$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft File: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json) Hash identifier: 8PXvQ9Vy6f3z6RHvFhcvSKO6qV86X65UWB9soBnlaPQ= Subject key identifier: EA:B0:8D:9C:83:78:4E:58:39:96:7D:B0:CF:14:DB:35:42:43:61:69 Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Certificate serial: 71567B2168C63CCFF4D56FF187EEC5224096B6D5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft Manifest number: 048C Signing time: Thu 16 Apr 2026 20:33:21 +0000 Manifest this update: Thu 16 Apr 2026 20:28:21 +0000 Manifest next update: Fri 17 Apr 2026 22:20:21 +0000 Files and hashes: 1: 326131343a316563303a3a2f33312d3438203d3e203136353039.roa (hash: EOUQ1JZ1oz2xZOU8+mEukp9ybbKV7scsmw0lQsJAxX4=) 2: 326131343a316563373a633031303a3a2f34342d3434203d3e2030.roa (hash: SsdW0YpcJfef7CtWvRhhfCUEgjAhSHqFG1h0ACBR214=) 3: 326131343a316563303a3a2f33312d3438203d3e203134363138.roa (hash: 0MGh72HtcBIx2dyROH4vCwTGrkjWjpybf+czr46U9xA=) 4: 326131343a316563313a376233303a3a2f34342d3438203d3e20323134393036.roa (hash: YRMori7doYSmuYrHuDGxvFWUqZxa6EqhEvjhhQlS2vI=) 5: 326131343a316563373a633430303a3a2f34302d3438203d3e203438373030.roa (hash: LZc2AksEahD5rzoxMFxve6nJwmwqwYYZ+BLhaadaDDA=) 6: 326131343a316563303a3a2f33312d3438203d3e203438373030.roa (hash: 5zFC0aBKrn16Glyaue2oFptFutD2x5iVGxip/IIewrc=) 7: 326131343a316563313a376232303a3a2f34342d3438203d3e20323135303933.roa (hash: dVnYLOP17LHBFloAhm1YIONwpYCVs6bwv8Qels/37Kg=) 8: 326131343a316563313a3a2f33322d3332203d3e20323037323532.roa (hash: wCpGpHKdqFN1DO1NvTXNItL3x3NUD8VGRqAFwBrJITc=) 9: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: NDSS2hHdj8htIMoCQNzuGfJRE+FjfS7resxOlAoGNDM=) 10: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: rD1drMlhgCHEm0vlVi8DONqmz75yH/sypTpIzdkNP6c=) 11: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: LC3rCmOQpTldy23pRTnux7g/1V7/v54eSWXk+41f1QU=) 12: 326131343a316563313a376231303a3a2f34342d3438203d3e20323135363636.roa (hash: pZyYX9vqAixKUDIqsxujnSVA6UfFKeJc5iZ4yNtLX48=) 13: 326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa (hash: U8fXRRyT8emRE+fVUuy2ekIUYzd/0os3T2/COS8ejYg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 16:27:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:56:7b:21:68:c6:3c:cf:f4:d5:6f:f1:87:ee:c5:22:40:96:b6:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Validity Not Before: Apr 16 20:28:21 2026 GMT Not After : Apr 17 22:20:21 2026 GMT Subject: CN=EAB08D9C83784E5839967DB0CF14DB3542436169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:de:06:ee:0c:72:48:5a:4f:f1:85:1c:26:3f: 45:16:91:16:90:db:2d:fc:a1:7c:3f:34:cf:d5:cf: 08:03:e5:cc:82:df:7c:cd:95:34:6a:fd:7e:43:a7: d5:70:4f:aa:67:02:45:45:0e:0c:b0:74:c3:04:75: 59:44:06:53:59:bf:27:d8:74:8e:12:dd:fb:69:b3: d1:5e:7e:fd:4a:70:52:13:5f:aa:9a:b9:07:8d:52: 25:14:0f:10:bc:53:73:1f:4b:f6:a7:49:e9:00:ca: fc:a8:6c:98:27:31:8b:a3:a5:d1:52:84:bc:08:15: 