$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft File: 0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft (raw, json) Hash identifier: nX0ZBhLV/5mJJYFXYiR9MGb1A/H39EGaXIcLP3QLcF0= Subject key identifier: 41:C3:08:64:56:BE:D9:0A:86:6F:CF:5E:2B:56:55:F7:BC:0D:AB:7C Authority key identifier: 0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA Certificate issuer: /CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea Certificate serial: 3C5E571217461B8D9B44344FFE8CB5FF3A4DA6D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft Manifest number: 5C Signing time: Tue 21 Jul 2026 13:47:36 +0000 Manifest this update: Tue 21 Jul 2026 13:42:36 +0000 Manifest next update: Wed 22 Jul 2026 13:47:36 +0000 Files and hashes: 1: 326130613a643638373a666630313a3a2f34382d3438203d3e20323139353435.roa (hash: rL8ASD59Ti8nB9XD3UXOLC8XxvqgDesYATRPUcKVSuY=) 2: 326130613a643638313a3a2f33322d3438203d3e20313339373931.roa (hash: LD70u5QlVqEB9vvyRbLQY7rIc7jKzVNRzxV1VLwEmOE=) 3: 326130613a643638373a663130303a3a2f34342d3438203d3e20313937323133.roa (hash: bHHSi5wagGdCluZPsKdv0VQ8BFQU3w+P+YxMSNDafL4=) 4: 326130613a643638373a653130303a3a2f34332d3438203d3e20323139343333.roa (hash: g1wT/6cmNUPL0/+gCGthFM4aX0wibSOImG3Rr13sSvQ=) 5: 326130613a643638373a666630333a3a2f34382d3438203d3e20323139323038.roa (hash: S/8ZK1ErCZvTRtQCq1QRmXQBY3n8crW0uhTdSwe8qG0=) 6: 326130613a643638373a666630303a3a2f34382d3438203d3e20313937323133.roa (hash: SkwT1h/rOaQClLo9nHFAVUlnnxxHoz85B/heCrM8trg=) 7: 326130613a643638303a3a2f33322d3438203d3e20313339333137.roa (hash: 9uxdhCWJM/sIXCpTZUmH78FRG6qiNbULLGusY6bMbzg=) 8: 326130613a643638323a653030303a3a2f33362d3438203d3e20323139323037.roa (hash: /hbUb7P8tvehfjH0Hs94vC86vj3k0KrkZvYJd6dLPnA=) 9: 326130613a643638333a3a2f33322d3438203d3e2030.roa (hash: 1AoAuE4mRiqziiHkgepF+g+OjuGOS1bv+xQ+rN/5kXU=) 10: 0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl (hash: kjIfHEwr3ur3vKlP4Mk32a7DBDbm/TSulaSNdRuLwnw=) 11: 326130613a643638323a663030303a3a2f33362d3438203d3e20323139323833.roa (hash: 8/Dy4zPyPwRTfYS2Cii0dXxY7IAyPHqGc67WcpaHY8g=) 12: 326130613a643638323a643030303a3a2f33362d3438203d3e20323139323038.roa (hash: v/BWIbyLFdNKWIJBTAMGuH9YaifhTiluWVcVxi+Fhlk=) 13: 326130613a643638373a663030303a3a2f34342d3438203d3e20313432343333.roa (hash: AMQEmk2Gamce4CGjOhcsatfMgR2ITuuPxLRE5OPFALo=) 14: 80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer (hash: TYsfkHtNOfK76uqy14SYaCemKP3HftisBSZd+5DPrVE=) 15: 326130613a643638373a653030303a3a2f34332d3438203d3e20323139343333.roa (hash: tW+nGNlDGvPdAUmeC4K3mnasXAgQn+DooLTJQYmn1dE=) 16: 326130613a643638373a666630323a3a2f34382d3438203d3e20323139323037.roa (hash: 5JWWZDi+y2DIDiFR71Ufp8CF8RxIHJzTGTA47i2VuYE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 13:47:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:5e:57:12:17:46:1b:8d:9b:44:34:4f:fe:8c:b5:ff:3a:4d:a6:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea Validity Not Before: Jul 21 13:42:36 2026 GMT Not After : Jul 22 13:47:36 2026 GMT Subject: CN=41C3086456BED90A866FCF5E2B5655F7BC0DAB7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:86:24:9b:58:01:4e:1e:69:8f:69:61:ea:52: 4e:85:55:dc:f1:aa:6b:6e:dd:9b:53:f0:31:a8:db: 2d:2d:8b:f3:fa:37:4d:69:81:01:6b:1e:63:b5:a4: be:70:32:0b:e0:fc:f3:0e:30:b5:61:cd:98:a8:3f: