$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft File: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json) Hash identifier: yaF0WwLqcL35jqgnAtcaoNu1/K0Vpn6ywaUQ1arafdE= Subject key identifier: EB:9D:6D:BC:46:2F:53:59:FE:A4:89:12:BC:81:71:E2:6F:11:B0:B8 Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Certificate serial: 5AEDD61E5F9C4FD789235BC6C525B2926A225905 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft Manifest number: 025A Signing time: Thu 11 Jun 2026 11:15:16 +0000 Manifest this update: Thu 11 Jun 2026 11:10:16 +0000 Manifest next update: Fri 12 Jun 2026 12:20:16 +0000 Files and hashes: 1: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: AFVeOnsvdfn5zr4jds6KNtr7n93z5bGnJNsS8Ufaz0U=) 2: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: b5xBss8x50/mTCwdi3YpTgkBRxgxQIEDRJCrw4DZBZw=) 3: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: LZdhd8babbehfkgcaQ2p0QEt4TultBt5ttf3MMRXRbI=) 4: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: HzAN9ywzH3R4tgGHlz5ec2Bib9+nQQlSPhjXFH+uvKQ=) 5: 3139342e3132342e3233342e302f32342d3234203d3e203632303638.roa (hash: VKu+iyAXdNGspkh1hqCECAzpccaJ3+JyjcRyNO0/DAw=) 6: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: vlI3tYFCLzWNGXLpIFZR5AHPwN6r5z5t+7vGqUPF4to=) 7: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: unIb/pLoJEr1pBLYhSY4VQ/RprOtasUPRROCGuOA9r4=) 8: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: 7RbGKTX0T75GWL+U9cYx0V2iGn8DIPgdGtE6PSL/e9k=) 9: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: NZmbB1AD2okfoNYoNRF6VSo9hkwhlpFlsxSprSq+6Jk=) 10: 326130663a336363333a343030303a3a2f34342d3434203d3e20323032333036.roa (hash: fxbR5GcPyoWqODdA3f1yyd4v8P4uCsBii+08ii9bg1w=) 11: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: ys4GcQr92xf16wQYlCYeGPMDsfyEnGKsrz3bvGtNWC8=) 12: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: wDL3d4A1d+S+hyAjhYBLt0XksiIY4fLz7lOilgNj2Q4=) 13: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: hJUy+WAsteHuyZTTylubys83kZZc4LE0LX6QYeU4v/U=) 14: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: ABkHDQKjEeANharZO1hp0RDKdEsWdRf0F4prEwfZnFs=) 15: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: DZU46gedNFYz2v7yvGIXeVWs+yworgKzdoKm6wBF9RY=) 16: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: ytXZYGQszxq8pIbGpPhEQYHPj+yAtwSStW942jiAIuQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 12:20:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:ed:d6:1e:5f:9c:4f:d7:89:23:5b:c6:c5:25:b2:92:6a:22:59:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Validity Not Before: Jun 11 11:10:16 2026 GMT Not After : Jun 12 12:20:16 2026 GMT Subject: CN=EB9D6DBC462F5359FEA48912BC8171E26F11B0B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e3:0c:f4:65:74:7e:7d:55:ca:9c:1d:6a:a3: 83:5e:e4:54:bf:7e:ce:75:07:19:03:97:4f:c5:23: d8:5d:3f:31:f4:f6:44:09:a3:4e:92:d8:21:9f:aa: 32:6b:19:64:9a:c1:33:5a:61:f3:5c:7d:d6:f8:85: 3d:56:8d:3b:9f:12:af:d7:62:c6:d1:55:6f:5f:0a: 90:b3:d8:8f:4f:fa:03:17:b4:2c:67:4d:87:8b:1c: 28:41:67:61:02:13:fa:09:9c:cc:5f:fa:c4:7e:3f: a3:ec:71:bb:23:6d:da:e1:20:01:62:ec:5d:f6:28: 