$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft File: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft (raw, json) Hash identifier: pQuJSDIBzZGL0djxz99VA0wSogiL6ruJopf33byA6Xg= Subject key identifier: 25:C0:F8:FE:47:EF:DE:6B:68:94:EF:7D:2E:44:F6:EB:D4:A8:0F:BA Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F Certificate issuer: /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Certificate serial: 3795CD703C66D6EBD752A5807569D5244C6B166C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft Manifest number: 0125 Signing time: Fri 06 Mar 2026 09:36:25 +0000 Manifest this update: Fri 06 Mar 2026 09:31:25 +0000 Manifest next update: Sat 07 Mar 2026 11:53:25 +0000 Files and hashes: 1: 326131343a373538303a666637323a3a2f34382d3438203d3e20323033393135.roa (hash: h9EOAcugJrwunceFQsvuVh/viiSOkDi6CuOcdJIPWnA=) 2: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl (hash: 4oJeZ2IDZCegj8M8+mMU4tEdvTCsJVJf6O/TylC5GGM=) 3: 326131343a373538303a666637383a3a2f34382d3438203d3e20323033393135.roa (hash: HnRWSrEpeOmuzTKhKK+Ly8/65pwZBhG8hC56Nip/vA0=) 4: 326131343a373538303a666637313a3a2f34382d3438203d3e20323033393135.roa (hash: tQOuxzjoO2gOr2+IueULnKw1bzMsp7EoDLzHElEe0zw=) 5: 326131343a373538303a666637363a3a2f34382d3438203d3e20323033393135.roa (hash: BkHJMnQDPpptXCMBwmodU4zh5ifR8UsDSgAYqmaYZ4U=) 6: 326131343a373538303a666637613a3a2f34382d3438203d3e20323033393135.roa (hash: lVFPEuT+Vv7EHAhCsqJ2Rg8eFP3usNSJ0TffuGmsFKE=) 7: 326131343a373538303a666637633a3a2f34382d3438203d3e20323033393135.roa (hash: o5X2AD19YxTsiyZsqxaO6LcogckEDGsmBlZBOovT7M0=) 8: 326131343a373538303a666637333a3a2f34382d3438203d3e20323033393135.roa (hash: GieRIT3AIgJdp4hafy8WbPzRF4MVeOc7uBzRolQt/Os=) 9: 326131343a373538303a666637623a3a2f34382d3438203d3e20323033393135.roa (hash: +Dm2JEqaSsfzmcw/vRVxZqJazGgE0R+iZSKdYatTFPI=) 10: 326131343a373538303a666637643a3a2f34382d3438203d3e20323033393135.roa (hash: H+78AH4TYlugOgXjwzDN7rCd3EnIWoVZYuyJbZiEnfs=) 11: 326131343a373538303a666637373a3a2f34382d3438203d3e20323033393135.roa (hash: F5/aVvIreRBQw19BMcjvtJaH6IAMjMe6w+V1TelngZU=) 12: 326131343a373538303a666637663a3a2f34382d3438203d3e20323033393135.roa (hash: AKQUYWOgneoO1qpRyAABoiC4d23AXJsif2Ph8QnUXyw=) 13: 326131343a373538303a666637303a3a2f34382d3438203d3e20323033393135.roa (hash: zyXKXDvOIxNrBW5QrQm19sSxkRDmx9tFlmRCkefYJk4=) 14: 326131343a373538303a666637653a3a2f34382d3438203d3e20323033393135.roa (hash: U6uqpQVMvicANeE1+RdGwfiUHzScjnhV12wDyDdzXu8=) 15: 326131343a373538303a666637343a3a2f34382d3438203d3e20323033393135.roa (hash: wat7PE9fGydcz5ayop5kavvbRXomHufzivqvTvbesao=) 16: 326131343a373538303a666637393a3a2f34382d3438203d3e20323033393135.roa (hash: 4JRXyyfbh5S+gtwReXpBVGHg5Hfkr5m0dh1qPG0/BKw=) 17: 326131343a373538303a666637353a3a2f34382d3438203d3e20323033393135.roa (hash: 9QAAhr1wwrheqUnrWa4FkevZ/+WKuCODK+T1ZZmcwl8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Mar 2026 11:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:95:cd:70:3c:66:d6:eb:d7:52:a5:80:75:69:d5:24:4c:6b:16:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Validity Not Before: Mar 6 09:31:25 2026 GMT Not After : Mar 7 11:53:25 2026 GMT Subject: CN=25C0F8FE47EFDE6B6894EF7D2E44F6EBD4A80FBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8b:81:ee:51:d8:79:e6:a1:8e:fe:27:53:60: 54:5f:a0:34:5c:27:4e:1f:04:2e:79:08:5b:23:da: 