$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft File: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft (raw, json) Hash identifier: MYlzqNTQ7z4CEol6Lspzw0p9qdyus6nB+QH5jGQOzJo= Subject key identifier: A1:14:80:83:63:CF:6F:4A:B1:BB:8F:9D:BF:2D:76:ED:40:BD:E1:5D Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Certificate serial: 3D5E1F744B4CB9F28A0E7B681221AF4BA2AE8685 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft Manifest number: 036A Signing time: Thu 10 Sep 2026 14:09:41 +0000 Manifest this update: Thu 10 Sep 2026 14:04:41 +0000 Manifest next update: Fri 11 Sep 2026 15:09:41 +0000 Files and hashes: 1: 352e3232362e3138382e302f32342d3234203d3e20313532313739.roa (hash: uJEDxZm1l0+YcyFuGRmcGjOe89y2pFVQh//OE0DuSL8=) 2: 3137382e3133322e3139342e302f32342d3234203d3e20313432323430.roa (hash: 1tVTQ+2aIh5/Vu9xVe+cenxXb9IrlBFNf/WzUfLsjXA=) 3: 3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa (hash: LFoy9nvq32ZdqPmOf9YSI6suXdwdYoUwrv21WI7Aj/Y=) 4: 352e3232362e3138342e302f32342d3234203d3e20313532363938.roa (hash: fPaNTQa7GjqqhcJlXnMtXI5xWeKR+RzUagq8SES2muM=) 5: 3130392e3233342e3230392e302f32342d3234203d3e20333935373933.roa (hash: O58U7PWZy8imeyXfNYpolxNqqGk5vQ/pfpTujarGxIw=) 6: 3130392e3233342e3230392e302f32342d3234203d3e20323134313433.roa (hash: kfImODVrJ9DJfBDHIqmGZX0zk9Yq1KND0WLu9uNQXdY=) 7: 3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa (hash: 18uWoZxLQSNFgorcRVHtw6ibhqjhBqTrkSvVXqFqM+Y=) 8: 3137382e3133322e3139322e302f32342d3234203d3e203134363138.roa (hash: EDWUUKhrOtu3UMAllaeIt1ZR8GH4cYzCKJWn6QZal8k=) 9: 3130392e3233342e3231322e302f32342d3234203d3e20313937353337.roa (hash: Lxa7aR1NsNsgX0Y0Me+SOrl9Sd6ODfPmrUUHY7uRFAg=) 10: 352e3232362e3138372e302f32342d3234203d3e203331383938.roa (hash: MBztO8w9bm5wzqzKDfI65gL2GObfIUagWkGy+v8p1Mw=) 11: 3137382e3133322e3139352e302f32342d3234203d3e203232343237.roa (hash: QgvmMFuUdAiqbiI7YJRIvnHFDWl3E8S1w1OF0shY8uU=) 12: 352e3232362e3139302e302f32342d3234203d3e20343032323635.roa (hash: HgLcsaXc8NU0IQnjr5slaD2eRW6BWSzmDjuz7IxzdcA=) 13: 352e3232362e3138392e302f32342d3234203d3e20323134343332.roa (hash: K8tasVMZPC8XCnfASfPGHgydq7gyNfePU1OJ6FJ9+yw=) 14: 3137382e3133322e3139332e302f32342d3234203d3e20323138383239.roa (hash: qLaDwBI1BZ2zG398ZRVTsFr0j0hBs/moxNHBTZQAZ1w=) 15: 3130392e3233342e3231312e302f32342d3234203d3e203133333335.roa (hash: 3WrBrAOV7SjPMl8BInuI3B0KtzI0JvDAuGMIMq+S9D8=) 16: 352e3232362e3138362e302f32342d3234203d3e20323031313336.roa (hash: 9fdIPJo0eMjnKb22xK7IcX10k9v1+loDfWBv90zohJM=) 17: 3137382e3133322e3139382e302f32342d3234203d3e203133333335.roa (hash: aweSXhd8mJw0T/P7jNxc4m1Vtbpxw0PK6PNEOA0lb/w=) 18: 