$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft File: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json) Hash identifier: sjAfSV2byRz/4Bw3kMqlkcppLmVTqP0iU53xk9REsvU= Subject key identifier: F5:DF:41:32:3E:7D:90:C4:A9:EA:60:66:A6:2E:D3:E5:71:16:29:83 Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Certificate serial: 2DCD4BE85CA5EF659487D7DD6C6933D9A061E3B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft Manifest number: 0232 Signing time: Tue 12 May 2026 21:00:07 +0000 Manifest this update: Tue 12 May 2026 20:55:07 +0000 Manifest next update: Wed 13 May 2026 22:42:07 +0000 Files and hashes: 1: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: vlI3tYFCLzWNGXLpIFZR5AHPwN6r5z5t+7vGqUPF4to=) 2: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: NZmbB1AD2okfoNYoNRF6VSo9hkwhlpFlsxSprSq+6Jk=) 3: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: HzAN9ywzH3R4tgGHlz5ec2Bib9+nQQlSPhjXFH+uvKQ=) 4: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: ABkHDQKjEeANharZO1hp0RDKdEsWdRf0F4prEwfZnFs=) 5: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: hJUy+WAsteHuyZTTylubys83kZZc4LE0LX6QYeU4v/U=) 6: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: b5xBss8x50/mTCwdi3YpTgkBRxgxQIEDRJCrw4DZBZw=) 7: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: 7RbGKTX0T75GWL+U9cYx0V2iGn8DIPgdGtE6PSL/e9k=) 8: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: ys4GcQr92xf16wQYlCYeGPMDsfyEnGKsrz3bvGtNWC8=) 9: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: AFVeOnsvdfn5zr4jds6KNtr7n93z5bGnJNsS8Ufaz0U=) 10: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: unIb/pLoJEr1pBLYhSY4VQ/RprOtasUPRROCGuOA9r4=) 11: 326130663a336363333a343030303a3a2f34342d3434203d3e20323032333036.roa (hash: fxbR5GcPyoWqODdA3f1yyd4v8P4uCsBii+08ii9bg1w=) 12: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: Krhg9T0Lg4JoagJlhznlePRiCK1Vjo6B27bPuxVnzck=) 13: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: LZdhd8babbehfkgcaQ2p0QEt4TultBt5ttf3MMRXRbI=) 14: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: DZU46gedNFYz2v7yvGIXeVWs+yworgKzdoKm6wBF9RY=) 15: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: wDL3d4A1d+S+hyAjhYBLt0XksiIY4fLz7lOilgNj2Q4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 22:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:cd:4b:e8:5c:a5:ef:65:94:87:d7:dd:6c:69:33:d9:a0:61:e3:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Validity Not Before: May 12 20:55:07 2026 GMT Not After : May 13 22:42:07 2026 GMT Subject: CN=F5DF41323E7D90C4A9EA6066A62ED3E571162983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:35:05:f3:f3:50:4f:94:74:6c:29:d9:f4:db: 4e:4e:3b:c0:b3:2e:12:8f:33:e5:68:c1:0d:5e:49: 56:34:17:5a:24:27:ec:47:f6:55:44:87:11:1b:a9: 22:b6:18:67:be:3a:e9:2c:e7:9e:03:63:7e:b5:b5: 1d:34:11:16:80:27:27:5d:1f:d4:e8:b4:4f:27:42: 15:d0:49:45:72:37:1e:d3:8b:ee:e5:41:0e:ef:26: bf:2e:83:17:e2:93:da:90:01:19:d9:05:3b:99:db: ac:07:b9:d6:6d:ce:02:1b:71:b4:61:89:5a:29:50: 5f:5e:00:99:61:f6:26:d9:b8:26:09:82:b4:b6:06: fe:90:aa:d9:80:e0:e2:86:30:5b:16:43:9e:b3:88: 