$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft File: E205EBF065FC4929F1802662AE62D7F9762600E6.mft (raw, json) Hash identifier: R6VYqqdZJ67PEbUutQHFOZ3svVb9RbNiPVgFkxEdMyE= Subject key identifier: 06:10:3C:0E:1E:A8:05:7E:49:B4:32:F0:8E:DF:AA:F9:FA:7F:0B:7A Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6 Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6 Certificate serial: 15CF629B0E773D7EBB27C147294B2AB9BF597510 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft Manifest number: 021D Signing time: Wed 25 Mar 2026 17:01:10 +0000 Manifest this update: Wed 25 Mar 2026 16:56:10 +0000 Manifest next update: Thu 26 Mar 2026 17:55:10 +0000 Files and hashes: 1: 326130663a356663303a6164643a3a2f34382d3438203d3e20323035303336.roa (hash: N543k0DcGiJuxubeGma9GZg+VhMwbPVS9ShNVwfZl30=) 2: 326130663a356663303a626162613a3a2f34382d3438203d3e20323035303336.roa (hash: kdDGBWrURu4f0ClnA4SfgsI29M2UtK1sJ9ldbUvOvNc=) 3: 326130663a356663303a6265643a3a2f34382d3438203d3e20323035303336.roa (hash: Vn0tNJq84yvhpEx3djvegd0qElXvUXIj3d10CpoBDS8=) 4: 326130663a356663303a646565643a3a2f34382d3438203d3e20323035303336.roa (hash: 6WyHSY5Xp60q1IE95V4h6lwOICpnxsevWtnXKH+E1RA=) 5: 326130663a356663303a646561663a3a2f34382d3438203d3e20323035303336.roa (hash: nBnCDOBWFR9glmAsUSRrLmDkLZa6Zi7bYUkIoT7Lpvs=) 6: 39312e3230392e34382e302f32342d3234203d3e2034363337.roa (hash: 4+D5jdmTDYB1GvCAU0z5GBGlSPW7Q/zpduO0wdWv8pU=) 7: 326130663a356663303a663030643a3a2f34382d3438203d3e20323035303336.roa (hash: Xgs2aXZ2twwalLnMnwHKHrLdiNgmex+4PLid272RcXc=) 8: 326130663a356663303a633064653a3a2f34382d3438203d3e20323035303336.roa (hash: vwuw8BagjBJB+QjPivE2w5i9soU6pwd3DUm4jYukQKs=) 9: 326130663a356663303a646561643a3a2f34382d3438203d3e20323035303336.roa (hash: Z7YS72AkRUhmGE/8eVCwX/QArQ7kzj3DMVCvF8nhupE=) 10: 326130663a356663303a623030623a3a2f34382d3438203d3e20323035303336.roa (hash: dtubQqytFEqkt8TqTYJ+KlZgpXqOEEfNHG9KMyAKroE=) 11: 326130663a356663303a6163653a3a2f34382d3438203d3e20323035303336.roa (hash: s62/iVKVlW2KdVyTR+Xnv457Z0j5+aZNRyV7RtkAKNQ=) 12: 326130663a356663303a6461643a3a2f34382d3438203d3e20323035303336.roa (hash: FjMn5kgc0Y1vdPNQCAd4cKVxUcNaP4msdjwOhjOI4iE=) 13: 39312e3230392e35302e302f32342d3234203d3e20323039333732.roa (hash: LfqYMzkh476Ki7VQsqODx8QNPNDEFujJRyehaY4kEpM=) 14: 326130663a356663303a636166653a3a2f34382d3438203d3e20323035303336.roa (hash: SIzDkF7YYsoaU9vFR/am7daSl1S+0BBZdMp9c5ogCY8=) 15: 