$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft File: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft (raw, json) Hash identifier: zp4td+W7ku+bqp68aNCDDsbnQiRqbBLymmhGKwQTfIA= Subject key identifier: EB:F3:BF:D6:6E:7F:32:97:96:75:35:39:96:77:15:8C:0F:90:13:6E Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Certificate serial: 71629016DF411092F3BEA5F6F95FE1585EECEAC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft Manifest number: 06C4 Signing time: Sat 13 Jun 2026 02:23:04 +0000 Manifest this update: Sat 13 Jun 2026 02:18:04 +0000 Manifest next update: Sun 14 Jun 2026 02:56:04 +0000 Files and hashes: 1: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl (hash: F+H3jPsyK4LuxTiPqguoOdBc1I+NZVjb5PHKNimDIUo=) 2: 34362e3235302e3234302e302f32302d3234203d3e20313431393935.roa (hash: 5zFYerIngzLwSwbeiiGPHVQadLBE1/J7oEEXeFR/OFM=) 3: 34362e3235302e3232342e302f32302d3234203d3e20313431393935.roa (hash: ht90MUomGkgWhJETWF0rvugOS8SI8qvW9OndsUlGu80=) 4: 326130303a386530303a313a3a2f34382d3438203d3e203230373132.roa (hash: 2qiBxfK+UGsXjYXrt6Cm3jSdVu6qoZhGBCRhmjYUhjg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:62:90:16:df:41:10:92:f3:be:a5:f6:f9:5f:e1:58:5e:ec:ea:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Validity Not Before: Jun 13 02:18:04 2026 GMT Not After : Jun 14 02:56:04 2026 GMT Subject: CN=EBF3BFD66E7F3297967535399677158C0F90136E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:11:c2:71:d0:ee:a2:5f:6d:61:e6:5f:93:d8: 03:d2:5d:5b:7b:e6:a1:33:5d:92:1d:32:48:d2:26: b6:83:83:ff:8f:a0:75:58:a9:15:a4:80:33:2f:c1: dc:3a:c7:34:e3:ea:52:10:48:c3:9d:e0:30:f3:fd: a4:35:9b:10:b3:ea:7b:fe:e6:d9:9b:3f:7a:b9:23: 11:bb:6e:d8:f6:57:c1:af:10:d5:85:08:ce:98:7d: 24:ac:aa:65:4e:14:f4:95:05:26:83:1e:67:47:ee: b2:e5:32:58:d3:a2:20:cf:d8:99:31:62:13:4a:68: 07:e3:87:b5:8b:f2:94:66:4d:83:12:dd:93:f1:ae: 1e:e2:d2:3a:97:bb:c2:43:13:c9:d6:ee:c7:00:cc: d3:90:de:56:35:c9:b7:b7:8b:e2:ec:ff:fa:66:1c: a1:e7:4d:39:2c:db:5e:16:81:46:f9:57:d5:cd:ff: 79:bf:cd:a7:36:e1:0d:6b:83:8a:63:a4:27:95:3f: ec:3c:f8:55:70:d6:65:fc:22:b6:2d:1b:91:20:67: 51:ee:74:af:78:23:3c:7f:41:da:c6:c9:55:db:bf: 67:18:a3:1b:eb:30:12:c6:a5:11:21:84:42:ec:f1: 54:56:68:7b:49:e1:01:1d:c2:f5:d7:ac:15:e8:a1: f8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F3:BF:D6:6E:7F:32:97:96:75:35:39:96:77:15:8C:0F:90:13:6E X509v3 Authority Key Identifier: keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:3e:72:78:8c:c3:1b:41:6b:f9:46:48:ce:7e:da:ee:82:c8: 