$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft File: A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft (raw, json) Hash identifier: USHJ4FP1KiY1EZM2hzmEEM8gYE+sHp1SLTnHX50GIXY= Subject key identifier: 32:CB:42:33:5B:75:55:24:3A:83:01:FC:E0:C7:7E:7F:C1:5D:2E:45 Authority key identifier: A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E Certificate issuer: /CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e Certificate serial: 5F47ECB5A925CD4605736CCF51FCFCC8F2009980 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft Manifest number: 02CD Signing time: Tue 30 Jun 2026 07:33:10 +0000 Manifest this update: Tue 30 Jun 2026 07:28:10 +0000 Manifest next update: Wed 01 Jul 2026 09:42:10 +0000 Files and hashes: 1: 3138352e322e34392e302f32342d3234203d3e203136323736.roa (hash: yY1cYTlf5qHcXFsZxMCFHIapofwym8WWW7JRWSSOET8=) 2: 3137382e3233362e3232342e302f32332d3234203d3e203136353039.roa (hash: RKASj5Gz0g7xxLnHb9KEoWbO+w1nl9AqbgRZ3sNE+ho=) 3: 3138352e322e34382e302f32342d3234203d3e203137353631.roa (hash: 7wcegcT5K98XgAg+XQMcAdixoXoYKu4tzsSbp2VeJ64=) 4: 3137382e3233362e3233362e302f32342d3234203d3e203136353039.roa (hash: /oMyhrzhRwrf9TS7pL2lkO0wvw/pL1iHf4xSJA6baFs=) 5: 3137382e3233362e3232362e302f32342d3234203d3e20313938313230.roa (hash: GnErXvMYkgTDg7TWOsi8+AQsBWxWsGMeGB8q8hH51Ag=) 6: 3137382e3233362e3232382e302f32322d3234203d3e203335393136.roa (hash: Uj6qVhvkl5aO5WvtBsGs2hifXenpCHeFu2xN3NsemDU=) 7: 3137382e3233362e3233352e302f32342d3234203d3e203134363138.roa (hash: 0gJhuGPSwbYe37kAa8m7YV7yXKIUVPzMQPHSJAUJKZ0=) 8: 3137382e3233362e3233322e302f32342d3234203d3e20313334353438.roa (hash: KG184dA45IxUmVto869OJN9+pFKdNyvWFLe/t2XGJRs=) 9: 3137382e3233362e3233342e302f32342d3234203d3e203137353631.roa (hash: 9Fhp6MCOd+X2RA59heYecj22kZJd6g79ksb5ZL538E4=) 10: 3138352e322e35302e302f32342d3234203d3e203632303832.roa (hash: zw2xB7te/CtSwWJJPc9d/2yAtUjaghXOjJZIncUw2jI=) 11: 3137382e3233362e3233372e302f32342d3234203d3e203137353631.roa (hash: tVXgDczh1Jz7wXt3P0yPpo1PmevC5I4Bn+9xw+6RHtQ=) 12: A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl (hash: 6Z8kaHTLM53fyV/RJGsimPQMDiQRn2J2KLvsI9Ol3BQ=) 13: 3137382e3233362e3233382e302f32332d3234203d3e203136353039.roa (hash: +d+v6sp5knpRtoxQqdZeuiFzOqF0m2ybqFYPkrOxp/A=) 14: 3137382e3233362e3233352e302f32342d3234203d3e203136353039.roa (hash: bWfkodHT7E5HimunFdGnoIBAIfbUWSMFLrgQXGVbeTU=) 15: 3137382e3233362e3232372e302f32342d3234203d3e203136353039.roa (hash: s9LY+Vjkw5WtsXM7RfsOHHY+7wEN6VML/ihlFBnhNco=) 16: 3138352e322e35312e302f32342d3234203d3e20313939313835.roa (hash: 9WxLlbTQRGoCUsas6s2luj6jANja7S/u+Q4U4i5hg2E=) 17: 3137382e3233362e3233332e302f32342d3234203d3e203137353631.roa (hash: BDvbJBn4PdPpKswpqhygiWIr2d5q+v6X7XYvNKW1Ayo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 01 Jul 2026 09:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:47:ec:b5:a9:25:cd:46:05:73:6c:cf:51:fc:fc:c8:f2:00:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e Validity Not Before: Jun 30 07:28:10 2026 GMT Not After : Jul 1 09:42:10 2026 GMT Subject: CN=32CB42335B7555243A8301FCE0C77E7FC15D2E45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:84:be:d6:10:6f:bd:97:ad:13:7b:3a:6d:55: 03:07:be:f5:ba:4d:1d:22:1d:87:47:66:0e:a2:6d: 2f:dd:f3:7c:de:a2:62:a9:a4:b3:24:50:d7:0a:43: 