$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft File: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json) Hash identifier: OkLVDIFrAVGYNb2BfFLQtF4WjeNcrh3x7o0tMZcnVGs= Subject key identifier: 16:F9:53:E7:F8:C8:4E:4D:FF:00:64:46:E5:E5:C8:B2:B0:6B:1D:57 Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Certificate serial: 4DD0E285FB7F776E405D6D7A0834C1E9CD2648E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft Manifest number: 02E6 Signing time: Fri 25 Sep 2026 01:26:20 +0000 Manifest this update: Fri 25 Sep 2026 01:21:20 +0000 Manifest next update: Sat 26 Sep 2026 02:58:20 +0000 Files and hashes: 1: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: G2MWz5vn6kt+wrwv1RTNDYfpVT6EUPN0FWd/twV2j5Y=) 2: 3139342e3132342e3233342e302f32342d3234203d3e203632303638.roa (hash: VKu+iyAXdNGspkh1hqCECAzpccaJ3+JyjcRyNO0/DAw=) 3: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: wDL3d4A1d+S+hyAjhYBLt0XksiIY4fLz7lOilgNj2Q4=) 4: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: DZU46gedNFYz2v7yvGIXeVWs+yworgKzdoKm6wBF9RY=) 5: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: b5xBss8x50/mTCwdi3YpTgkBRxgxQIEDRJCrw4DZBZw=) 6: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: LZdhd8babbehfkgcaQ2p0QEt4TultBt5ttf3MMRXRbI=) 7: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: 7RbGKTX0T75GWL+U9cYx0V2iGn8DIPgdGtE6PSL/e9k=) 8: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: NZmbB1AD2okfoNYoNRF6VSo9hkwhlpFlsxSprSq+6Jk=) 9: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: AFVeOnsvdfn5zr4jds6KNtr7n93z5bGnJNsS8Ufaz0U=) 10: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: unIb/pLoJEr1pBLYhSY4VQ/RprOtasUPRROCGuOA9r4=) 11: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: ys4GcQr92xf16wQYlCYeGPMDsfyEnGKsrz3bvGtNWC8=) 12: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: hJUy+WAsteHuyZTTylubys83kZZc4LE0LX6QYeU4v/U=) 13: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: vlI3tYFCLzWNGXLpIFZR5AHPwN6r5z5t+7vGqUPF4to=) 14: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: ABkHDQKjEeANharZO1hp0RDKdEsWdRf0F4prEwfZnFs=) 15: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: HzAN9ywzH3R4tgGHlz5ec2Bib9+nQQlSPhjXFH+uvKQ=) 16: 326130663a336363333a343030303a3a2f34342d3434203d3e20323032333036.roa (hash: fxbR5GcPyoWqODdA3f1yyd4v8P4uCsBii+08ii9bg1w=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 21:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:d0:e2:85:fb:7f:77:6e:40:5d:6d:7a:08:34:c1:e9:cd:26:48:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Validity Not Before: Sep 25 01:21:20 2026 GMT Not After : Sep 26 02:58:20 2026 GMT Subject: CN=16F953E7F8C84E4DFF006446E5E5C8B2B06B1D57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:77:6f:3d:c8:b7:60:ce:ae:fd:61:d2:d2:cb: 10:37:8e:d7:cc:e4:50:1b:d9:f0:71:ab:0e:03:f6: 6f:25:49:a7:85:02:63:3b:3f:17:02:46:65:6f:e3: 0e:4a:80:e3:01:46:e4:3b:0c:87:75:9a:96:51:77: 4d:5d:33:92:82:08:16:b0:25:53:0c:a0:52:06:11: 44:d8:8f:d0:6f:6c:5c:50:f6:b8:39:74:62:aa:7e: f2:2d:91:ec:40:ad:d5:0e:d9:bc:16:95:a3:63:24: 5d:e9:a4:2f:31:b5:53:78:9a:08:13:57:a6:ac:a1: