$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft File: 702B79B445330AC21D237308277A4472598CE771.mft (raw, json) Hash identifier: Q9zDH7YrBSR0aHQ3h7ePlHFP3zSqZsg2VHd7cQM+s3g= Subject key identifier: A6:EE:9C:39:2D:17:C0:D3:76:12:B2:C9:DF:61:11:31:22:F2:53:2D Authority key identifier: 70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 Certificate issuer: /CN=702B79B445330AC21D237308277A4472598CE771 Certificate serial: 63AE3B6C8B48FA13BAB8FB0F72967E97942346FE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft Manifest number: 025F Signing time: Mon 26 Oct 2026 15:50:29 +0000 Manifest this update: Mon 26 Oct 2026 15:45:29 +0000 Manifest next update: Tue 27 Oct 2026 17:16:29 +0000 Files and hashes: 1: 326131343a373538333a663730383a3a2f34382d3438203d3e20323134393535.roa (hash: BfyLlDqF0Edwl/zOmuvfdcVLnc4obqrtPh+ZM8Sxf3A=) 2: 326131343a373538333a663730323a3a2f34382d3438203d3e20323134393535.roa (hash: T8xZyybzsyw+7Y6G2xpepmRbN1sxHF8csgmYS+6ax4g=) 3: 326131343a373538333a663730313a3a2f34382d3438203d3e20323134393535.roa (hash: XUt70KrO/DZgEBIx3i5TbfQXGZ+eg7uSXb1GJc8l4hI=) 4: 702B79B445330AC21D237308277A4472598CE771.crl (hash: DrDH3g44Q3ts+Xo+MSXdn3F1uVlcF55JUMxsOYVl1UI=) 5: 326131343a373538333a663734343a3a2f34382d3438203d3e20323134393535.roa (hash: JTJlcpj4bdZXr2RfEfDaIGB9iXZbdfqZgj82vxMUAQ8=) 6: 326131343a373538333a663736343a3a2f34382d3438203d3e20323134393535.roa (hash: kHUe3uVUSGFeDWBdd+rc/mUnB410GE7EKZwGLoehT8A=) 7: 326131343a373538333a663730613a3a2f34382d3438203d3e20323134393535.roa (hash: WJ98gf+04bqCc2wkbW8PUQ1n6vcZpCFo8z1U88LIVjM=) 8: 326131343a373538333a663730623a3a2f34382d3438203d3e20323134393535.roa (hash: kLF1pGobCPtSBqVgUGHgu1by1e7kkegKpHMRpd10cN0=) 9: 326131343a373538333a663730343a3a2f34382d3438203d3e20323134393535.roa (hash: C17xF/SvFNgTZ+VDgUs7ZyetbfwwqZRUzPBPCIMJ6AY=) 10: 326131343a373538333a663730373a3a2f34382d3438203d3e20323134393535.roa (hash: XpDNChEgWAEC6kMqtH8GJv2xEc4sQx1hwhkpRZvuOlU=) 11: 326131343a373538333a663730393a3a2f34382d3438203d3e20323134393535.roa (hash: bP6Vil1ntI/A7DETceUwP8FoIfBhjfD0YLUgBJ8zYgw=) 12: 326131343a373538333a663734333a3a2f34382d3438203d3e20323134393535.roa (hash: VeUJyfT74mzmYyns5eihJo8AIvB5/kXqpPen5nLIFGE=) 13: 326131343a373538333a663730363a3a2f34382d3438203d3e20323134393535.roa (hash: sPuODu16efAd824e8O/TQUzJSLBVmbQxN4shUBtjGRQ=) 14: 326131343a373538333a663730333a3a2f34382d3438203d3e20323134393535.roa (hash: CplFscx8cCO4S8dYM048y2aNxXev0VXDMkExRtnK2o8=) 15: 326131343a373538333a663730633a3a2f34382d3438203d3e20323134393535.roa (hash: MCTGvJAm8U3NtPMr0TfqstCKnf65Svz4B5aqt1Vg4GE=) 16: 326131343a373538333a663730353a3a2f34382d3438203d3e20323134393535.roa (hash: Y5G8XKTZkVVsjw8mhjg5SqlJ1TRgLMIPSRTRFixRX5M=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 17:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ae:3b:6c:8b:48:fa:13:ba:b8:fb:0f:72:96:7e:97:94:23:46:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=702B79B445330AC21D237308277A4472598CE771 Validity Not Before: Oct 26 15:45:29 2026 GMT Not After : Oct 27 17:16:29 2026 GMT Subject: CN=A6EE9C392D17C0D37612B2C9DF61113122F2532D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:67:e4:41:ad:ea:53:20:20:c1:63:a8:96:3d: 38:a4:77:fd:a1:ba:ca:96:1d:ca:9b:41:24:49:73: 2f:83:53:04:cf:a0:f1:42:55:9a:59:8f:42:81:80: 