$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft File: E205EBF065FC4929F1802662AE62D7F9762600E6.mft (raw, json) Hash identifier: nLt6cEfhcQWppSxgIyu5fQ5VMnVDB2Y166BVoOag698= Subject key identifier: B8:A3:7E:B0:07:60:FF:CB:F3:7C:7D:79:FA:B6:F5:EB:59:F6:BA:4A Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6 Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6 Certificate serial: 0E51A0C1F2B3B89F0033992E7EA020BFF4F61E34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft Manifest number: 034A Signing time: Tue 03 Nov 2026 11:03:56 +0000 Manifest this update: Tue 03 Nov 2026 10:58:56 +0000 Manifest next update: Wed 04 Nov 2026 11:35:56 +0000 Files and hashes: 1: 39312e3230392e35382e302f32342d3234203d3e20323031313736.roa (hash: 1N2HR7N9gtp6o3KV0QaJh+UGbKik5kZ45nqak2L6yZk=) 2: 326130663a356663303a6665653a3a2f34382d3438203d3e20323035303336.roa (hash: XXC8dyWu4UshssZO6zCwwZoBmOEgPqZZ6HFk4GKmQe8=) 3: 326130663a356663303a6164643a3a2f34382d3438203d3e20323035303336.roa (hash: iDaXCSsTmvfoTmC+YV9NzGtXkFfUIZ1KTbR90hlREWI=) 4: 326130663a356663303a6461643a3a2f34382d3438203d3e20323035303336.roa (hash: KBRrK7qwdJ0ckhlw1Sdxc5DgQIMKCeaye9JMuQ9NqHk=) 5: 326130663a356663303a6265643a3a2f34382d3438203d3e20323035303336.roa (hash: YFG6ctXco/zlIckvwV44sl9xZi5Idpya0FOC566CvXA=) 6: 326130663a356663303a646561643a3a2f34382d3438203d3e20323035303336.roa (hash: JrZG+GYpWwbIbm6FJIWfk6vkBuFSP8Xg3izwlMUXiJY=) 7: 326130663a356663303a6261643a3a2f34382d3438203d3e20323035303336.roa (hash: tGNR+iX5YGBj/xY3fSAf9lu7eS2F21s/Ka3gb4ZCnas=) 8: 39312e3230392e34302e302f32342d3234203d3e203436383434.roa (hash: lOyC9nhHln4w/6aFWRWEGti2qbnJIh38POtRvVGBI4s=) 9: 326130663a356663303a646561663a3a2f34382d3438203d3e20323035303336.roa (hash: tKa0vwG3lPHv89HRJkObWohe1GDQ32pXns0rmjo6QEY=) 10: 326130663a356663303a623030623a3a2f34382d3438203d3e20323035303336.roa (hash: Lq7GXZd29If1iO+feMtLfBSO5L7jQQs93/zp1lBKHJM=) 11: 326130663a356663303a663030643a3a2f34382d3438203d3e20323035303336.roa (hash: SCI/BPtn6yW+04laYKZ7SXSJny5K/GC/UYy3z8f9J2s=) 12: 326130663a356663303a646565643a3a2f34382d3438203d3e20323035303336.roa (hash: 8SZs8ov0sC1kRDMr8eJpWG0NtiVNfbk+KIX6ABX6Eks=) 13: 39312e3230392e35302e302f32342d3234203d3e20323039333732.roa (hash: LfqYMzkh476Ki7VQsqODx8QNPNDEFujJRyehaY4kEpM=) 14: 326130663a356663303a6163653a3a2f34382d3438203d3e20323035303336.roa (hash: LbTkWH6GfbpKgOJ/VsOLZJdYmQ/7iSQNPOMtSqgdQgU=) 15: 