$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft File: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json) Hash identifier: P08XdG7d3nHwpTYnOUz5rkEG4TmRVyjYscgu78kxCbo= Subject key identifier: 8E:DE:8E:A7:36:E9:EF:D7:55:58:CA:EE:DE:E6:AB:69:54:39:97:D7 Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Certificate serial: 1F5E71BB09437DE744E6C6D49D635CB898E7136E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft Manifest number: 02DD Signing time: Fri 18 Sep 2026 09:20:36 +0000 Manifest this update: Fri 18 Sep 2026 09:15:36 +0000 Manifest next update: Sat 19 Sep 2026 12:06:36 +0000 Files and hashes: 1: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: LZdhd8babbehfkgcaQ2p0QEt4TultBt5ttf3MMRXRbI=) 2: 3139342e3132342e3233342e302f32342d3234203d3e203632303638.roa (hash: VKu+iyAXdNGspkh1hqCECAzpccaJ3+JyjcRyNO0/DAw=) 3: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: HzAN9ywzH3R4tgGHlz5ec2Bib9+nQQlSPhjXFH+uvKQ=) 4: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: ABkHDQKjEeANharZO1hp0RDKdEsWdRf0F4prEwfZnFs=) 5: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: b5xBss8x50/mTCwdi3YpTgkBRxgxQIEDRJCrw4DZBZw=) 6: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: vlI3tYFCLzWNGXLpIFZR5AHPwN6r5z5t+7vGqUPF4to=) 7: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: DZU46gedNFYz2v7yvGIXeVWs+yworgKzdoKm6wBF9RY=) 8: 326130663a336363333a343030303a3a2f34342d3434203d3e20323032333036.roa (hash: fxbR5GcPyoWqODdA3f1yyd4v8P4uCsBii+08ii9bg1w=) 9: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: ys4GcQr92xf16wQYlCYeGPMDsfyEnGKsrz3bvGtNWC8=) 10: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: NZmbB1AD2okfoNYoNRF6VSo9hkwhlpFlsxSprSq+6Jk=) 11: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: wDL3d4A1d+S+hyAjhYBLt0XksiIY4fLz7lOilgNj2Q4=) 12: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: 7RbGKTX0T75GWL+U9cYx0V2iGn8DIPgdGtE6PSL/e9k=) 13: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: mby8+haaZYNQ5mbLsvK33VMAsYycmu8khCZQYys3BjY=) 14: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: AFVeOnsvdfn5zr4jds6KNtr7n93z5bGnJNsS8Ufaz0U=) 15: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: unIb/pLoJEr1pBLYhSY4VQ/RprOtasUPRROCGuOA9r4=) 16: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: hJUy+WAsteHuyZTTylubys83kZZc4LE0LX6QYeU4v/U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 12:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:5e:71:bb:09:43:7d:e7:44:e6:c6:d4:9d:63:5c:b8:98:e7:13:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Validity Not Before: Sep 18 09:15:36 2026 GMT Not After : Sep 19 12:06:36 2026 GMT Subject: CN=8EDE8EA736E9EFD75558CAEEDEE6AB69543997D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:be:a5:c1:0d:36:d0:84:30:0e:ed:fe:1d:37: 3f:d6:40:9b:d7:49:6e:bb:04:a4:58:1c:74:b8:b1: 22:a1:09:8a:14:88:fa:2e:5e:9d:9a:f8:d1:04:67: 48:65:a8:1a:2a:45:1c:43:a4:76:f9:57:89:88:32: 53:e7:4f:6e:ef:2d:ed:3c:7e:fb:f0:d5:85:1c:4e: 7c:7a:fc:dd:5e:74:c0:72:99:8c:05:c8:fa:a1:3f: 80:90:54:43:70:98:6f:13:7f:ea:2f:02:81:db:c7: a6:b2:f1:dd:3b:5d:1a:ec:70:60:04:fd:a2:b7:89: 