6e:f1:ed:bb:2b:8d:22:bf:16:b4:85:61:ba:67:c0: cc:b0:c7:c3:22:b7:44:a1:3a:8b:be:9d:0f:1c:f9: 3e:81:b3:50:2a:e1:56:a4:a2:6f:4c:db:49:dc:65: 44:7c:81:b0:56:7d:38:03:a1:f4:2d:52:5f:ae:7f: ff:5b:bf:16:eb:b5:cb:0a:bd:56:e3:4d:2e:4a:7e: 13:3b:d4:ac:02:ba:4e:a9:d8:5b:9a:f5:a6:cd:f8: ea:ab:59:6c:ab:f6:97:7a:ea:fb:e5:d5:ee:36:a4: d2:f1:6c:74:e9:2b:1a:b6:33:0a:71:fc:e7:3b:a4: bc:9d:63:9c:e1:e3:13:12:84:f8:b4:4a:7b:1f:30: ab:bf:72:bf:cc:77:ed:26:85:60:5e:4c:27:ba:51: e3:ee:70:46:ef:0f:b8:a4:41:37:cc:d9:4e:fd:98: 10:62:56:51:0b:b7:d4:06:a5:54:00:2f:ce:c7:7f: 91:96:0d:d5:5a:81:fa:7e:4f:c1:90:7e:97:80:04: d8:a5:58:a5:b2:25:16:cf:77:70:91:64:ba:00:9e: c7:af:30:66:9f:df:00:73:32:c2:ac:90:e9:dc:6e: 9e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C0:F8:FE:47:EF:DE:6B:68:94:EF:7D:2E:44:F6:EB:D4:A8:0F:BA X509v3 Authority Key Identifier: keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:87:c4:5c:82:8f:a3:64:4c:03:bc:11:26:16:4f:ef:4c:99: 53:33:f1:0b:bb:41:d4:10:9f:6e:62:b7:de:06:87:d4:4d:70: b7:a5:83:4f:5f:9b:57:2b:e2:92:e5:cb:e1:22:c5:ce:fc:08: 8a:29:e8:8c:13:cb:0a:83:d1:7c:47:fe:32:b6:78:7b:5a:1c: 09:a2:71:0b:eb:24:8d:bf:bb:09:15:c2:88:87:26:0c:39:f0: 4c:18:f8:6f:b8:68:2b:9e:70:d0:c4:14:37:31:75:1c:04:24: 9d:55:53:0e:19:f9:a3:f1:4a:89:1d:81:de:24:86:e8:ea:74: a1:bf:df:c2:3f:51:94:27:8a:c8:55:da:94:2b:ae:0d:e4:ed: 18:90:04:61:15:9d:9c:a2:dd:24:09:eb:f8:ec:8b:ad:51:92: 88:7b:50:78:35:96:f1:08:83:3e:bb:8f:21:e6:28:d2:4c:82: e0:6e:fc:be:7c:4f:ee:ca:b3:45:44:ce:94:22:89:14:bb:5a: a5:eb:2b:7b:3d:a7:5d:ce:80:56:00:bf:b6:48:a5:73:50:da: 01:e5:96:ba:6d:4f:f0:bd:2f:3b:4d:55:fd:af:86:8a:5f:3d: 0b:58:cf:36:ca:20:4a:6f:bd:fc:b1:01:af:ad:55:17:38:f9: bf:4e:05:39 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUN5XNcDxm1uvXUqWAdWnVJExrFmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlC RjFEMEYyRjAeFw0yNjAzMDYwOTMxMjVaFw0yNjAzMDcxMTUzMjVaMDMxMTAvBgNV BAMTKDI1QzBGOEZFNDdFRkRFNkI2ODk0RUY3RDJFNDRGNkVCRDRBODBGQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCli4HuUdh55qGO/idTYFRfoDRc J04fBC55CFsj2m7x7bsrjSK/FrSFYbpnwMywx8Mit0ShOou+nQ8c+T6Bs1Aq4Vak om9M20ncZUR8gbBWfTgDofQtUl+uf/9bvxbrtcsKvVbjTS5KfhM71KwCuk6p2Fua 9abN+OqrWWyr9pd66vvl1e42pNLxbHTpKxq2Mwpx/Oc7pLydY5zh4xMShPi0Snsf MKu/cr/Md+0mhWBeTCe6UePucEbvD7ikQTfM2U79mBBiVlELt9QGpVQAL87Hf5GW DdVagfp+T8GQfpeABNilWKWyJRbPd3CRZLoAnsevMGaf3wBzMsKskOncbp4ZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUJcD4/kfv3mtolO99LkT269SoD7owHwYDVR0j BBgwFoAUzHkaH1yzuyyvfCg4IRLiab8dDy8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMz N2ZjLzEvQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlCRjFEMEYyRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9DQzc5MUExRjVDQjNCQjJDQUY3QzI4Mzgy MTEyRTI2OUJGMUQwRjJGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I3YTBhYTU2LTRhMWQtNGJhOC1hYjY2LWM1OWZlZDRjMzdmYy8xL0NDNzkxQTFG NUNCM0JCMkNBRjdDMjgzODIxMTJFMjY5QkYxRDBGMkYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCZh8Rc go+jZEwDvBEmFk/vTJlTM/ELu0HUEJ9uYrfeBofUTXC3pYNPX5tXK+KS5cvhIsXO /AiKKeiME8sKg9F8R/4ytnh7WhwJonEL6ySNv7sJFcKIhyYMOfBMGPhvuGgrnnDQ xBQ3MXUcBCSdVVMOGfmj8UqJHYHeJIbo6nShv9/CP1GUJ4rIVdqUK64N5O0YkARh FZ2cot0kCev47IutUZKIe1B4NZbxCIM+u48h5ijSTILgbvy+fE/uyrNFRM6UIokU u1ql6yt7PaddzoBWAL+2SKVzUNoB5Za6bU/wvS87TVX9r4aKXz0LWM82yiBKb738 sQGvrVUXOPm/TgU5 -----END CERTIFICATE-----Generated at Sat Mar 7 02:18:03 2026 by rpki-client