$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft File: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json) Hash identifier: JNjXLqEa2k8CXA8O3a6nNWfHrD9OCCi/dbIrlJ2sznA= Subject key identifier: 4B:82:9E:BB:A2:FA:F3:9E:39:80:EC:80:6B:C2:6C:99:B0:D7:E9:2B Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Certificate serial: 6946939701E269A5AE16E42F62C68E7CA41C33BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft Manifest number: 01E0 Signing time: Thu 12 Mar 2026 22:17:23 +0000 Manifest this update: Thu 12 Mar 2026 22:12:23 +0000 Manifest next update: Sat 14 Mar 2026 01:43:23 +0000 Files and hashes: 1: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: 7RbGKTX0T75GWL+U9cYx0V2iGn8DIPgdGtE6PSL/e9k=) 2: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: AFVeOnsvdfn5zr4jds6KNtr7n93z5bGnJNsS8Ufaz0U=) 3: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: toBqaa1EWa2g8KllerUuCs8YtoFPP7jEtR28dhhogUw=) 4: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: wDL3d4A1d+S+hyAjhYBLt0XksiIY4fLz7lOilgNj2Q4=) 5: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: vlI3tYFCLzWNGXLpIFZR5AHPwN6r5z5t+7vGqUPF4to=) 6: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: DZU46gedNFYz2v7yvGIXeVWs+yworgKzdoKm6wBF9RY=) 7: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: b5xBss8x50/mTCwdi3YpTgkBRxgxQIEDRJCrw4DZBZw=) 8: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: HzAN9ywzH3R4tgGHlz5ec2Bib9+nQQlSPhjXFH+uvKQ=) 9: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: unIb/pLoJEr1pBLYhSY4VQ/RprOtasUPRROCGuOA9r4=) 10: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: ABkHDQKjEeANharZO1hp0RDKdEsWdRf0F4prEwfZnFs=) 11: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: hJUy+WAsteHuyZTTylubys83kZZc4LE0LX6QYeU4v/U=) 12: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: NZmbB1AD2okfoNYoNRF6VSo9hkwhlpFlsxSprSq+6Jk=) 13: 3139342e3132342e3233342e302f32342d3234203d3e203134363138.roa (hash: jmldibQztUu/uE9gn0LxmihLjuBeh91SIaguqVgH56w=) 14: 3139342e3132342e3233342e302f32342d3234203d3e203136353039.roa (hash: yz5dw8t6yWoO2T3DnzEAtHSSXtxqaxMtoTJQ4OPxYFQ=) 15: 3139342e3132342e3233342e302f32342d3234203d3e20323031393037.roa (hash: P1rNrNq0Lsy4Pv36ykUIleWOvoAEcFUYAHvT3IiKS84=) 16: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: ys4GcQr92xf16wQYlCYeGPMDsfyEnGKsrz3bvGtNWC8=) 17: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: LZdhd8babbehfkgcaQ2p0QEt4TultBt5ttf3MMRXRbI=) 18: 326130663a336363333a343030303a3a2f34342d3434203d3e20323032333036.roa (hash: fxbR5GcPyoWqODdA3f1yyd4v8P4uCsBii+08ii9bg1w=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 01:43:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:46:93:97:01:e2:69:a5:ae:16:e4:2f:62:c6:8e:7c:a4:1c:33:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Validity Not Before: Mar 12 22:12:23 2026 GMT Not After : Mar 14 01:43:23 2026 GMT Subject: CN=4B829EBBA2FAF39E3980EC806BC26C99B0D7E92B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:86:9d:b1:b9:47:bb:de:28:63:c7:65:ce:99: f7:2e:2b:16:73:14:fe:1f:1c:58:78:66:eb:3c:8a: 3c:c8:66:91:c0:6a:30:1c:45:b5:08:4f:3f:38:83: da:16:a7:7d:47:52:f9:39:c2:fb:03:04:5b:5f:4c: 86:bb:25:28:fc:14:30:d4:b0:b3:95:fb:68:12:fd: e8:41:e7:a0:98:98:54:b1:99:5c:50:82:31:0f:04: 