d0:02:70:c1:d2:a4:b0:7d:4f:e6:e7:3f:42:11:a2: 60:45:c8:a5:3d:14:da:9f:b7:76:3f:78:46:f9:1a: ae:74:df:b9:2d:30:26:a5:9c:0a:94:a4:f2:2d:00: e9:78:ef:76:52:d5:bc:d2:67:2a:cc:2c:41:45:7a: 31:d3:2b:8b:74:47:3d:95:30:06:1f:4d:a1:5e:d2: 2c:21:b9:5d:96:a1:77:7c:a0:4c:85:62:97:40:17: 07:6e:15:96:61:51:80:fa:73:c4:9f:60:f3:03:83: 75:e8:5f:12:2b:29:33:af:04:99:38:95:4d:4c:5b: 3f:41:e3:31:53:4e:e1:40:b8:f2:0b:16:df:ea:24: f7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F9:53:E7:F8:C8:4E:4D:FF:00:64:46:E5:E5:C8:B2:B0:6B:1D:57 X509v3 Authority Key Identifier: keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:03:12:21:9c:0e:70:25:9a:c4:ed:98:20:b9:3f:40:78:d9: de:77:75:ea:ed:fa:51:25:50:41:87:52:f1:71:8c:dd:c7:96: c5:f4:5e:ab:78:d6:e5:ed:4b:84:3a:90:cd:de:80:26:49:15: ee:fc:b1:d3:56:64:66:ec:c4:a5:55:75:6e:25:db:e2:33:89: a3:61:af:c3:d5:ac:74:3a:68:20:87:3e:63:46:de:88:a3:3e: de:db:a4:6f:86:6c:c9:21:f9:d1:9e:da:93:da:36:3b:91:2d: 8e:c4:14:f8:e2:a1:db:22:b4:c5:b6:42:a0:21:aa:6e:92:12: fa:88:12:7e:8d:bc:74:25:70:3e:4d:d0:5c:f3:1f:12:e4:d9: 69:6e:1f:14:7d:a4:79:ec:f4:0b:e5:a6:30:db:4a:53:fb:1c: f1:07:0a:56:3c:b7:15:46:80:d1:52:45:29:95:36:81:8e:a3: 86:43:36:91:a3:47:da:df:f8:b1:20:a8:d2:28:48:ae:0d:92: 09:ae:0d:1a:15:1f:54:7d:3a:4d:ba:c7:7b:79:d6:df:e0:fa: fb:88:d5:32:44:c0:ca:f7:1a:71:d4:b6:cc:1e:2c:7f:17:bb: 37:3e:54:15:52:43:83:4d:a5:f0:c9:f1:ad:89:03:53:f0:cc: 11:37:ca:18 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTdDihft/d25AXW16CDTB6c0mSOEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2IyOWE3NzY2OWRmNWE3YTVjYjUwNmQ4MzllZThhYTQz MzdjY2FhYzAeFw0yNjA5MjUwMTIxMjBaFw0yNjA5MjYwMjU4MjBaMDMxMTAvBgNV BAMTKDE2Rjk1M0U3RjhDODRFNERGRjAwNjQ0NkU1RTVDOEIyQjA2QjFENTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNd289yLdgzq79YdLSyxA3jtfM 5FAb2fBxqw4D9m8lSaeFAmM7PxcCRmVv4w5KgOMBRuQ7DId1mpZRd01dM5KCCBaw JVMMoFIGEUTYj9BvbFxQ9rg5dGKqfvItkexArdUO2bwWlaNjJF3ppC8xtVN4mggT V6asodACcMHSpLB9T+bnP0IRomBFyKU9FNqft3Y/eEb5Gq5037ktMCalnAqUpPIt AOl473ZS1bzSZyrMLEFFejHTK4t0Rz2VMAYfTaFe0iwhuV2WoXd8oEyFYpdAFwdu FZZhUYD6c8SfYPMDg3XoXxIrKTOvBJk4lU1MWz9B4zFTTuFAuPILFt/qJPdVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUFvlT5/jITk3/AGRG5eXIsrBrHVcwHwYDVR0j BBgwFoAUyymndmnfWnpctQbYOe6KpDN8yqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgtN2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhm MDZlLzAvQ0IyOUE3NzY2OURGNUE3QTVDQjUwNkQ4MzlFRThBQTQzMzdDQ0FBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3l5bW5kbW5mV25wY3RRYllPZTZLcERO OHlxdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iYjI1ZDA2OC03 ZjljLTRiMGUtYTY5NS0xNzc5YjdkOGYwNmUvMC9DQjI5QTc3NjY5REY1QTdBNUNC NTA2RDgzOUVFOEFBNDMzN0NDQUFDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARwMSIZwOcCWaxO2YILk/ QHjZ3nd16u36USVQQYdS8XGM3ceWxfReq3jW5e1LhDqQzd6AJkkV7vyx01ZkZuzE pVV1biXb4jOJo2Gvw9WsdDpoIIc+Y0beiKM+3tukb4ZsySH50Z7ak9o2O5EtjsQU +OKh2yK0xbZCoCGqbpIS+ogSfo28dCVwPk3QXPMfEuTZaW4fFH2keez0C+WmMNtK U/sc8QcKVjy3FUaA0VJFKZU2gY6jhkM2kaNH2t/4sSCo0ihIrg2SCa4NGhUfVH06 TbrHe3nW3+D6+4jVMkTAyvcacdS2zB4sfxe7Nz5UFVJDg02l8MnxrYkDU/DMETfK GA== -----END CERTIFICATE-----Generated at Fri Sep 25 08:46:56 2026 by rpki-client