$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft File: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json) Hash identifier: WMPvS5Nb6p2suDIy4BZp/67JXWGZBXTTgyDDELhq3Jg= Subject key identifier: A9:BC:A9:10:F7:0E:59:02:A9:B5:54:15:1A:57:E5:6C:E8:EC:7B:60 Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Certificate serial: 55220FA028CA68A892CA4764259B9297A4EDF26E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft Manifest number: 02A1 Signing time: Tue 04 Aug 2026 04:15:06 +0000 Manifest this update: Tue 04 Aug 2026 04:10:05 +0000 Manifest next update: Wed 05 Aug 2026 07:23:05 +0000 Files and hashes: 1: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: HzAN9ywzH3R4tgGHlz5ec2Bib9+nQQlSPhjXFH+uvKQ=) 2: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: NZmbB1AD2okfoNYoNRF6VSo9hkwhlpFlsxSprSq+6Jk=) 3: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: ys4GcQr92xf16wQYlCYeGPMDsfyEnGKsrz3bvGtNWC8=) 4: 326130663a336363333a343030303a3a2f34342d3434203d3e20323032333036.roa (hash: fxbR5GcPyoWqODdA3f1yyd4v8P4uCsBii+08ii9bg1w=) 5: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: UZVYtbsgUw5zkOuFNxmbMorIc107ghlWubCIGxaCg2Q=) 6: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: 7RbGKTX0T75GWL+U9cYx0V2iGn8DIPgdGtE6PSL/e9k=) 7: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: ABkHDQKjEeANharZO1hp0RDKdEsWdRf0F4prEwfZnFs=) 8: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: AFVeOnsvdfn5zr4jds6KNtr7n93z5bGnJNsS8Ufaz0U=) 9: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: unIb/pLoJEr1pBLYhSY4VQ/RprOtasUPRROCGuOA9r4=) 10: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: LZdhd8babbehfkgcaQ2p0QEt4TultBt5ttf3MMRXRbI=) 11: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: hJUy+WAsteHuyZTTylubys83kZZc4LE0LX6QYeU4v/U=) 12: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: DZU46gedNFYz2v7yvGIXeVWs+yworgKzdoKm6wBF9RY=) 13: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: wDL3d4A1d+S+hyAjhYBLt0XksiIY4fLz7lOilgNj2Q4=) 14: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: b5xBss8x50/mTCwdi3YpTgkBRxgxQIEDRJCrw4DZBZw=) 15: 3139342e3132342e3233342e302f32342d3234203d3e203632303638.roa (hash: VKu+iyAXdNGspkh1hqCECAzpccaJ3+JyjcRyNO0/DAw=) 16: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: vlI3tYFCLzWNGXLpIFZR5AHPwN6r5z5t+7vGqUPF4to=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 04 Aug 2026 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:22:0f:a0:28:ca:68:a8:92:ca:47:64:25:9b:92:97:a4:ed:f2:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Validity Not Before: Aug 4 04:10:05 2026 GMT Not After : Aug 5 07:23:05 2026 GMT Subject: CN=A9BCA910F70E5902A9B554151A57E56CE8EC7B60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f0:1a:6a:63:a6:6a:33:ca:c5:76:bd:da:03: cf:ac:a2:de:c5:8a:a9:76:b3:d2:5a:74:d7:0e:a0: df:2e:ad:63:ce:7a:09:37:13:f2:11:8b:7f:57:ed: 80:36:9e:7b:76:87:98:9b:a9:10:ca:82:06:4d:32: 58:d7:80:17:86:4e:49:07:05:4f:92:71:6e:43:77: aa:9a:06:78:85:7c:38:dd:74:8b:4a:91:63:11:71: ed:7a:bc:fb:ca:5f:c9:7e:67:3b:0d:68:45:88:d2: 20:2e:cf:a1:90:eb:65:87:98:ac:c8:2e:a7:9a:01: 