$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft File: E205EBF065FC4929F1802662AE62D7F9762600E6.mft (raw, json) Hash identifier: Q2SyRkJQu5dvnAZmHNHxyRWHyFzMkJpkk5XGsjcMXfw= Subject key identifier: 86:17:C2:D0:48:E4:7E:5D:9A:62:EC:95:C0:73:AA:B5:25:DE:D5:A1 Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6 Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6 Certificate serial: 3FF3732D83800913761D6DAC2715EAD57123EB07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft Manifest number: 0217 Signing time: Sat 21 Mar 2026 09:37:38 +0000 Manifest this update: Sat 21 Mar 2026 09:32:38 +0000 Manifest next update: Sun 22 Mar 2026 11:27:38 +0000 Files and hashes: 1: 326130663a356663303a623030623a3a2f34382d3438203d3e20323035303336.roa (hash: dtubQqytFEqkt8TqTYJ+KlZgpXqOEEfNHG9KMyAKroE=) 2: 326130663a356663303a6665653a3a2f34382d3438203d3e20323035303336.roa (hash: sgKb1dwb+yOP2QySpduAJeLZbiJJdLEfbfVpO0+8Lgg=) 3: 39312e3230392e34382e302f32342d3234203d3e2034363337.roa (hash: 4+D5jdmTDYB1GvCAU0z5GBGlSPW7Q/zpduO0wdWv8pU=) 4: 326130663a356663303a6163653a3a2f34382d3438203d3e20323035303336.roa (hash: s62/iVKVlW2KdVyTR+Xnv457Z0j5+aZNRyV7RtkAKNQ=) 5: 39312e3230392e34302e302f32342d3234203d3e203436383434.roa (hash: lOyC9nhHln4w/6aFWRWEGti2qbnJIh38POtRvVGBI4s=) 6: 326130663a356663303a6465623a3a2f34382d3438203d3e20323035303336.roa (hash: HGgyYO79YRPv5eTIvRCSkvT+uzFYIDLIXRArnhiRVzA=) 7: 326130663a356663303a646561643a3a2f34382d3438203d3e20323035303336.roa (hash: Z7YS72AkRUhmGE/8eVCwX/QArQ7kzj3DMVCvF8nhupE=) 8: 326130663a356663303a633064653a3a2f34382d3438203d3e20323035303336.roa (hash: vwuw8BagjBJB+QjPivE2w5i9soU6pwd3DUm4jYukQKs=) 9: 39312e3230392e35382e302f32342d3234203d3e20323032373035.roa (hash: PK2aFR1vuXxLprCpeWciXwI6HhgJ2xTabit5aAcYEng=) 10: 326130663a356663303a6261643a3a2f34382d3438203d3e20323035303336.roa (hash: tvkflaFeVW3sd8cXnqPd3goXjSItIqLYbambS6E6g9M=) 11: 326130663a356663303a6265643a3a2f34382d3438203d3e20323035303336.roa (hash: Vn0tNJq84yvhpEx3djvegd0qElXvUXIj3d10CpoBDS8=) 12: 326130663a356663303a663030643a3a2f34382d3438203d3e20323035303336.roa (hash: Xgs2aXZ2twwalLnMnwHKHrLdiNgmex+4PLid272RcXc=) 13: E205EBF065FC4929F1802662AE62D7F9762600E6.crl (hash: HR9EDyo9I618fQDMxZ3WvDCP/Xg55vAsRvCmIYE3Co4=) 14: 326130663a356663303a6461643a3a2f34382d3438203d3e20323035303336.roa (hash: FjMn5kgc0Y1vdPNQCAd4cKVxUcNaP4msdjwOhjOI4iE=) 15: 326130663a356663303a626162653a3a2f34382d3438203d3e20323035303336.roa (hash: BEzvo1oTT3h/yITGofAX+DfQt9t+mraGyg3xFdVKM2I=) 16: 326130663a356663303a646565643a3a2f34382d3438203d3e20323035303336.roa (hash: 6WyHSY5Xp60q1IE95V4h6lwOICpnxsevWtnXKH+E1RA=) 17: 326130663a356663303a666565643a3a2f34382d3438203d3e20323035303336.roa (hash: Qj8pflv8KszWoeUIqOpeKQUtZrsbyJDTmnxefpUjjlo=) 18: 326130663a356663303a626162613a3a2f34382d3438203d3e20323035303336.roa (hash: kdDGBWrURu4f0ClnA4SfgsI29M2UtK1sJ9ldbUvOvNc=) 19: 326130663a356663303a6164643a3a2f34382d3438203d3e20323035303336.roa (hash: N543k0DcGiJuxubeGma9GZg+VhMwbPVS9ShNVwfZl30=) 20: 39312e3230392e35302e302f32342d3234203d3e20323039333732.roa (hash: LfqYMzkh476Ki7VQsqODx8QNPNDEFujJRyehaY4kEpM=) 21: 326130663a356663303a646561663a3a2f34382d3438203d3e20323035303336.roa (hash: nBnCDOBWFR9glmAsUSRrLmDkLZa6Zi7bYUkIoT7Lpvs=) 22: 326130663a356663303a636166653a3a2f34382d3438203d3e20323035303336.roa (hash: SIzDkF7YYsoaU9vFR/am7daSl1S+0BBZdMp9c5ogCY8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 22 Mar 2026 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:f3:73:2d:83:80:09:13:76:1d:6d:ac:27:15:ea:d5:71:23:eb:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6 Validity Not Before: Mar 21 09:32:38 2026 GMT Not After : Mar 22 11:27:38 2026 GMT Subject: CN=8617C2D048E47E5D9A62EC95C073AAB525DED5A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9c:88:20:84:0c:59:c9:35:f1:2f:b1:71:57: b4:a4:87:ee:e8:6e:31:11:ba:33:63:4b:1e:b3:a0: 91:fd:ed:59:9d:2a:04:45:13:0a:36:05:90:e1:5a: 7a:9e:80:03:c8:7f:67:97:e3:5b:59:22:7c:e1:18: 31:73:77:cc:76:2b:16:12:1f:27:ac:68:a5:bf:1d: 36:dd:ad:41:c6:b3:a6:41:7c:7a:4a:b1:17:7d:7d: 08:fe:29:6d:30:40:f3:3a:d0:85:2f:a0:86:c0:3e: 75:a0:33:fe:85:83:83:c8:10:45:20:58:cb:eb:d0: 33:8c:f3:9a:b2:97:c6:03:5e:e3:57:c9:d3:6e:50: fb:81:61:ac:32:8d:45:06:68:d3:81:cc:86:a4:9d: 85:be:30:18:5f:c7:f6:e5:f9:24:54:9d:c0:cb:bc: 60:7c:d1:a1:28:0f:2b:59:d9:79:ee:23:a0:07:3d: bf:a4:79:92:b4:0e:33:cd:08:51:7b:75:ef:fb:cc: 80:a1:e9:38:dd:5b:82:a5:1e:42:3e:9d:b2:c7:43: af:8f:c2:a9:1e:35:c5:63:c2:99:7c:bf:03:73:7b: d3:b6:4a:b9:09:0e:9f:cc:7a:79:6d:61:3e:44:58: d5:9c:2d:5a:ef:38:8e:35:1a:23:eb:b8:de:b2:ab: 41:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:17:C2:D0:48:E4:7E:5D:9A:62:EC:95:C0:73:AA:B5:25:DE:D5:A1 X509v3 Authority Key Identifier: keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:c3:82:3c:51:d6:b8:3f:b1:64:91:20:a2:4b:6a:62:b4:59: 