74:3a:5c:a7:4e:30:09:ce:f4:9d:e0:89:d8:67:69: 8b:32:f3:23:8e:b6:6d:60:74:5a:74:f5:3d:7b:69: 4d:3b:05:07:9f:37:e7:10:9c:27:ea:40:4b:4a:3a: 81:64:c6:f4:09:a5:c5:b5:84:72:20:0d:e8:cc:fa: 38:18:26:31:52:ac:cc:cf:41:0d:46:e0:43:fe:71: f0:8f:c0:ce:19:e0:b6:22:09:31:a0:0b:3d:1f:c5: 92:f9:4d:47:fa:3d:4d:71:36:36:83:74:69:8f:45: 46:c7:c8:73:f2:90:f9:25:1e:72:82:44:42:10:b1: 56:f1:aa:11:8c:6e:11:1e:53:6f:50:5f:21:17:5b: f6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:DE:8E:A7:36:E9:EF:D7:55:58:CA:EE:DE:E6:AB:69:54:39:97:D7 X509v3 Authority Key Identifier: keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:5a:f3:be:06:eb:3d:13:2e:b6:0b:1c:a8:49:53:c5:2e:8c: e4:12:57:c8:4e:3b:0b:4f:02:79:20:31:67:bf:a7:ee:74:0f: b9:6f:e5:43:f7:c7:b7:e0:49:27:88:81:4c:11:fb:19:6a:f5: 50:40:cf:d7:20:55:33:4d:92:fe:b1:a1:b3:77:b6:1f:73:5f: 06:9c:d0:3e:d3:40:b3:59:59:cd:35:c1:1f:42:60:de:6d:e2: eb:47:aa:66:54:0b:27:30:15:5f:21:72:9b:88:c0:87:7d:00: 19:de:51:4d:7f:c3:94:41:8e:43:96:eb:fb:be:b0:27:17:25: 73:f4:eb:85:86:f5:a7:71:0e:c1:66:d1:ae:af:4a:46:c8:b3: 23:22:3f:2f:80:a0:19:90:3e:0b:30:ab:ae:73:21:51:70:6d: a1:33:f8:7f:6c:37:6f:2e:34:af:a9:9a:bf:7c:cf:13:ab:15: 7f:92:da:fa:43:7b:95:a8:95:d8:fd:bb:90:11:67:2e:fc:ff: 2a:d8:e3:32:ba:ce:4f:e9:d2:05:33:3f:6c:f2:7b:7b:52:2a: da:46:5e:73:52:3b:4c:c9:57:ea:29:43:f5:f8:b7:86:e1:15: 35:b7:ab:83:fd:de:f5:40:b4:6d:ef:b2:16:f2:59:7d:9d:b5: 98:9e:53:b5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUH15xuwlDfedE5sbUnWNcuJjnE24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2IyOWE3NzY2OWRmNWE3YTVjYjUwNmQ4MzllZThhYTQz MzdjY2FhYzAeFw0yNjA5MTgwOTE1MzZaFw0yNjA5MTkxMjA2MzZaMDMxMTAvBgNV BAMTKDhFREU4RUE3MzZFOUVGRDc1NTU4Q0FFRURFRTZBQjY5NTQzOTk3RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5vqXBDTbQhDAO7f4dNz/WQJvX SW67BKRYHHS4sSKhCYoUiPouXp2a+NEEZ0hlqBoqRRxDpHb5V4mIMlPnT27vLe08 fvvw1YUcTnx6/N1edMBymYwFyPqhP4CQVENwmG8Tf+ovAoHbx6ay8d07XRrscGAE /aK3iXQ6XKdOMAnO9J3gidhnaYsy8yOOtm1gdFp09T17aU07BQefN+cQnCfqQEtK OoFkxvQJpcW1hHIgDejM+jgYJjFSrMzPQQ1G4EP+cfCPwM4Z4LYiCTGgCz0fxZL5 TUf6PU1xNjaDdGmPRUbHyHPykPklHnKCREIQsVbxqhGMbhEeU29QXyEXW/Z1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUjt6Opzbp79dVWMru3uaraVQ5l9cwHwYDVR0j BBgwFoAUyymndmnfWnpctQbYOe6KpDN8yqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgtN2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhm MDZlLzAvQ0IyOUE3NzY2OURGNUE3QTVDQjUwNkQ4MzlFRThBQTQzMzdDQ0FBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3l5bW5kbW5mV25wY3RRYllPZTZLcERO OHlxdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iYjI1ZDA2OC03 ZjljLTRiMGUtYTY5NS0xNzc5YjdkOGYwNmUvMC9DQjI5QTc3NjY5REY1QTdBNUNC NTA2RDgzOUVFOEFBNDMzN0NDQUFDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD1rzvgbrPRMutgscqElT xS6M5BJXyE47C08CeSAxZ7+n7nQPuW/lQ/fHt+BJJ4iBTBH7GWr1UEDP1yBVM02S /rGhs3e2H3NfBpzQPtNAs1lZzTXBH0Jg3m3i60eqZlQLJzAVXyFym4jAh30AGd5R TX/DlEGOQ5br+76wJxclc/TrhYb1p3EOwWbRrq9KRsizIyI/L4CgGZA+CzCrrnMh UXBtoTP4f2w3by40r6mav3zPE6sVf5La+kN7laiV2P27kBFnLvz/KtjjMrrOT+nS BTM/bPJ7e1Iq2kZec1I7TMlX6ilD9fi3huEVNberg/3e9UC0be+yFvJZfZ21mJ5T tQ== -----END CERTIFICATE-----Generated at Fri Sep 18 22:58:53 2026 by rpki-client