$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft File: E205EBF065FC4929F1802662AE62D7F9762600E6.mft (raw, json) Hash identifier: yJEqI2jZqFTNdVG5E7llWRpmuR4qYhgv+6zCNG80MTA= Subject key identifier: D0:EF:6C:9A:45:7A:D4:D9:51:6B:14:5D:7F:A3:0D:4D:03:62:E1:5F Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6 Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6 Certificate serial: 2EA10ABEEB2808A589B50F022B3A7BCAA4181261 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft Manifest number: 025D Signing time: Tue 12 May 2026 15:04:50 +0000 Manifest this update: Tue 12 May 2026 14:59:50 +0000 Manifest next update: Wed 13 May 2026 17:41:50 +0000 Files and hashes: 1: 326130663a356663303a6265643a3a2f34382d3438203d3e20323035303336.roa (hash: Vn0tNJq84yvhpEx3djvegd0qElXvUXIj3d10CpoBDS8=) 2: 39312e3230392e34382e302f32342d3234203d3e2034363337.roa (hash: 4+D5jdmTDYB1GvCAU0z5GBGlSPW7Q/zpduO0wdWv8pU=) 3: 326130663a356663303a623030623a3a2f34382d3438203d3e20323035303336.roa (hash: dtubQqytFEqkt8TqTYJ+KlZgpXqOEEfNHG9KMyAKroE=) 4: 326130663a356663303a6665653a3a2f34382d3438203d3e20323035303336.roa (hash: sgKb1dwb+yOP2QySpduAJeLZbiJJdLEfbfVpO0+8Lgg=) 5: 326130663a356663303a6164643a3a2f34382d3438203d3e20323035303336.roa (hash: N543k0DcGiJuxubeGma9GZg+VhMwbPVS9ShNVwfZl30=) 6: 326130663a356663303a6461643a3a2f34382d3438203d3e20323035303336.roa (hash: FjMn5kgc0Y1vdPNQCAd4cKVxUcNaP4msdjwOhjOI4iE=) 7: 39312e3230392e35382e302f32342d3234203d3e20323032373035.roa (hash: PK2aFR1vuXxLprCpeWciXwI6HhgJ2xTabit5aAcYEng=) 8: 326130663a356663303a626162613a3a2f34382d3438203d3e20323035303336.roa (hash: kdDGBWrURu4f0ClnA4SfgsI29M2UtK1sJ9ldbUvOvNc=) 9: 326130663a356663303a646561643a3a2f34382d3438203d3e20323035303336.roa (hash: Z7YS72AkRUhmGE/8eVCwX/QArQ7kzj3DMVCvF8nhupE=) 10: 39312e3230392e34302e302f32342d3234203d3e203436383434.roa (hash: lOyC9nhHln4w/6aFWRWEGti2qbnJIh38POtRvVGBI4s=) 11: 326130663a356663303a6465623a3a2f34382d3438203d3e20323035303336.roa (hash: HGgyYO79YRPv5eTIvRCSkvT+uzFYIDLIXRArnhiRVzA=) 12: 326130663a356663303a646561663a3a2f34382d3438203d3e20323035303336.roa (hash: nBnCDOBWFR9glmAsUSRrLmDkLZa6Zi7bYUkIoT7Lpvs=) 13: 326130663a356663303a636166653a3a2f34382d3438203d3e20323035303336.roa (hash: SIzDkF7YYsoaU9vFR/am7daSl1S+0BBZdMp9c5ogCY8=) 14: 326130663a356663303a663030643a3a2f34382d3438203d3e20323035303336.roa (hash: Xgs2aXZ2twwalLnMnwHKHrLdiNgmex+4PLid272RcXc=) 15: 