$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft File: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json) Hash identifier: Qu8WA/OAApKUUtLJt+DiFcqA4oXyWNlb5l3a39SHJpQ= Subject key identifier: 47:AB:DF:41:E0:B9:D9:26:98:68:0B:32:13:EA:F0:27:EC:0E:B9:4D Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Certificate serial: 2A9519F3132CD4D92E38F692ADE8ED9ACD35A326 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft Manifest number: 03ED Signing time: Sun 01 Mar 2026 11:05:21 +0000 Manifest this update: Sun 01 Mar 2026 11:00:21 +0000 Manifest next update: Mon 02 Mar 2026 12:12:21 +0000 Files and hashes: 1: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: YZs2C95sN9mg1ZL5Z4WKEFWMjxhqRdz7xSfokwKum8s=) 2: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: rD1drMlhgCHEm0vlVi8DONqmz75yH/sypTpIzdkNP6c=) 3: 326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa (hash: U8fXRRyT8emRE+fVUuy2ekIUYzd/0os3T2/COS8ejYg=) 4: 326131343a316563303a3a2f33312d3438203d3e203136353039.roa (hash: DO5U+zbxAW9dCHHkG8v0O5pLZTi9rHV+80EYsqI00GY=) 5: 326131343a316563373a633031303a3a2f34342d3434203d3e2030.roa (hash: SsdW0YpcJfef7CtWvRhhfCUEgjAhSHqFG1h0ACBR214=) 6: 326131343a316563313a376231303a3a2f34342d3438203d3e20323135363636.roa (hash: pZyYX9vqAixKUDIqsxujnSVA6UfFKeJc5iZ4yNtLX48=) 7: 326131343a316563313a376233303a3a2f34342d3438203d3e20323134393036.roa (hash: YRMori7doYSmuYrHuDGxvFWUqZxa6EqhEvjhhQlS2vI=) 8: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: NDSS2hHdj8htIMoCQNzuGfJRE+FjfS7resxOlAoGNDM=) 9: 326131343a316563313a376232303a3a2f34342d3438203d3e20323135303933.roa (hash: dVnYLOP17LHBFloAhm1YIONwpYCVs6bwv8Qels/37Kg=) 10: 326131343a316563313a3a2f33322d3332203d3e20323037323532.roa (hash: ZnCFtDlyKKIKHxL+mnWSwMiKEny7fbonjbSjngpcz7c=) 11: 326131343a316563303a3a2f33312d3438203d3e203438373030.roa (hash: NfdCiPZo2V7z2IR8DOEcP9s1WlT0wPdEK10WCc6hh18=) 12: 326131343a316563303a3a2f33312d3438203d3e203134363138.roa (hash: TNC4zrNVSYq6rg1HfzOLsFNL5cW5pcjjIopBseDA51Y=) 13: 326131343a316563373a633430303a3a2f34302d3438203d3e203438373030.roa (hash: LZc2AksEahD5rzoxMFxve6nJwmwqwYYZ+BLhaadaDDA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 06:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:95:19:f3:13:2c:d4:d9:2e:38:f6:92:ad:e8:ed:9a:cd:35:a3:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Validity Not Before: Mar 1 11:00:21 2026 GMT Not After : Mar 2 12:12:21 2026 GMT Subject: CN=47ABDF41E0B9D92698680B3213EAF027EC0EB94D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d4:1a:2a:f9:02:ac:33:d9:f3:cf:b6:a7:ec: 99:99:b4:ab:25:78:2d:64:89:bc:4b:e5:94:86:6f: 74:e6:62:b0:b9:e0:1e:d9:34:3c:e9:ba:87:65:02: 03:f4:b2:ba:11:10:5c:83:82:9f:c0:58:86:09:6c: 80:fb:a4:58:49:b8:86:15:7f:67:15:46:a5:02:d5: 5f:0e:8d:3c:e0:77:68:78:bf:df:a8:73:72:ad:ea: f9:32:8d:41:0a:b4:42:73:b7:e2:d7:ab:61:ef:d9: 93:cc:72:91:4d:41:4a:68:c1:b0:18:91:fa:d9:56: 