$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft File: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft (raw, json) Hash identifier: ftVztHDOIsTS/uGt3P/a4t7iXenRbAPlfUjSSouDrzg= Subject key identifier: 0F:F6:1C:39:27:1F:1E:9A:D7:18:AE:38:52:0B:AA:13:62:1F:FB:37 Authority key identifier: 20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 Certificate issuer: /CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Certificate serial: 36F6F3D5F27261D3BD41775BC80465AAEEEE9954 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft Manifest number: 01C9 Signing time: Sun 26 Jul 2026 19:17:10 +0000 Manifest this update: Sun 26 Jul 2026 19:12:10 +0000 Manifest next update: Mon 27 Jul 2026 21:57:10 +0000 Files and hashes: 1: 326131343a373538313a333039303a3a2f34342d3434203d3e20323034323131.roa (hash: an2CTnY48XCjuCGH81CGgjVXZdlCvh7kWv6euA7rsaw=) 2: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl (hash: 0jviP9bBiEq4mT/xK77/8ooy9iJK4cOHlh5xG2BAh6E=) 3: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer (hash: Cg46VfMFxkibHVY72VspTJE2BjBtIpE0lG8+Ny9YFKc=) 4: 326131343a373538313a333062363a3a2f34382d3438203d3e20323037323939.roa (hash: QF7sj3Q22cpFIfftMWFUaaWBXSTUWiNGhFKa4Gm8DjQ=) 5: 326131343a373538313a333062363a3a2f34382d3438203d3e203331383938.roa (hash: EiykYxl+6FaTNBSgNTe5hk8ztAyCkiKmYpqs3J6XV7E=) 6: 326131343a373538313a333062353a3a2f34382d3438203d3e20323131373239.roa (hash: tFUXq6i30FxB1SNNhCRKk78oQl/FXFjJBGghOw722to=) 7: 326131343a373538313a333030303a3a2f34302d3438203d3e20323037353239.roa (hash: 49tQr1GLN9QvPACiaQcXfaSDsuhRZJax3rEAyqF9fvs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 19:23:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:f6:f3:d5:f2:72:61:d3:bd:41:77:5b:c8:04:65:aa:ee:ee:99:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Validity Not Before: Jul 26 19:12:10 2026 GMT Not After : Jul 27 21:57:10 2026 GMT Subject: CN=0FF61C39271F1E9AD718AE38520BAA13621FFB37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:bd:06:fe:81:11:c4:8e:fa:e6:6e:19:33:38: b9:96:87:c7:dc:51:cc:9d:a5:9e:5d:02:f5:c1:69: f9:b2:27:0c:34:11:8f:61:d1:67:74:23:56:81:70: c2:d4:0f:db:5b:08:ff:ca:3c:09:2d:43:5b:f6:7c: db:72:ac:16:53:2b:be:93:51:49:b2:a9:c6:58:65: 28:69:c1:94:ec:56:b8:f6:23:7f:b6:ec:be:75:65: fd:87:c8:0b:dc:83:1a:62:fa:99:b4:a2:c2:73:d0: ff:b7:c9:4e:8b:11:23:be:fa:ef:99:e1:5f:27:12: 04:be:76:73:27:c8:c6:6c:61:e7:dd:85:f9:31:27: 04:35:13:48:42:66:1d:8c:84:c2:bc:d2:37:a4:27: 81:43:90:d2:c6:b8:81:20:44:6d:42:c6:c9:ca:f7: 93:ec:3a:d8:7f:64:64:4c:77:5d:64:40:7f:eb:6a: db:4c:47:cf:50:11:3b:97:c4:52:49:62:bc:50:fb: 27:fc:b0:70:a8:cf:aa:51:06:23:24:14:f6:64:87: 7f:75:3c:28:e6:9c:8c:7e:64:a6:89:a5:14:78:7d: 7d:23:11:55:42:4f:1c:bd:a1:5a:be:3b:5e:bc:97: 