326130663a356663303a6163653a3a2f34382d3438203d3e20323035303336.roa (hash: s62/iVKVlW2KdVyTR+Xnv457Z0j5+aZNRyV7RtkAKNQ=) 16: 326130663a356663303a6261643a3a2f34382d3438203d3e20323035303336.roa (hash: tvkflaFeVW3sd8cXnqPd3goXjSItIqLYbambS6E6g9M=) 17: E205EBF065FC4929F1802662AE62D7F9762600E6.crl (hash: c1JlZJajGRvqBcrrXGO+9EQqXXFwnc6N7bHynYVYz6A=) 18: 39312e3230392e35302e302f32342d3234203d3e20323039333732.roa (hash: LfqYMzkh476Ki7VQsqODx8QNPNDEFujJRyehaY4kEpM=) 19: 326130663a356663303a633064653a3a2f34382d3438203d3e20323035303336.roa (hash: vwuw8BagjBJB+QjPivE2w5i9soU6pwd3DUm4jYukQKs=) 20: 326130663a356663303a646565643a3a2f34382d3438203d3e20323035303336.roa (hash: 6WyHSY5Xp60q1IE95V4h6lwOICpnxsevWtnXKH+E1RA=) 21: 326130663a356663303a626162653a3a2f34382d3438203d3e20323035303336.roa (hash: BEzvo1oTT3h/yITGofAX+DfQt9t+mraGyg3xFdVKM2I=) 22: 326130663a356663303a666565643a3a2f34382d3438203d3e20323035303336.roa (hash: xpwIwfTkmJ6MVFD7/8ThvhoBcV+rx30IkMkw3EnowGM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 17:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:a1:0a:be:eb:28:08:a5:89:b5:0f:02:2b:3a:7b:ca:a4:18:12:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6 Validity Not Before: May 12 14:59:50 2026 GMT Not After : May 13 17:41:50 2026 GMT Subject: CN=D0EF6C9A457AD4D9516B145D7FA30D4D0362E15F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:cd:1b:7a:e4:ad:81:f1:c1:2f:d6:c4:44:2e: 3a:ae:e2:a2:cb:7f:aa:ec:90:92:32:09:46:e5:f6: 14:3a:18:c8:ae:1e:be:17:1a:52:1e:46:ee:c8:3f: 2e:97:98:ff:ff:6c:ae:3e:99:3e:58:45:39:6b:76: 74:e8:fb:8b:22:22:9d:22:3c:1c:01:24:20:3d:a1: 16:42:3c:3b:02:07:d2:e5:e8:9b:f6:4c:cc:00:0f: f9:6c:e8:d5:cc:ac:ac:e7:ab:db:b5:59:ee:1b:fd: 3b:15:bd:d0:ed:4e:00:63:e7:fb:82:be:f4:8b:3f: 8e:e3:2e:74:9c:ca:fd:0e:81:41:71:7f:6d:e6:25: 74:cb:f0:04:96:93:7a:81:66:3a:44:06:56:bb:27: 24:19:03:e4:84:52:f0:a7:96:f3:81:54:5b:76:21: 54:fd:44:a3:85:69:23:82:36:55:26:27:9d:b9:3a: ff:66:9b:75:b5:33:0b:64:85:52:ce:74:cd:94:2b: b7:76:3e:e5:b1:1c:2a:7b:6e:68:6d:a5:2e:00:de: 22:5a:8f:e1:41:e6:d0:07:a7:db:dc:dc:5c:70:d1: 62:17:20:08:5d:f5:d3:63:49:81:6f:e2:91:0b:07: 5c:c1:c9:7c:a1:df:9c:22:6f:8d:d4:59:25:f9:eb: b5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:EF:6C:9A:45:7A:D4:D9:51:6B:14:5D:7F:A3:0D:4D:03:62:E1:5F X509v3 Authority Key Identifier: keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:32:4b:8b:59:6e:47:98:3b:29:37:4e:47:17:43:79:09:d9: 