$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft File: 22BFD4E021547D030AC10B0213535D4C6968EEDE.mft (raw, json) Hash identifier: xDBkvxiZN7Rbv2Nk07Wv6f0mBWRZDi1S3qUawuF0628= Subject key identifier: B0:C1:27:3A:6C:D4:55:42:91:DE:FE:59:17:F9:67:A5:C4:E4:A8:7D Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede Certificate serial: 457864D4EA5AE80D2047979DFBE09C5C8717C163 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft Manifest number: 11 Signing time: Thu 05 Mar 2026 18:50:38 +0000 Manifest this update: Thu 05 Mar 2026 18:45:38 +0000 Manifest next update: Fri 06 Mar 2026 21:00:38 +0000 Files and hashes: 1: 38372e3235342e322e302f32342d3234203d3e20383334.roa (hash: 0lftYrBwhyfbi4cjY9zWfmHR2CJaW7nri13R884O3dA=) 2: 3231372e32352e31322e302f32342d3234203d3e203533333536.roa (hash: ISZePjQZHgjZYw73RzwsKrdIyiH3v0ys4nWleWv3vxk=) 3: 38372e3235342e31362e302f32342d3234203d3e203631333137.roa (hash: OnoBFru6gXkLx/IpdA8BMf1f3KgH5QjPForAWZMVmzo=) 4: 38372e3235342e31322e302f32332d3234203d3e20383334.roa (hash: UWjmZenZgQ6GpdGZbayi4FQY4UxY0dqXvzhbQdAIi5g=) 5: 3231372e32352e31352e302f32342d3234203d3e20383334.roa (hash: etjfV0kGb76d5lSxFiq8JUUbGdWAGGaQAAqGc0Sfyfo=) 6: 38372e3235342e31382e302f32332d3234203d3e20383334.roa (hash: Q4p501nKB0sgnI21+akfDBIvF6GWoCBkfDAhgfWAEgM=) 7: 38372e3235342e33312e302f32342d3234203d3e20323132333834.roa (hash: kuBs6hElF6wxCmWKuqHdTsZI2vk91hngsz1GJVgyb1o=) 8: 38372e3235342e332e302f32342d3234203d3e20313337343039.roa (hash: oOqDRHnQhKkW0bsS7sECikqkcHxGG+LEWNClGo/2tL4=) 9: 22BFD4E021547D030AC10B0213535D4C6968EEDE.crl (hash: 0LQXstLD1tgEFWiGmTL98vvkVxEI6Ao9B3qZNzckZ10=) 10: 3138352e3231302e3137302e302f32332d3233203d3e20383334.roa (hash: lXDhBA8H2d1LpAoql0c+vF9OP1+v0zqok15tPd+NtSc=) 11: 3231372e32352e342e302f32342d3234203d3e20313432313436.roa (hash: vZRhvTOHCjCN3qpqUAQpaZnKJPXOT/7YVpVSmsbplMQ=) 12: 3231372e32352e392e302f32342d3234203d3e203230393135.roa (hash: rmdhD9oEv5bK0HHyZCb7v/EPNkPHtC4nPe4iuyupLhE=) 13: 38372e3235342e31372e302f32342d3234203d3e203631333137.roa (hash: iUdPEp/zg1lgw8SWDOnC/cWw7iD/otvfqF3P7vlXliU=) 14: 38372e3235342e392e302f32342d3234203d3e20313534303439.roa (hash: Hq9PYTOQCseLfaxNiEXnFMG4fnzCVo7PsWTjAFrRtkw=) 15: 3231372e32352e312e302f32342d3234203d3e203631333137.roa (hash: AuTG5hLsCwUWbPjqPfLL3+sUc3GYo/fF3PPYDhERDx0=) 16: 38372e3235342e382e302f32342d3234203d3e203633303233.roa (hash: yvC8qtTXjiLI2wGfbH1IrWAtdVVn7Rg1KD5mabaKrfI=) 17: 3231372e32352e312e302f32342d3234203d3e203239383032.roa (hash: gVMFsL1+w+J00kOn7BuEjBsUXi6YaE8/Mve6X6O6dFo=) 