$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft File: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json) Hash identifier: 4tEiShGTcy/Oyd5MgqJ99l10v2iFV2kV3gcL1WBSMgk= Subject key identifier: 16:2E:33:88:17:B5:39:B0:42:9F:36:AC:27:98:AF:63:04:BF:D2:88 Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Certificate serial: 0679ADA3F583AD22FBA66105B47EF672C2D8FD34 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft Manifest number: 0632 Signing time: Wed 12 Aug 2026 16:18:04 +0000 Manifest this update: Wed 12 Aug 2026 16:13:04 +0000 Manifest next update: Thu 13 Aug 2026 17:49:04 +0000 Files and hashes: 1: 326131343a316563313a376231303a3a2f34342d3438203d3e20323135363636.roa (hash: O5hXxs076gE3Ctu2AmKUIcSxIccZcu0zLTOjhJ6fNNY=) 2: 326131343a316563313a313030303a3a2f33362d3438203d3e20323135313336.roa (hash: Hy38nW7g7jg3g8NEUSSR9hX3QcE4UfBQyRuLYa5OQGw=) 3: 326131343a316563373a633430303a3a2f34302d3438203d3e203438373030.roa (hash: M7y4yNzKisPGrMDI6N/h2uK0LmUwgVtJCXB3eT1YcCs=) 4: 326131343a316563313a376235303a3a2f34342d3438203d3e20323135363835.roa (hash: IzwkS06+TU6xlgmjKohwCnvrPjgEE+53/+TvwhGB5Kg=) 5: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: wCopZ2OewWa5DWETc+1nq11mThY7E3c9DiHAt4K212w=) 6: 326131343a316563313a376233303a3a2f34342d3438203d3e20323134393036.roa (hash: YRMori7doYSmuYrHuDGxvFWUqZxa6EqhEvjhhQlS2vI=) 7: 326131343a316563313a313030303a3a2f33362d3438203d3e20323131303636.roa (hash: VwMdcB7cjunOknijcMaBRHJjTJhyW3Liym/2KH9Cpo0=) 8: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: rD1drMlhgCHEm0vlVi8DONqmz75yH/sypTpIzdkNP6c=) 9: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: NDSS2hHdj8htIMoCQNzuGfJRE+FjfS7resxOlAoGNDM=) 10: 326131343a316563313a3a2f33322d3332203d3e20323037323532.roa (hash: wCpGpHKdqFN1DO1NvTXNItL3x3NUD8VGRqAFwBrJITc=) 11: 326131343a316563313a313730303a3a2f34302d3430203d3e20323139353233.roa (hash: A8bwWH9/ybdeySNN01RK//BZzg4rKSE3B00g1VeCR5M=) 12: 326131343a316563303a3a2f33322d3332203d3e2030.roa (hash: l1LgH+twMvgdn7/1KBWGxkEdCOcMXQ/E9AMQuJ/4pWU=) 13: 326131343a316563303a3a2f33312d3438203d3e203438373030.roa (hash: 5zFC0aBKrn16Glyaue2oFptFutD2x5iVGxip/IIewrc=) 14: 326131343a316563313a376232303a3a2f34342d3438203d3e20323135303933.roa (hash: dVnYLOP17LHBFloAhm1YIONwpYCVs6bwv8Qels/37Kg=) 15: 326131343a316563313a376234303a3a2f34342d3438203d3e20323139353339.roa (hash: lk2g+VMPJ2e0ffh4BXNf9T04tdPmSZpAFUml3dW+JwM=) 16: 326131343a316563373a633031303a3a2f34342d3434203d3e2030.roa (hash: 3/JDrgPcwa3QkItCqhf73S0kH72VYqnJSSE72cvYDCQ=) 17: 326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa (hash: 8VhdvV/ADl1dQyHcZOJm0iqoZEaI9FAWV7wRLCn1Kkc=) 18: 326131343a316563303a3a2f33312d3438203d3e203134363138.roa (hash: 0MGh72HtcBIx2dyROH4vCwTGrkjWjpybf+czr46U9xA=) 19: 326131343a316563303a3a2f33312d3438203d3e203136353039.roa (hash: EOUQ1JZ1oz2xZOU8+mEukp9ybbKV7scsmw0lQsJAxX4=) 20: 326131343a316563313a313630303a3a2f34302d3430203d3e20323139353233.roa (hash: 9E1PsTjd11hXDLZSZeoJaNnT7ONzxHIoAoZBFV00R+U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 13 Aug 2026 10:06:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:79:ad:a3:f5:83:ad:22:fb:a6:61:05:b4:7e:f6:72:c2:d8:fd:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Validity Not Before: Aug 12 16:13:04 2026 GMT Not After : Aug 13 17:49:04 2026 GMT Subject: CN=162E338817B539B0429F36AC2798AF6304BFD288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:44:01:87:cd:ef:27:fd:07:39:e1:c5:1e:89: 65:e3:c7:0d:1f:cc:37:e2:2b:70:18:ed:d6:95:be: c4:51:84:8a:8b:d5:f8:20:b3:de:61:57:4a:7d:f0: 50:f4:c2:a6:78:12:2b:14:4d:68:5e:1e:b0:5a:97: 2c:2b:a5:9f:1a:de:9c:af:96:ec:21:2a:86:bc:7e: fa:69:5c:a7:b4:cf:f2:78:d8:0f:b4:8e:8b:dc:b1: e3:a2:76:42:de:90:85:b0:0e:b9:3a:af:ba:57:fe: c5:3b:5e:42:b1:96:6a:72:6c:51:a8:30:2c:6d:ee: 62:9c:94:a7:d2:98:14:9a:3b:cc:67:e8:c6:69:a6: fa:af:77:30:97:dd:0c:b5:f5:29:dd:47:c0:64:37: 22:33:92:c4:3d:c7:8c:42:05:51:20:27:a9:2a:db: 6e:54:d9:3c:74:e8:e7:dc:9c:9d:63:75:8f:df:23: fc:0a:9d:0d:7a:d9:d2:ca:15:de:c9:63:e6:58:f6: fc:2b:22:06:1f:17:7d:59:a0:77:91:b6:a8:80:c0: 66:4e:cd:74:7a:7b:ad:50:d9:df:b9:5c:4d:10:d5: 5e:6c:85:50:18:7c:dd:9e:22:90:bd:00:a6:7a:4b: 3f:60:3e:fc:fe:46:ce:6d:24:fc:3f:57:d0:fa:2e: 52:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2E:33:88:17:B5:39:B0:42:9F:36:AC:27:98:AF:63:04:BF:D2:88 X509v3 Authority Key Identifier: keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:f4:b2:8d:a4:ee:05:63:16:8f:44:e4:7c:19:96:ce:ca:76: 71:07:f0:d7:a0:ed:ad:e7:08:88:98:7a:c5:8e:6f:89:81:2c: 30:d1:0f:1a:49:45:a2:d7:e5:b2:f0:ca:d7:d5:4b:d9:46:13: c2:ee:68:2a:7f:4e:7f:44:a4:d7:dc:25:71:1a:35:38:28:e8: 17:ae:75:95:7c:9a:22:6b:93:64:f1:57:c6:09:17:f7:ba:8c: 67:ca:fb:d4:9a:f8:12:f0:23:b9:db:cb:8a:b0:91:40:39:14: 53:d9:2d:b9:29:2b:3b:59:e2:5d:36:c5:df:da:45:a2:f3:13: f7:72:d4:95:90:81:6c:bb:2b:fb:b1:93:7e:81:9c:66:2c:77: 2a:88:5b:a0:30:0c:7b:2e:00:56:c1:01:3d:58:f8:b2:b2:3c: 91:45:08:2b:67:99:03:84:a4:1c:85:f3:1f:8b:67:dc:cb:77: 30:41:4e:45:50:aa:9b:01:6e:f0:96:31:4c:e9:2e:e1:b0:ff: 1e:d3:f6:4c:a8:9a:3c:42:ef:c6:d6:32:dc:9c:d6:87:30:3a: 00:d8:a3:1c:3e:ca:03:fc:01:73:f2:65:22:02:b7:1b:8f:ef: 47:91:9b:1f:4e:7f:a3:b9:4f:2c:0f:7a:51:1c:b4:fd:e3:48: 57:50:59:77 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUBnmto/WDrSL7pmEFtH72csLY/TQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG NEFCREVDNjAeFw0yNjA4MTIxNjEzMDRaFw0yNjA4MTMxNzQ5MDRaMDMxMTAvBgNV BAMTKDE2MkUzMzg4MTdCNTM5QjA0MjlGMzZBQzI3OThBRjYzMDRCRkQyODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeRAGHze8n/Qc54cUeiWXjxw0f zDfiK3AY7daVvsRRhIqL1fggs95hV0p98FD0wqZ4EisUTWheHrBalywrpZ8a3pyv luwhKoa8fvppXKe0z/J42A+0jovcseOidkLekIWwDrk6r7pX/sU7XkKxlmpybFGo MCxt7mKclKfSmBSaO8xn6MZppvqvdzCX3Qy19SndR8BkNyIzksQ9x4xCBVEgJ6kq 225U2Tx06OfcnJ1jdY/fI/wKnQ162dLKFd7JY+ZY9vwrIgYfF31ZoHeRtqiAwGZO zXR6e61Q2d+5XE0Q1V5shVAYfN2eIpC9AKZ6Sz9gPvz+Rs5tJPw/V9D6LlKbAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUFi4ziBe1ObBCnzasJ5ivYwS/0ogwHwYDVR0j BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD QkIzOTg3NkY0QUJERUM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJhZjczYTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS8wLzIwRjY5QzRD MTQ2MTM4Q0IwMTIxQzRDNENCQjM5ODc2RjRBQkRFQzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAB9LKN pO4FYxaPROR8GZbOynZxB/DXoO2t5wiImHrFjm+JgSww0Q8aSUWi1+Wy8MrX1UvZ RhPC7mgqf05/RKTX3CVxGjU4KOgXrnWVfJoia5Nk8VfGCRf3uoxnyvvUmvgS8CO5 28uKsJFAORRT2S25KSs7WeJdNsXf2kWi8xP3ctSVkIFsuyv7sZN+gZxmLHcqiFug MAx7LgBWwQE9WPiysjyRRQgrZ5kDhKQchfMfi2fcy3cwQU5FUKqbAW7wljFM6S7h sP8e0/ZMqJo8Qu/G1jLcnNaHMDoA2KMcPsoD/AFz8mUiArcbj+9HkZsfTn+juU8s D3pRHLT940hXUFl3 -----END CERTIFICATE-----Generated at Wed Aug 12 20:20:47 2026 by rpki-client