$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft File: E205EBF065FC4929F1802662AE62D7F9762600E6.mft (raw, json) Hash identifier: rBHR5BMtd2KmUy+9QH+8OO0f3II/PPKPQUf2HTUPSIg= Subject key identifier: 96:8C:68:75:0D:32:3A:81:5A:B5:10:DE:D9:4D:71:FA:28:76:FF:7A Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6 Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6 Certificate serial: 3DD6AE9A5928119F66737D328F7DDC4317FFE5F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft Manifest number: 01FE Signing time: Mon 02 Mar 2026 12:39:43 +0000 Manifest this update: Mon 02 Mar 2026 12:34:43 +0000 Manifest next update: Tue 03 Mar 2026 13:57:43 +0000 Files and hashes: 1: 326130663a356663303a623030623a3a2f34382d3438203d3e20323035303336.roa (hash: dtubQqytFEqkt8TqTYJ+KlZgpXqOEEfNHG9KMyAKroE=) 2: 326130663a356663303a646561663a3a2f34382d3438203d3e20323035303336.roa (hash: nBnCDOBWFR9glmAsUSRrLmDkLZa6Zi7bYUkIoT7Lpvs=) 3: 326130663a356663303a633064653a3a2f34382d3438203d3e20323035303336.roa (hash: vwuw8BagjBJB+QjPivE2w5i9soU6pwd3DUm4jYukQKs=) 4: 39312e3230392e34302e302f32342d3234203d3e203436383434.roa (hash: lOyC9nhHln4w/6aFWRWEGti2qbnJIh38POtRvVGBI4s=) 5: 326130663a356663303a6461643a3a2f34382d3438203d3e20323035303336.roa (hash: FjMn5kgc0Y1vdPNQCAd4cKVxUcNaP4msdjwOhjOI4iE=) 6: 326130663a356663303a626162653a3a2f34382d3438203d3e20323035303336.roa (hash: BEzvo1oTT3h/yITGofAX+DfQt9t+mraGyg3xFdVKM2I=) 7: 326130663a356663303a6665653a3a2f34382d3438203d3e20323035303336.roa (hash: sgKb1dwb+yOP2QySpduAJeLZbiJJdLEfbfVpO0+8Lgg=) 8: 326130663a356663303a6163653a3a2f34382d3438203d3e20323035303336.roa (hash: s62/iVKVlW2KdVyTR+Xnv457Z0j5+aZNRyV7RtkAKNQ=) 9: 326130663a356663303a636166653a3a2f34382d3438203d3e20323035303336.roa (hash: SIzDkF7YYsoaU9vFR/am7daSl1S+0BBZdMp9c5ogCY8=) 10: 39312e3230392e35302e302f32342d3234203d3e20323039333732.roa (hash: LfqYMzkh476Ki7VQsqODx8QNPNDEFujJRyehaY4kEpM=) 11: 326130663a356663303a6465623a3a2f34382d3438203d3e20323035303336.roa (hash: HGgyYO79YRPv5eTIvRCSkvT+uzFYIDLIXRArnhiRVzA=) 12: 326130663a356663303a6164643a3a2f34382d3438203d3e20323035303336.roa (hash: N543k0DcGiJuxubeGma9GZg+VhMwbPVS9ShNVwfZl30=) 13: 326130663a356663303a646565643a3a2f34382d3438203d3e20323035303336.roa (hash: 6WyHSY5Xp60q1IE95V4h6lwOICpnxsevWtnXKH+E1RA=) 14: 326130663a356663303a646561643a3a2f34382d3438203d3e20323035303336.roa (hash: Z7YS72AkRUhmGE/8eVCwX/QArQ7kzj3DMVCvF8nhupE=) 15: 326130663a356663303a6265643a3a2f34382d3438203d3e20323035303336.roa (hash: Vn0tNJq84yvhpEx3djvegd0qElXvUXIj3d10CpoBDS8=) 16: 326130663a356663303a626162613a3a2f34382d3438203d3e20323035303336.roa (hash: kdDGBWrURu4f0ClnA4SfgsI29M2UtK1sJ9ldbUvOvNc=) 17: E205EBF065FC4929F1802662AE62D7F9762600E6.crl (hash: 5yLspwTkFL5DD/As97oFmz20AYpsC/QIIlIcQfmqzbs=) 18: 326130663a356663303a6261643a3a2f34382d3438203d3e20323035303336.roa (hash: tvkflaFeVW3sd8cXnqPd3goXjSItIqLYbambS6E6g9M=) 19: 326130663a356663303a666565643a3a2f34382d3438203d3e20323035303336.roa (hash: Qj8pflv8KszWoeUIqOpeKQUtZrsbyJDTmnxefpUjjlo=) 20: 326130663a356663303a663030643a3a2f34382d3438203d3e20323035303336.roa (hash: Xgs2aXZ2twwalLnMnwHKHrLdiNgmex+4PLid272RcXc=) 21: 39312e3230392e34382e302f32342d3234203d3e2034363337.roa (hash: 4+D5jdmTDYB1GvCAU0z5GBGlSPW7Q/zpduO0wdWv8pU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 13:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:d6:ae:9a:59:28:11:9f:66:73:7d:32:8f:7d:dc:43:17:ff:e5:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6 Validity Not Before: Mar 2 12:34:43 2026 GMT Not After : Mar 3 13:57:43 2026 GMT Subject: CN=968C68750D323A815AB510DED94D71FA2876FF7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:31:4c:51:d8:bb:17:86:aa:00:ac:c4:74:04: b8:40:12:57:bd:22:b9:e2:bf:54:2c:c0:8d:b7:bf: 79:3f:d4:14:4a:25:92:cf:03:16:d7:4d:54:28:22: 54:2d:05:43:4c:d7:3a:de:d4:55:05:e0:1b:2b:16: 20:39:4d:db:45:30:ec:20:3d:32:c4:09:7a:23:36: 26:bf:41:11:76:cb:08:f1:c1:8e:57:cc:eb:4d:63: 01:c3:3a:c6:4b:7c:ec:24:27:8d:2f:5e:3e:06:f5: 00:10:01:1c:52:db:38:c6:c0:fc:57:9f:b5:44:71: b6:2b:c9:6b:59:51:c8:97:06:e9:71:a4:29:82:36: f2:e1:a0:09:0f:24:91:bb:61:76:7a:d4:6c:26:a2: cd:17:bf:21:85:47:5e:6e:93:46:62:2a:cd:3c:46: 7b:53:2d:d0:72:c3:e3:be:d6:0c:70:a8:40:16:81: 20:c3:97:72:b4:dd:c8:5f:a5:1a:f1:74:b6:e4:29: bc:ba:b0:76:00:9b:74:4c:3f:00:21:61:23:ed:40: bf:a5:ab:91:46:a6:8f:70:f4:cb:36:63:a7:74:79: da:18:64:20:6d:b8:7d:34:89:bb:ea:b3:c2:b4:eb: 72:ed:42:c0:65:6a:c7:1c:a9:18:fc:c3:01:34:92: b8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8C:68:75:0D:32:3A:81:5A:B5:10:DE:D9:4D:71:FA:28:76:FF:7A X509v3 Authority Key Identifier: keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:72:d1:b1:e1:de:cd:22:ff:f4:b8:01:88:e0:46:3c:2d:63: fe:f5:63:2c:7b:38:3d:d5:12:3b:b8:ca:ef:9b:37:cf:02:f4: 