$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft File: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft (raw, json) Hash identifier: CcusvQLFtpMLygFKvbNSat6gH/FAYxd6S5HPZpJHfLw= Subject key identifier: CE:CC:E4:D4:AB:63:40:58:22:66:E1:3F:DF:29:46:B1:1D:CC:22:51 Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Certificate serial: 52820CA296AA429F4E6D1505CBD50CA2E23BBE73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft Manifest number: 032A Signing time: Wed 03 Jun 2026 22:09:17 +0000 Manifest this update: Wed 03 Jun 2026 22:04:17 +0000 Manifest next update: Fri 05 Jun 2026 00:20:17 +0000 Files and hashes: 1: 3130332e34392e3132382e302f32342d3234203d3e20313534303439.roa (hash: RP7fF4ljaFnG1QBw6wHJTYmQiSzsC+UtOPXQULgrH/c=) 2: 33312e32322e3130382e302f32342d3234203d3e203432383331.roa (hash: 8yRIzyX7kSL5wlZucsqrW2Cnq9iyHa3XujSoVf8z1CY=) 3: 3130332e34392e3132392e302f32342d3234203d3e20313533373836.roa (hash: 8ciOgQf/5f2kkiTl0Q7pGFYfq76YJlE+KlbE9/JeEuM=) 4: 3130332e34392e3133312e302f32342d3234203d3e20323133373131.roa (hash: 0KQImRtVxQSlo2IkiWEm4Ta1ecdBVyx0gErMixeusbs=) 5: 33312e32322e3130392e302f32342d3234203d3e203432383331.roa (hash: uRUTbbdZ8AYVGvK3CKTe3KYxaaV1m1bGyvfgh/rstUI=) 6: 34332e3233302e38362e302f32332d3234203d3e2033343931.roa (hash: e3yeUvIbF4YF0fCErBT4H99U9jC9XkRZUBr3LRE9AVI=) 7: 34332e3233302e38352e302f32342d3234203d3e20323131343430.roa (hash: 7bNrxcvUZ17BVt7tVCbbxISD5HLTvxOeQrmUPkwlG/E=) 8: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl (hash: wfETm1CXvYnWwFTO9jdNyYMJchyZpZKpF5PMZpADq9k=) 9: 3130332e34392e3133302e302f32342d3234203d3e20383334.roa (hash: CtfZNk2OmNMTOjyPsIN0I2X6FYZK/4s1k/jK21vwNP4=) 10: 3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa (hash: gI3QMk1nxnVJ3ar9nDADeDjafrF5rxSYgoW75rlLkBk=) 11: 3130332e34392e3133312e302f32342d3234203d3e20313534343038.roa (hash: uNydLTQQX3HfUttLHpAQztbzmsLo2FwUjxcM/0z5ejA=) 12: 34332e3233302e38342e302f32342d3234203d3e20383334.roa (hash: OQONGY7ev9MHL6KcmLNI4VRbuiwt+0FWiBeBJLdgRto=) 13: 33312e32322e3130342e302f32342d3234203d3e20313938303230.roa (hash: 2c/Q6mL57WPxOvD74dnFYEhVwjt0QpjY04YbOcxeQJ8=) 14: 33312e32322e3130362e302f32342d3234203d3e20323133353032.roa (hash: gMhOzO7mxft8aHHqMyhMEvoyI4x3AcVBhgkY3Yc2Ryc=) 15: 3130332e34392e3133312e302f32342d3234203d3e20313338333634.roa (hash: PCBT1S5SsQNvPExnIxpGrOJnC4Zxkw3ilANCZAM8stA=) 16: 33312e32322e3130352e302f32342d3234203d3e20323030383539.roa (hash: nw9YLvM7zXyP2kzR5sTyAuZwaZ0QV0qAmB4zg2Dg+gg=) 17: 33312e32322e3131302e302f32342d3234203d3e20323038393035.roa (hash: GDspqRij6MiNPh7udQ2b5uDlkV2tbpp6r9PQ/alfk6o=) 18: 34332e3233302e38352e302f32342d3234203d3e20323132363639.roa (hash: vgObUGnSREXD+ZGKD48TBidzsDD4bb41p0YUFbXX2ak=) 19: 33312e32322e3131312e302f32342d3234203d3e20323135333535.roa (hash: brok2XUOzC0OAQs7efh1lP/TIOrHW70pJohRfs3tgEM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Jun 2026 00:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:82:0c:a2:96:aa:42:9f:4e:6d:15:05:cb:d5:0c:a2:e2:3b:be:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Validity Not Before: Jun 3 22:04:17 2026 GMT Not After : Jun 5 00:20:17 2026 GMT Subject: CN=CECCE4D4AB6340582266E13FDF2946B11DCC2251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:07:0e:ae:99:c7:42:16:29:35:d3:95:12:84: