$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft File: 20914720382A1F52B950212C138E5E1E81BA69B7.mft (raw, json) Hash identifier: Dkd33btYH1MnAW6IWgV2QW7rzXJgnVWlJASAsjlji5Q= Subject key identifier: 4C:90:23:6E:F0:03:80:6E:C4:F9:19:EE:9C:74:43:CB:89:EC:C4:5C Authority key identifier: 20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 Certificate issuer: /CN=20914720382A1F52B950212C138E5E1E81BA69B7 Certificate serial: 7C153EF445F265B4D4AB1658D637167E1B1C226C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft Manifest number: 0192 Signing time: Thu 23 Jul 2026 12:48:31 +0000 Manifest this update: Thu 23 Jul 2026 12:43:31 +0000 Manifest next update: Fri 24 Jul 2026 14:19:31 +0000 Files and hashes: 1: 326131343a373538363a363131323a3a2f34382d3438203d3e20323036303639.roa (hash: w5QHtu9cQyKjArMrfA6wboJd2mLuch9xpK2TkgucmN8=) 2: 326131343a373538363a363130343a3a2f34382d3438203d3e20323034323131.roa (hash: Mx3SvpD488YSM7QhBcQhFXDhTEiCBu3kBzOrFFQvDHI=) 3: 326131343a373538363a363130373a3a2f34382d3438203d3e20323034323131.roa (hash: V2Vm92YYMyExADS3i94TFi72XsprSieZvIiYJxwsskY=) 4: 326131343a373538363a363131313a3a2f34382d3438203d3e20323036303639.roa (hash: 3q7X88pIOl+dnnYtANwsrZeJh9YzsRCK2Bzv3ILW5DA=) 5: 326131343a373538363a363530303a3a2f34302d3438203d3e20323032333936.roa (hash: dYDF2I04t+LIOjBAiMrzBqWk6adCjIN+miZ36ttNxLA=) 6: 326131343a373538363a363131333a3a2f34382d3438203d3e20323034323131.roa (hash: sZKmIrdMvk64uefomVxqrQfIRfYdr41SjuDolYGmZ5U=) 7: 326131343a373538363a363131303a3a2f34382d3438203d3e20323034323131.roa (hash: 6oVaAmUHgRd5I4Ls+xapNszkxDvRNa6SDHify0SU1pc=) 8: 9868B8A018D41E9D418D93B52C0A31174F40F11E.cer (hash: 23+dwQKC9EhxR8/c837o7SVJ7wuGJrKYeRXm+DcGamE=) 9: 326131343a373538363a363130363a3a2f34382d3438203d3e20323034323131.roa (hash: 8Vi1BDc187e4orwxGy0/rqG4GuMIpMb05XZjAeVSKdg=) 10: 140CF895225100CF571959173341D92070FF6E7C.cer (hash: +gzaj8eEKWdYwLDpey4WTnj+Qv54R/A4poIj/Ug/o3g=) 11: 326131343a373538363a363130303a3a2f34382d3438203d3e20323034323131.roa (hash: i8FxewYN5kk5O+OQO1ECyW70BJ7pMmYObv0lFKAtrXI=) 12: 326131343a373538363a363130353a3a2f34382d3438203d3e20323034323131.roa (hash: dJUl+RAxxY+nIO2HtMh4e2KW3S6TxZr3e2E6ku/vRA8=) 13: 326131343a373538363a363130383a3a2f34382d3438203d3e20323034323131.roa (hash: ZgjB8m1thnqWfHedFQRot49v76xsWvW29soNj1KmfdQ=) 14: 326131343a373538363a363130333a3a2f34382d3438203d3e20323034323131.roa (hash: EI2JmFR4s32Lz8tNongWwvU2DoYm1aiqo+qr8ZW+vPo=) 15: 326131343a373538363a363130313a3a2f34382d3438203d3e20323034323131.roa (hash: DvKmhwWtZsD6TNvQ0eoVfIFrblMkYKUJ35ZR+X3ClBk=) 16: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer (hash: pIADUm7hELp/Vqdstf8d4gGEQz21lMe/aoJyEiVS1CI=) 17: A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer (hash: 0rnvqE+86alCNCIwYXK/yzFHCq/tZfmzUdo3B20ZaI0=) 18: 326131343a373538363a363130323a3a2f34382d3438203d3e20323034323131.roa (hash: qV00rauBPvkNMm+ROCk1kFFtfkMd60Wl/gebvBC2C58=) 19: 326131343a373538363a363130393a3a2f34382d3438203d3e20323036303639.roa (hash: 9Mftss1+c95DzTv4paxBdS9SaT6MzQYoLspmrnfShYQ=) 20: 20914720382A1F52B950212C138E5E1E81BA69B7.crl (hash: K+Gz+xZqqhRF5CHS10AiLxgj22WLVFGB5x+GsZyrEyk=) 21: 326131343a373538363a363131343a3a2f34382d3438203d3e203131343231.roa (hash: N8XzyTZUvph6r/e12CjdTH60sBk3Wl4kicz6qoC6S0s=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:15:3e:f4:45:f2:65:b4:d4:ab:16:58:d6:37:16:7e:1b:1c:22:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20914720382A1F52B950212C138E5E1E81BA69B7 Validity Not Before: Jul 23 12:43:31 2026 GMT Not After : Jul 24 14:19:31 2026 GMT Subject: CN=4C90236EF003806EC4F919EE9C7443CB89ECC45C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4a:07:ea:b0:db:cc:f1:42:1a:d5:31:d5:d2: 0c:1e:45:5a:2b:7e:79:0e:35:d0:2e:3d:6d:ac:0a: 69:99:1e:2d:46:b3:8f:ed:b5:af:3f:97:a4:07:38: 62:9b:e2:71:b3:54:8d:1d:ac:9c:2f:c7:2a:f6:9c: 4d:a5:4a:47:6a:e9:e7:f8:72:2c:06:52:ec:d3:1e: 7f:b1:25:10:a9:e4:c7:ab:f3:7e:c9:15:57:b5:1d: df:7b:09:e0:18:08:6b:7f:a0:ac:1b:3d:da:3c:49: 83:c0:42:5e:a3:7f:6f:40:5b:09:f2:9c:90:01:be: 5f:8a:df:60:81:50:c2:11:8a:c0:80:e0:3a:90:f3: 3b:6a:27:64:a2:08:a3:e1:cc:06:62:a6:43:1c:e8: c7:3d:c2:b3:d5:e1:19:0c:99:7f:e1:1d:e4:e5:fd: ac:9c:af:6b:e0:2d:01:3b:9a:8c:a2:53:61:5a:7a: 2e:c0:2c:8d:66:fe:97:39:f2:6a:fa:08:6f:56:9b: b6:3e:ef:86:fd:be:22:bb:9b:82:e4:0f:73:b3:11: 6a:97:cc:5f:49:49:08:e0:0b:53:1b:4b:0c:0e:3a: 00:21:1d:bc:f1:10:12:db:44:a0:fd:2b:dd:b3:de: 03:0f:05:65:be:9c:77:9b:4a:aa:7c:ef:ff:ab:c7: 02:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:90:23:6E:F0:03:80:6E:C4:F9:19:EE:9C:74:43:CB:89:EC:C4:5C X509v3 Authority Key Identifier: keyid:20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:8f:b5:72:1b:01:bb:f5:0e:ca:bf:2d:dd:01:d0:16:ce:80: 