$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft File: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json) Hash identifier: QkNC31gRE6gbSIcyPyD2KiY3Foy/ORRdb9gzk4FPol8= Subject key identifier: 15:C4:BC:A9:B0:8C:69:0D:72:86:4F:2D:70:EE:9F:23:25:F2:E8:FC Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Certificate serial: 706D698FC065EA3DCD5D4BC77997322C72606374 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft Manifest number: 025B Signing time: Fri 12 Jun 2026 04:23:41 +0000 Manifest this update: Fri 12 Jun 2026 04:18:41 +0000 Manifest next update: Sat 13 Jun 2026 06:59:41 +0000 Files and hashes: 1: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: NZmbB1AD2okfoNYoNRF6VSo9hkwhlpFlsxSprSq+6Jk=) 2: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: hJUy+WAsteHuyZTTylubys83kZZc4LE0LX6QYeU4v/U=) 3: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: AFVeOnsvdfn5zr4jds6KNtr7n93z5bGnJNsS8Ufaz0U=) 4: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: HzAN9ywzH3R4tgGHlz5ec2Bib9+nQQlSPhjXFH+uvKQ=) 5: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: wDL3d4A1d+S+hyAjhYBLt0XksiIY4fLz7lOilgNj2Q4=) 6: 3139342e3132342e3233342e302f32342d3234203d3e203632303638.roa (hash: VKu+iyAXdNGspkh1hqCECAzpccaJ3+JyjcRyNO0/DAw=) 7: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: ys4GcQr92xf16wQYlCYeGPMDsfyEnGKsrz3bvGtNWC8=) 8: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: vlI3tYFCLzWNGXLpIFZR5AHPwN6r5z5t+7vGqUPF4to=) 9: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: b5xBss8x50/mTCwdi3YpTgkBRxgxQIEDRJCrw4DZBZw=) 10: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: FuGF9oubkKchoq0DHn4JtZvtl9XU34w21OxXJXhid/c=) 11: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: ABkHDQKjEeANharZO1hp0RDKdEsWdRf0F4prEwfZnFs=) 12: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: 7RbGKTX0T75GWL+U9cYx0V2iGn8DIPgdGtE6PSL/e9k=) 13: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: DZU46gedNFYz2v7yvGIXeVWs+yworgKzdoKm6wBF9RY=) 14: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: unIb/pLoJEr1pBLYhSY4VQ/RprOtasUPRROCGuOA9r4=) 15: 326130663a336363333a343030303a3a2f34342d3434203d3e20323032333036.roa (hash: fxbR5GcPyoWqODdA3f1yyd4v8P4uCsBii+08ii9bg1w=) 16: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: LZdhd8babbehfkgcaQ2p0QEt4TultBt5ttf3MMRXRbI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 20:26:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:6d:69:8f:c0:65:ea:3d:cd:5d:4b:c7:79:97:32:2c:72:60:63:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Validity Not Before: Jun 12 04:18:41 2026 GMT Not After : Jun 13 06:59:41 2026 GMT Subject: CN=15C4BCA9B08C690D72864F2D70EE9F2325F2E8FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f0:fa:6d:62:37:18:f2:0c:9d:08:45:6d:78: 07:de:97:21:3b:15:63:5e:ae:ea:03:82:53:a0:14: 33:05:c2:23:08:45:a2:a1:a8:10:bb:47:f9:aa:b6: 8a:51:de:64:7f:30:b3:30:99:df:13:1b:f1:3f:e3: d1:08:19:4b:e5:b7:55:67:dd:88:8e:2b:ae:e9:67: b1:02:17:2d:9f:30:e9:22:0e:c0:28:00:6b:5c:c9: 68:96:f0:3d:c1:35:b8:4e:1a:25:c9:a7:92:06:e5: 47:7d:76:c5:bc:f9:81:a1:56:5d:d3:bd:eb:fa:8e: 