$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft File: E205EBF065FC4929F1802662AE62D7F9762600E6.mft (raw, json) Hash identifier: UhKfVE1kOdkF/qn/7mND+Uf3WLRK4Qgcic+oAfhtlzE= Subject key identifier: CF:BC:B0:3F:2D:AB:C8:BB:2E:12:E5:DC:DF:EF:A6:B8:26:D3:0B:DD Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6 Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6 Certificate serial: 228F050027649D0A4F8EF56CA5C5E900D1452CC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft Manifest number: 0310 Signing time: Tue 22 Sep 2026 14:30:47 +0000 Manifest this update: Tue 22 Sep 2026 14:25:47 +0000 Manifest next update: Wed 23 Sep 2026 15:04:47 +0000 Files and hashes: 1: 326130663a356663303a646561643a3a2f34382d3438203d3e20323035303336.roa (hash: Z7YS72AkRUhmGE/8eVCwX/QArQ7kzj3DMVCvF8nhupE=) 2: 39312e3230392e34302e302f32342d3234203d3e203436383434.roa (hash: lOyC9nhHln4w/6aFWRWEGti2qbnJIh38POtRvVGBI4s=) 3: 326130663a356663303a6465623a3a2f34382d3438203d3e20323035303336.roa (hash: HGgyYO79YRPv5eTIvRCSkvT+uzFYIDLIXRArnhiRVzA=) 4: 326130663a356663303a6265643a3a2f34382d3438203d3e20323035303336.roa (hash: Vn0tNJq84yvhpEx3djvegd0qElXvUXIj3d10CpoBDS8=) 5: 326130663a356663303a646565643a3a2f34382d3438203d3e20323035303336.roa (hash: 6WyHSY5Xp60q1IE95V4h6lwOICpnxsevWtnXKH+E1RA=) 6: 326130663a356663303a623030623a3a2f34382d3438203d3e20323035303336.roa (hash: dtubQqytFEqkt8TqTYJ+KlZgpXqOEEfNHG9KMyAKroE=) 7: 39312e3230392e34382e302f32342d3234203d3e2034363337.roa (hash: 9aJ1lRoOXNT0IiNEFJIwNi7z4Hr/etdLOUAmwK9LwsY=) 8: 326130663a356663303a636166653a3a2f34382d3438203d3e20323035303336.roa (hash: SIzDkF7YYsoaU9vFR/am7daSl1S+0BBZdMp9c5ogCY8=) 9: 326130663a356663303a626162613a3a2f34382d3438203d3e20323035303336.roa (hash: kdDGBWrURu4f0ClnA4SfgsI29M2UtK1sJ9ldbUvOvNc=) 10: 326130663a356663303a663030643a3a2f34382d3438203d3e20323035303336.roa (hash: Xgs2aXZ2twwalLnMnwHKHrLdiNgmex+4PLid272RcXc=) 11: 326130663a356663303a6164643a3a2f34382d3438203d3e20323035303336.roa (hash: N543k0DcGiJuxubeGma9GZg+VhMwbPVS9ShNVwfZl30=) 12: E205EBF065FC4929F1802662AE62D7F9762600E6.crl (hash: 0wBqrCuSTUmKeK3MZCrzpD57YPWL3/4CZ4SEmGM3cAQ=) 13: 39312e3230392e35302e302f32342d3234203d3e20323039333732.roa (hash: LfqYMzkh476Ki7VQsqODx8QNPNDEFujJRyehaY4kEpM=) 14: 326130663a356663303a646561663a3a2f34382d3438203d3e20323035303336.roa (hash: nBnCDOBWFR9glmAsUSRrLmDkLZa6Zi7bYUkIoT7Lpvs=) 15: 