7b:51:a6:49:e0:9d:e0:b5:d4:b0:74:ef:a1:51:eb:13:64:3e: 31:af:1b:28:36:a1:4a:be:8d:9e:1f:18:54:c8:1c:1e:44:15: d8:cd:c5:68:b6:72:b8:f6:70:59:a8:f7:78:45:e7:ec:5c:3f: 26:b7:19:b9:5a:c9:7c:66:08:f8:9d:22:4b:29:a4:f4:c6:f3: 02:8a:cf:ee:61:c3:d0:0c:56:39:a4:9b:e2:e5:4f:f1:22:8f: d3:30:10:34:21:f9:15:fa:ac:16:87:19:8a:01:70:99:f5:a9: 5a:7f:9d:c4:c1:08:e2:5a:47:f5:1b:15:52:20:1e:95:6f:9a: d6:a9:72:b4:c0:ee:a6:bf:20:86:08:0e:8e:2f:fe:92:db:dd: c9:e9:61:ff:01:9c:14:98:74:7c:2e:98:35:0b:c2:a6:a7:e9: 57:29:d3:d5:54:88:b4:56:6b:2e:dd:44:8e:0d:78:7f:90:03: d1:c5:10:ba:3e:b3:cb:9b:60:5a:e9:db:e6:83:f8:f2:f4:89: d5:2b:e3:13:3b:84:40:0b:61:0c:26:4d:08:39:69:d8:98:a3: 9d:0d:30:25:9c:c1:09:b7:24:30:58:ad:a9:12:e1:6c:59:0f: c4:e5:f2:27 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUcWKQFt9BEJLzvqX2+V/hWF7s6sYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjI5ZmJhYjRkYjg2N2Y2YmQ5YTdlZmY2YWE1NWQ5OGMx NjJlMWFhZDAeFw0yNjA2MTMwMjE4MDRaFw0yNjA2MTQwMjU2MDRaMDMxMTAvBgNV BAMTKEVCRjNCRkQ2NkU3RjMyOTc5Njc1MzUzOTk2NzcxNThDMEY5MDEzNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeEcJx0O6iX21h5l+T2APSXVt7 5qEzXZIdMkjSJraDg/+PoHVYqRWkgDMvwdw6xzTj6lIQSMOd4DDz/aQ1mxCz6nv+ 5tmbP3q5IxG7btj2V8GvENWFCM6YfSSsqmVOFPSVBSaDHmdH7rLlMljToiDP2Jkx YhNKaAfjh7WL8pRmTYMS3ZPxrh7i0jqXu8JDE8nW7scAzNOQ3lY1ybe3i+Ls//pm HKHnTTks214WgUb5V9XN/3m/zac24Q1rg4pjpCeVP+w8+FVw1mX8IrYtG5EgZ1Hu dK94Izx/QdrGyVXbv2cYoxvrMBLGpREhhELs8VRWaHtJ4QEdwvXXrBXoofjlAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU6/O/1m5/MpeWdTU5lncVjA+QE24wHwYDVR0j BBgwFoAU8p+6tNuGf2vZp+/2qlXZjBYuGq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmY1MmQ4MTQtM2QyZi00ZGY0LTgxNDAtZGZiNTMwZjc0 OTEyLzAvRjI5RkJBQjREQjg2N0Y2QkQ5QTdFRkY2QUE1NUQ5OEMxNjJFMUFBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhwLTZ0TnVHZjJ2WnAtXzJxbFhaakJZ dUdxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjUyZDgxNC0z ZDJmLTRkZjQtODE0MC1kZmI1MzBmNzQ5MTIvMC9GMjlGQkFCNERCODY3RjZCRDlB N0VGRjZBQTU1RDk4QzE2MkUxQUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzT5yeIzDG0Fr+UZIzn7a 7oLIe1GmSeCd4LXUsHTvoVHrE2Q+Ma8bKDahSr6Nnh8YVMgcHkQV2M3FaLZyuPZw Waj3eEXn7Fw/JrcZuVrJfGYI+J0iSymk9MbzAorP7mHD0AxWOaSb4uVP8SKP0zAQ NCH5FfqsFocZigFwmfWpWn+dxMEI4lpH9RsVUiAelW+a1qlytMDupr8ghggOji/+ ktvdyelh/wGcFJh0fC6YNQvCpqfpVynT1VSItFZrLt1Ejg14f5AD0cUQuj6zy5tg Wunb5oP48vSJ1SvjEzuEQAthDCZNCDlp2JijnQ0wJZzBCbckMFitqRLhbFkPxOXy Jw== -----END CERTIFICATE-----Generated at Sat Jun 13 11:16:55 2026 by rpki-client