81:2f:e6:17:a6:6e:1f:c2:07:d2:3b:72:de:4a:31:10:d8:6e: d4:01:64:b3:1b:d6:e8:a4:5b:65:59:6e:df:63:a0:7a:c5:ca: 78:f0:5e:15:6e:8a:f3:08:1e:5b:78:d6:0a:1f:6f:1c:ec:c9: 2b:a3:86:4b:84:04:d9:8c:58:d9:26:47:1b:7e:71:ac:ff:18: 59:37:9d:73:3b:95:6e:9e:d7:e9:0a:09:a5:e1:43:b7:13:37: 25:3f:b3:db:5a:b5:ca:3f:00:22:5f:53:17:24:bb:23:93:a2: ea:d8:76:f2:b3:a2:29:ce:47:28:76:54:3e:1d:b8:6a:cf:51: 7e:1d:8c:c4:5b:60:a4:1c:8b:2f:c3:69:95:f7:cf:c6:b7:86: 82:4e:12:de:bf:38:ad:a0:98:73:c2:60:42:86:f3:f2:32:83: e2:9c:01:09:5e:6a:b6:26:5b:a9:d1:42:50:35:36:f3:ff:27: 1d:4f:53:e4:02:bb:29:8b:48:70:f5:59:4c:34:a9:1a:b7:4e: b9:43:ee:68:92:30:d0:62:73:99:62:2d:39:c0:3f:19:43:71: 66:b2:72:0e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPdaumlkoEZ9mc30yj33cQxf/5fEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTIwNWViZjA2NWZjNDkyOWYxODAyNjYyYWU2MmQ3Zjk3 NjI2MDBlNjAeFw0yNjAzMDIxMjM0NDNaFw0yNjAzMDMxMzU3NDNaMDMxMTAvBgNV BAMTKDk2OEM2ODc1MEQzMjNBODE1QUI1MTBERUQ5NEQ3MUZBMjg3NkZGN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzMUxR2LsXhqoArMR0BLhAEle9 Irniv1QswI23v3k/1BRKJZLPAxbXTVQoIlQtBUNM1zre1FUF4BsrFiA5TdtFMOwg PTLECXojNia/QRF2ywjxwY5XzOtNYwHDOsZLfOwkJ40vXj4G9QAQARxS2zjGwPxX n7VEcbYryWtZUciXBulxpCmCNvLhoAkPJJG7YXZ61Gwmos0XvyGFR15uk0ZiKs08 RntTLdByw+O+1gxwqEAWgSDDl3K03chfpRrxdLbkKby6sHYAm3RMPwAhYSPtQL+l q5FGpo9w9Ms2Y6d0edoYZCBtuH00ibvqs8K063LtQsBlasccqRj8wwE0krg1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUloxodQ0yOoFatRDe2U1x+ih2/3owHwYDVR0j BBgwFoAU4gXr8GX8SSnxgCZirmLX+XYmAOYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYwYmUzZTEtODU0ZS00NjYyLTkyZTgtMDI4OTUwZmY1 N2ZlLzAvRTIwNUVCRjA2NUZDNDkyOUYxODAyNjYyQUU2MkQ3Rjk3NjI2MDBFNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRnWHI4R1g4U1NueGdDWmlybUxYLVhZ bUFPWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjBiZTNlMS04 NTRlLTQ2NjItOTJlOC0wMjg5NTBmZjU3ZmUvMC9FMjA1RUJGMDY1RkM0OTI5RjE4 MDI2NjJBRTYyRDdGOTc2MjYwMEU2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi3LRseHezSL/9LgBiOBG PC1j/vVjLHs4PdUSO7jK75s3zwL0gS/mF6ZuH8IH0jty3koxENhu1AFksxvW6KRb ZVlu32OgesXKePBeFW6K8wgeW3jWCh9vHOzJK6OGS4QE2YxY2SZHG35xrP8YWTed czuVbp7X6QoJpeFDtxM3JT+z21q1yj8AIl9TFyS7I5Oi6th28rOiKc5HKHZUPh24 as9Rfh2MxFtgpByLL8NplffPxreGgk4S3r84raCYc8JgQobz8jKD4pwBCV5qtiZb qdFCUDU28/8nHU9T5AK7KYtIcPVZTDSpGrdOuUPuaJIw0GJzmWItOcA/GUNxZrJy Dg== -----END CERTIFICATE-----Generated at Mon Mar 2 17:06:04 2026 by rpki-client