$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft File: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft (raw, json) Hash identifier: mtoDhrQEAw8Kkkb3fl/zkusabBSIMxP6L1IfDoTStK0= Subject key identifier: AD:70:C8:B4:70:26:A9:FF:DA:5A:D8:45:3F:62:48:17:DA:09:0C:5A Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Certificate serial: 1A3550D7D7106954BB46DB0C77A7EA1FBD9FBC1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft Manifest number: 03F1 Signing time: Tue 20 Oct 2026 11:36:42 +0000 Manifest this update: Tue 20 Oct 2026 11:31:42 +0000 Manifest next update: Wed 21 Oct 2026 15:00:42 +0000 Files and hashes: 1: 3130332e34392e3133312e302f32342d3234203d3e20313534343038.roa (hash: uNydLTQQX3HfUttLHpAQztbzmsLo2FwUjxcM/0z5ejA=) 2: 33312e32322e3131302e302f32342d3234203d3e20323038393035.roa (hash: GDspqRij6MiNPh7udQ2b5uDlkV2tbpp6r9PQ/alfk6o=) 3: 33312e32322e3130382e302f32342d3234203d3e203432383331.roa (hash: Qks8J0X938H6HVLJgBIAZbcnO+aF1xL4OBNn/fR/W5Q=) 4: 3130332e34392e3132382e302f32342d3234203d3e203231383539.roa (hash: Gks1amT+rPKiG3Iiuhmb/CKRKvNQxK+jCx7Bb8Ah+xI=) 5: 3130332e34392e3133302e302f32342d3234203d3e20313939363935.roa (hash: RDauoDGr+i1zVcuayu/4HbEUes85SAVA7OzOaH8ZkX8=) 6: 33312e32322e3130352e302f32342d3234203d3e20323030383539.roa (hash: nw9YLvM7zXyP2kzR5sTyAuZwaZ0QV0qAmB4zg2Dg+gg=) 7: 34332e3233302e38362e302f32332d3234203d3e2033343931.roa (hash: e3yeUvIbF4YF0fCErBT4H99U9jC9XkRZUBr3LRE9AVI=) 8: 33312e32322e3131312e302f32342d3234203d3e20323135333535.roa (hash: sGZRYXq3pgxXgMpA6qb4Lt81cMmDp969oaWBo8d9e1M=) 9: 3130332e34392e3133312e302f32342d3234203d3e20323133373131.roa (hash: YaV2coN10mtSdMCwpunQHhnXdXWjWsC3QeS46Z+3lrE=) 10: 33312e32322e3130342e302f32342d3234203d3e20313938303230.roa (hash: 2c/Q6mL57WPxOvD74dnFYEhVwjt0QpjY04YbOcxeQJ8=) 11: 3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa (hash: H6z5UgqzzwENibeoaL/jOe9aa5t0uv0+rNtrD0/GlKE=) 12: 3130332e34392e3133312e302f32342d3234203d3e20313338333634.roa (hash: PCBT1S5SsQNvPExnIxpGrOJnC4Zxkw3ilANCZAM8stA=) 13: 3130332e34392e3132392e302f32342d3234203d3e20313533373836.roa (hash: dqbGTjTU/B8vA6teyanpuEPrxP3e6KA82oBtbQg0IYM=) 14: 34332e3233302e38352e302f32342d3234203d3e20323132363639.roa (hash: K6pPcrxT1qaaXfoQ1qJYcODSnYPMdIwjQ2K1qzc/KoU=) 15: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl (hash: BbD/ZYeVwhpQ+nnyYzqoWP2jR3Y3lLe38b+PhhzQOxw=) 16: 34332e3233302e38352e302f32342d3234203d3e20323131343430.roa (hash: 7bNrxcvUZ17BVt7tVCbbxISD5HLTvxOeQrmUPkwlG/E=) 17: 34332e3233302e38342e302f32342d3234203d3e20313938353636.roa (hash: np6fRGdvntmo0WUS6PHKf2pD76Rp5Br0W2IrCVC8yd0=) 18: 33312e32322e3130362e302f32342d3234203d3e20323133353032.roa (hash: gMhOzO7mxft8aHHqMyhMEvoyI4x3AcVBhgkY3Yc2Ryc=) 19: 33312e32322e3130372e302f32342d3234203d3e2039333034.roa (hash: 8hKTOek6Qthhyjni25okZb8/VhofK89RBgImZyqawwQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Oct 2026 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:35:50:d7:d7:10:69:54:bb:46:db:0c:77:a7:ea:1f:bd:9f:bc:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Validity Not Before: Oct 20 11:31:42 2026 GMT Not After : Oct 21 15:00:42 2026 GMT Subject: CN=AD70C8B47026A9FFDA5AD8453F624817DA090C5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:43:82:fc:31:ba:05:a2:a7:4c:40:13:dc:1b: 