27:2f:fd:be:91:d7:62:e2:9f:e3:f3:c2:93:55:49:92:0e:87: a9:00:75:24:a9:2d:f5:b6:8d:ed:c5:23:17:10:f7:a0:f4:4b: 91:ca:d8:01:a6:98:e1:92:33:9b:2b:c9:db:6e:78:c3:e7:a7: 3a:7f:f5:70:47:a7:9f:c5:01:d9:75:cf:0b:35:2f:2f:3a:f3: c2:dc:d5:c0:6f:db:1d:71:1d:0d:78:97:bd:6c:ee:cb:06:3e: 11:60:9d:89:ab:1d:bf:7b:f1:d8:b0:c2:48:82:54:98:82:10: 6e:f8:7f:46:a1:e3:15:0d:81:9c:7c:b4:ff:51:34:ac:41:7b: 33:09:25:1a:da:2c:1c:64:55:b8:e8:e1:4e:b9:2d:f5:eb:8f: a1:ec:f7:75:a8:83:4e:e4:15:37:37:9d:4d:cf:2e:fe:ae:de: 5a:05:25:ef:2c:cf:e6:19:22:ce:e0:d8:99:fe:c7:17:ca:30: 4d:8e:ac:43:71:c0:65:56:46:1e:11:d4:7f:8a:08:43:df:d3: fa:a0:42:bd:bd:4f:c1:fc:93:5b:74:88:bf:76:42:1b:92:fb: 90:d4:d8:85:ac:22:db:98:16:e8:b6:17:33:1c:14:3a:d9:58: 36:48:29:70 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUP/NzLYOACRN2HW2sJxXq1XEj6wcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTIwNWViZjA2NWZjNDkyOWYxODAyNjYyYWU2MmQ3Zjk3 NjI2MDBlNjAeFw0yNjAzMjEwOTMyMzhaFw0yNjAzMjIxMTI3MzhaMDMxMTAvBgNV BAMTKDg2MTdDMkQwNDhFNDdFNUQ5QTYyRUM5NUMwNzNBQUI1MjVERUQ1QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCenIgghAxZyTXxL7FxV7Skh+7o bjERujNjSx6zoJH97VmdKgRFEwo2BZDhWnqegAPIf2eX41tZInzhGDFzd8x2KxYS HyesaKW/HTbdrUHGs6ZBfHpKsRd9fQj+KW0wQPM60IUvoIbAPnWgM/6Fg4PIEEUg WMvr0DOM85qyl8YDXuNXydNuUPuBYawyjUUGaNOBzIaknYW+MBhfx/bl+SRUncDL vGB80aEoDytZ2XnuI6AHPb+keZK0DjPNCFF7de/7zICh6TjdW4KlHkI+nbLHQ6+P wqkeNcVjwpl8vwNze9O2SrkJDp/MenltYT5EWNWcLVrvOI41GiPruN6yq0H1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUhhfC0Ejkfl2aYuyVwHOqtSXe1aEwHwYDVR0j BBgwFoAU4gXr8GX8SSnxgCZirmLX+XYmAOYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYwYmUzZTEtODU0ZS00NjYyLTkyZTgtMDI4OTUwZmY1 N2ZlLzAvRTIwNUVCRjA2NUZDNDkyOUYxODAyNjYyQUU2MkQ3Rjk3NjI2MDBFNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRnWHI4R1g4U1NueGdDWmlybUxYLVhZ bUFPWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjBiZTNlMS04 NTRlLTQ2NjItOTJlOC0wMjg5NTBmZjU3ZmUvMC9FMjA1RUJGMDY1RkM0OTI5RjE4 MDI2NjJBRTYyRDdGOTc2MjYwMEU2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANcOCPFHWuD+xZJEgoktq YrRZJy/9vpHXYuKf4/PCk1VJkg6HqQB1JKkt9baN7cUjFxD3oPRLkcrYAaaY4ZIz myvJ2254w+enOn/1cEenn8UB2XXPCzUvLzrzwtzVwG/bHXEdDXiXvWzuywY+EWCd iasdv3vx2LDCSIJUmIIQbvh/RqHjFQ2BnHy0/1E0rEF7MwklGtosHGRVuOjhTrkt 9euPoez3daiDTuQVNzedTc8u/q7eWgUl7yzP5hkizuDYmf7HF8owTY6sQ3HAZVZG HhHUf4oIQ9/T+qBCvb1PwfyTW3SIv3ZCG5L7kNTYhawi25gW6LYXMxwUOtlYNkgp cA== -----END CERTIFICATE-----Generated at Sat Mar 21 13:19:54 2026 by rpki-client