$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft File: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft (raw, json) Hash identifier: OjPQNbxTSib8waLqZ2NNUFgiLYaVAnHZsUyjOqA1zc4= Subject key identifier: 05:44:E9:75:75:E5:54:CE:3F:70:22:E9:00:05:27:DB:1C:B4:6E:45 Authority key identifier: 20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 Certificate issuer: /CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Certificate serial: 46DFACF839EF6F24A17109A1E80426EA7C30FD65 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft Manifest number: 0244 Signing time: Tue 27 Oct 2026 12:05:18 +0000 Manifest this update: Tue 27 Oct 2026 12:00:18 +0000 Manifest next update: Wed 28 Oct 2026 13:51:18 +0000 Files and hashes: 1: 326131343a373538313a333062363a3a2f34382d3438203d3e20323037323939.roa (hash: UmeMyMk49kKJHNeOv97Avw8prN2MfKZxX7CDhYlXDAk=) 2: 326131343a373538313a333030303a3a2f34302d3438203d3e20323037353239.roa (hash: nO44y4dGpNuxJp2QdoTzjcIWxOsTj19ZEllt1Dvs5Ts=) 3: 326131343a373538313a333062363a3a2f34382d3438203d3e203331383938.roa (hash: nwV0ho4jSdiW0hS3zo8MCliWSh3VANzn+ez/PP878pM=) 4: 3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.cer (hash: Q7BJ01tr/6JHLPGP911ghDsrU5buibZF5gNXX6+52rQ=) 5: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl (hash: /19FURfOTH1GeUHzOZgU2b7gxMIxF4EyjFz0dMjWNdU=) 6: 326131343a373538313a333062353a3a2f34382d3438203d3e20323131373239.roa (hash: nUtP3OV4fZsZW1X/gp0Xu/ils8ZvclvedQBTDcf+slw=) 7: 326131343a373538313a333039303a3a2f34342d3434203d3e20323034323131.roa (hash: PeUjQ8YxZi1uSLrzrq48fodAqGN1I1xc9EjlTG8bmI8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 05:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:df:ac:f8:39:ef:6f:24:a1:71:09:a1:e8:04:26:ea:7c:30:fd:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Validity Not Before: Oct 27 12:00:18 2026 GMT Not After : Oct 28 13:51:18 2026 GMT Subject: CN=0544E97575E554CE3F7022E9000527DB1CB46E45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:97:85:cc:b8:79:3b:25:b5:d0:46:66:fa:07: 27:a6:51:da:e1:06:d5:37:4e:82:9c:c2:94:5d:18: 24:2f:91:c2:9c:6c:60:82:54:4c:f2:c8:1d:00:97: 72:02:78:e8:5a:8f:8a:bb:5c:04:69:3f:32:06:c7: 75:5a:de:1c:4e:48:c5:0a:5f:85:0f:43:43:88:92: 4c:84:3b:b1:39:fc:76:e5:16:96:1e:f7:6a:d2:d4: 2e:71:43:2e:55:ee:61:23:3c:0f:79:9b:f5:6e:26: 18:1b:36:cc:51:5c:01:b9:e8:cd:fd:a3:3e:8a:29: 10:82:3b:8d:c0:cb:d9:2c:84:6e:c2:ff:ca:33:23: 9a:93:13:21:2f:6d:bc:67:cd:79:70:24:b7:9c:82: b2:f3:8a:b8:30:59:b9:29:2c:c2:2d:4e:1f:46:ad: a4:4c:09:7a:43:4f:0a:40:f2:43:25:f7:91:46:19: c3:04:16:f6:97:fa:a5:1b:86:ae:67:f5:6d:38:88: 15:d1:ed:84:4b:9d:ad:7a:0d:e1:ed:e4:d2:c1:50: 72:ac:70:6b:19:46:77:8a:89:e2:ad:b8:e0:d8:ab: 1b:14:f9:96:f1:e4:7f:02:59:a5:68:78:ce:61:74: 