$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft File: E205EBF065FC4929F1802662AE62D7F9762600E6.mft (raw, json) Hash identifier: ceJ7f9cUTWTu9bA+xYS8CHYfLAQhL9iyvxIryIuazr0= Subject key identifier: 66:D3:D2:CA:E4:6B:10:37:5B:DC:7D:96:26:F8:83:04:69:2F:6E:DC Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6 Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6 Certificate serial: 2AF9D5B6794188E20C6792817DD27C9ADD344434 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft Manifest number: 034B Signing time: Wed 04 Nov 2026 03:39:02 +0000 Manifest this update: Wed 04 Nov 2026 03:34:02 +0000 Manifest next update: Thu 05 Nov 2026 05:50:02 +0000 Files and hashes: 1: 326130663a356663303a646561663a3a2f34382d3438203d3e20323035303336.roa (hash: tKa0vwG3lPHv89HRJkObWohe1GDQ32pXns0rmjo6QEY=) 2: 39312e3230392e35382e302f32342d3234203d3e20323031313736.roa (hash: 1N2HR7N9gtp6o3KV0QaJh+UGbKik5kZ45nqak2L6yZk=) 3: 326130663a356663303a633064653a3a2f34382d3438203d3e20323035303336.roa (hash: oYDWY+/e76q2NDdVKvWRf2rk49U/wTm4yGlr9LKja5E=) 4: 326130663a356663303a623030623a3a2f34382d3438203d3e20323035303336.roa (hash: Lq7GXZd29If1iO+feMtLfBSO5L7jQQs93/zp1lBKHJM=) 5: 326130663a356663303a6665653a3a2f34382d3438203d3e20323035303336.roa (hash: XXC8dyWu4UshssZO6zCwwZoBmOEgPqZZ6HFk4GKmQe8=) 6: 326130663a356663303a6461643a3a2f34382d3438203d3e20323035303336.roa (hash: KBRrK7qwdJ0ckhlw1Sdxc5DgQIMKCeaye9JMuQ9NqHk=) 7: 326130663a356663303a6164643a3a2f34382d3438203d3e20323035303336.roa (hash: iDaXCSsTmvfoTmC+YV9NzGtXkFfUIZ1KTbR90hlREWI=) 8: 326130663a356663303a663030643a3a2f34382d3438203d3e20323035303336.roa (hash: SCI/BPtn6yW+04laYKZ7SXSJny5K/GC/UYy3z8f9J2s=) 9: 326130663a356663303a626162613a3a2f34382d3438203d3e20323035303336.roa (hash: r5Z0Bf1x67r5DY6qq++iPUsfEYuPIgEsoR10j2scyqA=) 10: 326130663a356663303a636166653a3a2f34382d3438203d3e20323035303336.roa (hash: rDG7iBwEjamNngmGb6UbrgWqxFcsssZTJ3Q5Zd5niv8=) 11: E205EBF065FC4929F1802662AE62D7F9762600E6.crl (hash: SL3KvHibpJa3CFc/veap2ZlgSupZSnNYrw4wZQF8uvo=) 12: 326130663a356663303a6261643a3a2f34382d3438203d3e20323035303336.roa (hash: tGNR+iX5YGBj/xY3fSAf9lu7eS2F21s/Ka3gb4ZCnas=) 13: 326130663a356663303a646565643a3a2f34382d3438203d3e20323035303336.roa (hash: 8SZs8ov0sC1kRDMr8eJpWG0NtiVNfbk+KIX6ABX6Eks=) 14: 326130663a356663303a6465623a3a2f34382d3438203d3e20323035303336.roa (hash: HBIQ7XNX92WAzQJhCdL8BqTB0HFuoxrBe2hDP/YX2cM=) 15: 