$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft File: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft (raw, json) Hash identifier: AHHXxpwTIB00pn4G5RPus91zPgnxO89XH4rUsc4RGWw= Subject key identifier: B4:BB:9A:A4:A9:C2:8E:00:9E:77:63:D7:35:27:F2:B0:4A:36:C3:06 Authority key identifier: 20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 Certificate issuer: /CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Certificate serial: 6770C70A39044077D19C73A69EBD95B3AD51B1CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft Manifest number: 010D Signing time: Thu 12 Mar 2026 16:09:54 +0000 Manifest this update: Thu 12 Mar 2026 16:04:54 +0000 Manifest next update: Fri 13 Mar 2026 17:59:54 +0000 Files and hashes: 1: 326131343a373538313a333062363a3a2f34382d3438203d3e203331383938.roa (hash: EiykYxl+6FaTNBSgNTe5hk8ztAyCkiKmYpqs3J6XV7E=) 2: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl (hash: b1gc5lw/A4aRtubWJUsoQ6/Wo5JsdWjwxZKbA+N/E/8=) 3: 326131343a373538313a333062353a3a2f34382d3438203d3e20323131373239.roa (hash: tFUXq6i30FxB1SNNhCRKk78oQl/FXFjJBGghOw722to=) 4: 326131343a373538313a333039303a3a2f34342d3434203d3e20323034323131.roa (hash: an2CTnY48XCjuCGH81CGgjVXZdlCvh7kWv6euA7rsaw=) 5: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer (hash: Cg46VfMFxkibHVY72VspTJE2BjBtIpE0lG8+Ny9YFKc=) 6: 326131343a373538303a666666353a3a2f34382d3438203d3e20323037353239.roa (hash: 8GEpSwKR5aAKrW7JpZcQNrVUIUKVu8YVCYytf208qTw=) 7: 326131343a373538313a333030303a3a2f34302d3438203d3e20323037353239.roa (hash: 49tQr1GLN9QvPACiaQcXfaSDsuhRZJax3rEAyqF9fvs=) 8: 326131343a373538313a333062363a3a2f34382d3438203d3e20323037323939.roa (hash: QF7sj3Q22cpFIfftMWFUaaWBXSTUWiNGhFKa4Gm8DjQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 04:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:70:c7:0a:39:04:40:77:d1:9c:73:a6:9e:bd:95:b3:ad:51:b1:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Validity Not Before: Mar 12 16:04:54 2026 GMT Not After : Mar 13 17:59:54 2026 GMT Subject: CN=B4BB9AA4A9C28E009E7763D73527F2B04A36C306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4b:99:71:bb:fb:3a:ac:95:04:00:3f:37:d2: 4e:17:1d:2d:26:8c:90:4b:15:be:ca:f9:85:f8:ce: 03:17:03:a1:73:c1:fe:fd:4f:9a:ea:81:d3:2f:3f: 96:21:f5:fd:e2:7b:6a:70:ac:4b:20:d7:ac:09:4a: 71:e9:37:fa:d4:e1:ef:49:e3:c9:43:e2:f0:0b:5b: 6b:87:97:ce:0e:d9:84:1b:d3:d2:4d:a1:58:dd:79: 98:7a:e8:bb:22:28:ee:39:60:e5:20:f5:72:ec:ca: e5:52:46:43:76:00:2c:7f:18:7d:23:57:e9:d9:29: 15:8c:82:36:9b:01:5d:8b:fb:a3:96:ea:cf:04:c5: e0:3b:95:7b:75:fe:8a:e8:34:06:12:1e:a7:7c:2d: 40:2e:0f:dc:b0:88:a9:0e:c4:1f:d5:85:ca:dc:11: f1:af:09:58:01:15:76:93:81:cc:80:da:aa:b6:6f: 7f:a0:bd:8c:a8:ec:aa:29:b6:ed:da:66:c2:61:9e: 88:ea:22:b3:5d:93:8e:46:d6:5a:d6:e3:af:f8:cc: 4d:0f:fe:4d:45:28:d3:ff:b8:0b:a4:8e:3e:a6:f3: