$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft File: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft (raw, json) Hash identifier: 0OEIRq+/ag0AeABAap4Po+D4OpS4liaHbpmUsNsgrxc= Subject key identifier: E4:0C:6F:1C:48:63:2D:83:38:1C:F1:65:C7:F0:28:A5:0F:2C:41:C4 Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Certificate serial: 4962CB8E0AAE1C691CFC31839C34824B9EDDFB30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft Manifest number: 03AD Signing time: Fri 04 Sep 2026 07:43:54 +0000 Manifest this update: Fri 04 Sep 2026 07:38:54 +0000 Manifest next update: Sat 05 Sep 2026 08:27:54 +0000 Files and hashes: 1: 34332e3233302e38342e302f32342d3234203d3e2039333034.roa (hash: WWd3fU9+BMZxF1LS1XMNFNJ+cqLCAI2NyywKcRVObws=) 2: 33312e32322e3130362e302f32342d3234203d3e20323133353032.roa (hash: gMhOzO7mxft8aHHqMyhMEvoyI4x3AcVBhgkY3Yc2Ryc=) 3: 33312e32322e3130372e302f32342d3234203d3e203231383539.roa (hash: H9RX18ry704+3Lwdrl6eHWWzt2tUSs0nSGFnEmOomuw=) 4: 33312e32322e3131312e302f32342d3234203d3e20323135333535.roa (hash: sGZRYXq3pgxXgMpA6qb4Lt81cMmDp969oaWBo8d9e1M=) 5: 33312e32322e3131302e302f32342d3234203d3e20323038393035.roa (hash: GDspqRij6MiNPh7udQ2b5uDlkV2tbpp6r9PQ/alfk6o=) 6: 34332e3233302e38352e302f32342d3234203d3e20323132363639.roa (hash: vgObUGnSREXD+ZGKD48TBidzsDD4bb41p0YUFbXX2ak=) 7: 3130332e34392e3133302e302f32342d3234203d3e20313939363935.roa (hash: RDauoDGr+i1zVcuayu/4HbEUes85SAVA7OzOaH8ZkX8=) 8: 33312e32322e3130352e302f32342d3234203d3e20323030383539.roa (hash: nw9YLvM7zXyP2kzR5sTyAuZwaZ0QV0qAmB4zg2Dg+gg=) 9: 34332e3233302e38362e302f32332d3234203d3e2033343931.roa (hash: e3yeUvIbF4YF0fCErBT4H99U9jC9XkRZUBr3LRE9AVI=) 10: 3130332e34392e3132392e302f32342d3234203d3e20313533373836.roa (hash: 8ciOgQf/5f2kkiTl0Q7pGFYfq76YJlE+KlbE9/JeEuM=) 11: 33312e32322e3130382e302f32342d3234203d3e203432383331.roa (hash: 8yRIzyX7kSL5wlZucsqrW2Cnq9iyHa3XujSoVf8z1CY=) 12: 3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa (hash: H6z5UgqzzwENibeoaL/jOe9aa5t0uv0+rNtrD0/GlKE=) 13: 3130332e34392e3133312e302f32342d3234203d3e20313338333634.roa (hash: PCBT1S5SsQNvPExnIxpGrOJnC4Zxkw3ilANCZAM8stA=) 14: 3130332e34392e3133312e302f32342d3234203d3e20313534343038.roa (hash: uNydLTQQX3HfUttLHpAQztbzmsLo2FwUjxcM/0z5ejA=) 15: 3130332e34392e3133312e302f32342d3234203d3e20323133373131.roa (hash: 0KQImRtVxQSlo2IkiWEm4Ta1ecdBVyx0gErMixeusbs=) 16: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl (hash: U2P5kJKbghYzRNs2d4H0KpI5LybGt4UW98VTKHWEsWA=) 17: 34332e3233302e38352e302f32342d3234203d3e20323131343430.roa (hash: 7bNrxcvUZ17BVt7tVCbbxISD5HLTvxOeQrmUPkwlG/E=) 18: 33312e32322e3130392e302f32342d3234203d3e20313532363938.roa (hash: I8lu7O6fcVuBfnhIGKMGd3xQ3ykAWErkChbE7VXmRhE=) 19: 33312e32322e3130342e302f32342d3234203d3e20313938303230.roa (hash: 2c/Q6mL57WPxOvD74dnFYEhVwjt0QpjY04YbOcxeQJ8=) 20: 3130332e34392e3132382e302f32342d3234203d3e203231383539.roa (hash: Gks1amT+rPKiG3Iiuhmb/CKRKvNQxK+jCx7Bb8Ah+xI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 08:27:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:62:cb:8e:0a:ae:1c:69:1c:fc:31:83:9c:34:82:4b:9e:dd:fb:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Validity Not Before: Sep 4 07:38:54 2026 GMT Not After : Sep 5 08:27:54 2026 GMT Subject: