$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft File: A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft (raw, json) Hash identifier: GtEdl0sTwVT48diwB663tDie4tbjatSsaxzRyGIJcEU= Subject key identifier: EF:2D:8D:30:C2:61:C1:2F:C0:85:EB:7B:00:2E:F3:BC:78:10:39:F7 Authority key identifier: A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E Certificate issuer: /CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e Certificate serial: 3E4425FB43EB693479477389651C95187EA37F09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft Manifest number: 23 Signing time: Sat 18 Apr 2026 01:19:09 +0000 Manifest this update: Sat 18 Apr 2026 01:14:09 +0000 Manifest next update: Sun 19 Apr 2026 04:28:09 +0000 Files and hashes: 1: 3137382e3233362e3233322e302f32342d3234203d3e20313334353438.roa (hash: 7DgYKwKtLZSr7DRHabJtbuC0B6ix/bKEQ0cR0pfd3rY=) 2: 3137382e3233362e3232362e302f32342d3234203d3e203137353631.roa (hash: CAMbXIY1N8VhXT+Q3NZkXi8aaoa4UsQXngYC7GnBD9g=) 3: 3137382e3233362e3233352e302f32342d3234203d3e203136353039.roa (hash: hccha8AKtVyQcbSAnDX8P2RW49RRKPpiXx52OSiKEoE=) 4: 3137382e3233362e3233372e302f32342d3234203d3e203137353631.roa (hash: fHBBYbGG2NzQNQY3fmD8FeYtYam6rWl3rBV+v3fAJU4=) 5: 3137382e3233362e3232382e302f32322d3232203d3e203335393136.roa (hash: A62qyB1loeqHPOgqTh+NyCLJ9k3Q15qAZyXGth/Mn84=) 6: 3137382e3233362e3233362e302f32342d3234203d3e203136353039.roa (hash: 0Mm/V7Wp1ZSi2mt8rDpaa6kvf12GFpAfRZvXodrVnHg=) 7: 3137382e3233362e3233382e302f32342d3234203d3e203136353039.roa (hash: Kzu9AijEtaMDzMw/4Xk47K37j84ocZpz0R373WBe8UU=) 8: 3137382e3233362e3233392e302f32342d3234203d3e203136353039.roa (hash: cMFFY6a6WGGwVpE9OONltKLNaqlkFqqAE9xOwe8uKmY=) 9: 3137382e3233362e3232342e302f32342d3234203d3e203136353039.roa (hash: DODPiqmKWn4fEQV41JgzryXPssmZ8/IlY16gySvomeE=) 10: 3137382e3233362e3232352e302f32342d3234203d3e203136353039.roa (hash: bVv/8FZz1Mo+LMMAfRoMNi+St0h3DR5SK9VVKl37ktc=) 11: 3137382e3233362e3232382e302f32342d3234203d3e203335393136.roa (hash: a++fo1ZwWeohzZL4au1Gv3n+pN7wCIzdhg0ArbQ5nTE=) 12: 3137382e3233362e3232372e302f32342d3234203d3e203136353039.roa (hash: VnGJ5//x+EFhKJMb3ZAld7d7CF6EreU1gC/ATQCq4mA=) 13: 3137382e3233362e3233332e302f32342d3234203d3e203137353631.roa (hash: IaXCjgu5vZTh/itUXhcfbJx9MSY5NSRMA9XWogXno2s=) 14: 3138352e322e34392e302f32342d3234203d3e203136323736.roa (hash: LIh0DIx2IImYPrbtKl5UIaWrpsZNhrwgJffZtWjbQqI=) 15: 3138352e322e35312e302f32342d3234203d3e203137353631.roa (hash: 35sh4qa6md8PSSqaFmFo8K1ywirF77Kr0DSJ4bj3Ok0=) 16: 3138352e322e35302e302f32342d3234203d3e203137353631.roa (hash: qB0BB6ZhKcaJO+ugI4LyxfHcrE+NQHHBJFGIgs1wC9c=) 17: A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl (hash: GnI6BRirU9VOnk0tP+1wAsgR1oc+ZkpZq6W7AAJGJeA=) 18: 3138352e322e35302e302f32342d3234203d3e203632303832.roa (hash: EUMdCtj0EwFeQzWbVb7TeiziGsrERoU+cN/BNaOw7Hk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 Apr 2026 04:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:44:25:fb:43:eb:69:34:79:47:73:89:65:1c:95:18:7e:a3:7f:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e Validity Not Before: Apr 18 01:14:09 2026 GMT Not After : Apr 19 04:28:09 2026 GMT Subject: CN=EF2D8D30C261C12FC085EB7B002EF3BC781039F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b9:cd:7f:2d:5a:8d:d2:cf:71:8d:35:c7:23: 23:32:53:8b:54:b0:9a:87:5d:c7:74:e4:2a:59:91: 