$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft File: A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft (raw, json) Hash identifier: /6jItIg+2mQceQkGEEJehZ/20H4OVAgpHK7Euf7y86I= Subject key identifier: 73:55:E0:A6:81:C3:E0:BF:1E:F2:DC:DF:04:CC:E7:24:9B:6E:33:A1 Authority key identifier: A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E Certificate issuer: /CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e Certificate serial: 3E7274B316CDC208839B153C2B01E48D8F072052 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft Manifest number: 03B6 Signing time: Sat 03 Oct 2026 22:46:22 +0000 Manifest this update: Sat 03 Oct 2026 22:41:22 +0000 Manifest next update: Sun 04 Oct 2026 22:53:22 +0000 Files and hashes: 1: 3137382e3233362e3233342e302f32342d3234203d3e203137353631.roa (hash: 9Fhp6MCOd+X2RA59heYecj22kZJd6g79ksb5ZL538E4=) 2: 3137382e3233362e3232342e302f32332d3234203d3e203136353039.roa (hash: RKASj5Gz0g7xxLnHb9KEoWbO+w1nl9AqbgRZ3sNE+ho=) 3: 3138352e322e35302e302f32342d3234203d3e203632303832.roa (hash: zw2xB7te/CtSwWJJPc9d/2yAtUjaghXOjJZIncUw2jI=) 4: A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl (hash: xCAY+8k6WL272P3nmMPO/ma3CSKE3UEvaqEeWh6F528=) 5: 3137382e3233362e3233382e302f32332d3234203d3e203136353039.roa (hash: +d+v6sp5knpRtoxQqdZeuiFzOqF0m2ybqFYPkrOxp/A=) 6: 3138352e322e34392e302f32342d3234203d3e20323138393834.roa (hash: nTsoGcm7nRBrh89HCX58wiux4+2N2yxuhGfFc9vQwsc=) 7: 3137382e3233362e3232362e302f32342d3234203d3e20313938313230.roa (hash: GnErXvMYkgTDg7TWOsi8+AQsBWxWsGMeGB8q8hH51Ag=) 8: 3138352e322e35312e302f32342d3234203d3e20313939313835.roa (hash: 9WxLlbTQRGoCUsas6s2luj6jANja7S/u+Q4U4i5hg2E=) 9: 3137382e3233362e3233332e302f32342d3234203d3e203137353631.roa (hash: BDvbJBn4PdPpKswpqhygiWIr2d5q+v6X7XYvNKW1Ayo=) 10: 3137382e3233362e3233352e302f32342d3234203d3e203136353039.roa (hash: bWfkodHT7E5HimunFdGnoIBAIfbUWSMFLrgQXGVbeTU=) 11: 3137382e3233362e3233362e302f32342d3234203d3e203136353039.roa (hash: /oMyhrzhRwrf9TS7pL2lkO0wvw/pL1iHf4xSJA6baFs=) 12: 3137382e3233362e3232372e302f32342d3234203d3e203136353039.roa (hash: s9LY+Vjkw5WtsXM7RfsOHHY+7wEN6VML/ihlFBnhNco=) 13: 3137382e3233362e3233372e302f32342d3234203d3e203137353631.roa (hash: tVXgDczh1Jz7wXt3P0yPpo1PmevC5I4Bn+9xw+6RHtQ=) 14: 3137382e3233362e3233352e302f32342d3234203d3e203134363138.roa (hash: 0gJhuGPSwbYe37kAa8m7YV7yXKIUVPzMQPHSJAUJKZ0=) 15: 3137382e3233362e3233322e302f32342d3234203d3e20313334353438.roa (hash: KG184dA45IxUmVto869OJN9+pFKdNyvWFLe/t2XGJRs=) 16: 3138352e322e34382e302f32342d3234203d3e203137353631.roa (hash: KjrwO4+eb6aY+xxixJp0/KHBXaMmoX+ZsXrJEpwe06c=) 17: 3137382e3233362e3232382e302f32322d3234203d3e203335393136.roa (hash: Uj6qVhvkl5aO5WvtBsGs2hifXenpCHeFu2xN3NsemDU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Oct 2026 22:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:72:74:b3:16:cd:c2:08:83:9b:15:3c:2b:01:e4:8d:8f:07:20:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e Validity Not Before: Oct 3 22:41:22 2026 GMT Not After : Oct 4 22:53:22 2026 GMT Subject: CN=7355E0A681C3E0BF1EF2DCDF04CCE7249B6E33A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6a:db:8f:c4:d5:51:5c:04:e2:42:69:04:f8: 0a:9d:f8:83:a4:4d:39:dc:94:5c:e7:89:83:a7:bc: d1:52:c1:a1:81:45:ed:39:a9:ed:9d:d0:48:64:59: f4:58:03:b0:13:d9:2f:7a:7f:f8:27:73:35:f6:be: 70:ca:c1:d6:84:95:b5:81:e7:38:37:c7:05:15:5e: 87:50:18:10:80:17:20:05:81:94:2f:43:e4:f0:35: 46:00:ac:e4:d2:89:64:f6:13:6a:42:c7:8e:c8:f9: ed:e4:4b:67:ca:9b:73:7d:eb:92:00:4a:fb:e8:fe: 7b:7c:2d:f1:09:42:67:42:14:21:21:56:63:6f:ed: 4e:6c:e2:bb:82:31:38:04:de:19:63:7f:b3:48:07: 18:61:96:e2:e2:a4:b6:dd:20:3f:7b:27:fb:1d:2b: bc:77:5b:f0:57:cb:bf:79:70:6f:11:0b:25:e7:3f: 22:88:df:cb:30:fd:a2:77:74:1f:5f:a2:c8:bb:fb: 7b:d0:2e:f4:21:98:3c:ab:bf:8f:aa:68:d4:27:c4: 5e:d2:77:a7:9b:8e:ab:40:61:f8:20:7f:75:81:dd: 32:70:c8:39:14:91:d2:25:70:ab:1d:56:a0:cd:a9: a1:dc:49:fd:02:d9:22:75:67:43:1e:b2:3e:ee:0d: 2d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:55:E0:A6:81:C3:E0:BF:1E:F2:DC:DF:04:CC:E7:24:9B:6E:33:A1 X509v3 Authority Key Identifier: keyid:A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:0e:db:6a:ea:3f:1d:43:c7:c0:33:c8:48:d5:23:a8:fb:5e: 19:eb:22:0a:16:7b:f5:45:ad:a8:fa:89:74:e7:ca:b3:fd:ee: 0b:f9:74:6a:f0:3f:3b:6f:ce:a5:ce:54:7a:2b:a7:64:1f:44: 48:62:ad:0c:c6:3b:de:9f:0a:e6:31:be:73:b0:bd:6b:ff:28: 9f:7d:88:72:03:8e:cd:0d:4c:2a:c2:04:98:5e:3e:b8:17:ac: f5:71:8a:a6:20:3d:51:aa:20:be:ce:bb:8c:08:a8:ce:65:47: f3:c4:c5:20:e2:bd:6f:ab:2f:66:6e:f0:b6:4b:fa:bf:2e:2c: 5c:f9:ec:85:c7:3e:b1:75:6a:14:67:0c:b5:fa:9e:32:db:40: 1c:fd:b6:6e:5a:ee:1f:ec:0d:66:2a:54:0d:0c:c3:5f:59:24: bf:7e:0c:24:a4:ac:f3:79:e1:9b:e2:b5:61:df:c3:86:47:e1: b1:d3:aa:a6:be:f4:9b:38:bf:9d:e4:5b:9e:f5:6c:53:98:64: e3:c1:38:f0:62:7f:4c:c4:39:f9:71:7c:27:9d:44:f4:20:4f: 23:5e:36:d3:f4:40:e4:76:15:55:7f:d2:1b:a3:2a:94:94:2f: 8b:a1:55:21:a1:23:12:1a:be:09:c9:7b:1e:a1:81:0d:b7:13: 2b:e8:76:76 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPnJ0sxbNwgiDmxU8KwHkjY8HIFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTI5ZWYyMWMxMzk3YWI0YjJmMDg3NzgzMDVhMzdmZmQx Y2MyNWM0ZTAeFw0yNjEwMDMyMjQxMjJaFw0yNjEwMDQyMjUzMjJaMDMxMTAvBgNV BAMTKDczNTVFMEE2ODFDM0UwQkYxRUYyRENERjA0Q0NFNzI0OUI2RTMzQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjatuPxNVRXATiQmkE+Aqd+IOk TTnclFzniYOnvNFSwaGBRe05qe2d0EhkWfRYA7AT2S96f/gnczX2vnDKwdaElbWB 5zg3xwUVXodQGBCAFyAFgZQvQ+TwNUYArOTSiWT2E2pCx47I+e3kS2fKm3N965IA Svvo/nt8LfEJQmdCFCEhVmNv7U5s4ruCMTgE3hljf7NIBxhhluLipLbdID97J/sd K7x3W/BXy795cG8RCyXnPyKI38sw/aJ3dB9fosi7+3vQLvQhmDyrv4+qaNQnxF7S d6ebjqtAYfggf3WB3TJwyDkUkdIlcKsdVqDNqaHcSf0C2SJ1Z0Mesj7uDS29AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUc1XgpoHD4L8e8tzfBMznJJtuM6EwHwYDVR0j BBgwFoAUop7yHBOXq0svCHeDBaN//RzCXE4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1 NmI2LzIvQTI5RUYyMUMxMzk3QUI0QjJGMDg3NzgzMDVBMzdGRkQxQ0MyNUM0RS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL29wN3lIQk9YcTBzdkNIZURCYU5fX1J6 Q1hFNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZTQxNzA0Zi03 ODE1LTRmMmMtYTUwMy01OGFlMDhlNTU2YjYvMi9BMjlFRjIxQzEzOTdBQjRCMkYw ODc3ODMwNUEzN0ZGRDFDQzI1QzRFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADw7bauo/HUPHwDPISNUj qPteGesiChZ79UWtqPqJdOfKs/3uC/l0avA/O2/Opc5UeiunZB9ESGKtDMY73p8K 5jG+c7C9a/8on32IcgOOzQ1MKsIEmF4+uBes9XGKpiA9Uaogvs67jAiozmVH88TF IOK9b6svZm7wtkv6vy4sXPnshcc+sXVqFGcMtfqeMttAHP22blruH+wNZipUDQzD X1kkv34MJKSs83nhm+K1Yd/DhkfhsdOqpr70mzi/neRbnvVsU5hk48E48GJ/TMQ5 +XF8J51E9CBPI1420/RA5HYVVX/SG6MqlJQvi6FVIaEjEhq+Ccl7HqGBDbcTK+h2 dg== -----END CERTIFICATE-----Generated at Sun Oct 4 17:17:59 2026 by rpki-client