$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft File: 0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft (raw, json) Hash identifier: Lb0aZWpJmNFyHKFIz+8f5sXZ4qSb/YlPY5/VqbTGTXY= Subject key identifier: 09:40:3F:9C:EB:D0:FD:1C:EE:D9:EC:CF:90:5F:AD:FA:15:19:94:AA Authority key identifier: 0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA Certificate issuer: /CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea Certificate serial: 701641CCE1C94285A61BF66E30B0C6AE04A2836A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft Manifest number: 60 Signing time: Thu 23 Jul 2026 09:09:16 +0000 Manifest this update: Thu 23 Jul 2026 09:04:16 +0000 Manifest next update: Fri 24 Jul 2026 10:53:16 +0000 Files and hashes: 1: 326130613a643638313a3a2f33322d3438203d3e20313339373931.roa (hash: LD70u5QlVqEB9vvyRbLQY7rIc7jKzVNRzxV1VLwEmOE=) 2: 326130613a643638373a666630313a3a2f34382d3438203d3e20323139353435.roa (hash: rL8ASD59Ti8nB9XD3UXOLC8XxvqgDesYATRPUcKVSuY=) 3: 326130613a643638333a3a2f33322d3438203d3e2030.roa (hash: 1AoAuE4mRiqziiHkgepF+g+OjuGOS1bv+xQ+rN/5kXU=) 4: 326130613a643638373a666630333a3a2f34382d3438203d3e20323139323038.roa (hash: S/8ZK1ErCZvTRtQCq1QRmXQBY3n8crW0uhTdSwe8qG0=) 5: 326130613a643638323a643030303a3a2f33362d3438203d3e20323139323038.roa (hash: v/BWIbyLFdNKWIJBTAMGuH9YaifhTiluWVcVxi+Fhlk=) 6: 326130613a643638373a653030303a3a2f34332d3438203d3e20323139343333.roa (hash: tW+nGNlDGvPdAUmeC4K3mnasXAgQn+DooLTJQYmn1dE=) 7: 326130613a643638373a663030303a3a2f34342d3438203d3e20313432343333.roa (hash: AMQEmk2Gamce4CGjOhcsatfMgR2ITuuPxLRE5OPFALo=) 8: 326130613a643638373a663130303a3a2f34342d3438203d3e20313937323133.roa (hash: bHHSi5wagGdCluZPsKdv0VQ8BFQU3w+P+YxMSNDafL4=) 9: 326130613a643638373a666630303a3a2f34382d3438203d3e20313937323133.roa (hash: SkwT1h/rOaQClLo9nHFAVUlnnxxHoz85B/heCrM8trg=) 10: 80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer (hash: TYsfkHtNOfK76uqy14SYaCemKP3HftisBSZd+5DPrVE=) 11: 0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl (hash: 2kETat6BreXsZOilVrsSzXNi0skR/GEeA5rjpXdAb9E=) 12: 326130613a643638303a3a2f33322d3438203d3e20313339333137.roa (hash: 9uxdhCWJM/sIXCpTZUmH78FRG6qiNbULLGusY6bMbzg=) 13: 326130613a643638373a666630323a3a2f34382d3438203d3e20323139323037.roa (hash: 5JWWZDi+y2DIDiFR71Ufp8CF8RxIHJzTGTA47i2VuYE=) 14: 326130613a643638323a653030303a3a2f33362d3438203d3e20323139323037.roa (hash: /hbUb7P8tvehfjH0Hs94vC86vj3k0KrkZvYJd6dLPnA=) 15: 326130613a643638323a663030303a3a2f33362d3438203d3e20323139323833.roa (hash: 8/Dy4zPyPwRTfYS2Cii0dXxY7IAyPHqGc67WcpaHY8g=) 16: 326130613a643638373a653130303a3a2f34332d3438203d3e20323139343333.roa (hash: g1wT/6cmNUPL0/+gCGthFM4aX0wibSOImG3Rr13sSvQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 10:53:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:16:41:cc:e1:c9:42:85:a6:1b:f6:6e:30:b0:c6:ae:04:a2:83:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea Validity Not Before: Jul 23 09:04:16 2026 GMT Not After : Jul 24 10:53:16 2026 GMT Subject: CN=09403F9CEBD0FD1CEED9ECCF905FADFA151994AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:95:05:57:8a:96:bc:39:d2:d9:6a:5d:d6:1f: 6d:66:04:b6:f7:ec:61:0c:75:eb:6b:3e:7d:a2:a6: 42:87:4f:31:fb:3e:d8:69:c6:66:b9:d2:34:dd:73: 3e:de:00:dd:f2:e9:f4:cf:d9:c6:55:20:9c:ee:ff: 