$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft File: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft (raw, json) Hash identifier: RuYScKY3roynNyePdbehvzLHNT2tMr+4g+7rJxKZqEE= Subject key identifier: 5C:A7:E4:4B:35:1B:BB:55:1C:42:71:5B:CC:6F:99:2F:67:51:3B:D4 Authority key identifier: 20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 Certificate issuer: /CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Certificate serial: 0D96D1D4018BF7A4EEFAFBFE8C6C617D2D06ED11 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft Manifest number: 01C5 Signing time: Thu 23 Jul 2026 16:52:06 +0000 Manifest this update: Thu 23 Jul 2026 16:47:06 +0000 Manifest next update: Fri 24 Jul 2026 19:04:06 +0000 Files and hashes: 1: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl (hash: kAqKqG0RVCh2+U8n3zpiAHeLiQjLrhhCiWdq2zyNvng=) 2: 326131343a373538313a333062353a3a2f34382d3438203d3e20323131373239.roa (hash: tFUXq6i30FxB1SNNhCRKk78oQl/FXFjJBGghOw722to=) 3: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer (hash: Cg46VfMFxkibHVY72VspTJE2BjBtIpE0lG8+Ny9YFKc=) 4: 326131343a373538313a333062363a3a2f34382d3438203d3e203331383938.roa (hash: EiykYxl+6FaTNBSgNTe5hk8ztAyCkiKmYpqs3J6XV7E=) 5: 326131343a373538313a333062363a3a2f34382d3438203d3e20323037323939.roa (hash: QF7sj3Q22cpFIfftMWFUaaWBXSTUWiNGhFKa4Gm8DjQ=) 6: 326131343a373538313a333030303a3a2f34302d3438203d3e20323037353239.roa (hash: 49tQr1GLN9QvPACiaQcXfaSDsuhRZJax3rEAyqF9fvs=) 7: 326131343a373538313a333039303a3a2f34342d3434203d3e20323034323131.roa (hash: an2CTnY48XCjuCGH81CGgjVXZdlCvh7kWv6euA7rsaw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:96:d1:d4:01:8b:f7:a4:ee:fa:fb:fe:8c:6c:61:7d:2d:06:ed:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Validity Not Before: Jul 23 16:47:06 2026 GMT Not After : Jul 24 19:04:06 2026 GMT Subject: CN=5CA7E44B351BBB551C42715BCC6F992F67513BD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b3:09:fc:16:83:8d:a1:5a:14:34:90:bd:fe: f7:cb:33:15:f1:9e:27:2e:88:de:c9:ae:96:ae:09: c5:e0:ac:2d:3d:7a:c6:f6:f1:9a:33:a4:42:d0:bc: 9d:d8:78:3c:23:c2:73:fb:71:81:24:32:31:40:72: 5c:f3:e6:07:0f:fe:c3:97:ce:0c:50:36:ea:a6:9f: 0c:c9:c4:c1:62:0c:ba:63:cc:5a:dc:05:82:6b:cd: 53:20:08:a4:bc:e0:1e:e3:80:a0:61:c5:bb:06:ec: af:04:e9:2a:2d:fa:44:f8:fd:96:a4:41:17:af:27: 03:59:40:c0:e4:42:2a:00:16:6c:11:3e:36:29:03: c0:6c:89:70:ae:56:e1:04:1b:75:3a:6e:e8:21:02: 35:96:d9:62:ca:a5:ac:2c:59:da:31:04:0b:c5:11: d6:b4:c5:c7:9e:c7:e3:af:6f:1d:f1:7b:85:5d:fd: 67:31:d6:fb:2a:dd:ed:3f:8d:31:c5:b3:99:c6:63: a7:3d:5a:d0:14:77:38:16:8f:2a:51:70:cf:a3:be: 92:cb:6e:b6:c4:84:9f:d1:c4:06:b9:31:55:f9:8c: 3a:3c:8e:1c:6a:5a:13:83:02:52:dc:cb:83:5b:91: 6e:5d:a6:09:26:db:b8:a6:b1:aa:63:c9:6c:20:ba: 