$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft File: AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft (raw, json) Hash identifier: cFbAjbvbirWA9o5UldIA6W++i++Pl/rLvnWDP9AA+4g= Subject key identifier: 02:72:50:AE:A2:A5:C0:E3:A7:6B:D8:CD:0A:36:E8:D6:4C:53:3C:E5 Authority key identifier: AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66 Certificate issuer: /CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866 Certificate serial: 5326F2FF159164E7FCF7DF67FA00B06B4D7E588F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft Manifest number: 60 Signing time: Mon 26 Oct 2026 00:39:44 +0000 Manifest this update: Mon 26 Oct 2026 00:34:44 +0000 Manifest next update: Tue 27 Oct 2026 02:02:44 +0000 Files and hashes: 1: 39322e3234302e3233302e302f32342d3234203d3e203239343035.roa (hash: fDWL1gciinjC0IXRqT2Q3PtDEb5nlNuoXJzFK/hcNV4=) 2: 39322e3234302e3233312e302f32342d3234203d3e203239343035.roa (hash: 8jlFwwnDnJiuu6OA5YfbHOJwmtTLw6Nop9J7C0sLtPc=) 3: 39322e3234302e3234352e302f32342d3234203d3e203239343035.roa (hash: zjSSSsKGGZnm7k5LvFSb2guDmXTBkSv+ePAfP6MlUDg=) 4: 39322e3234302e3232382e302f32342d3234203d3e203239343035.roa (hash: LxIsT0Z72nxO3Y284vPXgs9ScSm6Vj2A4oz7LMKnhVo=) 5: 39332e3138342e36342e302f32302d3234203d3e203239343035.roa (hash: qJyJZHLgF+VN+ii9OlFgksvK1ICSHqOEqlSg1DkmbiU=) 6: 39322e3234302e3233352e302f32342d3234203d3e203239343035.roa (hash: EGBbBNCVgZA7RRgb1ikg8DLO4hYxR8hBfm0EuF5QV+s=) 7: 39322e3234302e3235332e302f32342d3234203d3e203239343035.roa (hash: 3TcyJn0Vba3SdYkAgBupE2RJSi7wt6IrY6almrGdDwA=) 8: 39322e3234302e3234392e302f32342d3234203d3e203239343035.roa (hash: OWddMU2lVARc4e0qTNNk2twrubMUNkpdn9k9PUQykHc=) 9: 3138352e3137362e37322e302f32322d3234203d3e203239343035.roa (hash: o4JrISAeOko/D99D7KNeLjlvTZIPY3wcIRzxxDIeJsA=) 10: 39322e3234302e3234342e302f32342d3234203d3e203239343035.roa (hash: IqjGqo5bykodH/rQX0Yyj0vB/XG7K+vBGQ1VS0dufJA=) 11: AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl (hash: /I3lshdVNlBLmdfEDnonNnw60F/Zp0sbX8hzut2dyTU=) 12: 39322e3234302e3232382e302f32342d3234203d3e203432303035.roa (hash: Nr549lUMnLpN1HEp8LJdbOoN53ZSlUaUINP6G5zL7j8=) 13: 3231372e37332e31362e302f32302d3234203d3e203239343035.roa (hash: iWR6okAvKqyu5oJU5+aD9MzJfwy1JD9sl+Akz3xHcFU=) 14: 39322e3234302e3233362e302f32342d3234203d3e203239343035.roa (hash: 5oyqw+KhylpUHglogsy7/I4LpBle8Q3qWBoa/BrHLEw=) 15: 326130313a3339303a3a2f33322d3634203d3e203239343035.roa (hash: EkahyzLSm2/v6AdCA2RLCahqupgwq6ocXbGbYPrCVpQ=) 16: 39322e3234302e3233342e302f32342d3234203d3e203239343035.roa (hash: ZbrO3s1/sE3VB3YBwEq8N4l7+Zh6Aj9FReUoQ3Dbpi0=) 17: 39332e3138342e37372e302f32342d3234203d3e203239343035.roa (hash: KNROAqPfXENphQBzyfVk59v5Hvqlnlhj1Iqa4/Wrvfw=) 18: 38362e3131302e3234332e302f32342d3234203d3e203239343035.roa (hash: +f51ZZBf9NkOVMQhrwv8QxlQbFeYhMSfw/1KOCVjv/M=) 