$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft File: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft (raw, json) Hash identifier: sdf6tZTXNISi+iTUP4qgITSkv4JQ8xi0FPPJrHkFWSo= Subject key identifier: 16:98:38:D0:E2:2B:E3:FD:9B:64:97:7D:03:1E:D7:E0:16:8C:92:FF Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Certificate serial: 35321AA3981D209CF3970ACBF9A69E42F68860EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft Manifest number: 0689 Signing time: Thu 30 Apr 2026 11:41:39 +0000 Manifest this update: Thu 30 Apr 2026 11:36:39 +0000 Manifest next update: Fri 01 May 2026 11:42:39 +0000 Files and hashes: 1: 34362e3235302e3232342e302f32302d3234203d3e20313431393935.roa (hash: ht90MUomGkgWhJETWF0rvugOS8SI8qvW9OndsUlGu80=) 2: 34362e3235302e3234302e302f32302d3234203d3e20313431393935.roa (hash: 5zFYerIngzLwSwbeiiGPHVQadLBE1/J7oEEXeFR/OFM=) 3: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl (hash: EK/JR2Nfe1Gj7XDPtNAA5R5jm6nceJViFmBpJvNk+Q0=) 4: 326130303a386530303a313a3a2f34382d3438203d3e203230373132.roa (hash: 2qiBxfK+UGsXjYXrt6Cm3jSdVu6qoZhGBCRhmjYUhjg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 01 May 2026 11:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:32:1a:a3:98:1d:20:9c:f3:97:0a:cb:f9:a6:9e:42:f6:88:60:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Validity Not Before: Apr 30 11:36:39 2026 GMT Not After : May 1 11:42:39 2026 GMT Subject: CN=169838D0E22BE3FD9B64977D031ED7E0168C92FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5b:98:f8:0a:f7:88:a2:ae:f9:b9:60:48:ef: 14:a3:b3:7d:04:94:53:22:6f:d5:e9:ee:5f:e3:b2: 06:4a:46:71:8c:30:b1:2f:16:35:d2:ab:1f:9f:d7: 3a:34:68:97:5f:03:2d:7a:6a:6b:dd:16:3a:06:d5: ff:8f:bd:a4:94:85:b9:9c:e5:a9:15:b7:1b:4d:11: 49:e2:f8:15:76:7d:4f:8e:f9:24:16:8b:6b:ab:4c: 52:08:bb:1d:22:2e:06:a9:44:5b:0e:5e:dd:15:13: 09:93:8a:35:bc:9d:7b:28:8b:80:76:8c:99:70:a9: 68:8a:0c:b6:b6:5f:2c:7d:2b:cb:c5:13:a4:b8:84: f4:3d:b0:0e:e4:7d:a0:4e:82:36:5b:09:82:be:52: 06:4b:6e:f1:84:df:5c:3b:59:e2:05:ca:0e:68:fe: ff:b6:9b:d4:cf:ec:3c:7e:8a:ea:8d:bf:4c:d7:62: da:e3:97:af:34:a5:49:c1:53:11:8d:40:c1:88:90: e6:7e:03:e3:7e:7a:fe:d0:71:ab:e9:36:7c:4d:e3: 8b:f7:bd:0a:7f:f4:fc:1b:4b:8d:6b:34:5b:49:5d: 2b:65:d6:05:a2:49:e9:3e:a3:e0:66:03:5d:23:55: ab:5a:88:24:3c:6c:5b:62:c8:fd:f9:80:05:22:c2: 01:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:98:38:D0:E2:2B:E3:FD:9B:64:97:7D:03:1E:D7:E0:16:8C:92:FF X509v3 Authority Key Identifier: keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e4:06:73:39:75:6e:06:66:3e:44:d2:57:08:ec:7b:b3:78: 