60:18:34:d0:f4:58:08:b8:00:3b:04:b5:ab:eb:8d: f7:ca:1e:2c:81:f2:5d:04:ed:0f:be:fb:b5:94:97: 73:b5:7b:49:7d:ed:7d:59:74:28:09:6a:95:05:25: 71:f6:2c:1c:0c:19:13:d2:e3:5c:25:2c:60:a3:82: 15:7c:0e:ca:06:27:c5:69:c2:bb:ca:05:46:35:41: 38:0a:54:87:04:dd:b6:94:76:2a:e9:34:ea:73:30: 0e:e7:a6:fa:10:b6:81:b4:7b:42:35:7a:f8:e8:e8: a0:17:b3:46:e8:2e:4a:10:8a:34:a4:b4:cb:28:17: 23:00:3b:47:de:57:c6:b2:bf:37:4f:24:f9:b4:98: 74:7d:4a:c4:0d:6d:77:9f:3a:e7:1b:0e:b5:42:d1: c8:66:7c:b2:cc:1c:3d:3e:a2:b4:fb:ac:36:25:83: 8b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:82:9E:BB:A2:FA:F3:9E:39:80:EC:80:6B:C2:6C:99:B0:D7:E9:2B X509v3 Authority Key Identifier: keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:59:bf:35:ec:44:69:ac:e0:96:66:7a:fb:4a:7f:13:66:11: 5a:c1:1b:87:38:b6:0b:24:2b:01:ab:98:9f:a4:27:5f:bc:35: c0:4c:34:a8:0e:d2:52:b5:d6:9f:c3:f1:ae:44:02:7e:15:63: 15:39:6b:d7:5e:a6:de:08:c2:c7:a7:5e:30:d1:93:26:4f:44: d1:fa:b3:98:b6:47:44:96:5a:dc:d6:6b:dc:fd:8d:75:40:01: 5d:bc:b0:e5:d6:9a:85:6c:7f:17:24:9f:6b:6a:81:14:5c:58: 25:c3:ec:11:e0:c0:92:26:72:42:8e:53:2a:f8:e6:35:4e:be: 2e:f7:1b:96:7b:43:72:33:e7:d6:cc:f5:eb:94:9a:f2:9a:96: 3b:79:c6:f4:89:ce:b1:55:a9:09:20:4b:fc:9e:ff:3e:17:06: 85:b6:c6:5c:93:6f:8a:f6:99:19:b4:43:9e:22:2e:f4:c5:32: ff:69:ae:4a:2f:f3:54:3e:1e:43:07:5a:be:b5:95:69:18:41: c7:e8:a3:3d:ac:c0:63:b0:72:09:96:43:38:6f:98:bc:25:04: a7:b1:ea:49:86:57:cc:a9:a1:5d:ac:cc:f7:b1:b9:1d:ef:0b: b5:fa:59:ce:d1:e4:e0:28:66:20:08:b5:44:8b:1d:13:89:76: 32:6d:c1:be -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUaUaTlwHiaaWuFuQvYsaOfKQcM74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2IyOWE3NzY2OWRmNWE3YTVjYjUwNmQ4MzllZThhYTQz MzdjY2FhYzAeFw0yNjAzMTIyMjEyMjNaFw0yNjAzMTQwMTQzMjNaMDMxMTAvBgNV BAMTKDRCODI5RUJCQTJGQUYzOUUzOTgwRUM4MDZCQzI2Qzk5QjBEN0U5MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbhp2xuUe73ihjx2XOmfcuKxZz FP4fHFh4Zus8ijzIZpHAajAcRbUITz84g9oWp31HUvk5wvsDBFtfTIa7JSj8FDDU sLOV+2gS/ehB56CYmFSxmVxQgjEPBGAYNND0WAi4ADsEtavrjffKHiyB8l0E7Q++ +7WUl3O1e0l97X1ZdCgJapUFJXH2LBwMGRPS41wlLGCjghV8DsoGJ8VpwrvKBUY1 QTgKVIcE3baUdirpNOpzMA7npvoQtoG0e0I1evjo6KAXs0boLkoQijSktMsoFyMA O0feV8ayvzdPJPm0mHR9SsQNbXefOucbDrVC0chmfLLMHD0+orT7rDYlg4sbAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUS4Keu6L68545gOyAa8JsmbDX6SswHwYDVR0j BBgwFoAUyymndmnfWnpctQbYOe6KpDN8yqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgtN2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhm MDZlLzAvQ0IyOUE3NzY2OURGNUE3QTVDQjUwNkQ4MzlFRThBQTQzMzdDQ0FBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3l5bW5kbW5mV25wY3RRYllPZTZLcERO OHlxdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iYjI1ZDA2OC03 ZjljLTRiMGUtYTY5NS0xNzc5YjdkOGYwNmUvMC9DQjI5QTc3NjY5REY1QTdBNUNC NTA2RDgzOUVFOEFBNDMzN0NDQUFDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPVm/NexEaazglmZ6+0p/ E2YRWsEbhzi2CyQrAauYn6QnX7w1wEw0qA7SUrXWn8PxrkQCfhVjFTlr116m3gjC x6deMNGTJk9E0fqzmLZHRJZa3NZr3P2NdUABXbyw5daahWx/FySfa2qBFFxYJcPs EeDAkiZyQo5TKvjmNU6+LvcblntDcjPn1sz165Sa8pqWO3nG9InOsVWpCSBL/J7/ PhcGhbbGXJNvivaZGbRDniIu9MUy/2muSi/zVD4eQwdavrWVaRhBx+ijPazAY7By CZZDOG+YvCUEp7HqSYZXzKmhXazM97G5He8LtfpZztHk4ChmIAi1RIsdE4l2Mm3B vg== -----END CERTIFICATE-----Generated at Fri Mar 13 11:20:36 2026 by rpki-client