$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft File: A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft (raw, json) Hash identifier: zjLBHmaamwnh+FrqmuBrYhyP7ESxjqI4n1nBcKeMjjQ= Subject key identifier: 10:EB:1E:BE:F6:AD:4C:9F:33:92:72:21:29:7A:65:90:54:93:A1:E8 Authority key identifier: A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E Certificate issuer: /CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e Certificate serial: 46B3C4E0EE6015DEAF61BA3633E7E2603F7D21C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft Manifest number: 02FA Signing time: Thu 23 Jul 2026 15:41:43 +0000 Manifest this update: Thu 23 Jul 2026 15:36:43 +0000 Manifest next update: Fri 24 Jul 2026 18:57:43 +0000 Files and hashes: 1: 3138352e322e35312e302f32342d3234203d3e20313939313835.roa (hash: 9WxLlbTQRGoCUsas6s2luj6jANja7S/u+Q4U4i5hg2E=) 2: 3137382e3233362e3233382e302f32332d3234203d3e203136353039.roa (hash: +d+v6sp5knpRtoxQqdZeuiFzOqF0m2ybqFYPkrOxp/A=) 3: 3137382e3233362e3233372e302f32342d3234203d3e203137353631.roa (hash: tVXgDczh1Jz7wXt3P0yPpo1PmevC5I4Bn+9xw+6RHtQ=) 4: 3137382e3233362e3232382e302f32322d3234203d3e203335393136.roa (hash: Uj6qVhvkl5aO5WvtBsGs2hifXenpCHeFu2xN3NsemDU=) 5: 3138352e322e34392e302f32342d3234203d3e203136323736.roa (hash: c24x2J+0/kPthk+wNeBkwc8WUqBu80LvdoO/pr6X9w0=) 6: 3137382e3233362e3232372e302f32342d3234203d3e203136353039.roa (hash: s9LY+Vjkw5WtsXM7RfsOHHY+7wEN6VML/ihlFBnhNco=) 7: 3137382e3233362e3233332e302f32342d3234203d3e203137353631.roa (hash: BDvbJBn4PdPpKswpqhygiWIr2d5q+v6X7XYvNKW1Ayo=) 8: 3137382e3233362e3233352e302f32342d3234203d3e203136353039.roa (hash: bWfkodHT7E5HimunFdGnoIBAIfbUWSMFLrgQXGVbeTU=) 9: 3137382e3233362e3233362e302f32342d3234203d3e203136353039.roa (hash: /oMyhrzhRwrf9TS7pL2lkO0wvw/pL1iHf4xSJA6baFs=) 10: 3138352e322e34382e302f32342d3234203d3e203137353631.roa (hash: 7wcegcT5K98XgAg+XQMcAdixoXoYKu4tzsSbp2VeJ64=) 11: 3137382e3233362e3232342e302f32332d3234203d3e203136353039.roa (hash: RKASj5Gz0g7xxLnHb9KEoWbO+w1nl9AqbgRZ3sNE+ho=) 12: 3137382e3233362e3233342e302f32342d3234203d3e203137353631.roa (hash: 9Fhp6MCOd+X2RA59heYecj22kZJd6g79ksb5ZL538E4=) 13: 3138352e322e35302e302f32342d3234203d3e203632303832.roa (hash: zw2xB7te/CtSwWJJPc9d/2yAtUjaghXOjJZIncUw2jI=) 14: 3137382e3233362e3232362e302f32342d3234203d3e20313938313230.roa (hash: GnErXvMYkgTDg7TWOsi8+AQsBWxWsGMeGB8q8hH51Ag=) 15: 3137382e3233362e3233352e302f32342d3234203d3e203134363138.roa (hash: 0gJhuGPSwbYe37kAa8m7YV7yXKIUVPzMQPHSJAUJKZ0=) 16: 3137382e3233362e3233322e302f32342d3234203d3e20313334353438.roa (hash: KG184dA45IxUmVto869OJN9+pFKdNyvWFLe/t2XGJRs=) 17: A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl (hash: 5JuF/C7WW8wUMGYFqEzHxBS8r7U5BDg/LwArDS27F+4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 18:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:b3:c4:e0:ee:60:15:de:af:61:ba:36:33:e7:e2:60:3f:7d:21:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e Validity Not Before: Jul 23 15:36:43 2026 GMT Not After : Jul 24 18:57:43 2026 GMT Subject: CN=10EB1EBEF6AD4C9F33927221297A65905493A1E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e0:ef:0c:c9:b8:c9:fa:f6:f7:ec:15:79:e8: c8:ad:85:72:84:30:ed:3c:27:4b:fd:51:92:93:e6: 30:35:39:dd:4c:5d:d4:47:33:ea:fb:6e:d8:96:09: 56:76:f8:49:6c:da:e2:e7:b8:ea:fc:94:2e:8d:3f: 