12:32:e4:6e:91:ad:39:85:8a:5e:41:08:d9:46:3a: 15:33:3d:f1:4b:17:39:40:0e:80:d0:25:40:80:f5: a7:89:cc:25:bf:81:95:d2:ad:92:87:48:3a:ef:69: c8:24:79:a6:5a:ce:0e:9a:b9:88:1c:ce:ff:f0:7a: f9:c0:74:65:5c:ee:5d:c3:78:ad:9a:82:dc:30:13: d3:0a:33:ef:70:fe:04:10:2c:d5:45:46:fb:55:f2: a7:7d:03:83:fe:5f:cd:e3:32:e9:51:32:26:6d:84: fe:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:DF:41:32:3E:7D:90:C4:A9:EA:60:66:A6:2E:D3:E5:71:16:29:83 X509v3 Authority Key Identifier: keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:18:c6:ac:a9:22:65:b6:76:18:d6:a8:63:49:ab:c8:f9:50: 72:d2:85:d2:03:b8:d5:8f:8d:16:11:4b:39:32:72:54:74:56: 9b:d2:63:82:29:5c:f6:91:24:ea:19:cc:0b:31:c0:b3:2c:98: d2:ed:ee:52:05:61:58:4a:88:1a:02:cb:52:85:4f:68:ee:67: 29:07:89:b2:48:c8:4c:e5:71:d6:0d:fe:10:31:fc:c2:23:f7: 1a:3a:d1:f9:6c:26:de:cd:c3:2c:d1:33:46:2d:3a:79:4d:db: 0a:b5:30:3f:18:f1:a0:38:c2:09:71:18:c3:5c:a1:12:d7:09: 01:3f:f8:a1:14:c3:98:89:8b:e6:ef:d9:c6:d3:41:a1:19:72: 6f:f8:f5:b0:2c:76:77:bd:5b:5b:af:dd:3b:db:0f:f6:f3:92: b2:ec:9a:97:0f:ef:03:11:7c:66:f5:64:e7:1a:d6:2f:73:c5: 11:09:6e:a4:ae:48:77:73:82:3b:75:06:b0:c7:63:01:2d:71: f7:2c:29:25:b5:9f:de:4e:06:65:77:42:2b:06:96:e0:cd:e4: 1e:13:c1:35:75:0f:a3:d4:92:d9:df:cc:e3:9e:bd:a8:98:42: 9b:b7:15:d4:76:5c:d5:57:67:38:74:9b:c5:56:ff:48:f6:bf: 6a:5f:10:d7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULc1L6Fyl72WUh9fdbGkz2aBh47kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2IyOWE3NzY2OWRmNWE3YTVjYjUwNmQ4MzllZThhYTQz MzdjY2FhYzAeFw0yNjA1MTIyMDU1MDdaFw0yNjA1MTMyMjQyMDdaMDMxMTAvBgNV BAMTKEY1REY0MTMyM0U3RDkwQzRBOUVBNjA2NkE2MkVEM0U1NzExNjI5ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDONQXz81BPlHRsKdn0205OO8Cz LhKPM+VowQ1eSVY0F1okJ+xH9lVEhxEbqSK2GGe+Ouks554DY361tR00ERaAJydd H9TotE8nQhXQSUVyNx7Ti+7lQQ7vJr8ugxfik9qQARnZBTuZ26wHudZtzgIbcbRh iVopUF9eAJlh9ibZuCYJgrS2Bv6QqtmA4OKGMFsWQ56ziBIy5G6RrTmFil5BCNlG OhUzPfFLFzlADoDQJUCA9aeJzCW/gZXSrZKHSDrvacgkeaZazg6auYgczv/wevnA dGVc7l3DeK2agtwwE9MKM+9w/gQQLNVFRvtV8qd9A4P+X83jMulRMiZthP75AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU9d9BMj59kMSp6mBmpi7T5XEWKYMwHwYDVR0j BBgwFoAUyymndmnfWnpctQbYOe6KpDN8yqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgtN2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhm MDZlLzAvQ0IyOUE3NzY2OURGNUE3QTVDQjUwNkQ4MzlFRThBQTQzMzdDQ0FBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3l5bW5kbW5mV25wY3RRYllPZTZLcERO OHlxdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iYjI1ZDA2OC03 ZjljLTRiMGUtYTY5NS0xNzc5YjdkOGYwNmUvMC9DQjI5QTc3NjY5REY1QTdBNUNC NTA2RDgzOUVFOEFBNDMzN0NDQUFDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANhjGrKkiZbZ2GNaoY0mr yPlQctKF0gO41Y+NFhFLOTJyVHRWm9Jjgilc9pEk6hnMCzHAsyyY0u3uUgVhWEqI GgLLUoVPaO5nKQeJskjITOVx1g3+EDH8wiP3GjrR+Wwm3s3DLNEzRi06eU3bCrUw PxjxoDjCCXEYw1yhEtcJAT/4oRTDmImL5u/ZxtNBoRlyb/j1sCx2d71bW6/dO9sP 9vOSsuyalw/vAxF8ZvVk5xrWL3PFEQlupK5Id3OCO3UGsMdjAS1x9ywpJbWf3k4G ZXdCKwaW4M3kHhPBNXUPo9SS2d/M4569qJhCm7cV1HZc1VdnOHSbxVb/SPa/al8Q 1w== -----END CERTIFICATE-----Generated at Wed May 13 13:52:43 2026 by rpki-client