$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft File: 702B79B445330AC21D237308277A4472598CE771.mft (raw, json) Hash identifier: YsGxsBH2TsyL11t+N2hbfb94RE3bMLKpfpYbjzfQjE8= Subject key identifier: 01:A5:7B:5C:B0:39:F5:81:40:F1:7A:48:C4:42:5B:93:54:2F:43:57 Authority key identifier: 70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 Certificate issuer: /CN=702B79B445330AC21D237308277A4472598CE771 Certificate serial: 6CA1FEDB301D8E8A5992C0D4BD53F9778711352C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft Manifest number: 0221 Signing time: Thu 10 Sep 2026 07:56:46 +0000 Manifest this update: Thu 10 Sep 2026 07:51:46 +0000 Manifest next update: Fri 11 Sep 2026 11:15:46 +0000 Files and hashes: 1: 702B79B445330AC21D237308277A4472598CE771.crl (hash: 1yk5uammxBLLn8JBwCExXgOG3GcYmOcDqGwthrXu8oU=) 2: 326131343a373538333a663730313a3a2f34382d3438203d3e20323134393535.roa (hash: XUt70KrO/DZgEBIx3i5TbfQXGZ+eg7uSXb1GJc8l4hI=) 3: 326131343a373538333a663736343a3a2f34382d3438203d3e20323134393535.roa (hash: kHUe3uVUSGFeDWBdd+rc/mUnB410GE7EKZwGLoehT8A=) 4: 326131343a373538333a663730323a3a2f34382d3438203d3e20323134393535.roa (hash: T8xZyybzsyw+7Y6G2xpepmRbN1sxHF8csgmYS+6ax4g=) 5: 326131343a373538333a663730613a3a2f34382d3438203d3e20323134393535.roa (hash: WJ98gf+04bqCc2wkbW8PUQ1n6vcZpCFo8z1U88LIVjM=) 6: 326131343a373538333a663730383a3a2f34382d3438203d3e20323134393535.roa (hash: BfyLlDqF0Edwl/zOmuvfdcVLnc4obqrtPh+ZM8Sxf3A=) 7: 326131343a373538333a663730373a3a2f34382d3438203d3e20323134393535.roa (hash: XpDNChEgWAEC6kMqtH8GJv2xEc4sQx1hwhkpRZvuOlU=) 8: 326131343a373538333a663730393a3a2f34382d3438203d3e20323134393535.roa (hash: bP6Vil1ntI/A7DETceUwP8FoIfBhjfD0YLUgBJ8zYgw=) 9: 326131343a373538333a663734343a3a2f34382d3438203d3e20323134393535.roa (hash: 2S+JbymcjIynwfVZAKfR00rXladCcxDgshwKEZR1YsA=) 10: 326131343a373538333a663730343a3a2f34382d3438203d3e20323134393535.roa (hash: C17xF/SvFNgTZ+VDgUs7ZyetbfwwqZRUzPBPCIMJ6AY=) 11: 326131343a373538333a663730633a3a2f34382d3438203d3e20323134393535.roa (hash: MCTGvJAm8U3NtPMr0TfqstCKnf65Svz4B5aqt1Vg4GE=) 12: 326131343a373538333a663730353a3a2f34382d3438203d3e20323134393535.roa (hash: Y5G8XKTZkVVsjw8mhjg5SqlJ1TRgLMIPSRTRFixRX5M=) 13: 326131343a373538333a663734333a3a2f34382d3438203d3e20323134393535.roa (hash: VeUJyfT74mzmYyns5eihJo8AIvB5/kXqpPen5nLIFGE=) 14: 326131343a373538333a663730363a3a2f34382d3438203d3e20323134393535.roa (hash: sPuODu16efAd824e8O/TQUzJSLBVmbQxN4shUBtjGRQ=) 15: 326131343a373538333a663730333a3a2f34382d3438203d3e20323134393535.roa (hash: CplFscx8cCO4S8dYM048y2aNxXev0VXDMkExRtnK2o8=) 16: 326131343a373538333a663730623a3a2f34382d3438203d3e20323134393535.roa (hash: kLF1pGobCPtSBqVgUGHgu1by1e7kkegKpHMRpd10cN0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:a1:fe:db:30:1d:8e:8a:59:92:c0:d4:bd:53:f9:77:87:11:35:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=702B79B445330AC21D237308277A4472598CE771 Validity Not Before: Sep 10 07:51:46 2026 GMT Not After : Sep 11 11:15:46 2026 GMT Subject: CN=01A57B5CB039F58140F17A48C4425B93542F4357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a7:59:d3:fc:de:d5:f4:ab:a6:14:46:a2:e7: 62:ec:5a:7a:f9:1e:22:b3:10:e5:20:7d:7d:b5:37: ce:9f:02:62:70:99:41:11:56:4d:46:10:7a:49:e2: cc:78:a6:a5:a2:76:3e:ce:e0:7c:56:cd:9d:12:07: 