55:f8:5c:64:0d:d7:81:12:32:15:cc:86:ae:99:0e: 04:e2:c9:e6:7c:61:a2:fb:84:c7:65:f4:9a:b7:f2: 56:0e:06:48:4d:5c:f5:ca:8e:15:5d:65:69:55:2b: da:73:e5:de:a8:4a:91:1b:82:36:5e:4c:7a:de:4d: 46:34:b3:6d:52:6c:35:af:09:77:3a:f7:7d:df:cb: aa:fe:e6:45:d0:02:1d:9e:97:5c:85:70:be:7e:f7: cf:8b:5a:4f:78:58:7a:38:51:1a:a8:80:fd:a8:56: 69:2e:0c:a0:df:be:63:28:37:da:84:c2:dd:44:63: 83:5e:79:d2:4d:c2:37:9c:ce:76:30:12:fe:93:44: 81:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:9D:6D:BC:46:2F:53:59:FE:A4:89:12:BC:81:71:E2:6F:11:B0:B8 X509v3 Authority Key Identifier: keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:bd:2e:2a:70:8d:66:30:1b:ed:ed:95:e8:31:79:b9:67:4e: d9:16:1d:7d:cd:13:95:7a:f4:15:7c:bc:d9:73:13:b2:d1:ed: 68:42:1f:2e:1d:e7:5c:65:54:f9:82:c7:cd:c8:c8:c9:68:e0: 4b:eb:cc:24:04:a3:94:66:68:8a:5f:fb:1b:92:5a:8a:4d:41: a6:ee:f8:dd:92:38:dd:9f:f1:fe:b5:75:f4:0e:d7:de:a8:27: 5e:df:08:b7:de:31:07:c7:25:42:90:4a:00:0b:37:62:d9:92: ce:2d:31:13:13:85:67:f8:e8:0c:06:65:61:fc:c7:a4:8b:4b: 98:1b:bb:4e:ad:de:e6:67:9f:b7:f2:d9:8e:9d:58:8f:3e:9e: 78:3d:07:2e:22:d1:e7:1a:1c:d1:8e:90:e5:47:bc:18:6d:da: 90:87:92:fd:9f:0d:a9:52:ad:98:c4:3e:20:3f:69:5b:26:5c: bb:b5:14:ce:8d:f9:96:4d:5b:66:7b:cf:7e:56:1f:f5:2d:e5: 75:b0:31:fd:a2:7a:2b:9b:0e:80:7c:24:1a:10:6a:62:c9:bf: 77:70:15:25:23:76:14:07:31:3c:41:f7:0f:4d:06:53:1e:ee: 22:1d:49:88:0a:75:ef:71:fc:9e:ea:be:1f:40:9b:cf:97:97: 2c:4c:b9:42 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWu3WHl+cT9eJI1vGxSWykmoiWQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2IyOWE3NzY2OWRmNWE3YTVjYjUwNmQ4MzllZThhYTQz MzdjY2FhYzAeFw0yNjA2MTExMTEwMTZaFw0yNjA2MTIxMjIwMTZaMDMxMTAvBgNV BAMTKEVCOUQ2REJDNDYyRjUzNTlGRUE0ODkxMkJDODE3MUUyNkYxMUIwQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm4wz0ZXR+fVXKnB1qo4Ne5FS/ fs51BxkDl0/FI9hdPzH09kQJo06S2CGfqjJrGWSawTNaYfNcfdb4hT1WjTufEq/X YsbRVW9fCpCz2I9P+gMXtCxnTYeLHChBZ2ECE/oJnMxf+sR+P6PscbsjbdrhIAFi 7F32KFX4XGQN14ESMhXMhq6ZDgTiyeZ8YaL7hMdl9Jq38lYOBkhNXPXKjhVdZWlV K9pz5d6oSpEbgjZeTHreTUY0s21SbDWvCXc6933fy6r+5kXQAh2el1yFcL5+98+L Wk94WHo4URqogP2oVmkuDKDfvmMoN9qEwt1EY4NeedJNwjecznYwEv6TRIEDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU651tvEYvU1n+pIkSvIFx4m8RsLgwHwYDVR0j BBgwFoAUyymndmnfWnpctQbYOe6KpDN8yqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgtN2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhm MDZlLzAvQ0IyOUE3NzY2OURGNUE3QTVDQjUwNkQ4MzlFRThBQTQzMzdDQ0FBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3l5bW5kbW5mV25wY3RRYllPZTZLcERO OHlxdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iYjI1ZDA2OC03 ZjljLTRiMGUtYTY5NS0xNzc5YjdkOGYwNmUvMC9DQjI5QTc3NjY5REY1QTdBNUNC NTA2RDgzOUVFOEFBNDMzN0NDQUFDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVb0uKnCNZjAb7e2V6DF5 uWdO2RYdfc0TlXr0FXy82XMTstHtaEIfLh3nXGVU+YLHzcjIyWjgS+vMJASjlGZo il/7G5Jaik1Bpu743ZI43Z/x/rV19A7X3qgnXt8It94xB8clQpBKAAs3YtmSzi0x ExOFZ/joDAZlYfzHpItLmBu7Tq3e5meft/LZjp1Yjz6eeD0HLiLR5xoc0Y6Q5Ue8 GG3akIeS/Z8NqVKtmMQ+ID9pWyZcu7UUzo35lk1bZnvPflYf9S3ldbAx/aJ6K5sO gHwkGhBqYsm/d3AVJSN2FAcxPEH3D00GUx7uIh1JiAp173H8nuq+H0Cbz5eXLEy5 Qg== -----END CERTIFICATE-----Generated at Fri Jun 12 04:37:53 2026 by rpki-client