4a:a4:f5:5b:60:4c:b7:13:85:56:ad:09:6c:f5:0b: c2:5f:07:72:2e:cd:b5:e7:c3:84:51:8f:38:3e:24: 98:19:56:cf:e4:29:44:19:a5:ec:1c:0a:30:ac:a3: 94:4d:55:9e:ad:9b:28:f5:8a:68:7a:c2:bc:a9:f6: 05:f3:0f:8b:17:2f:b0:9b:be:c0:7e:94:f2:a1:8f: 34:2c:ae:ad:4c:ea:3f:8a:0e:b9:79:93:1b:93:6d: 7c:93:a0:59:5b:5a:53:76:31:7e:df:c2:f4:0b:c1: 3d:3e:41:61:81:22:7d:8c:79:41:91:ca:10:73:46: 81:c8:dd:ad:b8:c5:32:ca:e5:2e:4c:fc:82:e3:ac: 5f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C4:BC:A9:B0:8C:69:0D:72:86:4F:2D:70:EE:9F:23:25:F2:E8:FC X509v3 Authority Key Identifier: keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:02:c9:e3:81:a2:ab:5f:e5:34:7e:40:7f:c8:f1:5a:c3:f5: 95:1a:7f:91:fb:b5:9d:62:49:e8:5e:98:42:7e:48:b9:46:5f: cd:34:4c:4c:6b:8f:ed:4c:33:49:20:e4:4a:1e:d2:f5:37:0e: a8:80:da:cc:93:1d:ca:c7:26:bc:3f:1a:bb:7e:ff:eb:d5:be: c2:c3:43:2a:c7:9a:bd:1a:e3:c6:ef:b1:c9:72:0c:a2:8a:02: 26:06:e6:8e:31:e1:cb:9b:91:6b:a4:bd:20:2c:31:60:7f:c2: a9:fd:98:84:e2:72:05:ec:34:2e:55:10:d5:5c:27:4f:43:9d: aa:75:b4:82:50:d3:c8:4a:a1:e7:9e:1d:af:f3:66:a9:5a:b6: 99:d3:ff:8a:b6:2d:5c:09:22:f7:7f:5e:11:88:73:7a:d8:42: a6:fc:08:0c:78:5b:95:76:e3:3a:09:66:42:38:9d:35:74:1d: 57:fc:e6:ae:46:35:eb:b0:e3:e7:37:15:27:ef:d7:0a:7b:ed: b6:89:a9:87:57:67:86:6a:2a:92:f8:51:21:5d:ac:20:d9:40: 83:0e:34:72:5f:94:19:de:df:de:fc:00:3e:6a:98:b4:49:c8: 6a:38:a2:9c:72:08:d6:73:b4:20:e3:5a:2d:7b:d0:00:13:18: 29:af:28:0f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUcG1pj8Bl6j3NXUvHeZcyLHJgY3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2IyOWE3NzY2OWRmNWE3YTVjYjUwNmQ4MzllZThhYTQz MzdjY2FhYzAeFw0yNjA2MTIwNDE4NDFaFw0yNjA2MTMwNjU5NDFaMDMxMTAvBgNV BAMTKDE1QzRCQ0E5QjA4QzY5MEQ3Mjg2NEYyRDcwRUU5RjIzMjVGMkU4RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP8PptYjcY8gydCEVteAfelyE7 FWNeruoDglOgFDMFwiMIRaKhqBC7R/mqtopR3mR/MLMwmd8TG/E/49EIGUvlt1Vn 3YiOK67pZ7ECFy2fMOkiDsAoAGtcyWiW8D3BNbhOGiXJp5IG5Ud9dsW8+YGhVl3T vev6jkqk9VtgTLcThVatCWz1C8JfB3IuzbXnw4RRjzg+JJgZVs/kKUQZpewcCjCs o5RNVZ6tmyj1imh6wryp9gXzD4sXL7CbvsB+lPKhjzQsrq1M6j+KDrl5kxuTbXyT oFlbWlN2MX7fwvQLwT0+QWGBIn2MeUGRyhBzRoHI3a24xTLK5S5M/ILjrF+fAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUFcS8qbCMaQ1yhk8tcO6fIyXy6PwwHwYDVR0j BBgwFoAUyymndmnfWnpctQbYOe6KpDN8yqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgtN2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhm MDZlLzAvQ0IyOUE3NzY2OURGNUE3QTVDQjUwNkQ4MzlFRThBQTQzMzdDQ0FBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3l5bW5kbW5mV25wY3RRYllPZTZLcERO OHlxdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iYjI1ZDA2OC03 ZjljLTRiMGUtYTY5NS0xNzc5YjdkOGYwNmUvMC9DQjI5QTc3NjY5REY1QTdBNUNC NTA2RDgzOUVFOEFBNDMzN0NDQUFDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKQLJ44Giq1/lNH5Af8jx WsP1lRp/kfu1nWJJ6F6YQn5IuUZfzTRMTGuP7UwzSSDkSh7S9TcOqIDazJMdyscm vD8au37/69W+wsNDKseavRrjxu+xyXIMoooCJgbmjjHhy5uRa6S9ICwxYH/Cqf2Y hOJyBew0LlUQ1VwnT0OdqnW0glDTyEqh554dr/NmqVq2mdP/irYtXAki939eEYhz ethCpvwIDHhblXbjOglmQjidNXQdV/zmrkY167Dj5zcVJ+/XCnvttomph1dnhmoq kvhRIV2sINlAgw40cl+UGd7f3vwAPmqYtEnIajiinHII1nO0IONaLXvQABMYKa8o Dw== -----END CERTIFICATE-----Generated at Fri Jun 12 05:54:01 2026 by rpki-client