$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft File: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft (raw, json) Hash identifier: qhKznIdeEM/Kn7zPaeFb21G1FiVOhqD2FzFGKt7Sw4w= Subject key identifier: B6:AF:BB:88:66:C9:34:0D:A2:03:02:39:C5:7E:0A:EA:C2:B4:90:5A Authority key identifier: 20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 Certificate issuer: /CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Certificate serial: 3D96293289D6E04669F07C08834696E9359904C2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft Manifest number: 0161 Signing time: Tue 12 May 2026 22:31:35 +0000 Manifest this update: Tue 12 May 2026 22:26:35 +0000 Manifest next update: Wed 13 May 2026 23:16:35 +0000 Files and hashes: 1: 326131343a373538303a666666353a3a2f34382d3438203d3e20323037353239.roa (hash: 8GEpSwKR5aAKrW7JpZcQNrVUIUKVu8YVCYytf208qTw=) 2: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl (hash: VMeIMK/u0ZslYK0fPJStXCv2RDKhQUyDAmdTEJNqb4E=) 3: 326131343a373538313a333030303a3a2f34302d3438203d3e20323037353239.roa (hash: 49tQr1GLN9QvPACiaQcXfaSDsuhRZJax3rEAyqF9fvs=) 4: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer (hash: Cg46VfMFxkibHVY72VspTJE2BjBtIpE0lG8+Ny9YFKc=) 5: 326131343a373538313a333062363a3a2f34382d3438203d3e20323037323939.roa (hash: QF7sj3Q22cpFIfftMWFUaaWBXSTUWiNGhFKa4Gm8DjQ=) 6: 326131343a373538313a333062353a3a2f34382d3438203d3e20323131373239.roa (hash: tFUXq6i30FxB1SNNhCRKk78oQl/FXFjJBGghOw722to=) 7: 326131343a373538313a333062363a3a2f34382d3438203d3e203331383938.roa (hash: EiykYxl+6FaTNBSgNTe5hk8ztAyCkiKmYpqs3J6XV7E=) 8: 326131343a373538313a333039303a3a2f34342d3434203d3e20323034323131.roa (hash: an2CTnY48XCjuCGH81CGgjVXZdlCvh7kWv6euA7rsaw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:96:29:32:89:d6:e0:46:69:f0:7c:08:83:46:96:e9:35:99:04:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Validity Not Before: May 12 22:26:35 2026 GMT Not After : May 13 23:16:35 2026 GMT Subject: CN=B6AFBB8866C9340DA2030239C57E0AEAC2B4905A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a3:df:aa:02:26:06:53:6b:8c:da:92:31:53: 5f:ae:1b:5a:21:6d:7c:90:c5:ec:a7:f4:f4:5c:fd: d7:8d:71:ac:7c:1a:9d:f3:16:bf:c8:29:92:62:db: 9a:7c:d9:75:93:ec:bf:ce:bd:dd:24:db:41:3d:bb: 59:60:55:fd:3d:92:2e:fe:46:f7:d6:3d:cd:ce:f6: a2:4f:e1:bd:e5:14:6f:c8:13:39:16:3b:fa:83:e3: 09:8d:b3:ae:48:fa:7f:c8:f0:2a:fb:7d:3d:2d:b8: a6:21:99:2f:9b:62:da:c4:a5:34:0d:c6:15:1c:57: e0:38:b8:58:f2:1b:ec:5c:3e:5e:7e:ee:19:bf:58: 42:e9:06:99:ba:46:24:ec:60:47:60:88:df:28:f1: 2c:e6:33:23:2f:9d:40:70:46:8d:35:b9:66:c2:fe: e9:5f:09:39:2c:e3:a0:8d:2e:34:5f:8f:99:4d:db: e4:f6:c2:52:19:20:02:72:41:44:eb:e0:51:a4:7e: 63:79:cb:e9:37:51:a3:a2:a2:e8:29:b3:ab:d9:98: 82:d7:0c:92:67:d4:0f:53:37:7b:43:a8:aa:48:79: 