$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft File: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft (raw, json) Hash identifier: 5HQdobhLP+Q/Yipv545id+nJfBQ89RVYodKAzWYsFYo= Subject key identifier: A2:BC:28:56:0A:5D:B0:F6:C0:EF:62:55:0F:4E:64:A7:4D:25:2B:FF Authority key identifier: 20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 Certificate issuer: /CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Certificate serial: 540E7B6C25643376FDABB6BB2924580524CDDBB2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft Manifest number: 021A Signing time: Thu 24 Sep 2026 01:21:02 +0000 Manifest this update: Thu 24 Sep 2026 01:16:02 +0000 Manifest next update: Fri 25 Sep 2026 01:50:02 +0000 Files and hashes: 1: 326131343a373538313a333030303a3a2f34302d3438203d3e20323037353239.roa (hash: nO44y4dGpNuxJp2QdoTzjcIWxOsTj19ZEllt1Dvs5Ts=) 2: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl (hash: gjYy1wCIBTWywHQwg1HQTHm3RrNZT6Y7orDhnKj9/7I=) 3: 326131343a373538313a333062363a3a2f34382d3438203d3e203331383938.roa (hash: EiykYxl+6FaTNBSgNTe5hk8ztAyCkiKmYpqs3J6XV7E=) 4: 326131343a373538313a333062353a3a2f34382d3438203d3e20323131373239.roa (hash: nUtP3OV4fZsZW1X/gp0Xu/ils8ZvclvedQBTDcf+slw=) 5: 326131343a373538313a333039303a3a2f34342d3434203d3e20323034323131.roa (hash: an2CTnY48XCjuCGH81CGgjVXZdlCvh7kWv6euA7rsaw=) 6: 3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.cer (hash: Q7BJ01tr/6JHLPGP911ghDsrU5buibZF5gNXX6+52rQ=) 7: 326131343a373538313a333062363a3a2f34382d3438203d3e20323037323939.roa (hash: QF7sj3Q22cpFIfftMWFUaaWBXSTUWiNGhFKa4Gm8DjQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 21:20:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:0e:7b:6c:25:64:33:76:fd:ab:b6:bb:29:24:58:05:24:cd:db:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Validity Not Before: Sep 24 01:16:02 2026 GMT Not After : Sep 25 01:50:02 2026 GMT Subject: CN=A2BC28560A5DB0F6C0EF62550F4E64A74D252BFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ca:56:51:a9:12:91:bb:0d:fa:86:0d:a6:6d: a5:17:81:a4:e8:54:16:60:24:6e:f4:9f:a2:0f:5f: 86:14:f0:2d:40:28:fa:f1:70:70:b2:0e:0f:78:50: 53:2c:74:5a:65:69:06:45:8b:6f:7e:cc:87:7d:45: 62:f2:18:82:87:c4:1e:f4:28:fe:26:e8:6b:7f:8f: b7:09:3e:1f:d9:85:96:25:fe:eb:3a:79:68:c9:90: 0f:06:b1:fc:52:d7:bb:75:e7:b0:e2:5c:d0:44:c1: f5:8b:c8:3f:5b:02:ff:c4:7f:eb:f9:6a:5e:20:6e: 5e:a5:a3:68:49:ce:db:31:77:27:5e:13:9a:e4:35: 82:fa:5a:24:b9:ce:5e:dc:dd:4f:12:ee:56:05:6d: c0:9e:04:24:52:e2:d7:f0:ee:85:f4:56:8a:6f:84: 29:d3:81:d3:fb:30:97:19:75:fe:6c:a7:f3:cb:a2: 85:a1:7f:35:34:a2:1c:b9:8b:b8:84:ca:b0:d3:24: cb:10:30:8a:0f:ed:ca:f3:60:b9:9d:01:41:64:c7: a1:86:8e:f1:88:78:73:ff:0d:4c:83:74:29:d9:0b: 31:3a:f1:eb:7e:18:3e:92:37:58:61:92:3a:6b:50: 