$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft File: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json) Hash identifier: 21MvwyIGZ7Ub6kRSbrUKhStXUym0GomFsgiqWcUPeuc= Subject key identifier: 23:F5:01:63:69:58:63:7B:A7:4C:99:99:07:5D:36:99:4D:C5:B4:A8 Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Certificate serial: 601A19E68C19F3F4401F3303940523E3FE3BFE40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft Manifest number: 01F1 Signing time: Wed 25 Mar 2026 17:16:13 +0000 Manifest this update: Wed 25 Mar 2026 17:11:13 +0000 Manifest next update: Thu 26 Mar 2026 20:09:13 +0000 Files and hashes: 1: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: ABkHDQKjEeANharZO1hp0RDKdEsWdRf0F4prEwfZnFs=) 2: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: vlI3tYFCLzWNGXLpIFZR5AHPwN6r5z5t+7vGqUPF4to=) 3: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: ys4GcQr92xf16wQYlCYeGPMDsfyEnGKsrz3bvGtNWC8=) 4: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: b5xBss8x50/mTCwdi3YpTgkBRxgxQIEDRJCrw4DZBZw=) 5: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: NZmbB1AD2okfoNYoNRF6VSo9hkwhlpFlsxSprSq+6Jk=) 6: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: unIb/pLoJEr1pBLYhSY4VQ/RprOtasUPRROCGuOA9r4=) 7: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: 0SJdoBX9MXxSMMQgttZICBjw4d5X11WUV341Qb0f1vQ=) 8: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: LZdhd8babbehfkgcaQ2p0QEt4TultBt5ttf3MMRXRbI=) 9: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: AFVeOnsvdfn5zr4jds6KNtr7n93z5bGnJNsS8Ufaz0U=) 10: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: HzAN9ywzH3R4tgGHlz5ec2Bib9+nQQlSPhjXFH+uvKQ=) 11: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: hJUy+WAsteHuyZTTylubys83kZZc4LE0LX6QYeU4v/U=) 12: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: DZU46gedNFYz2v7yvGIXeVWs+yworgKzdoKm6wBF9RY=) 13: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: 7RbGKTX0T75GWL+U9cYx0V2iGn8DIPgdGtE6PSL/e9k=) 14: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: wDL3d4A1d+S+hyAjhYBLt0XksiIY4fLz7lOilgNj2Q4=) 15: 3139342e3132342e3233342e302f32342d3234203d3e20323031393037.roa (hash: P1rNrNq0Lsy4Pv36ykUIleWOvoAEcFUYAHvT3IiKS84=) 16: 3139342e3132342e3233342e302f32342d3234203d3e203136353039.roa (hash: yz5dw8t6yWoO2T3DnzEAtHSSXtxqaxMtoTJQ4OPxYFQ=) 17: 326130663a336363333a343030303a3a2f34342d3434203d3e20323032333036.roa (hash: fxbR5GcPyoWqODdA3f1yyd4v8P4uCsBii+08ii9bg1w=) 18: 3139342e3132342e3233342e302f32342d3234203d3e203134363138.roa (hash: jmldibQztUu/uE9gn0LxmihLjuBeh91SIaguqVgH56w=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:1a:19:e6:8c:19:f3:f4:40:1f:33:03:94:05:23:e3:fe:3b:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Validity Not Before: Mar 25 17:11:13 2026 GMT Not After : Mar 26 20:09:13 2026 GMT Subject: CN=23F501636958637BA74C9999075D36994DC5B4A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e7:49:9b:5d:07:e7:5c:78:65:60:ad:cf:80: 29:f3:55:a9:2b:2e:13:88:87:dc:e1:ee:db:6e:20: 2e:b2:ad:f1:07:b3:90:a8:5e:dc:6a:39:89:da:28: ba:8b:d5:25:7f:70:71:6a:ba:8e:a4:f1:6c:52:e9: c2:d2:09:d8:d4:be:c3:f5:50:91:01:29:0a:8f:2d: 6b:30:b6:23:d0:6e:45:0e:80:35:33:6f:a3:a6:74: d8:87:58:85:44:4f:cd:57:ca:f5:d6:31:53:6d:73: e8:bf:a9:b6:5d:89:85:86:4e:06:ec:a0:6b:4f:69: a9:f0:8e:ed:d9:20:00:79:ec:aa:b1:47:7b:89:3c: 98:4c:93:f2:97:ba:98:b0:4a:04:b9:8d:d7:6c:9d: b2:a3:11:0f:1d:2e:6a:25:c2:c0:7a:29:aa:ac:1c: 3e:60:24:85:d0:bd:c4:c5:46:27:e0:e7:c9:f2:e0: a4:7f:1c:86:50:b2:7e:52:a7:4d:7b:df:49:3b:b1: ea:b2:bc:fd:04:e2:8a:42:44:bd:a5:1b:a3:a2:a2: b9:6c:f8:ab:48:c3:1d:da:87:da:5e:5c:18:3f:26: ce:a0:61:4d:0a:14:ed:17:c6:73:1e:bd:da:2e:b9: 46:08:2d:2a:87:75:e4:e4:e9:48:d9:08:e6:fd:31: 46:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F5:01:63:69:58:63:7B:A7:4C:99:99:07:5D:36:99:4D:C5:B4:A8 X509v3 Authority Key Identifier: keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:6a:54:49:00:75:9e:e5:5d:56:f3:14:be:1c:eb:d0:7b:2b: 58:ad:d9:c7:6d:93:aa:38:75:58:36:9a:bd:26:d9:36:76:11: f5:af:3d:a0:91:85:df:cc:1e:de:69:69:11:69:65:18:2d:e5: 13:d7:5c:44:89:81:eb:04:a6:26:3a:7e:84:13:db:4a:d2:10: 99:02:12:2a:bc:15:16:ee:de:96:97:6f:7c:ff:05:d0:ea:a9: 2b:ee:04:dd:af:52:42:0a:ff:78:f4:38:7d:30:d6:74:2c:ca: 8f:14:fc:13:35:54:37:38:04:45:65:68:96:02:2d:5e:e6:21: ac:08:09:74:b8:34:d8:9b:41:34:b4:aa:b8:ef:18:5d:bc:7f: d4:02:87:98:92:80:8f:9f:c8:74:fa:55:43:f4:85:c7:a0:2b: 89:f1:de:d5:3a:44:ee:39:07:3f:0d:eb:05:3c:49:1d:12:ec: 44:4a:ce:b5:d8:03:a1:c7:e8:b3:88:8c:01:4b:71:59:93:20: 3f:a9:03:47:70:79:40:07:a9:0b:39:f9:26:96:1b:87:3d:71: 9a:dd:98:f3:a3:38:c2:ee:cd:fe:c1:f7:da:01:3c:63:93:2f: 8d:de:5b:e3:31:f6:df:0b:d4:90:d0:8b:c0:0b:bd:58:ee:dc: fb:5b:4c:55 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYBoZ5owZ8/RAHzMDlAUj4/47/kAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2IyOWE3NzY2OWRmNWE3YTVjYjUwNmQ4MzllZThhYTQz MzdjY2FhYzAeFw0yNjAzMjUxNzExMTNaFw0yNjAzMjYyMDA5MTNaMDMxMTAvBgNV BAMTKDIzRjUwMTYzNjk1ODYzN0JBNzRDOTk5OTA3NUQzNjk5NERDNUI0QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC350mbXQfnXHhlYK3PgCnzVakr LhOIh9zh7ttuIC6yrfEHs5CoXtxqOYnaKLqL1SV/cHFquo6k8WxS6cLSCdjUvsP1 UJEBKQqPLWswtiPQbkUOgDUzb6OmdNiHWIVET81XyvXWMVNtc+i/qbZdiYWGTgbs oGtPaanwju3ZIAB57KqxR3uJPJhMk/KXupiwSgS5jddsnbKjEQ8dLmolwsB6Kaqs HD5gJIXQvcTFRifg58ny4KR/HIZQsn5Sp01730k7seqyvP0E4opCRL2lG6Oiorls +KtIwx3ah9peXBg/Js6gYU0KFO0XxnMevdouuUYILSqHdeTk6UjZCOb9MUZZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUI/UBY2lYY3unTJmZB102mU3FtKgwHwYDVR0j BBgwFoAUyymndmnfWnpctQbYOe6KpDN8yqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgtN2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhm MDZlLzAvQ0IyOUE3NzY2OURGNUE3QTVDQjUwNkQ4MzlFRThBQTQzMzdDQ0FBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3l5bW5kbW5mV25wY3RRYllPZTZLcERO OHlxdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iYjI1ZDA2OC03 ZjljLTRiMGUtYTY5NS0xNzc5YjdkOGYwNmUvMC9DQjI5QTc3NjY5REY1QTdBNUNC NTA2RDgzOUVFOEFBNDMzN0NDQUFDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIWpUSQB1nuVdVvMUvhzr 0HsrWK3Zx22Tqjh1WDaavSbZNnYR9a89oJGF38we3mlpEWllGC3lE9dcRImB6wSm Jjp+hBPbStIQmQISKrwVFu7elpdvfP8F0OqpK+4E3a9SQgr/ePQ4fTDWdCzKjxT8 EzVUNzgERWVolgItXuYhrAgJdLg02JtBNLSquO8YXbx/1AKHmJKAj5/IdPpVQ/SF x6ArifHe1TpE7jkHPw3rBTxJHRLsRErOtdgDocfos4iMAUtxWZMgP6kDR3B5QAep Czn5JpYbhz1xmt2Y86M4wu7N/sH32gE8Y5Mvjd5b4zH23wvUkNCLwAu9WO7c+1tM VQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:30:10 2026 by rpki-client