$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft File: 295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft (raw, json) Hash identifier: a7D6oqznaH3OP7QKQBvQB5vaBpT0rhKjb8RkdpiHi7s= Subject key identifier: DC:A1:E3:22:3B:C8:C2:E0:CF:FE:AB:E9:80:2C:1E:FB:44:BE:5E:09 Authority key identifier: 29:5B:60:BB:0C:BB:4A:53:D9:54:5B:C2:0B:77:4F:FA:03:6B:4A:46 Certificate issuer: /CN=295b60bb0cbb4a53d9545bc20b774ffa036b4a46 Certificate serial: 3F06F622906BFC46A2D46486DB59A1ACE8B4D2CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVtguwy7SlPZVFvCC3dP-gNrSkY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft Manifest number: 55 Signing time: Thu 25 Jun 2026 03:27:49 +0000 Manifest this update: Thu 25 Jun 2026 03:22:49 +0000 Manifest next update: Fri 26 Jun 2026 06:09:49 +0000 Files and hashes: 1: 326130313a6234303a3a2f32392d3438203d3e203136353039.roa (hash: CivQf/u/Gk+LE+nokddTRzH9kTLqet4Y/E+g0q0KfIo=) 2: 326130313a6234303a3a2f32392d3438203d3e203134363138.roa (hash: aQ7Zs1GXD2YhsOFRwSIq/T9v5bNh9rH0xnn29aQh438=) 3: 326130313a6234303a3a2f32392d3438203d3e203438373030.roa (hash: zprKAfMxuhh44vBmZdJyS4oUsSHm80ESOd6bFepuvfw=) 4: AS48700.asa (hash: vc5Bz0waDsfQ0bs/Gu6racwgW1gSmnJnpEJHohHaeIg=) 5: 295B60BB0CBB4A53D9545BC20B774FFA036B4A46.crl (hash: vHTgPg7wq1t1ZsFsSZwiT2lv8C4LbqhgkcXir0/Cto4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft rsync://rpki.ripe.net/repository/DEFAULT/KVtguwy7SlPZVFvCC3dP-gNrSkY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Jun 2026 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:06:f6:22:90:6b:fc:46:a2:d4:64:86:db:59:a1:ac:e8:b4:d2:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295b60bb0cbb4a53d9545bc20b774ffa036b4a46 Validity Not Before: Jun 25 03:22:49 2026 GMT Not After : Jun 26 06:09:49 2026 GMT Subject: CN=DCA1E3223BC8C2E0CFFEABE9802C1EFB44BE5E09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cf:cc:b9:98:7d:70:0b:d7:d7:08:1e:f0:bc: 88:d8:cf:fc:29:e8:f9:bc:3a:15:87:fe:14:ae:2a: 88:24:b9:ae:2a:50:09:64:51:26:be:a9:80:69:56: c1:ea:d5:24:76:2f:75:4f:b3:89:8c:b5:22:d1:57: e5:71:13:5d:97:27:b3:d3:2f:be:e9:84:42:26:00: 46:bf:5a:58:38:a7:ff:e2:b7:30:4e:61:bf:d0:0a: 07:14:5e:75:d3:3c:b0:cd:7b:0f:fe:04:d7:6b:46: 04:f6:5f:8b:2f:7e:ac:e5:3f:72:51:2b:82:c5:d6: ab:2c:e3:0f:b0:6c:96:98:0d:63:eb:1f:35:76:71: 58:cd:93:b7:16:09:8b:2b:1e:bc:53:d0:db:ad:59: 2a:4d:a0:e2:b1:3c:de:f8:b3:f9:21:37:79:10:dd: 61:ad:70:a3:25:82:9d:e0:33:6f:77:b9:2e:0e:5d: 5c:bb:58:75:f4:9d:84:ea:72:ce:42:57:ce:15:2c: a7:85:87:00:59:e1:52:a8:f7:b9:2a:0f:f7:13:4c: 6a:65:3f:30:03:b7:e2:8a:cc:d0:e5:35:67:24:12: ec:0c:fa:a0:d6:cf:32:97:c7:f8:f1:3d:04:8b:96: 5c:fd:3b:22:c7:6d:92:3d:ef:bf:54:a2:53:59:98: 54:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A1:E3:22:3B:C8:C2:E0:CF:FE:AB:E9:80:2C:1E:FB:44:BE:5E:09 X509v3 Authority Key Identifier: keyid:29:5B:60:BB:0C:BB:4A:53:D9:54:5B:C2:0B:77:4F:FA:03:6B:4A:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVtguwy7SlPZVFvCC3dP-gNrSkY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:66:55:02:94:8c:41:27:77:5a:40:b7:54:d6:0b:e0:d2:a8: 71:94:37:da:24:8b:5b:b9:d7:34:b0:a4:af:af:5c:83:7d:13: 4d:99:02:c3:32:86:d1:92:e4:e0:d8:99:c6:fd:fa:a5:c8:99: 1a:b1:81:63:e7:ae:a2:e2:6e:fb:c8:a2:3b:f4:f2:b5:ca:6c: bb:8b:53:dc:80:9b:c8:10:6c:9c:f0:65:20:49:0f:d8:d1:c0: d8:b3:74:ff:86:e4:b7:65:37:b5:00:1b:44:3e:2e:bf:99:8d: c8:62:b6:f9:22:e7:2b:9f:a6:83:b9:a9:0e:15:ef:bf:59:13: 60:4b:3c:41:65:c1:66:a5:ea:56:02:23:52:1f:d2:a3:ef:e6: 73:b3:70:c4:5f:8a:ff:36:c1:67:9e:74:b6:d3:0c:3c:88:d5: 68:6b:ae:3e:e2:54:40:de:9c:a3:7d:82:21:92:4f:9a:3b:e0: b8:05:00:45:b3:49:50:64:ad:55:0b:05:51:0e:34:7e:dc:0d: 52:55:d8:96:53:78:86:b4:7b:be:75:ac:d3:25:e8:40:9b:25: dc:01:3f:07:cf:b8:9c:e3:6f:1c:04:c9:a9:44:94:98:2f:be: 53:cd:a1:d5:95:21:d2:67:38:d2:56:f6:7c:2f:52:2f:b6:5a: 53:dc:b9:5e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPwb2IpBr/Eai1GSG21mhrOi00sowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1YjYwYmIwY2JiNGE1M2Q5NTQ1YmMyMGI3NzRmZmEw MzZiNGE0NjAeFw0yNjA2MjUwMzIyNDlaFw0yNjA2MjYwNjA5NDlaMDMxMTAvBgNV BAMTKERDQTFFMzIyM0JDOEMyRTBDRkZFQUJFOTgwMkMxRUZCNDRCRTVFMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+z8y5mH1wC9fXCB7wvIjYz/wp 6Pm8OhWH/hSuKogkua4qUAlkUSa+qYBpVsHq1SR2L3VPs4mMtSLRV+VxE12XJ7PT L77phEImAEa/Wlg4p//itzBOYb/QCgcUXnXTPLDNew/+BNdrRgT2X4svfqzlP3JR K4LF1qss4w+wbJaYDWPrHzV2cVjNk7cWCYsrHrxT0NutWSpNoOKxPN74s/khN3kQ 3WGtcKMlgp3gM293uS4OXVy7WHX0nYTqcs5CV84VLKeFhwBZ4VKo97kqD/cTTGpl PzADt+KKzNDlNWckEuwM+qDWzzKXx/jxPQSLllz9OyLHbZI9779UolNZmFRHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU3KHjIjvIwuDP/qvpgCwe+0S+XgkwHwYDVR0j BBgwFoAUKVtguwy7SlPZVFvCC3dP+gNrSkYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzUvMjk1QjYwQkIwQ0JCNEE1M0Q5NTQ1QkMyMEI3NzRGRkEwMzZCNEE0Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0tWdGd1d3k3U2xQWlZGdkNDM2RQLWdO clNrWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0y MDU4LTQzYmItOWFjNi01YWI0MmRmYmY0MDkvNS8yOTVCNjBCQjBDQkI0QTUzRDk1 NDVCQzIwQjc3NEZGQTAzNkI0QTQ2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj2ZVApSMQSd3WkC3VNYL 4NKocZQ32iSLW7nXNLCkr69cg30TTZkCwzKG0ZLk4NiZxv36pciZGrGBY+euouJu +8iiO/Tytcpsu4tT3ICbyBBsnPBlIEkP2NHA2LN0/4bkt2U3tQAbRD4uv5mNyGK2 +SLnK5+mg7mpDhXvv1kTYEs8QWXBZqXqVgIjUh/So+/mc7NwxF+K/zbBZ550ttMM PIjVaGuuPuJUQN6co32CIZJPmjvguAUARbNJUGStVQsFUQ40ftwNUlXYllN4hrR7 vnWs0yXoQJsl3AE/B8+4nONvHATJqUSUmC++U82h1ZUh0mc40lb2fC9SL7ZaU9y5 Xg== -----END CERTIFICATE-----Generated at Thu Jun 25 08:26:14 2026 by rpki-client