326130663a356663303a6665653a3a2f34382d3438203d3e20323035303336.roa (hash: sgKb1dwb+yOP2QySpduAJeLZbiJJdLEfbfVpO0+8Lgg=) 16: 326130663a356663303a6261643a3a2f34382d3438203d3e20323035303336.roa (hash: tvkflaFeVW3sd8cXnqPd3goXjSItIqLYbambS6E6g9M=) 17: 326130663a356663303a666565643a3a2f34382d3438203d3e20323035303336.roa (hash: xpwIwfTkmJ6MVFD7/8ThvhoBcV+rx30IkMkw3EnowGM=) 18: 326130663a356663303a6461643a3a2f34382d3438203d3e20323035303336.roa (hash: FjMn5kgc0Y1vdPNQCAd4cKVxUcNaP4msdjwOhjOI4iE=) 19: 326130663a356663303a6163653a3a2f34382d3438203d3e20323035303336.roa (hash: s62/iVKVlW2KdVyTR+Xnv457Z0j5+aZNRyV7RtkAKNQ=) 20: 39312e3230392e35382e302f32342d3234203d3e20313532363938.roa (hash: O/5mBkj6Ec8w0EQm6VgP/NavexjcZj1JoFe5Y9dYuT0=) 21: 326130663a356663303a626162653a3a2f34382d3438203d3e20323035303336.roa (hash: BEzvo1oTT3h/yITGofAX+DfQt9t+mraGyg3xFdVKM2I=) 22: 326130663a356663303a633064653a3a2f34382d3438203d3e20323035303336.roa (hash: vwuw8BagjBJB+QjPivE2w5i9soU6pwd3DUm4jYukQKs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:8f:05:00:27:64:9d:0a:4f:8e:f5:6c:a5:c5:e9:00:d1:45:2c:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6 Validity Not Before: Sep 22 14:25:47 2026 GMT Not After : Sep 23 15:04:47 2026 GMT Subject: CN=CFBCB03F2DABC8BB2E12E5DCDFEFA6B826D30BDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ec:55:f1:68:3e:f3:b9:25:65:fd:60:66:0b: fc:ca:da:f3:a4:15:39:ce:6b:49:5d:6d:38:eb:54: 83:40:78:94:f9:15:91:0a:12:6c:91:12:99:fb:b7: fa:58:50:88:f9:04:f9:bb:46:fd:e1:7b:4d:9c:d0: 17:94:d1:58:43:db:7f:8c:3e:dc:3b:55:c8:45:47: 8d:da:e2:f7:d4:55:a6:56:8c:a1:b6:86:51:6c:a8: 95:5e:f8:63:8c:00:0e:75:ac:39:35:13:2b:63:ee: c2:37:e3:84:c3:97:3c:80:7b:cc:40:9c:ee:b8:62: 31:bc:21:30:56:a8:df:5d:32:b6:87:d1:e1:6a:60: 62:e5:17:fe:14:4c:5e:da:a5:82:cc:98:36:eb:38: 03:09:26:1c:30:be:bf:c8:7a:53:6c:47:f2:d0:76: 06:46:da:f2:4d:3e:35:8b:99:10:55:b6:cf:33:8c: 01:28:37:1d:c4:68:d8:92:d3:34:e9:1d:99:75:e7: 0e:b0:34:fb:5e:b5:6c:eb:72:49:dd:fa:9e:40:11: 1f:7e:85:19:50:d7:5d:b6:62:95:18:ee:89:da:3c: ae:b1:83:4e:d0:e3:55:6b:f3:ee:7c:35:9b:e4:1c: 3b:04:81:3c:8e:be:e2:4c:9e:63:5e:0d:87:80:94: 1b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:BC:B0:3F:2D:AB:C8:BB:2E:12:E5:DC:DF:EF:A6:B8:26:D3:0B:DD X509v3 Authority Key Identifier: keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:af:66:5c:c2:aa:09:ca:04:40:a7:f5:04:94:2f:10:66:d2: 71:ca:bb:99:4e:ec:db:7a:2a:aa:9f:e0:25:2b:23:ae:99:c4: 