326130663a356663303a6265643a3a2f34382d3438203d3e20323035303336.roa (hash: YFG6ctXco/zlIckvwV44sl9xZi5Idpya0FOC566CvXA=) 16: 39312e3230392e34302e302f32342d3234203d3e203436383434.roa (hash: lOyC9nhHln4w/6aFWRWEGti2qbnJIh38POtRvVGBI4s=) 17: 39312e3230392e34382e302f32342d3234203d3e2034363337.roa (hash: 9aJ1lRoOXNT0IiNEFJIwNi7z4Hr/etdLOUAmwK9LwsY=) 18: 326130663a356663303a626162653a3a2f34382d3438203d3e20323035303336.roa (hash: sHKt3Hs5YyZg4ePXicldq6VZoIITxxqpIwyiyKVVN2A=) 19: 326130663a356663303a646561643a3a2f34382d3438203d3e20323035303336.roa (hash: JrZG+GYpWwbIbm6FJIWfk6vkBuFSP8Xg3izwlMUXiJY=) 20: 326130663a356663303a6163653a3a2f34382d3438203d3e20323035303336.roa (hash: LbTkWH6GfbpKgOJ/VsOLZJdYmQ/7iSQNPOMtSqgdQgU=) 21: 326130663a356663303a666565643a3a2f34382d3438203d3e20323035303336.roa (hash: xpwIwfTkmJ6MVFD7/8ThvhoBcV+rx30IkMkw3EnowGM=) 22: 39312e3230392e35302e302f32342d3234203d3e20323039333732.roa (hash: LfqYMzkh476Ki7VQsqODx8QNPNDEFujJRyehaY4kEpM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Nov 2026 05:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:f9:d5:b6:79:41:88:e2:0c:67:92:81:7d:d2:7c:9a:dd:34:44:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6 Validity Not Before: Nov 4 03:34:02 2026 GMT Not After : Nov 5 05:50:02 2026 GMT Subject: CN=66D3D2CAE46B10375BDC7D9626F88304692F6EDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c3:5d:54:43:1c:3b:bf:a1:0e:7c:d7:26:4e: 2c:df:fb:ff:72:78:c4:c0:55:f6:7c:83:19:de:dd: 83:fa:eb:45:ae:44:65:f9:5a:d8:c8:96:cb:0c:d5: 57:16:d3:80:68:39:d4:98:06:47:25:d9:b1:f9:43: 4f:5f:71:d3:49:01:c0:ee:99:9a:bb:43:a7:e6:00: 24:99:4a:cf:62:ce:ec:3d:45:1a:3b:0a:0b:34:cd: 48:c6:ee:93:54:f2:a6:a7:8c:f7:5a:f4:cc:59:3a: 2a:10:93:44:1c:0e:d4:35:a2:4c:e9:6d:a6:94:91: 13:9c:86:17:4c:0a:a4:63:6d:64:f5:4b:08:dd:fd: aa:f5:01:bd:16:f3:9a:d4:67:41:75:53:a5:9f:20: 79:1e:ad:cc:6a:47:bf:b6:84:0f:49:c8:04:30:e2: 8c:99:f8:73:52:22:7f:aa:78:f2:b7:32:c1:39:ec: 03:3e:54:38:a1:97:90:0e:cb:e9:1d:20:7a:9e:46: c3:d7:eb:e7:32:3e:7f:55:cf:ff:7b:e8:5b:be:92: 0e:8e:3c:a3:c9:c5:18:c5:5f:e3:36:ae:1d:b4:09: 4f:52:22:2a:29:7c:02:af:61:9c:fd:35:ea:45:ea: 69:96:42:b7:b2:c7:9c:20:43:d0:9d:77:cd:05:30: 83:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D3:D2:CA:E4:6B:10:37:5B:DC:7D:96:26:F8:83:04:69:2F:6E:DC X509v3 Authority Key Identifier: keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:5d:ee:b9:6e:26:84:7b:65:8f:bf:27:a7:ca:e3:6e:0c:23: ca:7e:34:a9:27:4f:1f:87:ff:e5:a8:78:a8:42:cc:79:80:11: e4:26:c9:cc:d0:a7:b6:31:35:fd:da:41:5e:de:92:14:f3:73: ae:d8:7a:2b:8c:42:23:c3:71:e5:10:c0:12:cc:0f:fc:80:7a: 94:3b:31:8b:9d:f2:64:42:1e:9c:ba:35:6b:2a:56:b2:7b:53: d2:10:72:7a:9f:0b:20:19:e5:d9:3e:9c:a5:18:84:62:a5:88: 85:89:07:b2:cb:64:25:b3:b3:99:c0:a2:2d:f3:37:f1:36:0a: 20:9c:84:5a:44:3e:7b:42:6f:a9:64:12:b0:9e:74:39:7d:d0: 32:0e:50:ad:ed:29:af:e3:a2:81:c3:7a:48:84:1d:c6:fd:ae: 85:72:08:a2:80:e4:77:a4:02:f9:9b:64:06:e7:76:db:0f:37: af:64:59:28:fd:09:7c:31:16:f8:6b:a1:9d:e2:79:5b:0a:bb: 01:10:7f:20:e2:fd:f0:93:65:ef:26:1a:03:e8:a8:fc:07:2a: 08:20:94:f8:73:4c:d2:6b:86:e3:eb:1f:27:18:4b:c9:82:b2: 2a:1d:55:09:bc:6f:8b:ca:ea:1a:5f:c6:1f:89:50:7c:41:96: e4:55:e6:90 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKvnVtnlBiOIMZ5KBfdJ8mt00RDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTIwNWViZjA2NWZjNDkyOWYxODAyNjYyYWU2MmQ3Zjk3 NjI2MDBlNjAeFw0yNjExMDQwMzM0MDJaFw0yNjExMDUwNTUwMDJaMDMxMTAvBgNV BAMTKDY2RDNEMkNBRTQ2QjEwMzc1QkRDN0Q5NjI2Rjg4MzA0NjkyRjZFREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvw11UQxw7v6EOfNcmTizf+/9y eMTAVfZ8gxne3YP660WuRGX5WtjIlssM1VcW04BoOdSYBkcl2bH5Q09fcdNJAcDu mZq7Q6fmACSZSs9izuw9RRo7Cgs0zUjG7pNU8qanjPda9MxZOioQk0QcDtQ1okzp baaUkROchhdMCqRjbWT1Swjd/ar1Ab0W85rUZ0F1U6WfIHkercxqR7+2hA9JyAQw 4oyZ+HNSIn+qePK3MsE57AM+VDihl5AOy+kdIHqeRsPX6+cyPn9Vz/976Fu+kg6O PKPJxRjFX+M2rh20CU9SIiopfAKvYZz9NepF6mmWQreyx5wgQ9Cdd80FMINRAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUZtPSyuRrEDdb3H2WJviDBGkvbtwwHwYDVR0j BBgwFoAU4gXr8GX8SSnxgCZirmLX+XYmAOYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYwYmUzZTEtODU0ZS00NjYyLTkyZTgtMDI4OTUwZmY1 N2ZlLzAvRTIwNUVCRjA2NUZDNDkyOUYxODAyNjYyQUU2MkQ3Rjk3NjI2MDBFNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRnWHI4R1g4U1NueGdDWmlybUxYLVhZ bUFPWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjBiZTNlMS04 NTRlLTQ2NjItOTJlOC0wMjg5NTBmZjU3ZmUvMC9FMjA1RUJGMDY1RkM0OTI5RjE4 MDI2NjJBRTYyRDdGOTc2MjYwMEU2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAF3uuW4mhHtlj78np8rj bgwjyn40qSdPH4f/5ah4qELMeYAR5CbJzNCntjE1/dpBXt6SFPNzrth6K4xCI8Nx 5RDAEswP/IB6lDsxi53yZEIenLo1aypWsntT0hByep8LIBnl2T6cpRiEYqWIhYkH sstkJbOzmcCiLfM38TYKIJyEWkQ+e0JvqWQSsJ50OX3QMg5Qre0pr+OigcN6SIQd xv2uhXIIooDkd6QC+ZtkBud22w83r2RZKP0JfDEW+GuhneJ5Wwq7ARB/IOL98JNl 7yYaA+io/AcqCCCU+HNM0muG4+sfJxhLyYKyKh1VCbxvi8rqGl/GH4lQfEGW5FXm kA== -----END CERTIFICATE-----Generated at Wed Nov 4 22:18:22 2026 by rpki-client