$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft File: 20914720382A1F52B950212C138E5E1E81BA69B7.mft (raw, json) Hash identifier: 8y8nO6/DLWWwDYOqE/m3cZfdPwr617ru+oucmS9nkow= Subject key identifier: 69:AC:F9:1A:2C:7B:14:9B:2C:1F:DC:E8:23:16:38:BA:C6:00:58:69 Authority key identifier: 20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 Certificate issuer: /CN=20914720382A1F52B950212C138E5E1E81BA69B7 Certificate serial: 3DB5EDBB7948F32DAEC76A6544B0520DAAB6774D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft Manifest number: 018E Signing time: Tue 21 Jul 2026 05:28:04 +0000 Manifest this update: Tue 21 Jul 2026 05:23:04 +0000 Manifest next update: Wed 22 Jul 2026 06:23:04 +0000 Files and hashes: 1: 9868B8A018D41E9D418D93B52C0A31174F40F11E.cer (hash: 23+dwQKC9EhxR8/c837o7SVJ7wuGJrKYeRXm+DcGamE=) 2: 326131343a373538363a363130373a3a2f34382d3438203d3e20323034323131.roa (hash: V2Vm92YYMyExADS3i94TFi72XsprSieZvIiYJxwsskY=) 3: 326131343a373538363a363130353a3a2f34382d3438203d3e20323034323131.roa (hash: dJUl+RAxxY+nIO2HtMh4e2KW3S6TxZr3e2E6ku/vRA8=) 4: 326131343a373538363a363130393a3a2f34382d3438203d3e20323036303639.roa (hash: 9Mftss1+c95DzTv4paxBdS9SaT6MzQYoLspmrnfShYQ=) 5: 326131343a373538363a363130383a3a2f34382d3438203d3e20323034323131.roa (hash: ZgjB8m1thnqWfHedFQRot49v76xsWvW29soNj1KmfdQ=) 6: 326131343a373538363a363130303a3a2f34382d3438203d3e20323034323131.roa (hash: i8FxewYN5kk5O+OQO1ECyW70BJ7pMmYObv0lFKAtrXI=) 7: 326131343a373538363a363130333a3a2f34382d3438203d3e20323034323131.roa (hash: EI2JmFR4s32Lz8tNongWwvU2DoYm1aiqo+qr8ZW+vPo=) 8: 20914720382A1F52B950212C138E5E1E81BA69B7.crl (hash: JfIWuhlJJSPlFv7KTyQls9Kz5Ur8M28spXYi+VVRM9I=) 9: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer (hash: pIADUm7hELp/Vqdstf8d4gGEQz21lMe/aoJyEiVS1CI=) 10: 326131343a373538363a363130313a3a2f34382d3438203d3e20323034323131.roa (hash: DvKmhwWtZsD6TNvQ0eoVfIFrblMkYKUJ35ZR+X3ClBk=) 11: 326131343a373538363a363131343a3a2f34382d3438203d3e203131343231.roa (hash: N8XzyTZUvph6r/e12CjdTH60sBk3Wl4kicz6qoC6S0s=) 12: 326131343a373538363a363530303a3a2f34302d3438203d3e20323032333936.roa (hash: dYDF2I04t+LIOjBAiMrzBqWk6adCjIN+miZ36ttNxLA=) 13: 326131343a373538363a363130323a3a2f34382d3438203d3e20323034323131.roa (hash: qV00rauBPvkNMm+ROCk1kFFtfkMd60Wl/gebvBC2C58=) 14: 326131343a373538363a363131323a3a2f34382d3438203d3e20323036303639.roa (hash: w5QHtu9cQyKjArMrfA6wboJd2mLuch9xpK2TkgucmN8=) 15: 140CF895225100CF571959173341D92070FF6E7C.cer (hash: +gzaj8eEKWdYwLDpey4WTnj+Qv54R/A4poIj/Ug/o3g=) 16: 326131343a373538363a363131333a3a2f34382d3438203d3e20323034323131.roa (hash: sZKmIrdMvk64uefomVxqrQfIRfYdr41SjuDolYGmZ5U=) 17: A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer (hash: HaOTs00ABR4oq188XgDGY4Bz1D1LtxHczmhg3edIxrA=) 18: 326131343a373538363a363131303a3a2f34382d3438203d3e20323034323131.roa (hash: 6oVaAmUHgRd5I4Ls+xapNszkxDvRNa6SDHify0SU1pc=) 19: 326131343a373538363a363131313a3a2f34382d3438203d3e20323036303639.roa (hash: 3q7X88pIOl+dnnYtANwsrZeJh9YzsRCK2Bzv3ILW5DA=) 20: 326131343a373538363a363130363a3a2f34382d3438203d3e20323034323131.roa (hash: 8Vi1BDc187e4orwxGy0/rqG4GuMIpMb05XZjAeVSKdg=) 21: 326131343a373538363a363130343a3a2f34382d3438203d3e20323034323131.roa (hash: Mx3SvpD488YSM7QhBcQhFXDhTEiCBu3kBzOrFFQvDHI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 06:23:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b5:ed:bb:79:48:f3:2d:ae:c7:6a:65:44:b0:52:0d:aa:b6:77:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20914720382A1F52B950212C138E5E1E81BA69B7 Validity Not Before: Jul 21 05:23:04 2026 GMT Not After : Jul 22 06:23:04 2026 GMT Subject: CN=69ACF91A2C7B149B2C1FDCE8231638BAC6005869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:84:a0:d4:d0:45:19:28:91:aa:af:c8:bf:e9: 57:2d:e3:45:48:0f:a0:14:56:99:ab:50:3b:6d:01: d8:02:66:7b:4e:ee:29:f2:70:4d:05:34:df:3b:3d: d1:e5:29:ca:51:34:fe:72:99:3c:a7:3b:f7:58:e1: e4:aa:48:0e:ec:79:93:ec:69:6c:ae:3c:b2:51:92: b6:a4:0d:2e:f4:04:bb:17:45:66:5e:e9:bd:55:e0: 26:b6:1d:9a:8a:75:d0:28:2c:5e:43:1c:cd:f8:3e: c6:eb:a5:41:fa:79:ba:66:3b:b4:8f:98:1f:93:8f: da:04:e5:1b:fb:2a:6e:40:2d:89:41:ba:9f:48:43: ed:bf:3e:fb:7b:c1:56:80:7c:8f:e1:53:4f:64:76: 23:27:b8:4b:03:44:92:5a:95:7f:06:c8:31:a3:dd: 65:9f:ca:81:bc:66:db:e8:18:d5:10:6b:5f:04:74: 97:e3:a7:3d:d1:3e:0a:79:6d:81:25:5e:88:52:44: 01:ea:65:cc:f9:19:98:d5:ad:9d:c3:f3:0c:de:9b: f3:9a:f8:1e:6d:63:b1:b7:74:9a:8a:a8:80:df:21: 41:33:90:4d:a2:3c:21:b1:21:28:95:ad:e6:d1:45: e0:58:7c:e1:ea:80:71:61:fb:fa:30:af:8f:d9:d9: cd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AC:F9:1A:2C:7B:14:9B:2C:1F:DC:E8:23:16:38:BA:C6:00:58:69 X509v3 Authority Key Identifier: keyid:20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:d3:30:12:c0:66:9f:83:70:01:b9:bc:32:70:1a:01:79:f5: ac:6f:d8:37:e8:c2:6d:22:67:30:a7:a7:ee:b4:51:0e:74:62: 6b:4e:d8:1f:8c:bb:81:2f:9c:23:1e:ed:ee:81:40:32:ee:5f: 7c:c0:59:1f:26:53:62:5a:eb:ba:8c:d4:e6:d5:fc:35:0f:ce: e0:66:b5:4d:83:92:26:7a:d0:4a:5f:0c:86:61:8f:a6:fa:be: 12:85:16:9a:e7:61:56:cb:71:b9:79:66:7e:e6:80:b7:d9:fc: 5c:62:8a:75:7b:48:f3:4c:6e:35:93:b3:87:dd:33:24:8f:87: c7:c9:4b:ab:9e:4d:3a:6f:d1:2b:b4:2a:4e:b2:5d:01:2c:78: ac:4e:81:3a:34:d4:70:10:ff:b0:2a:7a:0e:98:6b:e5:6b:4c: 3c:f5:26:04:33:d5:60:4e:ed:02:48:0a:4b:7f:30:81:db:ca: aa:53:90:fd:5b:ed:67:c9:ef:74:87:9b:18:4a:61:f0:22:e2: 59:d2:7f:99:3f:f8:fd:3e:7e:73:45:97:ff:4d:2f:ac:ce:e6: 7e:98:5f:53:58:6a:09:38:bd:92:90:d4:ac:92:58:6d:f3:1d: d4:00:d0:99:cc:f5:97:1c:0f:35:46:88:72:2c:68:43:22:78: 1e:c1:04:15 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPbXtu3lI8y2ux2plRLBSDaq2d00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4 MUJBNjlCNzAeFw0yNjA3MjEwNTIzMDRaFw0yNjA3MjIwNjIzMDRaMDMxMTAvBgNV BAMTKDY5QUNGOTFBMkM3QjE0OUIyQzFGRENFODIzMTYzOEJBQzYwMDU4NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDhKDU0EUZKJGqr8i/6Vct40VI D6AUVpmrUDttAdgCZntO7inycE0FNN87PdHlKcpRNP5ymTynO/dY4eSqSA7seZPs aWyuPLJRkrakDS70BLsXRWZe6b1V4Ca2HZqKddAoLF5DHM34PsbrpUH6ebpmO7SP mB+Tj9oE5Rv7Km5ALYlBup9IQ+2/Pvt7wVaAfI/hU09kdiMnuEsDRJJalX8GyDGj 3WWfyoG8ZtvoGNUQa18EdJfjpz3RPgp5bYElXohSRAHqZcz5GZjVrZ3D8wzem/Oa +B5tY7G3dJqKqIDfIUEzkE2iPCGxISiVrebRReBYfOHqgHFh+/owr4/Z2c31AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUaaz5Gix7FJssH9zoIxY4usYAWGkwHwYDVR0j BBgwFoAUIJFHIDgqH1K5UCEsE45eHoG6abcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzMvMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4MUJBNjlCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDkxNDcyMDM4MkExRjUyQjk1MDIxMkMx MzhFNUUxRTgxQkE2OUI3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y1MzJiOWViLTJmYWUtNDhhOC05NzkzLTMzZWVjMDY3Y2UzOS8zLzIwOTE0NzIw MzgyQTFGNTJCOTUwMjEyQzEzOEU1RTFFODFCQTY5QjcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAA0zAS wGafg3ABubwycBoBefWsb9g36MJtImcwp6futFEOdGJrTtgfjLuBL5wjHu3ugUAy 7l98wFkfJlNiWuu6jNTm1fw1D87gZrVNg5ImetBKXwyGYY+m+r4ShRaa52FWy3G5 eWZ+5oC32fxcYop1e0jzTG41k7OH3TMkj4fHyUurnk06b9ErtCpOsl0BLHisToE6 NNRwEP+wKnoOmGvla0w89SYEM9VgTu0CSApLfzCB28qqU5D9W+1nye90h5sYSmHw IuJZ0n+ZP/j9Pn5zRZf/TS+szuZ+mF9TWGoJOL2SkNSsklht8x3UANCZzPWXHA81 RohyLGhDIngewQQV -----END CERTIFICATE-----Generated at Tue Jul 21 17:27:08 2026 by rpki-client