$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft File: 20914720382A1F52B950212C138E5E1E81BA69B7.mft (raw, json) Hash identifier: Dz/TjDVbL3BRVj6VxfSMaxk/UISS3zVz5OiKlmxYysQ= Subject key identifier: E1:ED:97:2F:00:DA:AD:39:1F:99:6E:24:E4:5A:CC:F4:F4:A0:94:43 Authority key identifier: 20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 Certificate issuer: /CN=20914720382A1F52B950212C138E5E1E81BA69B7 Certificate serial: 1E3CBC53BB0B6CD627BFF4F85851B03AD2BF1426 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft Manifest number: 99 Signing time: Thu 26 Mar 2026 04:24:19 +0000 Manifest this update: Thu 26 Mar 2026 04:19:19 +0000 Manifest next update: Fri 27 Mar 2026 04:45:19 +0000 Files and hashes: 1: 326131343a373538363a363130383a3a2f34382d3438203d3e20323036303639.roa (hash: YcX2njhT0h6sqLfQ++klkVsJcPGnxKOwp/btnzs91NI=) 2: 326131343a373538363a363130333a3a2f34382d3438203d3e20323034323131.roa (hash: EI2JmFR4s32Lz8tNongWwvU2DoYm1aiqo+qr8ZW+vPo=) 3: 326131343a373538363a363130313a3a2f34382d3438203d3e20323034323131.roa (hash: DvKmhwWtZsD6TNvQ0eoVfIFrblMkYKUJ35ZR+X3ClBk=) 4: 326131343a373538363a363130303a3a2f34302d3438203d3e20323034323131.roa (hash: 15ggjMeHqDIREZjw9l6zy4xOfQOxACvn6hmmAmBgsSg=) 5: 326131343a373538363a363130303a3a2f34382d3438203d3e20323034323131.roa (hash: i8FxewYN5kk5O+OQO1ECyW70BJ7pMmYObv0lFKAtrXI=) 6: 4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.cer (hash: znj2KhD7dc90RL/SNmhicRPp3l/LZp/snY3wx3mPdJM=) 7: 20914720382A1F52B950212C138E5E1E81BA69B7.crl (hash: tWFdFsry6hEU5aCnIA1Nk+Vz9PuX81GGirIG5YgztlU=) 8: 326131343a373538363a363131303a3a2f34382d3438203d3e20323034323131.roa (hash: 6oVaAmUHgRd5I4Ls+xapNszkxDvRNa6SDHify0SU1pc=) 9: 326131343a373538363a363130323a3a2f34382d3438203d3e20323034323131.roa (hash: qV00rauBPvkNMm+ROCk1kFFtfkMd60Wl/gebvBC2C58=) 10: 326131343a373538363a363130343a3a2f34382d3438203d3e20323034323131.roa (hash: Mx3SvpD488YSM7QhBcQhFXDhTEiCBu3kBzOrFFQvDHI=) 11: 326131343a373538363a363130393a3a2f34382d3438203d3e20323036303639.roa (hash: 9Mftss1+c95DzTv4paxBdS9SaT6MzQYoLspmrnfShYQ=) 12: 326131343a373538363a363130363a3a2f34382d3438203d3e20323034323131.roa (hash: 8Vi1BDc187e4orwxGy0/rqG4GuMIpMb05XZjAeVSKdg=) 13: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer (hash: pIADUm7hELp/Vqdstf8d4gGEQz21lMe/aoJyEiVS1CI=) 14: 326131343a373538363a363130373a3a2f34382d3438203d3e20323034323131.roa (hash: V2Vm92YYMyExADS3i94TFi72XsprSieZvIiYJxwsskY=) 15: 326131343a373538363a363130353a3a2f34382d3438203d3e20323034323131.roa (hash: dJUl+RAxxY+nIO2HtMh4e2KW3S6TxZr3e2E6ku/vRA8=) 16: 140CF895225100CF571959173341D92070FF6E7C.cer (hash: +gzaj8eEKWdYwLDpey4WTnj+Qv54R/A4poIj/Ug/o3g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:3c:bc:53:bb:0b:6c:d6:27:bf:f4:f8:58:51:b0:3a:d2:bf:14:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20914720382A1F52B950212C138E5E1E81BA69B7 Validity Not Before: Mar 26 04:19:19 2026 GMT Not After : Mar 27 04:45:19 2026 GMT Subject: CN=E1ED972F00DAAD391F996E24E45ACCF4F4A09443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:76:7e:1e:fb:c8:0a:db:a7:4d:51:78:63:e0: 56:8e:e5:45:69:b5:0b:08:98:aa:79:0c:36:36:e5: 07:12:42:cf:33:0d:fb:76:d0:65:f9:c9:56:6c:d4: b6:c1:27:58:0a:2f:6f:29:ac:ce:b6:1f:7c:a0:aa: d6:b3:99:00:1c:cd:d1:b7:6b:06:5d:a3:e3:c3:f3: a3:33:41:5a:62:48:e4:6a:c1:e9:02:9c:d0:53:3a: 90:74:f4:af:c1:95:12:23:97:95:64:b3:b7:4e:cc: 96:fd:60:9a:f7:4b:41:dd:26:50:83:3f:0a:4a:81: 14:39:ee:5b:f0:9b:3d:78:3e:50:c5:6e:32:5f:be: c7:7e:98:aa:41:75:a8:a4:4a:f1:56:f2:50:05:f4: 91:2d:5d:bd:14:c7:04:e7:8a:a1:de:db:d9:7c:6a: f8:02:6d:f0:5d:e7:4a:c3:74:4f:c0:69:c5:07:89: d8:73:0c:6b:b3:65:0f:56:6a:ff:93:cb:17:1d:93: 93:80:3e:34:14:5d:75:6c:d7:5a:c5:6e:94:04:20: 2e:b9:ce:18:c0:fa:7b:2a:2f:35:d5:e6:65:72:1f: 9a:55:51:98:27:d1:c2:21:38:b0:ed:e3:31:8f:da: 19:d3:ee:de:3e:19:07:e8:be:49:44:b0:18:8d:5e: 57:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:ED:97:2F:00:DA:AD:39:1F:99:6E:24:E4:5A:CC:F4:F4:A0:94:43 X509v3 Authority Key Identifier: keyid:20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:30:96:d6:0f:7c:87:13:b5:f0:e1:ba:01:58:5c:c3:b5:75: f2:60:08:fd:2f:57:e2:18:21:4c:8e:6b:00:74:55:6b:92:83: ad:b1:6d:65:4e:f0:53:7a:28:3c:6f:3d:aa:6d:b2:e2:7c:65: 82:6e:41:f9:54:cc:56:c6:3d:a0:22:86:15:e4:b9:f1:c8:1a: 48:19:35:13:25:f5:e4:c1:60:6d:48:48:d6:6e:60:7b:68:75: 1d:75:0c:58:08:d0:23:31:d1:20:09:0d:a8:88:ad:f0:89:c6: 1b:84:07:16:c3:1b:b9:07:f1:da:e8:e2:52:d7:f9:62:f9:49: 49:aa:43:4d:91:7a:54:43:c0:0e:63:ae:39:43:8d:48:72:a5: 8c:8b:4f:a5:c1:96:c0:62:67:8d:29:89:80:4f:e5:54:49:fa: 1a:4c:a1:8e:64:c9:15:59:6b:00:e2:25:b6:b2:47:2b:9c:69: 5a:ad:aa:12:79:87:54:72:ab:1f:b8:c3:81:9c:ff:61:43:dc: 34:59:be:28:b1:a7:20:d8:5e:b1:24:43:03:5d:d9:a7:c7:01: 2d:59:75:12:7b:01:66:a8:3a:8b:8b:3c:89:a7:d0:3c:55:5f: 39:be:33:4f:35:b8:7c:c8:8d:5c:89:76:2b:f0:cc:4c:b2:44: 8e:ee:92:d9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUHjy8U7sLbNYnv/T4WFGwOtK/FCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4 MUJBNjlCNzAeFw0yNjAzMjYwNDE5MTlaFw0yNjAzMjcwNDQ1MTlaMDMxMTAvBgNV BAMTKEUxRUQ5NzJGMDBEQUFEMzkxRjk5NkUyNEU0NUFDQ0Y0RjRBMDk0NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+dn4e+8gK26dNUXhj4FaO5UVp tQsImKp5DDY25QcSQs8zDft20GX5yVZs1LbBJ1gKL28prM62H3ygqtazmQAczdG3 awZdo+PD86MzQVpiSORqwekCnNBTOpB09K/BlRIjl5Vks7dOzJb9YJr3S0HdJlCD PwpKgRQ57lvwmz14PlDFbjJfvsd+mKpBdaikSvFW8lAF9JEtXb0UxwTniqHe29l8 avgCbfBd50rDdE/AacUHidhzDGuzZQ9Wav+Tyxcdk5OAPjQUXXVs11rFbpQEIC65 zhjA+nsqLzXV5mVyH5pVUZgn0cIhOLDt4zGP2hnT7t4+GQfovklEsBiNXldVAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU4e2XLwDarTkfmW4k5FrM9PSglEMwHwYDVR0j BBgwFoAUIJFHIDgqH1K5UCEsE45eHoG6abcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzMvMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4MUJBNjlCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDkxNDcyMDM4MkExRjUyQjk1MDIxMkMx MzhFNUUxRTgxQkE2OUI3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y1MzJiOWViLTJmYWUtNDhhOC05NzkzLTMzZWVjMDY3Y2UzOS8zLzIwOTE0NzIw MzgyQTFGNTJCOTUwMjEyQzEzOEU1RTFFODFCQTY5QjcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA5MJbW D3yHE7Xw4boBWFzDtXXyYAj9L1fiGCFMjmsAdFVrkoOtsW1lTvBTeig8bz2qbbLi fGWCbkH5VMxWxj2gIoYV5LnxyBpIGTUTJfXkwWBtSEjWbmB7aHUddQxYCNAjMdEg CQ2oiK3wicYbhAcWwxu5B/Ha6OJS1/li+UlJqkNNkXpUQ8AOY645Q41IcqWMi0+l wZbAYmeNKYmAT+VUSfoaTKGOZMkVWWsA4iW2skcrnGlaraoSeYdUcqsfuMOBnP9h Q9w0Wb4osacg2F6xJEMDXdmnxwEtWXUSewFmqDqLizyJp9A8VV85vjNPNbh8yI1c iXYr8MxMskSO7pLZ -----END CERTIFICATE-----Generated at Thu Mar 26 10:12:46 2026 by rpki-client