$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft File: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json) Hash identifier: pU1xTSWeViPgB69vjqEtva51XI7XaB3SLqhfBxFr3oY= Subject key identifier: 00:6A:34:FA:AF:27:26:97:46:6B:AD:67:5C:17:BF:5A:A4:BB:FA:43 Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Certificate serial: 1900379B41C518FAAE25631549EB8E40C618C57C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft Manifest number: 021E Signing time: Mon 27 Apr 2026 20:41:09 +0000 Manifest this update: Mon 27 Apr 2026 20:36:09 +0000 Manifest next update: Tue 28 Apr 2026 23:49:09 +0000 Files and hashes: 1: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: DZU46gedNFYz2v7yvGIXeVWs+yworgKzdoKm6wBF9RY=) 2: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: unIb/pLoJEr1pBLYhSY4VQ/RprOtasUPRROCGuOA9r4=) 3: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: NZmbB1AD2okfoNYoNRF6VSo9hkwhlpFlsxSprSq+6Jk=) 4: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: U6Uc2/a3+a6DpXViPk9KDBcHCdW1s2VdmCaPuQeDVKQ=) 5: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: ys4GcQr92xf16wQYlCYeGPMDsfyEnGKsrz3bvGtNWC8=) 6: 326130663a336363333a343030303a3a2f34342d3434203d3e20323032333036.roa (hash: fxbR5GcPyoWqODdA3f1yyd4v8P4uCsBii+08ii9bg1w=) 7: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: ABkHDQKjEeANharZO1hp0RDKdEsWdRf0F4prEwfZnFs=) 8: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: b5xBss8x50/mTCwdi3YpTgkBRxgxQIEDRJCrw4DZBZw=) 9: 3139342e3132342e3233342e302f32342d3234203d3e20343032323537.roa (hash: 5rmxgyIU21hGeEtmNvOYYXEGrcLd8Upf4P8MtYYDSlk=) 10: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: wDL3d4A1d+S+hyAjhYBLt0XksiIY4fLz7lOilgNj2Q4=) 11: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: LZdhd8babbehfkgcaQ2p0QEt4TultBt5ttf3MMRXRbI=) 12: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: HzAN9ywzH3R4tgGHlz5ec2Bib9+nQQlSPhjXFH+uvKQ=) 13: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: AFVeOnsvdfn5zr4jds6KNtr7n93z5bGnJNsS8Ufaz0U=) 14: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: hJUy+WAsteHuyZTTylubys83kZZc4LE0LX6QYeU4v/U=) 15: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: 7RbGKTX0T75GWL+U9cYx0V2iGn8DIPgdGtE6PSL/e9k=) 16: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: vlI3tYFCLzWNGXLpIFZR5AHPwN6r5z5t+7vGqUPF4to=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 17:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:00:37:9b:41:c5:18:fa:ae:25:63:15:49:eb:8e:40:c6:18:c5:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Validity Not Before: Apr 27 20:36:09 2026 GMT Not After : Apr 28 23:49:09 2026 GMT Subject: CN=006A34FAAF272697466BAD675C17BF5AA4BBFA43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:8c:35:92:48:44:a4:ec:0d:a2:f6:fb:6f:27: 0a:3e:2a:da:02:cf:29:a4:fe:61:32:10:e9:b6:a6: 94:bd:fa:26:4b:d1:fb:20:81:ba:9a:a3:54:99:90: 65:43:f7:9f:cc:e2:e9:36:91:d2:42:b2:86:42:03: cc:32:02:62:c1:f6:27:e0:96:93:1e:6d:da:70:42: 6e:09:d1:93:2b:73:10:3f:aa:8e:db:33:41:76:24: f9:7f:e1:cb:ce:2a:d9:98:8d:00:c8:03:9c:48:00: ab:0b:d9:83:76:47:38:b0:7f:1e:5f:d5:c0:9b:7f: 