$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft File: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json) Hash identifier: CFVJQeOs2pMGb8ckPrYhbslmPG3QZTYrjbhNvlROsbA= Subject key identifier: 57:5F:87:E2:A0:03:6B:D8:AF:67:95:B1:FE:90:A9:BA:60:81:7A:90 Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Certificate serial: 7326E266AA6890F08C50BC39D5057CE1E4928008 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft Manifest number: 04EB Signing time: Tue 12 May 2026 23:38:03 +0000 Manifest this update: Tue 12 May 2026 23:33:03 +0000 Manifest next update: Thu 14 May 2026 00:49:03 +0000 Files and hashes: 1: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: rD1drMlhgCHEm0vlVi8DONqmz75yH/sypTpIzdkNP6c=) 2: 326131343a316563303a3a2f33312d3438203d3e203438373030.roa (hash: 5zFC0aBKrn16Glyaue2oFptFutD2x5iVGxip/IIewrc=) 3: 326131343a316563313a3a2f33322d3332203d3e20323037323532.roa (hash: wCpGpHKdqFN1DO1NvTXNItL3x3NUD8VGRqAFwBrJITc=) 4: 69727B946D879F5A52FB58F24B4D4D12D59B2CC2.cer (hash: xAYLg9xwMzhfn7yeX4sZhbINK9SiMXP3e/i/klKaS9Y=) 5: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: d2U/pUhzWZZLFSTRV3tpfpvv2q/D3vjrM18F/NpwGwM=) 6: 326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa (hash: 8VhdvV/ADl1dQyHcZOJm0iqoZEaI9FAWV7wRLCn1Kkc=) 7: 326131343a316563303a3a2f33312d3438203d3e203134363138.roa (hash: 0MGh72HtcBIx2dyROH4vCwTGrkjWjpybf+czr46U9xA=) 8: 326131343a316563313a376233303a3a2f34342d3438203d3e20323134393036.roa (hash: YRMori7doYSmuYrHuDGxvFWUqZxa6EqhEvjhhQlS2vI=) 9: 326131343a316563373a633430303a3a2f34302d3438203d3e203438373030.roa (hash: M7y4yNzKisPGrMDI6N/h2uK0LmUwgVtJCXB3eT1YcCs=) 10: 326131343a316563303a3a2f33312d3438203d3e203136353039.roa (hash: EOUQ1JZ1oz2xZOU8+mEukp9ybbKV7scsmw0lQsJAxX4=) 11: 326131343a316563313a376232303a3a2f34342d3438203d3e20323135303933.roa (hash: dVnYLOP17LHBFloAhm1YIONwpYCVs6bwv8Qels/37Kg=) 12: 326131343a316563373a633031303a3a2f34342d3434203d3e2030.roa (hash: SsdW0YpcJfef7CtWvRhhfCUEgjAhSHqFG1h0ACBR214=) 13: 326131343a316563313a376231303a3a2f34342d3438203d3e20323135363636.roa (hash: pZyYX9vqAixKUDIqsxujnSVA6UfFKeJc5iZ4yNtLX48=) 14: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: NDSS2hHdj8htIMoCQNzuGfJRE+FjfS7resxOlAoGNDM=) 15: 326131343a316563303a3a2f33322d3332203d3e20323034343634.roa (hash: +9BU61jgxicm6M71dmLWHkhrmqblm/ztVsZuC3f3iXg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 11:18:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:26:e2:66:aa:68:90:f0:8c:50:bc:39:d5:05:7c:e1:e4:92:80:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Validity Not Before: May 12 23:33:03 2026 GMT Not After : May 14 00:49:03 2026 GMT Subject: CN=575F87E2A0036BD8AF6795B1FE90A9BA60817A90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:61:a6:2c:70:67:d8:74:e6:dc:65:c3:f2:08: bf:e4:04:35:3f:6c:57:87:f7:b1:84:1f:1c:90:0a: 6a:f7:cd:b6:13:4c:00:a2:68:d1:08:c5:f6:4e:ee: 86:f8:75:67:6b:32:5e:54:90:4e:d1:e1:1b:c3:7d: 81:55:49:53:f7:45:7b:fb:07:7d:77:36:c6:aa:f9: 