$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft File: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json) Hash identifier: PhOrCEP6BS2df6MeY79msIEOAXy6oQA45yFEZftgOU4= Subject key identifier: 0A:61:33:05:E7:F9:17:15:E7:5A:1E:6C:B2:19:4F:46:3B:3F:23:83 Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Certificate serial: 2D5029F3DF69607BDF7731B4E2E24B06C521DA06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft Manifest number: 0292 Signing time: Thu 23 Jul 2026 13:48:28 +0000 Manifest this update: Thu 23 Jul 2026 13:43:28 +0000 Manifest next update: Fri 24 Jul 2026 16:47:28 +0000 Files and hashes: 1: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: hJUy+WAsteHuyZTTylubys83kZZc4LE0LX6QYeU4v/U=) 2: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: ys4GcQr92xf16wQYlCYeGPMDsfyEnGKsrz3bvGtNWC8=) 3: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: vlI3tYFCLzWNGXLpIFZR5AHPwN6r5z5t+7vGqUPF4to=) 4: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: wDL3d4A1d+S+hyAjhYBLt0XksiIY4fLz7lOilgNj2Q4=) 5: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: b5xBss8x50/mTCwdi3YpTgkBRxgxQIEDRJCrw4DZBZw=) 6: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: HzAN9ywzH3R4tgGHlz5ec2Bib9+nQQlSPhjXFH+uvKQ=) 7: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: NZmbB1AD2okfoNYoNRF6VSo9hkwhlpFlsxSprSq+6Jk=) 8: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: LZdhd8babbehfkgcaQ2p0QEt4TultBt5ttf3MMRXRbI=) 9: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: DZU46gedNFYz2v7yvGIXeVWs+yworgKzdoKm6wBF9RY=) 10: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: AFVeOnsvdfn5zr4jds6KNtr7n93z5bGnJNsS8Ufaz0U=) 11: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: ABkHDQKjEeANharZO1hp0RDKdEsWdRf0F4prEwfZnFs=) 12: 326130663a336363333a343030303a3a2f34342d3434203d3e20323032333036.roa (hash: fxbR5GcPyoWqODdA3f1yyd4v8P4uCsBii+08ii9bg1w=) 13: 3139342e3132342e3233342e302f32342d3234203d3e203632303638.roa (hash: VKu+iyAXdNGspkh1hqCECAzpccaJ3+JyjcRyNO0/DAw=) 14: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: unIb/pLoJEr1pBLYhSY4VQ/RprOtasUPRROCGuOA9r4=) 15: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: 7RbGKTX0T75GWL+U9cYx0V2iGn8DIPgdGtE6PSL/e9k=) 16: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: M1APUuGNzOwsSvpXaFaFzvUjXfHHnEE4qPtUXIddELc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:47:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:50:29:f3:df:69:60:7b:df:77:31:b4:e2:e2:4b:06:c5:21:da:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Validity Not Before: Jul 23 13:43:28 2026 GMT Not After : Jul 24 16:47:28 2026 GMT Subject: CN=0A613305E7F91715E75A1E6CB2194F463B3F2383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b0:2a:29:e2:ca:ba:6b:14:dc:41:58:b1:f2: a5:0a:81:fe:18:54:03:fe:a5:69:19:16:c0:58:2c: ff:04:89:c3:6d:c6:ec:a5:0c:de:9b:75:e9:2a:4f: 30:fe:16:5b:97:dc:42:bd:26:19:4c:fb:66:97:29: 55:9f:a8:e8:e8:b2:0c:fd:c6:06:29:5a:be:0f:31: 5b:53:97:67:84:54:86:2c:75:5c:14:cd:87:c2:4d: 17:f1:5c:d8:25:14:25:f7:af:99:39:06:2c:22:72: 31:99:89:5e:76:f8:d4:19:b4:95:34:3a:c6:17:a4: 