$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft File: 20914720382A1F52B950212C138E5E1E81BA69B7.mft (raw, json) Hash identifier: i5IZFuQRKU4maoFQVh+DqctkORRrk6vefEJ6sp0N9Rk= Subject key identifier: F3:C9:50:51:C6:16:07:E0:97:71:25:30:8F:53:0F:CE:E0:E6:8F:A4 Authority key identifier: 20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 Certificate issuer: /CN=20914720382A1F52B950212C138E5E1E81BA69B7 Certificate serial: 27E760154182AEE199283884E43A4B8A1AC77857 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft Manifest number: C2 Signing time: Tue 21 Apr 2026 01:10:58 +0000 Manifest this update: Tue 21 Apr 2026 01:05:58 +0000 Manifest next update: Wed 22 Apr 2026 03:43:58 +0000 Files and hashes: 1: 326131343a373538363a363130383a3a2f34382d3438203d3e20323036303639.roa (hash: YcX2njhT0h6sqLfQ++klkVsJcPGnxKOwp/btnzs91NI=) 2: 326131343a373538363a363130353a3a2f34382d3438203d3e20323034323131.roa (hash: dJUl+RAxxY+nIO2HtMh4e2KW3S6TxZr3e2E6ku/vRA8=) 3: 326131343a373538363a363130333a3a2f34382d3438203d3e20323034323131.roa (hash: EI2JmFR4s32Lz8tNongWwvU2DoYm1aiqo+qr8ZW+vPo=) 4: 326131343a373538363a363130313a3a2f34382d3438203d3e20323034323131.roa (hash: DvKmhwWtZsD6TNvQ0eoVfIFrblMkYKUJ35ZR+X3ClBk=) 5: 326131343a373538363a363130373a3a2f34382d3438203d3e20323034323131.roa (hash: V2Vm92YYMyExADS3i94TFi72XsprSieZvIiYJxwsskY=) 6: 326131343a373538363a363130363a3a2f34382d3438203d3e20323034323131.roa (hash: 8Vi1BDc187e4orwxGy0/rqG4GuMIpMb05XZjAeVSKdg=) 7: 20914720382A1F52B950212C138E5E1E81BA69B7.crl (hash: iJYntbeoVrXGmMyvBBC35bZ6x6xS/zG5Qk5a7P7sMpg=) 8: 326131343a373538363a363130323a3a2f34382d3438203d3e20323034323131.roa (hash: qV00rauBPvkNMm+ROCk1kFFtfkMd60Wl/gebvBC2C58=) 9: 326131343a373538363a363131303a3a2f34382d3438203d3e20323034323131.roa (hash: 6oVaAmUHgRd5I4Ls+xapNszkxDvRNa6SDHify0SU1pc=) 10: 326131343a373538363a363130303a3a2f34382d3438203d3e20323034323131.roa (hash: i8FxewYN5kk5O+OQO1ECyW70BJ7pMmYObv0lFKAtrXI=) 11: 140CF895225100CF571959173341D92070FF6E7C.cer (hash: +gzaj8eEKWdYwLDpey4WTnj+Qv54R/A4poIj/Ug/o3g=) 12: 326131343a373538363a363130393a3a2f34382d3438203d3e20323036303639.roa (hash: 9Mftss1+c95DzTv4paxBdS9SaT6MzQYoLspmrnfShYQ=) 13: 4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.cer (hash: znj2KhD7dc90RL/SNmhicRPp3l/LZp/snY3wx3mPdJM=) 14: 326131343a373538363a363130303a3a2f34302d3438203d3e20323034323131.roa (hash: 15ggjMeHqDIREZjw9l6zy4xOfQOxACvn6hmmAmBgsSg=) 15: A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer (hash: LIw+9YueTEadEb6FMnXZVJNJunAxL+lQyOpAh/THcyY=) 16: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer (hash: pIADUm7hELp/Vqdstf8d4gGEQz21lMe/aoJyEiVS1CI=) 17: 326131343a373538363a363130343a3a2f34382d3438203d3e20323034323131.roa (hash: Mx3SvpD488YSM7QhBcQhFXDhTEiCBu3kBzOrFFQvDHI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Apr 2026 03:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:e7:60:15:41:82:ae:e1:99:28:38:84:e4:3a:4b:8a:1a:c7:78:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20914720382A1F52B950212C138E5E1E81BA69B7 Validity Not Before: Apr 21 01:05:58 2026 GMT Not After : Apr 22 03:43:58 2026 GMT Subject: CN=F3C95051C61607E0977125308F530FCEE0E68FA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6c:73:7d:e8:fe:3e:d1:d5:44:5f:31:65:f2: 27:f8:db:4a:05:f9:0c:3b:5a:44:2e:44:2e:55:9b: 