$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft File: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft (raw, json) Hash identifier: korHwhr6UwPozSaJ7En8WUkCiS21co4XMbqoEExxmoQ= Subject key identifier: 6A:2B:EA:1E:70:78:15:38:67:3E:CF:C2:4B:C4:A1:DA:EC:38:FC:B4 Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Certificate serial: 2CC516DCEEE3202A7C358C2F88CEA72A4EB5764D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft Manifest number: 064A Signing time: Fri 13 Mar 2026 23:23:08 +0000 Manifest this update: Fri 13 Mar 2026 23:18:08 +0000 Manifest next update: Sun 15 Mar 2026 00:21:08 +0000 Files and hashes: 1: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl (hash: VWIbC/HoS6/GoJYUvNpDVVX74CgF8WsbsDiWFh8K0k0=) 2: 34362e3235302e3232342e302f32302d3234203d3e20313431393935.roa (hash: ht90MUomGkgWhJETWF0rvugOS8SI8qvW9OndsUlGu80=) 3: 34362e3235302e3234302e302f32302d3234203d3e20313431393935.roa (hash: 5zFYerIngzLwSwbeiiGPHVQadLBE1/J7oEEXeFR/OFM=) 4: 326130303a386530303a313a3a2f34382d3438203d3e203230373132.roa (hash: 2qiBxfK+UGsXjYXrt6Cm3jSdVu6qoZhGBCRhmjYUhjg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Mar 2026 00:21:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:c5:16:dc:ee:e3:20:2a:7c:35:8c:2f:88:ce:a7:2a:4e:b5:76:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Validity Not Before: Mar 13 23:18:08 2026 GMT Not After : Mar 15 00:21:08 2026 GMT Subject: CN=6A2BEA1E70781538673ECFC24BC4A1DAEC38FCB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3f:cb:1a:d9:3a:f9:af:81:23:82:28:c5:fb: 8c:f5:15:9b:9e:6d:df:ef:65:f7:ac:58:23:25:11: 59:71:d6:34:02:20:b1:79:21:98:2d:63:9b:09:95: e9:16:38:46:e0:a5:83:a5:26:8a:d2:8f:e3:fb:79: 5b:0b:87:31:52:13:22:a8:9a:af:19:59:fb:71:21: 27:43:29:94:b8:36:b0:c5:4f:84:41:03:21:9f:3e: 96:0b:6d:48:8e:32:c5:6e:81:98:70:7a:5f:a6:e7: f6:cd:a5:29:fd:50:0f:00:ab:49:d6:2b:4e:79:26: 0f:3f:e8:62:6c:db:66:6f:61:dd:d3:59:78:74:ec: 4e:dc:a5:9e:73:1a:4f:dc:f6:d0:d0:f5:fd:01:b1: e5:0b:ee:fc:f7:f8:f6:31:91:91:19:f3:45:56:d1: c7:db:7f:d0:be:29:c9:23:9e:48:a8:ed:a5:f2:4c: fe:09:f9:2f:b9:48:26:4c:58:af:98:51:4d:52:8a: 48:2f:28:e3:b8:4d:c5:f6:24:53:96:5f:b6:33:79: ea:0d:c1:d7:61:82:05:27:35:e2:23:0a:8f:ee:1d: 89:45:fc:99:13:d4:e1:65:49:7c:79:08:ad:b5:dc: 28:33:f0:a1:5a:c4:d7:6d:3a:84:69:95:94:04:1f: f6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:2B:EA:1E:70:78:15:38:67:3E:CF:C2:4B:C4:A1:DA:EC:38:FC:B4 X509v3 Authority Key Identifier: keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:10:0c:24:aa:5f:1a:32:bc:7e:ad:db:a4:66:18:c4:a7:f5: 57:00:9f:3a:d7:28:3a:cf:4a:4b:7c:f1:30:18:71:fb:e5:2c: 13:8e:4c:a2:82:73:eb:2b:ea:ea:37:56:e0:95:49:84:7d:ee: fc:b4:70:23:9a:dd:ad:30:01:31:e7:05:b6:ea:bf:73:65:e6: 4d:c7:d0:f3:cb:34:3c:81:89:cd:bb:92:7d:ae:81:18:b4:53: 28:f6:7e:b5:3c:15:ff:4d:02:5f:bb:86:4e:b3:94:57:10:e1: 09:ad:a8:3c:b2:6f:a3:8b:f4:27:33:a0:0a:85:b5:8d:09:93: 01:fd:c2:3a:0b:28:50:21:a7:a4:8a:d9:d2:dd:af:97:7e:52: 18:6e:f1:95:18:26:27:e9:f5:29:90:87:8e:34:5b:d7:ec:c3: 82:6d:c7:1c:29:1a:5a:dd:bd:0c:f5:1b:57:09:c3:74:ef:e9: db:76:d9:27:24:0f:32:7d:c4:5f:c2:16:84:50:e7:32:ce:42: 8b:db:5f:fe:9f:ca:f3:12:9b:dc:4d:6e:7a:a2:55:05:b6:af: 24:16:b9:89:1a:33:fd:0a:49:e3:c6:3d:ca:f4:b1:3c:e7:08: 05:9d:a9:2f:fd:84:46:a4:b3:77:28:0e:3e:1c:23:6c:ee:a8: 6e:d9:9e:0f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULMUW3O7jICp8NYwviM6nKk61dk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjI5ZmJhYjRkYjg2N2Y2YmQ5YTdlZmY2YWE1NWQ5OGMx NjJlMWFhZDAeFw0yNjAzMTMyMzE4MDhaFw0yNjAzMTUwMDIxMDhaMDMxMTAvBgNV BAMTKDZBMkJFQTFFNzA3ODE1Mzg2NzNFQ0ZDMjRCQzRBMURBRUMzOEZDQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5P8sa2Tr5r4EjgijF+4z1FZue bd/vZfesWCMlEVlx1jQCILF5IZgtY5sJlekWOEbgpYOlJorSj+P7eVsLhzFSEyKo mq8ZWftxISdDKZS4NrDFT4RBAyGfPpYLbUiOMsVugZhwel+m5/bNpSn9UA8Aq0nW K055Jg8/6GJs22ZvYd3TWXh07E7cpZ5zGk/c9tDQ9f0BseUL7vz3+PYxkZEZ80VW 0cfbf9C+Kckjnkio7aXyTP4J+S+5SCZMWK+YUU1SikgvKOO4TcX2JFOWX7YzeeoN wddhggUnNeIjCo/uHYlF/JkT1OFlSXx5CK213Cgz8KFaxNdtOoRplZQEH/ajAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUaivqHnB4FThnPs/CS8Sh2uw4/LQwHwYDVR0j BBgwFoAU8p+6tNuGf2vZp+/2qlXZjBYuGq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmY1MmQ4MTQtM2QyZi00ZGY0LTgxNDAtZGZiNTMwZjc0 OTEyLzAvRjI5RkJBQjREQjg2N0Y2QkQ5QTdFRkY2QUE1NUQ5OEMxNjJFMUFBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhwLTZ0TnVHZjJ2WnAtXzJxbFhaakJZ dUdxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjUyZDgxNC0z ZDJmLTRkZjQtODE0MC1kZmI1MzBmNzQ5MTIvMC9GMjlGQkFCNERCODY3RjZCRDlB N0VGRjZBQTU1RDk4QzE2MkUxQUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhAMJKpfGjK8fq3bpGYY xKf1VwCfOtcoOs9KS3zxMBhx++UsE45MooJz6yvq6jdW4JVJhH3u/LRwI5rdrTAB MecFtuq/c2XmTcfQ88s0PIGJzbuSfa6BGLRTKPZ+tTwV/00CX7uGTrOUVxDhCa2o PLJvo4v0JzOgCoW1jQmTAf3COgsoUCGnpIrZ0t2vl35SGG7xlRgmJ+n1KZCHjjRb 1+zDgm3HHCkaWt29DPUbVwnDdO/p23bZJyQPMn3EX8IWhFDnMs5Ci9tf/p/K8xKb 3E1ueqJVBbavJBa5iRoz/QpJ48Y9yvSxPOcIBZ2pL/2ERqSzdygOPhwjbO6obtme Dw== -----END CERTIFICATE-----Generated at Sat Mar 14 10:45:35 2026 by rpki-client