$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft File: 22BFD4E021547D030AC10B0213535D4C6968EEDE.mft (raw, json) Hash identifier: CN+qbQucw3cZhPY6jdbHfoCw+qzmZ5BAGOstNCr/7Ik= Subject key identifier: C9:2D:DD:D2:75:7E:A2:70:43:D6:C6:7C:07:B3:F5:6D:52:BF:DC:CD Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede Certificate serial: 657BED3CED2A9CE6720FC379CF62B361D5024227 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft Manifest number: 3C Signing time: Wed 25 Mar 2026 16:27:49 +0000 Manifest this update: Wed 25 Mar 2026 16:22:49 +0000 Manifest next update: Thu 26 Mar 2026 19:57:49 +0000 Files and hashes: 1: 3231372e32352e332e302f32342d3234203d3e203230343733.roa (hash: Gtvwy4O2g92Wl34q1NG2a1KSHDIDcCrqvni9SpsOlEs=) 2: 38372e3235342e302e302f32332d3233203d3e20323037363435.roa (hash: Bt15oUjcprVGI2OHoJeHUu5XnHIcVhhgAZKYjYn6V5A=) 3: 3231372e32352e392e302f32342d3234203d3e203230393135.roa (hash: rmdhD9oEv5bK0HHyZCb7v/EPNkPHtC4nPe4iuyupLhE=) 4: 22BFD4E021547D030AC10B0213535D4C6968EEDE.crl (hash: KrJVkvmh2ALQhmGEnrSqHGluTnmgrgo8sa9o0s/lLd0=) 5: 38372e3235342e32362e302f32342d3234203d3e20343031373736.roa (hash: BMzIjggccQKi1DAUr681/0Z4HW5dSuTz1uXhMPATlfU=) 6: 38372e3235342e322e302f32342d3234203d3e20383334.roa (hash: 0lftYrBwhyfbi4cjY9zWfmHR2CJaW7nri13R884O3dA=) 7: 3138352e3231302e3136382e302f32342d3234203d3e20343031373736.roa (hash: FthwBNZ7NlQCxWBqkzgJ8UOaCP0gTFfvlhrIRd0qSWo=) 8: 38372e3235342e382e302f32342d3234203d3e203633303233.roa (hash: yvC8qtTXjiLI2wGfbH1IrWAtdVVn7Rg1KD5mabaKrfI=) 9: 38372e3235342e31322e302f32332d3234203d3e20383334.roa (hash: UWjmZenZgQ6GpdGZbayi4FQY4UxY0dqXvzhbQdAIi5g=) 10: 38372e3235342e372e302f32342d3234203d3e20383334.roa (hash: uPveiCZb05Qe74m9ER/dRXkOE+jPcZGdhN1kbDCURUs=) 11: 38372e3235342e32392e302f32342d3234203d3e20383334.roa (hash: EY22VbjNlGcefMgcbkvZMeBmlRw1T/U4a2awyQKCH7c=) 12: 38372e3235342e31342e302f32332d3234203d3e2039333034.roa (hash: zOjJfKXFDDK8FWQuGoyGMyabfyxwg6zgnL0YaVQFH20=) 13: 3231372e32352e312e302f32342d3234203d3e203631333137.roa (hash: AuTG5hLsCwUWbPjqPfLL3+sUc3GYo/fF3PPYDhERDx0=) 14: 3138352e3231302e3136392e302f32342d3234203d3e20333936333536.roa (hash: Bi5+EQy7UJgrNe3LUpRa23W0K4fnlH6JBDjke5iQM0k=) 15: 3231372e32352e342e302f32342d3234203d3e20313432313436.roa (hash: vZRhvTOHCjCN3qpqUAQpaZnKJPXOT/7YVpVSmsbplMQ=) 16: 3231372e32352e31342e302f32342d3234203d3e2039333138.roa (hash: g2ofm16r16kl7irVfvgX1+7ziEvLdY7dJdeeSirOg4Y=) 17: 326130303a656163303a3a2f33322d3332203d3e203230393135.roa (hash: B/4WVaX1/RQfize8nvUY5uFmIYzrRdgUSdd1VX+7rB4=) 18: 38372e3235342e362e302f32342d3234203d3e203230343733.roa (hash: U9mhVXn/Y2qy5SVslhyWTBFWO3Hfm0be6+7a6kbSGwo=) 19: 38372e3235342e32372e302f32342d3234203d3e20383334.roa (hash: LwYf60BYgUg4jAkqEoQ2qZf65E6EJzilg8E4pulhHWA=) 20: 38372e3235342e32332e302f32342d3234203d3e20323135363732.roa (hash: /+BmUmf76rxab9lMUlp4SDJKTX/siHkrnlzW84acgzo=) 21: 3138352e3231302e3137302e302f32332d3233203d3e20383334.roa (hash: lXDhBA8H2d1LpAoql0c+vF9OP1+v0zqok15tPd+NtSc=) 22: 38372e3235342e31382e302f32332d3234203d3e20383334.roa (hash: Q4p501nKB0sgnI21+akfDBIvF6GWoCBkfDAhgfWAEgM=) 23: 38372e3235342e33312e302f32342d3234203d3e20323132333834.roa (hash: kuBs6hElF6wxCmWKuqHdTsZI2vk91hngsz1GJVgyb1o=) 24: 38372e3235342e392e302f32342d3234203d3e20313534303439.roa (hash: Hq9PYTOQCseLfaxNiEXnFMG4fnzCVo7PsWTjAFrRtkw=) 25: 38372e3235342e342e302f32332d3234203d3e20383334.roa (hash: X9JcAlWz2cWHFDBQRn2/GiBUt95iJv417zAItTtavhU=) 26: 38372e3235342e31372e302f32342d3234203d3e203631333137.roa (hash: iUdPEp/zg1lgw8SWDOnC/cWw7iD/otvfqF3P7vlXliU=) 27: 3231372e32352e31322e302f32342d3234203d3e203533333536.roa (hash: ISZePjQZHgjZYw73RzwsKrdIyiH3v0ys4nWleWv3vxk=) 28: 38372e3235342e332e302f32342d3234203d3e20313337343039.roa (hash: oOqDRHnQhKkW0bsS7sECikqkcHxGG+LEWNClGo/2tL4=) 29: 38372e3235342e31362e302f32342d3234203d3e203631333137.roa (hash: OnoBFru6gXkLx/IpdA8BMf1f3KgH5QjPForAWZMVmzo=) 30: 38372e3235342e31302e302f32332d3234203d3e2039333034.roa (hash: ggxRDSIk4x8P9rbdr1wiNW32yw9uoE+S2USYJnBn0oI=) 31: 3231372e32352e312e302f32342d3234203d3e203239383032.roa (hash: gVMFsL1+w+J00kOn7BuEjBsUXi6YaE8/Mve6X6O6dFo=) 32: 3231372e32352e31352e302f32342d3234203d3e20383334.roa (hash: etjfV0kGb76d5lSxFiq8JUUbGdWAGGaQAAqGc0Sfyfo=) 33: 38372e3235342e32352e302f32342d3234203d3e20313734.roa (hash: STs/Odq8qO0vXfvacpj/VHN/A8uqTrPbGQfYucpP36w=) 34: 38372e3235342e32342e302f32342d3234203d3e20343032303437.roa (hash: I6nMkOW16PyXMxFt9RQFe/GpDqFqzj3Mh9XigQN7utc=) 35: 38372e3235342e32322e302f32342d3234203d3e20383334.roa (hash: rBcnHeM9UN/n2/ZoIT3IiOmRRqgoBqMFBe8vdR0Fp3M=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 19:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:7b:ed:3c:ed:2a:9c:e6:72:0f:c3:79:cf:62:b3:61:d5:02:42:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede Validity Not Before: Mar 25 16:22:49 2026 GMT Not After : Mar 26 19:57:49 2026 GMT Subject: CN=C92DDDD2757EA27043D6C67C07B3F56D52BFDCCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5a:ad:d3:a5:b6:ec:ee:4a:e7:2f:3a:11:69: f0:72:62:25:33:c6:2f:ec:11:89:98:49:a5:62:b1: 30:c6:9e:f9:a2:f4:7e:52:da:89:e1:df:ba:78:92: cc:87:cd:d8:c3:ee:f5:05:7f:8d:25:db:cd:7d:cb: cb:e4:17:56:1c:de:91:63:23:22:b3:6b:a4:4d:aa: c9:a1:58:d1:b1:31:a9:38:c2:00:ba:cc:0f:cc:41: 80:9f:1d:99:3b:fc:c2:28:b1:20:f7:d7:cd:62:86: 07:ed:a9:c8:c5:15:49:bb:71:02:05:e6:99:7b:ea: cc:f6:7f:a3:dc:55:bb:9b:bf:b9:0e:ce:dd:8d:41: 01:cd:7d:56:bd:5d:49:b5:23:43:b5:c6:5f:c8:e9: 4d:5a:d2:00:65:8e:2b:9f:84:f5:af:f3:54:83:89: 9a:7c:9c:67:b7:23:12:4f:4e:d8:bf:1d:30:7a:60: ed:7c:1f:ff:3a:e9:af:08:0d:ab:83:cc:9d:95:a1: 1d:2c:27:fb:9b:bb:49:81:29:42:5b:c8:bb:90:4a: f5:90:56:b7:2c:39:4b:cb:6a:45:29:9b:0a:4c:ef: c8:3b:33:81:97:40:e3:9a:de:90:5f:40:dd:b4:85: 96:67:b7:b8:ce:6c:6f:e8:40:1d:de:1f:cd:89:43: 2d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2D:DD:D2:75:7E:A2:70:43:D6:C6:7C:07:B3:F5:6D:52:BF:DC:CD X509v3 Authority Key Identifier: keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:f6:ac:bc:8c:c7:b3:52:27:2b:b3:d1:80:c3:b4:bf:6c:0f: 86:0c:3b:75:9a:06:7e:1c:e8:6a:cf:e5:f7:d0:e6:72:ae:4c: 7a:94:27:54:7b:34:6c:6a:ed:48:23:5e:f5:a3:e5:f2:0c:cf: 49:59:14:25:f2:a1:3c:5a:2e:2f:88:2c:e4:1a:3e:fe:0f:f7: ff:74:98:34:d7:ba:be:b8:e9:df:6c:6f:e7:51:2e:45:3b:87: e6:1a:d6:6c:d6:a3:04:29:96:d3:5d:a0:11:69:1d:e8:91:50: ad:9c:06:77:ab:f8:a0:02:d1:e2:e5:50:cd:62:cb:24:15:cb: 65:94:a8:40:cf:d9:27:af:37:0f:86:d0:c5:e4:c2:8d:dd:24: 3d:45:a9:f1:5e:27:18:e4:a3:d7:0b:ff:ce:19:88:52:e0:04: 9c:9d:17:e5:20:d7:0d:e4:47:85:82:b8:e0:53:0a:31:e6:3b: ae:96:a1:b7:5a:be:5e:c8:bc:33:1d:8e:11:40:29:7c:f6:79: 4c:c7:01:cf:64:a4:78:d5:e3:07:ef:f7:c1:11:94:d5:a3:26: f7:b8:4d:c3:91:b8:64:c2:42:88:19:d0:7b:3a:1d:1b:f1:4f: 42:e3:9b:26:93:76:96:fc:fb:2e:6c:aa:5f:e7:6b:b4:66:89: 4c:99:d3:81 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZXvtPO0qnOZyD8N5z2KzYdUCQicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJiZmQ0ZTAyMTU0N2QwMzBhYzEwYjAyMTM1MzVkNGM2 OTY4ZWVkZTAeFw0yNjAzMjUxNjIyNDlaFw0yNjAzMjYxOTU3NDlaMDMxMTAvBgNV BAMTKEM5MkREREQyNzU3RUEyNzA0M0Q2QzY3QzA3QjNGNTZENTJCRkRDQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtWq3Tpbbs7krnLzoRafByYiUz xi/sEYmYSaVisTDGnvmi9H5S2onh37p4ksyHzdjD7vUFf40l2819y8vkF1Yc3pFj IyKza6RNqsmhWNGxMak4wgC6zA/MQYCfHZk7/MIosSD3181ihgftqcjFFUm7cQIF 5pl76sz2f6PcVbubv7kOzt2NQQHNfVa9XUm1I0O1xl/I6U1a0gBljiufhPWv81SD iZp8nGe3IxJPTti/HTB6YO18H/866a8IDauDzJ2VoR0sJ/ubu0mBKUJbyLuQSvWQ VrcsOUvLakUpmwpM78g7M4GXQOOa3pBfQN20hZZnt7jObG/oQB3eH82JQy1BAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUyS3d0nV+onBD1sZ8B7P1bVK/3M0wHwYDVR0j BBgwFoAUIr/U4CFUfQMKwQsCE1NdTGlo7t4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNhYWNkMTctYmY5ZC00N2RiLTg2NGQtZjljN2MyYmUx ODNhLzAvMjJCRkQ0RTAyMTU0N0QwMzBBQzEwQjAyMTM1MzVENEM2OTY4RUVERS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lyX1U0Q0ZVZlFNS3dRc0NFMU5kVEds bzd0NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yM2FhY2QxNy1i ZjlkLTQ3ZGItODY0ZC1mOWM3YzJiZTE4M2EvMC8yMkJGRDRFMDIxNTQ3RDAzMEFD MTBCMDIxMzUzNUQ0QzY5NjhFRURFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkfasvIzHs1InK7PRgMO0 v2wPhgw7dZoGfhzoas/l99Dmcq5MepQnVHs0bGrtSCNe9aPl8gzPSVkUJfKhPFou L4gs5Bo+/g/3/3SYNNe6vrjp32xv51EuRTuH5hrWbNajBCmW012gEWkd6JFQrZwG d6v4oALR4uVQzWLLJBXLZZSoQM/ZJ683D4bQxeTCjd0kPUWp8V4nGOSj1wv/zhmI UuAEnJ0X5SDXDeRHhYK44FMKMeY7rpaht1q+Xsi8Mx2OEUApfPZ5TMcBz2SkeNXj B+/3wRGU1aMm97hNw5G4ZMJCiBnQezodG/FPQuObJpN2lvz7LmyqX+drtGaJTJnT gQ== -----END CERTIFICATE-----Generated at Thu Mar 26 09:12:22 2026 by rpki-client