7f:43:28:cd:bf:0e:a6:b8:2d:42:7b:4e:f0:ab:23: a1:a1:6e:1e:65:23:31:fd:c3:cf:fa:3e:16:66:be: 08:b3:1c:b0:3d:c5:92:35:36:c8:7a:92:31:82:6a: d0:3d:15:23:03:d2:b4:f9:6e:d6:2a:8c:91:13:fa: 2f:65:39:18:6f:55:22:72:7f:e0:0f:aa:ce:29:de: 05:b4:69:83:21:fa:17:8d:07:f5:3e:c9:e0:7b:c8: 09:3c:b0:51:2b:85:d9:37:be:ad:9f:18:84:3f:cd: ba:31:fc:d9:d5:2a:2c:d6:6c:d1:b1:f5:0d:26:ad: 3b:98:fc:1e:11:6c:23:9a:cc:36:dc:54:98:75:fe: 3f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:AB:DF:41:E0:B9:D9:26:98:68:0B:32:13:EA:F0:27:EC:0E:B9:4D X509v3 Authority Key Identifier: keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:60:d3:85:cb:a5:c3:17:64:5f:16:67:d4:be:6e:ec:84:51: 8b:6a:f8:32:b7:d7:e1:a2:a3:48:5e:fd:cf:e5:72:43:90:75: 9b:18:40:e4:7f:4d:74:72:2a:90:51:5f:f4:52:88:7b:a6:82: 59:2a:dd:69:dc:9a:33:91:0b:dd:34:49:01:dc:f0:db:a0:e1: 3d:49:74:17:61:e4:e3:8a:79:ed:ce:c2:a1:dd:a9:3f:f7:74: 2b:d4:25:94:8e:69:27:c9:a8:32:93:c0:80:be:21:21:48:16: 09:73:49:be:84:03:be:61:c2:40:07:e3:29:34:aa:00:d9:4b: fa:eb:39:c7:23:c9:af:d9:88:93:ae:d1:4b:6e:43:4c:49:e8: 21:fc:05:ec:f7:c8:09:16:34:c0:e2:df:af:4f:c1:8d:49:23: 16:5d:63:a6:a9:09:ee:07:8d:12:80:21:9a:7a:76:4a:4a:0b: c9:a2:f1:d1:30:65:00:0d:7c:d0:6f:f0:26:e8:85:04:2c:6a: 5e:5e:0e:1c:1f:37:75:da:2d:46:6a:3e:db:07:60:f2:dd:92: 32:14:c2:45:ab:f5:72:85:3c:9b:7d:86:5a:b2:06:9c:bc:a8: 85:7c:0e:96:10:ad:dc:2f:1c:5f:5a:81:0e:3b:80:fa:1a:87: bb:20:f6:bd -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUKpUZ8xMs1NkuOPaSrejtms01oyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG NEFCREVDNjAeFw0yNjAzMDExMTAwMjFaFw0yNjAzMDIxMjEyMjFaMDMxMTAvBgNV BAMTKDQ3QUJERjQxRTBCOUQ5MjY5ODY4MEIzMjEzRUFGMDI3RUMwRUI5NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz1Boq+QKsM9nzz7an7JmZtKsl eC1kibxL5ZSGb3TmYrC54B7ZNDzpuodlAgP0sroREFyDgp/AWIYJbID7pFhJuIYV f2cVRqUC1V8OjTzgd2h4v9+oc3Kt6vkyjUEKtEJzt+LXq2Hv2ZPMcpFNQUpowbAY kfrZVn9DKM2/Dqa4LUJ7TvCrI6Ghbh5lIzH9w8/6PhZmvgizHLA9xZI1Nsh6kjGC atA9FSMD0rT5btYqjJET+i9lORhvVSJyf+APqs4p3gW0aYMh+heNB/U+yeB7yAk8 sFErhdk3vq2fGIQ/zbox/NnVKizWbNGx9Q0mrTuY/B4RbCOazDbcVJh1/j/DAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUR6vfQeC52SaYaAsyE+rwJ+wOuU0wHwYDVR0j BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD QkIzOTg3NkY0QUJERUM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJhZjczYTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS8wLzIwRjY5QzRD MTQ2MTM4Q0IwMTIxQzRDNENCQjM5ODc2RjRBQkRFQzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAvYNOF y6XDF2RfFmfUvm7shFGLavgyt9fhoqNIXv3P5XJDkHWbGEDkf010ciqQUV/0Uoh7 poJZKt1p3JozkQvdNEkB3PDboOE9SXQXYeTjinntzsKh3ak/93Qr1CWUjmknyagy k8CAviEhSBYJc0m+hAO+YcJAB+MpNKoA2Uv66znHI8mv2YiTrtFLbkNMSegh/AXs 98gJFjTA4t+vT8GNSSMWXWOmqQnuB40SgCGaenZKSgvJovHRMGUADXzQb/Am6IUE LGpeXg4cHzd12i1Gaj7bB2Dy3ZIyFMJFq/VyhTybfYZasgacvKiFfA6WEK3cLxxf WoEOO4D6Goe7IPa9 -----END CERTIFICATE-----Generated at Sun Mar 1 16:37:36 2026 by rpki-client