$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft File: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft (raw, json) Hash identifier: jMXvoHaSU5+HvRY5QDHtcAaMxAscg4LhZDbGWJ0hdsY= Subject key identifier: 89:DD:2C:44:2B:BB:9D:67:8B:42:49:32:E8:76:4F:DD:82:BB:AF:3B Authority key identifier: 20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 Certificate issuer: /CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Certificate serial: 691DACF13B3E16054E5353E540B793131BAA3073 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft Manifest number: 0209 Signing time: Thu 10 Sep 2026 04:55:54 +0000 Manifest this update: Thu 10 Sep 2026 04:50:54 +0000 Manifest next update: Fri 11 Sep 2026 07:22:54 +0000 Files and hashes: 1: 326131343a373538313a333039303a3a2f34342d3434203d3e20323034323131.roa (hash: an2CTnY48XCjuCGH81CGgjVXZdlCvh7kWv6euA7rsaw=) 2: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl (hash: lIIFKhoaCcHTL1qG3MWhtbR5xsqOZ7Si5Z7Tj+cfKGY=) 3: 326131343a373538313a333030303a3a2f34302d3438203d3e20323037353239.roa (hash: nO44y4dGpNuxJp2QdoTzjcIWxOsTj19ZEllt1Dvs5Ts=) 4: 326131343a373538313a333062353a3a2f34382d3438203d3e20323131373239.roa (hash: nUtP3OV4fZsZW1X/gp0Xu/ils8ZvclvedQBTDcf+slw=) 5: 326131343a373538313a333062363a3a2f34382d3438203d3e203331383938.roa (hash: EiykYxl+6FaTNBSgNTe5hk8ztAyCkiKmYpqs3J6XV7E=) 6: 3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.cer (hash: Q7BJ01tr/6JHLPGP911ghDsrU5buibZF5gNXX6+52rQ=) 7: 326131343a373538313a333062363a3a2f34382d3438203d3e20323037323939.roa (hash: QF7sj3Q22cpFIfftMWFUaaWBXSTUWiNGhFKa4Gm8DjQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:1d:ac:f1:3b:3e:16:05:4e:53:53:e5:40:b7:93:13:1b:aa:30:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Validity Not Before: Sep 10 04:50:54 2026 GMT Not After : Sep 11 07:22:54 2026 GMT Subject: CN=89DD2C442BBB9D678B424932E8764FDD82BBAF3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:45:72:0d:9c:cf:21:dc:e6:be:5a:8a:9c:30: 95:7b:85:06:d8:f3:0a:ac:c1:8f:f4:09:b5:ef:4d: 96:ae:bf:e7:6d:50:3c:4b:74:c0:78:17:8b:d8:0c: 41:45:24:d9:3f:79:2d:0c:cf:df:76:5f:41:b5:46: 8d:fc:ef:23:a4:c1:bf:45:e5:eb:37:50:42:9f:38: 8b:1b:4b:bd:82:88:01:0b:c9:e4:45:13:68:28:19: e5:16:32:5d:e7:43:28:ea:ab:e1:69:10:55:b8:2c: 90:4a:b6:e3:89:fb:a5:c5:af:65:6c:5b:ed:7c:61: 2f:3d:d7:b1:d9:f7:db:de:f8:43:62:27:6d:5c:13: 81:23:63:27:95:45:eb:7b:f2:e5:31:be:4f:03:58: 0a:ee:07:de:5d:7e:29:b3:16:f2:20:84:e2:68:1e: 98:0e:44:c8:7f:f7:73:18:76:51:72:9a:1c:5e:09: ab:f9:b7:bf:89:29:6f:bf:e5:f2:21:42:0f:43:b9: 92:0e:f8:a2:6c:97:11:ba:f8:40:aa:b5:e7:ce:0a: 3e:7b:62:83:b0:ae:c1:c8:93:64:64:41:98:10:1b: 25:37:1a:22:f8:c5:5f:40:db:35:ca:51:f2:8f:1a: 6e:b5:e3:03:52:14:64:48:94:49:e8:23:33:c0:8b: d3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:DD:2C:44:2B:BB:9D:67:8B:42:49:32:E8:76:4F:DD:82:BB:AF:3B X509v3 Authority Key Identifier: keyid:20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:f7:38:6b:50:d1:5b:6f:c5:e7:00:18:df:ab:44:62:37:43: a5:04:c8:75:3c:e9:bc:b6:97:5c:bc:59:ae:75:07:75:2f:43: b4:9d:84:d0:6c:4b:40:f6:ee:fc:0f:e3:17:87:12:d5:bf:bd: 5b:5b:7d:70:da:7b:ee:58:47:20:aa:7c:97:92:2c:ef:4c:d9: 07:4a:40:14:82:76:66:74:9b:ba:ee:5d:b8:5e:f1:82:b6:b9: 10:35:a4:34:ca:0b:3b:6e:27:d4:cf:5b:dd:cc:68:5f:47:10: 44:7e:72:cb:a6:44:47:2a:22:26:10:3a:64:7e:8c:01:4a:ad: a4:4b:f6:b8:63:e8:aa:5a:54:ad:ec:d3:0d:21:9b:85:01:35: 90:7b:eb:20:11:8f:65:26:35:13:f6:ae:75:fc:23:7f:68:89: 4f:87:87:67:91:9d:61:b3:43:a8:f2:32:ba:ac:4d:84:61:a9: 5f:99:b6:6e:48:58:c6:b4:da:c4:e7:a5:17:dc:53:c5:83:2a: 9c:af:cb:63:df:13:89:5a:92:e6:b8:35:6d:6f:c0:ed:59:ba: d9:28:ad:03:26:77:67:12:f8:61:72:eb:64:0f:b4:4d:96:c9: f2:b6:85:d6:03:6a:b5:fd:8f:19:a9:59:b1:6f:65:ee:6f:39: 5f:bb:a5:25 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUaR2s8Ts+FgVOU1PlQLeTExuqMHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZD ODg5MjNGMDAeFw0yNjA5MTAwNDUwNTRaFw0yNjA5MTEwNzIyNTRaMDMxMTAvBgNV BAMTKDg5REQyQzQ0MkJCQjlENjc4QjQyNDkzMkU4NzY0RkREODJCQkFGM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+RXINnM8h3Oa+WoqcMJV7hQbY 8wqswY/0CbXvTZauv+dtUDxLdMB4F4vYDEFFJNk/eS0Mz992X0G1Ro387yOkwb9F 5es3UEKfOIsbS72CiAELyeRFE2goGeUWMl3nQyjqq+FpEFW4LJBKtuOJ+6XFr2Vs W+18YS8917HZ99ve+ENiJ21cE4EjYyeVRet78uUxvk8DWAruB95dfimzFvIghOJo HpgORMh/93MYdlFymhxeCav5t7+JKW+/5fIhQg9DuZIO+KJslxG6+ECqtefOCj57 YoOwrsHIk2RkQZgQGyU3GiL4xV9A2zXKUfKPGm614wNSFGRIlEnoIzPAi9MrAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUid0sRCu7nWeLQkky6HZP3YK7rzswHwYDVR0j BBgwFoAUICqC2m5zzkJi4Yuu1go/psiJI/AwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDliZDM4ODgtOTMwMi00YjZmLWEwMTctMmI0YmJhNWU1 N2JiLzEvMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZDODg5MjNGMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDJBODJEQTZFNzNDRTQyNjJFMThCQUVE NjBBM0ZBNkM4ODkyM0YwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q5YmQzODg4LTkzMDItNGI2Zi1hMDE3LTJiNGJiYTVlNTdiYi8xLzIwMkE4MkRB NkU3M0NFNDI2MkUxOEJBRUQ2MEEzRkE2Qzg4OTIzRjAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCI9zhr UNFbb8XnABjfq0RiN0OlBMh1POm8tpdcvFmudQd1L0O0nYTQbEtA9u78D+MXhxLV v71bW31w2nvuWEcgqnyXkizvTNkHSkAUgnZmdJu67l24XvGCtrkQNaQ0ygs7bifU z1vdzGhfRxBEfnLLpkRHKiImEDpkfowBSq2kS/a4Y+iqWlSt7NMNIZuFATWQe+sg EY9lJjUT9q51/CN/aIlPh4dnkZ1hs0Oo8jK6rE2EYalfmbZuSFjGtNrE56UX3FPF gyqcr8tj3xOJWpLmuDVtb8DtWbrZKK0DJndnEvhhcutkD7RNlsnytoXWA2q1/Y8Z qVmxb2Xubzlfu6Ul -----END CERTIFICATE-----Generated at Thu Sep 10 10:58:48 2026 by rpki-client