$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft File: 20914720382A1F52B950212C138E5E1E81BA69B7.mft (raw, json) Hash identifier: tKyv3OUuwARNayk0zoff0nnNmEfdQcp4M1ay7Otys+0= Subject key identifier: 13:71:F6:A8:17:57:24:C1:93:C9:06:1B:27:96:46:71:77:B6:D7:4B Authority key identifier: 20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 Certificate issuer: /CN=20914720382A1F52B950212C138E5E1E81BA69B7 Certificate serial: 4F3BF6E2DDB8D17E983F951FEF83DFE12623ABDF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft Manifest number: EA Signing time: Tue 12 May 2026 22:06:40 +0000 Manifest this update: Tue 12 May 2026 22:01:39 +0000 Manifest next update: Thu 14 May 2026 01:45:39 +0000 Files and hashes: 1: 326131343a373538363a363131313a3a2f34382d3438203d3e20323036303639.roa (hash: 3q7X88pIOl+dnnYtANwsrZeJh9YzsRCK2Bzv3ILW5DA=) 2: 140CF895225100CF571959173341D92070FF6E7C.cer (hash: +gzaj8eEKWdYwLDpey4WTnj+Qv54R/A4poIj/Ug/o3g=) 3: A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer (hash: 9Pf0z32xN+SKqx6NyYb51OY8UPNbU/4QzCfnwG+Af/4=) 4: 326131343a373538363a363130303a3a2f34302d3438203d3e20323034323131.roa (hash: 15ggjMeHqDIREZjw9l6zy4xOfQOxACvn6hmmAmBgsSg=) 5: 20914720382A1F52B950212C138E5E1E81BA69B7.crl (hash: yq92dSEp1TKnj5peHce9Vy609KodHcfDf7Y48VWQvlU=) 6: 4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.cer (hash: znj2KhD7dc90RL/SNmhicRPp3l/LZp/snY3wx3mPdJM=) 7: 326131343a373538363a363130353a3a2f34382d3438203d3e20323034323131.roa (hash: dJUl+RAxxY+nIO2HtMh4e2KW3S6TxZr3e2E6ku/vRA8=) 8: 326131343a373538363a363130373a3a2f34382d3438203d3e20323034323131.roa (hash: V2Vm92YYMyExADS3i94TFi72XsprSieZvIiYJxwsskY=) 9: 326131343a373538363a363130363a3a2f34382d3438203d3e20323034323131.roa (hash: 8Vi1BDc187e4orwxGy0/rqG4GuMIpMb05XZjAeVSKdg=) 10: 326131343a373538363a363130343a3a2f34382d3438203d3e20323034323131.roa (hash: Mx3SvpD488YSM7QhBcQhFXDhTEiCBu3kBzOrFFQvDHI=) 11: 326131343a373538363a363130303a3a2f34382d3438203d3e20323034323131.roa (hash: i8FxewYN5kk5O+OQO1ECyW70BJ7pMmYObv0lFKAtrXI=) 12: 326131343a373538363a363130333a3a2f34382d3438203d3e20323034323131.roa (hash: EI2JmFR4s32Lz8tNongWwvU2DoYm1aiqo+qr8ZW+vPo=) 13: 326131343a373538363a363130383a3a2f34382d3438203d3e20323036303639.roa (hash: YcX2njhT0h6sqLfQ++klkVsJcPGnxKOwp/btnzs91NI=) 14: 326131343a373538363a363131303a3a2f34382d3438203d3e20323034323131.roa (hash: 6oVaAmUHgRd5I4Ls+xapNszkxDvRNa6SDHify0SU1pc=) 15: 326131343a373538363a363130393a3a2f34382d3438203d3e20323036303639.roa (hash: 9Mftss1+c95DzTv4paxBdS9SaT6MzQYoLspmrnfShYQ=) 16: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer (hash: pIADUm7hELp/Vqdstf8d4gGEQz21lMe/aoJyEiVS1CI=) 17: 326131343a373538363a363130313a3a2f34382d3438203d3e20323034323131.roa (hash: DvKmhwWtZsD6TNvQ0eoVfIFrblMkYKUJ35ZR+X3ClBk=) 18: 326131343a373538363a363130323a3a2f34382d3438203d3e20323034323131.roa (hash: qV00rauBPvkNMm+ROCk1kFFtfkMd60Wl/gebvBC2C58=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:3b:f6:e2:dd:b8:d1:7e:98:3f:95:1f:ef:83:df:e1:26:23:ab:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20914720382A1F52B950212C138E5E1E81BA69B7 Validity Not Before: May 12 22:01:39 2026 GMT Not After : May 14 01:45:39 2026 GMT Subject: CN=1371F6A8175724C193C9061B2796467177B6D74B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:de:27:98:c7:9e:6d:0c:80:12:8d:0a:6c:e4: ea:f1:95:fa:97:5e:13:8f:32:2e:64:0d:bd:37:1c: 