6d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A7:E4:4B:35:1B:BB:55:1C:42:71:5B:CC:6F:99:2F:67:51:3B:D4 X509v3 Authority Key Identifier: keyid:20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:a0:01:0a:00:59:e9:26:df:a2:9b:c3:c6:4a:5a:19:10:34: f9:0c:ff:ac:b7:0d:dd:62:43:e0:5c:03:a3:a3:9b:13:65:4e: 7f:22:9a:31:05:a3:d6:57:3d:4e:84:1f:9c:f0:26:0c:63:8a: 1c:97:00:6b:5d:ad:1e:a2:5d:c0:ef:61:47:d4:2a:28:2d:14: 77:a1:bf:c2:5d:52:59:a0:a3:08:d9:9d:d6:c4:aa:42:f2:b1: e3:81:9a:6f:c7:6a:a7:c7:d2:25:f5:1b:fd:6c:9b:8e:7d:ca: bb:91:8e:20:5e:3a:e2:92:4d:c3:ac:5c:95:e0:03:2c:2e:bc: f7:fd:44:fa:2b:16:35:90:20:7e:fd:5f:4d:53:2b:2f:5c:c5: ea:bf:75:50:64:0c:38:8b:95:9e:4c:77:fc:0a:ca:46:40:dc: 4e:02:72:43:e3:3c:d4:a0:86:0b:fb:67:b9:16:da:aa:8e:39: 39:fb:f0:9f:f0:a0:c6:47:30:95:0f:b0:fe:35:09:db:e5:2d: ed:2d:51:f6:d2:45:84:76:75:e2:f1:7b:ed:4a:5e:d1:cf:f7: d1:33:36:24:2a:f5:4c:82:d6:2e:e1:30:e6:c1:8e:aa:f3:eb: 97:84:f4:ee:6f:67:e1:b9:a2:59:b5:15:55:56:2a:6f:57:2a: bd:c7:52:07 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUDZbR1AGL96Tu+vv+jGxhfS0G7REwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZD ODg5MjNGMDAeFw0yNjA3MjMxNjQ3MDZaFw0yNjA3MjQxOTA0MDZaMDMxMTAvBgNV BAMTKDVDQTdFNDRCMzUxQkJCNTUxQzQyNzE1QkNDNkY5OTJGNjc1MTNCRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3swn8FoONoVoUNJC9/vfLMxXx nicuiN7JrpauCcXgrC09esb28ZozpELQvJ3YeDwjwnP7cYEkMjFAclzz5gcP/sOX zgxQNuqmnwzJxMFiDLpjzFrcBYJrzVMgCKS84B7jgKBhxbsG7K8E6Sot+kT4/Zak QRevJwNZQMDkQioAFmwRPjYpA8BsiXCuVuEEG3U6bughAjWW2WLKpawsWdoxBAvF Eda0xceex+Ovbx3xe4Vd/Wcx1vsq3e0/jTHFs5nGY6c9WtAUdzgWjypRcM+jvpLL brbEhJ/RxAa5MVX5jDo8jhxqWhODAlLcy4NbkW5dpgkm27imsapjyWwgum2vAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUXKfkSzUbu1UcQnFbzG+ZL2dRO9QwHwYDVR0j BBgwFoAUICqC2m5zzkJi4Yuu1go/psiJI/AwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDliZDM4ODgtOTMwMi00YjZmLWEwMTctMmI0YmJhNWU1 N2JiLzEvMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZDODg5MjNGMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDJBODJEQTZFNzNDRTQyNjJFMThCQUVE NjBBM0ZBNkM4ODkyM0YwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q5YmQzODg4LTkzMDItNGI2Zi1hMDE3LTJiNGJiYTVlNTdiYi8xLzIwMkE4MkRB NkU3M0NFNDI2MkUxOEJBRUQ2MEEzRkE2Qzg4OTIzRjAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBEoAEK AFnpJt+im8PGSloZEDT5DP+stw3dYkPgXAOjo5sTZU5/IpoxBaPWVz1OhB+c8CYM Y4oclwBrXa0eol3A72FH1CooLRR3ob/CXVJZoKMI2Z3WxKpC8rHjgZpvx2qnx9Il 9Rv9bJuOfcq7kY4gXjrikk3DrFyV4AMsLrz3/UT6KxY1kCB+/V9NUysvXMXqv3VQ ZAw4i5WeTHf8CspGQNxOAnJD4zzUoIYL+2e5Ftqqjjk5+/Cf8KDGRzCVD7D+NQnb 5S3tLVH20kWEdnXi8XvtSl7Rz/fRMzYkKvVMgtYu4TDmwY6q8+uXhPTub2fhuaJZ tRVVVipvVyq9x1IH -----END CERTIFICATE-----Generated at Thu Jul 23 21:32:07 2026 by rpki-client