$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft File: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft (raw, json) Hash identifier: +lMS9F/cYYbzVtzAb74iPH/I1Hn9ioE3glbC6Vj6m5Q= Subject key identifier: 26:3A:C2:E4:CB:E0:FD:CF:96:65:C2:CF:61:05:F0:E8:27:6E:E4:48 Authority key identifier: 20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 Certificate issuer: /CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Certificate serial: 4A8CCDE4CC3C17EE76E28371B452ED23766B1294 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft Manifest number: FE Signing time: Mon 02 Mar 2026 00:07:57 +0000 Manifest this update: Mon 02 Mar 2026 00:02:57 +0000 Manifest next update: Tue 03 Mar 2026 03:36:57 +0000 Files and hashes: 1: 326131343a373538303a666666353a3a2f34382d3438203d3e20323037353239.roa (hash: 8GEpSwKR5aAKrW7JpZcQNrVUIUKVu8YVCYytf208qTw=) 2: 326131343a373538313a333062363a3a2f34382d3438203d3e203331383938.roa (hash: EiykYxl+6FaTNBSgNTe5hk8ztAyCkiKmYpqs3J6XV7E=) 3: 326131343a373538313a333062363a3a2f34382d3438203d3e20323037323939.roa (hash: QF7sj3Q22cpFIfftMWFUaaWBXSTUWiNGhFKa4Gm8DjQ=) 4: 326131343a373538313a333039303a3a2f34342d3434203d3e20323034323131.roa (hash: an2CTnY48XCjuCGH81CGgjVXZdlCvh7kWv6euA7rsaw=) 5: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl (hash: eXJzsD6ZBf9htsvsO4VbyBL8viziHQ4h3TPwP7kCf1Q=) 6: 326131343a373538313a333062353a3a2f34382d3438203d3e20323131373239.roa (hash: tFUXq6i30FxB1SNNhCRKk78oQl/FXFjJBGghOw722to=) 7: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer (hash: Cg46VfMFxkibHVY72VspTJE2BjBtIpE0lG8+Ny9YFKc=) 8: 326131343a373538313a333030303a3a2f34302d3438203d3e20323037353239.roa (hash: 49tQr1GLN9QvPACiaQcXfaSDsuhRZJax3rEAyqF9fvs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:8c:cd:e4:cc:3c:17:ee:76:e2:83:71:b4:52:ed:23:76:6b:12:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Validity Not Before: Mar 2 00:02:57 2026 GMT Not After : Mar 3 03:36:57 2026 GMT Subject: CN=263AC2E4CBE0FDCF9665C2CF6105F0E8276EE448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:90:41:dd:84:ed:57:39:74:bc:bf:e7:82:b9: 4d:24:7a:bf:e5:db:cf:ea:36:e8:c6:85:4a:0d:96: e7:a5:4c:5b:91:93:23:c0:ff:29:bf:6d:8d:97:16: d5:a7:6b:56:72:49:16:67:c3:d4:15:88:ad:76:4f: 55:07:ac:25:27:5b:a4:60:89:ea:d6:37:e4:46:cd: 45:5a:b3:be:3c:f0:9b:85:1a:db:3e:06:22:81:37: 82:da:3b:7f:3b:53:fc:f5:a3:0b:d9:4e:eb:af:13: ce:da:2b:9d:0e:6f:33:b0:81:c5:c7:62:a2:b2:eb: a6:ad:a5:db:3d:f5:49:e1:8b:5d:6a:51:fe:0b:50: 07:1f:fc:c9:a2:b6:1a:2a:60:c9:f0:c6:7f:e0:fe: 51:a1:38:22:4f:26:5a:2b:17:10:40:6e:2d:e5:62: 30:a6:66:8f:7f:49:22:a9:6c:21:f6:f1:b3:6e:45: b3:28:13:16:4c:bb:24:8a:8e:e2:0a:b9:4e:1e:5f: d3:41:77:eb:b7:52:be:2e:74:fd:d0:4a:42:11:5e: 84:93:6f:b8:2c:38:32:62:bd:d1:d6:1c:6b:22:b4: 