c0:d5:13:e6:5c:3f:55:33:1c:9e:ae:6d:92:cd:77: e6:2c:69:6c:1b:09:e1:59:5d:1b:ca:ce:9e:91:f1: 8f:99:e2:3e:90:1e:70:2c:3a:a9:2b:1e:3c:58:cd: 1a:19:c1:fc:1b:aa:a6:93:6d:18:ca:88:51:b4:c0: 82:9a:55:7d:48:c3:49:6c:2a:bc:3a:0a:15:16:9d: cd:75:ce:07:4c:ad:f4:0a:df:11:d7:56:4b:07:87: e5:93:4b:74:e5:04:d2:3c:d3:7c:37:a8:c9:77:7d: 2c:34:1c:fc:5c:1e:0f:60:6f:0f:da:72:79:d1:68: 49:ef:93:c5:ec:c9:3d:71:58:bc:4c:10:b8:83:eb: de:4b:a2:85:bd:80:88:1d:99:93:ce:dd:c7:65:b9: 4c:4e:da:42:b8:d7:ae:4b:22:7c:65:6f:bc:8a:89: 4f:a3:72:9b:dd:69:d9:21:42:04:64:bd:cb:83:cb: e6:0e:2b:6f:87:f7:36:e9:26:04:82:7b:a1:a7:31: 2a:ec:e3:06:c5:52:72:90:c4:8d:6d:5c:7b:25:cd: 35:63:6a:05:10:b2:58:cc:cf:9e:32:e0:35:dd:97: 10:55:ff:3f:e9:21:4b:ad:ea:37:c6:43:57:1e:4b: 38:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:CC:E4:D4:AB:63:40:58:22:66:E1:3F:DF:29:46:B1:1D:CC:22:51 X509v3 Authority Key Identifier: keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:f2:c6:77:0f:1d:3b:52:f0:ec:3f:a7:98:e9:10:59:69:b7: 47:ba:42:7d:ed:e9:1d:eb:94:ed:ec:7a:c4:c8:4f:55:b0:a1: d8:0b:3b:79:ec:c3:3a:41:04:a2:e7:76:65:73:27:71:d2:e9: 62:b0:4b:de:4e:f0:a9:c9:2e:05:d6:4f:5d:e9:fc:fd:d0:03: 21:2c:06:03:e8:76:e1:2f:66:8d:cd:63:ea:85:df:a1:6e:4b: 5f:67:fd:c3:af:d2:10:8b:f1:87:32:21:9f:ea:f0:24:b5:6c: e0:d3:30:e1:2b:93:ef:89:35:1d:1c:45:e3:b4:d1:36:1b:2e: 8b:35:53:44:1d:10:9d:e2:2e:6a:1c:b3:f4:b6:7b:86:ff:3f: 9e:a0:6d:2b:39:4d:1e:db:fa:02:bc:89:71:83:de:f5:f2:db: 88:19:78:cf:f2:24:4d:40:a6:fd:23:f6:29:b6:d5:cc:7f:78: a2:9f:65:05:8b:ee:7d:47:d9:01:4d:13:76:b0:22:0d:57:d8: 82:db:63:4f:2f:07:d5:a6:ef:c3:6f:df:47:78:92:c9:29:fb: 80:25:90:b8:1d:ed:ea:83:ad:fa:71:06:f7:06:f0:28:36:ba: 21:33:1f:6b:78:b9:eb:56:f5:8c:e5:70:54:75:84:0c:aa:09: 24:02:86:ef -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUoIMopaqQp9ObRUFy9UMouI7vnMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw YWVhYjI5ZDAeFw0yNjA2MDMyMjA0MTdaFw0yNjA2MDUwMDIwMTdaMDMxMTAvBgNV BAMTKENFQ0NFNEQ0QUI2MzQwNTgyMjY2RTEzRkRGMjk0NkIxMURDQzIyNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiBw6umcdCFik105UShMDVE+Zc P1UzHJ6ubZLNd+YsaWwbCeFZXRvKzp6R8Y+Z4j6QHnAsOqkrHjxYzRoZwfwbqqaT bRjKiFG0wIKaVX1Iw0lsKrw6ChUWnc11zgdMrfQK3xHXVksHh+WTS3TlBNI803w3 qMl3fSw0HPxcHg9gbw/acnnRaEnvk8XsyT1xWLxMELiD695LooW9gIgdmZPO3cdl uUxO2kK4165LInxlb7yKiU+jcpvdadkhQgRkvcuDy+YOK2+H9zbpJgSCe6GnMSrs 4wbFUnKQxI1tXHslzTVjagUQsljMz54y4DXdlxBV/z/pIUut6jfGQ1ceSzhrAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUzszk1KtjQFgiZuE/3ylGsR3MIlEwHwYDVR0j BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2 NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy cXNwMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYWZlYmRiNC02 ZjBiLTQwNGItOThlMi1hMjZiZTk0YTY2MjAvMC9DNzcwRjQzMzU4Qjk3QkEwQUE5 QkRDNjJCQkQ1MTFFOTBBRUFCMjlELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARfLGdw8dO1Lw7D+nmOkQ WWm3R7pCfe3pHeuU7ex6xMhPVbCh2As7eezDOkEEoud2ZXMncdLpYrBL3k7wqcku BdZPXen8/dADISwGA+h24S9mjc1j6oXfoW5LX2f9w6/SEIvxhzIhn+rwJLVs4NMw 4SuT74k1HRxF47TRNhsuizVTRB0QneIuahyz9LZ7hv8/nqBtKzlNHtv6AryJcYPe 9fLbiBl4z/IkTUCm/SP2KbbVzH94op9lBYvufUfZAU0TdrAiDVfYgttjTy8H1abv w2/fR3iSySn7gCWQuB3t6oOt+nEG9wbwKDa6ITMfa3i561b1jOVwVHWEDKoJJAKG 7w== -----END CERTIFICATE-----Generated at Thu Jun 4 13:06:44 2026 by rpki-client