$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft File: 22BFD4E021547D030AC10B0213535D4C6968EEDE.mft (raw, json) Hash identifier: W7RHabcUxZeDaY8gvitzCqky6jalZ7cPgT6SyVvvqdE= Subject key identifier: 2E:84:87:84:F7:07:C5:9E:E4:D2:42:0B:CE:6B:4B:D8:40:99:EA:80 Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede Certificate serial: 6C9DA84CDB58C24A7258952E5C561F241382B2D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft Manifest number: 01AA Signing time: Fri 25 Sep 2026 08:50:01 +0000 Manifest this update: Fri 25 Sep 2026 08:45:01 +0000 Manifest next update: Sat 26 Sep 2026 10:13:01 +0000 Files and hashes: 1: 3231372e32352e342e302f32342d3234203d3e20313432313436.roa (hash: vZRhvTOHCjCN3qpqUAQpaZnKJPXOT/7YVpVSmsbplMQ=) 2: 3138352e3231302e3136392e302f32342d3234203d3e203537303433.roa (hash: 7z9K9FbgeMuXCaln/1hsSe4DLUK7TEmfgfG1Y1Dfr7g=) 3: 38372e3235342e31352e302f32342d3234203d3e20383334.roa (hash: njhEifPxZZKVIloAWauyfC9OvNCqT8sr5N2tyte4o24=) 4: 3231372e32352e332e302f32342d3234203d3e203230343733.roa (hash: Gtvwy4O2g92Wl34q1NG2a1KSHDIDcCrqvni9SpsOlEs=) 5: 22BFD4E021547D030AC10B0213535D4C6968EEDE.crl (hash: gESn0xUhn7px64+bipY6e6kASuIHqCrEOuijjy5rIxM=) 6: 38372e3235342e32362e302f32342d3234203d3e20323138383239.roa (hash: E6a3DUIrDtWaQWEAr7GxRUGI6lo4FcU/j93xxkkfpm8=) 7: 38372e3235342e32392e302f32342d3234203d3e20333939333539.roa (hash: ai/dN9s+EI66RGZOYc3SnH50a9pPhR+Tuj1MQUDS0jQ=) 8: 38372e3235342e33302e302f32342d3234203d3e2039333034.roa (hash: 7Tnim3fXGqGd5eTDeVNv6sYNxMRFIvUpyP1tJtD3Ws0=) 9: 38372e3235342e392e302f32342d3234203d3e20383334.roa (hash: 9xNWK0CP8AKiSnG1dUeeFmXs6klwdHgCE4UZ1NbhInI=) 10: 38372e3235342e31342e302f32342d3234203d3e20323138383632.roa (hash: F1OX6LNWl+YwC+chgvQSQD6NIxsSYKS/34Wqd3CKlgY=) 11: 38372e3235342e32352e302f32342d3234203d3e20343032323635.roa (hash: PRZtxjYbgqdYHgrXt1B72AkNdzyck5gWx69C5yMLpR8=) 12: 38372e3235342e382e302f32342d3234203d3e203633303233.roa (hash: yvC8qtTXjiLI2wGfbH1IrWAtdVVn7Rg1KD5mabaKrfI=) 13: 38372e3235342e372e302f32342d3234203d3e20343031333632.roa (hash: l/Tir1KU5tQPgEhXt4OgP3+S+oyGyQEzW5JVvi4C4LM=) 14: 3138352e3231302e3136382e302f32342d3234203d3e20313436383133.roa (hash: flQC2PRbohLv8iqDkeysEDTcV28G3GM4WvRcY2IJVyM=) 15: 3231372e32352e31342e302f32342d3234203d3e2039333138.roa (hash: g2ofm16r16kl7irVfvgX1+7ziEvLdY7dJdeeSirOg4Y=) 16: 3231372e32352e322e302f32342d3234203d3e20323138383239.roa (hash: sTD/ELsmS5B/a3PpivXKnGnrDUxMqbqdUHt+yyguBew=) 17: 3138352e3231302e3137302e302f32332d3233203d3e20383334.roa (hash: lXDhBA8H2d1LpAoql0c+vF9OP1+v0zqok15tPd+NtSc=) 18: 3231372e32352e31352e302f32342d3234203d3e20383334.roa (hash: mWRPxVUkqekpfjDM++QyDd8qxoSq2MT3KscZbrzZvoM=) 19: 38372e3235342e33312e302f32342d3234203d3e20323030303137.roa (hash: lbbXKkkoJ4X5dFgdoGsgrLdnfR7I5el1vS65pf+Zkis=) 20: 38372e3235342e302e302f32332d3233203d3e20323037363435.roa (hash: Bt15oUjcprVGI2OHoJeHUu5XnHIcVhhgAZKYjYn6V5A=) 21: 38372e3235342e32302e302f32342d3234203d3e20323138383837.roa (hash: ZhpNPPOoxuBKWgyygAwSStAMQzGmmwb/Gzjd7NA4m2g=) 22: 3231372e32352e31322e302f32342d3234203d3e203533333536.roa (hash: ISZePjQZHgjZYw73RzwsKrdIyiH3v0ys4nWleWv3vxk=) 23: 3231372e32352e392e302f32342d3234203d3e203230393135.roa (hash: rmdhD9oEv5bK0HHyZCb7v/EPNkPHtC4nPe4iuyupLhE=) 24: 38372e3235342e342e302f32342d3234203d3e20313532313739.roa (hash: Y+fm5Z1hQ5CX1kAf8N1IWb6MLSFELQii0Oe4LqXPgVI=) 25: 38372e3235342e33312e302f32342d3234203d3e20323132333834.roa (hash: kuBs6hElF6wxCmWKuqHdTsZI2vk91hngsz1GJVgyb1o=) 26: 38372e3235342e31332e302f32342d3234203d3e20323036303932.roa (hash: oUikqYBVi4RcjOhDQmNNaH8TAOGVNq7wtpKIRIIaXQc=) 27: 326130303a656163303a3a2f33322d3332203d3e203230393135.roa (hash: B/4WVaX1/RQfize8nvUY5uFmIYzrRdgUSdd1VX+7rB4=) 28: 38372e3235342e332e302f32342d3234203d3e20313337343039.roa (hash: oOqDRHnQhKkW0bsS7sECikqkcHxGG+LEWNClGo/2tL4=) 29: 38372e3235342e322e302f32342d3234203d3e20383334.roa (hash: 0lftYrBwhyfbi4cjY9zWfmHR2CJaW7nri13R884O3dA=) 30: 38372e3235342e32312e302f32342d3234203d3e20323138393131.roa (hash: 7tSYuQ71mqHiPabmM7s3mhhfcknamp56jVy7dHHL490=) 31: 3231372e32352e312e302f32342d3234203d3e20343032323635.roa (hash: VANfTBfZigI792G4QZ62stYln+FE6haw31ZdE6HIoqY=) 32: 38372e3235342e31362e302f32342d3234203d3e203631333137.roa (hash: OnoBFru6gXkLx/IpdA8BMf1f3KgH5QjPForAWZMVmzo=) 33: 3231372e32352e31302e302f32342d3234203d3e20343032383537.roa (hash: niaZez5rWCfPwIynJuAiVBnG0HUl9oIbnXZCHjb7z20=) 34: 38372e3235342e362e302f32342d3234203d3e20343031333632.roa (hash: lNHbvVUsjRQWADwz+5BXy+SD2pwhPF26pAipPx7926o=) 35: 3231372e32352e362e302f32332d3234203d3e20383334.roa (hash: kuLwFCmf8Whna0mXwpfLAstA+xJncXgqXwYveSIDWeI=) 36: 38372e3235342e31322e302f32342d3234203d3e20383334.roa (hash: Csmnwo2TPrFnpdtdygd8M5axyO7EMgidxtaGyRO6HZ8=) 37: 38372e3235342e32342e302f32342d3234203d3e20323138363235.roa (hash: sTTe5OsbHCgQiAmQMPOzIV1LQbXo98I0ZmLtX2GsdFs=) 