$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft File: 20914720382A1F52B950212C138E5E1E81BA69B7.mft (raw, json) Hash identifier: fFspB6WU+bT9hjFlrZynRCnuH6LyDORUYiY/cP2ZPVk= Subject key identifier: AD:FE:E2:06:AB:F7:A6:6D:94:09:E3:99:3B:EF:34:54:80:0E:78:45 Authority key identifier: 20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 Certificate issuer: /CN=20914720382A1F52B950212C138E5E1E81BA69B7 Certificate serial: 552F464B03285529CF0F17E7D2160BD28FDCBF97 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft Manifest number: 011D Signing time: Fri 05 Jun 2026 17:49:19 +0000 Manifest this update: Fri 05 Jun 2026 17:44:19 +0000 Manifest next update: Sat 06 Jun 2026 21:27:19 +0000 Files and hashes: 1: 326131343a373538363a363130373a3a2f34382d3438203d3e20323034323131.roa (hash: V2Vm92YYMyExADS3i94TFi72XsprSieZvIiYJxwsskY=) 2: 9868B8A018D41E9D418D93B52C0A31174F40F11E.cer (hash: 23+dwQKC9EhxR8/c837o7SVJ7wuGJrKYeRXm+DcGamE=) 3: 326131343a373538363a363130323a3a2f34382d3438203d3e20323034323131.roa (hash: qV00rauBPvkNMm+ROCk1kFFtfkMd60Wl/gebvBC2C58=) 4: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer (hash: pIADUm7hELp/Vqdstf8d4gGEQz21lMe/aoJyEiVS1CI=) 5: 326131343a373538363a363130303a3a2f34382d3438203d3e20323034323131.roa (hash: i8FxewYN5kk5O+OQO1ECyW70BJ7pMmYObv0lFKAtrXI=) 6: 326131343a373538363a363131303a3a2f34382d3438203d3e20323034323131.roa (hash: 6oVaAmUHgRd5I4Ls+xapNszkxDvRNa6SDHify0SU1pc=) 7: 326131343a373538363a363130393a3a2f34382d3438203d3e20323036303639.roa (hash: 9Mftss1+c95DzTv4paxBdS9SaT6MzQYoLspmrnfShYQ=) 8: 326131343a373538363a363130353a3a2f34382d3438203d3e20323034323131.roa (hash: dJUl+RAxxY+nIO2HtMh4e2KW3S6TxZr3e2E6ku/vRA8=) 9: 20914720382A1F52B950212C138E5E1E81BA69B7.crl (hash: otLI/6Rw5jL5rlNnWIA2hDgcvXSk+CXXj8lEPgCj+bc=) 10: 326131343a373538363a363130333a3a2f34382d3438203d3e20323034323131.roa (hash: EI2JmFR4s32Lz8tNongWwvU2DoYm1aiqo+qr8ZW+vPo=) 11: A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer (hash: +7JbzNbRGszdvhyk49zRH9L6jHQJoO4BFo0rQVZj7GE=) 12: 326131343a373538363a363130313a3a2f34382d3438203d3e20323034323131.roa (hash: DvKmhwWtZsD6TNvQ0eoVfIFrblMkYKUJ35ZR+X3ClBk=) 13: 326131343a373538363a363130343a3a2f34382d3438203d3e20323034323131.roa (hash: Mx3SvpD488YSM7QhBcQhFXDhTEiCBu3kBzOrFFQvDHI=) 14: 140CF895225100CF571959173341D92070FF6E7C.cer (hash: +gzaj8eEKWdYwLDpey4WTnj+Qv54R/A4poIj/Ug/o3g=) 15: 326131343a373538363a363530303a3a2f34302d3438203d3e20323032333936.roa (hash: dYDF2I04t+LIOjBAiMrzBqWk6adCjIN+miZ36ttNxLA=) 16: 326131343a373538363a363130363a3a2f34382d3438203d3e20323034323131.roa (hash: 8Vi1BDc187e4orwxGy0/rqG4GuMIpMb05XZjAeVSKdg=) 17: 326131343a373538363a363131313a3a2f34382d3438203d3e20323036303639.roa (hash: 3q7X88pIOl+dnnYtANwsrZeJh9YzsRCK2Bzv3ILW5DA=) 18: 326131343a373538363a363131323a3a2f34382d3438203d3e20323036303639.roa (hash: w5QHtu9cQyKjArMrfA6wboJd2mLuch9xpK2TkgucmN8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Jun 2026 19:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:2f:46:4b:03:28:55:29:cf:0f:17:e7:d2:16:0b:d2:8f:dc:bf:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20914720382A1F52B950212C138E5E1E81BA69B7 Validity Not Before: Jun 5 17:44:19 2026 GMT Not After : Jun 6 21:27:19 2026 GMT Subject: CN=ADFEE206ABF7A66D9409E3993BEF3454800E7845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d2:36:49:be:1f:24:e0:5a:f0:bb:dd:43:23: 