$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft File: B683F2EB50C5999A77456E8826831609D48C7D3E.mft (raw, json) Hash identifier: fFskQYlbUvPd6yixRschHAVp3mbXIXNyF4jWYbjbv3Y= Subject key identifier: 77:E1:A9:7E:B7:73:E1:B3:4E:95:C8:23:E1:21:CA:3A:3B:A3:16:64 Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e Certificate serial: 534537DC95FD84C2A686346789D08CE30653923A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft Manifest number: 0859 Signing time: Sat 14 Nov 2026 09:09:58 +0000 Manifest this update: Sat 14 Nov 2026 09:04:58 +0000 Manifest next update: Sun 15 Nov 2026 13:08:58 +0000 Files and hashes: 1: 3231332e3133392e38382e302f32342d3234203d3e2039303039.roa (hash: +9ZlUjFGDijH8b5+yzD1PMjjZdY4zblyEeoJ6+Yq2Hw=) 2: 3231332e3133392e37322e302f32342d3234203d3e203230383630.roa (hash: ZNpXP0V7X1SLVOWk1qf9gaielEOXyCXpXadwIPelQAs=) 3: B683F2EB50C5999A77456E8826831609D48C7D3E.crl (hash: 8i29Hu8Qoc5zqAkM8KE/HDN7EaXeZf6Jw5NHXU3g5ls=) 4: 3231332e3133392e38352e302f32342d3234203d3e2039303039.roa (hash: hksR2RFjNh00D4GQuid5Bvdsyv72DQ8eShLKWLWJ500=) 5: 3231332e3133392e36342e302f32342d3234203d3e2039303039.roa (hash: lCZOT7CUw//G2wSUIRSPoEnVhHBxs955MQWzeQPvQMk=) 6: 3231332e3133392e39332e302f32342d3234203d3e2039303039.roa (hash: 0cchwdJLnMGDMK7R7/iy+DuTxrLqECv6lMhtpTOQuYc=) 7: 3231332e3133392e37342e302f32342d3234203d3e203239383032.roa (hash: e2HbFyb9jJVCReOUGrS06701Hln0j7R9pUtzgWwuBh4=) 8: 3231332e3133392e39342e302f32342d3234203d3e2039303039.roa (hash: jYd4q98qoULIjdslO4Xk9d5wPUuNksXv3RR74JoHySc=) 9: 3231332e3133392e37372e302f32342d3234203d3e20333938323536.roa (hash: YJQzrkCNdtcHF03SEJIbUA14cqWLzrSdWGFwfzoZWw8=) 10: 3231332e3133392e37362e302f32342d3234203d3e20323132333834.roa (hash: BWn7Fyc71HS3Qx09imcUTYAlGWvzW8ei/YZ4vwsjDbQ=) 11: 3231332e3133392e38362e302f32342d3234203d3e2039303039.roa (hash: NJOowo5VUyyKfXn6pnDF/Tz4fWJEVeCOza5neOzvfGM=) 12: 3231332e3133392e36392e302f32342d3234203d3e20383334.roa (hash: ltBPoGvI8LMOGTQFixOZhqY2LJ/20YwdXHn/7p1ROpI=) 13: 3231332e3133392e38322e302f32342d3234203d3e2039303039.roa (hash: OH/dvNiYWhw/SVHGvLSGkBdK+Kv4T+yJzETwI0tfRWM=) 14: 3231332e3133392e39352e302f32342d3234203d3e2039303039.roa (hash: mu6JkT3fZoMbVctkEBjnrLNPWmpvwLKVK+IulCwBuzU=) 15: 3231332e3133392e37302e302f32342d3234203d3e203631333137.roa (hash: dwbyJCtBdp+JkGUYAgtx7UvsHYfO6HdHWwhgMdccyTg=) 16: 3231332e3133392e39302e302f32342d3234203d3e2039303039.roa (hash: CavYIrZSFhZfgGj2RhsuO+5dyTDRj7K4lMIF+18l9zg=) 17: 3231332e3133392e36362e302f32332d3234203d3e20383334.roa (hash: /fEFWqqLrd+Ts0CFxmSPtqlc3u0CZ4xk9QWgLc2rXd0=) 