326130663a356663303a626162613a3a2f34382d3438203d3e20323035303336.roa (hash: r5Z0Bf1x67r5DY6qq++iPUsfEYuPIgEsoR10j2scyqA=) 16: 326130663a356663303a633064653a3a2f34382d3438203d3e20323035303336.roa (hash: oYDWY+/e76q2NDdVKvWRf2rk49U/wTm4yGlr9LKja5E=) 17: 326130663a356663303a6465623a3a2f34382d3438203d3e20323035303336.roa (hash: HBIQ7XNX92WAzQJhCdL8BqTB0HFuoxrBe2hDP/YX2cM=) 18: 39312e3230392e34382e302f32342d3234203d3e2034363337.roa (hash: 9aJ1lRoOXNT0IiNEFJIwNi7z4Hr/etdLOUAmwK9LwsY=) 19: E205EBF065FC4929F1802662AE62D7F9762600E6.crl (hash: ng4rZqEAQjwbDpQZVcSgBA4jjWR8RbYQJrVOOzKbp94=) 20: 326130663a356663303a666565643a3a2f34382d3438203d3e20323035303336.roa (hash: xpwIwfTkmJ6MVFD7/8ThvhoBcV+rx30IkMkw3EnowGM=) 21: 326130663a356663303a626162653a3a2f34382d3438203d3e20323035303336.roa (hash: sHKt3Hs5YyZg4ePXicldq6VZoIITxxqpIwyiyKVVN2A=) 22: 326130663a356663303a636166653a3a2f34382d3438203d3e20323035303336.roa (hash: rDG7iBwEjamNngmGb6UbrgWqxFcsssZTJ3Q5Zd5niv8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Nov 2026 11:35:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:51:a0:c1:f2:b3:b8:9f:00:33:99:2e:7e:a0:20:bf:f4:f6:1e:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6 Validity Not Before: Nov 3 10:58:56 2026 GMT Not After : Nov 4 11:35:56 2026 GMT Subject: CN=B8A37EB00760FFCBF37C7D79FAB6F5EB59F6BA4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b6:c0:66:2c:9f:4a:f9:76:52:25:30:49:b8: b1:86:00:97:fa:36:51:b7:59:2e:52:eb:a1:c8:e1: 92:8a:96:71:1b:3a:9b:bb:99:5d:6d:29:0f:16:ba: 1a:1a:02:ba:fd:88:63:6b:8a:a9:fb:f3:ed:cc:5a: a4:f2:03:e0:50:02:5c:6c:27:53:3e:4c:4f:b0:cd: 34:b4:bb:61:55:02:67:4f:55:7b:65:93:d5:3a:60: 30:38:b6:86:2e:72:38:64:74:86:df:16:61:43:c3: 45:19:8a:3b:e7:9a:6a:4a:21:f4:18:e8:61:e8:7a: 93:38:7e:f8:7b:3d:31:63:f7:8b:df:fb:db:d5:21: 6b:45:30:57:ec:94:ff:1b:d7:a6:30:3a:29:da:8b: 23:72:de:01:e3:a6:6a:bb:dd:2a:4d:60:fc:06:ac: b1:3e:f8:5e:ce:91:e8:dc:ef:68:09:df:b7:8b:10: a2:2a:56:9e:a5:e4:51:16:28:bb:26:22:86:48:ca: cc:19:b3:87:f6:97:cf:24:89:26:3e:b5:7f:a2:a0: 9a:fc:d6:a8:c4:49:c2:ed:f3:6e:04:8a:e1:bb:01: a0:f8:11:25:d1:1c:1d:e3:a9:77:7e:20:dd:29:d7: 6d:95:5f:14:56:83:07:77:b1:f4:81:dc:08:bb:56: 63:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A3:7E:B0:07:60:FF:CB:F3:7C:7D:79:FA:B6:F5:EB:59:F6:BA:4A X509v3 Authority Key Identifier: keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:7e:c1:cd:4a:fa:5b:5e:0c:93:be:64:0d:f8:db:49:11:41: 