8d:a2:57:a5:bb:0d:5f:b0:80:21:1a:24:25:0e:29:58:fe:e9: bf:75:d8:1d:1f:05:4c:14:c2:5b:d2:4f:65:72:24:cf:bb:80: cd:29:1b:8b:4c:b2:15:3e:82:01:2d:c1:d0:1c:54:32:52:2d: 2f:a6:d8:98:d8:d1:de:36:11:42:75:e2:52:eb:17:e6:8a:84: 28:45:20:29:fd:a3:65:d5:fd:57:22:f1:c2:64:4f:3d:c5:55: 22:df:ef:e4:4b:b1:25:98:81:16:2c:b7:71:11:8e:6a:48:5e: ab:07:aa:fc:4f:cf:43:02:39:78:a5:2d:65:83:1b:15:0d:41: e0:16:e1:07:db:5c:9e:c0:ca:bc:bc:69:25:29:79:a4:2b:87: 8f:ec:4f:fd:0a:f5:41:50:8f:b5:22:51:84:a6:c2:a1:e2:e0: 5d:32:72:7f:d3:81:e4:9e:35:59:fe:b7:9b:a1:c4:ee:0e:4d: 97:24:e0:15:cb:6e:45:c2:b8:c5:63:9a:4c:90:d5:c3:65:21: 20:d4:67:f1:59:f5:0d:0a:28:cb:82:ea:1f:93:ec:1c:a8:e3: 51:32:3b:67 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIo8FACdknQpPjvVspcXpANFFLMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTIwNWViZjA2NWZjNDkyOWYxODAyNjYyYWU2MmQ3Zjk3 NjI2MDBlNjAeFw0yNjA5MjIxNDI1NDdaFw0yNjA5MjMxNTA0NDdaMDMxMTAvBgNV BAMTKENGQkNCMDNGMkRBQkM4QkIyRTEyRTVEQ0RGRUZBNkI4MjZEMzBCREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu7FXxaD7zuSVl/WBmC/zK2vOk FTnOa0ldbTjrVINAeJT5FZEKEmyREpn7t/pYUIj5BPm7Rv3he02c0BeU0VhD23+M Ptw7VchFR43a4vfUVaZWjKG2hlFsqJVe+GOMAA51rDk1Eytj7sI344TDlzyAe8xA nO64YjG8ITBWqN9dMraH0eFqYGLlF/4UTF7apYLMmDbrOAMJJhwwvr/IelNsR/LQ dgZG2vJNPjWLmRBVts8zjAEoNx3EaNiS0zTpHZl15w6wNPtetWzrcknd+p5AER9+ hRlQ1122YpUY7onaPK6xg07Q41Vr8+58NZvkHDsEgTyOvuJMnmNeDYeAlBudAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUz7ywPy2ryLsuEuXc3++muCbTC90wHwYDVR0j BBgwFoAU4gXr8GX8SSnxgCZirmLX+XYmAOYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYwYmUzZTEtODU0ZS00NjYyLTkyZTgtMDI4OTUwZmY1 N2ZlLzAvRTIwNUVCRjA2NUZDNDkyOUYxODAyNjYyQUU2MkQ3Rjk3NjI2MDBFNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRnWHI4R1g4U1NueGdDWmlybUxYLVhZ bUFPWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjBiZTNlMS04 NTRlLTQ2NjItOTJlOC0wMjg5NTBmZjU3ZmUvMC9FMjA1RUJGMDY1RkM0OTI5RjE4 MDI2NjJBRTYyRDdGOTc2MjYwMEU2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALa9mXMKqCcoEQKf1BJQv EGbSccq7mU7s23oqqp/gJSsjrpnEjaJXpbsNX7CAIRokJQ4pWP7pv3XYHR8FTBTC W9JPZXIkz7uAzSkbi0yyFT6CAS3B0BxUMlItL6bYmNjR3jYRQnXiUusX5oqEKEUg Kf2jZdX9VyLxwmRPPcVVIt/v5EuxJZiBFiy3cRGOakheqweq/E/PQwI5eKUtZYMb FQ1B4BbhB9tcnsDKvLxpJSl5pCuHj+xP/Qr1QVCPtSJRhKbCoeLgXTJyf9OB5J41 Wf63m6HE7g5NlyTgFctuRcK4xWOaTJDVw2UhINRn8Vn1DQooy4LqH5PsHKjjUTI7 Zw== -----END CERTIFICATE-----Generated at Tue Sep 22 23:46:25 2026 by rpki-client