$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft File: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json) Hash identifier: UA24Q4bFpDgmz+oBtLF8ygXOXzcKyPyPgW4chFkVuU0= Subject key identifier: F2:81:7A:A9:3D:0E:BE:26:5E:81:2C:40:A5:37:EB:35:7D:09:86:D3 Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Certificate serial: 0FD43129F6553890FD49102ED21B33C21C333A57 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft Manifest number: 0446 Signing time: Fri 27 Mar 2026 05:49:38 +0000 Manifest this update: Fri 27 Mar 2026 05:44:38 +0000 Manifest next update: Sat 28 Mar 2026 09:03:38 +0000 Files and hashes: 1: 326131343a316563303a3a2f33312d3438203d3e203136353039.roa (hash: DO5U+zbxAW9dCHHkG8v0O5pLZTi9rHV+80EYsqI00GY=) 2: 326131343a316563313a3a2f33322d3332203d3e20323037323532.roa (hash: ZnCFtDlyKKIKHxL+mnWSwMiKEny7fbonjbSjngpcz7c=) 3: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: rD1drMlhgCHEm0vlVi8DONqmz75yH/sypTpIzdkNP6c=) 4: 326131343a316563373a633430303a3a2f34302d3438203d3e203438373030.roa (hash: LZc2AksEahD5rzoxMFxve6nJwmwqwYYZ+BLhaadaDDA=) 5: 326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa (hash: U8fXRRyT8emRE+fVUuy2ekIUYzd/0os3T2/COS8ejYg=) 6: 326131343a316563303a3a2f33312d3438203d3e203134363138.roa (hash: TNC4zrNVSYq6rg1HfzOLsFNL5cW5pcjjIopBseDA51Y=) 7: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: UJ9qCieadJk7oiD6GQ90/0FbE/4+8E/euEBax4BqkVQ=) 8: 326131343a316563313a376231303a3a2f34342d3438203d3e20323135363636.roa (hash: pZyYX9vqAixKUDIqsxujnSVA6UfFKeJc5iZ4yNtLX48=) 9: 326131343a316563313a376233303a3a2f34342d3438203d3e20323134393036.roa (hash: YRMori7doYSmuYrHuDGxvFWUqZxa6EqhEvjhhQlS2vI=) 10: 326131343a316563303a3a2f33312d3438203d3e203438373030.roa (hash: NfdCiPZo2V7z2IR8DOEcP9s1WlT0wPdEK10WCc6hh18=) 11: 326131343a316563313a376232303a3a2f34342d3438203d3e20323135303933.roa (hash: dVnYLOP17LHBFloAhm1YIONwpYCVs6bwv8Qels/37Kg=) 12: 326131343a316563373a633031303a3a2f34342d3434203d3e2030.roa (hash: SsdW0YpcJfef7CtWvRhhfCUEgjAhSHqFG1h0ACBR214=) 13: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: NDSS2hHdj8htIMoCQNzuGfJRE+FjfS7resxOlAoGNDM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 28 Mar 2026 06:12:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d4:31:29:f6:55:38:90:fd:49:10:2e:d2:1b:33:c2:1c:33:3a:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Validity Not Before: Mar 27 05:44:38 2026 GMT Not After : Mar 28 09:03:38 2026 GMT Subject: CN=F2817AA93D0EBE265E812C40A537EB357D0986D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:37:36:77:4d:9e:a8:d0:6d:00:ee:ad:26:39: 8b:81:d7:31:e4:a8:0c:11:2a:2d:7b:df:92:1b:cd: e0:b7:04:93:e3:da:84:6e:eb:2c:85:49:22:4f:8e: 41:33:87:ce:4e:39:6e:79:28:47:6b:e9:1b:bf:ae: 23:fe:e8:68:8b:85:40:fa:8d:27:82:5c:06:aa:59: da:5a:e6:8d:25:c6:db:d3:79:f1:f7:ca:18:0a:8e: 53:8b:9f:0e:3f:be:2d:fc:ea:cd:d5:08:c7:96:fd: e7:2d:0b:df:1c:be:ac:04:23:e3:8f:9b:3c:ff:09: 