8e:e8:64:7e:f3:c1:6b:c1:7f:6d:20:7f:2d:2e:1c: c1:24:9e:39:48:93:71:d4:ee:dd:93:45:7c:6c:83: bf:5e:2a:e9:ff:b1:6e:34:a1:74:d0:6f:a1:50:ad: 25:3d:74:59:6d:3a:9b:49:51:56:8e:f0:3e:0f:cc: f8:37:c7:8a:34:1f:09:cf:c6:62:cf:27:57:f9:19: 31:42:e3:aa:15:45:73:57:70:72:02:76:2e:21:db: 06:3b:c1:f2:76:25:19:17:08:ef:5a:ef:79:a1:1c: 32:3e:21:a2:ee:a9:76:e1:17:2e:41:11:6d:36:70: f2:49:b1:06:43:e5:1c:ca:be:d5:a4:5a:7d:c3:d5: 9f:c3:d8:94:03:da:f9:f2:e4:d8:d8:0c:02:b7:96: b1:a9:1d:4e:80:fc:14:48:ea:68:d1:1d:0a:db:ed: bd:23:c2:a3:cb:b6:b7:ac:42:d2:39:a0:af:fd:34: cb:2b:47:48:88:b3:7b:cf:58:13:7e:87:1a:ce:de: 61:ce:5a:de:69:00:3d:9f:49:72:5a:3d:53:2f:45: d8:2d:67:d9:65:fa:7b:67:97:6e:73:27:d1:08:08: ad:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:71:F6:A8:17:57:24:C1:93:C9:06:1B:27:96:46:71:77:B6:D7:4B X509v3 Authority Key Identifier: keyid:20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:5b:ef:90:fe:0b:80:14:a0:ec:96:14:17:70:5b:53:00:8d: 93:63:b9:ee:a9:7b:3e:d5:03:06:72:db:c0:fc:42:c2:36:2e: c4:b4:d5:b2:0a:3e:8e:0a:b6:01:57:25:a4:71:2e:c8:68:24: 28:18:cd:48:59:6a:e9:34:b5:16:f3:94:1d:9f:6b:d4:f3:2e: 4a:17:ce:7d:5c:7c:4b:61:be:61:0c:b7:d6:0f:17:db:f7:2b: 79:a5:59:b4:8b:06:52:9d:7d:f4:3a:82:4f:e8:98:87:ca:46: 07:b5:53:b2:9e:c1:b5:ae:50:07:31:91:51:93:04:51:c2:99: 9d:5d:89:74:9e:20:cb:6c:a6:d3:ad:6e:da:21:30:dc:e0:63: d5:d0:22:82:fd:43:73:7b:1e:50:c5:d0:bf:a9:d5:80:d0:61: 1c:67:a1:67:41:50:0c:8e:f2:bd:37:70:73:12:75:0a:9b:13: 78:ab:df:e1:d3:50:dd:45:54:58:af:90:49:c7:fe:f2:cc:eb: 87:1a:4f:b9:7d:fd:b2:ec:d2:c6:36:b8:db:0e:4c:62:74:f1: 73:9e:f8:5a:10:04:a4:2f:35:3e:48:a8:a6:45:dc:31:9f:48: af:54:9d:47:95:6b:78:59:c9:16:3e:dd:c5:93:ac:32:b0:6e: 1b:ff:f3:e5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUTzv24t240X6YP5Uf74Pf4SYjq98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4 MUJBNjlCNzAeFw0yNjA1MTIyMjAxMzlaFw0yNjA1MTQwMTQ1MzlaMDMxMTAvBgNV BAMTKDEzNzFGNkE4MTc1NzI0QzE5M0M5MDYxQjI3OTY0NjcxNzdCNkQ3NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe3ieYx55tDIASjQps5OrxlfqX XhOPMi5kDb03HI7oZH7zwWvBf20gfy0uHMEknjlIk3HU7t2TRXxsg79eKun/sW40 oXTQb6FQrSU9dFltOptJUVaO8D4PzPg3x4o0HwnPxmLPJ1f5GTFC46oVRXNXcHIC di4h2wY7wfJ2JRkXCO9a73mhHDI+IaLuqXbhFy5BEW02cPJJsQZD5RzKvtWkWn3D 1Z/D2JQD2vny5NjYDAK3lrGpHU6A/BRI6mjRHQrb7b0jwqPLtresQtI5oK/9NMsr R0iIs3vPWBN+hxrO3mHOWt5pAD2fSXJaPVMvRdgtZ9ll+ntnl25zJ9EICK0HAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUE3H2qBdXJMGTyQYbJ5ZGcXe210swHwYDVR0j BBgwFoAUIJFHIDgqH1K5UCEsE45eHoG6abcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzMvMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4MUJBNjlCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDkxNDcyMDM4MkExRjUyQjk1MDIxMkMx MzhFNUUxRTgxQkE2OUI3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y1MzJiOWViLTJmYWUtNDhhOC05NzkzLTMzZWVjMDY3Y2UzOS8zLzIwOTE0NzIw MzgyQTFGNTJCOTUwMjEyQzEzOEU1RTFFODFCQTY5QjcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAGW++Q /guAFKDslhQXcFtTAI2TY7nuqXs+1QMGctvA/ELCNi7EtNWyCj6OCrYBVyWkcS7I aCQoGM1IWWrpNLUW85Qdn2vU8y5KF859XHxLYb5hDLfWDxfb9yt5pVm0iwZSnX30 OoJP6JiHykYHtVOynsG1rlAHMZFRkwRRwpmdXYl0niDLbKbTrW7aITDc4GPV0CKC /UNzex5QxdC/qdWA0GEcZ6FnQVAMjvK9N3BzEnUKmxN4q9/h01DdRVRYr5BJx/7y zOuHGk+5ff2y7NLGNrjbDkxidPFznvhaEASkLzU+SKimRdwxn0ivVJ1HlWt4WckW Pt3Fk6wysG4b//Pl -----END CERTIFICATE-----Generated at Wed May 13 06:25:25 2026 by rpki-client