75:de:30:86:33:35:9b:68:f1:db:0c:08:48:d4:e2:92:0b:81: 0a:d1:3f:d1:d1:3f:f7:79:2e:99:4a:89:5f:1a:04:cf:0c:65: 5a:5b:fe:01:10:46:7f:21:25:15:ee:09:b7:09:20:cc:e3:61: 44:54:43:1f:99:56:cc:cc:90:49:7c:f8:d9:fa:91:54:f6:03: 2f:e4:eb:8b:a3:b8:f6:4c:2b:aa:70:47:ef:2d:09:09:a7:51: fd:41:b1:53:42:6f:46:8c:c4:8c:36:05:d5:40:08:30:36:ff: 06:12:d2:93:3d:8c:e6:52:90:92:64:ae:93:65:5b:af:72:f1: d1:e4:80:b7:24:00:2a:ea:ef:1f:fe:35:39:d1:70:14:47:73: e0:a2:1b:80:a4:08:4a:4a:48:2a:da:e9:06:7a:e7:0a:2c:75: 49:2b:34:9c:90:6b:fb:a6:33:dd:0f:c7:64:0d:aa:71:64:50: 14:4e:93:a0:8c:f8:d0:86:39:5c:d4:c9:96:ee:04:5b:97:47: 01:dc:6e:e5:99:49:29:86:81:60:87:60:1f:6d:5c:cd:b8:1f: d7:d4:fa:f9:4b:96:b5:c0:a5:d9:cf:45:d5:e2:eb:46:08:69: e7:20:97:cf -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDlGgwfKzuJ8AM5kufqAgv/T2HjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTIwNWViZjA2NWZjNDkyOWYxODAyNjYyYWU2MmQ3Zjk3 NjI2MDBlNjAeFw0yNjExMDMxMDU4NTZaFw0yNjExMDQxMTM1NTZaMDMxMTAvBgNV BAMTKEI4QTM3RUIwMDc2MEZGQ0JGMzdDN0Q3OUZBQjZGNUVCNTlGNkJBNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPtsBmLJ9K+XZSJTBJuLGGAJf6 NlG3WS5S66HI4ZKKlnEbOpu7mV1tKQ8WuhoaArr9iGNriqn78+3MWqTyA+BQAlxs J1M+TE+wzTS0u2FVAmdPVXtlk9U6YDA4toYucjhkdIbfFmFDw0UZijvnmmpKIfQY 6GHoepM4fvh7PTFj94vf+9vVIWtFMFfslP8b16YwOinaiyNy3gHjpmq73SpNYPwG rLE++F7Okejc72gJ37eLEKIqVp6l5FEWKLsmIoZIyswZs4f2l88kiSY+tX+ioJr8 1qjEScLt824EiuG7AaD4ESXRHB3jqXd+IN0p122VXxRWgwd3sfSB3Ai7VmMpAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUuKN+sAdg/8vzfH15+rb161n2ukowHwYDVR0j BBgwFoAU4gXr8GX8SSnxgCZirmLX+XYmAOYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYwYmUzZTEtODU0ZS00NjYyLTkyZTgtMDI4OTUwZmY1 N2ZlLzAvRTIwNUVCRjA2NUZDNDkyOUYxODAyNjYyQUU2MkQ3Rjk3NjI2MDBFNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRnWHI4R1g4U1NueGdDWmlybUxYLVhZ bUFPWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjBiZTNlMS04 NTRlLTQ2NjItOTJlOC0wMjg5NTBmZjU3ZmUvMC9FMjA1RUJGMDY1RkM0OTI5RjE4 MDI2NjJBRTYyRDdGOTc2MjYwMEU2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACH7BzUr6W14Mk75kDfjb SRFBdd4whjM1m2jx2wwISNTikguBCtE/0dE/93kumUqJXxoEzwxlWlv+ARBGfyEl Fe4JtwkgzONhRFRDH5lWzMyQSXz42fqRVPYDL+Tri6O49kwrqnBH7y0JCadR/UGx U0JvRozEjDYF1UAIMDb/BhLSkz2M5lKQkmSuk2Vbr3Lx0eSAtyQAKurvH/41OdFw FEdz4KIbgKQISkpIKtrpBnrnCix1SSs0nJBr+6Yz3Q/HZA2qcWRQFE6ToIz40IY5 XNTJlu4EW5dHAdxu5ZlJKYaBYIdgH21czbgf19T6+UuWtcCl2c9F1eLrRghp5yCX zw== -----END CERTIFICATE-----Generated at Tue Nov 3 22:40:32 2026 by rpki-client