$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft File: 7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft (raw, json) Hash identifier: HBGWzsYEtTKbmjaEBOJu9Cp/zv1xWgfFXZf85MDIo+c= Subject key identifier: 43:EC:15:8F:C6:6F:04:63:CD:E6:90:21:9A:CA:58:F3:CF:C8:69:4A Authority key identifier: 7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85 Certificate issuer: /CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985 Certificate serial: 71BA93011664CB526E1CD5480A1D20204697CA6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft Manifest number: 030C Signing time: Fri 02 Oct 2026 23:14:21 +0000 Manifest this update: Fri 02 Oct 2026 23:09:21 +0000 Manifest next update: Sun 04 Oct 2026 01:58:21 +0000 Files and hashes: 1: 326130653a666434353a326635303a3a2f34382d3634203d3e203439393831.roa (hash: zpE8O6QFgOcjidzEd8zc2djpSlwttC8o8DmDYuakobQ=) 2: 326130653a666434353a326630303a3a2f34382d3438203d3e20323132393636.roa (hash: 4rV6D1GFz/bjY4t177ru5i22axDSZLmceosAGjuU6GE=) 3: 326130653a666434353a326633303a3a2f34382d3438203d3e20323039333130.roa (hash: zBck4nOfVGigqbE1M8GwahkpZT+TSOG3sW4XnkW/DN0=) 4: 326130653a666434353a326535303a3a2f34382d3438203d3e20323135333730.roa (hash: S2x/glwBFQqLmSWyNwtm4qEtJyulbbnFBue99o2JPS8=) 5: 34352e3134362e372e302f32342d3332203d3e203439393831.roa (hash: ohztvwe2w66eHUWp00RbU/8ScLc2/rEvRDbabjcZgPU=) 6: 326130653a666434353a326636303a3a2f34382d3438203d3e203532303431.roa (hash: IZkqFVYEgPyyB/+rGAFH6ZTxV7F8e0iFJgsbGpJjRuQ=) 7: 326130653a666434353a326634303a3a2f34342d3438203d3e20323132353931.roa (hash: m8ac/OmE29DqLuwrvKPJFKpYCamTHx1fmPvpHqRkArI=) 8: 326130653a666434353a353030303a3a2f34302d3438203d3e20323034383330.roa (hash: 4VMWXKcIo6/p9ijIu9IEM7e/uFISrba097G5zVjTr4E=) 9: 7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl (hash: xCgokIHFb7BZBZFV/3j9DU/72wI9FUPSWcGx0OknaPw=) 10: 326130653a666434353a326538303a3a2f34382d3438203d3e20323134373233.roa (hash: HL7mFBDKDU+iYfATsU33A3w0WGjK39TBLxCkLSeJlhE=) 11: 326130393a626534303a323830303a3a2f34302d3438203d3e20313939393530.roa (hash: E/KKQIBIvXrHxntg1Xf36BIIDrbcHQG7BGnX7lqe1ts=) 12: 326130653a666434353a326636303a3a2f34382d3438203d3e20323037313038.roa (hash: fin/tsFszyHjwEDVRVOEznFkN6ILbbdEP80VJIaXRto=) 13: 326130653a666434353a326366303a3a2f34382d3438203d3e20323032383535.roa (hash: b4dSzH5oz/8kg+iOLc3kROxlkMvwGXgL0aSDALtRaeY=) 14: 326130653a666434353a326130303a3a2f34302d3438203d3e20323133323533.roa (hash: qDmc/WjuJm2+K6V+qH0YTGIzUkgJV2kWMCYDVdR94ng=) 15: 326130393a626534303a323830303a3a2f34302d3438203d3e20323133313730.roa (hash: 5klqSoppwsu6NOWd6DdkFO/NkJ4F93qo8ByoAVMNmBw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Oct 2026 01:58:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:ba:93:01:16:64:cb:52:6e:1c:d5:48:0a:1d:20:20:46:97:ca:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985 Validity Not Before: Oct 2 23:09:21 2026 GMT Not After : Oct 4 01:58:21 2026 GMT Subject: CN=43EC158FC66F0463CDE690219ACA58F3CFC8694A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:41:10:f9:ea:db:2e:57:2b:eb:d2:9d:2d:ef: fd:62:e5:3a:e3:7d:7c:9d:b8:28:07:9e:ed:a8:59: c5:6f:42:c5:3b:f3:69:d6:df:e7:f7:48:6a:6d:8a: 94:94:78:f3:e8:c9:ff:f9:ea:94:bf:7f:29:00:31: 37:00:1e:e2:32:26:9e:f0:4f:b9:af:55:fe:01:41: 