19: 39322e3234302e3235342e302f32342d3234203d3e203239343035.roa (hash: 7VdxSCKZcsd3qAeViATvYYCpFD+a1fGjlJWlaJPO0iQ=) 20: 39322e3234302e3233372e302f32342d3234203d3e203239343035.roa (hash: 8TUKR6ccLxStHiY46OibIeVHKIYrsgaU4259nUYDI0Q=) 21: 38312e38392e34382e302f32302d3234203d3e203239343035.roa (hash: oOFdsTbMdYmh54V2UagrZUE6rX1OAnUs3P4bv6a/jzs=) 22: 39322e3234302e3234322e302f32342d3234203d3e203239343035.roa (hash: kM+gDjZiEvVCID7wvcbCRUgVsT4ajdEwlZgKFdVmvR8=) 23: 38362e3131302e3232342e302f31392d3234203d3e203239343035.roa (hash: b0zChgdz1vIMVhWdR5HGNfcD59h2BRuUdpFR8SjQgf4=) 24: 326130303a313064383a31303a3a2f34382d3634203d3e203239343035.roa (hash: OaS/OQQXkjX3sJOmUl5zc9tQy3jz0o+bUQUBhd2ZQH0=) 25: 3130392e37342e3134342e302f32302d3234203d3e203239343035.roa (hash: xohX/Ehc0bh3gDMEqDdvV2NRcW4FHqeBZZSuJrMdXQI=) 26: 3231372e37332e31362e302f32342d3234203d3e203239343035.roa (hash: LL3P7lvswxfOA25czv9v+WkF3C0D0KnWO5P9MOkColw=) 27: 38362e3131302e3234312e302f32342d3234203d3e203239343035.roa (hash: psnZte3+Q299US8D2WamKfH/o+Xxqk26yh9SNQ4KUJw=) 28: 3231372e37332e31372e302f32342d3234203d3e203239343035.roa (hash: DDST7kks9q2ds1FaT+50IBJBBJX55AtusDnbq0N98fU=) 29: 326130303a313064383a3a2f33322d3634203d3e203239343035.roa (hash: SjPp4clvAHy+KAtZ7R25YFosiP+RM2Ku5fULo9nmZMA=) 30: 39322e3234302e3234312e302f32342d3234203d3e203239343035.roa (hash: Opg5YCuZVpoZQMqVkdc7dq3/iqNbHLYh5wpFHjBXqwM=) 31: 39322e3234302e3232392e302f32342d3234203d3e203239343035.roa (hash: DiT3qyppfKnihj39C/OG8uNu1BGSOnEXplU91nLYAfM=) 32: 38362e3131302e3234382e302f32342d3234203d3e203239343035.roa (hash: jkNhjwzhqphtd387aGK5KWwfcNq8xmY5Fe084eh7yWY=) 33: 34362e3232392e3232342e302f32302d3234203d3e203239343035.roa (hash: 4IIdVeDc8Q4j/hlnrmDiN32JvOe5YxgT+shULM0apQE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 02:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:26:f2:ff:15:91:64:e7:fc:f7:df:67:fa:00:b0:6b:4d:7e:58:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866 Validity Not Before: Oct 26 00:34:44 2026 GMT Not After : Oct 27 02:02:44 2026 GMT Subject: CN=027250AEA2A5C0E3A76BD8CD0A36E8D64C533CE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2b:e3:49:bc:3b:e4:a9:67:47:e1:0b:99:4e: 38:10:4d:ef:03:9e:3b:d7:ae:ac:ee:28:fe:e7:c9: 0b:56:8a:d5:f0:31:2d:f1:2b:8c:16:a6:96:f3:7d: 64:16:d5:7d:2b:8b:cd:77:27:eb:4d:9c:91:7c:de: f7:c9:ca:98:fb:bc:41:93:19:86:53:ba:91:0a:46: a5:55:e5:9d:9c:c0:e5:f5:6e:a8:d7:eb:fc:9b:a8: 5a:68:82:51:ee:2c:39:1f:8d:8a:d1:2d:64:08:30: 4a:2f:42:f0:35:d5:2a:ad:61:17:84:eb:70:50:a1: 31:b2:7a:3c:4b:68:c2:72:4c:17:b7:a4:5d:56:27: bf:98:7c:3c:6d:f7:b6:77:83:a0:d4:b2:55:68:c7: 51:c4:13:48:14:9d:7b:24:2f:6c:2f:ee:4a:9f:b9: b8:1b:95:cf:b1:a4:b2:c2:ba:3d:dd:96:0c:d0:64: 32:be:6e:3b:3e:87:0d:86:9e:3f:42:fa:4b:d8:50: e0:38:cd:4f:5a:b4:e9:8d:4e:4f:e2:71:f3:8e:79: 81:ea:af:d9:12:b4:af:68:c5:11:5f:fa:30:72:3e: a6:57:fb:25:c4:4b:3f:a4:b6:e6:a5:e4:2c:ed:d9: bc:51:49:53:57:2e:fc:bc:1d:94:b3:06:c0:2b:65: 8e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:72:50:AE:A2:A5:C0:E3:A7:6B:D8:CD:0A:36:E8:D6:4C:53:3C:E5 X509v3 Authority Key Identifier: keyid:AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:06:9c:19:5e:13:c8:a1:b8:4a:ca:ae:e6:6b:c2:87:fe:c4: 80:e1:ab:06:56:97:45:99:d8:00:75:c7:10:ff:df:3a:1a:2c: 23:7d:7e:c9:f5:ae:a2:7d:ad:cf:f4:cc:cf:1f:1a:36:16:e4: 54:32:26:80:14:7c:6d:0e:f7:09:ac:72:8e:8b:93:e5:36:84: 95:8a:52:45:e0:ef:40:67:cb:40:73:3f:1a:85:b7:99:e1:25: 8e:92:c3:c6:e1:fa:9b:23:e4:cb:ad:3c:51:45:70:58:26:be: 98:d1:99:67:dc:48:a6:15:5c:66:03:53:c5:ae:09:b5:78:dc: e7:0b:10:b3:da:75:7e:8c:f9:d1:68:89:6c:78:eb:85:fe:f8: c7:04:a2:e7:97:f1:c1:3a:e7:62:09:45:45:f9:05:bc:28:f7: f5:f0:7e:c6:9d:4b:ae:17:c4:d5:98:b0:09:17:87:04:ac:a2: 33:42:5d:cb:39:ac:6c:db:be:52:27:da:0d:bf:f1:2c:cc:8c: 1a:a6:14:03:a7:15:c6:1d:a2:e6:d3:e0:44:7e:02:4d:a2:f6: 86:5c:cc:96:24:24:37:47:05:ba:3a:5e:b1:59:f8:a5:59:11: 7a:e0:52:55:b0:86:36:1c:35:e3:a9:1b:b0:7f:c9:3c:0a:da: d1:ef:06:d8 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUyby/xWRZOf8999n+gCwa01+WI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWMwY2UzZTZhOWRiY2ZhMjUxZTU2ZTUwMDJlYzRiYmJj YjA1Yjg2NjAeFw0yNjEwMjYwMDM0NDRaFw0yNjEwMjcwMjAyNDRaMDMxMTAvBgNV BAMTKDAyNzI1MEFFQTJBNUMwRTNBNzZCRDhDRDBBMzZFOEQ2NEM1MzNDRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeK+NJvDvkqWdH4QuZTjgQTe8D njvXrqzuKP7nyQtWitXwMS3xK4wWppbzfWQW1X0ri813J+tNnJF83vfJypj7vEGT GYZTupEKRqVV5Z2cwOX1bqjX6/ybqFpoglHuLDkfjYrRLWQIMEovQvA11SqtYReE 63BQoTGyejxLaMJyTBe3pF1WJ7+YfDxt97Z3g6DUslVox1HEE0gUnXskL2wv7kqf ubgblc+xpLLCuj3dlgzQZDK+bjs+hw2Gnj9C+kvYUOA4zU9atOmNTk/icfOOeYHq r9kStK9oxRFf+jByPqZX+yXESz+ktual5Czt2bxRSVNXLvy8HZSzBsArZY69AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUAnJQrqKlwOOna9jNCjbo1kxTPOUwHwYDVR0j BBgwFoAUrAzj5qnbz6JR5W5QAuxLu8sFuGYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzVhMGVmZjItYjQ1Yy00MjlmLTkwMDEtMjM0MWQ0NmI2 M2UwLzAvQUMwQ0UzRTZBOURCQ0ZBMjUxRTU2RTUwMDJFQzRCQkJDQjA1Qjg2Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JBemo1cW5iejZKUjVXNVFBdXhMdThz RnVHWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zNWEwZWZmMi1i NDVjLTQyOWYtOTAwMS0yMzQxZDQ2YjYzZTAvMC9BQzBDRTNFNkE5REJDRkEyNTFF NTZFNTAwMkVDNEJCQkNCMDVCODY2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALQacGV4TyKG4Ssqu5mvC h/7EgOGrBlaXRZnYAHXHEP/fOhosI31+yfWuon2tz/TMzx8aNhbkVDImgBR8bQ73 CaxyjouT5TaElYpSReDvQGfLQHM/GoW3meEljpLDxuH6myPky608UUVwWCa+mNGZ Z9xIphVcZgNTxa4JtXjc5wsQs9p1foz50WiJbHjrhf74xwSi55fxwTrnYglFRfkF vCj39fB+xp1LrhfE1ZiwCReHBKyiM0JdyzmsbNu+UifaDb/xLMyMGqYUA6cVxh2i 5tPgRH4CTaL2hlzMliQkN0cFujpesVn4pVkReuBSVbCGNhw146kbsH/JPAra0e8G 2A== -----END CERTIFICATE-----Generated at Mon Oct 26 14:23:01 2026 by rpki-client