$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft File: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft (raw, json) Hash identifier: MH01GJTKjQ/At0qo1f+NVfJYI8WGEkTDTVPW+hsPHu0= Subject key identifier: 65:0F:44:71:7A:DE:9F:9E:35:EF:E0:67:DA:63:FE:76:2B:81:59:C8 Authority key identifier: 20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 Certificate issuer: /CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Certificate serial: 71CD711C70D5B724CFE43737CE0710C003A42CA0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft Manifest number: 018D Signing time: Thu 11 Jun 2026 14:59:36 +0000 Manifest this update: Thu 11 Jun 2026 14:54:36 +0000 Manifest next update: Fri 12 Jun 2026 17:17:36 +0000 Files and hashes: 1: 326131343a373538313a333062363a3a2f34382d3438203d3e203331383938.roa (hash: EiykYxl+6FaTNBSgNTe5hk8ztAyCkiKmYpqs3J6XV7E=) 2: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl (hash: uOPJ3OJw6J+vqYVber2znB6LPBDCC+u6c4P3Sy1cCBk=) 3: 326131343a373538313a333030303a3a2f34302d3438203d3e20323037353239.roa (hash: 49tQr1GLN9QvPACiaQcXfaSDsuhRZJax3rEAyqF9fvs=) 4: 326131343a373538313a333062353a3a2f34382d3438203d3e20323131373239.roa (hash: tFUXq6i30FxB1SNNhCRKk78oQl/FXFjJBGghOw722to=) 5: 326131343a373538313a333062363a3a2f34382d3438203d3e20323037323939.roa (hash: QF7sj3Q22cpFIfftMWFUaaWBXSTUWiNGhFKa4Gm8DjQ=) 6: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer (hash: Cg46VfMFxkibHVY72VspTJE2BjBtIpE0lG8+Ny9YFKc=) 7: 326131343a373538313a333039303a3a2f34342d3434203d3e20323034323131.roa (hash: an2CTnY48XCjuCGH81CGgjVXZdlCvh7kWv6euA7rsaw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 13:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:cd:71:1c:70:d5:b7:24:cf:e4:37:37:ce:07:10:c0:03:a4:2c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Validity Not Before: Jun 11 14:54:36 2026 GMT Not After : Jun 12 17:17:36 2026 GMT Subject: CN=650F44717ADE9F9E35EFE067DA63FE762B8159C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a1:df:bb:eb:91:31:5a:99:fb:f7:c8:f1:5e: ea:2a:6d:a8:4f:3c:b5:09:b4:cb:40:d2:9c:69:f9: e0:fd:87:70:47:c9:2f:19:2f:03:8e:13:f3:7d:e7: e0:71:ad:bb:41:44:b5:23:ef:92:5c:df:9a:7d:af: 20:35:2f:cf:fb:cb:74:e8:51:5c:97:6d:c4:30:45: 56:17:87:72:a8:dd:0f:fc:d9:39:c5:5d:66:cf:82: a8:e7:9c:28:05:27:6d:db:5f:44:ab:b2:f9:84:25: e8:c9:8e:ba:68:30:44:5f:86:9a:59:9f:4b:ac:14: 11:3d:76:07:06:f1:50:d5:0e:62:05:99:4c:22:0d: 72:8b:82:18:2c:07:1a:26:20:dd:98:45:72:25:8e: 82:0e:ea:33:94:65:dc:76:27:73:a3:8f:b3:18:41: eb:e0:c3:c1:c0:df:4a:8f:de:9e:2c:94:8e:8b:b5: 8a:ce:3a:eb:dc:b9:0f:ca:8a:ca:e6:b1:8a:dc:cb: b9:55:73:31:3e:8a:59:01:19:3c:0d:34:e8:d2:4b: 96:53:85:d3:56:1a:87:47:45:80:86:1f:75:90:75: 99:ba:50:1b:db:a2:e0:fb:12:76:72:d3:f9:6e:d4: 