72:64:14:3a:52:60:04:0d:45:49:37:bd:71:dd:84: 09:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F6:1C:39:27:1F:1E:9A:D7:18:AE:38:52:0B:AA:13:62:1F:FB:37 X509v3 Authority Key Identifier: keyid:20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:67:bd:9a:52:9f:d3:4a:0e:a3:ea:3e:61:10:3c:01:f3:4c: c1:c4:5d:4a:52:43:a2:d7:72:be:da:2b:7c:6f:bf:c0:65:ea: 75:48:1d:56:95:ff:fc:1f:23:1e:d8:7c:7d:b0:ad:e5:fd:63: fc:e1:29:82:c6:01:5f:aa:e6:e3:8b:33:47:ad:49:4a:a5:7e: 08:82:0c:d5:85:d4:b8:da:f1:ed:21:a8:b9:e8:13:f9:4e:1b: 93:96:4f:72:37:82:54:48:bb:b8:76:09:02:90:80:f6:67:72: 08:10:54:3d:68:8d:3d:01:9b:00:8a:3e:61:22:92:17:95:a7: 56:0a:99:af:44:ba:55:f7:3b:d8:27:08:57:ba:2e:3c:9b:62: 78:8c:1d:99:e8:a5:f3:46:37:cf:70:df:c1:b1:a9:73:b2:89: 8e:49:b2:df:a2:05:8f:51:7f:d3:f6:84:7e:c8:1d:f1:9d:f3: 6d:f5:09:ce:fb:97:46:44:4f:4c:6c:29:b7:01:f2:0a:60:61: df:f3:30:96:6a:a0:53:a8:be:ec:8f:ed:6f:a1:e1:f4:f4:d5: a0:f6:76:de:88:fd:f4:f1:20:e6:36:4e:22:9f:1c:fb:0b:58: 55:c7:67:eb:1a:b9:77:c7:be:dd:51:95:72:04:de:d3:3b:5c: 66:f5:43:06 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUNvbz1fJyYdO9QXdbyARlqu7umVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZD ODg5MjNGMDAeFw0yNjA3MjYxOTEyMTBaFw0yNjA3MjcyMTU3MTBaMDMxMTAvBgNV BAMTKDBGRjYxQzM5MjcxRjFFOUFENzE4QUUzODUyMEJBQTEzNjIxRkZCMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTvQb+gRHEjvrmbhkzOLmWh8fc UcydpZ5dAvXBafmyJww0EY9h0Wd0I1aBcMLUD9tbCP/KPAktQ1v2fNtyrBZTK76T UUmyqcZYZShpwZTsVrj2I3+27L51Zf2HyAvcgxpi+pm0osJz0P+3yU6LESO++u+Z 4V8nEgS+dnMnyMZsYefdhfkxJwQ1E0hCZh2MhMK80jekJ4FDkNLGuIEgRG1CxsnK 95PsOth/ZGRMd11kQH/rattMR89QETuXxFJJYrxQ+yf8sHCoz6pRBiMkFPZkh391 PCjmnIx+ZKaJpRR4fX0jEVVCTxy9oVq+O168l3JkFDpSYAQNRUk3vXHdhAkHAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUD/YcOScfHprXGK44UguqE2If+zcwHwYDVR0j BBgwFoAUICqC2m5zzkJi4Yuu1go/psiJI/AwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDliZDM4ODgtOTMwMi00YjZmLWEwMTctMmI0YmJhNWU1 N2JiLzEvMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZDODg5MjNGMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDJBODJEQTZFNzNDRTQyNjJFMThCQUVE NjBBM0ZBNkM4ODkyM0YwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q5YmQzODg4LTkzMDItNGI2Zi1hMDE3LTJiNGJiYTVlNTdiYi8xLzIwMkE4MkRB NkU3M0NFNDI2MkUxOEJBRUQ2MEEzRkE2Qzg4OTIzRjAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBsZ72a Up/TSg6j6j5hEDwB80zBxF1KUkOi13K+2it8b7/AZep1SB1Wlf/8HyMe2Hx9sK3l /WP84SmCxgFfqubjizNHrUlKpX4IggzVhdS42vHtIai56BP5ThuTlk9yN4JUSLu4 dgkCkID2Z3IIEFQ9aI09AZsAij5hIpIXladWCpmvRLpV9zvYJwhXui48m2J4jB2Z 6KXzRjfPcN/BsalzsomOSbLfogWPUX/T9oR+yB3xnfNt9QnO+5dGRE9MbCm3AfIK YGHf8zCWaqBTqL7sj+1voeH09NWg9nbeiP308SDmNk4inxz7C1hVx2frGrl3x77d UZVyBN7TO1xm9UMG -----END CERTIFICATE-----Generated at Mon Jul 27 02:01:44 2026 by rpki-client