$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft File: A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft (raw, json) Hash identifier: AGcuYM+PHDXZgFcWvbumy9xWw5WNrLbFR/uOdYfdT1c= Subject key identifier: 35:C9:67:F4:41:F1:5B:CC:6D:C3:F0:9C:12:7E:D8:5D:F4:A4:74:E4 Authority key identifier: A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E Certificate issuer: /CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e Certificate serial: 320465020C09A440B83929D7D8C17036507A5CC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft Manifest number: 0348 Signing time: Fri 14 Aug 2026 16:43:23 +0000 Manifest this update: Fri 14 Aug 2026 16:38:23 +0000 Manifest next update: Sat 15 Aug 2026 17:15:23 +0000 Files and hashes: 1: 3138352e322e34392e302f32342d3234203d3e203136323736.roa (hash: FCBsflEGPuIBPUDpr9Wd2P83pgvdVR6oNP7rgNfs70A=) 2: 3137382e3233362e3232372e302f32342d3234203d3e203136353039.roa (hash: s9LY+Vjkw5WtsXM7RfsOHHY+7wEN6VML/ihlFBnhNco=) 3: 3137382e3233362e3232362e302f32342d3234203d3e20313938313230.roa (hash: GnErXvMYkgTDg7TWOsi8+AQsBWxWsGMeGB8q8hH51Ag=) 4: A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl (hash: qndaIHDgE0GczZAsQcp8hLI7ghztqbTkJntgIn7aDgg=) 5: 3137382e3233362e3233352e302f32342d3234203d3e203136353039.roa (hash: bWfkodHT7E5HimunFdGnoIBAIfbUWSMFLrgQXGVbeTU=) 6: 3137382e3233362e3233382e302f32332d3234203d3e203136353039.roa (hash: +d+v6sp5knpRtoxQqdZeuiFzOqF0m2ybqFYPkrOxp/A=) 7: 3137382e3233362e3232382e302f32322d3234203d3e203335393136.roa (hash: Uj6qVhvkl5aO5WvtBsGs2hifXenpCHeFu2xN3NsemDU=) 8: 3137382e3233362e3232342e302f32332d3234203d3e203136353039.roa (hash: RKASj5Gz0g7xxLnHb9KEoWbO+w1nl9AqbgRZ3sNE+ho=) 9: 3138352e322e34382e302f32342d3234203d3e203137353631.roa (hash: cZHbqDSphl2AebyPk2WwPs0MocGp/zIlcgDtX1Z1eRc=) 10: 3138352e322e35302e302f32342d3234203d3e203632303832.roa (hash: zw2xB7te/CtSwWJJPc9d/2yAtUjaghXOjJZIncUw2jI=) 11: 3137382e3233362e3233352e302f32342d3234203d3e203134363138.roa (hash: 0gJhuGPSwbYe37kAa8m7YV7yXKIUVPzMQPHSJAUJKZ0=) 12: 3137382e3233362e3233372e302f32342d3234203d3e203137353631.roa (hash: tVXgDczh1Jz7wXt3P0yPpo1PmevC5I4Bn+9xw+6RHtQ=) 13: 3137382e3233362e3233362e302f32342d3234203d3e203136353039.roa (hash: /oMyhrzhRwrf9TS7pL2lkO0wvw/pL1iHf4xSJA6baFs=) 14: 3137382e3233362e3233332e302f32342d3234203d3e203137353631.roa (hash: BDvbJBn4PdPpKswpqhygiWIr2d5q+v6X7XYvNKW1Ayo=) 15: 3138352e322e35312e302f32342d3234203d3e20313939313835.roa (hash: 9WxLlbTQRGoCUsas6s2luj6jANja7S/u+Q4U4i5hg2E=) 16: 3137382e3233362e3233342e302f32342d3234203d3e203137353631.roa (hash: 9Fhp6MCOd+X2RA59heYecj22kZJd6g79ksb5ZL538E4=) 17: 3137382e3233362e3233322e302f32342d3234203d3e20313334353438.roa (hash: KG184dA45IxUmVto869OJN9+pFKdNyvWFLe/t2XGJRs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 15 Aug 2026 17:15:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:04:65:02:0c:09:a4:40:b8:39:29:d7:d8:c1:70:36:50:7a:5c:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e Validity Not Before: Aug 14 16:38:23 2026 GMT Not After : Aug 15 17:15:23 2026 GMT Subject: CN=35C967F441F15BCC6DC3F09C127ED85DF4A474E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:60:65:0a:79:af:07:cb:05:c3:90:ed:5c:bf: 9a:45:75:28:f9:18:09:62:44:6a:e5:35:8b:31:42: 6a:36:a5:1b:4c:5d:48:c6:18:20:53:f3:7c:bd:ed: 