$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft File: 38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json) Hash identifier: eEt3p4rx7UwawwT0OjAXHmcLxYfksNYHNuIs/6JGcp4= Subject key identifier: 99:B7:25:82:0B:72:51:9E:F6:C9:E9:E7:56:27:F8:13:4D:0D:D5:E9 Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8 Certificate serial: 604922E9C7C2438E3489F7A7632C82D640E573BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft Manifest number: 02D1 Signing time: Tue 12 May 2026 16:29:50 +0000 Manifest this update: Tue 12 May 2026 16:24:50 +0000 Manifest next update: Wed 13 May 2026 18:00:50 +0000 Files and hashes: 1: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: BDHilFVFazV1NVQVasFrYxHm84RYPEPgutds1qndvSo=) 2: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: 0HSjY2WU5xURIBTUHPZua0NwlEObxEcKHJ9kwKCo0ro=) 3: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: bVWg5FT0q2sCo7QMK6bLu4l3oPAGVseUqslWoQKo1ZE=) 4: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: QJBMGqM6yaqk5niJkAuqPHI8VvVSx/j3kqEzba0aJEs=) 5: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: Z+WIv07j1sBVImJqjc9zRKxTh7Kgz0Src+x8TbAlpmA=) 6: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: CvE/2nozaB8au2uvpxJMY+EdD8m6tEw4CMkYGuLnkDo=) 7: 3138352e35382e3135372e302f32342d3234203d3e20323038303633.roa (hash: U8pAF8O/Eli71dyqa/IEGmD/EnmCJf29XWZJsJoO2Kw=) 8: 3138352e35382e3135382e302f32342d3234203d3e203239303636.roa (hash: V5B4QzWLoE4oAz8O3q7zQJ3sjBQn40pU580oRG+qryA=) 9: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: iRELkqpaBbCAlaM6y+J6q4kh+pIWEdfXLorHhotW+GY=) 10: 34362e3138322e31382e302f32332d3234203d3e203433383437.roa (hash: DgeeTdS1cV2ARBxXa3eeMqv+51T6WTIRd1T4HPr/8JQ=) 11: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: DOvKVeAcOxkNybkMS9ylFdnOy9WAJnB82IVDJTGNOcA=) 12: 326130323a323937303a3a2f32392d3438203d3e203433383437.roa (hash: Kp3fSAxGQhZt59WSUhuk3xyV289hXnpQJ6XN2ox7Plw=) 13: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: RRKi1JjdgrwKCFAb2NwHADxT8i70yn0i5n0X0HMmC+E=) 14: 33312e3138352e3130342e302f32342d3234203d3e203433383437.roa (hash: ooBmQ0XsExl9P6cs22gk7QC3kfjfWk/6TOw3sS2GKWM=) 15: 33312e3138352e3130352e302f32342d3234203d3e20323130363939.roa (hash: 5S0IvbVNk6KE/CUqhOCj7rmzwdduYx2Ci6hKBhe3Hsg=) 16: 34362e3138322e31362e302f32332d3234203d3e203433383437.roa (hash: F7W4Y0kopCNp9aANYttCzP7MEuweGRC/BEFBXL6atVg=) 17: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: 26dymixRUGGYjsbH8YaqhXyRXEQ3TQKBfTk9MxYv13g=) 18: 33312e3138352e3130372e302f32342d3234203d3e20323134323038.roa (hash: iqiKl6+YIrHEBq6ZgXjEwpHNvYPhUvsfMc60LM1HGfk=) 19: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: Oi2IQdPDXNgENY6RArFV2X9hiizOz4Z+Sr1U4VYXBoc=) 20: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: e5s2Yb7TVZML9070ZZ1W7yMbNeK9i8gaNwxWx8a/KY8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 18:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:49:22:e9:c7:c2:43:8e:34:89:f7:a7:63:2c:82:d6:40:e5:73:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8 Validity Not Before: May 12 16:24:50 2026 GMT Not After : May 13 18:00:50 2026 GMT Subject: CN=99B725820B72519EF6C9E9E75627F8134D0DD5E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cf:16:cd:ef:86:d7:26:ee:1e:6b:ae:28:4c: de:8a:7c:33:64:87:8d:5f:7d:b0:7e:8a:6d:16:89: fb:94:22:a6:c7:21:1b:6f:bb:b7:aa:0c:64:1e:16: cf:ad:f5:ef:36:01:f5:7c:71:e8:58:ee:d4:e9:96: 0f:5c:55:a6:c6:a1:43:18:87:4f:83:7f:2f:e0:95: fe:86:e5:d2:8a:26:da:d1:64:ad:ed:19:d1:ec:7e: cc:38:5a:65:05:38:89:47:20:b9:1a:75:23:a0:6c: f0:51:67:74:24:2f:a4:bc:33:9d:f6:c9:76:89:eb: 6e:ac:2b:94:2b:09:91:d2:a2:92:16:e7:6c:e7:d2: a8:07:32:16:14:5c:93:39:23:1e:f1:00:db:87:14: c4:08:e9:f1:53:10:8c:89:e6:64:95:ef:7b:aa:30: 5b:5d:c8:af:54:68:99:9f:b6:e4:00:e4:6c:03:0d: ac:89:d2:7e:a8:94:50:87:7b:49:b0:4d:f9:2e:fd: 72:a6:6a:f6:00:a8:c4:1d:4d:d0:9a:62:c4:16:90: a7:57:ae:0d:85:c6:22:9e:54:1a:13:10:68:fb:53: 40:ee:88:12:a0:88:51:0a:46:d7:d8:69:ac:9e:34: 3a:04:4f:9b:e0:ce:bc:bf:4c:94:c5:8a:4e:da:ff: 25:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B7:25:82:0B:72:51:9E:F6:C9:E9:E7:56:27:F8:13:4D:0D:D5:E9 X509v3 Authority Key Identifier: keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:da:2b:30:39:27:f9:eb:4b:82:21:93:38:74:14:83:3e:9a: 04:99:f5:8e:7e:83:88:87:0f:77:21:ce:0a:d1:5f:b1:e7:73: 23:13:3d:56:18:a9:63:1c:d3:6c:52:b4:6d:bc:ca:02:d1:26: 94:d4:04:05:af:93:4c:8b:aa:3c:f0:93:8d:c2:59:72:d0:8e: 80:ce:01:d4:6e:6f:24:2b:4c:bc:81:36:4c:c4:b1:85:6b:68: 2c:6a:f0:b7:98:a7:36:bc:15:5e:fb:57:7b:7e:e4:d2:09:54: 17:1a:0f:17:d1:68:c3:98:33:ed:b9:86:36:a4:e2:54:86:eb: 10:64:f7:ca:87:4e:c8:4e:94:61:04:e0:ea:49:b4:af:25:3a: d1:59:f8:cb:05:3d:8c:c4:22:7b:f3:88:25:5b:94:98:a0:d3: 87:a1:ce:8d:59:87:14:66:11:ce:b8:a4:2b:41:31:e2:6d:f5: a2:d9:ca:d4:fb:00:be:fb:35:b3:7e:9a:eb:34:be:19:bc:01: 11:7d:bb:4e:34:3b:64:7d:c7:fa:ee:66:a9:8f:06:46:9c:c2: d6:5e:1e:f3:40:1e:e4:a0:1f:c9:8f:38:e4:dc:30:a0:ae:1a: 5b:2c:64:45:a8:70:28:37:d5:38:02:1c:05:3d:15:60:1d:43: 08:6d:4c:31 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYEki6cfCQ440ifenYyyC1kDlc7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhhOTNjODFlY2QzMDhlNmE3NjMyNzE3MDQ1YjNkMzUx NTAxMjBmODAeFw0yNjA1MTIxNjI0NTBaFw0yNjA1MTMxODAwNTBaMDMxMTAvBgNV BAMTKDk5QjcyNTgyMEI3MjUxOUVGNkM5RTlFNzU2MjdGODEzNEQwREQ1RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbzxbN74bXJu4ea64oTN6KfDNk h41ffbB+im0WifuUIqbHIRtvu7eqDGQeFs+t9e82AfV8cehY7tTplg9cVabGoUMY h0+Dfy/glf6G5dKKJtrRZK3tGdHsfsw4WmUFOIlHILkadSOgbPBRZ3QkL6S8M532 yXaJ626sK5QrCZHSopIW52zn0qgHMhYUXJM5Ix7xANuHFMQI6fFTEIyJ5mSV73uq MFtdyK9UaJmftuQA5GwDDayJ0n6olFCHe0mwTfku/XKmavYAqMQdTdCaYsQWkKdX rg2FxiKeVBoTEGj7U0DuiBKgiFEKRtfYaayeNDoET5vgzry/TJTFik7a/yWtAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUmbclggtyUZ72yennVif4E00N1ekwHwYDVR0j BBgwFoAUOKk8gezTCOanYycXBFs9NRUBIPgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgyYzY1YjktNzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZm OWI4LzAvMzhBOTNDODFFQ0QzMDhFNkE3NjMyNzE3MDQ1QjNEMzUxNTAxMjBGOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09LazhnZXpUQ09hbll5Y1hCRnM5TlJV QklQZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODJjNjViOS03 MjVkLTRiYjAtYTIxNi04ZTc3MTkxZmY5YjgvMC8zOEE5M0M4MUVDRDMwOEU2QTc2 MzI3MTcwNDVCM0QzNTE1MDEyMEY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv9orMDkn+etLgiGTOHQU gz6aBJn1jn6DiIcPdyHOCtFfsedzIxM9VhipYxzTbFK0bbzKAtEmlNQEBa+TTIuq PPCTjcJZctCOgM4B1G5vJCtMvIE2TMSxhWtoLGrwt5inNrwVXvtXe37k0glUFxoP F9Fow5gz7bmGNqTiVIbrEGT3yodOyE6UYQTg6km0ryU60Vn4ywU9jMQie/OIJVuU mKDTh6HOjVmHFGYRzrikK0Ex4m31otnK1PsAvvs1s36a6zS+GbwBEX27TjQ7ZH3H +u5mqY8GRpzC1l4e80Ae5KAfyY845NwwoK4aWyxkRahwKDfVOAIcBT0VYB1DCG1M MQ== -----END CERTIFICATE-----Generated at Wed May 13 04:15:27 2026 by rpki-client