aa:b4:2d:c2:7c:3d:ef:32:74:87:82:b1:ea:30:fd: cc:ad:bc:94:eb:8f:00:77:c6:de:04:58:7b:36:a7: a7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:BB:9A:A4:A9:C2:8E:00:9E:77:63:D7:35:27:F2:B0:4A:36:C3:06 X509v3 Authority Key Identifier: keyid:20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:54:d1:e6:1d:6c:e6:fb:5c:35:e8:d5:69:bf:79:ca:1a:2a: f8:6e:11:22:11:e3:cf:a2:d8:21:73:a9:d1:41:a1:91:f8:fb: 54:33:2d:4e:c5:68:15:6b:79:14:f8:c1:27:7a:39:60:c1:e3: 18:d5:68:25:a3:5f:4b:b9:1b:03:b0:c0:d7:29:14:94:10:26: 6b:f1:4b:b1:34:04:a9:4d:03:26:a1:55:0f:50:67:be:76:48: 25:42:ad:ef:01:d4:fa:9a:53:85:2b:68:52:9a:a3:75:00:00: 36:fe:c6:56:ce:77:da:6d:a0:44:79:cd:56:86:bd:01:33:18: 7a:6a:e7:3a:44:95:d6:61:86:9a:9a:b6:ca:74:52:fc:29:7a: ea:52:16:b7:dd:16:f3:15:85:07:d2:ff:f2:f5:23:33:3d:a5: fc:36:a5:18:88:3b:c0:70:0b:41:59:1e:83:cd:ce:8c:1b:93: 95:04:46:2f:d6:77:e0:f8:36:25:fb:c6:9a:9f:94:02:1b:6e: cb:c0:98:39:66:29:63:e0:23:5a:28:54:a7:3d:52:82:48:cf: af:5a:06:59:47:fa:b5:6b:00:97:98:01:38:66:5f:db:32:40: a2:73:31:5c:e2:b1:40:32:54:04:c0:8f:26:bc:f7:18:62:4f: d3:f2:84:97 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUZ3DHCjkEQHfRnHOmnr2Vs61Rsc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZD ODg5MjNGMDAeFw0yNjAzMTIxNjA0NTRaFw0yNjAzMTMxNzU5NTRaMDMxMTAvBgNV BAMTKEI0QkI5QUE0QTlDMjhFMDA5RTc3NjNENzM1MjdGMkIwNEEzNkMzMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLS5lxu/s6rJUEAD830k4XHS0m jJBLFb7K+YX4zgMXA6Fzwf79T5rqgdMvP5Yh9f3ie2pwrEsg16wJSnHpN/rU4e9J 48lD4vALW2uHl84O2YQb09JNoVjdeZh66LsiKO45YOUg9XLsyuVSRkN2ACx/GH0j V+nZKRWMgjabAV2L+6OW6s8ExeA7lXt1/oroNAYSHqd8LUAuD9ywiKkOxB/Vhcrc EfGvCVgBFXaTgcyA2qq2b3+gvYyo7Koptu3aZsJhnojqIrNdk45G1lrW46/4zE0P /k1FKNP/uAukjj6m86q0LcJ8Pe8ydIeCseow/cytvJTrjwB3xt4EWHs2p6fbAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUtLuapKnCjgCed2PXNSfysEo2wwYwHwYDVR0j BBgwFoAUICqC2m5zzkJi4Yuu1go/psiJI/AwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDliZDM4ODgtOTMwMi00YjZmLWEwMTctMmI0YmJhNWU1 N2JiLzEvMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZDODg5MjNGMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDJBODJEQTZFNzNDRTQyNjJFMThCQUVE NjBBM0ZBNkM4ODkyM0YwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q5YmQzODg4LTkzMDItNGI2Zi1hMDE3LTJiNGJiYTVlNTdiYi8xLzIwMkE4MkRB NkU3M0NFNDI2MkUxOEJBRUQ2MEEzRkE2Qzg4OTIzRjAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCJVNHm HWzm+1w16NVpv3nKGir4bhEiEePPotghc6nRQaGR+PtUMy1OxWgVa3kU+MEnejlg weMY1Wglo19LuRsDsMDXKRSUECZr8UuxNASpTQMmoVUPUGe+dkglQq3vAdT6mlOF K2hSmqN1AAA2/sZWznfabaBEec1Whr0BMxh6auc6RJXWYYaamrbKdFL8KXrqUha3 3RbzFYUH0v/y9SMzPaX8NqUYiDvAcAtBWR6Dzc6MG5OVBEYv1nfg+DYl+8aan5QC G27LwJg5Zilj4CNaKFSnPVKCSM+vWgZZR/q1awCXmAE4Zl/bMkCiczFc4rFAMlQE wI8mvPcYYk/T8oSX -----END CERTIFICATE-----Generated at Thu Mar 12 18:39:10 2026 by rpki-client