$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft File: 0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft (raw, json) Hash identifier: eQyUdZlibzckitAwPS6onCt6CpnFS+KrcG5qGyXN1X0= Subject key identifier: E5:EF:14:95:9B:13:2C:DC:44:E2:62:C9:95:2F:2D:76:E0:3B:6B:8B Authority key identifier: 0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA Certificate issuer: /CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea Certificate serial: 33E8FDEC3CABBC1044F69587034A993053CDAFAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft Manifest number: 0107 Signing time: Fri 23 Oct 2026 18:29:35 +0000 Manifest this update: Fri 23 Oct 2026 18:24:35 +0000 Manifest next update: Sat 24 Oct 2026 21:08:35 +0000 Files and hashes: 1: 326130613a643638373a666630353a3a2f34382d3438203d3e20323138383637.roa (hash: sQzmM+cfjw9OGqZLZbYBKONhAU1u7EoEQyRU3OqTZ8U=) 2: 326130613a643638373a653030303a3a2f34332d3438203d3e20323139343333.roa (hash: tW+nGNlDGvPdAUmeC4K3mnasXAgQn+DooLTJQYmn1dE=) 3: 238A11AE245357E72FEB39785C7BC03A973A44E1.cer (hash: R+HEqGQkKX3kuC+uAGVikvyFGt/9CvxJ0iCn1j10oDE=) 4: 326130613a643638323a663030303a3a2f33362d3438203d3e20323139323833.roa (hash: 8/Dy4zPyPwRTfYS2Cii0dXxY7IAyPHqGc67WcpaHY8g=) 5: 326130613a643638373a666630343a3a2f34382d3438203d3e20323138383638.roa (hash: /Qn7vWpWpCtp1RtdEsraoox42aGCAAZITsl1NydtXls=) 6: 326130613a643638323a653030303a3a2f33362d3438203d3e20323139323037.roa (hash: /hbUb7P8tvehfjH0Hs94vC86vj3k0KrkZvYJd6dLPnA=) 7: 326130613a643638373a663130303a3a2f34342d3438203d3e20313937323133.roa (hash: bHHSi5wagGdCluZPsKdv0VQ8BFQU3w+P+YxMSNDafL4=) 8: 326130613a643638373a666630323a3a2f34382d3438203d3e20323139323037.roa (hash: 5JWWZDi+y2DIDiFR71Ufp8CF8RxIHJzTGTA47i2VuYE=) 9: 326130613a643638303a3a2f33322d3438203d3e20313339333137.roa (hash: 9uxdhCWJM/sIXCpTZUmH78FRG6qiNbULLGusY6bMbzg=) 10: 326130613a643638323a643030303a3a2f33362d3438203d3e20323139323038.roa (hash: v/BWIbyLFdNKWIJBTAMGuH9YaifhTiluWVcVxi+Fhlk=) 11: 326130613a643638373a666630333a3a2f34382d3438203d3e20323139323038.roa (hash: S/8ZK1ErCZvTRtQCq1QRmXQBY3n8crW0uhTdSwe8qG0=) 12: 326130613a643638373a666630313a3a2f34382d3438203d3e20323139353435.roa (hash: rL8ASD59Ti8nB9XD3UXOLC8XxvqgDesYATRPUcKVSuY=) 13: 0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl (hash: 1Fn2ETcJuPuWrap3aWhnOHVNR3VQh/zZ5QB+IrsrXEw=) 14: 326130613a643638373a666630303a3a2f34382d3438203d3e20313937323133.roa (hash: SkwT1h/rOaQClLo9nHFAVUlnnxxHoz85B/heCrM8trg=) 15: 326130613a643638373a663030303a3a2f34342d3438203d3e20313432343333.roa (hash: AMQEmk2Gamce4CGjOhcsatfMgR2ITuuPxLRE5OPFALo=) 16: 326130613a643638373a666630363a3a2f34382d3438203d3e20323138373031.roa (hash: 1T45wJGc9qWA/I6HYWiBwXOEkTOAa5L1s8+wvsXsnRY=) 17: 326130613a643638333a3a2f33322d3438203d3e2030.roa (hash: 1AoAuE4mRiqziiHkgepF+g+OjuGOS1bv+xQ+rN/5kXU=) 18: 326130613a643638313a3a2f33322d3438203d3e20313339373931.roa (hash: LD70u5QlVqEB9vvyRbLQY7rIc7jKzVNRzxV1VLwEmOE=) 19: 326130613a643638373a653130303a3a2f34332d3438203d3e20323139343333.roa (hash: g1wT/6cmNUPL0/+gCGthFM4aX0wibSOImG3Rr13sSvQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Oct 2026 21:08:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:e8:fd:ec:3c:ab:bc:10:44:f6:95:87:03:4a:99:30:53:cd:af:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea Validity Not Before: Oct 23 18:24:35 2026 GMT Not After : Oct 24 21:08:35 2026 GMT Subject: CN=E5EF14959B132CDC44E262C9952F2D76E03B6B8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f6:88:d7:14:c3:5f:a3:30:43:98:de:73:e6: 