75:13:cd:c3:dd:eb:cd:bb:e7:f8:95:cf:df:2f:99: 44:28:aa:84:1c:37:ef:1c:f3:64:d7:ec:24:a7:b6: 7b:95:a5:69:3e:58:43:7f:73:14:b3:df:19:cc:47: 2c:ca:f9:38:62:31:06:2b:4d:e4:3f:63:5a:9f:5c: b6:d4:2b:80:92:f4:12:ec:f2:ec:e8:fe:6c:af:da: 43:b8:4b:21:38:8f:d6:28:bd:3b:5f:5f:65:91:dd: 00:86:4d:c5:31:23:17:45:c8:67:fe:42:fe:66:80: f6:4d:02:fc:39:50:dd:4b:16:8d:a4:34:d0:97:f3: 5c:b2:5e:1a:63:1b:6f:90:9d:e3:8e:45:f1:29:f1: 3c:6f:6c:f5:0a:b1:d6:5b:61:88:54:86:59:b3:59: 5c:cc:6a:32:ba:0a:b0:23:39:8c:8d:f4:7f:52:48: e3:99:05:94:a5:c8:cb:16:65:b1:a3:88:d3:46:ac: ab:a7:8b:b8:2c:51:f6:30:a6:f9:52:f3:cb:26:f3: 51:fb:f4:43:1f:fe:7d:38:6a:8f:2e:ac:75:a9:70: 42:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C9:67:F4:41:F1:5B:CC:6D:C3:F0:9C:12:7E:D8:5D:F4:A4:74:E4 X509v3 Authority Key Identifier: keyid:A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:17:70:7b:00:37:ff:b3:59:14:a3:69:b0:94:c1:11:d4:65: 71:ab:b7:8a:a7:2c:db:c0:db:1c:f6:1a:c5:7f:5d:04:78:b7: db:56:b3:c3:91:a1:bc:69:50:d1:ec:32:3d:24:e9:d9:39:2b: 37:50:13:64:37:4e:f4:c7:fb:b3:b0:ef:c3:5e:50:5e:07:fb: 41:04:da:71:b3:fc:7c:05:76:1c:40:b8:02:f2:05:ca:a5:bc: 36:2d:a9:7b:da:e9:44:ad:24:db:c3:22:ba:af:88:9a:b5:1f: 86:89:76:a4:ab:9b:1a:e4:20:d9:92:17:f5:45:71:57:0b:1c: d7:2b:9a:f4:a4:32:58:34:32:79:73:46:3d:a8:35:04:9f:cc: 13:49:2e:c0:dc:2d:ca:1e:b0:3b:21:7f:fe:af:62:18:3e:5e: a8:cf:f0:f1:8c:c3:83:6a:4a:ce:8f:20:63:f8:ff:f8:34:2c: c8:5a:e9:61:95:da:c8:6b:ad:91:14:b8:b6:0c:30:be:cb:60: 4d:a6:08:3a:79:66:96:53:cf:c2:19:01:a3:49:4a:89:b2:c6: ed:f6:46:fc:2b:27:ce:aa:d1:93:77:89:fd:60:99:91:52:6a: 58:7f:04:53:6f:6e:5e:b3:0c:e2:2c:e6:c3:b5:5b:1d:8d:6a: 81:b4:bf:d9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUMgRlAgwJpEC4OSnX2MFwNlB6XMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTI5ZWYyMWMxMzk3YWI0YjJmMDg3NzgzMDVhMzdmZmQx Y2MyNWM0ZTAeFw0yNjA4MTQxNjM4MjNaFw0yNjA4MTUxNzE1MjNaMDMxMTAvBgNV BAMTKDM1Qzk2N0Y0NDFGMTVCQ0M2REMzRjA5QzEyN0VEODVERjRBNDc0RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/YGUKea8HywXDkO1cv5pFdSj5 GAliRGrlNYsxQmo2pRtMXUjGGCBT83y97XUTzcPd68275/iVz98vmUQoqoQcN+8c 82TX7CSntnuVpWk+WEN/cxSz3xnMRyzK+ThiMQYrTeQ/Y1qfXLbUK4CS9BLs8uzo /myv2kO4SyE4j9YovTtfX2WR3QCGTcUxIxdFyGf+Qv5mgPZNAvw5UN1LFo2kNNCX 81yyXhpjG2+QneOORfEp8TxvbPUKsdZbYYhUhlmzWVzMajK6CrAjOYyN9H9SSOOZ BZSlyMsWZbGjiNNGrKuni7gsUfYwpvlS88sm81H79EMf/n04ao8urHWpcELRAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUNcln9EHxW8xtw/CcEn7YXfSkdOQwHwYDVR0j BBgwFoAUop7yHBOXq0svCHeDBaN//RzCXE4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1 NmI2LzIvQTI5RUYyMUMxMzk3QUI0QjJGMDg3NzgzMDVBMzdGRkQxQ0MyNUM0RS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL29wN3lIQk9YcTBzdkNIZURCYU5fX1J6 Q1hFNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZTQxNzA0Zi03 ODE1LTRmMmMtYTUwMy01OGFlMDhlNTU2YjYvMi9BMjlFRjIxQzEzOTdBQjRCMkYw ODc3ODMwNUEzN0ZGRDFDQzI1QzRFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARBdwewA3/7NZFKNpsJTB EdRlcau3iqcs28DbHPYaxX9dBHi321azw5GhvGlQ0ewyPSTp2TkrN1ATZDdO9Mf7 s7Dvw15QXgf7QQTacbP8fAV2HEC4AvIFyqW8Ni2pe9rpRK0k28Miuq+ImrUfhol2 pKubGuQg2ZIX9UVxVwsc1yua9KQyWDQyeXNGPag1BJ/ME0kuwNwtyh6wOyF//q9i GD5eqM/w8YzDg2pKzo8gY/j/+DQsyFrpYZXayGutkRS4tgwwvstgTaYIOnlmllPP whkBo0lKibLG7fZG/CsnzqrRk3eJ/WCZkVJqWH8EU29uXrMM4izmw7VbHY1qgbS/ 2Q== -----END CERTIFICATE-----Generated at Sat Aug 15 03:15:14 2026 by rpki-client