41:51:d8:30:41:20:5d:4e:4c:38:68:81:f0:d7:81: 72:30:68:79:24:d2:1d:15:0c:df:aa:f1:e4:1f:83: 9a:a1:ac:8e:eb:47:82:3b:07:f2:cf:5f:39:d5:fe: 39:aa:3b:c0:11:ab:e2:1a:83:66:64:7f:4f:da:54: 87:00:e9:44:06:2b:eb:2f:32:68:3a:5b:cd:1e:2c: 88:37:fd:99:c2:e7:0f:a0:19:8d:8a:3b:8a:4b:64: e1:2b:4d:b9:1a:cb:ea:4b:10:de:ee:97:43:fa:ae: f0:85:3b:7a:49:0b:37:4e:6f:d3:f4:f3:ac:21:54: 3d:b8:f7:f0:42:f1:82:d9:5a:30:08:47:7d:2d:da: 73:ed:c8:9e:a6:fe:d4:fd:e4:29:d9:20:c3:49:8f: 52:71:c7:e7:26:bd:c8:35:14:f0:35:71:3c:1a:f6: 9e:08:d9:fd:92:4d:47:11:71:58:fe:3d:2a:7b:67: a8:5d:c8:06:8e:83:eb:c6:22:c6:11:f6:f1:3c:73: 2f:97:43:9c:77:a7:60:a0:c6:0f:6f:6c:cd:7e:c5: 94:7d:a9:f3:5c:10:15:eb:f0:05:63:4a:5e:c9:53: 72:36:14:b2:f5:c9:8a:a4:fd:38:f0:cc:0c:92:a9: 31:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:70:C8:B4:70:26:A9:FF:DA:5A:D8:45:3F:62:48:17:DA:09:0C:5A X509v3 Authority Key Identifier: keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:79:aa:b2:b9:4c:a4:13:e2:9b:6f:1c:c5:0a:bf:48:a6:78: 1e:f9:52:39:97:c9:06:92:ff:76:24:96:00:92:53:11:b6:3f: 9b:6d:3d:a2:e7:82:d4:58:2d:f2:e2:56:22:7b:36:66:e1:5e: f3:51:9a:24:ab:07:da:48:a6:fb:52:03:8a:3c:c2:b5:28:ef: 58:64:c5:32:82:de:e4:36:4c:3c:56:4b:3b:3c:7d:26:bd:cf: 6d:35:a8:4e:78:0b:1d:d2:87:d5:8e:6e:fb:2f:64:47:b3:28: 81:90:04:1e:3c:ca:71:5e:93:e9:a0:67:a7:f7:ef:69:74:00: ce:68:20:3c:e0:db:80:2b:0e:10:12:63:83:60:79:8b:0e:b0: 6e:5f:ec:4f:68:18:16:84:0c:a4:4e:d9:de:b2:53:9d:55:8a: e1:29:ed:99:cf:9f:d6:d2:2e:99:f6:94:d7:ca:4e:6c:65:a3: 10:7f:e7:49:37:cd:86:4c:77:d8:f6:7f:6e:fe:df:76:90:76: 83:05:6c:a7:23:05:b1:2f:81:85:c3:88:3a:cc:3d:ad:6e:86: 60:5b:e6:bf:bf:f9:ad:4d:dc:24:94:56:93:1c:64:6e:98:01: 6b:bd:69:72:e7:b2:d6:2a:52:b0:36:98:48:fd:46:05:29:e5: 83:2f:cb:67 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUGjVQ19cQaVS7RtsMd6fqH72fvBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw YWVhYjI5ZDAeFw0yNjEwMjAxMTMxNDJaFw0yNjEwMjExNTAwNDJaMDMxMTAvBgNV BAMTKEFENzBDOEI0NzAyNkE5RkZEQTVBRDg0NTNGNjI0ODE3REEwOTBDNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVQ4L8MboFoqdMQBPcG0FR2DBB IF1OTDhogfDXgXIwaHkk0h0VDN+q8eQfg5qhrI7rR4I7B/LPXznV/jmqO8ARq+Ia g2Zkf0/aVIcA6UQGK+svMmg6W80eLIg3/ZnC5w+gGY2KO4pLZOErTbkay+pLEN7u l0P6rvCFO3pJCzdOb9P086whVD249/BC8YLZWjAIR30t2nPtyJ6m/tT95CnZIMNJ j1Jxx+cmvcg1FPA1cTwa9p4I2f2STUcRcVj+PSp7Z6hdyAaOg+vGIsYR9vE8cy+X Q5x3p2Cgxg9vbM1+xZR9qfNcEBXr8AVjSl7JU3I2FLL1yYqk/TjwzAySqTFzAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUrXDItHAmqf/aWthFP2JIF9oJDFowHwYDVR0j BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2 NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy cXNwMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYWZlYmRiNC02 ZjBiLTQwNGItOThlMi1hMjZiZTk0YTY2MjAvMC9DNzcwRjQzMzU4Qjk3QkEwQUE5 QkRDNjJCQkQ1MTFFOTBBRUFCMjlELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXmqsrlMpBPim28cxQq/ SKZ4HvlSOZfJBpL/diSWAJJTEbY/m209oueC1Fgt8uJWIns2ZuFe81GaJKsH2kim +1IDijzCtSjvWGTFMoLe5DZMPFZLOzx9Jr3PbTWoTngLHdKH1Y5u+y9kR7MogZAE HjzKcV6T6aBnp/fvaXQAzmggPODbgCsOEBJjg2B5iw6wbl/sT2gYFoQMpE7Z3rJT nVWK4Sntmc+f1tIumfaU18pObGWjEH/nSTfNhkx32PZ/bv7fdpB2gwVspyMFsS+B hcOIOsw9rW6GYFvmv7/5rU3cJJRWkxxkbpgBa71pcuey1ipSsDaYSP1GBSnlgy/L Zw== -----END CERTIFICATE-----Generated at Tue Oct 20 22:47:02 2026 by rpki-client