97:90:1a:bd:29:05:77:20:62:f1:07:60:15:18:74: b4:7f:55:9e:74:4c:b2:a5:77:73:c2:a1:d4:87:d3: 48:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AF:BB:88:66:C9:34:0D:A2:03:02:39:C5:7E:0A:EA:C2:B4:90:5A X509v3 Authority Key Identifier: keyid:20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:37:2e:07:00:f6:51:35:99:f0:c7:70:96:f5:be:62:32:9c: 28:fe:3b:d9:28:e2:49:cb:94:d1:61:80:95:58:54:fe:56:8c: 4b:1b:5a:1e:b9:ae:2d:72:07:56:a4:44:e7:b3:37:9f:ce:8a: 70:8e:39:0d:d7:2b:38:e2:f5:b5:4a:87:b6:9e:63:4b:f7:7d: 0d:bf:be:6a:9e:88:49:9f:6c:42:5e:b5:5d:38:b7:bd:93:b9: 51:67:5a:9d:26:4f:2f:ae:0a:2f:27:2e:cc:07:2e:ec:52:ba: 5b:54:61:fc:3d:05:be:52:e9:ed:9f:88:6e:3c:6e:d9:8e:69: bb:62:9f:c9:ae:85:01:37:1e:db:e7:e4:1a:6a:0e:43:6f:78: e4:4c:90:6f:b6:11:b1:4e:76:da:0f:71:01:4e:fc:09:20:3b: 99:27:43:03:58:7f:7d:df:f3:7e:86:fd:8d:a5:f1:dc:14:67: 64:0a:7d:bb:7c:49:44:9d:27:f4:48:f9:dc:b4:8b:af:eb:eb: 63:a1:4a:a0:47:18:80:d3:00:49:c8:7f:a1:81:f1:65:4a:a9: 5e:f3:4d:a0:02:7b:81:7b:78:82:a6:31:ed:d7:21:ae:9a:62: f0:36:15:20:e4:e0:fb:b8:14:b7:b4:a3:f9:61:34:15:4c:36: ae:5b:3a:b4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPZYpMonW4EZp8HwIg0aW6TWZBMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZD ODg5MjNGMDAeFw0yNjA1MTIyMjI2MzVaFw0yNjA1MTMyMzE2MzVaMDMxMTAvBgNV BAMTKEI2QUZCQjg4NjZDOTM0MERBMjAzMDIzOUM1N0UwQUVBQzJCNDkwNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3o9+qAiYGU2uM2pIxU1+uG1oh bXyQxeyn9PRc/deNcax8Gp3zFr/IKZJi25p82XWT7L/Ovd0k20E9u1lgVf09ki7+ RvfWPc3O9qJP4b3lFG/IEzkWO/qD4wmNs65I+n/I8Cr7fT0tuKYhmS+bYtrEpTQN xhUcV+A4uFjyG+xcPl5+7hm/WELpBpm6RiTsYEdgiN8o8SzmMyMvnUBwRo01uWbC /ulfCTks46CNLjRfj5lN2+T2wlIZIAJyQUTr4FGkfmN5y+k3UaOiougps6vZmILX DJJn1A9TN3tDqKpIeZeQGr0pBXcgYvEHYBUYdLR/VZ50TLKld3PCodSH00jPAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUtq+7iGbJNA2iAwI5xX4K6sK0kFowHwYDVR0j BBgwFoAUICqC2m5zzkJi4Yuu1go/psiJI/AwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDliZDM4ODgtOTMwMi00YjZmLWEwMTctMmI0YmJhNWU1 N2JiLzEvMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZDODg5MjNGMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDJBODJEQTZFNzNDRTQyNjJFMThCQUVE NjBBM0ZBNkM4ODkyM0YwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q5YmQzODg4LTkzMDItNGI2Zi1hMDE3LTJiNGJiYTVlNTdiYi8xLzIwMkE4MkRB NkU3M0NFNDI2MkUxOEJBRUQ2MEEzRkE2Qzg4OTIzRjAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/Ny4H APZRNZnwx3CW9b5iMpwo/jvZKOJJy5TRYYCVWFT+VoxLG1oeua4tcgdWpETnszef zopwjjkN1ys44vW1Soe2nmNL930Nv75qnohJn2xCXrVdOLe9k7lRZ1qdJk8vrgov Jy7MBy7sUrpbVGH8PQW+Uuntn4huPG7Zjmm7Yp/JroUBNx7b5+Qaag5Db3jkTJBv thGxTnbaD3EBTvwJIDuZJ0MDWH993/N+hv2NpfHcFGdkCn27fElEnSf0SPnctIuv 6+tjoUqgRxiA0wBJyH+hgfFlSqle802gAnuBe3iCpjHt1yGummLwNhUg5OD7uBS3 tKP5YTQVTDauWzq0 -----END CERTIFICATE-----Generated at Wed May 13 06:33:45 2026 by rpki-client