18: 3231332e3133392e39322e302f32342d3234203d3e20383334.roa (hash: iBZrpirngtNdiGfgs1e/5egkTxly/jS9DyH9F0hqP68=) 19: 3231332e3133392e38372e302f32342d3234203d3e2039303039.roa (hash: MNLBCqMmK/mGKn+arx3sMtp4e+thFoWGhi8ivlTfj0U=) 20: 3231332e3133392e36352e302f32342d3234203d3e20313337343039.roa (hash: 98cTJAfKgRxXy+8me2IlHy/9WFu3NTMiKJWvj2EAs8U=) 21: 3231332e3133392e39312e302f32342d3234203d3e2039303039.roa (hash: YdmUivZOiB+z6zp254vUpjVQR2cGS4KwZb90oR6ZVsM=) 22: 3231332e3133392e38392e302f32342d3234203d3e2039303039.roa (hash: UJuRx/b7ZuN3xXtU9UGl0rZYUByVV4xgOSCJ1FXm9MY=) 23: 3231332e3133392e37382e302f32332d3234203d3e20383334.roa (hash: ZAAaqaDQto8YMZJOOWZKhH2B64dKunjVz6h4lEzy2Bo=) 24: 3231332e3133392e36382e302f32342d3234203d3e2039303039.roa (hash: li8/PeGFnvanCFbP6dMpQ9zGnOzPHTiC321jO4I5URc=) 25: 3231332e3133392e37312e302f32342d3234203d3e203631333137.roa (hash: kRC8p1GZDVw/n153aBzSn3FnDjN+XtehTkikwSQQAhY=) 26: 3231332e3133392e38302e302f32332d3234203d3e20383334.roa (hash: xh9MbcQaOVI91ITKhlmBWnlkj2aoxPKUoH1PWhneuhw=) 27: 3231332e3133392e37352e302f32342d3234203d3e20383334.roa (hash: 4XXjL0MwhaJInGfscOF1Yf6rhcl9L6u/8QICuc26MxA=) 28: 3231332e3133392e38342e302f32342d3234203d3e2039303039.roa (hash: JEuERYX+zmY14zA8MGqIEE+WMqqmJly2u5v4u9LNrmQ=) 29: 3231332e3133392e38332e302f32342d3234203d3e2039303039.roa (hash: ddkCuB2C0zIUJCsHJnqd7PIRz+kBJmKHlIRYHjQdbXM=) 30: 3231332e3133392e37332e302f32342d3234203d3e20323132323338.roa (hash: 7Oj+hP0YV7LQnpCPJh2SU1zRRPNxpiFixVYZv1ihuBc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 13:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:45:37:dc:95:fd:84:c2:a6:86:34:67:89:d0:8c:e3:06:53:92:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e Validity Not Before: Nov 14 09:04:58 2026 GMT Not After : Nov 15 13:08:58 2026 GMT Subject: CN=77E1A97EB773E1B34E95C823E121CA3A3BA31664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9d:65:7b:82:48:ba:83:2f:d3:55:3e:52:09: 39:c0:90:e3:df:65:22:c7:d2:09:5f:07:e9:ec:ee: cf:c1:3b:7b:64:6d:1e:53:53:e3:07:f0:16:f2:57: 00:84:a8:14:d2:4f:e6:22:df:76:c2:84:c4:1f:29: db:6e:25:b1:ee:5c:07:01:97:3f:27:82:b4:4f:39: 86:80:4a:d3:6c:da:e8:bf:6e:d7:0b:c0:d2:a9:2a: 65:e8:1c:39:b4:41:ee:84:eb:77:c7:0b:ae:08:2f: 7d:e9:32:45:db:34:ee:6c:a7:a1:84:2d:ca:01:ed: f2:d4:aa:53:0e:3c:b1:fd:3d:7b:e5:5a:67:42:2f: 40:92:45:fa:52:32:da:07:72:84:09:e2:33:00:ae: 6e:8c:99:20:40:4b:5d:f2:fd:fe:fc:4b:62:d5:7a: 55:d8:08:b8:31:54:22:bf:9a:a5:1c:4b:1a:f5:e2: 53:83:e3:37:1a:06:65:9d:bb:07:29:5e:61:e9:1d: 19:b3:3e:8e:9f:3f:39:af:52:1c:af:61:26:72:87: 