82:cc:6d:a2:63:55:ea:3b:37:30:3e:cb:06:c8:a2: 6c:06:18:55:2f:2b:f9:8e:00:11:b6:d1:0c:0b:16: 6a:a3:2b:d6:0b:13:3c:4c:dd:f8:3c:df:eb:82:97: bb:79:10:e8:ff:9e:14:74:3b:3e:8c:16:6f:1a:0a: 66:92:22:5d:0c:0a:75:2a:44:2f:1e:73:e6:c4:78: 82:29:00:80:20:a2:1b:bb:03:36:09:47:b7:0c:1d: 62:d7:c3:52:fc:52:f2:45:34:b9:2b:60:a4:4e:49: cd:ce:cf:c6:f2:35:bf:06:c6:48:3a:39:65:d3:c0: df:ed:0f:87:db:b7:7c:42:c1:ea:d6:a7:2d:5f:59: 05:09:40:6d:5d:fb:c8:6a:ec:45:2c:3a:d2:2e:42: a6:f2:65:ec:f2:1f:6b:d6:44:70:e0:2f:72:e0:d2: a1:9d:a1:61:c5:70:c8:db:6a:88:30:68:ed:69:90: d2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EC:15:8F:C6:6F:04:63:CD:E6:90:21:9A:CA:58:F3:CF:C8:69:4A X509v3 Authority Key Identifier: keyid:7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:f4:ae:c2:2e:8a:ea:9b:fe:24:a1:bf:d7:36:a7:ee:cf:23: c8:92:ee:38:46:9e:dc:73:bc:8e:70:9f:fd:f6:8a:f4:2d:38: 86:d7:f4:fc:e7:98:f1:ae:cf:d8:eb:ab:71:83:c2:ac:c1:48: fb:f8:a7:5c:a8:2d:af:50:a6:cb:ec:82:9c:e4:1b:8c:9e:67: 21:68:eb:e6:c3:52:b9:df:3d:ef:59:a9:15:25:cd:74:99:29: 4c:81:57:cb:b5:2e:f9:31:84:2b:f0:bb:cc:fb:d0:d6:6b:cd: cf:ba:ca:fa:19:db:50:54:86:55:0b:a9:6b:e6:64:69:16:4c: 42:9c:8b:5e:15:1d:bd:fe:b1:09:2f:09:f5:35:04:a1:67:8c: 5e:06:1f:39:db:74:6c:f9:6d:a3:23:ea:24:93:92:b6:70:07: 7d:e1:f0:1e:eb:11:91:da:c2:de:11:aa:14:a5:e3:3a:3b:34: bb:72:11:69:8f:04:a1:6d:9b:53:4a:75:18:1a:70:64:13:63: 2f:fb:6b:a3:a3:09:41:8e:bd:37:4f:4f:e6:7e:e1:b5:f4:a2: 4e:1e:cc:c3:ea:bc:d4:07:39:54:f5:29:8b:00:8a:d8:47:bd: 87:85:99:6f:7b:f7:e2:d2:b2:22:df:33:20:ca:aa:d8:2a:53: 86:15:0f:e2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUcbqTARZky1JuHNVICh0gIEaXym8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2YyMTZmNDlhM2I5YTg0YTBlODVlODBhMmM0Mjg3NGYw OWVhMzk4NTAeFw0yNjEwMDIyMzA5MjFaFw0yNjEwMDQwMTU4MjFaMDMxMTAvBgNV BAMTKDQzRUMxNThGQzY2RjA0NjNDREU2OTAyMTlBQ0E1OEYzQ0ZDODY5NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoQRD56tsuVyvr0p0t7/1i5Trj fXyduCgHnu2oWcVvQsU782nW3+f3SGptipSUePPoyf/56pS/fykAMTcAHuIyJp7w T7mvVf4BQYLMbaJjVeo7NzA+ywbIomwGGFUvK/mOABG20QwLFmqjK9YLEzxM3fg8 3+uCl7t5EOj/nhR0Oz6MFm8aCmaSIl0MCnUqRC8ec+bEeIIpAIAgohu7AzYJR7cM HWLXw1L8UvJFNLkrYKROSc3Oz8byNb8Gxkg6OWXTwN/tD4fbt3xCwerWpy1fWQUJ QG1d+8hq7EUsOtIuQqbyZezyH2vWRHDgL3Lg0qGdoWHFcMjbaogwaO1pkNJHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUQ+wVj8ZvBGPN5pAhmspY88/IaUowHwYDVR0j BBgwFoAUfyFvSaO5qEoOhegKLEKHTwnqOYUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmRmYjMwY2EtZTFjMi00OTIxLWIwNTQtZDRhZjA5MTY1 YWYxLzAvN0YyMTZGNDlBM0I5QTg0QTBFODVFODBBMkM0Mjg3NEYwOUVBMzk4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Z5RnZTYU81cUVvT2hlZ0tMRUtIVHdu cU9ZVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yZGZiMzBjYS1l MWMyLTQ5MjEtYjA1NC1kNGFmMDkxNjVhZjEvMC83RjIxNkY0OUEzQjlBODRBMEU4 NUU4MEEyQzQyODc0RjA5RUEzOTg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/Suwi6K6pv+JKG/1zan 7s8jyJLuOEae3HO8jnCf/faK9C04htf0/OeY8a7P2OurcYPCrMFI+/inXKgtr1Cm y+yCnOQbjJ5nIWjr5sNSud8971mpFSXNdJkpTIFXy7Uu+TGEK/C7zPvQ1mvNz7rK +hnbUFSGVQupa+ZkaRZMQpyLXhUdvf6xCS8J9TUEoWeMXgYfOdt0bPltoyPqJJOS tnAHfeHwHusRkdrC3hGqFKXjOjs0u3IRaY8EoW2bU0p1GBpwZBNjL/tro6MJQY69 N09P5n7htfSiTh7Mw+q81Ac5VPUpiwCK2Ee9h4WZb3v34tKyIt8zIMqq2CpThhUP 4g== -----END CERTIFICATE-----Generated at Sat Oct 3 13:05:20 2026 by rpki-client