05:4a:a0:2f:9b:2e:16:97:7b:1f:a8:76:76:b2:6a: c5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:BC:28:56:0A:5D:B0:F6:C0:EF:62:55:0F:4E:64:A7:4D:25:2B:FF X509v3 Authority Key Identifier: keyid:20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:7f:83:4f:29:fc:04:35:1e:b0:e9:1c:12:ce:77:0f:4b:09: a8:d6:b0:81:d8:b4:a4:6c:0a:75:29:38:b4:ad:18:5a:60:9c: b0:65:75:15:d2:0a:39:c8:35:f4:4c:e1:dc:b0:91:a9:1c:db: 09:c0:64:ca:b4:02:ea:1b:eb:72:ea:1e:72:bb:30:d0:eb:9d: 4f:58:e2:b7:52:23:2c:92:39:7c:1e:f2:54:51:55:f0:89:02: 7d:35:0f:0f:cb:aa:2b:52:71:ae:ff:ee:fa:2d:03:f5:93:67: 80:1a:0b:b1:31:28:94:3a:e8:6f:91:86:77:fd:c8:bd:14:73: 07:45:2c:5e:f1:5d:ca:5c:0b:ab:d7:6e:1b:dd:61:37:59:e7: 78:44:b7:33:97:f0:41:96:23:ab:29:da:91:7e:36:84:72:36: c8:66:dd:4e:03:c0:8f:04:09:b5:f2:10:68:f3:75:3e:df:3d: ed:b8:82:dd:e7:e9:47:98:ee:2b:3c:61:bd:9b:99:b5:d6:bf: 90:2f:94:c6:36:d2:d8:5b:98:ae:24:87:6f:e4:e7:ca:f3:7c: 23:ae:c5:8e:c3:15:52:ed:d8:49:9a:91:ab:67:37:30:1f:26: 2d:7d:8c:c0:d7:07:39:2c:c8:c3:d5:b5:af:91:1e:e4:bf:0b: 14:c5:81:07 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUVA57bCVkM3b9q7a7KSRYBSTN27IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZD ODg5MjNGMDAeFw0yNjA5MjQwMTE2MDJaFw0yNjA5MjUwMTUwMDJaMDMxMTAvBgNV BAMTKEEyQkMyODU2MEE1REIwRjZDMEVGNjI1NTBGNEU2NEE3NEQyNTJCRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoylZRqRKRuw36hg2mbaUXgaTo VBZgJG70n6IPX4YU8C1AKPrxcHCyDg94UFMsdFplaQZFi29+zId9RWLyGIKHxB70 KP4m6Gt/j7cJPh/ZhZYl/us6eWjJkA8GsfxS17t157DiXNBEwfWLyD9bAv/Ef+v5 al4gbl6lo2hJztsxdydeE5rkNYL6WiS5zl7c3U8S7lYFbcCeBCRS4tfw7oX0Vopv hCnTgdP7MJcZdf5sp/PLooWhfzU0ohy5i7iEyrDTJMsQMIoP7crzYLmdAUFkx6GG jvGIeHP/DUyDdCnZCzE68et+GD6SN1hhkjprUAVKoC+bLhaXex+odnayasUbAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUorwoVgpdsPbA72JVD05kp00lK/8wHwYDVR0j BBgwFoAUICqC2m5zzkJi4Yuu1go/psiJI/AwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDliZDM4ODgtOTMwMi00YjZmLWEwMTctMmI0YmJhNWU1 N2JiLzEvMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZDODg5MjNGMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDJBODJEQTZFNzNDRTQyNjJFMThCQUVE NjBBM0ZBNkM4ODkyM0YwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q5YmQzODg4LTkzMDItNGI2Zi1hMDE3LTJiNGJiYTVlNTdiYi8xLzIwMkE4MkRB NkU3M0NFNDI2MkUxOEJBRUQ2MEEzRkE2Qzg4OTIzRjAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBzf4NP KfwENR6w6RwSzncPSwmo1rCB2LSkbAp1KTi0rRhaYJywZXUV0go5yDX0TOHcsJGp HNsJwGTKtALqG+ty6h5yuzDQ651PWOK3UiMskjl8HvJUUVXwiQJ9NQ8Py6orUnGu /+76LQP1k2eAGguxMSiUOuhvkYZ3/ci9FHMHRSxe8V3KXAur124b3WE3Wed4RLcz l/BBliOrKdqRfjaEcjbIZt1OA8CPBAm18hBo83U+3z3tuILd5+lHmO4rPGG9m5m1 1r+QL5TGNtLYW5iuJIdv5OfK83wjrsWOwxVS7dhJmpGrZzcwHyYtfYzA1wc5LMjD 1bWvkR7kvwsUxYEH -----END CERTIFICATE-----Generated at Thu Sep 24 12:32:34 2026 by rpki-client