38: 38372e3235342e31382e302f32332d3234203d3e20383334.roa (hash: Q4p501nKB0sgnI21+akfDBIvF6GWoCBkfDAhgfWAEgM=) 39: 3231372e32352e31312e302f32342d3234203d3e203432383331.roa (hash: LBGC7WX7bJkBy0/v1ZbPU/RfYLNVgPcvPJyw+DpE2j8=) 40: 38372e3235342e32372e302f32342d3234203d3e20323036303932.roa (hash: Xuw3TAANRJRfZ6808E5bRrhDo88u4xKeZ2EmRQyfhRE=) 41: 38372e3235342e352e302f32342d3234203d3e20323036303932.roa (hash: 5AbdKFmtNdu0I9ZynCaAwms1EqYUPiTBICwx1LtjAT4=) 42: 38372e3235342e31302e302f32332d3234203d3e20383334.roa (hash: l0t8ICvVIvlIV+AR+CpQg130G3E7cVDVhiMIlHw2OaQ=) 43: 38372e3235342e32322e302f32332d3234203d3e20323735373134.roa (hash: Q017uW83uFb8COwcV2Dq8d6iP2iHdliF99e4gCzHkCU=) 44: 38372e3235342e31372e302f32342d3234203d3e203631333137.roa (hash: iUdPEp/zg1lgw8SWDOnC/cWw7iD/otvfqF3P7vlXliU=) 45: 3231372e32352e31332e302f32342d3234203d3e203133333335.roa (hash: io4UFoc1YGnqjZfuSBnWpQH/OPOtN9A1OFdVrMznZWc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 08:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:9d:a8:4c:db:58:c2:4a:72:58:95:2e:5c:56:1f:24:13:82:b2:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede Validity Not Before: Sep 25 08:45:01 2026 GMT Not After : Sep 26 10:13:01 2026 GMT Subject: CN=2E848784F707C59EE4D2420BCE6B4BD84099EA80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a4:19:22:7f:da:f1:b3:d8:30:0d:ff:4d:ba: c9:fc:73:aa:cd:bb:74:67:18:74:33:b2:84:0f:c0: e5:d6:8b:f2:6d:d2:59:1b:14:1e:9b:69:0c:c1:16: 43:c5:83:a3:9d:79:3a:c2:e9:0f:db:b4:c9:81:bb: 01:c6:31:9b:9f:28:9f:ca:76:21:8b:d5:9b:3a:68: 9d:cc:9d:eb:b2:0e:bf:be:27:74:09:62:7c:a7:ea: ee:00:40:fb:67:ac:bd:86:d0:27:f3:16:49:88:d1: a8:ff:7e:09:80:57:47:91:21:7a:f7:9f:46:72:56: 8d:79:5b:fe:a0:fa:b7:6f:8a:95:d5:db:6d:0e:d0: 45:4e:92:f3:72:ef:51:8b:e1:b6:8f:48:7f:81:88: 6b:26:1e:b8:80:20:2d:1d:c4:5b:16:89:dc:7e:d0: 08:8b:64:5f:33:42:aa:f7:43:4d:a1:4a:12:83:4c: 07:18:69:0c:bc:50:4c:b6:f2:d8:16:a7:05:9c:21: 28:a9:ec:3e:e7:a9:48:15:b4:c3:0e:61:cd:d9:70: 48:98:b6:69:77:8e:81:43:71:5c:38:12:58:a1:5d: 56:36:4d:2a:46:a6:17:98:c3:63:32:88:3f:24:bb: 49:ae:e3:9a:dd:47:51:03:28:ea:aa:5e:9e:e7:20: ec:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:84:87:84:F7:07:C5:9E:E4:D2:42:0B:CE:6B:4B:D8:40:99:EA:80 X509v3 Authority Key Identifier: keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:79:49:95:0d:b1:96:d7:28:bb:47:5e:57:4c:61:d4:03:c1: b3:44:c0:3a:42:97:13:cf:40:9c:97:56:81:61:fa:46:9c:44: d4:fd:f6:4c:1d:67:c0:57:8d:74:e2:11:f3:69:bf:66:b1:26: 49:78:3c:e7:05:10:fe:ca:98:5a:48:86:e4:92:ae:23:ab:1a: 4e:72:09:16:a7:e8:ed:5a:6b:3c:24:0e:e2:8e:ad:e5:f6:7f: 5a:0a:9d:ac:c4:fe:de:b8:88:a6:7e:36:5d:46:10:d5:47:83: 58:ac:29:af:02:95:48:91:63:c0:47:f1:08:10:06:df:f8:d3: 70:39:84:e6:0c:db:92:a4:ac:6b:9c:ba:6a:da:ca:13:cc:de: 7c:2a:c4:e8:28:93:56:17:3b:3f:68:ca:fc:34:ee:da:fd:53: 97:14:30:43:91:27:e4:74:eb:c4:ed:4b:6b:5f:91:56:a3:9b: 50:5b:b7:f1:bf:c7:11:3c:ff:94:92:10:06:0c:b4:f4:d2:c9: ca:2f:18:2f:01:48:72:60:e9:3b:b2:79:44:1a:b2:21:d2:c6: 1c:27:94:78:72:99:3a:3c:5b:f2:de:c7:71:c5:f2:9c:10:a9: e0:ad:58:ff:5b:34:d4:c2:90:b1:0f:0c:83:df:6d:ab:95:c4: 25:6d:fc:d9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUbJ2oTNtYwkpyWJUuXFYfJBOCstQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJiZmQ0ZTAyMTU0N2QwMzBhYzEwYjAyMTM1MzVkNGM2 OTY4ZWVkZTAeFw0yNjA5MjUwODQ1MDFaFw0yNjA5MjYxMDEzMDFaMDMxMTAvBgNV BAMTKDJFODQ4Nzg0RjcwN0M1OUVFNEQyNDIwQkNFNkI0QkQ4NDA5OUVBODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDpBkif9rxs9gwDf9Nusn8c6rN u3RnGHQzsoQPwOXWi/Jt0lkbFB6baQzBFkPFg6OdeTrC6Q/btMmBuwHGMZufKJ/K diGL1Zs6aJ3MneuyDr++J3QJYnyn6u4AQPtnrL2G0CfzFkmI0aj/fgmAV0eRIXr3 n0ZyVo15W/6g+rdvipXV220O0EVOkvNy71GL4baPSH+BiGsmHriAIC0dxFsWidx+ 0AiLZF8zQqr3Q02hShKDTAcYaQy8UEy28tgWpwWcISip7D7nqUgVtMMOYc3ZcEiY tml3joFDcVw4ElihXVY2TSpGpheYw2MyiD8ku0mu45rdR1EDKOqqXp7nIOyJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQULoSHhPcHxZ7k0kILzmtL2ECZ6oAwHwYDVR0j BBgwFoAUIr/U4CFUfQMKwQsCE1NdTGlo7t4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNhYWNkMTctYmY5ZC00N2RiLTg2NGQtZjljN2MyYmUx ODNhLzAvMjJCRkQ0RTAyMTU0N0QwMzBBQzEwQjAyMTM1MzVENEM2OTY4RUVERS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lyX1U0Q0ZVZlFNS3dRc0NFMU5kVEds bzd0NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yM2FhY2QxNy1i ZjlkLTQ3ZGItODY0ZC1mOWM3YzJiZTE4M2EvMC8yMkJGRDRFMDIxNTQ3RDAzMEFD MTBCMDIxMzUzNUQ0QzY5NjhFRURFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY3lJlQ2xltcou0deV0xh 1APBs0TAOkKXE89AnJdWgWH6RpxE1P32TB1nwFeNdOIR82m/ZrEmSXg85wUQ/sqY WkiG5JKuI6saTnIJFqfo7VprPCQO4o6t5fZ/WgqdrMT+3riIpn42XUYQ1UeDWKwp rwKVSJFjwEfxCBAG3/jTcDmE5gzbkqSsa5y6atrKE8zefCrE6CiTVhc7P2jK/DTu 2v1TlxQwQ5En5HTrxO1La1+RVqObUFu38b/HETz/lJIQBgy09NLJyi8YLwFIcmDp O7J5RBqyIdLGHCeUeHKZOjxb8t7HccXynBCp4K1Y/1s01MKQsQ8Mg99tq5XEJW38 2Q== -----END CERTIFICATE-----Generated at Fri Sep 25 17:47:05 2026 by rpki-client