:89:57:F0:B2:C0:7D:CE:DE:43:0C:44:52:25:24:9E:14 X509v3 Authority Key Identifier: keyid:A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:b6:05:e2:a4:0e:b0:01:da:6b:43:bf:f4:b8:a1:99:ef:81: 0c:52:5b:54:38:82:e3:de:46:66:f2:ad:aa:b3:8c:7e:34:45: f8:73:40:8a:ec:82:17:35:6c:7a:5b:54:91:fd:cc:55:d4:e5: 75:45:ea:65:4b:7d:0b:e6:b9:c1:61:8c:d8:b0:eb:bb:10:cc: 98:d0:60:38:a1:f7:1e:85:17:2a:dc:42:c7:95:ea:f6:08:9d: b9:2d:f1:8e:f4:90:65:87:d9:1c:c5:a3:b3:1e:19:ba:18:97: a7:c4:1d:83:88:52:03:03:52:5c:9e:f4:6a:8f:a7:45:ff:d8: 86:e5:2f:82:9f:2d:10:67:8d:57:5f:35:e4:93:aa:fb:7e:19: 40:c2:80:ef:84:a5:8c:87:b7:ac:d5:13:37:d8:77:e9:57:60: ab:5b:19:64:f5:8d:49:31:4b:3d:43:8b:7b:30:4b:77:10:f9: 25:2b:12:69:70:f0:e6:35:75:7f:59:38:52:06:65:88:ca:d9: 93:6f:a0:07:1c:02:f4:c3:0d:fe:93:d7:d0:1f:70:9f:45:6d: d7:ab:ca:3b:34:f9:79:59:30:c6:23:d4:ef:30:3a:dd:fe:cf: d6:e2:86:12:f8:5e:06:79:80:25:e0:95:95:66:c9:84:0f:bd: 5d:ca:c7:b2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURhxLDuZW9Uj4iXg5v+0eVtbsRHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTI5ZWYyMWMxMzk3YWI0YjJmMDg3NzgzMDVhMzdmZmQx Y2MyNWM0ZTAeFw0yNjA3MjgxMDE2NDZaFw0yNjA3MjkxMzM2NDZaMDMxMTAvBgNV BAMTKDk0RkU0RjAzODk1N0YwQjJDMDdEQ0VERTQzMEM0NDUyMjUyNDlFMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqo7gMVARTHmw3EiC8WKSUmIvp 9pUxoYs5f5SrzefITwckprgtZYa10SdtbKREzYh/DgSQAbou8VDfSYZQCuRl8lVQ 2LGnBClKJLpbisZtWHS27jHD+AIKUp3ugF9u0gaPvHjBgK4GDH07CsNj0rNtoHzQ sK8JQ7m/CNegVx3L/MbK3BRx4hTgdNjY7XOhg0URickAmdt2muhltatdgfueYmi3 LyDSj19jxRLhiEv5oZresqxZJ0WuD8Yh1JXLUKziN7P+efbJrnRMeMxnrUZhGAuo 8frGi7EYHOSeo+c693PkLqW4ZsE069IJXva1poDTjcs6r2pXKerKIYrBHUPvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUlP5PA4lX8LLAfc7eQwxEUiUknhQwHwYDVR0j BBgwFoAUop7yHBOXq0svCHeDBaN//RzCXE4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1 NmI2LzIvQTI5RUYyMUMxMzk3QUI0QjJGMDg3NzgzMDVBMzdGRkQxQ0MyNUM0RS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL29wN3lIQk9YcTBzdkNIZURCYU5fX1J6 Q1hFNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZTQxNzA0Zi03 ODE1LTRmMmMtYTUwMy01OGFlMDhlNTU2YjYvMi9BMjlFRjIxQzEzOTdBQjRCMkYw ODc3ODMwNUEzN0ZGRDFDQzI1QzRFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUbYF4qQOsAHaa0O/9Lih me+BDFJbVDiC495GZvKtqrOMfjRF+HNAiuyCFzVseltUkf3MVdTldUXqZUt9C+a5 wWGM2LDruxDMmNBgOKH3HoUXKtxCx5Xq9giduS3xjvSQZYfZHMWjsx4ZuhiXp8Qd g4hSAwNSXJ70ao+nRf/YhuUvgp8tEGeNV1815JOq+34ZQMKA74SljIe3rNUTN9h3 6Vdgq1sZZPWNSTFLPUOLezBLdxD5JSsSaXDw5jV1f1k4UgZliMrZk2+gBxwC9MMN /pPX0B9wn0Vt16vKOzT5eVkwxiPU7zA63f7P1uKGEvheBnmAJeCVlWbJhA+9XcrH sg== -----END CERTIFICATE-----Generated at Wed Jul 29 00:26:50 2026 by rpki-client