56:d7:ea:4d:2e:d5:af:34:c4:fc:ee:53:0a:4f:56: 5b:7f:57:cf:a8:41:c2:90:9c:3b:7f:ed:e1:e5:bf: 36:5f:ca:4f:90:71:59:6f:39:6a:16:10:4c:16:e8: c5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E1:A9:7E:B7:73:E1:B3:4E:95:C8:23:E1:21:CA:3A:3B:A3:16:64 X509v3 Authority Key Identifier: keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:b8:a7:ba:70:8f:17:41:99:de:0f:f1:6e:99:4d:42:a6:cb: f9:30:ff:21:2d:14:99:e8:dc:42:df:10:dd:ce:40:18:f0:dc: f1:60:2f:35:af:17:ba:ee:5e:f9:12:ef:41:37:0e:84:6e:3d: 48:1b:53:2a:16:a2:a3:6a:8e:c2:da:45:3a:fd:cd:43:66:82: 23:50:71:cf:3c:ad:da:86:01:0c:aa:13:55:5b:94:51:53:93: 90:37:87:3b:c5:63:4f:5e:ca:d7:eb:53:d3:f2:de:00:84:ba: cf:e4:5a:b4:30:d6:92:05:47:8b:19:ac:d2:54:d0:a5:c0:f8: c6:9c:32:a3:b0:f7:e8:4d:28:94:3c:6a:8e:1c:7e:d9:7d:44: 74:f0:74:32:19:31:01:96:b7:ae:8a:36:00:75:f9:d8:a4:a2: 2a:95:63:78:a8:56:e1:1e:19:b5:64:85:38:e7:cc:04:c5:fd: 23:3e:ea:64:7e:e1:7d:74:0c:ff:64:2a:c4:ca:87:19:4b:29: 5e:de:6f:d0:1a:09:e8:12:d9:fb:6a:0c:4e:ce:dc:c2:1c:06: 25:e4:8c:57:cc:88:c4:17:aa:be:61:71:22:56:fc:f0:15:5d: 78:77:05:60:9a:82:b3:e7:09:c5:ec:25:ac:67:1f:15:81:af: e4:1b:e5:66 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUU0U33JX9hMKmhjRnidCM4wZTkjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk NDhjN2QzZTAeFw0yNjExMTQwOTA0NThaFw0yNjExMTUxMzA4NThaMDMxMTAvBgNV BAMTKDc3RTFBOTdFQjc3M0UxQjM0RTk1QzgyM0UxMjFDQTNBM0JBMzE2NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjnWV7gki6gy/TVT5SCTnAkOPf ZSLH0glfB+ns7s/BO3tkbR5TU+MH8BbyVwCEqBTST+Yi33bChMQfKdtuJbHuXAcB lz8ngrRPOYaAStNs2ui/btcLwNKpKmXoHDm0Qe6E63fHC64IL33pMkXbNO5sp6GE LcoB7fLUqlMOPLH9PXvlWmdCL0CSRfpSMtoHcoQJ4jMArm6MmSBAS13y/f78S2LV elXYCLgxVCK/mqUcSxr14lOD4zcaBmWduwcpXmHpHRmzPo6fPzmvUhyvYSZyh1bX 6k0u1a80xPzuUwpPVlt/V8+oQcKQnDt/7eHlvzZfyk+QcVlvOWoWEEwW6MW3AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUd+Gpfrdz4bNOlcgj4SHKOjujFmQwHwYDVR0j BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT TWZUNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hMDFjMTRmYi1i NjYwLTQ4OWQtOWU5Zi05NDAyZTllMmMyZTIvMC9CNjgzRjJFQjUwQzU5OTlBNzc0 NTZFODgyNjgzMTYwOUQ0OEM3RDNFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgrinunCPF0GZ3g/xbplN QqbL+TD/IS0UmejcQt8Q3c5AGPDc8WAvNa8Xuu5e+RLvQTcOhG49SBtTKhaio2qO wtpFOv3NQ2aCI1Bxzzyt2oYBDKoTVVuUUVOTkDeHO8VjT17K1+tT0/LeAIS6z+Ra tDDWkgVHixms0lTQpcD4xpwyo7D36E0olDxqjhx+2X1EdPB0MhkxAZa3roo2AHX5 2KSiKpVjeKhW4R4ZtWSFOOfMBMX9Iz7qZH7hfXQM/2QqxMqHGUspXt5v0BoJ6BLZ +2oMTs7cwhwGJeSMV8yIxBeqvmFxIlb88BVdeHcFYJqCs+cJxewlrGcfFYGv5Bvl Zg== -----END CERTIFICATE-----Generated at Sun Nov 15 00:15:01 2026 by rpki-client