$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft File: 22BFD4E021547D030AC10B0213535D4C6968EEDE.mft (raw, json) Hash identifier: gJE2c7DPu4x8WUQa0LAzTfJDT07rXxe7Sh55m72Zn5c= Subject key identifier: E1:90:3B:E1:D8:2F:78:B8:6D:DF:90:7C:D0:52:0D:61:48:48:D6:3D Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede Certificate serial: 16368F9B4DEA415EED69A0FD6D8457C68C8AD660 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft Manifest number: 01DA Signing time: Mon 19 Oct 2026 11:06:34 +0000 Manifest this update: Mon 19 Oct 2026 11:01:34 +0000 Manifest next update: Tue 20 Oct 2026 13:51:34 +0000 Files and hashes: 1: 3138352e3231302e3136392e302f32342d3234203d3e203537303433.roa (hash: 7z9K9FbgeMuXCaln/1hsSe4DLUK7TEmfgfG1Y1Dfr7g=) 2: 38372e3235342e362e302f32332d3234203d3e20383334.roa (hash: tfVvEhgafJFq3DRHglA/EFHAHlZh/KyEJcqOLgxf+hg=) 3: 3138352e3231302e3137302e302f32332d3233203d3e20383334.roa (hash: lXDhBA8H2d1LpAoql0c+vF9OP1+v0zqok15tPd+NtSc=) 4: 3231372e32352e31302e302f32342d3234203d3e20383334.roa (hash: hfJ4SibvFwDIroIB4sGwG6yD3Breq9HTjicnMOM55ww=) 5: 38372e3235342e32312e302f32342d3234203d3e20323138393131.roa (hash: 7tSYuQ71mqHiPabmM7s3mhhfcknamp56jVy7dHHL490=) 6: 38372e3235342e32382e302f32342d3234203d3e203438303131.roa (hash: 8oJZ/FjkgQU0NuXFdCxfdmf+Mh8lECUVr3u2Hj4Jb0s=) 7: 38372e3235342e31302e302f32332d3234203d3e20383334.roa (hash: l0t8ICvVIvlIV+AR+CpQg130G3E7cVDVhiMIlHw2OaQ=) 8: 38372e3235342e31332e302f32342d3234203d3e20323036303932.roa (hash: oUikqYBVi4RcjOhDQmNNaH8TAOGVNq7wtpKIRIIaXQc=) 9: 3231372e32352e31332e302f32342d3234203d3e203133333335.roa (hash: io4UFoc1YGnqjZfuSBnWpQH/OPOtN9A1OFdVrMznZWc=) 10: 38372e3235342e32342e302f32342d3234203d3e20323138363235.roa (hash: sTTe5OsbHCgQiAmQMPOzIV1LQbXo98I0ZmLtX2GsdFs=) 11: 38372e3235342e33312e302f32342d3234203d3e20323132333834.roa (hash: kuBs6hElF6wxCmWKuqHdTsZI2vk91hngsz1GJVgyb1o=) 12: 38372e3235342e32322e302f32332d3234203d3e20323735373134.roa (hash: Q017uW83uFb8COwcV2Dq8d6iP2iHdliF99e4gCzHkCU=) 13: 3231372e32352e342e302f32342d3234203d3e20313432313436.roa (hash: vZRhvTOHCjCN3qpqUAQpaZnKJPXOT/7YVpVSmsbplMQ=) 14: 3231372e32352e31342e302f32342d3234203d3e20323138393131.roa (hash: 6zBnZAV6U4SxORPivplOWbpDZeUBoKVCeSnCOrEOuro=) 15: 326130303a656163303a3a2f33322d3332203d3e203230393135.roa (hash: B/4WVaX1/RQfize8nvUY5uFmIYzrRdgUSdd1VX+7rB4=) 