18: 326130303a656163303a3a2f33322d3332203d3e203230393135.roa (hash: B/4WVaX1/RQfize8nvUY5uFmIYzrRdgUSdd1VX+7rB4=) 19: 38372e3235342e32392e302f32342d3234203d3e20383334.roa (hash: EY22VbjNlGcefMgcbkvZMeBmlRw1T/U4a2awyQKCH7c=) 20: 3231372e32352e332e302f32342d3234203d3e20383334.roa (hash: ruc7Sb6/pEHuwWQB0NlrWrQDuha6uU6uHeWIYFVfrBU=) 21: 3138352e3231302e3136382e302f32332d3234203d3e20383334.roa (hash: RQ/uL8UsJ/ViPU4JJGAxzpaVoEtQcBg901fUm5gCIec=) 22: 38372e3235342e31312e302f32342d3234203d3e20383334.roa (hash: R+azz9nLKyNU6dgOPMnSlskgJSHgrUg6U88QCwoeH8I=) 23: 38372e3235342e302e302f32332d3233203d3e20323037363435.roa (hash: Bt15oUjcprVGI2OHoJeHUu5XnHIcVhhgAZKYjYn6V5A=) 24: 38372e3235342e31302e302f32332d3234203d3e20383334.roa (hash: gtWS54K+PO4E4oLTUH11vJs7Wo2BTDfPQKFHefT0Vzc=) 25: 3231372e32352e31342e302f32342d3234203d3e2039333138.roa (hash: g2ofm16r16kl7irVfvgX1+7ziEvLdY7dJdeeSirOg4Y=) 26: 38372e3235342e32332e302f32342d3234203d3e20323135363732.roa (hash: /+BmUmf76rxab9lMUlp4SDJKTX/siHkrnlzW84acgzo=) 27: 38372e3235342e32322e302f32342d3234203d3e20383334.roa (hash: rBcnHeM9UN/n2/ZoIT3IiOmRRqgoBqMFBe8vdR0Fp3M=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Mar 2026 16:05:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:78:64:d4:ea:5a:e8:0d:20:47:97:9d:fb:e0:9c:5c:87:17:c1:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede Validity Not Before: Mar 5 18:45:38 2026 GMT Not After : Mar 6 21:00:38 2026 GMT Subject: CN=B0C1273A6CD4554291DEFE5917F967A5C4E4A87D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5f:d1:3e:da:e2:ee:94:6b:c3:b7:ce:63:74: 89:3d:dc:85:18:d6:7c:34:dd:17:18:e9:1b:7a:fa: 27:0f:8b:86:0d:2a:3a:33:e2:b5:e5:7c:99:c4:55: d4:ae:32:e4:60:20:1f:8a:1f:b3:10:9f:00:97:8c: 72:fa:f2:f1:c2:0c:68:3b:66:26:91:d0:fe:09:2f: 76:b6:0d:b4:44:bf:25:77:fc:a3:e9:e8:81:a8:15: ec:51:96:19:98:c0:70:7e:1c:cc:65:2c:e0:ea:9e: 42:d9:86:c2:a5:ea:14:ac:2e:84:eb:5b:c3:71:ae: 56:61:32:7e:81:28:00:89:04:9e:57:45:34:2d:f4: 1e:14:1b:cb:e4:5b:15:43:fb:ff:89:b1:15:32:a6: 88:03:b8:00:d7:37:64:1a:44:f5:db:77:b3:b3:b6: fa:dc:64:d5:9e:c2:e2:65:8a:ec:de:27:a0:36:52: dd:42:3d:c2:52:af:50:de:85:67:fc:41:eb:77:d8: 4c:5e:4f:c0:84:c2:3f:2c:50:dc:82:9b:d0:2e:61: 21:7c:c0:63:4f:45:c9:62:26:86:6f:60:23:c4:9d: cf:51:d9:cc:4d:07:6d:60:1e:95:60:99:e3:be:32: b8:eb:92:69:40:de:e4:5a:fa:1a:d4:d5:cc:12:d6: b2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C1:27:3A:6C:D4:55:42:91:DE:FE:59:17:F9:67:A5:C4:E4:A8:7D X509v3 Authority Key Identifier: keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:62:09:a4:1c:94:3b:31:15:20:7e:3d:e2:e8:6e:20:dd:d8: 61:21:11:c4:51:c0:6c:fe:3a:a8:d2:17:df:29:51:75:3e:4b: 1b:b1:9a:1b:70:c2:92:5c:73:30:53:6b:a1:21:7b:e8:a8:6f: a8:51:11:13:ef:65:12:34:ca:f3:f9:ac:ff:86:e7:54:78:04: 08:30:aa:ad:17:70:1c:b4:b3:8c:80:3d:32:27:03:0a:72:0d: a1:1a:31:09:04:c1:de:35:41:ff:c5:57:19:cf:cb:d2:6d:60: 4d:31:9a:c5:1b:a6:69:7a:c7:12:6a:02:b7:37:13:54:b2:10: 24:a9:1d:40:fa:79:83:47:99:15:cc:ca:d0:e6:3a:fd:80:8b: 3a:63:9c:75:02:f9:e4:0b:f0:29:b8:b6:72:f4:70:16:77:b4: f0:94:36:86:ba:77:6c:e1:6a:b6:bb:66:f0:e6:33:bf:70:51: 8c:5d:05:73:95:ca:f3:49:ab:0b:1b:bb:34:b7:9b:52:13:12: c8:9d:53:ba:d6:e5:bd:cb:25:b8:5a:17:01:8b:44:e1:ca:be: 22:95:ce:cf:9f:bb:b3:7d:cc:cf:92:97:c0:0b:ca:4f:bb:77: 0f:9b:14:9a:13:66:a7:9c:27:9b:af:96:1a:f0:40:c2:0a:0e: d9:0e:e0:b8 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURXhk1Opa6A0gR5ed++CcXIcXwWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJiZmQ0ZTAyMTU0N2QwMzBhYzEwYjAyMTM1MzVkNGM2 OTY4ZWVkZTAeFw0yNjAzMDUxODQ1MzhaFw0yNjAzMDYyMTAwMzhaMDMxMTAvBgNV BAMTKEIwQzEyNzNBNkNENDU1NDI5MURFRkU1OTE3Rjk2N0E1QzRFNEE4N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSX9E+2uLulGvDt85jdIk93IUY 1nw03RcY6Rt6+icPi4YNKjoz4rXlfJnEVdSuMuRgIB+KH7MQnwCXjHL68vHCDGg7 ZiaR0P4JL3a2DbREvyV3/KPp6IGoFexRlhmYwHB+HMxlLODqnkLZhsKl6hSsLoTr W8NxrlZhMn6BKACJBJ5XRTQt9B4UG8vkWxVD+/+JsRUypogDuADXN2QaRPXbd7Oz tvrcZNWewuJliuzeJ6A2Ut1CPcJSr1DehWf8Qet32ExeT8CEwj8sUNyCm9AuYSF8 wGNPRcliJoZvYCPEnc9R2cxNB21gHpVgmeO+MrjrkmlA3uRa+hrU1cwS1rK9AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUsMEnOmzUVUKR3v5ZF/lnpcTkqH0wHwYDVR0j BBgwFoAUIr/U4CFUfQMKwQsCE1NdTGlo7t4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNhYWNkMTctYmY5ZC00N2RiLTg2NGQtZjljN2MyYmUx ODNhLzAvMjJCRkQ0RTAyMTU0N0QwMzBBQzEwQjAyMTM1MzVENEM2OTY4RUVERS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lyX1U0Q0ZVZlFNS3dRc0NFMU5kVEds bzd0NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yM2FhY2QxNy1i ZjlkLTQ3ZGItODY0ZC1mOWM3YzJiZTE4M2EvMC8yMkJGRDRFMDIxNTQ3RDAzMEFD MTBCMDIxMzUzNUQ0QzY5NjhFRURFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2IJpByUOzEVIH494uhu IN3YYSERxFHAbP46qNIX3ylRdT5LG7GaG3DCklxzMFNroSF76KhvqFERE+9lEjTK 8/ms/4bnVHgECDCqrRdwHLSzjIA9MicDCnINoRoxCQTB3jVB/8VXGc/L0m1gTTGa xRumaXrHEmoCtzcTVLIQJKkdQPp5g0eZFczK0OY6/YCLOmOcdQL55AvwKbi2cvRw Fne08JQ2hrp3bOFqtrtm8OYzv3BRjF0Fc5XK80mrCxu7NLebUhMSyJ1Tutblvcsl uFoXAYtE4cq+IpXOz5+7s33Mz5KXwAvKT7t3D5sUmhNmp5wnm6+WGvBAwgoO2Q7g uA== -----END CERTIFICATE-----Generated at Thu Mar 5 22:00:20 2026 by rpki-client