$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft File: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft (raw, json) Hash identifier: tE7SCzYvWDbFF9BuEBO83yFcAIyUYp8bQSVKV0EJIZI= Subject key identifier: 57:69:AD:1B:BC:B7:95:CE:17:F5:1D:4E:49:EA:28:A6:02:20:22:52 Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Certificate serial: 098D86ED38A3EA1B15143E8FC99D53C320C5254E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft Manifest number: 02C6 Signing time: Sat 28 Mar 2026 01:35:33 +0000 Manifest this update: Sat 28 Mar 2026 01:30:33 +0000 Manifest next update: Sun 29 Mar 2026 03:56:33 +0000 Files and hashes: 1: 33312e32322e3130362e302f32342d3234203d3e20323133353032.roa (hash: gMhOzO7mxft8aHHqMyhMEvoyI4x3AcVBhgkY3Yc2Ryc=) 2: 3130332e34392e3133312e302f32342d3234203d3e20323133373131.roa (hash: 0KQImRtVxQSlo2IkiWEm4Ta1ecdBVyx0gErMixeusbs=) 3: 33312e32322e3131312e302f32342d3234203d3e20323135333535.roa (hash: brok2XUOzC0OAQs7efh1lP/TIOrHW70pJohRfs3tgEM=) 4: 3130332e34392e3132392e302f32342d3234203d3e20313533373836.roa (hash: 8ciOgQf/5f2kkiTl0Q7pGFYfq76YJlE+KlbE9/JeEuM=) 5: 33312e32322e3130382e302f32342d3234203d3e203432383331.roa (hash: 8yRIzyX7kSL5wlZucsqrW2Cnq9iyHa3XujSoVf8z1CY=) 6: 34332e3233302e38352e302f32342d3234203d3e20323132363639.roa (hash: vgObUGnSREXD+ZGKD48TBidzsDD4bb41p0YUFbXX2ak=) 7: 34332e3233302e38352e302f32342d3234203d3e20323131343430.roa (hash: 7bNrxcvUZ17BVt7tVCbbxISD5HLTvxOeQrmUPkwlG/E=) 8: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl (hash: 4pKKul6HjjDHDpCgPwUue/GZekI4ePkER/AGWZX0euY=) 9: 33312e32322e3130342e302f32342d3234203d3e20313938303230.roa (hash: 2c/Q6mL57WPxOvD74dnFYEhVwjt0QpjY04YbOcxeQJ8=) 10: 33312e32322e3130372e302f32342d3234203d3e20313337353137.roa (hash: zucU5bamNfYRw/esvivyzaXHMAl8N0xQ+Q3coI+3JvA=) 11: 34332e3233302e38342e302f32342d3234203d3e20383334.roa (hash: N+DNH3cZSUB3/2IAiDvrSRIBUTXQrXsxpW7BekUy55w=) 12: 3130332e34392e3133312e302f32342d3234203d3e20313534343038.roa (hash: uNydLTQQX3HfUttLHpAQztbzmsLo2FwUjxcM/0z5ejA=) 13: 33312e32322e3130392e302f32342d3234203d3e203432383331.roa (hash: uRUTbbdZ8AYVGvK3CKTe3KYxaaV1m1bGyvfgh/rstUI=) 14: 3130332e34392e3133302e302f32342d3234203d3e20313534333137.roa (hash: w3+vUGEtKd/ySG37/woRjizj6qLoxAf3VQ2OqShH1Xo=) 15: 34332e3233302e38362e302f32332d3234203d3e2033343931.roa (hash: e3yeUvIbF4YF0fCErBT4H99U9jC9XkRZUBr3LRE9AVI=) 16: 3130332e34392e3132382e302f32342d3234203d3e20313534303439.roa (hash: RP7fF4ljaFnG1QBw6wHJTYmQiSzsC+UtOPXQULgrH/c=) 17: 33312e32322e3131302e302f32342d3234203d3e20323038393035.roa (hash: GDspqRij6MiNPh7udQ2b5uDlkV2tbpp6r9PQ/alfk6o=) 18: 3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa (hash: gI3QMk1nxnVJ3ar9nDADeDjafrF5rxSYgoW75rlLkBk=) 19: 33312e32322e3130352e302f32342d3234203d3e20323030383539.roa (hash: nw9YLvM7zXyP2kzR5sTyAuZwaZ0QV0qAmB4zg2Dg+gg=) 20: 3130332e34392e3133312e302f32342d3234203d3e20313338333634.roa (hash: PCBT1S5SsQNvPExnIxpGrOJnC4Zxkw3ilANCZAM8stA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 00:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:8d:86:ed:38:a3:ea:1b:15:14:3e:8f:c9:9d:53:c3:20:c5:25:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Validity Not Before: Mar 28 01:30:33 2026 GMT Not After : Mar 29 03:56:33 2026 GMT Subject: CN=5769AD1BBCB795CE17F51D4E49EA28A602202252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:82:ee:e7:16:61:fa:3e:1e:d7:0b:c7:44:3a: b0:66:f3:fd:9f:9d:32:ed:5b:83:39:74:4e:9a:f3: dd:41:ed:68:e3:ba:76:c1:af:5a:4d:e9:6f:0e:8b: 2a:90:6e:c1:25:c9:49:2f:f5:95:87:50:6e:7c:d6: cb:26:f0:9f:2b:a1:25:5e:63:81:d4:6a:31:c2:42: 89:56:0c:66:95:67:b0:5a:07:01:8b:61:ff:a0:b9: 0c:74:26:59:25:b6:4a:8c:64:96:99:f8:ef:b8:64: 37:dc:b0:b3:ac:dd:f8:bd:1f:58:e9:48:0c:0c:04: 56:f8:5e:cb:37:08:9b:3a:a9:1c:fe:99:67:bc:7d: 62:56:40:bb:b1:5b:42:44:2e:77:51:c0:b4:94:a4: 4e:bf:44:ba:80:1e:b1:0d:67:11:fc:1f:89:f0:a4: 33:96:7f:b6:21:6f:f1:d0:a5:a3:78:69:cb:44:87: 52:1c:cd:be:01:e4:a4:fb:f7:b5:43:96:71:92:d9: 33:25:68:5e:04:3b:00:53:b7:56:69:b1:b0:11:4b: 0a:ca:a1:e6:35:f9:2c:b1:db:81:6c:95:73:3c:7a: c5:29:50:2c:2b:62:ad:fd:4d:6c:8b:f6:15:af:a6: 61:34:e1:61:d5:ba:b0:20:fb:6f:00:21:d3:b7:28: 62:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:69:AD:1B:BC:B7:95:CE:17:F5:1D:4E:49:EA:28:A6:02:20:22:52 X509v3 Authority Key Identifier: keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:04:1a:2b:2b:07:f8:b7:b2:0e:b4:06:17:75:56:9d:81:f6: 76:85:53:ef:bf:bf:9b:d2:95:d8:4c:91:36:95:81:17:93:b1: 50:60:2a:c0:07:95:a7:27:c1:cb:f5:a4:5c:f4:34:c7:24:84: a8:e7:8b:81:fd:8d:a0:fb:9a:dc:66:4e:9a:c2:e8:47:e3:42: a0:40:8c:64:9c:c5:b2:71:13:b5:0c:3a:3c:e0:0b:f5:db:8b: 05:25:bf:05:c7:46:4a:9f:1e:a2:70:f0:36:2f:01:1a:6f:40: 50:1e:0d:03:77:eb:1a:61:d6:ab:78:b5:6b:ca:ef:0b:1d:f0: bb:c4:3f:58:de:f1:79:68:de:f9:95:5e:7c:e5:24:55:8e:92: 08:4e:7d:ed:34:8f:4b:04:19:d5:78:9f:52:cb:27:60:9c:24: 54:13:1d:0c:07:48:60:61:14:ef:6a:9d:07:5a:a1:30:1e:8c: 35:b3:e3:00:14:b0:a9:6b:26:d8:52:3c:0d:ab:1e:6a:21:08: 11:ab:95:c4:b1:bd:4c:fc:cf:76:99:53:e6:32:6e:35:19:a6: 92:10:fc:fc:a6:e6:33:14:0f:54:3b:cb:bc:cb:d9:a7:22:21: 12:a1:e1:dd:78:96:af:ba:f8:e1:74:ac:87:87:02:b7:c2:c2: e8:33:38:a4 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUCY2G7Tij6hsVFD6PyZ1TwyDFJU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw YWVhYjI5ZDAeFw0yNjAzMjgwMTMwMzNaFw0yNjAzMjkwMzU2MzNaMDMxMTAvBgNV BAMTKDU3NjlBRDFCQkNCNzk1Q0UxN0Y1MUQ0RTQ5RUEyOEE2MDIyMDIyNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCygu7nFmH6Ph7XC8dEOrBm8/2f nTLtW4M5dE6a891B7WjjunbBr1pN6W8OiyqQbsElyUkv9ZWHUG581ssm8J8roSVe Y4HUajHCQolWDGaVZ7BaBwGLYf+guQx0JlkltkqMZJaZ+O+4ZDfcsLOs3fi9H1jp SAwMBFb4Xss3CJs6qRz+mWe8fWJWQLuxW0JELndRwLSUpE6/RLqAHrENZxH8H4nw pDOWf7Yhb/HQpaN4actEh1Iczb4B5KT797VDlnGS2TMlaF4EOwBTt1ZpsbARSwrK oeY1+Syx24FslXM8esUpUCwrYq39TWyL9hWvpmE04WHVurAg+28AIdO3KGJdAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUV2mtG7y3lc4X9R1OSeoopgIgIlIwHwYDVR0j BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2 NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy cXNwMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYWZlYmRiNC02 ZjBiLTQwNGItOThlMi1hMjZiZTk0YTY2MjAvMC9DNzcwRjQzMzU4Qjk3QkEwQUE5 QkRDNjJCQkQ1MTFFOTBBRUFCMjlELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAQaKysH+LeyDrQGF3VW nYH2doVT77+/m9KV2EyRNpWBF5OxUGAqwAeVpyfBy/WkXPQ0xySEqOeLgf2NoPua 3GZOmsLoR+NCoECMZJzFsnETtQw6POAL9duLBSW/BcdGSp8eonDwNi8BGm9AUB4N A3frGmHWq3i1a8rvCx3wu8Q/WN7xeWje+ZVefOUkVY6SCE597TSPSwQZ1XifUssn YJwkVBMdDAdIYGEU72qdB1qhMB6MNbPjABSwqWsm2FI8DaseaiEIEauVxLG9TPzP dplT5jJuNRmmkhD8/KbmMxQPVDvLvMvZpyIhEqHh3XiWr7r44XSsh4cCt8LC6DM4 pA== -----END CERTIFICATE-----Generated at Sat Mar 28 10:32:33 2026 by rpki-client