$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft File: 83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft (raw, json) Hash identifier: IBrGB2THybC/es9yu5omPkdHWj0bRYcdEW1CuWPNN+I= Subject key identifier: E0:3D:5C:C4:87:7C:D0:4C:91:8E:70:93:7F:82:5A:AC:62:37:43:BC Authority key identifier: 83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E Certificate issuer: /CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Certificate serial: 1176245BA5FCF35722B501F0A3178936A3A10E35 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft Manifest number: 21 Signing time: Wed 23 Sep 2026 22:48:57 +0000 Manifest this update: Wed 23 Sep 2026 22:43:57 +0000 Manifest next update: Thu 24 Sep 2026 23:12:57 +0000 Files and hashes: 1: A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer (hash: J/NXoqSNBar5f3P2XQDX/ArWGpydgBQJacXUbW8Kctg=) 2: 326131343a373538363a363130313a3a2f34382d3438203d3e20323034323131.roa (hash: OYC7HLv+BuvqzRe89yDGqiEIKOoLGwOVCrrcTvt7S0I=) 3: 326131343a373538363a363131363a3a2f34382d3438203d3e203131343231.roa (hash: MrwHj6gR6bkUOd/04peI6c/Ue0oDIdpPIQRV4p5/RNQ=) 4: 326131343a373538363a363130363a3a2f34382d3438203d3e20323034323131.roa (hash: IlRx4OBitw3wFaQW1PrD42/DA4szNKP16B3GuMogB1E=) 5: 326131343a373538363a363130383a3a2f34382d3438203d3e20323034323131.roa (hash: kvgThrWNimya9GZ+Hb1hmWRsjnt4ZTY4cOtVrvum5N4=) 6: 326131343a373538363a363131303a3a2f34382d3438203d3e20323034323131.roa (hash: Xss1rIY1/9LH0JkCd4kH4TTvOENF78QImpavOtUADkw=) 7: 326131343a373538363a363130373a3a2f34382d3438203d3e20323034323131.roa (hash: tM02Frjt9GqAYw9AMT9AJQYlUSur+I4aPvxlBdDO/ZE=) 8: 326131343a373538363a363130393a3a2f34382d3438203d3e20323036303639.roa (hash: McsutBYilHSf+D+zQp4WS0ZrKs44K8YIfKiqGRIwOWI=) 9: 326131343a373538363a363130353a3a2f34382d3438203d3e20323034323131.roa (hash: AXSbGIUNn4IvcJ8FCvZh2aj1rjw4XLS45akYolms3s0=) 10: 326131343a373538363a363130343a3a2f34382d3438203d3e20323034323131.roa (hash: hh9Rd6v92uybHSKZay0GAXY+0l2OkBQ3MefYFze7J1I=) 11: 326131343a373538363a363131323a3a2f34382d3438203d3e20323036303639.roa (hash: nQYOSOAU88ZOUN4XRe2kH036UdabGxGwJVqLchFMc84=) 12: 326131343a373538363a363131313a3a2f34382d3438203d3e20323036303639.roa (hash: I/2PHJxZeyEqiNbxH92CNv0UFHW8YzcvKl6PJAgo1vY=) 13: 326131343a373538363a363130333a3a2f34382d3438203d3e20323034323131.roa (hash: OMQ39sE0xuD98pyJIF5ctj0i+Akl1K8L7lf+usOHEvQ=) 14: 326131343a373538363a363131343a3a2f34382d3438203d3e203131343231.roa (hash: PRwacz5vYeETLuuqiKn4eg+u9MO1E7cOtPxt6n2Kwa4=) 