3f:dd:53:3c:eb:2a:43:d1:e7:ba:bb:da:07:bd:09: 45:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:44:E9:75:75:E5:54:CE:3F:70:22:E9:00:05:27:DB:1C:B4:6E:45 X509v3 Authority Key Identifier: keyid:20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:3d:b5:7c:71:dc:5e:2d:f1:3f:d8:3f:98:d9:ee:d7:5f:33: 06:aa:9d:99:fa:9f:f4:aa:d7:50:23:93:b8:91:a0:83:73:f1: 97:a2:31:8a:44:41:df:8d:47:10:90:06:4a:48:be:de:27:c9: 59:85:e3:6e:16:9a:53:1e:bc:7c:8a:df:44:b7:9b:2b:49:5d: 7f:00:67:eb:16:4f:04:eb:f5:a7:11:a5:52:8a:f8:33:6b:3c: 69:6a:0e:4a:e4:30:3d:2d:46:52:24:76:bb:06:29:38:9f:73: 52:89:d8:d5:c8:e7:40:62:30:b6:3a:ed:98:42:97:c3:b3:bf: 85:80:dc:3b:a4:b9:11:4b:73:12:11:ce:4e:1d:e6:c8:18:1d: 88:26:a6:eb:a3:29:e0:f5:62:34:80:05:50:e2:18:14:ac:a5: 2f:28:6a:89:d9:ca:ec:3e:5c:0f:34:3c:fe:1a:d4:bc:cd:a3: df:f4:4b:c7:74:d5:dd:4b:c1:b1:25:af:69:c9:18:42:d3:ff: f2:f1:de:aa:52:54:c7:e9:34:c7:2c:12:81:83:62:b1:b4:4f: bc:82:5c:54:9d:e0:4f:a1:4b:13:2f:46:29:46:b7:02:71:6d: 7e:46:8e:d4:fb:45:97:59:37:88:3c:ea:fe:30:60:98:b1:8c: 56:95:17:70 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIURt+s+DnvbyShcQmh6AQm6nww/WUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZD ODg5MjNGMDAeFw0yNjEwMjcxMjAwMThaFw0yNjEwMjgxMzUxMThaMDMxMTAvBgNV BAMTKDA1NDRFOTc1NzVFNTU0Q0UzRjcwMjJFOTAwMDUyN0RCMUNCNDZFNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTl4XMuHk7JbXQRmb6ByemUdrh BtU3ToKcwpRdGCQvkcKcbGCCVEzyyB0Al3ICeOhaj4q7XARpPzIGx3Va3hxOSMUK X4UPQ0OIkkyEO7E5/HblFpYe92rS1C5xQy5V7mEjPA95m/VuJhgbNsxRXAG56M39 oz6KKRCCO43Ay9kshG7C/8ozI5qTEyEvbbxnzXlwJLecgrLzirgwWbkpLMItTh9G raRMCXpDTwpA8kMl95FGGcMEFvaX+qUbhq5n9W04iBXR7YRLna16DeHt5NLBUHKs cGsZRneKieKtuODYqxsU+Zbx5H8CWaVoeM5hdD/dUzzrKkPR57q72ge9CUUHAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUBUTpdXXlVM4/cCLpAAUn2xy0bkUwHwYDVR0j BBgwFoAUICqC2m5zzkJi4Yuu1go/psiJI/AwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDliZDM4ODgtOTMwMi00YjZmLWEwMTctMmI0YmJhNWU1 N2JiLzEvMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZDODg5MjNGMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDJBODJEQTZFNzNDRTQyNjJFMThCQUVE NjBBM0ZBNkM4ODkyM0YwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q5YmQzODg4LTkzMDItNGI2Zi1hMDE3LTJiNGJiYTVlNTdiYi8xLzIwMkE4MkRB NkU3M0NFNDI2MkUxOEJBRUQ2MEEzRkE2Qzg4OTIzRjAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAqPbV8 cdxeLfE/2D+Y2e7XXzMGqp2Z+p/0qtdQI5O4kaCDc/GXojGKREHfjUcQkAZKSL7e J8lZheNuFppTHrx8it9Et5srSV1/AGfrFk8E6/WnEaVSivgzazxpag5K5DA9LUZS JHa7Bik4n3NSidjVyOdAYjC2Ou2YQpfDs7+FgNw7pLkRS3MSEc5OHebIGB2IJqbr oyng9WI0gAVQ4hgUrKUvKGqJ2crsPlwPNDz+GtS8zaPf9EvHdNXdS8GxJa9pyRhC 0//y8d6qUlTH6TTHLBKBg2KxtE+8glxUneBPoUsTL0YpRrcCcW1+Ro7U+0WXWTeI POr+MGCYsYxWlRdw -----END CERTIFICATE-----Generated at Tue Oct 27 15:48:55 2026 by rpki-client