$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft File: 7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft (raw, json) Hash identifier: uzDTL8yP5LpjrZPMGLIsSfy8e+VTuFTyyYEg7Lxhptw= Subject key identifier: 08:14:C2:49:70:73:F2:35:D3:04:AE:6C:B6:AC:19:00:36:BC:35:DC Authority key identifier: 7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85 Certificate issuer: /CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985 Certificate serial: 595A2136C5C5A25EB78BA82D0E4F80F9EA48B8AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft Manifest number: 0345 Signing time: Sat 14 Nov 2026 14:44:55 +0000 Manifest this update: Sat 14 Nov 2026 14:39:55 +0000 Manifest next update: Sun 15 Nov 2026 16:57:55 +0000 Files and hashes: 1: 326130653a666434353a326366303a3a2f34382d3438203d3e20323032383535.roa (hash: b4dSzH5oz/8kg+iOLc3kROxlkMvwGXgL0aSDALtRaeY=) 2: 326130653a666434353a326636303a3a2f34382d3438203d3e20323037313038.roa (hash: fin/tsFszyHjwEDVRVOEznFkN6ILbbdEP80VJIaXRto=) 3: 326130653a666434353a326535303a3a2f34382d3438203d3e20323135333730.roa (hash: 5NX5oQfTTRwCAtYxY8FoO9Mq2vedKAFx35oGXhbHabg=) 4: 326130653a666434353a326130303a3a2f34302d3438203d3e20323133323533.roa (hash: qDmc/WjuJm2+K6V+qH0YTGIzUkgJV2kWMCYDVdR94ng=) 5: 326130653a666434353a326538303a3a2f34382d3438203d3e20323134373233.roa (hash: HL7mFBDKDU+iYfATsU33A3w0WGjK39TBLxCkLSeJlhE=) 6: 326130653a666434353a326636303a3a2f34382d3438203d3e203532303431.roa (hash: IZkqFVYEgPyyB/+rGAFH6ZTxV7F8e0iFJgsbGpJjRuQ=) 7: 326130653a666434353a326634303a3a2f34342d3438203d3e20323132353931.roa (hash: Uyw6VgMx1AiR+ePE7wzmr3TKeM1DsMYQVPRyQ2nqo7o=) 8: 326130393a626534303a323830303a3a2f34302d3438203d3e20313939393530.roa (hash: E/KKQIBIvXrHxntg1Xf36BIIDrbcHQG7BGnX7lqe1ts=) 9: 326130653a666434353a326633303a3a2f34382d3438203d3e20323039333130.roa (hash: zBck4nOfVGigqbE1M8GwahkpZT+TSOG3sW4XnkW/DN0=) 10: 34352e3134362e372e302f32342d3332203d3e203439393831.roa (hash: ohztvwe2w66eHUWp00RbU/8ScLc2/rEvRDbabjcZgPU=) 11: 326130653a666434353a326635303a3a2f34382d3634203d3e203439393831.roa (hash: zpE8O6QFgOcjidzEd8zc2djpSlwttC8o8DmDYuakobQ=) 12: 326130653a666434353a353030303a3a2f34302d3438203d3e20323034383330.roa (hash: 4VMWXKcIo6/p9ijIu9IEM7e/uFISrba097G5zVjTr4E=) 13: 326130653a666434353a326630303a3a2f34382d3438203d3e20323132393636.roa (hash: 4rV6D1GFz/bjY4t177ru5i22axDSZLmceosAGjuU6GE=) 14: 7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl (hash: VRvVZ3y52D8laa2B8Goh8q1Gy7CyX2zMHhXaP/havTM=) 15: 326130393a626534303a323830303a3a2f34302d3438203d3e20323133313730.roa (hash: 5klqSoppwsu6NOWd6DdkFO/NkJ4F93qo8ByoAVMNmBw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:5a:21:36:c5:c5:a2:5e:b7:8b:a8:2d:0e:4f:80:f9:ea:48:b8:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985 Validity Not Before: Nov 14 14:39:55 2026 GMT Not After : Nov 15 16:57:55 2026 GMT Subject: CN=0814C2497073F235D304AE6CB6AC190036BC35DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:97:65:15:6c:d2:d4:7f:5f:0a:7c:2d:00:60: 64:2b:0d:a6:b8:3c:13:2e:0e:45:b5:1b:ba:49:52: ca:64:d5:9f:be:46:10:2d:a7:22:10:40:67:1e:e6: af:b1:1c:ae:7f:e1:5d:0f:90:35:17:d9:2e:26:b1: 77:8f:6b:5e:4a:f1:6a:cb:95:e1:9e:59:84:4c:04: ff:9e:57:40:c3:6b:0a:77:8c:36:f6:b4:55:6c:fc: 