$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft File: A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft (raw, json) Hash identifier: bSBt62M0PNxrYRHmCJhYQR6AjfIPULORWhQZj6EbfQk= Subject key identifier: 70:AF:97:F2:9C:95:04:25:3B:4D:B4:2E:7F:A3:94:54:4D:23:83:59 Authority key identifier: A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E Certificate issuer: /CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e Certificate serial: 048FA31DACA2CF9180BDB70E3E78E08FB03CBC9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft Manifest number: 03AA Signing time: Thu 24 Sep 2026 21:15:38 +0000 Manifest this update: Thu 24 Sep 2026 21:10:38 +0000 Manifest next update: Sat 26 Sep 2026 00:35:38 +0000 Files and hashes: 1: 3137382e3233362e3233342e302f32342d3234203d3e203137353631.roa (hash: 9Fhp6MCOd+X2RA59heYecj22kZJd6g79ksb5ZL538E4=) 2: 3137382e3233362e3232362e302f32342d3234203d3e20313938313230.roa (hash: GnErXvMYkgTDg7TWOsi8+AQsBWxWsGMeGB8q8hH51Ag=) 3: 3138352e322e35302e302f32342d3234203d3e203632303832.roa (hash: zw2xB7te/CtSwWJJPc9d/2yAtUjaghXOjJZIncUw2jI=) 4: 3137382e3233362e3233352e302f32342d3234203d3e203134363138.roa (hash: 0gJhuGPSwbYe37kAa8m7YV7yXKIUVPzMQPHSJAUJKZ0=) 5: 3137382e3233362e3233332e302f32342d3234203d3e203137353631.roa (hash: BDvbJBn4PdPpKswpqhygiWIr2d5q+v6X7XYvNKW1Ayo=) 6: A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl (hash: sP3vo7HIgTykT+Aj/zUhXLLgK1bC/9k/Ey2IornCSgI=) 7: 3137382e3233362e3233372e302f32342d3234203d3e203137353631.roa (hash: tVXgDczh1Jz7wXt3P0yPpo1PmevC5I4Bn+9xw+6RHtQ=) 8: 3137382e3233362e3233352e302f32342d3234203d3e203136353039.roa (hash: bWfkodHT7E5HimunFdGnoIBAIfbUWSMFLrgQXGVbeTU=) 9: 3138352e322e35312e302f32342d3234203d3e20313939313835.roa (hash: 9WxLlbTQRGoCUsas6s2luj6jANja7S/u+Q4U4i5hg2E=) 10: 3137382e3233362e3233362e302f32342d3234203d3e203136353039.roa (hash: /oMyhrzhRwrf9TS7pL2lkO0wvw/pL1iHf4xSJA6baFs=) 11: 3137382e3233362e3232372e302f32342d3234203d3e203136353039.roa (hash: s9LY+Vjkw5WtsXM7RfsOHHY+7wEN6VML/ihlFBnhNco=) 12: 3138352e322e34392e302f32342d3234203d3e20323138393834.roa (hash: nTsoGcm7nRBrh89HCX58wiux4+2N2yxuhGfFc9vQwsc=) 13: 3137382e3233362e3233322e302f32342d3234203d3e20313334353438.roa (hash: KG184dA45IxUmVto869OJN9+pFKdNyvWFLe/t2XGJRs=) 14: 3137382e3233362e3232342e302f32332d3234203d3e203136353039.roa (hash: RKASj5Gz0g7xxLnHb9KEoWbO+w1nl9AqbgRZ3sNE+ho=) 15: 3137382e3233362e3233382e302f32332d3234203d3e203136353039.roa (hash: +d+v6sp5knpRtoxQqdZeuiFzOqF0m2ybqFYPkrOxp/A=) 16: 3137382e3233362e3232382e302f32322d3234203d3e203335393136.roa (hash: Uj6qVhvkl5aO5WvtBsGs2hifXenpCHeFu2xN3NsemDU=) 17: 3138352e322e34382e302f32342d3234203d3e203137353631.roa (hash: KjrwO4+eb6aY+xxixJp0/KHBXaMmoX+ZsXrJEpwe06c=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 00:35:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:8f:a3:1d:ac:a2:cf:91:80:bd:b7:0e:3e:78:e0:8f:b0:3c:bc:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e Validity Not Before: Sep 24 21:10:38 2026 GMT Not After : Sep 26 00:35:38 2026 GMT Subject: CN=70AF97F29C9504253B4DB42E7FA394544D238359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ff:fd:a7:6d:07:c2:0e:5a:3a:4f:a0:62:dc: 3a:83:d8:d6:e1:88:6a:d0:c6:50:4f:bc:a6:3b:93: ae:2d:27:24:b2:7c:4b:11:00:a9:a8:38:87:cb:52: e1:a1:68:c1:42:bc:63:d1:34:81:32:15:78:82:84: c2:37:f5:dd:58:7f:fd:70:01:22:92:8f:ae:b7:f3: 4c:4a:b0:75:52:65:66:13:46:49:dc:52:ad:52:9b: 89:7a:1b:8e:0c:c9:a7:9f:d3:3b:9d:32:e5:2e:1c: db:12:aa:45:41:a2:aa:5a:d0:91:45:97:67:3e:bf: a9:14:1b:08:dc:61:32:88:f3:c9:8d:e4:a8:d5:ba: da:e7:30:4e:b3:1e:a4:25:46:71:56:ea:6c:bf:a6: 18:e4:ae:9f:23:25:ef:a1:ad:5b:fe:86:01:cc:3e: b1:36:15:5d:1e:fc:c5:3d:ab:67:36:5f:11:03:f9: c4:af:96:9b:22:62:83:cd:99:03:c8:40:ad:0e:96: d3:e5:6c:4f:97:ce:e2:41:d3:ca:18:28:e4:93:12: 96:18:f6:25:7a:39:f6:83:10:4c:55:78:c0:ed:ec: 8c:d0:95:9d:8c:0b:a4:c3:41:37:58:d5:db:07:56: d9:d1:c4:91:09:ac:45:ab:08:56:91:13:fc:5a:26: 66:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:AF:97:F2:9C:95:04:25:3B:4D:B4:2E:7F:A3:94:54:4D:23:83:59 X509v3 Authority Key Identifier: keyid:A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:7e:aa:ac:7f:6d:76:3b:8f:c7:d0:f2:db:97:f0:d7:47:e8: 22:22:bf:6d:06:6a:d9:97:9f:2c:82:12:77:fa:a5:1f:81:b1: 53:af:5d:1b:16:93:cc:02:2c:6a:b8:ec:ed:06:9a:cd:bc:b3: 6f:4c:30:bc:e1:3f:37:bf:ee:24:b3:f8:04:10:67:b3:73:0d: 89:85:dc:c2:97:7e:8b:13:0b:48:1b:49:ab:df:e1:01:1b:c8: 61:6e:25:45:e3:bb:10:74:39:42:5a:f1:4d:e8:23:20:d6:62: b3:0d:11:3b:73:31:72:ad:66:b6:b7:5f:53:21:05:0b:47:19: 5c:bb:c4:b2:d7:5f:e8:b0:5a:e8:ec:48:60:55:35:5f:7c:77: fe:53:ab:ac:3f:55:3a:f9:e2:a6:94:9b:e4:94:e8:a4:1d:dc: e3:8a:88:e2:7c:b4:00:fa:68:03:87:e6:00:76:82:9c:0b:a8: 0a:4e:2a:40:dd:fb:fe:d4:80:fb:47:6d:bf:5e:b2:74:b2:f4: 32:86:15:f8:9d:d6:42:4b:3c:6a:4f:57:b8:86:ce:f5:a8:06: 5b:ce:64:01:bc:fa:83:d6:8b:c3:8f:b5:44:a5:92:8b:a6:f8: ba:27:c9:85:7b:e0:3a:8d:95:dd:94:ca:24:d8:19:ed:e1:22: fb:08:5a:cd -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBI+jHayiz5GAvbcOPnjgj7A8vJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTI5ZWYyMWMxMzk3YWI0YjJmMDg3NzgzMDVhMzdmZmQx Y2MyNWM0ZTAeFw0yNjA5MjQyMTEwMzhaFw0yNjA5MjYwMDM1MzhaMDMxMTAvBgNV BAMTKDcwQUY5N0YyOUM5NTA0MjUzQjREQjQyRTdGQTM5NDU0NEQyMzgzNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe//2nbQfCDlo6T6Bi3DqD2Nbh iGrQxlBPvKY7k64tJySyfEsRAKmoOIfLUuGhaMFCvGPRNIEyFXiChMI39d1Yf/1w ASKSj66380xKsHVSZWYTRkncUq1Sm4l6G44Myaef0zudMuUuHNsSqkVBoqpa0JFF l2c+v6kUGwjcYTKI88mN5KjVutrnME6zHqQlRnFW6my/phjkrp8jJe+hrVv+hgHM PrE2FV0e/MU9q2c2XxED+cSvlpsiYoPNmQPIQK0OltPlbE+XzuJB08oYKOSTEpYY 9iV6OfaDEExVeMDt7IzQlZ2MC6TDQTdY1dsHVtnRxJEJrEWrCFaRE/xaJmYbAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUcK+X8pyVBCU7TbQuf6OUVE0jg1kwHwYDVR0j BBgwFoAUop7yHBOXq0svCHeDBaN//RzCXE4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1 NmI2LzIvQTI5RUYyMUMxMzk3QUI0QjJGMDg3NzgzMDVBMzdGRkQxQ0MyNUM0RS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL29wN3lIQk9YcTBzdkNIZURCYU5fX1J6 Q1hFNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZTQxNzA0Zi03 ODE1LTRmMmMtYTUwMy01OGFlMDhlNTU2YjYvMi9BMjlFRjIxQzEzOTdBQjRCMkYw ODc3ODMwNUEzN0ZGRDFDQzI1QzRFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWn6qrH9tdjuPx9Dy25fw 10foIiK/bQZq2ZefLIISd/qlH4GxU69dGxaTzAIsarjs7Qaazbyzb0wwvOE/N7/u JLP4BBBns3MNiYXcwpd+ixMLSBtJq9/hARvIYW4lReO7EHQ5QlrxTegjINZisw0R O3Mxcq1mtrdfUyEFC0cZXLvEstdf6LBa6OxIYFU1X3x3/lOrrD9VOvnippSb5JTo pB3c44qI4ny0APpoA4fmAHaCnAuoCk4qQN37/tSA+0dtv16ydLL0MoYV+J3WQks8 ak9XuIbO9agGW85kAbz6g9aLw4+1RKWSi6b4uifJhXvgOo2V3ZTKJNgZ7eEi+wha zQ== -----END CERTIFICATE-----Generated at Fri Sep 25 14:21:13 2026 by rpki-client