50:8f:2a:4d:b2:ed:a6:b4:86:41:e2:63:01:11:cf: c5:59:7b:50:2a:b6:8b:10:f7:e0:a5:3d:cd:d0:74: 14:b0:99:88:84:f3:8d:43:3f:2d:69:5a:e2:f7:41: 7a:5d:92:26:10:41:ea:cc:5d:8d:67:11:20:97:59: 0b:7b:8c:a8:c6:44:c0:10:e4:63:c7:bf:8f:ea:31: ea:ff:2b:95:0f:b7:17:e5:0d:f7:82:33:4e:64:bd: a2:8a:13:75:7b:3a:71:c7:f2:29:be:bd:e2:f0:3c: c8:61:74:de:11:cb:8e:d3:af:b4:91:32:39:ba:0a: 2a:b9:f2:36:22:43:2f:ec:84:59:25:15:54:ee:71: 86:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:BC:A9:10:F7:0E:59:02:A9:B5:54:15:1A:57:E5:6C:E8:EC:7B:60 X509v3 Authority Key Identifier: keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:d7:a3:b0:c4:5e:21:ff:4f:11:82:8f:44:db:f1:2b:3c:7d: 07:43:4d:88:19:79:9b:97:51:cd:83:99:dd:68:0b:20:72:e6: f0:e9:08:30:20:27:c5:1e:ba:f1:3b:6b:0b:bf:5f:4b:a0:03: ae:b9:61:ae:26:17:fc:7c:1e:67:b9:1f:8c:d6:59:00:de:76: b6:4e:0b:7b:96:f9:d5:7b:bd:4f:c7:03:cd:23:64:e4:f4:ee: 0a:6c:08:8e:92:01:03:67:96:b6:0b:3f:51:86:75:a4:4b:f9: b0:09:97:b4:eb:97:21:6b:c0:ba:cb:6e:08:30:b0:ba:5a:90: fd:a0:58:af:18:62:0f:ad:22:43:4d:b8:40:3c:5c:9c:32:e5: cd:2a:4c:cc:21:57:69:e3:a7:fa:71:33:e2:be:fc:4d:16:d2: 04:d8:66:e2:bd:29:f2:ef:11:1f:d6:5a:f1:0e:67:5c:a5:e7: 21:cd:c0:77:d0:a7:11:a5:47:89:fc:f7:83:68:8c:9e:b0:22: ae:45:01:10:cf:32:a8:db:76:5e:3c:da:d5:cd:aa:72:f6:26: c2:3c:06:82:46:11:e8:74:db:45:be:96:ea:6b:49:65:d1:07: 5d:aa:b1:51:4d:f2:7d:b7:6e:a8:f4:74:91:b0:87:aa:24:94: bc:4a:a3:bd -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVSIPoCjKaKiSykdkJZuSl6Tt8m4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2IyOWE3NzY2OWRmNWE3YTVjYjUwNmQ4MzllZThhYTQz MzdjY2FhYzAeFw0yNjA4MDQwNDEwMDVaFw0yNjA4MDUwNzIzMDVaMDMxMTAvBgNV BAMTKEE5QkNBOTEwRjcwRTU5MDJBOUI1NTQxNTFBNTdFNTZDRThFQzdCNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo8BpqY6ZqM8rFdr3aA8+sot7F iql2s9JadNcOoN8urWPOegk3E/IRi39X7YA2nnt2h5ibqRDKggZNMljXgBeGTkkH BU+ScW5Dd6qaBniFfDjddItKkWMRce16vPvKX8l+ZzsNaEWI0iAuz6GQ62WHmKzI LqeaAVCPKk2y7aa0hkHiYwERz8VZe1AqtosQ9+ClPc3QdBSwmYiE841DPy1pWuL3 QXpdkiYQQerMXY1nESCXWQt7jKjGRMAQ5GPHv4/qMer/K5UPtxflDfeCM05kvaKK E3V7OnHH8im+veLwPMhhdN4Ry47Tr7SRMjm6Ciq58jYiQy/shFklFVTucYY1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUqbypEPcOWQKptVQVGlflbOjse2AwHwYDVR0j BBgwFoAUyymndmnfWnpctQbYOe6KpDN8yqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgtN2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhm MDZlLzAvQ0IyOUE3NzY2OURGNUE3QTVDQjUwNkQ4MzlFRThBQTQzMzdDQ0FBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3l5bW5kbW5mV25wY3RRYllPZTZLcERO OHlxdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iYjI1ZDA2OC03 ZjljLTRiMGUtYTY5NS0xNzc5YjdkOGYwNmUvMC9DQjI5QTc3NjY5REY1QTdBNUNC NTA2RDgzOUVFOEFBNDMzN0NDQUFDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg9ejsMReIf9PEYKPRNvx Kzx9B0NNiBl5m5dRzYOZ3WgLIHLm8OkIMCAnxR668TtrC79fS6ADrrlhriYX/Hwe Z7kfjNZZAN52tk4Le5b51Xu9T8cDzSNk5PTuCmwIjpIBA2eWtgs/UYZ1pEv5sAmX tOuXIWvAustuCDCwulqQ/aBYrxhiD60iQ024QDxcnDLlzSpMzCFXaeOn+nEz4r78 TRbSBNhm4r0p8u8RH9Za8Q5nXKXnIc3Ad9CnEaVHifz3g2iMnrAirkUBEM8yqNt2 Xjza1c2qcvYmwjwGgkYR6HTbRb6W6mtJZdEHXaqxUU3yfbduqPR0kbCHqiSUvEqj vQ== -----END CERTIFICATE-----Generated at Tue Aug 4 07:08:36 2026 by rpki-client