$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft File: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json) Hash identifier: 3TjYUdFRwKwhlim7mOKcA3c8vFKMoUBdB9ezYg2/zNs= Subject key identifier: 2B:85:59:83:BC:DF:A5:81:00:C2:53:00:6F:B7:93:61:BA:22:1F:06 Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Certificate serial: 305FB4148EB2DA3C09DAA2357D1AF5BF07DAABAE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft Manifest number: 0602 Signing time: Tue 28 Jul 2026 17:59:11 +0000 Manifest this update: Tue 28 Jul 2026 17:54:11 +0000 Manifest next update: Wed 29 Jul 2026 20:00:11 +0000 Files and hashes: 1: 326131343a316563313a313730303a3a2f34302d3430203d3e20323139353233.roa (hash: A8bwWH9/ybdeySNN01RK//BZzg4rKSE3B00g1VeCR5M=) 2: 326131343a316563373a633031303a3a2f34342d3434203d3e2030.roa (hash: 3/JDrgPcwa3QkItCqhf73S0kH72VYqnJSSE72cvYDCQ=) 3: 326131343a316563313a3a2f33322d3332203d3e20323037323532.roa (hash: wCpGpHKdqFN1DO1NvTXNItL3x3NUD8VGRqAFwBrJITc=) 4: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: rD1drMlhgCHEm0vlVi8DONqmz75yH/sypTpIzdkNP6c=) 5: 326131343a316563313a376231303a3a2f34342d3438203d3e20323135363636.roa (hash: O5hXxs076gE3Ctu2AmKUIcSxIccZcu0zLTOjhJ6fNNY=) 6: 326131343a316563313a376235303a3a2f34342d3438203d3e20323135363835.roa (hash: IzwkS06+TU6xlgmjKohwCnvrPjgEE+53/+TvwhGB5Kg=) 7: 326131343a316563313a313030303a3a2f33362d3438203d3e20323131303636.roa (hash: VwMdcB7cjunOknijcMaBRHJjTJhyW3Liym/2KH9Cpo0=) 8: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: vcgau7rLTGqkHM9Rw6lx2+bQ2vVUKiGN9ep5LfXC0lA=) 9: 326131343a316563303a3a2f33322d3332203d3e2030.roa (hash: l1LgH+twMvgdn7/1KBWGxkEdCOcMXQ/E9AMQuJ/4pWU=) 10: 326131343a316563303a3a2f33312d3438203d3e203438373030.roa (hash: 5zFC0aBKrn16Glyaue2oFptFutD2x5iVGxip/IIewrc=) 11: 326131343a316563313a376232303a3a2f34342d3438203d3e20323135303933.roa (hash: dVnYLOP17LHBFloAhm1YIONwpYCVs6bwv8Qels/37Kg=) 12: 326131343a316563313a376233303a3a2f34342d3438203d3e20323134393036.roa (hash: YRMori7doYSmuYrHuDGxvFWUqZxa6EqhEvjhhQlS2vI=) 13: 326131343a316563313a313030303a3a2f33362d3438203d3e20323135313336.roa (hash: Hy38nW7g7jg3g8NEUSSR9hX3QcE4UfBQyRuLYa5OQGw=) 14: 326131343a316563313a313630303a3a2f34302d3430203d3e20323139353233.roa (hash: 9E1PsTjd11hXDLZSZeoJaNnT7ONzxHIoAoZBFV00R+U=) 15: 326131343a316563303a3a2f33312d3438203d3e203136353039.roa (hash: EOUQ1JZ1oz2xZOU8+mEukp9ybbKV7scsmw0lQsJAxX4=) 16: 326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa (hash: 8VhdvV/ADl1dQyHcZOJm0iqoZEaI9FAWV7wRLCn1Kkc=) 17: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: NDSS2hHdj8htIMoCQNzuGfJRE+FjfS7resxOlAoGNDM=) 18: 326131343a316563373a633430303a3a2f34302d3438203d3e203438373030.roa (hash: M7y4yNzKisPGrMDI6N/h2uK0LmUwgVtJCXB3eT1YcCs=) 19: 326131343a316563313a376234303a3a2f34342d3438203d3e20323139353339.roa (hash: lk2g+VMPJ2e0ffh4BXNf9T04tdPmSZpAFUml3dW+JwM=) 20: 326131343a316563303a3a2f33312d3438203d3e203134363138.roa (hash: 0MGh72HtcBIx2dyROH4vCwTGrkjWjpybf+czr46U9xA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 09:48:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:5f:b4:14:8e:b2:da:3c:09:da:a2:35:7d:1a:f5:bf:07:da:ab:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Validity Not Before: Jul 28 17:54:11 2026 GMT Not After : Jul 29 20:00:11 2026 GMT Subject: CN=2B855983BCDFA58100C253006FB79361BA221F06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0d:2d:86:ee:16:2b:64:06:d0:7f:7c:7f:55: 86:72:a7:75:bc:cc:2a:9f:4f:90:0a:9a:46:31:8d: aa:ac:b9:eb:1c:64:e4:8b:eb:b8:50:65:82:c5:23: 13:a8:e5:75:d0:00:e0:a3:69:f6:51:b3:88:a1:b5: af:42:0c:95:1a:90:c5:75:21:34:2b:6c:8c:63:57: 82:ad:84:2f:e2:75:e1:c4:47:00:6b:63:8d:10:06: 98:4b:d9:4e:b8:bf:34:30:33:5a:83:79:77:9e:f0: ec:40:44:a4:31:b2:8e:2d:63:0e:a6:98:11:24:63: 50:a4:d7:42:e2:4b:10:dd:f1:c5:d3:c4:2b:55:05: 90:d2:c1:c1:84:e5:64:76:54:23:e3:4e:90:9e:35: 94:6e:ba:ad:1e:cc:e3:89:3d:c2:c7:00:3b:fc:c6: 18:3e:40:52:45:7e:0d:e5:c7:11:16:cf:fe:06:38: 6a:cc:4d:d8:ed:1d:98:a2:1e:da:88:ff:fc:3b:52: 8b:ba:97:44:07:b5:dc:90:3b:54:28:a3:62:53:ae: 56:40:06:d3:9a:ed:a3:c6:94:0f:f1:b1:07:ef:3d: 73:96:ac:c2:20:15:2a:4c:2f:aa:cb:0c:b8:e1:81: cc:02:9c:6a:a7:77:3c:ae:a6:65:40:a4:4b:ad:90: 01:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:85:59:83:BC:DF:A5:81:00:C2:53:00:6F:B7:93:61:BA:22:1F:06 X509v3 Authority Key Identifier: keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:b0:7b:71:13:db:41:5b:12:bc:d5:21:1e:71:d3:09:15:8c: fc:75:92:0e:75:de:2f:a7:2d:9f:8d:9e:67:f7:01:58:9a:39: 70:90:0e:85:a6:ac:e4:54:e9:8d:40:5c:5e:62:5a:11:1f:44: 8f:cc:3a:e2:16:0e:45:cc:d4:73:a3:b2:60:d4:bd:c0:56:6d: ff:81:46:26:89:45:57:3e:e0:9b:f7:7e:8c:d9:79:22:9b:22: 48:8f:ec:e6:54:27:d9:3a:d5:22:75:7a:e1:e5:bb:a3:4e:2d: 34:f3:50:0d:45:8d:d3:90:78:ea:ef:23:d8:e3:ea:d0:8e:4e: ec:c0:7a:e3:f7:9a:a3:ca:79:08:42:83:c2:ae:46:05:4e:63: 89:79:a9:cc:d0:d3:4c:32:3b:f8:01:7b:94:2b:d8:a5:66:59: 8d:73:8e:f4:0f:3a:3e:c0:51:32:8d:d6:56:4e:5f:63:ec:1b: 12:ea:b6:71:5c:86:42:d0:43:fd:fe:b5:9f:5b:c3:27:54:81: 03:0e:16:fb:54:ef:98:f6:f8:ea:09:9f:58:3a:c0:fc:ed:68: 34:bc:5b:da:ab:dc:49:94:af:b3:59:47:03:84:e7:8b:15:51: 46:9d:1f:ee:b8:45:68:3e:a7:60:0d:17:1f:7d:1e:de:2c:7f: 67:d0:18:45 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUMF+0FI6y2jwJ2qI1fRr1vwfaq64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG NEFCREVDNjAeFw0yNjA3MjgxNzU0MTFaFw0yNjA3MjkyMDAwMTFaMDMxMTAvBgNV BAMTKDJCODU1OTgzQkNERkE1ODEwMEMyNTMwMDZGQjc5MzYxQkEyMjFGMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwDS2G7hYrZAbQf3x/VYZyp3W8 zCqfT5AKmkYxjaqsuescZOSL67hQZYLFIxOo5XXQAOCjafZRs4ihta9CDJUakMV1 ITQrbIxjV4KthC/ideHERwBrY40QBphL2U64vzQwM1qDeXee8OxARKQxso4tYw6m mBEkY1Ck10LiSxDd8cXTxCtVBZDSwcGE5WR2VCPjTpCeNZRuuq0ezOOJPcLHADv8 xhg+QFJFfg3lxxEWz/4GOGrMTdjtHZiiHtqI//w7Uou6l0QHtdyQO1Qoo2JTrlZA BtOa7aPGlA/xsQfvPXOWrMIgFSpML6rLDLjhgcwCnGqndzyupmVApEutkAGNAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUK4VZg7zfpYEAwlMAb7eTYboiHwYwHwYDVR0j BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD QkIzOTg3NkY0QUJERUM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJhZjczYTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS8wLzIwRjY5QzRD MTQ2MTM4Q0IwMTIxQzRDNENCQjM5ODc2RjRBQkRFQzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAIsHtx E9tBWxK81SEecdMJFYz8dZIOdd4vpy2fjZ5n9wFYmjlwkA6FpqzkVOmNQFxeYloR H0SPzDriFg5FzNRzo7Jg1L3AVm3/gUYmiUVXPuCb936M2XkimyJIj+zmVCfZOtUi dXrh5bujTi0081ANRY3TkHjq7yPY4+rQjk7swHrj95qjynkIQoPCrkYFTmOJeanM 0NNMMjv4AXuUK9ilZlmNc470Dzo+wFEyjdZWTl9j7BsS6rZxXIZC0EP9/rWfW8Mn VIEDDhb7VO+Y9vjqCZ9YOsD87Wg0vFvaq9xJlK+zWUcDhOeLFVFGnR/uuEVoPqdg DRcffR7eLH9n0BhF -----END CERTIFICATE-----Generated at Tue Jul 28 20:52:50 2026 by rpki-client