$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft File: 0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft (raw, json) Hash identifier: s+9Rs2UbwC8mMyRP4+o6Mqi82a8CZsBWGaJ74kp8zKI= Subject key identifier: F9:1B:03:B9:0E:48:C5:78:12:F1:F8:94:9F:66:EC:33:E3:B9:7E:F6 Authority key identifier: 0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA Certificate issuer: /CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea Certificate serial: 1731DC81A3FDB66EE897D9789FBF6AE20AF5D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft Manifest number: BC Signing time: Fri 04 Sep 2026 05:33:23 +0000 Manifest this update: Fri 04 Sep 2026 05:28:23 +0000 Manifest next update: Sat 05 Sep 2026 09:13:23 +0000 Files and hashes: 1: 326130613a643638303a3a2f33322d3438203d3e20313339333137.roa (hash: 9uxdhCWJM/sIXCpTZUmH78FRG6qiNbULLGusY6bMbzg=) 2: 326130613a643638313a3a2f33322d3438203d3e20313339373931.roa (hash: LD70u5QlVqEB9vvyRbLQY7rIc7jKzVNRzxV1VLwEmOE=) 3: 326130613a643638323a653030303a3a2f33362d3438203d3e20323139323037.roa (hash: /hbUb7P8tvehfjH0Hs94vC86vj3k0KrkZvYJd6dLPnA=) 4: 326130613a643638373a666630313a3a2f34382d3438203d3e20323139353435.roa (hash: rL8ASD59Ti8nB9XD3UXOLC8XxvqgDesYATRPUcKVSuY=) 5: 326130613a643638373a666630323a3a2f34382d3438203d3e20323139323037.roa (hash: 5JWWZDi+y2DIDiFR71Ufp8CF8RxIHJzTGTA47i2VuYE=) 6: 326130613a643638373a663030303a3a2f34342d3438203d3e20313432343333.roa (hash: AMQEmk2Gamce4CGjOhcsatfMgR2ITuuPxLRE5OPFALo=) 7: 326130613a643638373a666630353a3a2f34382d3438203d3e20323138383637.roa (hash: sQzmM+cfjw9OGqZLZbYBKONhAU1u7EoEQyRU3OqTZ8U=) 8: 326130613a643638373a663130303a3a2f34342d3438203d3e20313937323133.roa (hash: bHHSi5wagGdCluZPsKdv0VQ8BFQU3w+P+YxMSNDafL4=) 9: 326130613a643638373a666630333a3a2f34382d3438203d3e20323139323038.roa (hash: S/8ZK1ErCZvTRtQCq1QRmXQBY3n8crW0uhTdSwe8qG0=) 10: 80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer (hash: TYsfkHtNOfK76uqy14SYaCemKP3HftisBSZd+5DPrVE=) 11: 326130613a643638373a666630343a3a2f34382d3438203d3e20323138383638.roa (hash: /Qn7vWpWpCtp1RtdEsraoox42aGCAAZITsl1NydtXls=) 12: 0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl (hash: J2OvcWgXM4CbcLA2G3gDZJVCwv8Qd01682kJbWFCBL4=) 13: 326130613a643638333a3a2f33322d3438203d3e2030.roa (hash: 1AoAuE4mRiqziiHkgepF+g+OjuGOS1bv+xQ+rN/5kXU=) 14: 326130613a643638373a653030303a3a2f34332d3438203d3e20323139343333.roa (hash: tW+nGNlDGvPdAUmeC4K3mnasXAgQn+DooLTJQYmn1dE=) 15: 326130613a643638323a643030303a3a2f33362d3438203d3e20323139323038.roa (hash: v/BWIbyLFdNKWIJBTAMGuH9YaifhTiluWVcVxi+Fhlk=) 16: 326130613a643638373a666630303a3a2f34382d3438203d3e20313937323133.roa (hash: SkwT1h/rOaQClLo9nHFAVUlnnxxHoz85B/heCrM8trg=) 17: 326130613a643638373a653130303a3a2f34332d3438203d3e20323139343333.roa (hash: g1wT/6cmNUPL0/+gCGthFM4aX0wibSOImG3Rr13sSvQ=) 18: 326130613a643638323a663030303a3a2f33362d3438203d3e20323139323833.roa (hash: 8/Dy4zPyPwRTfYS2Cii0dXxY7IAyPHqGc67WcpaHY8g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 09:13:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:31:dc:81:a3:fd:b6:6e:e8:97:d9:78:9f:bf:6a:e2:0a:f5:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea Validity Not Before: Sep 4 05:28:23 2026 GMT Not After : Sep 5 09:13:23 2026 GMT Subject: CN=F91B03B90E48C57812F1F8949F66EC33E3B97EF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:87:88:70:76:2e:30:cc:15:60:dd:61:ec:13: 49:b5:34:22:f9:b8:31:92:30:9e:b9:d8:31:e6:bf: 