$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft File: 20914720382A1F52B950212C138E5E1E81BA69B7.mft (raw, json) Hash identifier: 8iLtXzO7p9Ns6ILpWyXcAdXJygyQMivEAbLOfIblHkw= Subject key identifier: 73:99:FC:AC:9C:78:5E:49:4C:CE:93:2D:39:EF:B7:38:E5:98:D2:CD Authority key identifier: 20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 Certificate issuer: /CN=20914720382A1F52B950212C138E5E1E81BA69B7 Certificate serial: 4337933DBC747938F1CE58B258B2D7136E3DB73C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft Manifest number: 79 Signing time: Fri 06 Mar 2026 17:49:43 +0000 Manifest this update: Fri 06 Mar 2026 17:44:43 +0000 Manifest next update: Sat 07 Mar 2026 21:25:43 +0000 Files and hashes: 1: 4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.cer (hash: znj2KhD7dc90RL/SNmhicRPp3l/LZp/snY3wx3mPdJM=) 2: 20914720382A1F52B950212C138E5E1E81BA69B7.crl (hash: fy/8b40X06ImLmnBPGwT3WUbc7OD6Hw+tANcdbEVU6c=) 3: 140CF895225100CF571959173341D92070FF6E7C.cer (hash: +gzaj8eEKWdYwLDpey4WTnj+Qv54R/A4poIj/Ug/o3g=) 4: 326131343a373538363a363130373a3a2f34382d3438203d3e20323034323131.roa (hash: V2Vm92YYMyExADS3i94TFi72XsprSieZvIiYJxwsskY=) 5: 326131343a373538363a363130323a3a2f34382d3438203d3e20323034323131.roa (hash: qV00rauBPvkNMm+ROCk1kFFtfkMd60Wl/gebvBC2C58=) 6: 326131343a373538363a363130353a3a2f34382d3438203d3e20323034323131.roa (hash: dJUl+RAxxY+nIO2HtMh4e2KW3S6TxZr3e2E6ku/vRA8=) 7: 326131343a373538363a363130333a3a2f34382d3438203d3e20323034323131.roa (hash: EI2JmFR4s32Lz8tNongWwvU2DoYm1aiqo+qr8ZW+vPo=) 8: 326131343a373538363a363130363a3a2f34382d3438203d3e20323034323131.roa (hash: 8Vi1BDc187e4orwxGy0/rqG4GuMIpMb05XZjAeVSKdg=) 9: 326131343a373538363a363130303a3a2f34302d3430203d3e20323034323131.roa (hash: 19M0+L8lsNIFDtff0HfVclIoXr1C9PUiZKAd5BnzLVk=) 10: 326131343a373538363a363130343a3a2f34382d3438203d3e20323034323131.roa (hash: Mx3SvpD488YSM7QhBcQhFXDhTEiCBu3kBzOrFFQvDHI=) 11: 326131343a373538363a363130303a3a2f34382d3438203d3e20323034323131.roa (hash: hfCW4qJm06QDdE+1PQmTBkAa6OyHhAnzRXdcN0xPhW4=) 12: 326131343a373538363a363130313a3a2f34382d3438203d3e20323034323131.roa (hash: DvKmhwWtZsD6TNvQ0eoVfIFrblMkYKUJ35ZR+X3ClBk=) 13: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer (hash: pIADUm7hELp/Vqdstf8d4gGEQz21lMe/aoJyEiVS1CI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Mar 2026 21:25:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:37:93:3d:bc:74:79:38:f1:ce:58:b2:58:b2:d7:13:6e:3d:b7:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20914720382A1F52B950212C138E5E1E81BA69B7 Validity Not Before: Mar 6 17:44:43 2026 GMT Not After : Mar 7 21:25:43 2026 GMT Subject: CN=7399FCAC9C785E494CCE932D39EFB738E598D2CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e3:b3:a4:9f:44:99:d1:ab:e2:da:6d:89:6d: 4d:32:3f:e3:6b:41:8a:cf:b8:9d:63:c2:38:22:de: de:0b:bb:48:10:4f:62:4d:38:40:09:96:3d:86:67: 9d:0e:7a:91:4d:f4:53:28:e4:1a:08:9b:45:79:bf: 2d:58:cd:ca:79:21:cf:12:06:10:fa:6a:ac:9a:a5: 6c:6c:85:8f:bc:e7:66:c6:44:2c:7e:3b:cb:e0:e4: bf:e5:e8:65:ae:69:49:8f:29:8e:ff:68:71:3a:90: 0a:7a:cf:17:54:ac:ec:34:c8:56:53:fe:c3:3c:e3: a3:02:8a:ce:dc:af:ec:10:0f:e5:d6:f7:32:6f:f8: 31:71:40:44:55:08:61:4c:ff:8a:83:a6:bc:07:57: f5:ef:1c:27:d7:09:26:3f:ad:87:02:4d:f3:09:be: ff:00:d1:92:99:2d:51:0e:02:02:9b:5c:b7:bd:b1: b0:c9:65:9b:3b:6a:22:47:2b:14:4a:02:42:06:95: 16:0e:e0:82:9a:a2:40:9a:61:53:6c:cb:3f:70:25: d9:d6:68:42:47:3f:a0:de:6b:19:d0:11:db:36:31: 28:6e:4c:65:ca:3b:ee:ab:85:32:31:19:88:1b:33: 78:c9:ed:5f:15:3c:18:97:9a:1f:ff:84:fb:ed:73: 7a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:99:FC:AC:9C:78:5E:49:4C:CE:93:2D:39:EF:B7:38:E5:98:D2:CD X509v3 Authority Key Identifier: keyid:20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:ca:da:c6:5f:1e:5b:a8:8b:e1:88:bc:ea:6c:ca:f4:51:61: 86:50:f0:c7:ff:6d:81:87:94:2a:78:1b:41:42:cd:03:e6:c4: 8a:8f:fb:d3:aa:f8:c7:d1:dd:59:74:a9:63:8e:0a:5f:98:a8: cb:51:df:85:b6:f9:48:3f:0d:aa:ff:31:7a:89:0f:26:af:07: dc:9c:ef:02:13:d7:1a:77:d7:6b:54:37:66:11:5b:1e:15:b6: 37:bc:c4:f6:85:2b:b9:6d:ec:cb:7d:f6:c0:c3:ca:d8:47:5b: d8:a0:43:23:b1:3c:d4:03:08:7e:cd:72:85:48:c6:95:7b:c6: b5:3b:14:2c:7b:cc:3f:fd:ce:60:54:5b:81:87:37:d8:74:b6: 9b:7a:f8:d5:44:86:6f:4f:9e:5f:f0:c1:d6:08:fd:0b:4a:fa: 02:a6:9e:d1:61:9e:88:e0:d0:32:f6:ad:fd:5f:9e:0e:73:f3: 6a:b1:9f:70:99:1d:87:bc:35:91:df:2f:68:78:0f:7f:ad:d5: ca:c6:4e:6f:a4:e6:85:19:a1:14:00:b2:e7:d7:40:a3:c5:a6: d5:1e:12:f6:09:d0:9a:e6:2e:d8:8a:ad:5d:2f:54:ad:fa:ad: 30:89:43:c6:ac:dc:0b:ae:c2:54:4e:ab:d7:da:89:17:ab:1f: 04:78:cd:34 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUQzeTPbx0eTjxzliyWLLXE249tzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4 MUJBNjlCNzAeFw0yNjAzMDYxNzQ0NDNaFw0yNjAzMDcyMTI1NDNaMDMxMTAvBgNV BAMTKDczOTlGQ0FDOUM3ODVFNDk0Q0NFOTMyRDM5RUZCNzM4RTU5OEQyQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo47Okn0SZ0avi2m2JbU0yP+Nr QYrPuJ1jwjgi3t4Lu0gQT2JNOEAJlj2GZ50OepFN9FMo5BoIm0V5vy1Yzcp5Ic8S BhD6aqyapWxshY+852bGRCx+O8vg5L/l6GWuaUmPKY7/aHE6kAp6zxdUrOw0yFZT /sM846MCis7cr+wQD+XW9zJv+DFxQERVCGFM/4qDprwHV/XvHCfXCSY/rYcCTfMJ vv8A0ZKZLVEOAgKbXLe9sbDJZZs7aiJHKxRKAkIGlRYO4IKaokCaYVNsyz9wJdnW aEJHP6DeaxnQEds2MShuTGXKO+6rhTIxGYgbM3jJ7V8VPBiXmh//hPvtc3oJAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUc5n8rJx4XklMzpMtOe+3OOWY0s0wHwYDVR0j BBgwFoAUIJFHIDgqH1K5UCEsE45eHoG6abcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzMvMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4MUJBNjlCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDkxNDcyMDM4MkExRjUyQjk1MDIxMkMx MzhFNUUxRTgxQkE2OUI3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y1MzJiOWViLTJmYWUtNDhhOC05NzkzLTMzZWVjMDY3Y2UzOS8zLzIwOTE0NzIw MzgyQTFGNTJCOTUwMjEyQzEzOEU1RTFFODFCQTY5QjcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQARytrG Xx5bqIvhiLzqbMr0UWGGUPDH/22Bh5QqeBtBQs0D5sSKj/vTqvjH0d1ZdKljjgpf mKjLUd+FtvlIPw2q/zF6iQ8mrwfcnO8CE9cad9drVDdmEVseFbY3vMT2hSu5bezL ffbAw8rYR1vYoEMjsTzUAwh+zXKFSMaVe8a1OxQse8w//c5gVFuBhzfYdLabevjV RIZvT55f8MHWCP0LSvoCpp7RYZ6I4NAy9q39X54Oc/NqsZ9wmR2HvDWR3y9oeA9/ rdXKxk5vpOaFGaEUALLn10CjxabVHhL2CdCa5i7Yiq1dL1St+q0wiUPGrNwLrsJU TqvX2okXqx8EeM00 -----END CERTIFICATE-----Generated at Sat Mar 7 07:46:57 2026 by rpki-client