2c:7b:05:e2:51:fb:1e:68:3b:ea:75:d6:fc:6e:e4: 3d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0F:44:71:7A:DE:9F:9E:35:EF:E0:67:DA:63:FE:76:2B:81:59:C8 X509v3 Authority Key Identifier: keyid:20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:86:42:62:51:f1:63:52:64:0b:de:2e:7d:57:fb:58:e6:87: 6f:5f:3a:cd:5d:0c:a7:ff:33:8c:15:0e:8b:dd:b2:fc:4b:fb: c0:90:f2:f7:b9:3c:17:ca:ab:f2:90:d9:cc:55:b3:2c:6c:c6: 08:4b:88:64:a7:40:5f:7a:a4:b9:e1:ba:f4:91:22:e2:d1:86: 46:3c:d6:e0:96:a2:b1:7c:18:ee:8f:f7:de:3f:13:58:de:5c: 93:22:40:a4:74:0f:ad:87:81:5c:dd:54:93:5f:7d:ac:02:79: f1:63:52:0a:c7:b2:bb:a5:9a:d4:35:2b:64:3a:b4:3f:ce:bc: 61:5a:dd:b8:77:7a:d4:bd:da:da:d8:90:18:09:41:69:25:9c: a3:6d:4c:72:01:b7:1d:72:af:f4:0d:1b:7f:40:f8:d1:7d:91: 30:00:b9:c0:ff:3d:bc:7d:a3:e1:3f:82:20:3f:a8:a9:57:2c: 0a:a3:98:23:86:6c:97:3f:8f:38:90:5c:fb:71:ff:22:68:66: fd:54:5d:be:c4:23:94:fc:1d:14:c3:fe:7f:6e:f4:b9:96:94: f6:01:09:dc:e1:d0:40:88:81:03:67:1b:5c:64:7c:73:45:c1: bd:23:4f:3c:75:b7:d0:ce:06:52:0b:ef:42:fb:ad:78:43:8d: 02:fe:db:87 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUcc1xHHDVtyTP5Dc3zgcQwAOkLKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZD ODg5MjNGMDAeFw0yNjA2MTExNDU0MzZaFw0yNjA2MTIxNzE3MzZaMDMxMTAvBgNV BAMTKDY1MEY0NDcxN0FERTlGOUUzNUVGRTA2N0RBNjNGRTc2MkI4MTU5QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCod+765ExWpn798jxXuoqbahP PLUJtMtA0pxp+eD9h3BHyS8ZLwOOE/N95+BxrbtBRLUj75Jc35p9ryA1L8/7y3To UVyXbcQwRVYXh3Ko3Q/82TnFXWbPgqjnnCgFJ23bX0SrsvmEJejJjrpoMERfhppZ n0usFBE9dgcG8VDVDmIFmUwiDXKLghgsBxomIN2YRXIljoIO6jOUZdx2J3Ojj7MY Qevgw8HA30qP3p4slI6LtYrOOuvcuQ/KisrmsYrcy7lVczE+ilkBGTwNNOjSS5ZT hdNWGodHRYCGH3WQdZm6UBvbouD7EnZy0/lu1Cx7BeJR+x5oO+p11vxu5D2jAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUZQ9EcXren5417+Bn2mP+diuBWcgwHwYDVR0j BBgwFoAUICqC2m5zzkJi4Yuu1go/psiJI/AwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDliZDM4ODgtOTMwMi00YjZmLWEwMTctMmI0YmJhNWU1 N2JiLzEvMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZDODg5MjNGMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDJBODJEQTZFNzNDRTQyNjJFMThCQUVE NjBBM0ZBNkM4ODkyM0YwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q5YmQzODg4LTkzMDItNGI2Zi1hMDE3LTJiNGJiYTVlNTdiYi8xLzIwMkE4MkRB NkU3M0NFNDI2MkUxOEJBRUQ2MEEzRkE2Qzg4OTIzRjAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCDhkJi UfFjUmQL3i59V/tY5odvXzrNXQyn/zOMFQ6L3bL8S/vAkPL3uTwXyqvykNnMVbMs bMYIS4hkp0BfeqS54br0kSLi0YZGPNbglqKxfBjuj/fePxNY3lyTIkCkdA+th4Fc 3VSTX32sAnnxY1IKx7K7pZrUNStkOrQ/zrxhWt24d3rUvdra2JAYCUFpJZyjbUxy Abcdcq/0DRt/QPjRfZEwALnA/z28faPhP4IgP6ipVywKo5gjhmyXP484kFz7cf8i aGb9VF2+xCOU/B0Uw/5/bvS5lpT2AQnc4dBAiIEDZxtcZHxzRcG9I088dbfQzgZS C+9C+614Q40C/tuH -----END CERTIFICATE-----Generated at Thu Jun 11 20:48:23 2026 by rpki-client