3130392e3233342e3230382e302f32342d3234203d3e203331383938.roa (hash: LDqZZoLow0mbDS+Axbw5uzgHB6hrJjPXmfZptqZ1ClQ=) 19: 352e3232362e3138352e302f32342d3234203d3e2034363337.roa (hash: EK5hsG3gRXHAek4iXi8s4jAj1cLZXBGuH9nPrYMwZyI=) 20: 3137382e3133322e3139362e302f32342d3234203d3e20323134343833.roa (hash: T+iZECI6Nf8vhVyjHs4Cq+4DAetjvDN8JYaeWCDcmBw=) 21: 3130392e3233342e3231322e302f32342d3234203d3e20313734.roa (hash: 9HNBf+LUgxtel5YdAqtqWUZ01j9gnH5Sgj9ujQE2GCs=) 22: 3137382e3133322e3139382e302f32342d3234203d3e20323635393139.roa (hash: u4r7X/suBx+FzLFBQvOSNxzBhjg3wd1M6uflDgVU6DA=) 23: 3137382e3133322e3139322e302f32342d3234203d3e203136353039.roa (hash: foBoaKUPeMOXyMdgjQODzIp3g1QrOeZIcU4rmaW6W0Y=) 24: 3130392e3233342e3231302e302f32342d3234203d3e203432383331.roa (hash: ORBhPdQs7bhbgbHqRNbRX9b7nVMMEM9/idQA84qjjeU=) 25: 3137382e3133322e3139392e302f32342d3234203d3e203631333137.roa (hash: V7It1R194wG2fKfWWlVdnzwed7rR2mdr0bGRnI9AxV4=) 26: 3130392e3233342e3231352e302f32342d3234203d3e20393733.roa (hash: xfnBgMCFpR8WsSmanu6oXx69cY6n9Ufmkf4lgYTGZHc=) 27: 3130392e3233342e3231342e302f32342d3234203d3e203433363431.roa (hash: +GFq+rHPW2NmU2P7WwLI7nlzu1G6+ACKfZdceph6rto=) 28: 3130392e3233342e3230392e302f32342d3234203d3e203235313630.roa (hash: JpGLComndw26SOL3sJbPNJ7i8ZI6iCFmvappx1PnQqM=) 29: 352e3232362e3139312e302f32342d3234203d3e20323135323338.roa (hash: oMT5W+1A+v1pwvSVM/yS6Grj9zILUfxp/QJKJB7R/M8=) 30: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl (hash: 03HnKV2zxrH1jS75iCvjr3RMs0v+UKXu+Zo1pD6q/7s=) 31: 3137382e3133322e3139372e302f32342d3234203d3e20313532363938.roa (hash: hA8cPcrbI9aiOxO/LyhsLHy3Y7htStp3QNllYHwtGlk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 15:09:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:5e:1f:74:4b:4c:b9:f2:8a:0e:7b:68:12:21:af:4b:a2:ae:86:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Validity Not Before: Sep 10 14:04:41 2026 GMT Not After : Sep 11 15:09:41 2026 GMT Subject: CN=A114808363CF6F4AB1BB8F9DBF2D76ED40BDE15D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:29:1d:5e:c2:ba:e6:4c:32:cb:36:8a:d3:12: 68:cd:0c:6f:ed:f4:05:06:f7:05:62:f9:cd:2b:40: 42:d1:3e:d3:52:f5:0b:09:bf:5b:2b:64:84:93:c4: ef:00:74:d1:0b:47:66:27:b4:16:12:e3:d7:ce:8a: 40:72:8b:c6:34:d7:84:42:bd:d5:e2:5a:2e:25:4c: ac:29:d0:50:db:3b:5c:ea:f5:e3:20:b7:81:18:f5: be:fd:a8:57:01:cf:55:bd:8f:69:5e:43:79:be:29: c5:1e:5c:30:12:0d:a3:c3:5e:24:00:08:9a:1b:a3: 5f:15:47:93:55:87:46:69:1b:7a:43:2a:4d:72:70: ef:32:9e:f7:82:ca:af:12:d1:a8:c1:00:9f:e0:21: 7b:6c:66:39:f8:06:fc:63:db:fb:b4:a3:f5:27:fa: b6:d3:ae:c0:02:4e:a7:60:c3:68:b2:8c:4f:ca:4a: 50:9a:ee:d7:43:98:28:0f:34:36:f8:4a:43:6c:9f: 2c:3e:a4:79:23:ec:8c:b0:af:1c:96:c3:b9:9a:9f: