$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft File: 20914720382A1F52B950212C138E5E1E81BA69B7.mft (raw, json) Hash identifier: aKI3sU+In7yBJsSWesbOmvta7gfcxf95Emr2+2xJmtw= Subject key identifier: 7A:88:5B:89:3C:B2:EB:49:DB:3E:0E:C8:B4:FC:D9:5A:C2:F2:6C:1E Authority key identifier: 20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 Certificate issuer: /CN=20914720382A1F52B950212C138E5E1E81BA69B7 Certificate serial: 65CCDCAB5DFA83109DC1E9B639A96951EA25DBED Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft Manifest number: 01D3 Signing time: Fri 04 Sep 2026 09:55:36 +0000 Manifest this update: Fri 04 Sep 2026 09:50:36 +0000 Manifest next update: Sat 05 Sep 2026 11:50:36 +0000 Files and hashes: 1: 326131343a373538363a363131343a3a2f34382d3438203d3e203131343231.roa (hash: N8XzyTZUvph6r/e12CjdTH60sBk3Wl4kicz6qoC6S0s=) 2: 326131343a373538363a363131353a3a2f34382d3438203d3e20323034323131.roa (hash: fHz6pVWuLGQjD7QetfSux0qWn0AHLJxz5DWKRtDne50=) 3: 326131343a373538363a363130373a3a2f34382d3438203d3e20323034323131.roa (hash: V2Vm92YYMyExADS3i94TFi72XsprSieZvIiYJxwsskY=) 4: 326131343a373538363a363131313a3a2f34382d3438203d3e20323036303639.roa (hash: 3q7X88pIOl+dnnYtANwsrZeJh9YzsRCK2Bzv3ILW5DA=) 5: 326131343a373538363a363131303a3a2f34382d3438203d3e20323034323131.roa (hash: 6oVaAmUHgRd5I4Ls+xapNszkxDvRNa6SDHify0SU1pc=) 6: 326131343a373538363a363130323a3a2f34382d3438203d3e20323034323131.roa (hash: qV00rauBPvkNMm+ROCk1kFFtfkMd60Wl/gebvBC2C58=) 7: 326131343a373538363a363130333a3a2f34382d3438203d3e20323034323131.roa (hash: EI2JmFR4s32Lz8tNongWwvU2DoYm1aiqo+qr8ZW+vPo=) 8: 20914720382A1F52B950212C138E5E1E81BA69B7.crl (hash: vjDyOsIPNEIrrlFIlFyC9R2UC3lQfEHkpSuj0zOnuqY=) 9: 9868B8A018D41E9D418D93B52C0A31174F40F11E.cer (hash: 23+dwQKC9EhxR8/c837o7SVJ7wuGJrKYeRXm+DcGamE=) 10: 326131343a373538363a363130303a3a2f34382d3438203d3e20323034323131.roa (hash: i8FxewYN5kk5O+OQO1ECyW70BJ7pMmYObv0lFKAtrXI=) 11: 326131343a373538363a363131333a3a2f34382d3438203d3e20323034323131.roa (hash: sZKmIrdMvk64uefomVxqrQfIRfYdr41SjuDolYGmZ5U=) 12: 326131343a373538363a363130383a3a2f34382d3438203d3e20323034323131.roa (hash: ZgjB8m1thnqWfHedFQRot49v76xsWvW29soNj1KmfdQ=) 13: 326131343a373538363a363130393a3a2f34382d3438203d3e20323036303639.roa (hash: 9Mftss1+c95DzTv4paxBdS9SaT6MzQYoLspmrnfShYQ=) 14: 140CF895225100CF571959173341D92070FF6E7C.cer (hash: +gzaj8eEKWdYwLDpey4WTnj+Qv54R/A4poIj/Ug/o3g=) 15: A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer (hash: rX5SQAGmt3AeTLDVeW/sJ4Wd55ygHom7KTla5japZR8=) 16: 326131343a373538363a363130353a3a2f34382d3438203d3e20323034323131.roa (hash: dJUl+RAxxY+nIO2HtMh4e2KW3S6TxZr3e2E6ku/vRA8=) 17: 326131343a373538363a363130313a3a2f34382d3438203d3e20323034323131.roa (hash: DvKmhwWtZsD6TNvQ0eoVfIFrblMkYKUJ35ZR+X3ClBk=) 18: 326131343a373538363a363131323a3a2f34382d3438203d3e20323036303639.roa (hash: w5QHtu9cQyKjArMrfA6wboJd2mLuch9xpK2TkgucmN8=) 19: 326131343a373538363a363130363a3a2f34382d3438203d3e20323034323131.roa (hash: 8Vi1BDc187e4orwxGy0/rqG4GuMIpMb05XZjAeVSKdg=) 20: 326131343a373538363a363130343a3a2f34382d3438203d3e20323034323131.roa (hash: Mx3SvpD488YSM7QhBcQhFXDhTEiCBu3kBzOrFFQvDHI=) 21: 326131343a373538363a363530303a3a2f34302d3438203d3e20323032333936.roa (hash: dYDF2I04t+LIOjBAiMrzBqWk6adCjIN+miZ36ttNxLA=) 22: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer (hash: pIADUm7hELp/Vqdstf8d4gGEQz21lMe/aoJyEiVS1CI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 11:50:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:cc:dc:ab:5d:fa:83:10:9d:c1:e9:b6:39:a9:69:51:ea:25:db:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20914720382A1F52B950212C138E5E1E81BA69B7 Validity Not Before: Sep 4 09:50:36 2026 GMT Not After : Sep 5 11:50:36 2026 GMT Subject: CN=7A885B893CB2EB49DB3E0EC8B4FCD95AC2F26C1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:23:68:84:8d:e8:e9:a0:51:9b:32:9a:f1:2e: d5:26:bb:88:8c:53:b8:8a:69:d3:0a:cf:79:48:18: d1:bc:07:13:e8:3c:fd:ee:07:8c:eb:42:6a:cf:aa: bb:08:59:09:05:42:eb:9d:16:d1:05:0d:03:42:ff: 20:5f:f7:84:ca:b0:5e:2e:1c:9f:c4:0d:4d:19:cf: d9:64:0c:35:3a:08:ac:fd:36:06:26:6a:bd:70:0e: c9:bc:3e:02:5c:b2:fc:da:75:d2:39:bf:f3:d6:d8: ff:49:63:79:dc:33:00:f6:63:82:9e:f2:95:55:8b: 28:9d:d5:d4:04:62:c2:03:12:6f:53:b6:6a:fa:b2: d4:12:6e:d2:a4:4e:ec:ee:81:9a:88:80:3b:f8:a8: 12:16:45:44:f4:45:18:20:7e:08:08:2f:25:7d:cd: da:fb:b2:ee:d5:23:8e:85:23:55:a8:42:b9:fb:67: 25:ac:a9:3a:9a:22:e7:01:38:6e:75:9f:37:7d:dc: 83:37:8a:18:a7:1f:85:16:1c:80:c1:cf:fb:21:b8: a5:fd:6e:77:c4:ff:18:84:6a:83:ae:c3:10:7d:17: 27:f0:13:84:b1:ff:a1:63:a7:db:64:f6:86:ff:f6: 2b:91:0a:ec:5f:c0:aa:67:de:fe:1e:0d:a9:b7:21: 25:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:88:5B:89:3C:B2:EB:49:DB:3E:0E:C8:B4:FC:D9:5A:C2:F2:6C:1E X509v3 Authority Key Identifier: keyid:20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:a5:de:bb:be:16:14:53:08:87:e2:36:5e:c2:72:57:1c:48: c3:aa:03:fe:af:aa:4c:8d:7f:0b:98:cc:6f:8d:ae:9a:2c:a0: dd:27:c1:dd:44:01:29:b2:3d:ac:9b:46:4b:f6:ee:2e:f9:97: 40:60:14:09:d6:c3:dd:a7:8d:d0:a1:91:81:0e:6e:66:4e:17: 10:69:1d:c5:44:0c:30:18:58:0c:df:a9:53:28:ac:31:73:cc: 8c:0f:a7:5f:f4:ba:63:a7:6a:14:b0:a9:5e:86:81:9d:d1:c4: 06:7c:c5:09:1e:49:a1:53:69:10:d5:88:b2:92:19:ef:7f:d6: 2a:2b:d6:eb:e5:59:9b:0e:17:1f:7d:b7:99:a5:88:af:df:f9: f9:58:43:30:4f:c1:73:52:94:a5:10:bb:a4:cc:a5:da:a1:9b: fa:13:ce:cc:f1:03:65:d8:b1:bb:66:43:e8:68:af:e9:44:81: 95:63:df:27:c5:c9:63:a2:ab:40:20:46:2a:2c:07:87:9b:5c: b0:26:69:db:cd:5f:b0:59:98:e9:31:eb:24:a0:30:cc:ba:58: 65:0c:9e:f1:9b:2f:79:a1:a3:6b:f2:36:f6:58:64:c3:ee:2f: 2f:67:1c:df:42:1f:33:98:54:04:35:84:82:2f:d6:5f:97:00: 13:c5:e5:59 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUZczcq136gxCdwem2OalpUeol2+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4 MUJBNjlCNzAeFw0yNjA5MDQwOTUwMzZaFw0yNjA5MDUxMTUwMzZaMDMxMTAvBgNV BAMTKDdBODg1Qjg5M0NCMkVCNDlEQjNFMEVDOEI0RkNEOTVBQzJGMjZDMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5I2iEjejpoFGbMprxLtUmu4iM U7iKadMKz3lIGNG8BxPoPP3uB4zrQmrPqrsIWQkFQuudFtEFDQNC/yBf94TKsF4u HJ/EDU0Zz9lkDDU6CKz9NgYmar1wDsm8PgJcsvzaddI5v/PW2P9JY3ncMwD2Y4Ke 8pVViyid1dQEYsIDEm9Ttmr6stQSbtKkTuzugZqIgDv4qBIWRUT0RRggfggILyV9 zdr7su7VI46FI1WoQrn7ZyWsqTqaIucBOG51nzd93IM3ihinH4UWHIDBz/shuKX9 bnfE/xiEaoOuwxB9FyfwE4Sx/6Fjp9tk9ob/9iuRCuxfwKpn3v4eDam3ISUJAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUeohbiTyy60nbPg7ItPzZWsLybB4wHwYDVR0j BBgwFoAUIJFHIDgqH1K5UCEsE45eHoG6abcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzMvMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4MUJBNjlCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDkxNDcyMDM4MkExRjUyQjk1MDIxMkMx MzhFNUUxRTgxQkE2OUI3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y1MzJiOWViLTJmYWUtNDhhOC05NzkzLTMzZWVjMDY3Y2UzOS8zLzIwOTE0NzIw MzgyQTFGNTJCOTUwMjEyQzEzOEU1RTFFODFCQTY5QjcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC5pd67 vhYUUwiH4jZewnJXHEjDqgP+r6pMjX8LmMxvja6aLKDdJ8HdRAEpsj2sm0ZL9u4u +ZdAYBQJ1sPdp43QoZGBDm5mThcQaR3FRAwwGFgM36lTKKwxc8yMD6df9Lpjp2oU sKlehoGd0cQGfMUJHkmhU2kQ1Yiykhnvf9YqK9br5VmbDhcffbeZpYiv3/n5WEMw T8FzUpSlELukzKXaoZv6E87M8QNl2LG7ZkPoaK/pRIGVY98nxcljoqtAIEYqLAeH m1ywJmnbzV+wWZjpMeskoDDMulhlDJ7xmy95oaNr8jb2WGTD7i8vZxzfQh8zmFQE NYSCL9ZflwATxeVZ -----END CERTIFICATE-----Generated at Fri Sep 4 23:47:08 2026 by rpki-client