6c:0b:1a:c2:34:c9:dc:87:04:2e:61:cc:af:0e:a8: ab:b4:b9:76:e3:7b:08:07:76:32:a0:51:17:25:b5: d0:1a:dd:fd:b8:cb:65:15:74:39:df:7c:fa:32:a6: 73:1c:31:5a:c3:24:dd:73:af:ec:8c:17:eb:cb:5d: f0:b8:ce:e0:61:9e:3e:65:86:4b:e4:16:db:37:89: 9c:10:51:e1:ed:21:39:be:c1:52:43:53:d7:43:be: de:b5:2d:da:71:41:17:42:fc:6c:b8:a9:2a:f8:60: 47:c0:22:2a:cf:34:64:54:84:bf:0b:af:27:19:88: 8b:9f:58:33:31:14:09:23:70:e7:4f:0b:97:10:02: 46:e0:75:36:ab:c7:35:9b:cc:06:a5:46:5e:ba:cc: 68:aa:bd:f3:1d:31:62:57:e3:56:1d:d4:7d:b7:92: 5f:b3:b5:01:72:e3:e3:98:31:4b:18:db:c8:2c:83: 9d:fd:bc:37:dc:c1:70:2b:24:95:6d:a2:08:71:04: 39:c6:94:79:c8:c6:82:55:c0:6c:2c:9e:89:be:4e: fe:3c:e2:bd:88:03:74:81:9b:0c:1d:0d:7c:30:07: 61:51:06:fe:39:05:6c:ff:e7:a8:da:7d:a1:4c:12: 6b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FE:E2:06:AB:F7:A6:6D:94:09:E3:99:3B:EF:34:54:80:0E:78:45 X509v3 Authority Key Identifier: keyid:20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:80:73:7d:53:19:99:7d:01:92:15:af:9a:0f:50:cb:bf:e5: 2d:97:dc:54:ec:44:4b:e0:11:4d:e8:4e:ba:f5:d5:e4:fa:b4: 67:24:73:12:ce:1b:d6:34:7a:c8:3c:5a:ec:0f:3d:b9:20:c1: e2:26:b8:76:86:68:65:50:99:e4:94:66:1d:95:72:06:a0:d4: 87:23:21:f7:b5:20:9f:7d:de:94:4c:c6:d5:70:7e:be:1f:4b: 71:c2:cd:b8:b7:cf:0d:9a:01:2d:6b:bf:51:2e:72:6c:d9:c0: a0:d6:d9:6d:9c:77:2c:0d:a3:6a:98:71:25:dd:82:6c:27:07: f3:9a:68:22:74:ab:69:b7:59:2c:cc:2c:c1:e1:b5:a8:a8:df: 0b:07:a9:de:dd:29:a4:3f:a4:ed:7d:9c:54:11:b0:2f:32:95: cd:be:10:1a:fe:c7:69:ef:ce:dc:a6:c7:47:30:7b:f3:fb:ed: cd:f4:74:46:dd:04:83:c2:92:08:c6:de:6b:95:97:df:7c:9b: 45:cb:b6:2a:2c:9c:9f:7e:5b:51:d8:75:d2:ca:68:ab:05:63: 88:0a:9b:eb:76:ba:ff:67:aa:e7:db:d6:02:6e:ee:27:ce:48: c6:44:c7:af:c4:b4:aa:0d:93:9f:fb:9c:19:29:fb:48:4e:a1: d1:f1:07:8a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUVS9GSwMoVSnPDxfn0hYL0o/cv5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4 MUJBNjlCNzAeFw0yNjA2MDUxNzQ0MTlaFw0yNjA2MDYyMTI3MTlaMDMxMTAvBgNV BAMTKEFERkVFMjA2QUJGN0E2NkQ5NDA5RTM5OTNCRUYzNDU0ODAwRTc4NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr0jZJvh8k4Frwu91DI2wLGsI0 ydyHBC5hzK8OqKu0uXbjewgHdjKgURcltdAa3f24y2UVdDnffPoypnMcMVrDJN1z r+yMF+vLXfC4zuBhnj5lhkvkFts3iZwQUeHtITm+wVJDU9dDvt61LdpxQRdC/Gy4 qSr4YEfAIirPNGRUhL8LrycZiIufWDMxFAkjcOdPC5cQAkbgdTarxzWbzAalRl66 zGiqvfMdMWJX41Yd1H23kl+ztQFy4+OYMUsY28gsg539vDfcwXArJJVtoghxBDnG lHnIxoJVwGwsnom+Tv484r2IA3SBmwwdDXwwB2FRBv45BWz/56jafaFMEmvBAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUrf7iBqv3pm2UCeOZO+80VIAOeEUwHwYDVR0j BBgwFoAUIJFHIDgqH1K5UCEsE45eHoG6abcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzMvMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4MUJBNjlCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDkxNDcyMDM4MkExRjUyQjk1MDIxMkMx MzhFNUUxRTgxQkE2OUI3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y1MzJiOWViLTJmYWUtNDhhOC05NzkzLTMzZWVjMDY3Y2UzOS8zLzIwOTE0NzIw MzgyQTFGNTJCOTUwMjEyQzEzOEU1RTFFODFCQTY5QjcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAPgHN9 UxmZfQGSFa+aD1DLv+Utl9xU7ERL4BFN6E669dXk+rRnJHMSzhvWNHrIPFrsDz25 IMHiJrh2hmhlUJnklGYdlXIGoNSHIyH3tSCffd6UTMbVcH6+H0txws24t88NmgEt a79RLnJs2cCg1tltnHcsDaNqmHEl3YJsJwfzmmgidKtpt1kszCzB4bWoqN8LB6ne 3SmkP6TtfZxUEbAvMpXNvhAa/sdp787cpsdHMHvz++3N9HRG3QSDwpIIxt5rlZff fJtFy7YqLJyffltR2HXSymirBWOICpvrdrr/Z6rn29YCbu4nzkjGRMevxLSqDZOf +5wZKftITqHR8QeK -----END CERTIFICATE-----Generated at Sat Jun 6 04:23:38 2026 by rpki-client