3b:90:b2:81:c9:5a:6f:eb:68:61:49:55:2b:1a:12: 0d:0c:99:dd:c4:7d:c7:70:ae:94:d1:b2:57:77:ca: a9:df:18:f0:c3:66:5b:f4:2f:38:dc:2f:3f:2e:60: 3f:37:4f:2d:76:43:d8:8b:f7:2d:4a:80:6c:03:14: d9:9b:41:23:b9:84:b8:6e:b3:4b:7d:ab:aa:e4:7a: 87:9d:c2:92:31:6d:71:08:2b:94:fc:70:8c:4e:14: 7b:4b:ee:2a:ad:db:7d:d4:8b:67:05:4f:1e:e3:3d: 4e:85:48:e9:38:9d:7e:00:84:e6:e2:71:48:6d:32: 3f:e5:6f:a2:6c:43:34:09:9e:11:07:fb:ce:b3:44: bf:7d:4e:7e:d6:c4:f3:c5:f7:6c:51:4e:13:19:34: 68:0b:ff:97:3d:04:40:60:b2:90:28:29:89:d6:63: 66:fc:e1:45:69:e3:b9:a3:45:6d:7d:ee:e8:31:b0: 10:9e:3f:69:04:3c:2b:32:2f:5d:38:2f:0b:c7:b7: 2c:b3:b2:9e:89:5c:94:82:a3:36:1d:a1:3a:e7:c3: a8:49:03:88:79:30:c9:b3:2c:8a:4a:d0:a5:f1:ea: d2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1B:03:B9:0E:48:C5:78:12:F1:F8:94:9F:66:EC:33:E3:B9:7E:F6 X509v3 Authority Key Identifier: keyid:0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:85:a2:a7:f9:1d:6c:f3:28:81:c8:83:3b:2b:0f:76:9b:f4: f2:b6:0f:58:5c:ee:d2:c7:fd:ba:04:c2:b5:57:52:ff:7c:37: 04:40:53:f3:47:4e:5b:19:e4:b2:69:42:50:8d:0c:20:da:68: ba:ed:b7:d9:8a:93:f8:6c:41:f0:30:6c:52:44:20:e3:06:29: 08:6e:aa:9c:aa:c8:57:1a:96:13:b2:39:24:08:31:2f:91:dd: 1e:9c:96:24:01:00:29:19:b0:71:11:11:9f:1d:60:d0:1e:b7: 05:5d:ad:f7:da:04:a2:56:d6:f0:64:0c:9d:36:de:3c:dc:33: f1:73:de:11:ac:3b:75:4c:a6:14:69:c1:d5:ec:f3:8f:c0:09: 75:5f:88:c0:01:5a:e7:02:a6:69:bf:4c:89:30:7d:d7:44:79: 33:cf:14:92:93:5f:96:bc:2d:5f:bc:e7:d0:5e:54:af:2e:fc: 0b:16:6c:06:b9:38:14:9d:ae:18:23:4f:0a:fe:e6:01:4c:b2: 53:a2:c9:19:2a:78:08:e7:e7:ed:7e:fc:95:a4:72:22:54:8c: b6:bc:e9:a5:8f:0b:33:3b:a8:3c:9a:d1:b5:85:aa:b7:88:9e: 9f:2e:71:8c:65:83:9a:dd:c4:79:6c:95:a9:1c:6c:9c:8a:1a: cf:bc:54:3e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgITFzHcgaP9tm7ol9l4n79q4gr10DANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygwZTcwYWUwYWNkMGJlODNkMmQ0NThjYTIwN2IxZDRmZmEz YzNlNGVhMB4XDTI2MDkwNDA1MjgyM1oXDTI2MDkwNTA5MTMyM1owMzExMC8GA1UE AxMoRjkxQjAzQjkwRTQ4QzU3ODEyRjFGODk0OUY2NkVDMzNFM0I5N0VGNjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIaHiHB2LjDMFWDdYewTSbU0Ivm4 MZIwnrnYMea/O5Cygclab+toYUlVKxoSDQyZ3cR9x3CulNGyV3fKqd8Y8MNmW/Qv ONwvPy5gPzdPLXZD2Iv3LUqAbAMU2ZtBI7mEuG6zS32rquR6h53CkjFtcQgrlPxw jE4Ue0vuKq3bfdSLZwVPHuM9ToVI6TidfgCE5uJxSG0yP+VvomxDNAmeEQf7zrNE v31OftbE88X3bFFOExk0aAv/lz0EQGCykCgpidZjZvzhRWnjuaNFbX3u6DGwEJ4/ aQQ8KzIvXTgvC8e3LLOynolclIKjNh2hOufDqEkDiHkwybMsikrQpfHq0t0CAwEA AaOCAkcwggJDMB0GA1UdDgQWBBT5GwO5DkjFeBLx+JSfZuwz47l+9jAfBgNVHSME GDAWgBQOcK4KzQvoPS1FjKIHsdT/o8Pk6jAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u ZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2NmLTRhMzctOTQwMy03NDNiMTVlYzJh OGUvMC8wRTcwQUUwQUNEMEJFODNEMkQ0NThDQTIwN0IxRDRGRkEzQzNFNEVBLmNy bDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvRG5DdUNzMEw2RDB0Ull5aUI3SFVfNlBE NU9vLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2IzZjJhYWFlLTIz Y2YtNGEzNy05NDAzLTc0M2IxNWVjMmE4ZS8wLzBFNzBBRTBBQ0QwQkU4M0QyRDQ1 OENBMjA3QjFENEZGQTNDM0U0RUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAyhaKn+R1s8yiByIM7Kw92 m/Tytg9YXO7Sx/26BMK1V1L/fDcEQFPzR05bGeSyaUJQjQwg2mi67bfZipP4bEHw MGxSRCDjBikIbqqcqshXGpYTsjkkCDEvkd0enJYkAQApGbBxERGfHWDQHrcFXa33 2gSiVtbwZAydNt483DPxc94RrDt1TKYUacHV7POPwAl1X4jAAVrnAqZpv0yJMH3X RHkzzxSSk1+WvC1fvOfQXlSvLvwLFmwGuTgUna4YI08K/uYBTLJToskZKngI5+ft fvyVpHIiVIy2vOmljwszO6g8mtG1haq3iJ6fLnGMZYOa3cR5bJWpHGycihrPvFQ+ -----END CERTIFICATE-----Generated at Fri Sep 4 23:21:53 2026 by rpki-client