$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft File: A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft (raw, json) Hash identifier: CoEQqzZeKb9e5iXhldwsKy1Yw6JC8STQRCktYWM3QKk= Subject key identifier: 06:0C:AA:CC:06:AB:83:FE:06:B1:F5:04:AB:04:50:AB:6F:A2:A0:9F Authority key identifier: A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E Certificate issuer: /CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e Certificate serial: 662A3FC7FCF63BBD8A988C86E1C09809DA3AF966 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft Manifest number: 03A1 Signing time: Mon 21 Sep 2026 10:30:29 +0000 Manifest this update: Mon 21 Sep 2026 10:25:29 +0000 Manifest next update: Tue 22 Sep 2026 14:22:29 +0000 Files and hashes: 1: 3137382e3233362e3233382e302f32332d3234203d3e203136353039.roa (hash: +d+v6sp5knpRtoxQqdZeuiFzOqF0m2ybqFYPkrOxp/A=) 2: 3138352e322e35302e302f32342d3234203d3e203632303832.roa (hash: zw2xB7te/CtSwWJJPc9d/2yAtUjaghXOjJZIncUw2jI=) 3: A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl (hash: Td80RCdtpkuXIdoux32t4N3cXvD1VK1DXG7nL4xhmTQ=) 4: 3137382e3233362e3233352e302f32342d3234203d3e203134363138.roa (hash: 0gJhuGPSwbYe37kAa8m7YV7yXKIUVPzMQPHSJAUJKZ0=) 5: 3137382e3233362e3233342e302f32342d3234203d3e203137353631.roa (hash: 9Fhp6MCOd+X2RA59heYecj22kZJd6g79ksb5ZL538E4=) 6: 3137382e3233362e3232362e302f32342d3234203d3e20313938313230.roa (hash: GnErXvMYkgTDg7TWOsi8+AQsBWxWsGMeGB8q8hH51Ag=) 7: 3137382e3233362e3233352e302f32342d3234203d3e203136353039.roa (hash: bWfkodHT7E5HimunFdGnoIBAIfbUWSMFLrgQXGVbeTU=) 8: 3138352e322e35312e302f32342d3234203d3e20313939313835.roa (hash: 9WxLlbTQRGoCUsas6s2luj6jANja7S/u+Q4U4i5hg2E=) 9: 3137382e3233362e3233362e302f32342d3234203d3e203136353039.roa (hash: /oMyhrzhRwrf9TS7pL2lkO0wvw/pL1iHf4xSJA6baFs=) 10: 3137382e3233362e3233322e302f32342d3234203d3e20313334353438.roa (hash: KG184dA45IxUmVto869OJN9+pFKdNyvWFLe/t2XGJRs=) 11: 3138352e322e34392e302f32342d3234203d3e20323138393834.roa (hash: nTsoGcm7nRBrh89HCX58wiux4+2N2yxuhGfFc9vQwsc=) 12: 3137382e3233362e3233372e302f32342d3234203d3e203137353631.roa (hash: tVXgDczh1Jz7wXt3P0yPpo1PmevC5I4Bn+9xw+6RHtQ=) 13: 3137382e3233362e3232382e302f32322d3234203d3e203335393136.roa (hash: Uj6qVhvkl5aO5WvtBsGs2hifXenpCHeFu2xN3NsemDU=) 14: 3137382e3233362e3232372e302f32342d3234203d3e203136353039.roa (hash: s9LY+Vjkw5WtsXM7RfsOHHY+7wEN6VML/ihlFBnhNco=) 15: 3137382e3233362e3232342e302f32332d3234203d3e203136353039.roa (hash: RKASj5Gz0g7xxLnHb9KEoWbO+w1nl9AqbgRZ3sNE+ho=) 16: 3137382e3233362e3233332e302f32342d3234203d3e203137353631.roa (hash: BDvbJBn4PdPpKswpqhygiWIr2d5q+v6X7XYvNKW1Ayo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 14:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:2a:3f:c7:fc:f6:3b:bd:8a:98:8c:86:e1:c0:98:09:da:3a:f9:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e Validity Not Before: Sep 21 10:25:29 2026 GMT Not After : Sep 22 14:22:29 2026 GMT Subject: CN=060CAACC06AB83FE06B1F504AB0450AB6FA2A09F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2a:85:9c:5a:a2:af:82:79:66:8f:c1:aa:b7: 04:69:53:88:64:58:e7:85:0c:74:de:6a:33:be:0d: 3c:27:3c:db:c8:01:b8:82:e2:33:78:e6:84:59:16: b0:42:34:61:fc:13:12:61:33:44:58:a7:0d:4d:07: 69:82:c1:fc:06:50:be:3f:72:81:2e:38:62:42:e7: ab:4e:f2:72:ba:89:5e:b0:22:0b:9c:51:62:dc:07: 42:06:50:cf:52:30:55:92:92:0b:28:29:1c:7e:c8: a2:86:64:d2:28:2d:7c:08:e4:08:9a:d7:f3:f8:bd: 40:5e:7b:34:cf:81:36:b0:84:47:3c:78:2f:01:6f: 84:57:bf:09:90:fd:69:c0:15:5d:24:c3:f1:d1:a6: 1d:d5:98:6d:17:64:2c:f3:b3:2a:ef:81:e6:cb:ba: 4e:95:93:6d:c5:72:41:93:8f:eb:65:17:c9:a6:68: ec:65:f6:64:65:87:3c:41:7a:73:1b:b4:f9:07:19: 35:dd:69:10:b9:2f:aa:af:75:e1:ca:fc:41:87:b4: f1:da:1b:8f:b3:5f:40:24:da:ce:41:94:f1:32:ec: a3:f6:8c:bf:3e:d2:55:b9:c3:ec:69:9a:ad:f4:22: 27:bd:68:06:45:eb:5e:db:cb:a8:5a:99:1e:5c:d9: ce:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:0C:AA:CC:06:AB:83:FE:06:B1:F5:04:AB:04:50:AB:6F:A2:A0:9F X509v3 Authority Key Identifier: keyid:A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:09:d4:02:6a:8b:88:a0:fe:73:4e:07:ff:e4:0b:8f:e2:bc: 50:1e:b4:0d:1b:34:da:d8:13:3b:7e:5c:1a:cd:e5:50:e7:2c: d5:05:a5:64:53:fd:54:89:82:9e:43:f0:ad:aa:2d:4d:1f:e7: fa:53:ce:b1:a6:af:f7:de:b0:bd:ee:cc:cd:33:80:30:0d:5e: 72:58:d8:df:c9:b0:5e:2d:13:fc:c2:3f:4f:b6:3c:f3:45:7e: 38:24:76:ca:b9:a4:0e:13:77:d8:44:9a:8c:ca:ef:bd:60:da: 3c:57:6f:b7:f4:ad:c2:2d:3d:c8:93:a2:08:25:2b:71:6d:7b: 98:01:fd:98:de:24:8e:2b:42:96:78:13:79:9c:0d:b9:99:34: 03:0b:de:d8:fd:4c:2d:dc:1b:4e:8c:37:9f:9a:f1:12:17:53: 2c:de:49:ac:22:00:71:08:a4:15:75:da:15:c8:97:58:40:f2: ca:92:d3:9a:f5:a0:46:2a:2e:af:ed:77:24:91:5d:ff:65:ae: 97:be:98:b0:5f:6b:bb:a3:4e:56:5b:af:96:5d:3b:89:0e:e1: 4e:df:e9:0f:c7:e1:aa:66:12:7c:a6:ff:96:42:71:2b:1f:db: dc:fb:21:69:5b:92:96:0b:b7:cb:15:0d:68:08:d9:31:0b:a6: a4:1e:65:2d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZio/x/z2O72KmIyG4cCYCdo6+WYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTI5ZWYyMWMxMzk3YWI0YjJmMDg3NzgzMDVhMzdmZmQx Y2MyNWM0ZTAeFw0yNjA5MjExMDI1MjlaFw0yNjA5MjIxNDIyMjlaMDMxMTAvBgNV BAMTKDA2MENBQUNDMDZBQjgzRkUwNkIxRjUwNEFCMDQ1MEFCNkZBMkEwOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqKoWcWqKvgnlmj8GqtwRpU4hk WOeFDHTeajO+DTwnPNvIAbiC4jN45oRZFrBCNGH8ExJhM0RYpw1NB2mCwfwGUL4/ coEuOGJC56tO8nK6iV6wIgucUWLcB0IGUM9SMFWSkgsoKRx+yKKGZNIoLXwI5Aia 1/P4vUBeezTPgTawhEc8eC8Bb4RXvwmQ/WnAFV0kw/HRph3VmG0XZCzzsyrvgebL uk6Vk23FckGTj+tlF8mmaOxl9mRlhzxBenMbtPkHGTXdaRC5L6qvdeHK/EGHtPHa G4+zX0Ak2s5BlPEy7KP2jL8+0lW5w+xpmq30Iie9aAZF617by6hamR5c2c6nAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUBgyqzAarg/4GsfUEqwRQq2+ioJ8wHwYDVR0j BBgwFoAUop7yHBOXq0svCHeDBaN//RzCXE4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1 NmI2LzIvQTI5RUYyMUMxMzk3QUI0QjJGMDg3NzgzMDVBMzdGRkQxQ0MyNUM0RS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL29wN3lIQk9YcTBzdkNIZURCYU5fX1J6 Q1hFNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZTQxNzA0Zi03 ODE1LTRmMmMtYTUwMy01OGFlMDhlNTU2YjYvMi9BMjlFRjIxQzEzOTdBQjRCMkYw ODc3ODMwNUEzN0ZGRDFDQzI1QzRFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjAnUAmqLiKD+c04H/+QL j+K8UB60DRs02tgTO35cGs3lUOcs1QWlZFP9VImCnkPwraotTR/n+lPOsaav996w ve7MzTOAMA1ecljY38mwXi0T/MI/T7Y880V+OCR2yrmkDhN32ESajMrvvWDaPFdv t/Stwi09yJOiCCUrcW17mAH9mN4kjitClngTeZwNuZk0Awve2P1MLdwbTow3n5rx EhdTLN5JrCIAcQikFXXaFciXWEDyypLTmvWgRiour+13JJFd/2Wul76YsF9ru6NO Vluvll07iQ7hTt/pD8fhqmYSfKb/lkJxKx/b3PshaVuSlgu3yxUNaAjZMQumpB5l LQ== -----END CERTIFICATE-----Generated at Mon Sep 21 17:58:28 2026 by rpki-client