15: 326131343a373538363a363130303a3a2f34382d3438203d3e20323034323131.roa (hash: pg01dmJKb4i6N1OISbtyGBdxn2HbVOxCfGKdfLBgGBU=) 16: 326131343a373538363a363130323a3a2f34382d3438203d3e20323034323131.roa (hash: IposJX1/dkIc9KCM9TFTNcoPJOct8JFXE8VYQyXCQGI=) 17: 83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl (hash: E8M8Ry9kroQ8VvOgRWLvj8GbMxSM3FeYsln5rQNjdIE=) 18: 326131343a373538363a363131353a3a2f34382d3438203d3e20323034323131.roa (hash: +RG7e4Mpaw7aAtFGJRkNP32SqsoyKJ3HXkxQmF48EME=) 19: 326131343a373538363a363530303a3a2f34302d3438203d3e20323032333936.roa (hash: kdcm2E2yjrBce2LkLk9pfeJaQAKXQlbcSuNncUIilzU=) 20: 140CF895225100CF571959173341D92070FF6E7C.cer (hash: GiVhe5wCSmxcIMA/bvZQYg7bw4oKTm6bJhvYg/eFDeY=) 21: 9868B8A018D41E9D418D93B52C0A31174F40F11E.cer (hash: muS0s5lIb0LaX0fvJy+bKg60SyvkC4ycKWo81EXnjkU=) 22: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer (hash: EdwXjb+WYDK6QiRhUSjJHcf+DUC+lEkWQDa3ePFThcg=) 23: 326131343a373538363a363131333a3a2f34382d3438203d3e20323034323131.roa (hash: lMmihb/04tHKQfah94vqyGtRBoUBSLViWROoIfWb+R0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 21:20:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:76:24:5b:a5:fc:f3:57:22:b5:01:f0:a3:17:89:36:a3:a1:0e:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Validity Not Before: Sep 23 22:43:57 2026 GMT Not After : Sep 24 23:12:57 2026 GMT Subject: CN=E03D5CC4877CD04C918E70937F825AAC623743BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:71:1d:1b:12:92:7d:19:da:e7:4f:de:d6:34: d6:43:54:16:26:9d:04:a0:a0:1a:d6:18:41:ea:34: 1c:3d:bb:b0:a0:2b:bd:0b:ff:76:92:30:4d:7f:74: 16:4c:6b:90:cc:18:08:4c:32:df:2f:8a:9f:72:a0: 63:e2:ac:76:4d:98:4d:4a:92:e8:58:58:43:c4:eb: af:dc:db:35:80:39:59:64:76:29:18:5e:dc:10:ce: f9:67:07:de:7f:5f:3f:59:63:32:fc:19:40:04:37: 31:33:2d:61:da:e4:dd:ad:eb:48:6d:4d:13:06:3b: 8a:a4:fa:58:bd:76:24:f2:52:c9:2d:04:29:18:a9: 21:a2:d9:8a:1a:80:a9:6b:8a:a6:fa:12:f7:b1:12: 20:f2:10:d9:b2:84:71:42:c2:87:82:9d:1a:42:78: 14:58:b1:03:92:23:a7:06:52:85:60:62:cf:40:cd: 93:0e:35:93:6d:34:cc:e3:74:79:e0:89:77:78:bf: df:90:82:e3:e9:0f:4d:51:4a:8a:78:b5:d8:22:a1: b0:ae:2d:b6:6a:a5:85:9b:b9:4b:26:4f:71:58:7a: 42:4d:e1:22:33:ef:3a:7e:5d:3c:28:ee:aa:45:07: cf:6c:82:bb:d3:66:1f:f1:af:c5:fa:22:4f:3e:4d: a8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:3D:5C:C4:87:7C:D0:4C:91:8E:70:93:7F:82:5A:AC:62:37:43:BC X509v3 Authority Key Identifier: keyid:83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:fc:48:f8:a4:0a:dd:c1:85:67:1a:87:4e:47:fc:54:af:25: 