$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft File: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft (raw, json) Hash identifier: wCRmcXWEo8VfqeEXfGmVao/WEOhVBWNIwwNr1FzXB2Q= Subject key identifier: 31:E3:4E:07:77:1F:D0:5E:FA:31:C7:F8:EF:64:BC:05:BA:4B:8B:C6 Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Certificate serial: 2F08489B0FE3D647DA32CB4471E902E5F306E786 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft Manifest number: 02E7 Signing time: Sun 19 Apr 2026 13:49:55 +0000 Manifest this update: Sun 19 Apr 2026 13:44:55 +0000 Manifest next update: Mon 20 Apr 2026 16:58:55 +0000 Files and hashes: 1: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl (hash: GnX0oOyj/MUDPYhdpK1T6k3YE+FgHS6Uct1Iv0rvr3c=) 2: 3130332e34392e3133312e302f32342d3234203d3e20313338333634.roa (hash: PCBT1S5SsQNvPExnIxpGrOJnC4Zxkw3ilANCZAM8stA=) 3: 3130332e34392e3132382e302f32342d3234203d3e20313534303439.roa (hash: RP7fF4ljaFnG1QBw6wHJTYmQiSzsC+UtOPXQULgrH/c=) 4: 33312e32322e3130342e302f32342d3234203d3e20313938303230.roa (hash: 2c/Q6mL57WPxOvD74dnFYEhVwjt0QpjY04YbOcxeQJ8=) 5: 3130332e34392e3133302e302f32342d3234203d3e203535313737.roa (hash: Iw83hVbw1MST0UjRlAMudxk4iizrVaWamdUAy9o4Wp4=) 6: 33312e32322e3130372e302f32342d3234203d3e20333935343730.roa (hash: pW3DU1f9F88CUcSRQA40az6AE2g6dkESCvpY8IyOEck=) 7: 33312e32322e3131312e302f32342d3234203d3e20323135333535.roa (hash: brok2XUOzC0OAQs7efh1lP/TIOrHW70pJohRfs3tgEM=) 8: 33312e32322e3130362e302f32342d3234203d3e20323133353032.roa (hash: gMhOzO7mxft8aHHqMyhMEvoyI4x3AcVBhgkY3Yc2Ryc=) 9: 34332e3233302e38352e302f32342d3234203d3e20323131343430.roa (hash: 7bNrxcvUZ17BVt7tVCbbxISD5HLTvxOeQrmUPkwlG/E=) 10: 3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa (hash: gI3QMk1nxnVJ3ar9nDADeDjafrF5rxSYgoW75rlLkBk=) 11: 3130332e34392e3133312e302f32342d3234203d3e20323133373131.roa (hash: 0KQImRtVxQSlo2IkiWEm4Ta1ecdBVyx0gErMixeusbs=) 12: 34332e3233302e38342e302f32342d3234203d3e20323134303235.roa (hash: nt04/wEfv1QT+Dsh1YUBXhoD3Q2lFYZqzOpcVbW7ex0=) 13: 3130332e34392e3133312e302f32342d3234203d3e20313534343038.roa (hash: uNydLTQQX3HfUttLHpAQztbzmsLo2FwUjxcM/0z5ejA=) 14: 3130332e34392e3132392e302f32342d3234203d3e20313533373836.roa (hash: 8ciOgQf/5f2kkiTl0Q7pGFYfq76YJlE+KlbE9/JeEuM=) 15: 33312e32322e3130352e302f32342d3234203d3e20323030383539.roa (hash: nw9YLvM7zXyP2kzR5sTyAuZwaZ0QV0qAmB4zg2Dg+gg=) 16: 34332e3233302e38362e302f32332d3234203d3e2033343931.roa (hash: e3yeUvIbF4YF0fCErBT4H99U9jC9XkRZUBr3LRE9AVI=) 17: 34332e3233302e38352e302f32342d3234203d3e20323132363639.roa (hash: vgObUGnSREXD+ZGKD48TBidzsDD4bb41p0YUFbXX2ak=) 18: 33312e32322e3131302e302f32342d3234203d3e20323038393035.roa (hash: GDspqRij6MiNPh7udQ2b5uDlkV2tbpp6r9PQ/alfk6o=) 19: 33312e32322e3130382e302f32342d3234203d3e203432383331.roa (hash: 8yRIzyX7kSL5wlZucsqrW2Cnq9iyHa3XujSoVf8z1CY=) 20: 33312e32322e3130392e302f32342d3234203d3e203432383331.roa (hash: uRUTbbdZ8AYVGvK3CKTe3KYxaaV1m1bGyvfgh/rstUI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 16:58:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:08:48:9b:0f:e3:d6:47:da:32:cb:44:71:e9:02:e5:f3:06:e7:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Validity Not Before: Apr 19 13:44:55 2026 GMT Not After : Apr 20 16:58:55 2026 GMT Subject: CN=31E34E07771FD05EFA31C7F8EF64BC05BA4B8BC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:72:d0:8c:98:6f:b1:c0:fe:08:47:a0:a5:e8: a6:b3:0a:98:21:84:68:7d:37:ca:ff:f4:83:2b:a1: 78:83:bb:68:6f:39:3a:8a:3e:54:5e:f5:6c:48:62: fc:a6:7b:62:e2:2c:f1:75:2f:ff:b8:0d:22:1f:a0: b0:1f:07:f0:6f:f5:d4:e3:fe:0a:e4:1c:31:d9:8d: 1c:f6:09:52:38:75:29:88:ce:43:a7:54:ba:aa:e9: ee:a2:7a:cd:68:95:24:1e:ce:ae:15:23:76:73:a5: fc:5c:dd:14:d9:b4:76:64:db:ed:23:f8:ed:39:5d: 67:b1:91:ce:3d:81:36:e0:65:ae:20:2d:69:72:72: 95:f1:fa:92:77:fe:79:d8:40:70:9b:f5:b6:c7:aa: 21:f6:93:97:d0:ab:e1:16:88:09:d5:a5:48:1b:b9: af:61:38:6d:28:dc:ea:8d:4e:17:2b:13:87:cf:cd: cd:2d:e0:8a:bc:98:11:ac:e9:b9:8c:f5:02:49:ad: a3:98:ae:90:c8:a5:2b:06:10:3a:76:22:34:33:9c: 0e:ff:d9:1d:6c:ba:48:82:9b:b7:83:af:e7:95:f3: fc:d0:a7:ee:82:7b:e5:64:63:4e:ae:b1:2d:8b:fd: 01:0a:f6:55:f9:2a:54:94:9d:da:ea:5c:22:ae:fa: 85:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E3:4E:07:77:1F:D0:5E:FA:31:C7:F8:EF:64:BC:05:BA:4B:8B:C6 X509v3 Authority Key Identifier: keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:94:94:fd:19:f3:c2:c3:a1:94:b5:ec:c7:96:e8:87:40:0a: 23:26:59:6c:e7:be:ed:d1:fc:c5:cd:df:6f:7c:2b:c1:26:d8: 8c:e8:cf:73:94:fb:6c:69:f6:5a:1e:cf:79:a0:a9:23:60:9a: 11:cf:44:ba:6f:ea:45:2f:0c:bb:30:dd:76:8d:07:0a:1b:53: 8f:e2:21:4f:8e:45:62:b7:90:36:1e:da:f2:85:4f:b7:b2:1f: ed:35:0c:a1:75:d6:f4:87:53:00:32:2b:34:30:e2:22:2a:5c: 09:6e:71:fd:65:80:db:a4:ea:dc:61:f3:44:1e:b3:97:59:f3: 9d:83:18:8e:cd:e3:1d:29:f5:8d:0e:98:1c:3c:ae:73:47:c6: dd:f9:61:06:ab:cc:05:c8:7f:dc:cb:3c:ab:7c:8c:f1:96:aa: 50:5b:9d:4b:6a:cf:8b:62:b9:ea:93:b9:bc:8e:8b:47:a9:8e: b4:6b:79:aa:a4:f5:75:0d:31:d7:e2:3d:7e:0a:6f:74:6f:d0: e7:51:f3:24:6b:e0:a2:6d:00:9b:40:b7:b5:e3:9f:5d:38:10: 48:0a:d0:ab:13:fb:7e:3b:a2:fd:9b:63:d8:14:42:2e:6c:8d: 24:0b:97:cc:95:de:de:b9:2a:78:69:23:45:03:49:89:6a:6f: 01:50:e9:90 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULwhImw/j1kfaMstEcekC5fMG54YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw YWVhYjI5ZDAeFw0yNjA0MTkxMzQ0NTVaFw0yNjA0MjAxNjU4NTVaMDMxMTAvBgNV BAMTKDMxRTM0RTA3NzcxRkQwNUVGQTMxQzdGOEVGNjRCQzA1QkE0QjhCQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5ctCMmG+xwP4IR6Cl6KazCpgh hGh9N8r/9IMroXiDu2hvOTqKPlRe9WxIYvyme2LiLPF1L/+4DSIfoLAfB/Bv9dTj /grkHDHZjRz2CVI4dSmIzkOnVLqq6e6ies1olSQezq4VI3Zzpfxc3RTZtHZk2+0j +O05XWexkc49gTbgZa4gLWlycpXx+pJ3/nnYQHCb9bbHqiH2k5fQq+EWiAnVpUgb ua9hOG0o3OqNThcrE4fPzc0t4Iq8mBGs6bmM9QJJraOYrpDIpSsGEDp2IjQznA7/ 2R1sukiCm7eDr+eV8/zQp+6Ce+VkY06usS2L/QEK9lX5KlSUndrqXCKu+oVNAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUMeNOB3cf0F76Mcf472S8BbpLi8YwHwYDVR0j BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2 NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy cXNwMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYWZlYmRiNC02 ZjBiLTQwNGItOThlMi1hMjZiZTk0YTY2MjAvMC9DNzcwRjQzMzU4Qjk3QkEwQUE5 QkRDNjJCQkQ1MTFFOTBBRUFCMjlELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMpSU/RnzwsOhlLXsx5bo h0AKIyZZbOe+7dH8xc3fb3wrwSbYjOjPc5T7bGn2Wh7PeaCpI2CaEc9Eum/qRS8M uzDddo0HChtTj+IhT45FYreQNh7a8oVPt7If7TUMoXXW9IdTADIrNDDiIipcCW5x /WWA26Tq3GHzRB6zl1nznYMYjs3jHSn1jQ6YHDyuc0fG3flhBqvMBch/3Ms8q3yM 8ZaqUFudS2rPi2K56pO5vI6LR6mOtGt5qqT1dQ0x1+I9fgpvdG/Q51HzJGvgom0A m0C3teOfXTgQSArQqxP7fjui/Ztj2BRCLmyNJAuXzJXe3rkqeGkjRQNJiWpvAVDp kA== -----END CERTIFICATE-----Generated at Mon Apr 20 09:45:10 2026 by rpki-client