31:56:d8:a0:a5:3d:03:2a:43:16:8a:24:67:d4:c6: dd:1b:ac:56:c8:11:f3:0a:61:04:32:ee:f6:00:81: 3c:99:0e:dd:ac:b6:f8:7b:64:b5:eb:bb:71:e9:1a: e8:1d:14:62:3e:51:df:4f:b4:1a:c7:7f:00:12:70: 00:52:c8:b2:9b:4c:35:af:6e:10:9f:d5:93:35:eb: e2:2e:9c:a9:03:f2:ec:83:33:cc:77:94:7f:6c:c0: 98:c5:18:15:5c:f1:5c:f5:0a:52:c1:d6:6c:f5:fb: 77:29:e4:f5:63:ca:09:9c:05:55:b2:5a:82:20:2d: 3a:f4:c6:f7:3f:8c:bd:e7:f2:ff:49:80:53:3e:2c: 5d:fa:f9:e9:cb:7c:80:fa:18:d5:38:fe:1e:18:17: 22:4c:ba:f5:cd:6e:16:08:ae:6e:78:e5:cf:32:0f: 1f:55:b4:68:ee:d5:79:d3:a7:37:67:f1:6e:7b:7a: fc:72:b4:76:8d:6f:eb:03:e4:3e:d5:cd:5f:d5:3a: 7d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A5:7B:5C:B0:39:F5:81:40:F1:7A:48:C4:42:5B:93:54:2F:43:57 X509v3 Authority Key Identifier: keyid:70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:3c:27:40:f3:6e:25:8b:5c:0c:ad:f9:b8:6b:e3:0e:f1:16: 8b:93:53:1b:c6:ba:75:ad:1e:8c:c1:b8:eb:04:7d:80:6f:b2: ae:dc:83:f9:8e:2b:f8:e0:49:74:d7:d0:b0:19:32:40:56:b1: d6:ea:c0:13:f0:05:25:9f:23:15:dd:b1:e3:99:f3:b5:38:8a: 6a:09:9e:86:fb:ec:eb:e4:37:df:0f:c3:aa:15:a9:c3:eb:59: 03:74:9b:b9:fb:7a:97:48:49:7d:e7:31:01:51:92:dd:3f:64: bb:fe:0e:67:5e:20:82:56:a0:d4:0b:66:78:17:d0:da:10:31: 44:48:99:8c:2e:44:24:5a:ef:f7:75:34:64:3a:48:71:ad:86: 97:f4:fd:39:e3:36:f7:c6:13:14:05:e5:37:5f:5d:81:83:52: bb:4b:58:c4:2c:01:58:a0:d1:ef:27:e8:33:66:10:ce:97:32: 3d:b1:94:5b:24:1d:84:b8:9a:47:0d:4d:52:66:be:09:42:d0: 86:c9:43:15:9b:8f:fb:12:08:cf:f3:c2:6d:d4:d9:35:75:2b: 76:de:74:22:72:6a:ef:8a:d8:c5:69:9c:71:b5:d1:9e:e9:d7: 6c:a9:96:59:63:cc:b4:fa:38:40:31:59:85:eb:de:69:83:78: 29:88:7b:e1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUbKH+2zAdjopZksDUvVP5d4cRNSwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1 OThDRTc3MTAeFw0yNjA5MTAwNzUxNDZaFw0yNjA5MTExMTE1NDZaMDMxMTAvBgNV BAMTKDAxQTU3QjVDQjAzOUY1ODE0MEYxN0E0OEM0NDI1QjkzNTQyRjQzNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtp1nT/N7V9KumFEai52LsWnr5 HiKzEOUgfX21N86fAmJwmUERVk1GEHpJ4sx4pqWidj7O4HxWzZ0SBzFW2KClPQMq QxaKJGfUxt0brFbIEfMKYQQy7vYAgTyZDt2stvh7ZLXru3HpGugdFGI+Ud9PtBrH fwAScABSyLKbTDWvbhCf1ZM16+IunKkD8uyDM8x3lH9swJjFGBVc8Vz1ClLB1mz1 +3cp5PVjygmcBVWyWoIgLTr0xvc/jL3n8v9JgFM+LF36+enLfID6GNU4/h4YFyJM uvXNbhYIrm545c8yDx9VtGju1XnTpzdn8W57evxytHaNb+sD5D7VzV/VOn0XAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUAaV7XLA59YFA8XpIxEJbk1QvQ1cwHwYDVR0j BBgwFoAUcCt5tEUzCsIdI3MIJ3pEclmM53EwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzEvNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1OThDRTc3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC83MDJCNzlCNDQ1MzMwQUMyMUQyMzczMDgy NzdBNDQ3MjU5OENFNzcxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzNmOTllNjZkLTRjN2ItNDEzMC05MWQ1LTRmYmQ4NDM1Nzc5Mi8xLzcwMkI3OUI0 NDUzMzBBQzIxRDIzNzMwODI3N0E0NDcyNTk4Q0U3NzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAoPCdA 824li1wMrfm4a+MO8RaLk1Mbxrp1rR6MwbjrBH2Ab7Ku3IP5jiv44El019CwGTJA VrHW6sAT8AUlnyMV3bHjmfO1OIpqCZ6G++zr5DffD8OqFanD61kDdJu5+3qXSEl9 5zEBUZLdP2S7/g5nXiCCVqDUC2Z4F9DaEDFESJmMLkQkWu/3dTRkOkhxrYaX9P05 4zb3xhMUBeU3X12Bg1K7S1jELAFYoNHvJ+gzZhDOlzI9sZRbJB2EuJpHDU1SZr4J QtCGyUMVm4/7EgjP88Jt1Nk1dSt23nQicmrvitjFaZxxtdGe6ddsqZZZY8y0+jhA MVmF695pg3gpiHvh -----END CERTIFICATE-----Generated at Thu Sep 10 19:13:35 2026 by rpki-client