39:b7:c5:02:17:82:da:b2:18:89:40:70:83:23:15:de:5b:11: c1:3f:3f:b9:20:a1:29:13:21:42:89:56:76:de:3e:cc:ed:1a: 9a:f0:40:d3:3f:39:fa:a8:ca:89:4d:a3:47:50:b8:59:da:aa: e2:aa:d2:e7:30:ec:3d:b9:2d:c7:e5:67:f1:07:cb:f3:d3:e8: 6a:f9:58:db:47:8f:cd:d2:a6:69:ea:84:75:21:e6:5d:9d:54: 48:81:62:ad:ce:1d:f3:4e:17:01:ec:07:34:3f:4e:ff:43:cd: 83:b9:d2:ca:30:bd:9d:78:ef:35:07:4f:00:d8:76:ab:67:5d: 08:05:af:e2:b9:d7:29:80:48:03:79:e1:a9:9c:86:3f:ea:41: a8:28:7d:d1:71:39:85:93:c0:cf:71:35:4f:2c:9f:9f:0d:43: b7:b1:c3:ad:7e:41:2f:45:02:58:e3:e6:f6:60:e1:1a:80:5a: e6:c8:22:25:4f:c9:98:03:a9:c2:77:5b:6b:54:ab:18:c3:30: 57:d1:82:49:29:e9:ee:7f:60:20:d5:b7:b2:2c:e2:b1:30:a3: db:8d:b8:36:77:1a:a0:dc:4a:b7:b3:9e:47:3a:dd:3d:e7:9b: f9:60:b6:c1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfBU+9EXyZbTUqxZY1jcWfhscImwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4 MUJBNjlCNzAeFw0yNjA3MjMxMjQzMzFaFw0yNjA3MjQxNDE5MzFaMDMxMTAvBgNV BAMTKDRDOTAyMzZFRjAwMzgwNkVDNEY5MTlFRTlDNzQ0M0NCODlFQ0M0NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMSgfqsNvM8UIa1THV0gweRVor fnkONdAuPW2sCmmZHi1Gs4/tta8/l6QHOGKb4nGzVI0drJwvxyr2nE2lSkdq6ef4 ciwGUuzTHn+xJRCp5Mer837JFVe1Hd97CeAYCGt/oKwbPdo8SYPAQl6jf29AWwny nJABvl+K32CBUMIRisCA4DqQ8ztqJ2SiCKPhzAZipkMc6Mc9wrPV4RkMmX/hHeTl /aycr2vgLQE7moyiU2Faei7ALI1m/pc58mr6CG9Wm7Y+74b9viK7m4LkD3OzEWqX zF9JSQjgC1MbSwwOOgAhHbzxEBLbRKD9K92z3gMPBWW+nHebSqp87/+rxwItAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUTJAjbvADgG7E+RnunHRDy4nsxFwwHwYDVR0j BBgwFoAUIJFHIDgqH1K5UCEsE45eHoG6abcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzMvMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4MUJBNjlCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDkxNDcyMDM4MkExRjUyQjk1MDIxMkMx MzhFNUUxRTgxQkE2OUI3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y1MzJiOWViLTJmYWUtNDhhOC05NzkzLTMzZWVjMDY3Y2UzOS8zLzIwOTE0NzIw MzgyQTFGNTJCOTUwMjEyQzEzOEU1RTFFODFCQTY5QjcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAdj7Vy GwG79Q7Kvy3dAdAWzoA5t8UCF4LashiJQHCDIxXeWxHBPz+5IKEpEyFCiVZ23j7M 7Rqa8EDTPzn6qMqJTaNHULhZ2qriqtLnMOw9uS3H5WfxB8vz0+hq+VjbR4/N0qZp 6oR1IeZdnVRIgWKtzh3zThcB7Ac0P07/Q82DudLKML2deO81B08A2HarZ10IBa/i udcpgEgDeeGpnIY/6kGoKH3RcTmFk8DPcTVPLJ+fDUO3scOtfkEvRQJY4+b2YOEa gFrmyCIlT8mYA6nCd1trVKsYwzBX0YJJKenuf2Ag1beyLOKxMKPbjbg2dxqg3Eq3 s55HOt0955v5YLbB -----END CERTIFICATE-----Generated at Thu Jul 23 21:40:07 2026 by rpki-client