58:3a:5f:2f:43:07:5c:fc:f3:69:22:89:fc:3c:5a: 77:43:b1:38:f6:a7:bf:77:b1:e7:4c:93:e8:33:b8: ec:94:29:7d:fa:f5:77:9b:f9:0b:ac:fb:da:7e:b3: c7:0f:de:f2:27:f5:5a:7b:16:78:32:6b:5b:3f:60: 46:62:f3:c7:77:2a:63:6b:73:20:de:e0:70:c3:64: 09:6d:3c:e3:e9:5b:d8:24:c4:26:78:d3:46:81:cf: c1:74:b1:dc:d1:29:55:5f:e2:cd:76:00:b6:80:f3: 6e:de:ac:20:ab:3d:10:3a:dc:eb:ab:ca:68:7a:b7: 86:85:d8:e7:38:b3:f4:1f:a5:9e:46:11:84:67:0f: a1:7d:1f:d4:d3:40:80:fc:91:35:a8:6d:76:17:20: 7c:a6:c5:35:18:1c:7d:d4:04:29:e5:81:52:91:bc: ec:50:7c:62:74:38:8c:03:ea:bc:89:20:cb:cb:f4: 51:4e:45:a9:b5:e0:71:1f:b5:8d:ea:1b:4b:2f:51: 6f:4b:e8:50:ef:f0:99:ef:3f:b0:54:04:59:a7:c8: 1c:d4:d8:f6:fd:62:84:7f:ac:d0:f5:4a:17:4f:e6: 72:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:2D:8D:30:C2:61:C1:2F:C0:85:EB:7B:00:2E:F3:BC:78:10:39:F7 X509v3 Authority Key Identifier: keyid:A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:ec:7c:63:db:20:3d:e9:43:14:8b:1b:c8:42:c4:6f:10:65: 44:c2:b1:fd:5a:64:2d:b2:37:2d:0c:db:76:c5:1a:ef:25:80: cd:4a:c9:2e:a0:f5:e0:ee:86:b5:6a:3a:e4:aa:14:b9:f1:2f: 02:9d:42:75:9c:ce:73:ca:1b:73:e6:ea:ba:7d:31:9f:81:4a: 6a:2f:74:fd:36:dd:b4:29:0a:38:5d:f5:15:d0:df:fc:de:a1: e0:48:6b:af:2f:4b:ab:79:ed:ab:18:de:d9:a3:b0:94:c3:62: 42:92:2b:fc:30:d8:d8:c8:b6:28:55:99:45:f5:ee:5c:b5:b6: 16:e9:51:72:d7:f5:e2:d6:bb:6c:19:51:17:a7:f8:ec:fe:ba: 50:ce:5e:11:70:66:f1:83:e0:f5:c2:12:66:70:cf:3e:77:aa: fc:e7:62:00:67:27:98:39:a4:3e:d5:8c:33:44:d2:c3:d8:db: f9:d5:76:fa:a5:d0:c2:a4:54:7b:bb:2a:17:68:ac:0b:dd:11: 54:70:66:0b:fd:10:8d:79:e5:22:a8:cb:29:2f:3d:d9:da:6d: dd:d6:6d:26:31:87:b3:bc:a6:93:a9:55:e6:71:79:ca:47:8f: 4c:b1:7e:2f:57:3a:72:5a:ef:2e:11:f5:7f:cb:52:74:15:be: 4e:de:49:34 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPkQl+0PraTR5R3OJZRyVGH6jfwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTI5ZWYyMWMxMzk3YWI0YjJmMDg3NzgzMDVhMzdmZmQx Y2MyNWM0ZTAeFw0yNjA0MTgwMTE0MDlaFw0yNjA0MTkwNDI4MDlaMDMxMTAvBgNV BAMTKEVGMkQ4RDMwQzI2MUMxMkZDMDg1RUI3QjAwMkVGM0JDNzgxMDM5RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSuc1/LVqN0s9xjTXHIyMyU4tU sJqHXcd05CpZkVg6Xy9DB1z882kiifw8WndDsTj2p793sedMk+gzuOyUKX369Xeb +Qus+9p+s8cP3vIn9Vp7Fngya1s/YEZi88d3KmNrcyDe4HDDZAltPOPpW9gkxCZ4 00aBz8F0sdzRKVVf4s12ALaA827erCCrPRA63Ourymh6t4aF2Oc4s/QfpZ5GEYRn D6F9H9TTQID8kTWobXYXIHymxTUYHH3UBCnlgVKRvOxQfGJ0OIwD6ryJIMvL9FFO Ram14HEftY3qG0svUW9L6FDv8JnvP7BUBFmnyBzU2Pb9YoR/rND1ShdP5nI1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU7y2NMMJhwS/Ahet7AC7zvHgQOfcwHwYDVR0j BBgwFoAUop7yHBOXq0svCHeDBaN//RzCXE4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1 NmI2LzIvQTI5RUYyMUMxMzk3QUI0QjJGMDg3NzgzMDVBMzdGRkQxQ0MyNUM0RS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL29wN3lIQk9YcTBzdkNIZURCYU5fX1J6 Q1hFNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZTQxNzA0Zi03 ODE1LTRmMmMtYTUwMy01OGFlMDhlNTU2YjYvMi9BMjlFRjIxQzEzOTdBQjRCMkYw ODc3ODMwNUEzN0ZGRDFDQzI1QzRFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANux8Y9sgPelDFIsbyELE bxBlRMKx/VpkLbI3LQzbdsUa7yWAzUrJLqD14O6GtWo65KoUufEvAp1CdZzOc8ob c+bqun0xn4FKai90/TbdtCkKOF31FdDf/N6h4Ehrry9Lq3ntqxje2aOwlMNiQpIr /DDY2Mi2KFWZRfXuXLW2FulRctf14ta7bBlRF6f47P66UM5eEXBm8YPg9cISZnDP Pneq/OdiAGcnmDmkPtWMM0TSw9jb+dV2+qXQwqRUe7sqF2isC90RVHBmC/0QjXnl IqjLKS892dpt3dZtJjGHs7ymk6lV5nF5ykePTLF+L1c6clrvLhH1f8tSdBW+Tt5J NA== -----END CERTIFICATE-----Generated at Sat Apr 18 18:17:58 2026 by rpki-client