ed:e5:2c:6f:74:90:12:ec:30:41:53:6e:e5:53:9c: 2a:e2:3d:41:a7:ab:d5:46:b4:75:bf:e5:87:a9:42: d1:a0:de:ec:d2:39:5d:68:e0:f4:3c:b5:24:e2:00: 39:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:14:80:83:63:CF:6F:4A:B1:BB:8F:9D:BF:2D:76:ED:40:BD:E1:5D X509v3 Authority Key Identifier: keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:8a:34:63:f9:34:e9:07:7b:13:6d:5f:6f:71:bd:48:1f:8a: 6a:5d:1d:f4:2b:86:01:18:e6:ea:ed:c0:85:55:eb:fc:b8:6d: 70:e9:50:7a:9a:07:c3:7a:24:8e:85:93:dc:91:69:6a:7c:2d: 0f:d7:d4:a0:2d:f3:5d:d5:b8:b0:30:0e:b3:04:04:ae:41:05: 34:2f:a1:32:83:8d:a3:f5:4c:43:36:bd:20:42:1f:10:be:7e: 4e:2f:89:ef:a3:0f:e8:23:f7:ca:2f:fd:3d:cd:b8:9c:ab:7f: c7:f2:f1:b3:ca:65:6c:c1:eb:15:c6:ef:c5:02:32:36:b0:6f: 24:2d:2a:09:57:9d:e7:9a:fe:01:b6:37:28:6f:94:22:4d:ca: 81:a1:d9:68:18:54:08:f5:2f:12:06:78:70:7b:f4:32:4d:0a: 80:86:b4:6b:78:78:a5:8e:08:d5:28:f4:da:2a:2c:68:0f:ff: 6d:70:df:eb:f5:31:52:3b:9d:f1:d2:70:cc:9f:2e:1d:24:63: 8e:fd:9b:3a:6a:47:2f:0a:eb:1b:2b:84:c5:6b:17:81:d6:36: af:da:c0:c4:2a:87:38:0d:6c:65:48:c7:ab:e9:9c:87:9b:d9: a0:01:4a:85:68:e6:71:35:53:d6:49:8d:70:f5:c3:70:4d:fe: 9d:a3:a3:e5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPV4fdEtMufKKDntoEiGvS6KuhoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk MTZjZWVkMzAeFw0yNjA5MTAxNDA0NDFaFw0yNjA5MTExNTA5NDFaMDMxMTAvBgNV BAMTKEExMTQ4MDgzNjNDRjZGNEFCMUJCOEY5REJGMkQ3NkVENDBCREUxNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqKR1ewrrmTDLLNorTEmjNDG/t 9AUG9wVi+c0rQELRPtNS9QsJv1srZISTxO8AdNELR2YntBYS49fOikByi8Y014RC vdXiWi4lTKwp0FDbO1zq9eMgt4EY9b79qFcBz1W9j2leQ3m+KcUeXDASDaPDXiQA CJobo18VR5NVh0ZpG3pDKk1ycO8ynveCyq8S0ajBAJ/gIXtsZjn4Bvxj2/u0o/Un +rbTrsACTqdgw2iyjE/KSlCa7tdDmCgPNDb4SkNsnyw+pHkj7IywrxyWw7man+3l LG90kBLsMEFTbuVTnCriPUGnq9VGtHW/5YepQtGg3uzSOV1o4PQ8tSTiADmXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUoRSAg2PPb0qxu4+dvy127UC94V0wHwYDVR0j BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0 NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G czd0TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wY2MwODczNy05 MjY3LTQwMmEtOTlkNC03YWFhZmVhNDQ0ZWQvMC9GNzY4RkY2RTY4MTg1OEMwRUMx OUYzQTkzRkExNzkyQ0QxNkNFRUQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgoo0Y/k06Qd7E21fb3G9 SB+Kal0d9CuGARjm6u3AhVXr/LhtcOlQepoHw3okjoWT3JFpanwtD9fUoC3zXdW4 sDAOswQErkEFNC+hMoONo/VMQza9IEIfEL5+Ti+J76MP6CP3yi/9Pc24nKt/x/Lx s8plbMHrFcbvxQIyNrBvJC0qCVed55r+AbY3KG+UIk3KgaHZaBhUCPUvEgZ4cHv0 Mk0KgIa0a3h4pY4I1Sj02iosaA//bXDf6/UxUjud8dJwzJ8uHSRjjv2bOmpHLwrr GyuExWsXgdY2r9rAxCqHOA1sZUjHq+mch5vZoAFKhWjmcTVT1kmNcPXDcE3+naOj 5Q== -----END CERTIFICATE-----Generated at Fri Sep 11 05:56:51 2026 by rpki-client