06:99:be:11:84:81:78:11:67:06:22:e2:9e:b4:0b: fe:cb:9a:17:59:a1:6e:a5:09:a0:1c:53:0c:be:b1: 61:8d:f5:12:79:3b:90:8c:8e:90:a9:a6:2f:ff:1b: 0f:97:a8:b4:7c:3e:66:54:e8:ec:13:e4:80:6a:66: 10:55:ff:e9:b1:21:73:91:04:4a:46:a4:37:6a:ba: 8f:12:73:33:4c:67:fe:c9:55:17:06:05:c8:4d:fc: 14:fe:4c:1e:7b:0b:57:69:57:6d:9b:d8:b7:53:6d: 38:3a:bb:ca:2e:0a:a2:9c:c1:1c:be:e2:9e:d8:aa: 73:be:11:7a:51:c2:11:2c:71:6d:17:cd:c4:e1:75: 16:f4:7e:f4:05:cd:84:88:ca:0d:5d:df:50:46:61: 48:3d:97:96:4a:59:2d:ff:1c:8c:13:2c:da:88:51: 07:bb:3e:3b:6a:bf:4b:ef:51:08:a5:2f:57:04:06: 10:af:da:ce:f0:8f:13:dc:f6:7c:1a:9d:3e:a7:83: c3:eb:cf:80:87:97:06:5a:52:62:3c:93:39:a3:f5: cb:97:be:f4:9c:6c:7d:99:cf:d9:cf:77:d4:c7:4b: d5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C9:50:51:C6:16:07:E0:97:71:25:30:8F:53:0F:CE:E0:E6:8F:A4 X509v3 Authority Key Identifier: keyid:20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:8a:da:4e:f3:11:a0:21:9b:94:76:bb:26:d5:be:37:ca:4a: b9:75:51:69:e4:63:95:ae:58:d6:3f:47:fb:1c:33:1d:78:c4: 7d:79:c7:37:58:ba:6b:c0:9d:71:47:99:58:ac:53:f8:25:70: aa:11:64:9a:6c:dc:0d:94:7f:87:24:07:c0:d0:ee:86:46:c9: b4:16:25:9e:fc:17:42:86:d9:99:9b:c4:d0:52:3e:a8:a6:60: 9b:2d:7d:38:a9:58:5a:4f:7d:60:de:c3:b1:00:22:ef:8c:6a: 79:e1:7a:60:38:1d:57:b5:33:54:1c:36:fc:ad:44:8e:8d:e4: 22:70:f7:cc:78:49:46:81:fd:91:c5:84:37:4e:58:88:ac:1e: 43:db:c5:3f:0b:31:ca:6f:af:8e:78:37:a6:7a:e3:f7:70:ce: 59:bb:90:92:0a:58:8a:88:6d:9b:f5:c2:e9:8c:0e:6b:b6:c9: 11:2e:bc:b1:15:a3:f7:0f:b3:e5:b4:9c:e2:70:4d:98:5d:de: 84:c6:67:e4:98:f0:2c:61:5f:b0:24:79:d0:a7:2e:2a:f1:fb: 2e:3c:e8:6a:7b:ad:32:88:0e:1a:fe:30:28:4c:66:86:d4:a9: 6c:ee:ae:70:23:c2:92:20:02:df:79:89:d3:15:5c:c7:07:d6: fc:6b:31:bd -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUJ+dgFUGCruGZKDiE5DpLihrHeFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4 MUJBNjlCNzAeFw0yNjA0MjEwMTA1NThaFw0yNjA0MjIwMzQzNThaMDMxMTAvBgNV BAMTKEYzQzk1MDUxQzYxNjA3RTA5NzcxMjUzMDhGNTMwRkNFRTBFNjhGQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsbHN96P4+0dVEXzFl8if420oF +Qw7WkQuRC5VmwaZvhGEgXgRZwYi4p60C/7LmhdZoW6lCaAcUwy+sWGN9RJ5O5CM jpCppi//Gw+XqLR8PmZU6OwT5IBqZhBV/+mxIXORBEpGpDdquo8SczNMZ/7JVRcG BchN/BT+TB57C1dpV22b2LdTbTg6u8ouCqKcwRy+4p7YqnO+EXpRwhEscW0XzcTh dRb0fvQFzYSIyg1d31BGYUg9l5ZKWS3/HIwTLNqIUQe7Pjtqv0vvUQilL1cEBhCv 2s7wjxPc9nwanT6ng8Prz4CHlwZaUmI8kzmj9cuXvvScbH2Zz9nPd9THS9WRAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU88lQUcYWB+CXcSUwj1MPzuDmj6QwHwYDVR0j BBgwFoAUIJFHIDgqH1K5UCEsE45eHoG6abcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzMvMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4MUJBNjlCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDkxNDcyMDM4MkExRjUyQjk1MDIxMkMx MzhFNUUxRTgxQkE2OUI3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y1MzJiOWViLTJmYWUtNDhhOC05NzkzLTMzZWVjMDY3Y2UzOS8zLzIwOTE0NzIw MzgyQTFGNTJCOTUwMjEyQzEzOEU1RTFFODFCQTY5QjcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCmitpO 8xGgIZuUdrsm1b43ykq5dVFp5GOVrljWP0f7HDMdeMR9ecc3WLprwJ1xR5lYrFP4 JXCqEWSabNwNlH+HJAfA0O6GRsm0FiWe/BdChtmZm8TQUj6opmCbLX04qVhaT31g 3sOxACLvjGp54XpgOB1XtTNUHDb8rUSOjeQicPfMeElGgf2RxYQ3TliIrB5D28U/ CzHKb6+OeDemeuP3cM5Zu5CSCliKiG2b9cLpjA5rtskRLryxFaP3D7PltJzicE2Y Xd6ExmfkmPAsYV+wJHnQpy4q8fsuPOhqe60yiA4a/jAoTGaG1Kls7q5wI8KSIALf eYnTFVzHB9b8azG9 -----END CERTIFICATE-----Generated at Tue Apr 21 16:36:38 2026 by rpki-client