56:28:f0:5a:e5:37:ee:e1:0c:4b:19:a9:46:8a:16: bb:ef:b3:be:3c:af:ce:02:7a:ba:1f:96:2e:a8:61: 72:af:ed:6e:79:ec:e0:b4:85:2a:ca:c6:a3:81:c0: 83:5c:0e:4e:ad:22:90:9c:84:da:57:c6:bb:a4:6e: c6:12:82:b6:db:61:64:63:f0:70:9e:c9:8b:71:cc: 67:7a:fc:9b:84:89:a6:72:42:21:bb:56:51:55:6c: fa:47:4a:ef:05:4a:9a:f6:17:ba:d5:f1:39:31:df: 14:18:b0:6a:04:84:d3:9f:8d:6e:c8:76:ae:90:19: b7:aa:c3:fe:6e:a2:96:d5:ed:05:74:c7:10:a2:30: a8:64:ee:1d:d3:6e:db:db:88:18:09:30:2e:5b:7d: f8:d8:30:bd:59:65:11:08:4a:9b:d7:74:c6:e4:c6: 4e:2c:3e:9a:9d:a3:20:d7:7e:ae:da:ba:70:9f:c2: ba:4b:09:50:7b:84:63:a9:ed:d5:02:04:fd:1d:3c: ed:9d:c8:18:73:82:17:10:a4:9e:7c:89:78:ac:e8: dc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:EE:9C:39:2D:17:C0:D3:76:12:B2:C9:DF:61:11:31:22:F2:53:2D X509v3 Authority Key Identifier: keyid:70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:92:cb:dc:cb:d4:9d:a7:d3:8d:2e:05:78:10:e4:b7:18:8b: 42:20:0f:09:32:06:d0:34:b5:21:f5:54:93:f3:e7:68:02:e8: c4:ef:91:10:9c:ea:7b:85:9b:1b:ab:80:7d:29:31:75:ee:7f: cd:d2:c5:19:00:a7:aa:0d:cb:ff:65:b5:9d:8b:8a:fd:ba:ce: 20:e6:8d:1f:9d:47:2e:ba:3e:c1:cd:dd:d3:d2:f9:9f:c9:aa: 14:9e:5e:2d:a3:87:0d:18:ba:28:b6:f5:76:c9:03:6b:fc:68: 2d:af:63:71:bd:6f:b0:35:02:39:d4:f9:21:65:11:00:b5:fe: de:a3:59:be:7a:02:e7:eb:e8:00:bb:e5:2a:81:0b:9b:28:1a: c4:d0:2d:57:be:fd:3a:0f:35:d8:81:a1:ae:60:64:27:57:ab: 54:39:36:fd:c7:31:7e:ae:49:ce:eb:57:ea:07:8a:d8:5a:2e: ac:b1:6f:7b:32:bd:9a:fa:6e:a1:38:bf:37:ee:33:fc:26:7d: 1c:a4:ae:27:5b:82:07:fd:5f:40:87:0d:dd:91:05:17:f4:23: 04:93:12:ba:ef:9d:cf:ad:88:02:ea:47:3a:e2:f6:5d:34:ce: c4:7c:cc:fd:92:d3:4f:37:b8:2b:43:b5:a4:73:af:a0:d1:b5: 77:a1:e3:d9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUY647bItI+hO6uPsPcpZ+l5QjRv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1 OThDRTc3MTAeFw0yNjEwMjYxNTQ1MjlaFw0yNjEwMjcxNzE2MjlaMDMxMTAvBgNV BAMTKEE2RUU5QzM5MkQxN0MwRDM3NjEyQjJDOURGNjExMTMxMjJGMjUzMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWZ+RBrepTICDBY6iWPTikd/2h usqWHcqbQSRJcy+DUwTPoPFCVZpZj0KBgFYo8FrlN+7hDEsZqUaKFrvvs748r84C erofli6oYXKv7W557OC0hSrKxqOBwINcDk6tIpCchNpXxrukbsYSgrbbYWRj8HCe yYtxzGd6/JuEiaZyQiG7VlFVbPpHSu8FSpr2F7rV8Tkx3xQYsGoEhNOfjW7Idq6Q Gbeqw/5uopbV7QV0xxCiMKhk7h3TbtvbiBgJMC5bffjYML1ZZREISpvXdMbkxk4s PpqdoyDXfq7aunCfwrpLCVB7hGOp7dUCBP0dPO2dyBhzghcQpJ58iXis6NwPAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUpu6cOS0XwNN2ErLJ32ERMSLyUy0wHwYDVR0j BBgwFoAUcCt5tEUzCsIdI3MIJ3pEclmM53EwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzEvNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1OThDRTc3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC83MDJCNzlCNDQ1MzMwQUMyMUQyMzczMDgy NzdBNDQ3MjU5OENFNzcxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzNmOTllNjZkLTRjN2ItNDEzMC05MWQ1LTRmYmQ4NDM1Nzc5Mi8xLzcwMkI3OUI0 NDUzMzBBQzIxRDIzNzMwODI3N0E0NDcyNTk4Q0U3NzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBSksvc y9Sdp9ONLgV4EOS3GItCIA8JMgbQNLUh9VST8+doAujE75EQnOp7hZsbq4B9KTF1 7n/N0sUZAKeqDcv/ZbWdi4r9us4g5o0fnUcuuj7Bzd3T0vmfyaoUnl4to4cNGLoo tvV2yQNr/Ggtr2NxvW+wNQI51PkhZREAtf7eo1m+egLn6+gAu+UqgQubKBrE0C1X vv06DzXYgaGuYGQnV6tUOTb9xzF+rknO61fqB4rYWi6ssW97Mr2a+m6hOL837jP8 Jn0cpK4nW4IH/V9Ahw3dkQUX9CMEkxK6753PrYgC6kc64vZdNM7EfMz9ktNPN7gr Q7Wkc6+g0bV3oePZ -----END CERTIFICATE-----Generated at Tue Oct 27 07:49:44 2026 by rpki-client