64:2c:48:8b:0b:6f:42:cc:70:48:45:8d:6e:c8:c7: e2:ab:af:ca:9e:dc:0c:d2:04:77:5d:da:ed:a3:91: 96:74:89:e1:fd:65:92:1d:1b:62:d1:25:6e:99:31: 86:55:40:11:a7:8d:aa:88:98:3b:f2:98:bb:7c:7b: 64:fe:b8:d6:b9:d5:88:6a:68:5b:7e:7d:0b:31:3d: b3:f4:3e:86:a1:50:e4:61:10:22:2b:e0:2d:e0:da: 36:d9:de:ec:1b:0f:e3:a1:77:f4:1b:27:58:73:4d: d6:46:8a:55:83:39:0b:f8:fd:aa:1e:30:80:b9:95: 9a:bf:03:2d:5a:7d:f5:e9:05:c2:13:6b:a3:5f:c1: 53:54:e5:e9:10:9f:64:a5:00:2b:89:aa:14:ba:e9: d9:9f:6c:ee:63:b1:30:9e:24:a6:96:a1:51:02:37: ca:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:14:C2:49:70:73:F2:35:D3:04:AE:6C:B6:AC:19:00:36:BC:35:DC X509v3 Authority Key Identifier: keyid:7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:a9:e0:85:f5:80:6b:f9:a5:55:87:87:7e:ac:94:5b:fd:91: 24:f3:df:a0:51:7e:ec:21:05:b0:c5:b1:ee:d9:60:92:a1:37: 7c:1a:02:c8:b0:da:14:0f:e2:9f:12:27:87:7e:f6:b2:83:5e: b2:c3:c0:9b:5a:87:ac:db:2b:30:fc:6b:3c:ce:70:53:6d:bd: 21:1d:ca:22:fc:9c:81:42:44:96:b2:e5:a3:b1:4a:f8:be:39: b9:b4:d2:e5:79:33:4e:00:1c:0c:96:ec:bd:1f:60:8d:e1:03: 3d:89:9c:f9:9c:c9:e6:85:c4:58:97:76:d4:20:00:2f:7e:70: 23:34:51:66:4b:46:9c:c4:61:00:08:61:40:ac:32:fb:3e:0e: 2f:71:5a:0d:4e:e7:7f:7e:1c:01:a2:db:59:c5:f0:b1:aa:46: 19:90:1b:ca:88:0d:59:7d:bf:6f:a6:d6:06:06:64:26:57:0a: 5c:4d:9e:10:b3:11:d1:77:1a:df:6b:16:4d:a1:10:c4:70:86: 8b:c7:ae:8c:9f:a1:fc:21:89:82:5e:12:9e:88:57:a7:8f:09: dd:72:28:54:ab:b0:df:92:00:77:d7:bc:04:4a:ed:d1:cc:a6: f3:7f:36:01:54:cc:37:a1:0e:3b:e6:15:10:fc:e0:61:a7:e6: dc:b0:8a:36 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWVohNsXFol63i6gtDk+A+epIuK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2YyMTZmNDlhM2I5YTg0YTBlODVlODBhMmM0Mjg3NGYw OWVhMzk4NTAeFw0yNjExMTQxNDM5NTVaFw0yNjExMTUxNjU3NTVaMDMxMTAvBgNV BAMTKDA4MTRDMjQ5NzA3M0YyMzVEMzA0QUU2Q0I2QUMxOTAwMzZCQzM1REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+l2UVbNLUf18KfC0AYGQrDaa4 PBMuDkW1G7pJUspk1Z++RhAtpyIQQGce5q+xHK5/4V0PkDUX2S4msXePa15K8WrL leGeWYRMBP+eV0DDawp3jDb2tFVs/GQsSIsLb0LMcEhFjW7Ix+Krr8qe3AzSBHdd 2u2jkZZ0ieH9ZZIdG2LRJW6ZMYZVQBGnjaqImDvymLt8e2T+uNa51YhqaFt+fQsx PbP0PoahUORhECIr4C3g2jbZ3uwbD+Ohd/QbJ1hzTdZGilWDOQv4/aoeMIC5lZq/ Ay1affXpBcITa6NfwVNU5ekQn2SlACuJqhS66dmfbO5jsTCeJKaWoVECN8phAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUCBTCSXBz8jXTBK5stqwZADa8NdwwHwYDVR0j BBgwFoAUfyFvSaO5qEoOhegKLEKHTwnqOYUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmRmYjMwY2EtZTFjMi00OTIxLWIwNTQtZDRhZjA5MTY1 YWYxLzAvN0YyMTZGNDlBM0I5QTg0QTBFODVFODBBMkM0Mjg3NEYwOUVBMzk4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Z5RnZTYU81cUVvT2hlZ0tMRUtIVHdu cU9ZVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yZGZiMzBjYS1l MWMyLTQ5MjEtYjA1NC1kNGFmMDkxNjVhZjEvMC83RjIxNkY0OUEzQjlBODRBMEU4 NUU4MEEyQzQyODc0RjA5RUEzOTg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJqnghfWAa/mlVYeHfqyU W/2RJPPfoFF+7CEFsMWx7tlgkqE3fBoCyLDaFA/inxInh372soNessPAm1qHrNsr MPxrPM5wU229IR3KIvycgUJElrLlo7FK+L45ubTS5XkzTgAcDJbsvR9gjeEDPYmc +ZzJ5oXEWJd21CAAL35wIzRRZktGnMRhAAhhQKwy+z4OL3FaDU7nf34cAaLbWcXw sapGGZAbyogNWX2/b6bWBgZkJlcKXE2eELMR0Xca32sWTaEQxHCGi8eujJ+h/CGJ gl4SnohXp48J3XIoVKuw35IAd9e8BErt0cym8382AVTMN6EOO+YVEPzgYafm3LCK Ng== -----END CERTIFICATE-----Generated at Sat Nov 14 22:35:08 2026 by rpki-client