21:d3:78:03:3c:e3:3d:ea:05:b2:16:31:91:fd:85: a7:20:6d:1e:2b:30:4b:8f:77:ab:d7:a5:1e:76:2b: 38:42:f2:24:6e:bd:00:69:0b:01:c9:11:73:d6:ea: ea:2e:fc:a8:b1:b6:05:fa:4c:79:1b:7e:e6:cb:f2: 52:c7:f4:b1:7b:bb:83:2f:26:55:8f:f9:02:99:57: a0:df:35:70:5d:ab:84:e9:77:84:ac:5b:81:8d:17: 07:e0:89:9f:cf:06:e3:a2:de:1b:17:dd:9f:47:34: 09:1e:0e:b9:4c:90:f7:13:c2:92:71:b0:ea:d2:f3: ec:35:f9:92:04:c7:2a:ba:30:57:31:d5:28:e5:5b: e6:53:36:ef:bd:45:13:a3:6f:cb:1b:74:37:2b:5d: 43:d2:10:a2:51:e1:d9:66:ec:55:3c:a7:f5:80:6d: 95:01:6c:64:8d:02:89:8f:f1:3a:61:ee:4c:f6:6c: aa:79:cb:60:c1:3e:10:88:60:4d:b2:5d:47:5c:6f: fc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:40:3F:9C:EB:D0:FD:1C:EE:D9:EC:CF:90:5F:AD:FA:15:19:94:AA X509v3 Authority Key Identifier: keyid:0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:48:20:4d:b8:fa:7f:8e:e9:07:f3:a2:ec:c4:55:0a:f7:62: a6:49:36:0a:30:21:c2:97:5f:ce:21:e0:2a:11:d1:cd:bb:db: 5e:66:32:4e:fd:ba:05:dd:c9:a0:b8:c4:c4:dd:21:3b:b9:6a: 93:55:b9:38:5f:19:b3:21:ad:50:ff:e9:a4:86:10:0d:2b:36: e4:73:aa:db:82:0b:ff:d3:3a:0e:f0:b9:fe:00:40:49:8d:41: 51:60:2f:6d:e6:93:93:73:52:4f:a7:9b:0a:05:b2:a5:15:9b: ae:b8:48:12:01:74:2e:d7:bb:f0:62:fa:e5:8e:83:8f:f5:f7: 53:9c:ee:53:a2:9a:07:08:cf:40:16:08:18:74:f1:1a:43:fc: 3c:b2:60:c3:c3:02:0f:98:7f:f9:e9:3b:2e:ae:da:56:ed:9b: 94:6d:9a:b0:94:e6:3c:2e:32:5b:4d:f5:03:0c:6f:05:0f:22: ff:e8:32:4c:f1:ab:91:4d:5d:79:f3:ac:6f:87:57:10:d6:1a: f9:47:50:d2:90:f3:17:c5:56:ed:7e:25:8c:66:fb:c8:55:3c: 4e:59:d0:40:86:e7:36:1f:45:6a:ba:2b:69:c3:b7:ca:d2:e3: ad:ec:4e:f4:a3:c8:0d:fa:5f:0d:11:48:9a:60:1f:04:2f:23: 34:60:1e:53 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUcBZBzOHJQoWmG/ZuMLDGrgSig2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGU3MGFlMGFjZDBiZTgzZDJkNDU4Y2EyMDdiMWQ0ZmZh M2MzZTRlYTAeFw0yNjA3MjMwOTA0MTZaFw0yNjA3MjQxMDUzMTZaMDMxMTAvBgNV BAMTKDA5NDAzRjlDRUJEMEZEMUNFRUQ5RUNDRjkwNUZBREZBMTUxOTk0QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrlQVXipa8OdLZal3WH21mBLb3 7GEMdetrPn2ipkKHTzH7Pthpxma50jTdcz7eAN3y6fTP2cZVIJzu/yHTeAM84z3q BbIWMZH9hacgbR4rMEuPd6vXpR52KzhC8iRuvQBpCwHJEXPW6uou/KixtgX6THkb fubL8lLH9LF7u4MvJlWP+QKZV6DfNXBdq4Tpd4SsW4GNFwfgiZ/PBuOi3hsX3Z9H NAkeDrlMkPcTwpJxsOrS8+w1+ZIExyq6MFcx1SjlW+ZTNu+9RROjb8sbdDcrXUPS EKJR4dlm7FU8p/WAbZUBbGSNAomP8Tph7kz2bKp5y2DBPhCIYE2yXUdcb/zhAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUCUA/nOvQ/Rzu2ezPkF+t+hUZlKowHwYDVR0j BBgwFoAUDnCuCs0L6D0tRYyiB7HU/6PD5OowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjNmMmFhYWUtMjNjZi00YTM3LTk0MDMtNzQzYjE1ZWMy YThlLzAvMEU3MEFFMEFDRDBCRTgzRDJENDU4Q0EyMDdCMUQ0RkZBM0MzRTRFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RuQ3VDczBMNkQwdFJZeWlCN0hVXzZQ RDVPby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMC8wRTcwQUUwQUNEMEJFODNEMkQ0 NThDQTIwN0IxRDRGRkEzQzNFNEVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACUggTbj6f47pB/Oi7MRV Cvdipkk2CjAhwpdfziHgKhHRzbvbXmYyTv26Bd3JoLjExN0hO7lqk1W5OF8ZsyGt UP/ppIYQDSs25HOq24IL/9M6DvC5/gBASY1BUWAvbeaTk3NST6ebCgWypRWbrrhI EgF0Lte78GL65Y6Dj/X3U5zuU6KaBwjPQBYIGHTxGkP8PLJgw8MCD5h/+ek7Lq7a Vu2blG2asJTmPC4yW031AwxvBQ8i/+gyTPGrkU1defOsb4dXENYa+UdQ0pDzF8VW 7X4ljGb7yFU8TlnQQIbnNh9FaroracO3ytLjrexO9KPIDfpfDRFImmAfBC8jNGAe Uw== -----END CERTIFICATE-----Generated at Thu Jul 23 20:08:43 2026 by rpki-client