93:d8:1e:50:52:b1:6a:54:99:1c:09:d3:6e:aa:16: 46:7d:0f:f8:cb:7e:d1:66:94:87:c2:44:df:a0:84: 38:6c:f7:dc:26:f4:cb:01:0a:5e:0d:e8:90:f4:84: 7f:6f:7d:9e:fc:6d:6f:c9:ef:60:c2:26:2c:f1:48: 9a:1a:88:f7:bb:6d:8d:60:d1:55:55:ad:de:1f:b9: 9c:47:de:3a:cf:6e:8c:fb:6c:ef:0e:ee:cd:26:55: a0:04:20:9e:39:5a:83:e2:9c:92:1b:1b:c2:b6:b1: c5:2c:f4:45:c2:19:a9:79:4a:80:95:1a:b9:f1:74: 7a:27:23:8c:71:f6:d4:1c:56:24:dd:e9:93:72:06: 86:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:81:7A:A9:3D:0E:BE:26:5E:81:2C:40:A5:37:EB:35:7D:09:86:D3 X509v3 Authority Key Identifier: keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:a3:a4:11:60:e9:66:99:d5:86:36:e3:19:91:51:64:8e:1c: a9:e8:89:28:31:c1:af:6e:74:19:e4:29:b0:63:f9:84:54:7e: b2:34:60:2d:2d:b7:08:08:18:29:0c:81:eb:f7:8e:c0:94:19: 0c:bf:fd:4e:32:f7:c0:a5:62:1d:7b:d6:c1:39:75:6e:97:a4: b8:97:60:7c:c7:12:65:d8:4c:a1:ad:1a:1e:d8:6e:03:36:4b: d3:7a:c7:20:6d:5a:1a:ac:73:18:70:95:15:4d:c0:99:3f:21: 67:9f:20:65:59:bf:58:b5:dc:6e:53:bc:5b:6d:5a:2e:e2:bd: 11:8c:55:dc:cd:5e:d1:dd:60:c1:fc:46:87:58:24:0f:96:d9: 8c:56:35:3e:48:7f:a5:6b:d9:d4:de:bf:e0:a9:c7:ef:2e:29: 22:11:26:b7:b3:ae:ba:bf:b5:a9:24:4a:11:d1:7c:e7:ec:26: e8:9f:b5:d9:80:f6:ed:26:e3:dc:22:5f:93:9f:0e:f8:8a:c8: ab:c0:46:fe:8f:46:02:d0:93:9b:60:d6:bd:62:51:34:d7:37: 7e:a6:89:00:df:cb:82:21:0d:e2:f6:1e:82:f9:64:7d:3e:5f: e9:88:4b:19:da:1b:6f:71:0c:86:d5:52:bd:13:b2:fd:cf:72: 47:05:f8:9f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUD9QxKfZVOJD9SRAu0hszwhwzOlcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG NEFCREVDNjAeFw0yNjAzMjcwNTQ0MzhaFw0yNjAzMjgwOTAzMzhaMDMxMTAvBgNV BAMTKEYyODE3QUE5M0QwRUJFMjY1RTgxMkM0MEE1MzdFQjM1N0QwOTg2RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7NzZ3TZ6o0G0A7q0mOYuB1zHk qAwRKi1735IbzeC3BJPj2oRu6yyFSSJPjkEzh85OOW55KEdr6Ru/riP+6GiLhUD6 jSeCXAaqWdpa5o0lxtvTefH3yhgKjlOLnw4/vi386s3VCMeW/ectC98cvqwEI+OP mzz/CZPYHlBSsWpUmRwJ026qFkZ9D/jLftFmlIfCRN+ghDhs99wm9MsBCl4N6JD0 hH9vfZ78bW/J72DCJizxSJoaiPe7bY1g0VVVrd4fuZxH3jrPboz7bO8O7s0mVaAE IJ45WoPinJIbG8K2scUs9EXCGal5SoCVGrnxdHonI4xx9tQcViTd6ZNyBoZtAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU8oF6qT0OviZegSxApTfrNX0JhtMwHwYDVR0j BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD QkIzOTg3NkY0QUJERUM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJhZjczYTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS8wLzIwRjY5QzRD MTQ2MTM4Q0IwMTIxQzRDNENCQjM5ODc2RjRBQkRFQzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQADo6QR YOlmmdWGNuMZkVFkjhyp6IkoMcGvbnQZ5CmwY/mEVH6yNGAtLbcICBgpDIHr947A lBkMv/1OMvfApWIde9bBOXVul6S4l2B8xxJl2EyhrRoe2G4DNkvTescgbVoarHMY cJUVTcCZPyFnnyBlWb9YtdxuU7xbbVou4r0RjFXczV7R3WDB/EaHWCQPltmMVjU+ SH+la9nU3r/gqcfvLikiESa3s666v7WpJEoR0Xzn7Cbon7XZgPbtJuPcIl+Tnw74 isirwEb+j0YC0JObYNa9YlE01zd+pokA38uCIQ3i9h6C+WR9Pl/piEsZ2htvcQyG 1VK9E7L9z3JHBfif -----END CERTIFICATE-----Generated at Fri Mar 27 15:43:47 2026 by rpki-client