ae:8d:75:4e:e9:22:23:c1:4a:0b:50:a5:82:f3:38: 94:93:19:d9:4d:98:67:7a:41:db:fe:ed:b1:19:b8: 86:ff:5c:7c:e8:21:7f:21:77:0d:90:ad:9a:5f:bb: 3c:78:5a:10:5d:e6:ac:d5:1a:dc:c4:a4:d8:da:0e: b9:6f:30:ec:02:a6:42:1f:24:34:4d:e1:df:7b:7b: ec:44:61:00:17:d6:eb:e8:3e:94:4f:d4:de:4d:ba: 6b:6d:58:11:05:17:6d:e2:0c:41:8d:75:70:d1:9c: 1b:ba:63:90:11:65:fc:a9:81:cf:b8:84:d4:77:de: a0:b6:d1:6c:de:41:46:8a:6f:a6:52:ce:0d:83:34: 6c:7f:59:dd:99:41:ad:0d:f7:c6:c6:ec:f9:44:56: a0:1d:6b:f0:96:8a:7e:09:41:67:d6:33:e7:46:b8: 6f:bc:7a:e9:df:3c:cc:a1:a0:b1:27:47:a2:6f:d4: 84:aa:ad:26:c6:ba:ab:5b:24:27:d7:3a:5d:e3:cf: 54:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C3:08:64:56:BE:D9:0A:86:6F:CF:5E:2B:56:55:F7:BC:0D:AB:7C X509v3 Authority Key Identifier: keyid:0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:cd:04:87:be:16:44:73:28:4b:10:b8:df:b6:0c:c0:c3:5e: 78:34:77:a2:04:44:d7:f0:3f:b2:d0:aa:88:78:74:54:aa:59: a1:2e:ca:d8:bc:14:cb:39:80:9c:5d:f0:5f:d2:b7:3b:38:60: e7:c8:8c:b6:81:0e:94:a0:33:ae:47:b9:e3:85:7e:ab:2d:98: 64:37:09:88:11:e7:51:d9:e7:df:55:cb:98:35:f8:3a:47:87: 8e:db:4c:4b:ad:9f:98:b0:8c:22:89:e4:54:70:e0:67:73:13: 26:2a:48:ff:66:63:f4:c2:89:52:6d:fb:d0:b9:1e:10:d6:b6: 90:e6:ef:56:23:13:eb:06:7c:77:ec:50:45:8d:fd:18:4b:53: c0:29:da:0e:a8:54:d7:2b:0b:f7:c5:7c:ae:04:45:1c:fd:d9: d8:dc:74:84:a8:d5:88:5f:4a:22:57:52:17:1a:6a:27:86:45: a7:d9:5b:fe:41:2f:79:75:62:fd:4a:b9:53:2b:cf:b0:df:7d: a8:e6:82:03:60:b9:03:90:fe:7f:c5:58:a5:3c:df:59:eb:08: 09:c2:5f:03:5e:bd:a2:72:1e:d2:1e:6e:df:1c:7e:ab:41:b4: d4:08:9f:3c:88:06:3c:d4:b9:97:bc:33:e6:f4:9a:47:51:58: a6:54:54:a9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPF5XEhdGG42bRDRP/oy1/zpNptMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGU3MGFlMGFjZDBiZTgzZDJkNDU4Y2EyMDdiMWQ0ZmZh M2MzZTRlYTAeFw0yNjA3MjExMzQyMzZaFw0yNjA3MjIxMzQ3MzZaMDMxMTAvBgNV BAMTKDQxQzMwODY0NTZCRUQ5MEE4NjZGQ0Y1RTJCNTY1NUY3QkMwREFCN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvhiSbWAFOHmmPaWHqUk6FVdzx qmtu3ZtT8DGo2y0ti/P6N01pgQFrHmO1pL5wMgvg/PMOMLVhzZioP66NdU7pIiPB SgtQpYLzOJSTGdlNmGd6Qdv+7bEZuIb/XHzoIX8hdw2QrZpfuzx4WhBd5qzVGtzE pNjaDrlvMOwCpkIfJDRN4d97e+xEYQAX1uvoPpRP1N5NumttWBEFF23iDEGNdXDR nBu6Y5ARZfypgc+4hNR33qC20WzeQUaKb6ZSzg2DNGx/Wd2ZQa0N98bG7PlEVqAd a/CWin4JQWfWM+dGuG+8eunfPMyhoLEnR6Jv1ISqrSbGuqtbJCfXOl3jz1ShAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUQcMIZFa+2QqGb89eK1ZV97wNq3wwHwYDVR0j BBgwFoAUDnCuCs0L6D0tRYyiB7HU/6PD5OowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjNmMmFhYWUtMjNjZi00YTM3LTk0MDMtNzQzYjE1ZWMy YThlLzAvMEU3MEFFMEFDRDBCRTgzRDJENDU4Q0EyMDdCMUQ0RkZBM0MzRTRFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RuQ3VDczBMNkQwdFJZeWlCN0hVXzZQ RDVPby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMC8wRTcwQUUwQUNEMEJFODNEMkQ0 NThDQTIwN0IxRDRGRkEzQzNFNEVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEc0Eh74WRHMoSxC437YM wMNeeDR3ogRE1/A/stCqiHh0VKpZoS7K2LwUyzmAnF3wX9K3Ozhg58iMtoEOlKAz rke544V+qy2YZDcJiBHnUdnn31XLmDX4OkeHjttMS62fmLCMIonkVHDgZ3MTJipI /2Zj9MKJUm370LkeENa2kObvViMT6wZ8d+xQRY39GEtTwCnaDqhU1ysL98V8rgRF HP3Z2Nx0hKjViF9KIldSFxpqJ4ZFp9lb/kEveXVi/Uq5UyvPsN99qOaCA2C5A5D+ f8VYpTzfWesICcJfA169onIe0h5u3xx+q0G01AifPIgGPNS5l7wz5vSaR1FYplRU qQ== -----END CERTIFICATE-----Generated at Tue Jul 21 20:32:13 2026 by rpki-client