8c:6e:b3:87:f2:cb:92:5a:38:4d:76:b4:64:b6:8b:86:f0:2a: 85:a9:a4:ab:67:ef:61:78:58:8a:90:fe:24:c4:90:b4:2a:5d: 12:2a:c3:28:28:df:21:dc:17:b3:62:18:18:cb:63:7b:aa:a5: af:6f:cd:33:3c:b8:85:92:9c:63:50:58:d8:42:8f:35:4c:e9: bd:be:a6:53:0f:a7:b5:91:dc:30:b1:e8:2d:5a:99:54:89:90: ee:ce:f3:19:c3:5e:98:36:57:d6:63:ce:65:36:f8:15:e5:eb: 4c:23:d6:89:0d:e6:17:5c:cb:a8:84:46:6c:ef:9f:9d:b9:c2: 15:29:63:1a:32:d4:94:61:8c:2d:d1:13:df:cb:b6:a8:77:1c: 1e:c4:39:66:65:1e:9e:ba:c5:e5:2c:61:b0:36:07:2a:65:00: 99:73:cb:21:ca:d2:e0:17:7a:01:00:2f:b9:17:a9:6d:a6:75: bc:07:6a:bd:39:2d:d8:a0:33:a5:3a:e4:79:68:61:f5:4f:8c: 23:ab:aa:4e:6d:3b:88:ad:1a:68:37:27:35:2a:41:eb:64:4c: 7a:f9:af:2b:38:e0:ae:7e:50:66:1b:f1:4f:91:59:1c:c6:c3: af:5c:cd:87 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNTIao5gdIJzzlwrL+aaeQvaIYOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjI5ZmJhYjRkYjg2N2Y2YmQ5YTdlZmY2YWE1NWQ5OGMx NjJlMWFhZDAeFw0yNjA0MzAxMTM2MzlaFw0yNjA1MDExMTQyMzlaMDMxMTAvBgNV BAMTKDE2OTgzOEQwRTIyQkUzRkQ5QjY0OTc3RDAzMUVEN0UwMTY4QzkyRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlW5j4CveIoq75uWBI7xSjs30E lFMib9Xp7l/jsgZKRnGMMLEvFjXSqx+f1zo0aJdfAy16amvdFjoG1f+PvaSUhbmc 5akVtxtNEUni+BV2fU+O+SQWi2urTFIIux0iLgapRFsOXt0VEwmTijW8nXsoi4B2 jJlwqWiKDLa2Xyx9K8vFE6S4hPQ9sA7kfaBOgjZbCYK+UgZLbvGE31w7WeIFyg5o /v+2m9TP7Dx+iuqNv0zXYtrjl680pUnBUxGNQMGIkOZ+A+N+ev7QcavpNnxN44v3 vQp/9PwbS41rNFtJXStl1gWiSek+o+BmA10jVataiCQ8bFtiyP35gAUiwgFbAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUFpg40OIr4/2bZJd9Ax7X4BaMkv8wHwYDVR0j BBgwFoAU8p+6tNuGf2vZp+/2qlXZjBYuGq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmY1MmQ4MTQtM2QyZi00ZGY0LTgxNDAtZGZiNTMwZjc0 OTEyLzAvRjI5RkJBQjREQjg2N0Y2QkQ5QTdFRkY2QUE1NUQ5OEMxNjJFMUFBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhwLTZ0TnVHZjJ2WnAtXzJxbFhaakJZ dUdxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjUyZDgxNC0z ZDJmLTRkZjQtODE0MC1kZmI1MzBmNzQ5MTIvMC9GMjlGQkFCNERCODY3RjZCRDlB N0VGRjZBQTU1RDk4QzE2MkUxQUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGuQGczl1bgZmPkTSVwjs e7N4jG6zh/LLklo4TXa0ZLaLhvAqhamkq2fvYXhYipD+JMSQtCpdEirDKCjfIdwX s2IYGMtje6qlr2/NMzy4hZKcY1BY2EKPNUzpvb6mUw+ntZHcMLHoLVqZVImQ7s7z GcNemDZX1mPOZTb4FeXrTCPWiQ3mF1zLqIRGbO+fnbnCFSljGjLUlGGMLdET38u2 qHccHsQ5ZmUenrrF5SxhsDYHKmUAmXPLIcrS4Bd6AQAvuRepbaZ1vAdqvTkt2KAz pTrkeWhh9U+MI6uqTm07iK0aaDcnNSpB62RMevmvKzjgrn5QZhvxT5FZHMbDr1zN hw== -----END CERTIFICATE-----Generated at Thu Apr 30 16:41:42 2026 by rpki-client