$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft File: 38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json) Hash identifier: iXwVsbfyIF2uan/rAL6reXpkj7zAyyCZEpfCBVy/ap0= Subject key identifier: 25:AE:11:D3:6E:90:36:D8:83:32:C3:40:C8:99:78:9B:E2:82:14:E3 Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8 Certificate serial: 39A3C692B78D41E5260622B746E8FD0FB9CC498A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft Manifest number: 032A Signing time: Fri 17 Jul 2026 10:20:00 +0000 Manifest this update: Fri 17 Jul 2026 10:15:00 +0000 Manifest next update: Sat 18 Jul 2026 12:19:00 +0000 Files and hashes: 1: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: DOvKVeAcOxkNybkMS9ylFdnOy9WAJnB82IVDJTGNOcA=) 2: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: QJBMGqM6yaqk5niJkAuqPHI8VvVSx/j3kqEzba0aJEs=) 3: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: Oi2IQdPDXNgENY6RArFV2X9hiizOz4Z+Sr1U4VYXBoc=) 4: 33312e3138352e3130342e302f32342d3234203d3e203433383437.roa (hash: cRqYQiRVVInanzag9EpWaHhBmtu84FJoIPt+81tU2Nw=) 5: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: BDHilFVFazV1NVQVasFrYxHm84RYPEPgutds1qndvSo=) 6: 3138352e35382e3135362e302f32342d3234203d3e203633303939.roa (hash: DC0uMXuyrSg4UTnt8X12aE89X4eMjCQrPVHEP/8iDw8=) 7: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: p+7/KH9Gino5dyAVrFxOekf7mKoCoRCkuvZ0bCXigR4=) 8: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: e5s2Yb7TVZML9070ZZ1W7yMbNeK9i8gaNwxWx8a/KY8=) 9: 34362e3138322e31362e302f32332d3234203d3e203433383437.roa (hash: F7W4Y0kopCNp9aANYttCzP7MEuweGRC/BEFBXL6atVg=) 10: 3138352e35382e3135382e302f32342d3234203d3e203239303636.roa (hash: V5B4QzWLoE4oAz8O3q7zQJ3sjBQn40pU580oRG+qryA=) 11: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: iRELkqpaBbCAlaM6y+J6q4kh+pIWEdfXLorHhotW+GY=) 12: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: bVWg5FT0q2sCo7QMK6bLu4l3oPAGVseUqslWoQKo1ZE=) 13: 3138352e35382e3135372e302f32342d3234203d3e20323038303633.roa (hash: U8pAF8O/Eli71dyqa/IEGmD/EnmCJf29XWZJsJoO2Kw=) 14: 326130323a323937303a3a2f32392d3438203d3e203433383437.roa (hash: AQQ26lv3mFMwuJYalDQOTND7aBaRxrpCSBYyfjNgtdc=) 15: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: CvE/2nozaB8au2uvpxJMY+EdD8m6tEw4CMkYGuLnkDo=) 16: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: 26dymixRUGGYjsbH8YaqhXyRXEQ3TQKBfTk9MxYv13g=) 17: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: Z+WIv07j1sBVImJqjc9zRKxTh7Kgz0Src+x8TbAlpmA=) 18: 34362e3138322e31382e302f32332d3234203d3e203433383437.roa (hash: DgeeTdS1cV2ARBxXa3eeMqv+51T6WTIRd1T4HPr/8JQ=) 19: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: RRKi1JjdgrwKCFAb2NwHADxT8i70yn0i5n0X0HMmC+E=) 20: 33312e3138352e3130352e302f32342d3234203d3e20323130363939.roa (hash: 5S0IvbVNk6KE/CUqhOCj7rmzwdduYx2Ci6hKBhe3Hsg=) 21: 33312e3138352e3130372e302f32342d3234203d3e20323134323038.roa (hash: 8fHWRHCVBN3ZxoELGEiUX2uucky87/OuM6uDPtuM3kI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Jul 2026 12:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:a3:c6:92:b7:8d:41:e5:26:06:22:b7:46:e8:fd:0f:b9:cc:49:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8 Validity Not Before: Jul 17 10:15:00 2026 GMT Not After : Jul 18 12:19:00 2026 GMT Subject: CN=25AE11D36E9036D88332C340C899789BE28214E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ff:00:dc:d8:c4:09:47:f9:5e:c5:98:9e:26: 10:4c:85:01:e2:53:35:07:58:58:bc:be:ac:3b:50: af:e7:ff:4d:83:dd:2b:55:e2:14:e9:51:dd:4a:5e: 07:05:fc:91:3e:42:c2:26:7d:49:b2:89:78:6b:1c: 90:7f:21:4c:ad:83:52:68:c6:81:8f:70:ae:fc:cc: f8:44:98:1c:d3:1f:ae:78:4a:2a:e5:a4:b4:01:0c: 8f:1a:84:25:1f:e2:a4:5c:89:05:ac:27:cd:e5:5e: 04:e5:57:dd:89:83:65:80:c1:25:4e:7d:b3:1b:7c: 3b:e1:e4:e2:0f:d3:93:cd:de:13:10:fd:bb:a5:b1: 8e:5c:11:ef:50:62:75:db:cf:ae:5a:07:cd:64:26: 67:6e:6d:b1:38:62:1a:83:93:ce:01:8b:47:5e:9d: b8:e6:96:64:62:b9:c1:9a:f2:a2:3f:e3:56:3c:e4: 47:cf:e6:4d:fc:ef:16:90:a7:1d:cb:bc:7c:be:7c: cd:33:3f:2a:df:8c:e6:4d:a2:43:29:d5:ff:2a:02: 59:cd:f7:b3:d0:42:b9:4b:36:a0:a7:cc:16:8d:6f: d3:3e:61:38:b4:ab:ec:1a:08:bd:dc:9a:6c:e0:f7: 7b:61:49:86:aa:c0:63:e6:05:5d:14:e2:1d:c4:08: 57:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AE:11:D3:6E:90:36:D8:83:32:C3:40:C8:99:78:9B:E2:82:14:E3 X509v3 Authority Key Identifier: keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:17:fb:ba:2b:2a:7c:fb:d6:a2:bb:e9:fb:3f:8f:fd:9d:c3: 3a:0b:85:92:77:94:9b:9a:c0:67:e2:65:a8:6b:03:02:69:d4: 16:3c:9b:15:05:3d:e2:38:c3:13:8e:10:4a:93:3a:23:79:01: 0d:28:0d:93:6d:d8:fa:6a:25:48:4b:43:2f:f0:5b:fa:32:50: 1f:d3:53:83:e8:9a:02:f9:8e:ab:69:a0:98:30:a3:12:70:4b: 9a:65:80:45:a8:ae:00:36:98:ae:2c:0d:c5:bb:4c:89:f0:ed: ca:54:29:73:13:10:20:e5:b9:d9:e6:6e:b8:83:4f:b1:76:74: 41:c3:92:6a:58:07:f2:3e:bf:34:d5:2d:a2:81:3a:3e:75:9c: b5:00:bd:6c:0c:58:45:50:18:ed:dc:50:c0:aa:83:c1:c6:76: bd:76:67:21:e0:e6:7c:af:e4:de:1b:12:ec:76:b3:ae:b5:85: 97:c2:a2:7a:15:c9:12:88:2c:6f:54:82:be:d3:ed:79:be:ca: a6:3f:f4:85:8d:c9:69:47:ff:19:d6:a0:de:7d:c3:e0:9d:5d: c2:e4:b9:76:c6:92:6d:5f:3f:a7:71:13:50:f7:95:78:a8:30: e9:36:54:5b:73:8b:c8:b9:52:fc:bf:73:3e:14:2d:3e:ad:e4: f1:b6:18:54 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOaPGkreNQeUmBiK3Ruj9D7nMSYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhhOTNjODFlY2QzMDhlNmE3NjMyNzE3MDQ1YjNkMzUx NTAxMjBmODAeFw0yNjA3MTcxMDE1MDBaFw0yNjA3MTgxMjE5MDBaMDMxMTAvBgNV BAMTKDI1QUUxMUQzNkU5MDM2RDg4MzMyQzM0MEM4OTk3ODlCRTI4MjE0RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh/wDc2MQJR/lexZieJhBMhQHi UzUHWFi8vqw7UK/n/02D3StV4hTpUd1KXgcF/JE+QsImfUmyiXhrHJB/IUytg1Jo xoGPcK78zPhEmBzTH654SirlpLQBDI8ahCUf4qRciQWsJ83lXgTlV92Jg2WAwSVO fbMbfDvh5OIP05PN3hMQ/bulsY5cEe9QYnXbz65aB81kJmdubbE4YhqDk84Bi0de nbjmlmRiucGa8qI/41Y85EfP5k387xaQpx3LvHy+fM0zPyrfjOZNokMp1f8qAlnN 97PQQrlLNqCnzBaNb9M+YTi0q+waCL3cmmzg93thSYaqwGPmBV0U4h3ECFe5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUJa4R026QNtiDMsNAyJl4m+KCFOMwHwYDVR0j BBgwFoAUOKk8gezTCOanYycXBFs9NRUBIPgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgyYzY1YjktNzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZm OWI4LzAvMzhBOTNDODFFQ0QzMDhFNkE3NjMyNzE3MDQ1QjNEMzUxNTAxMjBGOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09LazhnZXpUQ09hbll5Y1hCRnM5TlJV QklQZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODJjNjViOS03 MjVkLTRiYjAtYTIxNi04ZTc3MTkxZmY5YjgvMC8zOEE5M0M4MUVDRDMwOEU2QTc2 MzI3MTcwNDVCM0QzNTE1MDEyMEY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBf7uisqfPvWorvp+z+P /Z3DOguFkneUm5rAZ+JlqGsDAmnUFjybFQU94jjDE44QSpM6I3kBDSgNk23Y+mol SEtDL/Bb+jJQH9NTg+iaAvmOq2mgmDCjEnBLmmWARaiuADaYriwNxbtMifDtylQp cxMQIOW52eZuuINPsXZ0QcOSalgH8j6/NNUtooE6PnWctQC9bAxYRVAY7dxQwKqD wcZ2vXZnIeDmfK/k3hsS7HazrrWFl8KiehXJEogsb1SCvtPteb7Kpj/0hY3JaUf/ Gdag3n3D4J1dwuS5dsaSbV8/p3ETUPeVeKgw6TZUW3OLyLlS/L9zPhQtPq3k8bYY VA== -----END CERTIFICATE-----Generated at Sat Jul 18 01:17:16 2026 by rpki-client