85:41:72:80:90:94:c1:78:1b:97:b1:21:b2:a5:42: f0:2f:92:4e:5c:0f:49:4d:3a:80:69:27:e5:c9:16: 9f:e6:aa:cf:44:c6:0f:fd:f8:9d:45:22:db:3e:c5: 72:51:20:e0:6f:ce:4c:94:d9:16:03:d8:55:1e:1d: dc:6a:8c:86:d4:47:e6:bd:11:6d:9e:c8:c1:ae:21: 8f:c6:3f:91:5b:84:e1:68:c4:a9:6f:ba:4c:bc:09: ed:12:7e:7e:f7:dc:d4:88:53:51:70:aa:2b:3f:e2: d0:91:26:67:b5:79:07:58:3f:79:1f:25:2f:8c:79: 7a:10:16:b9:fc:5b:a9:55:23:90:08:89:22:c0:a0: 83:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:61:33:05:E7:F9:17:15:E7:5A:1E:6C:B2:19:4F:46:3B:3F:23:83 X509v3 Authority Key Identifier: keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:0c:bb:5d:09:5b:c6:03:4c:64:a4:34:0e:81:79:47:4c:bc: 76:76:7b:14:88:1c:e7:56:7f:d3:7f:48:c5:df:86:6f:45:e2: d3:8d:ad:fa:29:48:70:aa:67:60:e3:7b:d4:d5:1a:14:04:22: f2:39:4b:ab:99:55:a8:9d:7e:0a:c7:c8:4c:a2:73:aa:4f:ef: ac:31:60:b4:a7:75:c8:51:51:98:2c:42:51:e6:be:29:36:38: 81:d7:ca:dd:4e:33:18:4b:43:ae:4e:6f:bb:5e:05:25:24:52: 9b:e4:ad:39:fe:d4:cb:db:48:c2:7d:7d:e1:13:42:a0:0c:db: df:a5:fc:58:8a:18:3c:ae:80:e0:27:f7:48:9c:56:2b:0c:09: ad:53:4b:a8:b5:21:a7:96:8c:fd:cc:79:9b:bf:db:d7:a5:36: b6:98:56:fd:03:87:8b:af:e0:74:f3:6c:87:a6:1d:fc:6c:88: 0b:83:d8:2d:69:f1:03:1e:67:9d:44:8d:15:76:da:8f:a3:e7: 85:26:44:84:ce:c8:26:68:78:16:45:f0:b3:1e:19:d0:7a:69: 8f:4e:a2:b1:04:c8:de:b6:26:f6:e1:18:e8:2e:47:0f:af:29: 00:0b:79:cd:35:8d:3e:09:ab:b4:1f:13:99:42:e1:03:c5:3e: 7c:bc:1b:ec -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULVAp899pYHvfdzG04uJLBsUh2gYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2IyOWE3NzY2OWRmNWE3YTVjYjUwNmQ4MzllZThhYTQz MzdjY2FhYzAeFw0yNjA3MjMxMzQzMjhaFw0yNjA3MjQxNjQ3MjhaMDMxMTAvBgNV BAMTKDBBNjEzMzA1RTdGOTE3MTVFNzVBMUU2Q0IyMTk0RjQ2M0IzRjIzODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnsCop4sq6axTcQVix8qUKgf4Y VAP+pWkZFsBYLP8EicNtxuylDN6bdekqTzD+FluX3EK9JhlM+2aXKVWfqOjosgz9 xgYpWr4PMVtTl2eEVIYsdVwUzYfCTRfxXNglFCX3r5k5BiwicjGZiV52+NQZtJU0 OsYXpIVBcoCQlMF4G5exIbKlQvAvkk5cD0lNOoBpJ+XJFp/mqs9Exg/9+J1FIts+ xXJRIOBvzkyU2RYD2FUeHdxqjIbUR+a9EW2eyMGuIY/GP5FbhOFoxKlvuky8Ce0S fn733NSIU1Fwqis/4tCRJme1eQdYP3kfJS+MeXoQFrn8W6lVI5AIiSLAoINJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUCmEzBef5FxXnWh5sshlPRjs/I4MwHwYDVR0j BBgwFoAUyymndmnfWnpctQbYOe6KpDN8yqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgtN2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhm MDZlLzAvQ0IyOUE3NzY2OURGNUE3QTVDQjUwNkQ4MzlFRThBQTQzMzdDQ0FBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3l5bW5kbW5mV25wY3RRYllPZTZLcERO OHlxdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iYjI1ZDA2OC03 ZjljLTRiMGUtYTY5NS0xNzc5YjdkOGYwNmUvMC9DQjI5QTc3NjY5REY1QTdBNUNC NTA2RDgzOUVFOEFBNDMzN0NDQUFDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEAy7XQlbxgNMZKQ0DoF5 R0y8dnZ7FIgc51Z/039Ixd+Gb0Xi042t+ilIcKpnYON71NUaFAQi8jlLq5lVqJ1+ CsfITKJzqk/vrDFgtKd1yFFRmCxCUea+KTY4gdfK3U4zGEtDrk5vu14FJSRSm+St Of7Uy9tIwn194RNCoAzb36X8WIoYPK6A4Cf3SJxWKwwJrVNLqLUhp5aM/cx5m7/b 16U2tphW/QOHi6/gdPNsh6Yd/GyIC4PYLWnxAx5nnUSNFXbaj6PnhSZEhM7IJmh4 FkXwsx4Z0Hppj06isQTI3rYm9uEY6C5HD68pAAt5zTWNPgmrtB8TmULhA8U+fLwb 7A== -----END CERTIFICATE-----Generated at Fri Jul 24 06:26:15 2026 by rpki-client