326130663a356663303a6261643a3a2f34382d3438203d3e20323035303336.roa (hash: tvkflaFeVW3sd8cXnqPd3goXjSItIqLYbambS6E6g9M=) 16: 326130663a356663303a666565643a3a2f34382d3438203d3e20323035303336.roa (hash: Qj8pflv8KszWoeUIqOpeKQUtZrsbyJDTmnxefpUjjlo=) 17: 326130663a356663303a6665653a3a2f34382d3438203d3e20323035303336.roa (hash: sgKb1dwb+yOP2QySpduAJeLZbiJJdLEfbfVpO0+8Lgg=) 18: 39312e3230392e34302e302f32342d3234203d3e203436383434.roa (hash: lOyC9nhHln4w/6aFWRWEGti2qbnJIh38POtRvVGBI4s=) 19: 326130663a356663303a626162653a3a2f34382d3438203d3e20323035303336.roa (hash: BEzvo1oTT3h/yITGofAX+DfQt9t+mraGyg3xFdVKM2I=) 20: 39312e3230392e35382e302f32342d3234203d3e20323032373035.roa (hash: PK2aFR1vuXxLprCpeWciXwI6HhgJ2xTabit5aAcYEng=) 21: 326130663a356663303a6465623a3a2f34382d3438203d3e20323035303336.roa (hash: HGgyYO79YRPv5eTIvRCSkvT+uzFYIDLIXRArnhiRVzA=) 22: E205EBF065FC4929F1802662AE62D7F9762600E6.crl (hash: 9QxFc3fkJAGcG1TUBX4cYCLoD2gB3jt5EWaQkZWxrOY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 17:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:cf:62:9b:0e:77:3d:7e:bb:27:c1:47:29:4b:2a:b9:bf:59:75:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6 Validity Not Before: Mar 25 16:56:10 2026 GMT Not After : Mar 26 17:55:10 2026 GMT Subject: CN=06103C0E1EA8057E49B432F08EDFAAF9FA7F0B7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fc:78:44:89:29:33:4a:1d:a4:76:51:5f:af: fc:73:c3:50:40:a1:b8:66:1a:a7:a2:ee:7a:70:70: 9c:d8:36:3e:29:38:39:02:7f:93:90:38:e8:da:a2: bf:ec:c5:07:fb:7d:c5:1e:fd:4d:00:eb:ff:78:ed: ec:61:5d:ea:86:d8:37:cd:0d:3b:e8:c9:2b:0e:7e: d5:21:3b:4a:91:2e:9f:e9:02:d9:b5:ce:df:23:94: b3:0c:b0:31:7b:35:8c:91:7d:23:34:f1:8a:3d:48: f3:09:c1:83:f6:c9:c3:f8:17:73:d1:fb:93:6d:3a: 3a:10:f9:2a:c8:2f:99:68:b8:ac:ca:b3:cc:01:4b: a8:d5:8c:a6:1b:88:6d:87:6b:93:ed:d3:eb:4e:d1: 5a:b6:c9:5b:24:f7:8f:72:b7:73:84:35:26:86:7d: 04:4c:8d:b6:f0:41:2c:a1:c2:7e:ad:48:81:7f:1f: a6:5f:56:70:11:4f:22:62:3d:68:fd:6a:8b:db:a9: 48:4f:3f:3f:a1:33:bd:3d:c2:a7:dd:00:77:ab:33: 6e:89:a7:41:71:86:98:e4:8c:ea:f9:a6:62:62:aa: fd:d8:75:6d:cd:2f:25:5e:3d:33:a2:17:00:e6:5f: a6:40:b7:60:c0:d3:01:a9:28:00:6d:e1:8d:1c:d3: 6d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:10:3C:0E:1E:A8:05:7E:49:B4:32:F0:8E:DF:AA:F9:FA:7F:0B:7A X509v3 Authority Key Identifier: keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:34:9b:c9:71:83:d9:64:bd:d6:8e:1a:fa:31:df:49:49:69: da:86:8a:f8:a2:d8:62:65:29:ba:db:9c:60:ca:f9:ab:c1:f8: 39:29:b7:56:ea:b6:00:56:80:4f:74:65:a7:d9:08:53:51:d0: d5:73:55:03:60:2f:65:59:14:3b:09:7a:e1:29:8c:17:97:30: bb:8c:2e:37:c6:9f:c7:c5:cc:85:f1:de:2d:25:82:40:f7:17: a2:4f:76:63:c3:53:fc:89:d2:60:a2:2d:2e:08:60:e0:fe:84: c2:62:e4:b6:18:0a:9f:bc:80:d3:49:14:d4:23:ff:fd:cf:0f: c5:9f:36:01:d7:cc:da:b3:89:45:fc:24:e5:02:db:5d:d8:1d: e1:10:1d:b7:a3:46:d8:af:2e:1f:06:5d:2b:ea:7f:b5:79:2c: af:ab:b8:c6:10:f2:b0:fc:71:4b:02:53:8b:c9:77:12:14:ee: 37:8e:94:c1:60:03:04:29:9a:06:0d:92:d2:ad:ff:6b:22:3a: 90:f3:ed:d1:3a:5d:8c:95:63:be:89:9d:93:f9:85:43:76:e5: f9:10:2c:16:86:50:1f:2c:36:9e:55:6b:50:05:1b:49:23:52: b5:74:38:b0:6b:13:11:5f:1f:61:67:1a:f5:9e:fc:4a:b6:71: 39:0f:ed:f2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFc9imw53PX67J8FHKUsqub9ZdRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTIwNWViZjA2NWZjNDkyOWYxODAyNjYyYWU2MmQ3Zjk3 NjI2MDBlNjAeFw0yNjAzMjUxNjU2MTBaFw0yNjAzMjYxNzU1MTBaMDMxMTAvBgNV BAMTKDA2MTAzQzBFMUVBODA1N0U0OUI0MzJGMDhFREZBQUY5RkE3RjBCN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz/HhEiSkzSh2kdlFfr/xzw1BA obhmGqei7npwcJzYNj4pODkCf5OQOOjaor/sxQf7fcUe/U0A6/947exhXeqG2DfN DTvoySsOftUhO0qRLp/pAtm1zt8jlLMMsDF7NYyRfSM08Yo9SPMJwYP2ycP4F3PR +5NtOjoQ+SrIL5louKzKs8wBS6jVjKYbiG2Ha5Pt0+tO0Vq2yVsk949yt3OENSaG fQRMjbbwQSyhwn6tSIF/H6ZfVnARTyJiPWj9aovbqUhPPz+hM709wqfdAHerM26J p0FxhpjkjOr5pmJiqv3YdW3NLyVePTOiFwDmX6ZAt2DA0wGpKABt4Y0c020bAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUBhA8Dh6oBX5JtDLwjt+q+fp/C3owHwYDVR0j BBgwFoAU4gXr8GX8SSnxgCZirmLX+XYmAOYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYwYmUzZTEtODU0ZS00NjYyLTkyZTgtMDI4OTUwZmY1 N2ZlLzAvRTIwNUVCRjA2NUZDNDkyOUYxODAyNjYyQUU2MkQ3Rjk3NjI2MDBFNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRnWHI4R1g4U1NueGdDWmlybUxYLVhZ bUFPWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjBiZTNlMS04 NTRlLTQ2NjItOTJlOC0wMjg5NTBmZjU3ZmUvMC9FMjA1RUJGMDY1RkM0OTI5RjE4 MDI2NjJBRTYyRDdGOTc2MjYwMEU2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAzSbyXGD2WS91o4a+jHf SUlp2oaK+KLYYmUputucYMr5q8H4OSm3Vuq2AFaAT3Rlp9kIU1HQ1XNVA2AvZVkU Owl64SmMF5cwu4wuN8afx8XMhfHeLSWCQPcXok92Y8NT/InSYKItLghg4P6EwmLk thgKn7yA00kU1CP//c8PxZ82AdfM2rOJRfwk5QLbXdgd4RAdt6NG2K8uHwZdK+p/ tXksr6u4xhDysPxxSwJTi8l3EhTuN46UwWADBCmaBg2S0q3/ayI6kPPt0TpdjJVj vomdk/mFQ3bl+RAsFoZQHyw2nlVrUAUbSSNStXQ4sGsTEV8fYWca9Z78SrZxOQ/t 8g== -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:25 2026 by rpki-client