9a:e6:d1:c7:38:16:29:61:35:c8:a0:ee:db:2e:a4: 7e:5c:a9:ed:a2:68:fb:b9:59:6b:4e:3f:92:4b:86: f1:26:60:38:f7:3b:c8:f2:5c:9e:a0:3d:66:1c:88: 16:ae:c3:27:43:4a:3d:b6:e2:28:63:44:88:e0:f4: 0b:8d:a0:2c:57:e2:d5:fc:48:e2:66:7c:e0:70:a2: da:60:c9:3b:74:ec:1f:11:17:52:cf:91:0f:b4:5d: b4:80:c4:c9:26:13:37:bc:5a:21:f0:1d:03:9f:a4: 3e:61:98:85:92:9c:07:64:c4:31:61:e8:24:f6:79: e9:cc:73:0c:a9:d7:eb:80:e5:05:20:f7:fd:53:df: ee:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B0:8D:9C:83:78:4E:58:39:96:7D:B0:CF:14:DB:35:42:43:61:69 X509v3 Authority Key Identifier: keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:85:ee:55:af:f8:b6:dd:60:a9:72:13:df:08:59:ad:5d:e4: 90:5a:5e:c0:31:b4:60:9d:ac:13:74:98:dc:dc:48:a4:f0:b3: 55:9b:15:4b:7e:83:c2:9e:07:68:a8:14:1a:8c:f5:64:b0:69: c6:ac:4a:61:fa:7a:02:a1:54:fe:13:e0:52:29:7a:b1:cd:f9: 64:31:84:57:78:e5:71:2b:e5:92:03:0d:dd:97:a0:bc:58:81: d0:4e:97:99:5c:5c:db:ae:f3:ea:77:94:7b:44:0a:2c:4f:41: b3:af:ce:a7:30:59:f8:45:83:59:f1:5a:b1:76:4c:95:4f:1b: a4:9f:0f:d5:67:5e:a2:25:0d:25:28:13:55:f0:62:83:31:81: b5:45:05:8c:bb:9a:5b:96:0a:f7:36:66:a7:57:c9:48:6d:5e: 9b:20:38:44:fe:c1:75:3c:59:ad:e0:eb:ba:48:40:0d:15:c1: 25:6f:f3:c1:dc:89:7b:37:75:54:ca:0c:01:29:5c:ed:93:a8: 85:9f:04:a2:f4:5a:cd:4f:d6:19:33:3a:58:4b:2c:94:6f:8b: 2c:2d:18:91:e5:38:3e:4b:be:14:97:4b:7d:52:d9:0f:19:a6: 91:38:05:46:8d:5b:d9:77:fc:de:65:d5:aa:67:51:d6:74:3c: 25:ba:1d:f2 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUcVZ7IWjGPM/01W/xh+7FIkCWttUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG NEFCREVDNjAeFw0yNjA0MTYyMDI4MjFaFw0yNjA0MTcyMjIwMjFaMDMxMTAvBgNV BAMTKEVBQjA4RDlDODM3ODRFNTgzOTk2N0RCMENGMTREQjM1NDI0MzYxNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD23gbuDHJIWk/xhRwmP0UWkRaQ 2y38oXw/NM/VzwgD5cyC33zNlTRq/X5Dp9VwT6pnAkVFDgywdMMEdVlEBlNZvyfY dI4S3ftps9Fefv1KcFITX6qauQeNUiUUDxC8U3MfS/anSekAyvyobJgnMYujpdFS hLwIFZrm0cc4FilhNcig7tsupH5cqe2iaPu5WWtOP5JLhvEmYDj3O8jyXJ6gPWYc iBauwydDSj224ihjRIjg9AuNoCxX4tX8SOJmfOBwotpgyTt07B8RF1LPkQ+0XbSA xMkmEze8WiHwHQOfpD5hmIWSnAdkxDFh6CT2eenMcwyp1+uA5QUg9/1T3+5zAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU6rCNnIN4Tlg5ln2wzxTbNUJDYWkwHwYDVR0j BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD QkIzOTg3NkY0QUJERUM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJhZjczYTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS8wLzIwRjY5QzRD MTQ2MTM4Q0IwMTIxQzRDNENCQjM5ODc2RjRBQkRFQzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAche5V r/i23WCpchPfCFmtXeSQWl7AMbRgnawTdJjc3Eik8LNVmxVLfoPCngdoqBQajPVk sGnGrEph+noCoVT+E+BSKXqxzflkMYRXeOVxK+WSAw3dl6C8WIHQTpeZXFzbrvPq d5R7RAosT0Gzr86nMFn4RYNZ8VqxdkyVTxuknw/VZ16iJQ0lKBNV8GKDMYG1RQWM u5pblgr3NmanV8lIbV6bIDhE/sF1PFmt4Ou6SEANFcElb/PB3Il7N3VUygwBKVzt k6iFnwSi9FrNT9YZMzpYSyyUb4ssLRiR5Tg+S74Ul0t9UtkPGaaROAVGjVvZd/ze ZdWqZ1HWdDwluh3y -----END CERTIFICATE-----Generated at Fri Apr 17 00:04:03 2026 by rpki-client