16: 38372e3235342e31372e302f32342d3234203d3e203631333137.roa (hash: iUdPEp/zg1lgw8SWDOnC/cWw7iD/otvfqF3P7vlXliU=) 17: 38372e3235342e32372e302f32342d3234203d3e20323036303932.roa (hash: Xuw3TAANRJRfZ6808E5bRrhDo88u4xKeZ2EmRQyfhRE=) 18: 38372e3235342e31342e302f32342d3234203d3e20323138383632.roa (hash: F1OX6LNWl+YwC+chgvQSQD6NIxsSYKS/34Wqd3CKlgY=) 19: 38372e3235342e382e302f32342d3234203d3e203633303233.roa (hash: yvC8qtTXjiLI2wGfbH1IrWAtdVVn7Rg1KD5mabaKrfI=) 20: 3231372e32352e31312e302f32342d3234203d3e203432383331.roa (hash: LBGC7WX7bJkBy0/v1ZbPU/RfYLNVgPcvPJyw+DpE2j8=) 21: 3231372e32352e31342e302f32342d3234203d3e20313938343735.roa (hash: 4/AGSq6kBSxukgG2E7JQaHX1UFWVm9CjEqmLxqxX2LM=) 22: 22BFD4E021547D030AC10B0213535D4C6968EEDE.crl (hash: 3she0+YQSyqxZ3vOsNS4xfDrfdnoaGQE5tlwhDyFd98=) 23: 38372e3235342e32362e302f32342d3234203d3e20323138383239.roa (hash: E6a3DUIrDtWaQWEAr7GxRUGI6lo4FcU/j93xxkkfpm8=) 24: 38372e3235342e31362e302f32342d3234203d3e203631333137.roa (hash: OnoBFru6gXkLx/IpdA8BMf1f3KgH5QjPForAWZMVmzo=) 25: 38372e3235342e32352e302f32342d3234203d3e20383334.roa (hash: TGOtG3amXx0E1MjepLoFOD14iGF8L8gwbtptYoy5hLo=) 26: 3231372e32352e392e302f32342d3234203d3e203230393135.roa (hash: rmdhD9oEv5bK0HHyZCb7v/EPNkPHtC4nPe4iuyupLhE=) 27: 38372e3235342e31352e302f32342d3234203d3e20313532373236.roa (hash: GSSgH83pI/WSimA4p0HnpB9Vc7IOSSfTc+beOvXRhGU=) 28: 38372e3235342e352e302f32342d3234203d3e20323036303932.roa (hash: 5AbdKFmtNdu0I9ZynCaAwms1EqYUPiTBICwx1LtjAT4=) 29: 38372e3235342e322e302f32342d3234203d3e20383334.roa (hash: 0lftYrBwhyfbi4cjY9zWfmHR2CJaW7nri13R884O3dA=) 30: 3138352e3231302e3136382e302f32342d3234203d3e20313436383133.roa (hash: flQC2PRbohLv8iqDkeysEDTcV28G3GM4WvRcY2IJVyM=) 31: 38372e3235342e392e302f32342d3234203d3e20383334.roa (hash: 9xNWK0CP8AKiSnG1dUeeFmXs6klwdHgCE4UZ1NbhInI=) 32: 38372e3235342e302e302f32332d3233203d3e20323037363435.roa (hash: Bt15oUjcprVGI2OHoJeHUu5XnHIcVhhgAZKYjYn6V5A=) 33: 38372e3235342e31382e302f32332d3234203d3e20383334.roa (hash: Q4p501nKB0sgnI21+akfDBIvF6GWoCBkfDAhgfWAEgM=) 34: 3231372e32352e31352e302f32342d3234203d3e20383334.roa (hash: 82I4Zqw9/UH43gPIfCnu9a7euuJzLb9LUOWbqqBnoNY=) 35: 38372e3235342e31322e302f32342d3234203d3e20383334.roa (hash: Csmnwo2TPrFnpdtdygd8M5axyO7EMgidxtaGyRO6HZ8=) 36: 38372e3235342e332e302f32342d3234203d3e20313337343039.roa (hash: oOqDRHnQhKkW0bsS7sECikqkcHxGG+LEWNClGo/2tL4=) 37: 3231372e32352e31342e302f32342d3234203d3e20323139303735.roa (hash: PRHelZeaYB0AdVnwbP3lCCm6w0hExVgIIITX5Ej+gHM=) 38: 3231372e32352e362e302f32332d3234203d3e20383334.roa (hash: kuLwFCmf8Whna0mXwpfLAstA+xJncXgqXwYveSIDWeI=) 39: 3231372e32352e332e302f32342d3234203d3e203230343733.roa (hash: Gtvwy4O2g92Wl34q1NG2a1KSHDIDcCrqvni9SpsOlEs=) 40: 38372e3235342e342e302f32342d3234203d3e20313532313739.roa (hash: Y+fm5Z1hQ5CX1kAf8N1IWb6MLSFELQii0Oe4LqXPgVI=) 41: 38372e3235342e32302e302f32342d3234203d3e20323138383837.roa (hash: ZhpNPPOoxuBKWgyygAwSStAMQzGmmwb/Gzjd7NA4m2g=) 42: 38372e3235342e33312e302f32342d3234203d3e20323030303137.roa (hash: lbbXKkkoJ4X5dFgdoGsgrLdnfR7I5el1vS65pf+Zkis=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 13:51:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:36:8f:9b:4d:ea:41:5e:ed:69:a0:fd:6d:84:57:c6:8c:8a:d6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede Validity Not Before: Oct 19 11:01:34 2026 GMT Not After : Oct 20 13:51:34 2026 GMT Subject: CN=E1903BE1D82F78B86DDF907CD0520D614848D63D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:58:25:4d:fc:b9:60:1c:2e:2f:dc:6c:04:4c: c9:0a:a5:12:21:77:ad:12:75:02:a8:58:bb:f4:c2: 67:11:44:fe:6c:4d:3a:6c:23:81:6f:4f:55:b3:de: 92:df:9a:1d:b7:5d:1a:5b:b4:df:96:48:fa:46:e9: 06:6b:9c:8f:6c:87:1b:73:6a:72:f3:6d:0d:30:41: 23:5e:f8:0e:48:ae:52:ca:a7:09:13:13:55:80:4b: 62:22:1b:ce:9b:47:00:5a:47:05:6b:7f:d5:fe:5a: 2e:26:87:41:dc:bb:56:f9:a5:b5:6c:be:10:0b:01: 74:c8:bf:77:fc:32:a4:5d:d4:7b:23:42:b4:1a:ca: 70:d3:d6:76:ea:cf:e9:a5:2f:a6:2f:ba:cf:8b:dc: db:09:52:29:9c:3a:1b:0e:df:85:2a:ef:7e:0b:ec: db:0d:2d:96:1f:4f:4f:c2:f8:fa:e9:6c:f5:c5:8f: 78:e0:cb:c3:f7:f1:b8:fc:86:91:8e:f0:53:c2:85: ad:05:b3:93:d0:ca:02:10:79:5a:98:2b:d3:1f:85: 24:c4:07:08:75:6e:e8:f9:af:b1:35:0a:a0:99:7f: 1d:c1:3d:d2:71:34:b4:aa:19:ab:31:4f:ab:31:75: 59:fb:e5:32:33:71:20:9b:1e:7a:54:ff:a5:0a:38: 59:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:90:3B:E1:D8:2F:78:B8:6D:DF:90:7C:D0:52:0D:61:48:48:D6:3D X509v3 Authority Key Identifier: keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:e4:c7:0a:63:46:26:20:87:ff:0a:df:69:8a:e9:44:ac:35: 3a:fd:28:16:55:bc:7d:2f:cb:9e:74:5c:93:53:4c:f0:d9:a3: 54:d7:c7:0c:08:7d:84:11:13:78:50:1d:99:cd:01:ee:45:71: 