50:31:16:b8:94:f8:8a:67:d1:bb:c8:82:49:df:d9: 63:58:c7:d5:0d:53:88:57:6a:eb:db:fc:51:9c:33: 14:21:33:97:0e:ae:85:b6:0c:94:f0:7d:e5:7c:0c: 37:a6:4c:36:b2:71:f9:ef:2d:23:e3:56:67:6d:7c: c0:0b:52:1b:16:83:18:02:7f:e3:ce:d5:06:f1:62: 8c:4f:d5:9b:d3:be:eb:24:20:a9:43:a3:b9:da:48: 97:f8:0c:5b:19:b1:c3:f0:9f:12:60:7b:96:4c:6c: fe:49:10:b3:64:4e:5d:0d:a5:6c:14:97:eb:ed:bc: fa:fe:36:20:6a:36:87:fd:93:4a:d4:48:61:77:7e: 77:57:d1:32:2f:08:06:90:77:b2:0b:d3:e7:ee:51: 47:e1:e3:2f:22:89:69:5d:cf:8d:48:cd:7a:56:df: 78:9c:ec:36:42:d8:f0:ce:50:e2:c2:58:24:95:b3: 70:14:25:df:97:82:2d:9a:35:9e:0e:1b:ec:36:5d: 36:97:68:53:43:33:31:69:06:a4:ca:4d:64:73:85: 02:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:CB:42:33:5B:75:55:24:3A:83:01:FC:E0:C7:7E:7F:C1:5D:2E:45 X509v3 Authority Key Identifier: keyid:A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:02:07:2b:88:45:c0:48:bf:53:c5:34:ec:5a:0f:d5:93:e3: 6d:6f:01:8c:8f:c2:84:ad:62:9e:d7:99:22:fd:76:da:0c:64: 66:e7:c4:da:bb:3e:40:6c:72:ca:a7:8a:1e:eb:c9:c4:88:9d: d0:96:91:4b:da:9c:17:a4:47:ce:93:dd:3e:08:71:ef:d4:d3: ee:a4:03:9b:70:9f:b5:e5:30:3a:f8:96:69:e0:b0:b6:87:4c: 83:23:71:1a:32:c6:dd:d7:f6:7d:96:15:a2:a0:24:3c:71:86: 14:24:2f:a8:76:93:7f:27:7a:9b:56:ab:ad:18:30:ee:4b:b6: 02:f9:db:b3:08:7c:b9:59:9d:4f:4a:9c:d6:bf:f1:a0:a6:b3: 5e:fa:81:39:f2:9b:6a:2f:c8:e3:9f:4e:a5:bb:66:33:89:2a: 49:89:3f:fb:2e:31:7c:8e:7e:8f:43:00:71:9a:87:c9:ed:95: ff:e4:ec:2a:1d:be:6a:38:8c:64:75:b9:51:ef:20:b8:15:c4: b1:6a:20:33:d3:9e:84:a8:a3:62:4c:a7:70:db:84:3d:92:13: aa:d4:57:34:89:a8:b4:24:b7:11:3c:d8:0d:4d:a4:b9:b3:58: b4:65:56:bc:fe:75:7f:31:9b:fb:8a:b9:c7:56:28:ff:6e:3f: c3:a9:29:bb -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUX0fstaklzUYFc2zPUfz8yPIAmYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTI5ZWYyMWMxMzk3YWI0YjJmMDg3NzgzMDVhMzdmZmQx Y2MyNWM0ZTAeFw0yNjA2MzAwNzI4MTBaFw0yNjA3MDEwOTQyMTBaMDMxMTAvBgNV BAMTKDMyQ0I0MjMzNUI3NTU1MjQzQTgzMDFGQ0UwQzc3RTdGQzE1RDJFNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRhL7WEG+9l60TezptVQMHvvW6 TR0iHYdHZg6ibS/d83zeomKppLMkUNcKQ1AxFriU+Ipn0bvIgknf2WNYx9UNU4hX auvb/FGcMxQhM5cOroW2DJTwfeV8DDemTDaycfnvLSPjVmdtfMALUhsWgxgCf+PO 1QbxYoxP1ZvTvuskIKlDo7naSJf4DFsZscPwnxJge5ZMbP5JELNkTl0NpWwUl+vt vPr+NiBqNof9k0rUSGF3fndX0TIvCAaQd7IL0+fuUUfh4y8iiWldz41IzXpW33ic 7DZC2PDOUOLCWCSVs3AUJd+Xgi2aNZ4OG+w2XTaXaFNDMzFpBqTKTWRzhQKpAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUMstCM1t1VSQ6gwH84Md+f8FdLkUwHwYDVR0j BBgwFoAUop7yHBOXq0svCHeDBaN//RzCXE4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1 NmI2LzIvQTI5RUYyMUMxMzk3QUI0QjJGMDg3NzgzMDVBMzdGRkQxQ0MyNUM0RS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL29wN3lIQk9YcTBzdkNIZURCYU5fX1J6 Q1hFNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZTQxNzA0Zi03 ODE1LTRmMmMtYTUwMy01OGFlMDhlNTU2YjYvMi9BMjlFRjIxQzEzOTdBQjRCMkYw ODc3ODMwNUEzN0ZGRDFDQzI1QzRFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwIHK4hFwEi/U8U07FoP 1ZPjbW8BjI/ChK1inteZIv122gxkZufE2rs+QGxyyqeKHuvJxIid0JaRS9qcF6RH zpPdPghx79TT7qQDm3CfteUwOviWaeCwtodMgyNxGjLG3df2fZYVoqAkPHGGFCQv qHaTfyd6m1arrRgw7ku2Avnbswh8uVmdT0qc1r/xoKazXvqBOfKbai/I459Opbtm M4kqSYk/+y4xfI5+j0MAcZqHye2V/+TsKh2+ajiMZHW5Ue8guBXEsWogM9OehKij YkyncNuEPZITqtRXNImotCS3ETzYDU2kubNYtGVWvP51fzGb+4q5x1Yo/24/w6kp uw== -----END CERTIFICATE-----Generated at Tue Jun 30 23:17:20 2026 by rpki-client