0a:32:0b:83:e2:67:f7:44:2f:4f:1c:00:df:67:d4:11:e7:94: 8d:e9:5e:3e:50:3b:cd:90:f0:ca:56:4c:bc:db:74:36:fe:02: c5:97:58:93:cd:f1:24:36:a4:07:ee:d7:84:99:f2:88:7b:83: 8b:04:24:07:e5:19:9d:b3:cc:a9:88:51:55:c8:52:f4:08:08: 6d:43:5c:84:90:3c:20:66:75:22:e6:69:ab:c2:35:1a:21:84: 3d:b2:32:98:e1:f7:30:7a:ca:99:28:49:74:4a:fa:db:aa:86: e6:3c:89:d2:6e:3f:70:42:5c:98:cd:19:7a:a1:7f:06:10:d0: 39:b9:dc:1e:82:55:5f:d4:52:66:dc:14:c2:76:c0:a4:63:71: 23:c4:b0:31:cc:07:a7:7a:3b:f5:8c:27:36:b1:ff:a9:6e:c8: 94:09:31:e1:e0:61:40:97:2e:03:d0:4d:1e:03:06:c2:af:2b: a8:0f:c5:04:76:2c:8d:07:ee:64:5a:99:e3:50:e5:c5:5a:ca: 9e:f6:97:71:ec:16:dd:7e:49:cf:b1:9b:f8:68:f6:4c:ff:c6: a9:cc:a4:eb:57:d9:69:e1:e4:1e:90:8b:d1:69:71:8f:6a:c2: aa:80:ba:5e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULqEKvusoCKWJtQ8CKzp7yqQYEmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTIwNWViZjA2NWZjNDkyOWYxODAyNjYyYWU2MmQ3Zjk3 NjI2MDBlNjAeFw0yNjA1MTIxNDU5NTBaFw0yNjA1MTMxNzQxNTBaMDMxMTAvBgNV BAMTKEQwRUY2QzlBNDU3QUQ0RDk1MTZCMTQ1RDdGQTMwRDREMDM2MkUxNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhzRt65K2B8cEv1sRELjqu4qLL f6rskJIyCUbl9hQ6GMiuHr4XGlIeRu7IPy6XmP//bK4+mT5YRTlrdnTo+4siIp0i PBwBJCA9oRZCPDsCB9Ll6Jv2TMwAD/ls6NXMrKznq9u1We4b/TsVvdDtTgBj5/uC vvSLP47jLnScyv0OgUFxf23mJXTL8ASWk3qBZjpEBla7JyQZA+SEUvCnlvOBVFt2 IVT9RKOFaSOCNlUmJ525Ov9mm3W1MwtkhVLOdM2UK7d2PuWxHCp7bmhtpS4A3iJa j+FB5tAHp9vc3Fxw0WIXIAhd9dNjSYFv4pELB1zByXyh35wib43UWSX567V9AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU0O9smkV61NlRaxRdf6MNTQNi4V8wHwYDVR0j BBgwFoAU4gXr8GX8SSnxgCZirmLX+XYmAOYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYwYmUzZTEtODU0ZS00NjYyLTkyZTgtMDI4OTUwZmY1 N2ZlLzAvRTIwNUVCRjA2NUZDNDkyOUYxODAyNjYyQUU2MkQ3Rjk3NjI2MDBFNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRnWHI4R1g4U1NueGdDWmlybUxYLVhZ bUFPWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjBiZTNlMS04 NTRlLTQ2NjItOTJlOC0wMjg5NTBmZjU3ZmUvMC9FMjA1RUJGMDY1RkM0OTI5RjE4 MDI2NjJBRTYyRDdGOTc2MjYwMEU2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhTJLi1luR5g7KTdORxdD eQnZCjILg+Jn90QvTxwA32fUEeeUjelePlA7zZDwylZMvNt0Nv4CxZdYk83xJDak B+7XhJnyiHuDiwQkB+UZnbPMqYhRVchS9AgIbUNchJA8IGZ1IuZpq8I1GiGEPbIy mOH3MHrKmShJdEr626qG5jyJ0m4/cEJcmM0ZeqF/BhDQObncHoJVX9RSZtwUwnbA pGNxI8SwMcwHp3o79YwnNrH/qW7IlAkx4eBhQJcuA9BNHgMGwq8rqA/FBHYsjQfu ZFqZ41DlxVrKnvaXcewW3X5Jz7Gb+Gj2TP/Gqcyk61fZaeHkHpCL0Wlxj2rCqoC6 Xg== -----END CERTIFICATE-----Generated at Wed May 13 06:50:36 2026 by rpki-client