CN=E40C6F1C48632D83381CF165C7F028A50F2C41C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cd:81:ae:e6:43:4d:26:e4:2b:ef:39:9f:5a: 58:0c:04:62:8c:0e:e4:0f:0d:5f:e7:5c:a8:5c:5e: 47:a8:e4:b3:55:f8:d3:e5:35:2f:3e:fa:e4:3e:4a: 12:2b:cd:c6:a2:3f:9a:d7:94:7a:4e:04:39:75:f4: 4e:06:fe:ce:33:99:3f:d1:6c:77:90:15:52:5b:9a: d0:ea:aa:1b:ee:66:11:e3:9f:39:62:43:d6:dc:3f: fc:ba:d2:92:95:6f:96:5a:bf:1e:4e:1e:69:eb:4b: be:84:bb:53:d2:5e:73:16:75:64:d7:00:18:ee:1b: 6d:51:b6:6c:e0:27:ff:c9:64:f0:ec:c8:33:45:27: 9c:40:60:5b:2f:27:8b:06:88:8b:d9:a1:3c:dc:6a: 04:aa:c9:e2:2f:67:da:1a:5f:53:2b:b0:e6:66:17: db:fc:72:89:0f:df:a7:15:56:87:26:9c:21:28:96: 8a:44:f1:d8:20:a9:56:33:1d:a1:b9:ad:70:25:31: ee:ee:a4:3a:b2:dc:fc:22:19:8c:f4:fa:d5:c2:71: d8:04:87:1e:86:ae:bb:84:44:fa:d7:06:69:c6:96: bc:37:a4:e9:f2:28:0a:e0:d2:c6:bb:2a:d1:67:d8: 31:66:5e:19:e5:55:bb:2a:d3:37:85:cb:58:27:f4: 1c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:0C:6F:1C:48:63:2D:83:38:1C:F1:65:C7:F0:28:A5:0F:2C:41:C4 X509v3 Authority Key Identifier: keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:31:7c:54:cd:05:20:dd:7b:bb:f3:29:25:d4:c9:6c:bd:70: 0d:93:d3:48:89:72:ef:25:85:21:80:75:31:9f:8b:db:56:18: b9:64:ba:1f:66:12:01:71:49:ce:75:7d:20:e5:cb:fb:01:b2: 82:40:b3:01:00:8f:8c:ac:d6:1f:fe:4a:c2:a8:4b:8e:fa:8c: e4:e6:26:67:e1:40:1c:a0:99:de:7f:91:a1:87:37:40:3d:47: 04:a0:ab:00:57:d0:22:37:cb:e7:9a:b0:d5:bf:1e:ea:b5:96: 0f:d6:77:f6:0e:af:5e:4d:f3:11:9e:b1:8a:2f:26:f3:17:4c: f6:6a:ec:33:56:03:9f:9b:ac:2e:aa:2f:80:99:60:12:71:70: 1e:27:7a:a3:7e:06:99:a6:64:9f:4c:a8:26:22:5a:99:fe:dd: 05:6b:76:7a:ca:26:0d:4f:a3:9f:6c:08:e2:8d:06:87:6a:42: 13:c2:4b:68:6f:7f:04:28:80:97:23:c4:6b:a1:de:97:75:2b: 71:cd:cf:4a:86:7a:d6:56:22:07:7a:5a:75:90:94:28:7f:d7: c8:b9:21:f7:cd:aa:fc:73:0c:45:6c:25:88:92:1d:29:97:f5: 7d:f9:9a:31:21:99:ac:6e:e5:af:ed:5f:d7:0b:98:7e:b6:19: 92:76:15:6d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUSWLLjgquHGkc/DGDnDSCS57d+zAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw YWVhYjI5ZDAeFw0yNjA5MDQwNzM4NTRaFw0yNjA5MDUwODI3NTRaMDMxMTAvBgNV BAMTKEU0MEM2RjFDNDg2MzJEODMzODFDRjE2NUM3RjAyOEE1MEYyQzQxQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuzYGu5kNNJuQr7zmfWlgMBGKM DuQPDV/nXKhcXkeo5LNV+NPlNS8++uQ+ShIrzcaiP5rXlHpOBDl19E4G/s4zmT/R bHeQFVJbmtDqqhvuZhHjnzliQ9bcP/y60pKVb5Zavx5OHmnrS76Eu1PSXnMWdWTX ABjuG21RtmzgJ//JZPDsyDNFJ5xAYFsvJ4sGiIvZoTzcagSqyeIvZ9oaX1MrsOZm F9v8cokP36cVVocmnCEolopE8dggqVYzHaG5rXAlMe7upDqy3PwiGYz0+tXCcdgE hx6GrruERPrXBmnGlrw3pOnyKArg0sa7KtFn2DFmXhnlVbsq0zeFy1gn9BwxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU5AxvHEhjLYM4HPFlx/AopQ8sQcQwHwYDVR0j BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2 NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy cXNwMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYWZlYmRiNC02 ZjBiLTQwNGItOThlMi1hMjZiZTk0YTY2MjAvMC9DNzcwRjQzMzU4Qjk3QkEwQUE5 QkRDNjJCQkQ1MTFFOTBBRUFCMjlELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjF8VM0FIN17u/MpJdTJ bL1wDZPTSIly7yWFIYB1MZ+L21YYuWS6H2YSAXFJznV9IOXL+wGygkCzAQCPjKzW H/5KwqhLjvqM5OYmZ+FAHKCZ3n+RoYc3QD1HBKCrAFfQIjfL55qw1b8e6rWWD9Z3 9g6vXk3zEZ6xii8m8xdM9mrsM1YDn5usLqovgJlgEnFwHid6o34GmaZkn0yoJiJa mf7dBWt2esomDU+jn2wI4o0Gh2pCE8JLaG9/BCiAlyPEa6Hel3Urcc3PSoZ61lYi B3padZCUKH/XyLkh982q/HMMRWwliJIdKZf1ffmaMSGZrG7lr+1f1wuYfrYZknYV bQ== -----END CERTIFICATE-----Generated at Fri Sep 4 21:04:27 2026 by rpki-client