$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft File: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft (raw, json) Hash identifier: MZZCl9RwhPWmfTCkev2/vbdoK/cXLxWO/Zi0XhkQSOs= Subject key identifier: 83:FE:47:DD:5F:4A:3A:A0:A7:4B:C2:51:CF:5E:86:09:43:FD:32:4B Authority key identifier: 20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 Certificate issuer: /CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Certificate serial: 046E71801B29A411F864D808B106F682DEB9EFB7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft Manifest number: 014B Signing time: Sun 26 Apr 2026 20:04:49 +0000 Manifest this update: Sun 26 Apr 2026 19:59:49 +0000 Manifest next update: Mon 27 Apr 2026 21:39:49 +0000 Files and hashes: 1: 326131343a373538313a333030303a3a2f34302d3438203d3e20323037353239.roa (hash: 49tQr1GLN9QvPACiaQcXfaSDsuhRZJax3rEAyqF9fvs=) 2: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer (hash: Cg46VfMFxkibHVY72VspTJE2BjBtIpE0lG8+Ny9YFKc=) 3: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl (hash: dHZWagTf78BJ6+wS2WSxsKlqZueHHNn7IkpWtlVE1vY=) 4: 326131343a373538303a666666353a3a2f34382d3438203d3e20323037353239.roa (hash: 8GEpSwKR5aAKrW7JpZcQNrVUIUKVu8YVCYytf208qTw=) 5: 326131343a373538313a333062363a3a2f34382d3438203d3e203331383938.roa (hash: EiykYxl+6FaTNBSgNTe5hk8ztAyCkiKmYpqs3J6XV7E=) 6: 326131343a373538313a333062353a3a2f34382d3438203d3e20323131373239.roa (hash: tFUXq6i30FxB1SNNhCRKk78oQl/FXFjJBGghOw722to=) 7: 326131343a373538313a333039303a3a2f34342d3434203d3e20323034323131.roa (hash: an2CTnY48XCjuCGH81CGgjVXZdlCvh7kWv6euA7rsaw=) 8: 326131343a373538313a333062363a3a2f34382d3438203d3e20323037323939.roa (hash: QF7sj3Q22cpFIfftMWFUaaWBXSTUWiNGhFKa4Gm8DjQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Apr 2026 21:39:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:6e:71:80:1b:29:a4:11:f8:64:d8:08:b1:06:f6:82:de:b9:ef:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Validity Not Before: Apr 26 19:59:49 2026 GMT Not After : Apr 27 21:39:49 2026 GMT Subject: CN=83FE47DD5F4A3AA0A74BC251CF5E860943FD324B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:23:05:ef:08:07:da:03:54:6e:b4:e6:4f:8a: 69:e9:3f:63:5e:9f:25:92:60:60:a0:75:c4:3c:da: a6:c5:40:0e:81:d1:b7:be:5a:a4:f3:c8:37:30:d1: 6a:26:dd:32:4a:48:47:6e:79:b2:c6:62:46:1c:1a: ba:2d:8a:7e:8f:d5:b1:53:b0:db:86:ae:d1:a4:ed: 96:eb:e7:a6:ca:2d:da:79:cc:42:04:ca:c6:c0:f6: cd:c9:c4:d1:cc:19:47:06:36:ab:fc:4d:6f:0f:77: 66:62:cd:d4:df:ab:c5:4e:4c:6b:c4:90:ab:6d:af: e0:cf:24:ee:57:58:3e:05:31:1e:fd:b9:8f:0e:bf: bf:4c:07:63:6f:2b:92:69:9e:68:e0:ce:fa:32:c5: 2b:53:53:72:e8:30:eb:3d:27:a1:07:1e:86:d3:ca: fc:34:47:a7:5f:0c:ee:9a:76:1e:a2:19:64:02:90: 95:98:5f:ce:a3:ec:5c:7e:6e:4d:5c:86:32:6a:d8: 3f:79:df:05:7a:3d:a1:53:b4:33:f4:cc:79:a4:3a: ca:23:15:44:b6:85:34:5e:ab:dc:4b:8e:36:da:f8: b9:dd:e7:4c:f4:97:f8:8d:c6:09:12:82:dc:4f:5b: df:5d:3e:ff:8d:ef:bd:21:e6:dc:22:64:53:e6:eb: 62:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FE:47:DD:5F:4A:3A:A0:A7:4B:C2:51:CF:5E:86:09:43:FD:32:4B X509v3 Authority Key Identifier: keyid:20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:b7:d6:f2:56:f5:ae:fe:9b:eb:d1:cb:16:6d:fc:3a:55:b2: fd:47:2a:79:8c:f3:a0:2c:2c:6a:77:9e:a4:e6:0f:5a:98:06: cc:39:ab:ac:26:fa:77:0d:53:f2:01:30:d8:f0:32:fb:7a:3e: 5d:cf:9e:89:72:79:52:8e:4d:a8:d1:a1:5f:6d:bf:aa:12:70: 47:c7:4a:89:cc:9e:c5:75:1f:bf:f1:65:3e:15:85:57:b8:bb: 49:1d:48:75:e8:da:da:6e:b8:25:6b:98:1a:dd:2a:7d:d5:4e: b8:ec:a0:04:54:0e:33:e3:3d:a9:fb:ea:49:3a:58:0f:18:01: 69:83:be:e0:ff:28:37:2d:5b:b0:c5:08:91:36:86:5b:61:3f: 17:d6:38:e9:56:05:15:dc:65:81:3d:6d:a8:00:c4:3f:82:7c: 5b:6b:01:7f:1c:89:23:d3:54:e3:57:31:0c:93:6d:2e:57:27: 71:1d:b3:9c:58:dd:63:55:f1:a2:ca:cc:a9:1c:ab:e4:86:42: 84:d8:d3:dc:2d:8d:f7:84:95:a4:77:be:d4:cb:2f:1e:cd:72: 5a:57:dd:0f:10:15:e4:18:0a:8c:87:d2:fe:52:c7:46:2c:b0: 64:2f:29:9d:78:68:cd:de:86:54:bf:61:ad:2f:5f:81:a9:ed: 0b:8a:f0:63 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUBG5xgBsppBH4ZNgIsQb2gt6577cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZD ODg5MjNGMDAeFw0yNjA0MjYxOTU5NDlaFw0yNjA0MjcyMTM5NDlaMDMxMTAvBgNV BAMTKDgzRkU0N0RENUY0QTNBQTBBNzRCQzI1MUNGNUU4NjA5NDNGRDMyNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwIwXvCAfaA1RutOZPimnpP2Ne nyWSYGCgdcQ82qbFQA6B0be+WqTzyDcw0Wom3TJKSEduebLGYkYcGrotin6P1bFT sNuGrtGk7Zbr56bKLdp5zEIEysbA9s3JxNHMGUcGNqv8TW8Pd2ZizdTfq8VOTGvE kKttr+DPJO5XWD4FMR79uY8Ov79MB2NvK5JpnmjgzvoyxStTU3LoMOs9J6EHHobT yvw0R6dfDO6adh6iGWQCkJWYX86j7Fx+bk1chjJq2D953wV6PaFTtDP0zHmkOsoj FUS2hTReq9xLjjba+Lnd50z0l/iNxgkSgtxPW99dPv+N770h5twiZFPm62IzAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUg/5H3V9KOqCnS8JRz16GCUP9MkswHwYDVR0j BBgwFoAUICqC2m5zzkJi4Yuu1go/psiJI/AwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDliZDM4ODgtOTMwMi00YjZmLWEwMTctMmI0YmJhNWU1 N2JiLzEvMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZDODg5MjNGMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDJBODJEQTZFNzNDRTQyNjJFMThCQUVE NjBBM0ZBNkM4ODkyM0YwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q5YmQzODg4LTkzMDItNGI2Zi1hMDE3LTJiNGJiYTVlNTdiYi8xLzIwMkE4MkRB NkU3M0NFNDI2MkUxOEJBRUQ2MEEzRkE2Qzg4OTIzRjAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAJt9by VvWu/pvr0csWbfw6VbL9Ryp5jPOgLCxqd56k5g9amAbMOausJvp3DVPyATDY8DL7 ej5dz56JcnlSjk2o0aFfbb+qEnBHx0qJzJ7FdR+/8WU+FYVXuLtJHUh16Nrabrgl a5ga3Sp91U647KAEVA4z4z2p++pJOlgPGAFpg77g/yg3LVuwxQiRNoZbYT8X1jjp VgUV3GWBPW2oAMQ/gnxbawF/HIkj01TjVzEMk20uVydxHbOcWN1jVfGiysypHKvk hkKE2NPcLY33hJWkd77Uyy8ezXJaV90PEBXkGAqMh9L+UsdGLLBkLymdeGjN3oZU v2GtL1+Bqe0LivBj -----END CERTIFICATE-----Generated at Mon Apr 27 12:38:48 2026 by rpki-client