9d:78:99:f6:3e:a2:9a:68:e6:8a:81:c5:b0:ce:62: 86:8e:44:2f:0d:00:6a:e4:b6:8c:bf:89:4e:78:50: ac:17:ac:16:fb:8a:1f:2e:39:7c:27:34:83:29:b5: 2f:e4:0f:4c:f9:38:c8:08:72:31:90:f1:17:19:55: ae:97:b2:b4:5d:ac:77:24:85:d9:4d:1a:70:26:81: a7:eb:a9:d7:39:8a:b3:6c:d3:59:38:7d:47:33:94: f0:51:e6:10:b6:3d:35:07:9a:4e:ae:50:90:0e:d9: 2a:50:3d:4c:2c:f0:de:1d:8f:6f:92:7c:86:4e:8e: 17:67:1e:a6:db:cc:d5:d6:00:27:d5:09:50:99:eb: 65:3a:b0:b9:8e:98:5d:77:39:8a:44:88:7d:ac:2a: 2f:b2:86:8f:fa:76:30:f8:f4:7b:a8:d6:a7:be:fa: 51:48:b6:25:26:d0:b9:37:b7:dd:ea:d0:be:11:08: ab:02:27:f5:74:1b:5b:d1:e2:34:0e:fc:67:fb:0e: 48:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:EB:1E:BE:F6:AD:4C:9F:33:92:72:21:29:7A:65:90:54:93:A1:E8 X509v3 Authority Key Identifier: keyid:A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:cf:80:7c:da:ca:d5:d2:78:ca:35:ea:fc:59:63:c4:da:be: e4:a8:48:85:8d:3a:ab:76:06:9a:a8:48:7b:af:37:3e:e9:3c: c5:54:82:be:71:e0:90:66:3b:2d:c9:a9:c9:bc:fe:3c:1c:67: 44:62:07:65:eb:4b:1c:e1:dd:d1:1f:d1:7f:34:43:46:99:d5: 9e:82:ce:1d:54:02:2a:ff:56:15:8f:57:f2:ff:89:63:50:a0: 24:3c:09:dd:ac:61:13:3c:f6:80:b8:98:bc:f2:40:84:69:a5: 10:92:b5:93:84:38:19:2f:a5:15:39:be:83:31:29:38:3b:b6: 93:5f:46:76:62:2f:5b:20:88:ab:bc:2c:e1:3c:5d:0d:a9:79: 67:13:db:e7:8b:99:b7:0c:40:c6:cf:fd:13:5d:f2:64:3c:ad: 49:92:77:20:ea:2a:c0:6d:08:5f:68:ff:45:ad:f4:14:35:2e: 74:e1:34:72:89:b5:cf:17:a7:b4:1d:c3:3c:60:47:c0:c7:dd: b4:43:8b:ab:cf:9c:21:c5:12:e6:8e:be:b0:5a:1c:07:88:86: 14:7b:1a:14:72:cb:75:9b:9f:e9:7c:ee:ad:f3:ca:95:39:9b: b0:31:64:89:6e:70:6e:80:9f:ec:07:27:fa:99:f6:38:a7:27: 67:3a:a8:76 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURrPE4O5gFd6vYbo2M+fiYD99IcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTI5ZWYyMWMxMzk3YWI0YjJmMDg3NzgzMDVhMzdmZmQx Y2MyNWM0ZTAeFw0yNjA3MjMxNTM2NDNaFw0yNjA3MjQxODU3NDNaMDMxMTAvBgNV BAMTKDEwRUIxRUJFRjZBRDRDOUYzMzkyNzIyMTI5N0E2NTkwNTQ5M0ExRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM4O8MybjJ+vb37BV56MithXKE MO08J0v9UZKT5jA1Od1MXdRHM+r7btiWCVZ2+Els2uLnuOr8lC6NP514mfY+oppo 5oqBxbDOYoaORC8NAGrktoy/iU54UKwXrBb7ih8uOXwnNIMptS/kD0z5OMgIcjGQ 8RcZVa6XsrRdrHckhdlNGnAmgafrqdc5irNs01k4fUczlPBR5hC2PTUHmk6uUJAO 2SpQPUws8N4dj2+SfIZOjhdnHqbbzNXWACfVCVCZ62U6sLmOmF13OYpEiH2sKi+y ho/6djD49Huo1qe++lFItiUm0Lk3t93q0L4RCKsCJ/V0G1vR4jQO/Gf7DkjjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUEOsevvatTJ8zknIhKXplkFSToegwHwYDVR0j BBgwFoAUop7yHBOXq0svCHeDBaN//RzCXE4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1 NmI2LzIvQTI5RUYyMUMxMzk3QUI0QjJGMDg3NzgzMDVBMzdGRkQxQ0MyNUM0RS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL29wN3lIQk9YcTBzdkNIZURCYU5fX1J6 Q1hFNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZTQxNzA0Zi03 ODE1LTRmMmMtYTUwMy01OGFlMDhlNTU2YjYvMi9BMjlFRjIxQzEzOTdBQjRCMkYw ODc3ODMwNUEzN0ZGRDFDQzI1QzRFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWc+AfNrK1dJ4yjXq/Flj xNq+5KhIhY06q3YGmqhIe683Puk8xVSCvnHgkGY7Lcmpybz+PBxnRGIHZetLHOHd 0R/RfzRDRpnVnoLOHVQCKv9WFY9X8v+JY1CgJDwJ3axhEzz2gLiYvPJAhGmlEJK1 k4Q4GS+lFTm+gzEpODu2k19GdmIvWyCIq7ws4TxdDal5ZxPb54uZtwxAxs/9E13y ZDytSZJ3IOoqwG0IX2j/Ra30FDUudOE0com1zxentB3DPGBHwMfdtEOLq8+cIcUS 5o6+sFocB4iGFHsaFHLLdZuf6XzurfPKlTmbsDFkiW5wboCf7Acn+pn2OKcnZzqo dg== -----END CERTIFICATE-----Generated at Fri Jul 24 06:40:39 2026 by rpki-client