8e:d9:04:e1:0e:32:ec:4e:d7:07:63:81:4f:86:b9: d0:23:75:52:47:29:1d:ed:f1:c9:61:fa:86:73:4d: 89:a0:69:4f:39:d5:ba:3a:0d:f7:72:35:a7:ad:c6: 05:8b:61:0a:8e:d8:6e:39:8d:9a:15:b3:88:a7:16: 5f:b9:7d:6c:be:13:5a:c6:b3:4a:b1:79:a2:7f:af: 4c:17:0b:13:3b:55:a7:0b:61:8f:03:54:75:c3:29: df:cf:0b:47:66:c6:db:2f:b1:e6:ae:b3:40:62:9d: 8e:16:f9:f2:de:a2:4c:57:7d:bf:7d:d8:39:99:4c: 38:00:fd:34:72:c9:57:c5:69:8f:c0:ef:33:82:95: 16:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:6A:34:FA:AF:27:26:97:46:6B:AD:67:5C:17:BF:5A:A4:BB:FA:43 X509v3 Authority Key Identifier: keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:ad:1c:b4:8c:52:e5:f5:4b:26:e5:49:fc:1c:d7:32:45:de: 4a:fa:88:27:d1:9a:ca:a0:8d:85:1f:70:0b:c3:64:e1:15:ac: b0:b2:54:e0:6b:0f:10:91:d2:fb:ca:bc:be:2a:a4:02:d6:2d: 7a:ec:fd:6e:6b:b1:00:d7:ac:a3:c8:43:2a:c8:14:c7:90:73: 67:dc:db:cb:b8:15:e3:9f:41:a5:6d:2c:6b:be:95:d6:f4:76: eb:06:23:7f:7f:5c:ad:ea:52:91:cd:3f:66:f8:39:f9:8d:47: 99:f6:52:10:2d:e8:33:c6:86:e9:9b:0e:ef:8a:05:5e:ec:05: 99:8d:61:8b:bd:b0:52:63:77:61:3f:d0:81:9c:30:b8:ba:c8: b4:f6:2d:42:c7:4f:68:ca:6b:0e:b4:5b:2b:1c:89:99:f5:a9: d2:89:6b:04:9c:59:fd:0d:e2:fd:df:fc:e7:f4:47:3d:32:f4: 4f:90:93:0f:d5:13:25:a2:cb:cc:b5:a7:06:df:16:95:42:fd: 00:84:db:7c:3a:d9:33:f3:d2:b5:19:9f:4b:2b:10:7e:1f:cd: 7c:31:1b:7a:a4:5d:a8:26:d1:94:13:2c:a0:83:6a:c8:c2:a5: 59:73:0f:0f:13:23:6d:97:f5:a2:ec:0d:2c:b9:48:9d:89:a9: d7:79:22:77 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUGQA3m0HFGPquJWMVSeuOQMYYxXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2IyOWE3NzY2OWRmNWE3YTVjYjUwNmQ4MzllZThhYTQz MzdjY2FhYzAeFw0yNjA0MjcyMDM2MDlaFw0yNjA0MjgyMzQ5MDlaMDMxMTAvBgNV BAMTKDAwNkEzNEZBQUYyNzI2OTc0NjZCQUQ2NzVDMTdCRjVBQTRCQkZBNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDojDWSSESk7A2i9vtvJwo+KtoC zymk/mEyEOm2ppS9+iZL0fsggbqao1SZkGVD95/M4uk2kdJCsoZCA8wyAmLB9ifg lpMebdpwQm4J0ZMrcxA/qo7bM0F2JPl/4cvOKtmYjQDIA5xIAKsL2YN2Rziwfx5f 1cCbf47ZBOEOMuxO1wdjgU+GudAjdVJHKR3t8clh+oZzTYmgaU851bo6DfdyNaet xgWLYQqO2G45jZoVs4inFl+5fWy+E1rGs0qxeaJ/r0wXCxM7VacLYY8DVHXDKd/P C0dmxtsvseaus0BinY4W+fLeokxXfb992DmZTDgA/TRyyVfFaY/A7zOClRZHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUAGo0+q8nJpdGa61nXBe/WqS7+kMwHwYDVR0j BBgwFoAUyymndmnfWnpctQbYOe6KpDN8yqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgtN2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhm MDZlLzAvQ0IyOUE3NzY2OURGNUE3QTVDQjUwNkQ4MzlFRThBQTQzMzdDQ0FBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3l5bW5kbW5mV25wY3RRYllPZTZLcERO OHlxdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iYjI1ZDA2OC03 ZjljLTRiMGUtYTY5NS0xNzc5YjdkOGYwNmUvMC9DQjI5QTc3NjY5REY1QTdBNUNC NTA2RDgzOUVFOEFBNDMzN0NDQUFDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACK0ctIxS5fVLJuVJ/BzX MkXeSvqIJ9GayqCNhR9wC8Nk4RWssLJU4GsPEJHS+8q8viqkAtYteuz9bmuxANes o8hDKsgUx5BzZ9zby7gV459BpW0sa76V1vR26wYjf39crepSkc0/Zvg5+Y1HmfZS EC3oM8aG6ZsO74oFXuwFmY1hi72wUmN3YT/QgZwwuLrItPYtQsdPaMprDrRbKxyJ mfWp0olrBJxZ/Q3i/d/85/RHPTL0T5CTD9UTJaLLzLWnBt8WlUL9AITbfDrZM/PS tRmfSysQfh/NfDEbeqRdqCbRlBMsoINqyMKlWXMPDxMjbZf1ouwNLLlInYmp13ki dw== -----END CERTIFICATE-----Generated at Tue Apr 28 01:14:14 2026 by rpki-client