17:59:69:69:64:19:3d:2b:1d:5a:6f:3e:75:7e:e4: b9:a0:6c:df:d3:a0:5f:ad:69:15:49:59:4a:a1:a5: 2b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:3A:C2:E4:CB:E0:FD:CF:96:65:C2:CF:61:05:F0:E8:27:6E:E4:48 X509v3 Authority Key Identifier: keyid:20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ca:bd:e4:12:03:1f:f4:70:a8:82:cb:93:ea:c8:f4:91:ba: 4f:48:ae:f2:88:ac:cf:bc:88:96:69:f3:7f:28:fb:49:1c:38: 00:39:f5:cd:ea:de:f3:fe:e7:6c:28:31:47:42:02:33:b7:44: 90:4d:78:ff:94:e7:bc:e4:12:e9:e4:bb:a2:72:72:25:9f:ee: 06:89:83:69:78:28:56:e5:eb:e5:c3:ad:19:1a:54:3f:27:82: 7c:bc:ce:bf:f3:38:80:b1:74:6e:6f:98:f5:ad:5d:27:69:8e: 1e:84:a9:28:3f:84:83:76:5d:31:39:5d:16:14:eb:71:38:f2: fe:fb:40:8f:e3:7b:d7:f4:ed:78:96:30:7b:1a:90:98:3b:6d: 8e:69:98:eb:a9:b0:94:04:2c:59:49:13:4e:8a:cb:b8:d0:25: f3:ca:4d:1e:d0:97:47:57:20:6a:54:37:1a:b5:c4:00:ea:3b: 5d:20:da:29:26:8c:90:3f:93:7c:be:41:e0:0b:64:d5:6b:5d: 60:7d:2b:39:32:65:f1:6c:5a:c3:f0:a1:be:23:19:66:af:43: a1:f3:4a:2e:c5:22:8f:eb:92:ad:fa:12:fa:ae:64:ff:32:d9: ab:35:35:d4:be:9b:d8:7f:d2:d6:25:5e:00:8b:e8:fc:04:22: 99:8b:b0:d9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSozN5Mw8F+524oNxtFLtI3ZrEpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZD ODg5MjNGMDAeFw0yNjAzMDIwMDAyNTdaFw0yNjAzMDMwMzM2NTdaMDMxMTAvBgNV BAMTKDI2M0FDMkU0Q0JFMEZEQ0Y5NjY1QzJDRjYxMDVGMEU4Mjc2RUU0NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCakEHdhO1XOXS8v+eCuU0ker/l 28/qNujGhUoNluelTFuRkyPA/ym/bY2XFtWna1ZySRZnw9QViK12T1UHrCUnW6Rg ierWN+RGzUVas7488JuFGts+BiKBN4LaO387U/z1owvZTuuvE87aK50ObzOwgcXH YqKy66atpds99Unhi11qUf4LUAcf/MmithoqYMnwxn/g/lGhOCJPJlorFxBAbi3l YjCmZo9/SSKpbCH28bNuRbMoExZMuySKjuIKuU4eX9NBd+u3Ur4udP3QSkIRXoST b7gsODJivdHWHGsitBdZaWlkGT0rHVpvPnV+5LmgbN/ToF+taRVJWUqhpSsLAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUJjrC5Mvg/c+WZcLPYQXw6Cdu5EgwHwYDVR0j BBgwFoAUICqC2m5zzkJi4Yuu1go/psiJI/AwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDliZDM4ODgtOTMwMi00YjZmLWEwMTctMmI0YmJhNWU1 N2JiLzEvMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZDODg5MjNGMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDJBODJEQTZFNzNDRTQyNjJFMThCQUVE NjBBM0ZBNkM4ODkyM0YwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q5YmQzODg4LTkzMDItNGI2Zi1hMDE3LTJiNGJiYTVlNTdiYi8xLzIwMkE4MkRB NkU3M0NFNDI2MkUxOEJBRUQ2MEEzRkE2Qzg4OTIzRjAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBayr3k EgMf9HCogsuT6sj0kbpPSK7yiKzPvIiWafN/KPtJHDgAOfXN6t7z/udsKDFHQgIz t0SQTXj/lOe85BLp5LuicnIln+4GiYNpeChW5evlw60ZGlQ/J4J8vM6/8ziAsXRu b5j1rV0naY4ehKkoP4SDdl0xOV0WFOtxOPL++0CP43vX9O14ljB7GpCYO22OaZjr qbCUBCxZSRNOisu40CXzyk0e0JdHVyBqVDcatcQA6jtdINopJoyQP5N8vkHgC2TV a11gfSs5MmXxbFrD8KG+Ixlmr0Oh80ouxSKP65Kt+hL6rmT/MtmrNTXUvpvYf9LW JV4Ai+j8BCKZi7DZ -----END CERTIFICATE-----Generated at Mon Mar 2 02:00:29 2026 by rpki-client