4c:45:eb:5f:fb:f3:dc:a9:c1:88:57:ef:a4:76:3c: 9f:82:6e:bb:79:d3:73:1e:18:26:ad:19:c8:9c:be: f4:ce:33:ab:47:aa:4b:88:8e:c7:f2:e5:34:b7:98: 1c:ba:80:84:9c:13:5c:f8:19:7b:3b:9b:36:45:ef: 14:6d:fc:20:19:e2:5d:a5:8d:cb:43:aa:d5:69:0b: 8b:4c:fe:f8:8f:e7:c5:de:b7:59:99:71:9e:35:21: 10:ed:ab:8e:97:2e:ec:38:5a:ba:ec:ac:92:b2:2f: 10:cf:f9:a5:a5:0b:8f:26:55:85:3d:b7:a4:e6:87: 0e:2d:06:cb:a4:fc:e5:49:a7:57:57:0a:4b:6b:88: d0:bc:e4:42:8c:f9:6b:ad:2a:0a:b3:14:23:30:98: 54:1c:67:a9:dd:47:69:35:07:e9:1c:74:5d:eb:f5: aa:10:b8:9b:ef:63:3d:ef:e6:04:ef:2c:56:4d:31: 46:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5F:87:E2:A0:03:6B:D8:AF:67:95:B1:FE:90:A9:BA:60:81:7A:90 X509v3 Authority Key Identifier: keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:78:63:25:37:bd:1d:ee:35:fb:01:18:e1:af:19:8c:9e:5c: c5:f2:0e:f8:a9:75:e4:bf:4e:30:98:6b:d2:0a:d1:1f:21:eb: 56:58:03:3c:7a:35:1a:45:7e:f8:1b:4c:bc:c5:62:04:7d:67: c9:25:aa:e2:93:9b:95:a6:0d:d4:ec:d9:0b:2e:86:45:ed:72: 84:50:45:6c:87:08:2c:b4:72:a5:2e:10:c9:cd:9e:b0:c6:e9: c0:95:dc:16:0f:65:61:fc:4f:df:a1:25:36:5b:af:40:d2:dd: 57:a2:29:f2:0a:7e:5b:41:7a:aa:94:65:e4:b9:46:ff:06:7f: fb:48:35:17:53:5b:2d:93:43:22:1d:c9:15:a3:d3:96:96:fb: 2d:b5:37:96:d0:e5:24:6a:7b:38:5c:ff:20:96:f0:87:3c:91: 39:3a:2d:bb:39:cc:cc:90:d3:7b:9e:48:3a:8b:8a:80:8d:91: c4:79:91:21:cb:b6:3d:3f:b8:9b:f4:5e:9c:f5:55:ad:93:84: 5a:8f:0d:40:bb:11:6a:00:58:5b:dc:82:18:08:62:99:95:17: 2c:59:e4:4a:80:8b:6b:ab:a1:55:51:61:5e:26:fa:8b:e4:32: 9e:d1:db:04:03:9b:22:60:f1:22:eb:93:d0:00:c1:45:31:68: 3a:3b:73:7e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUcybiZqpokPCMULw51QV84eSSgAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG NEFCREVDNjAeFw0yNjA1MTIyMzMzMDNaFw0yNjA1MTQwMDQ5MDNaMDMxMTAvBgNV BAMTKDU3NUY4N0UyQTAwMzZCRDhBRjY3OTVCMUZFOTBBOUJBNjA4MTdBOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgYaYscGfYdObcZcPyCL/kBDU/ bFeH97GEHxyQCmr3zbYTTACiaNEIxfZO7ob4dWdrMl5UkE7R4RvDfYFVSVP3RXv7 B313Nsaq+UxF61/789ypwYhX76R2PJ+Cbrt503MeGCatGcicvvTOM6tHqkuIjsfy 5TS3mBy6gIScE1z4GXs7mzZF7xRt/CAZ4l2ljctDqtVpC4tM/viP58Xet1mZcZ41 IRDtq46XLuw4WrrsrJKyLxDP+aWlC48mVYU9t6Tmhw4tBsuk/OVJp1dXCktriNC8 5EKM+WutKgqzFCMwmFQcZ6ndR2k1B+kcdF3r9aoQuJvvYz3v5gTvLFZNMUZ1AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUV1+H4qADa9ivZ5Wx/pCpumCBepAwHwYDVR0j BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD QkIzOTg3NkY0QUJERUM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJhZjczYTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS8wLzIwRjY5QzRD MTQ2MTM4Q0IwMTIxQzRDNENCQjM5ODc2RjRBQkRFQzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAUeGMl N70d7jX7ARjhrxmMnlzF8g74qXXkv04wmGvSCtEfIetWWAM8ejUaRX74G0y8xWIE fWfJJarik5uVpg3U7NkLLoZF7XKEUEVshwgstHKlLhDJzZ6wxunAldwWD2Vh/E/f oSU2W69A0t1XoinyCn5bQXqqlGXkuUb/Bn/7SDUXU1stk0MiHckVo9OWlvsttTeW 0OUkans4XP8glvCHPJE5Oi27OczMkNN7nkg6i4qAjZHEeZEhy7Y9P7ib9F6c9VWt k4Rajw1AuxFqAFhb3IIYCGKZlRcsWeRKgItrq6FVUWFeJvqL5DKe0dsEA5siYPEi 65PQAMFFMWg6O3N+ -----END CERTIFICATE-----Generated at Wed May 13 04:01:44 2026 by rpki-client