4c:d7:e6:96:6d:9b:cf:a0:f6:00:f2:33:0a:5e:f6:2d:64:28: ed:6d:ad:b1:4c:17:59:97:66:bf:24:88:27:5c:5a:ff:cb:76: 43:22:2d:51:4b:44:54:27:79:84:34:8c:88:b9:4b:18:f6:d6: d9:0d:41:41:4a:42:d5:72:2b:7c:4f:bf:24:42:b2:eb:1b:35: 32:e7:8e:31:0d:98:02:29:77:d1:8d:92:49:e1:d9:ac:e9:3b: 3f:e3:d9:b4:00:c9:42:c7:33:81:ab:1a:fe:01:5a:16:f4:cb: ce:e8:86:f1:78:79:21:64:d9:92:35:80:8f:bc:da:a9:a9:fc: 0a:d3:91:1c:8e:55:93:b9:99:d7:fa:fb:62:f6:78:fb:39:92: c0:41:1e:93:09:2b:0f:3b:75:0f:d3:95:50:82:5a:a2:ee:b1: a1:92:09:cc:fe:7c:2b:e9:86:d8:f4:a4:4a:c4:9c:27:a5:33: 60:b3:99:39:65:d7:e8:41:2b:93:f8:5f:0a:3f:60:a4:8b:e8: 9d:8d:3e:8d:ab:b8:b6:6c:ff:4c:5c:3c:2a:7c:75:b7:6c:cc: e2:07:e7:ea:55:38:4f:09:5f:b6:96:fe:8d:5c:16:40:2b:35: aa:e4:f6:e4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUEXYkW6X881citQHwoxeJNqOhDjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2 Qjk2NEUzRTAeFw0yNjA5MjMyMjQzNTdaFw0yNjA5MjQyMzEyNTdaMDMxMTAvBgNV BAMTKEUwM0Q1Q0M0ODc3Q0QwNEM5MThFNzA5MzdGODI1QUFDNjIzNzQzQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChcR0bEpJ9GdrnT97WNNZDVBYm nQSgoBrWGEHqNBw9u7CgK70L/3aSME1/dBZMa5DMGAhMMt8vip9yoGPirHZNmE1K kuhYWEPE66/c2zWAOVlkdikYXtwQzvlnB95/Xz9ZYzL8GUAENzEzLWHa5N2t60ht TRMGO4qk+li9diTyUsktBCkYqSGi2YoagKlriqb6EvexEiDyENmyhHFCwoeCnRpC eBRYsQOSI6cGUoVgYs9AzZMONZNtNMzjdHngiXd4v9+QguPpD01RSop4tdgiobCu LbZqpYWbuUsmT3FYekJN4SIz7zp+XTwo7qpFB89sgrvTZh/xr8X6Ik8+TaitAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU4D1cxId80EyRjnCTf4JarGI3Q7wwHwYDVR0j BBgwFoAUg95wN7jiBWbS/om6iReIO2uWTj4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTgwNWVhNWMtZDdhMy00ODQ4LTgzN2ItNDY5N2NjZGQ2 ZWZlLzMvODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2Qjk2NEUzRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84M0RFNzAzN0I4RTIwNTY2RDJGRTg5QkE4 OTE3ODgzQjZCOTY0RTNFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2U4MDVlYTVjLWQ3YTMtNDg0OC04MzdiLTQ2OTdjY2RkNmVmZS8zLzgzREU3MDM3 QjhFMjA1NjZEMkZFODlCQTg5MTc4ODNCNkI5NjRFM0UubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAW/Ej4 pArdwYVnGodOR/xUryVM1+aWbZvPoPYA8jMKXvYtZCjtba2xTBdZl2a/JIgnXFr/ y3ZDIi1RS0RUJ3mENIyIuUsY9tbZDUFBSkLVcit8T78kQrLrGzUy544xDZgCKXfR jZJJ4dms6Ts/49m0AMlCxzOBqxr+AVoW9MvO6IbxeHkhZNmSNYCPvNqpqfwK05Ec jlWTuZnX+vti9nj7OZLAQR6TCSsPO3UP05VQglqi7rGhkgnM/nwr6YbY9KRKxJwn pTNgs5k5ZdfoQSuT+F8KP2Cki+idjT6Nq7i2bP9MXDwqfHW3bMziB+fqVThPCV+2 lv6NXBZAKzWq5Pbk -----END CERTIFICATE-----Generated at Thu Sep 24 14:02:28 2026 by rpki-client