36:e6:60:3a:c6:aa:bd:9f:6a:17:ba:aa:1c:63:d0:dc:6b:50: 8e:2e:71:78:2c:54:6f:38:f1:69:51:18:7e:e4:00:97:d3:49: 66:42:26:10:d2:bb:4f:96:3b:3f:7d:3d:02:d9:bf:ab:5d:4a: 5f:e3:04:17:31:4f:c1:ed:d9:6a:70:83:8f:6d:63:7b:19:08: f8:55:8d:f8:b2:52:ee:12:12:b0:78:86:12:a6:39:f5:b9:62: 84:9c:56:8e:51:d3:cf:7b:9e:44:0b:80:71:1b:cf:48:02:2c: 91:75:15:56:90:71:32:5b:03:8b:10:3f:eb:4a:22:b1:6c:bb: 03:5d:79:04:50:68:27:b8:36:14:59:26:ca:23:6f:35:02:00: 2d:6e:d8:d9:27:e9:af:e1:05:c3:c6:70:8a:93:d0:c4:7c:41: 15:a7:81:da:09:56:b9:26:4a:20:06:44:af:17:c4:da:72:70: a0:4f:bd:19:bc:f3:9a:cd:cf:95:73:f1:b3:95:1a:fd:34:c1: af:d9:2e:0a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFjaPm03qQV7taaD9bYRXxoyK1mAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJiZmQ0ZTAyMTU0N2QwMzBhYzEwYjAyMTM1MzVkNGM2 OTY4ZWVkZTAeFw0yNjEwMTkxMTAxMzRaFw0yNjEwMjAxMzUxMzRaMDMxMTAvBgNV BAMTKEUxOTAzQkUxRDgyRjc4Qjg2RERGOTA3Q0QwNTIwRDYxNDg0OEQ2M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkWCVN/LlgHC4v3GwETMkKpRIh d60SdQKoWLv0wmcRRP5sTTpsI4FvT1Wz3pLfmh23XRpbtN+WSPpG6QZrnI9shxtz anLzbQ0wQSNe+A5IrlLKpwkTE1WAS2IiG86bRwBaRwVrf9X+Wi4mh0Hcu1b5pbVs vhALAXTIv3f8MqRd1HsjQrQaynDT1nbqz+mlL6Yvus+L3NsJUimcOhsO34Uq734L 7NsNLZYfT0/C+PrpbPXFj3jgy8P38bj8hpGO8FPCha0Fs5PQygIQeVqYK9MfhSTE Bwh1buj5r7E1CqCZfx3BPdJxNLSqGasxT6sxdVn75TIzcSCbHnpU/6UKOFmFAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU4ZA74dgveLht35B80FINYUhI1j0wHwYDVR0j BBgwFoAUIr/U4CFUfQMKwQsCE1NdTGlo7t4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNhYWNkMTctYmY5ZC00N2RiLTg2NGQtZjljN2MyYmUx ODNhLzAvMjJCRkQ0RTAyMTU0N0QwMzBBQzEwQjAyMTM1MzVENEM2OTY4RUVERS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lyX1U0Q0ZVZlFNS3dRc0NFMU5kVEds bzd0NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yM2FhY2QxNy1i ZjlkLTQ3ZGItODY0ZC1mOWM3YzJiZTE4M2EvMC8yMkJGRDRFMDIxNTQ3RDAzMEFD MTBCMDIxMzUzNUQ0QzY5NjhFRURFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVeTHCmNGJiCH/wrfaYrp RKw1Ov0oFlW8fS/LnnRck1NM8NmjVNfHDAh9hBETeFAdmc0B7kVxNuZgOsaqvZ9q F7qqHGPQ3GtQji5xeCxUbzjxaVEYfuQAl9NJZkImENK7T5Y7P309Atm/q11KX+ME FzFPwe3ZanCDj21jexkI+FWN+LJS7hISsHiGEqY59blihJxWjlHTz3ueRAuAcRvP SAIskXUVVpBxMlsDixA/60oisWy7A115BFBoJ7g2FFkmyiNvNQIALW7Y2Sfpr+EF w8ZwipPQxHxBFaeB2glWuSZKIAZErxfE2nJwoE+9Gbzzms3PlXPxs5Ua/TTBr9ku Cg== -----END CERTIFICATE-----Generated at Tue Oct 20 06:40:22 2026 by rpki-client