6d:94:67:d3:32:af:47:6c:36:24:22:6f:1b:6d:ec: df:20:09:7f:f2:cb:29:99:10:56:80:d4:a4:9d:6d: 6c:af:5a:85:24:52:4e:c7:d1:4a:36:eb:85:18:35: 92:20:2d:5f:20:16:90:25:49:f5:aa:2f:10:5d:40: 4d:3c:73:da:8f:25:9e:80:ce:03:82:f7:d3:aa:a8: 95:3a:0f:1c:d6:f4:7c:4c:d7:26:ab:46:ed:fb:53: 75:12:4d:38:af:1d:bd:c6:be:09:b1:3b:88:26:02: 1a:38:e3:44:7c:12:c7:9d:c6:5b:7c:2e:4f:2b:33: 25:3b:2d:96:25:08:ad:04:b9:ad:da:e5:8d:47:64: d1:66:d6:da:0d:bf:13:65:1a:92:58:36:4c:50:5d: 4c:e6:e9:74:ad:f6:d9:74:12:d4:17:06:b1:54:9e: 3b:1e:5e:a6:2a:d7:4c:f0:83:e6:ae:4c:dc:b5:48: b5:12:be:a1:c3:91:30:1a:26:98:bf:29:f2:95:17: 20:e3:05:e4:2f:05:64:0c:90:49:23:e5:7f:46:b2: f5:48:c5:3d:d2:bb:61:6e:49:bf:12:31:bb:d0:6b: 00:d6:12:c2:f1:bf:1c:68:73:4c:d2:39:7a:08:7e: ef:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:EF:14:95:9B:13:2C:DC:44:E2:62:C9:95:2F:2D:76:E0:3B:6B:8B X509v3 Authority Key Identifier: keyid:0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:77:a4:48:19:fe:8d:1a:1f:2e:77:e9:da:be:98:63:c5:9d: 81:56:00:a8:6c:20:00:1c:0e:ed:49:60:2f:ea:c2:0f:d7:18: c3:a6:8b:d1:31:d5:c0:16:95:1b:01:61:f5:01:47:57:3a:a7: 69:2b:40:69:ac:26:6f:17:81:7b:1d:c3:f8:3a:cb:38:25:18: 2b:93:f5:6c:25:12:b2:aa:8e:ac:ba:c3:7a:00:ba:70:f1:e8: 03:38:ae:fb:1f:99:99:cc:1b:d9:86:dc:3b:b4:db:fc:e5:c6: 49:76:e0:ab:33:51:ce:ce:a8:09:68:37:e5:bb:ed:b9:7b:77: 7a:bc:2e:ff:68:36:f7:bb:c5:c4:66:80:08:10:d7:14:60:2d: 7a:e5:7d:79:be:38:28:0a:be:d7:49:cf:14:22:17:c6:39:8c: 84:0d:60:d8:54:24:26:54:58:5a:3e:c7:35:77:e4:82:6b:7a: f0:6a:99:97:97:dc:11:e5:6f:10:9d:bb:c7:c3:02:16:2a:8c: c3:31:44:8e:8d:52:ad:e3:bc:f9:43:36:80:d2:c3:38:fa:17: 4d:4e:a9:c7:c3:d9:bb:4d:12:d5:ed:62:af:d9:75:ba:bf:b7: 38:6b:52:a2:50:15:61:da:69:ca:65:1e:3c:19:f9:67:a8:a5: 00:ee:a5:b6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUM+j97DyrvBBE9pWHA0qZMFPNr6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGU3MGFlMGFjZDBiZTgzZDJkNDU4Y2EyMDdiMWQ0ZmZh M2MzZTRlYTAeFw0yNjEwMjMxODI0MzVaFw0yNjEwMjQyMTA4MzVaMDMxMTAvBgNV BAMTKEU1RUYxNDk1OUIxMzJDREM0NEUyNjJDOTk1MkYyRDc2RTAzQjZCOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL9ojXFMNfozBDmN5z5m2UZ9My r0dsNiQibxtt7N8gCX/yyymZEFaA1KSdbWyvWoUkUk7H0Uo264UYNZIgLV8gFpAl SfWqLxBdQE08c9qPJZ6AzgOC99OqqJU6DxzW9HxM1yarRu37U3USTTivHb3Gvgmx O4gmAho440R8Esedxlt8Lk8rMyU7LZYlCK0Eua3a5Y1HZNFm1toNvxNlGpJYNkxQ XUzm6XSt9tl0EtQXBrFUnjseXqYq10zwg+auTNy1SLUSvqHDkTAaJpi/KfKVFyDj BeQvBWQMkEkj5X9GsvVIxT3Su2FuSb8SMbvQawDWEsLxvxxoc0zSOXoIfu+pAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU5e8UlZsTLNxE4mLJlS8tduA7a4swHwYDVR0j BBgwFoAUDnCuCs0L6D0tRYyiB7HU/6PD5OowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjNmMmFhYWUtMjNjZi00YTM3LTk0MDMtNzQzYjE1ZWMy YThlLzAvMEU3MEFFMEFDRDBCRTgzRDJENDU4Q0EyMDdCMUQ0RkZBM0MzRTRFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RuQ3VDczBMNkQwdFJZeWlCN0hVXzZQ RDVPby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMC8wRTcwQUUwQUNEMEJFODNEMkQ0 NThDQTIwN0IxRDRGRkEzQzNFNEVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmXekSBn+jRofLnfp2r6Y Y8WdgVYAqGwgABwO7UlgL+rCD9cYw6aL0THVwBaVGwFh9QFHVzqnaStAaawmbxeB ex3D+DrLOCUYK5P1bCUSsqqOrLrDegC6cPHoAziu+x+Zmcwb2YbcO7Tb/OXGSXbg qzNRzs6oCWg35bvtuXt3erwu/2g297vFxGaACBDXFGAteuV9eb44KAq+10nPFCIX xjmMhA1g2FQkJlRYWj7HNXfkgmt68GqZl5fcEeVvEJ27x8MCFiqMwzFEjo1SreO8 +UM2gNLDOPoXTU6px8PZu00S1e1ir9l1ur+3OGtSolAVYdppymUePBn5Z6ilAO6l tg== -----END CERTIFICATE-----Generated at Sat Oct 24 10:11:15 2026 by rpki-client