$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft File: A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft (raw, json) Hash identifier: qD2qBbf1Oamsq8jjIw66TWy0o9Ns6qDYJg3PxYU6aec= Subject key identifier: E1:55:52:4E:99:84:EF:7F:53:14:0E:5D:06:20:ED:A5:9A:0D:BA:80 Authority key identifier: A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E Certificate issuer: /CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e Certificate serial: 5FD395BD5C0BFA0CF264B46070F171918B571332 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft Manifest number: 03AB Signing time: Fri 25 Sep 2026 16:35:38 +0000 Manifest this update: Fri 25 Sep 2026 16:30:38 +0000 Manifest next update: Sat 26 Sep 2026 19:23:38 +0000 Files and hashes: 1: 3137382e3233362e3233352e302f32342d3234203d3e203136353039.roa (hash: bWfkodHT7E5HimunFdGnoIBAIfbUWSMFLrgQXGVbeTU=) 2: 3137382e3233362e3233362e302f32342d3234203d3e203136353039.roa (hash: /oMyhrzhRwrf9TS7pL2lkO0wvw/pL1iHf4xSJA6baFs=) 3: 3138352e322e34382e302f32342d3234203d3e203137353631.roa (hash: KjrwO4+eb6aY+xxixJp0/KHBXaMmoX+ZsXrJEpwe06c=) 4: 3137382e3233362e3233372e302f32342d3234203d3e203137353631.roa (hash: tVXgDczh1Jz7wXt3P0yPpo1PmevC5I4Bn+9xw+6RHtQ=) 5: A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl (hash: HY3lsnueJW6CnIImgexuzXoUyfxU4x5nIysWP03Zq2Y=) 6: 3138352e322e35312e302f32342d3234203d3e20313939313835.roa (hash: 9WxLlbTQRGoCUsas6s2luj6jANja7S/u+Q4U4i5hg2E=) 7: 3137382e3233362e3232362e302f32342d3234203d3e20313938313230.roa (hash: GnErXvMYkgTDg7TWOsi8+AQsBWxWsGMeGB8q8hH51Ag=) 8: 3137382e3233362e3232382e302f32322d3234203d3e203335393136.roa (hash: Uj6qVhvkl5aO5WvtBsGs2hifXenpCHeFu2xN3NsemDU=) 9: 3138352e322e35302e302f32342d3234203d3e203632303832.roa (hash: zw2xB7te/CtSwWJJPc9d/2yAtUjaghXOjJZIncUw2jI=) 10: 3137382e3233362e3233332e302f32342d3234203d3e203137353631.roa (hash: BDvbJBn4PdPpKswpqhygiWIr2d5q+v6X7XYvNKW1Ayo=) 11: 3137382e3233362e3233352e302f32342d3234203d3e203134363138.roa (hash: 0gJhuGPSwbYe37kAa8m7YV7yXKIUVPzMQPHSJAUJKZ0=) 12: 3137382e3233362e3233382e302f32332d3234203d3e203136353039.roa (hash: +d+v6sp5knpRtoxQqdZeuiFzOqF0m2ybqFYPkrOxp/A=) 13: 3137382e3233362e3232342e302f32332d3234203d3e203136353039.roa (hash: RKASj5Gz0g7xxLnHb9KEoWbO+w1nl9AqbgRZ3sNE+ho=) 14: 3137382e3233362e3232372e302f32342d3234203d3e203136353039.roa (hash: s9LY+Vjkw5WtsXM7RfsOHHY+7wEN6VML/ihlFBnhNco=) 15: 3137382e3233362e3233322e302f32342d3234203d3e20313334353438.roa (hash: KG184dA45IxUmVto869OJN9+pFKdNyvWFLe/t2XGJRs=) 16: 3138352e322e34392e302f32342d3234203d3e20323138393834.roa (hash: nTsoGcm7nRBrh89HCX58wiux4+2N2yxuhGfFc9vQwsc=) 17: 3137382e3233362e3233342e302f32342d3234203d3e203137353631.roa (hash: 9Fhp6MCOd+X2RA59heYecj22kZJd6g79ksb5ZL538E4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 15:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:d3:95:bd:5c:0b:fa:0c:f2:64:b4:60:70:f1:71:91:8b:57:13:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e Validity Not Before: Sep 25 16:30:38 2026 GMT Not After : Sep 26 19:23:38 2026 GMT Subject: CN=E155524E9984EF7F53140E5D0620EDA59A0DBA80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:34:52:0c:51:20:c6:bb:02:4d:be:18:50:f9: 78:85:47:fe:bb:b9:e4:ec:50:6d:d5:39:a4:7b:dc: 46:de:f8:b0:8e:84:a2:37:45:42:fe:1a:b2:48:9f: de:3b:fc:75:68:b8:ea:cc:4f:ac:ea:5a:45:3c:35: d9:b3:8a:50:c6:71:82:95:62:b5:1e:8d:eb:d3:9e: f4:74:a5:51:22:a4:08:4e:ae:4a:07:c7:54:37:a3: 7c:59:ae:bc:84:76:77:0d:43:d8:0f:16:25:c7:3e: 79:75:ab:ce:d0:08:a7:25:d9:9d:9d:02:39:fc:ec: 60:61:54:58:08:07:19:ac:2a:55:a7:04:f4:b0:d1: 99:9f:7c:3f:b8:cb:14:cd:12:f5:79:29:5c:b9:2f: 62:e6:8c:80:64:e5:98:cc:17:55:12:aa:29:74:51: 91:10:f3:c0:28:00:4d:2d:1e:77:38:bb:ae:e2:70: 90:c0:63:f9:9c:63:fd:0f:46:82:ef:c8:ac:4e:44: d1:73:43:22:b1:8f:24:94:85:bb:38:87:d3:54:9c: c0:99:e5:1a:b5:5b:46:6e:bc:ee:80:8e:7f:de:21: b3:79:4f:da:ec:04:e0:c7:ac:6f:b6:04:53:f4:c8: 9f:db:78:45:4f:9c:b9:be:f1:68:2d:2f:0c:f2:44: 7a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:55:52:4E:99:84:EF:7F:53:14:0E:5D:06:20:ED:A5:9A:0D:BA:80 X509v3 Authority Key Identifier: keyid:A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:f5:4c:ee:ed:dc:f4:41:04:16:b1:e1:36:b2:6f:74:64:f6: e6:34:6f:f3:c0:78:ca:46:9e:cb:76:ad:2b:51:85:32:d1:a0: 54:47:6d:f8:de:8a:a1:25:0d:ce:8d:1c:bb:cb:d8:1e:e8:1f: 35:a1:09:74:20:7d:b3:7e:bc:bb:65:1e:b7:37:9a:91:89:6e: 1a:51:23:68:89:10:7a:d5:25:43:f4:22:bf:91:71:25:cc:9e: 0f:96:82:0c:cf:4c:58:cc:1b:74:fe:94:da:14:fd:12:b0:88: 16:98:88:66:49:d6:d8:0a:05:ee:f7:a1:83:7c:7a:9e:83:c1: 3e:91:2f:82:82:d1:70:75:a2:2a:55:1b:99:57:ad:81:51:51: 3b:ac:ad:3e:32:f6:06:4e:f4:7e:87:5f:d5:ea:9e:1d:25:07: 7d:99:de:15:2a:a6:c7:f6:3c:cc:bb:26:5a:83:f9:c7:72:23: 32:28:65:b0:0e:5d:b1:13:95:74:68:e8:c5:f8:79:df:21:ee: a9:8b:a1:80:f0:a4:d4:fd:94:dd:e3:9b:f4:bb:1d:ff:77:95: f5:48:79:97:af:37:8a:f9:79:95:83:cf:20:01:40:9f:97:85: d8:cb:b9:ce:3a:44:f2:55:8b:e8:88:a4:34:4e:95:3d:f0:df: ea:62:04:41 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUX9OVvVwL+gzyZLRgcPFxkYtXEzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTI5ZWYyMWMxMzk3YWI0YjJmMDg3NzgzMDVhMzdmZmQx Y2MyNWM0ZTAeFw0yNjA5MjUxNjMwMzhaFw0yNjA5MjYxOTIzMzhaMDMxMTAvBgNV BAMTKEUxNTU1MjRFOTk4NEVGN0Y1MzE0MEU1RDA2MjBFREE1OUEwREJBODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3NFIMUSDGuwJNvhhQ+XiFR/67 ueTsUG3VOaR73Ebe+LCOhKI3RUL+GrJIn947/HVouOrMT6zqWkU8NdmzilDGcYKV YrUejevTnvR0pVEipAhOrkoHx1Q3o3xZrryEdncNQ9gPFiXHPnl1q87QCKcl2Z2d Ajn87GBhVFgIBxmsKlWnBPSw0ZmffD+4yxTNEvV5KVy5L2LmjIBk5ZjMF1USqil0 UZEQ88AoAE0tHnc4u67icJDAY/mcY/0PRoLvyKxORNFzQyKxjySUhbs4h9NUnMCZ 5Rq1W0ZuvO6Ajn/eIbN5T9rsBODHrG+2BFP0yJ/beEVPnLm+8WgtLwzyRHo9AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU4VVSTpmE739TFA5dBiDtpZoNuoAwHwYDVR0j BBgwFoAUop7yHBOXq0svCHeDBaN//RzCXE4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1 NmI2LzIvQTI5RUYyMUMxMzk3QUI0QjJGMDg3NzgzMDVBMzdGRkQxQ0MyNUM0RS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL29wN3lIQk9YcTBzdkNIZURCYU5fX1J6 Q1hFNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZTQxNzA0Zi03 ODE1LTRmMmMtYTUwMy01OGFlMDhlNTU2YjYvMi9BMjlFRjIxQzEzOTdBQjRCMkYw ODc3ODMwNUEzN0ZGRDFDQzI1QzRFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPVM7u3c9EEEFrHhNrJv dGT25jRv88B4ykaey3atK1GFMtGgVEdt+N6KoSUNzo0cu8vYHugfNaEJdCB9s368 u2UetzeakYluGlEjaIkQetUlQ/Qiv5FxJcyeD5aCDM9MWMwbdP6U2hT9ErCIFpiI ZknW2AoF7vehg3x6noPBPpEvgoLRcHWiKlUbmVetgVFRO6ytPjL2Bk70fodf1eqe HSUHfZneFSqmx/Y8zLsmWoP5x3IjMihlsA5dsROVdGjoxfh53yHuqYuhgPCk1P2U 3eOb9Lsd/3eV9Uh5l683ivl5lYPPIAFAn5eF2Mu5zjpE8lWL6IikNE6VPfDf6mIE QQ== -----END CERTIFICATE-----Generated at Fri Sep 25 20:37:14 2026 by rpki-client