$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft File: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft (raw, json) Hash identifier: vjnGjmVGjk4te6usOQTx8C18RQgIE5zeuhKAxeydl2s= Subject key identifier: 57:CB:22:63:19:24:19:66:71:95:DA:7E:90:5D:2A:FF:9D:51:B0:9B Authority key identifier: 20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 Certificate issuer: /CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Certificate serial: 138DF86A069E08542E87E92EFE861D367B37D840 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft Manifest number: 018F Signing time: Sat 13 Jun 2026 02:09:36 +0000 Manifest this update: Sat 13 Jun 2026 02:04:36 +0000 Manifest next update: Sun 14 Jun 2026 05:39:36 +0000 Files and hashes: 1: 326131343a373538313a333030303a3a2f34302d3438203d3e20323037353239.roa (hash: 49tQr1GLN9QvPACiaQcXfaSDsuhRZJax3rEAyqF9fvs=) 2: 326131343a373538313a333039303a3a2f34342d3434203d3e20323034323131.roa (hash: an2CTnY48XCjuCGH81CGgjVXZdlCvh7kWv6euA7rsaw=) 3: 326131343a373538313a333062353a3a2f34382d3438203d3e20323131373239.roa (hash: tFUXq6i30FxB1SNNhCRKk78oQl/FXFjJBGghOw722to=) 4: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer (hash: Cg46VfMFxkibHVY72VspTJE2BjBtIpE0lG8+Ny9YFKc=) 5: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl (hash: EE9BEAsvxnjXdfdOD/+YW6yaX+D+xlbxdEP5NdpqOes=) 6: 326131343a373538313a333062363a3a2f34382d3438203d3e203331383938.roa (hash: EiykYxl+6FaTNBSgNTe5hk8ztAyCkiKmYpqs3J6XV7E=) 7: 326131343a373538313a333062363a3a2f34382d3438203d3e20323037323939.roa (hash: QF7sj3Q22cpFIfftMWFUaaWBXSTUWiNGhFKa4Gm8DjQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:8d:f8:6a:06:9e:08:54:2e:87:e9:2e:fe:86:1d:36:7b:37:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Validity Not Before: Jun 13 02:04:36 2026 GMT Not After : Jun 14 05:39:36 2026 GMT Subject: CN=57CB2263192419667195DA7E905D2AFF9D51B09B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cf:d9:e7:f5:9c:77:a2:b2:1e:0e:92:a1:ce: 9e:00:37:a3:04:64:d1:4f:33:0e:cc:bc:f7:89:8c: 0c:9d:2a:19:cf:11:56:e8:e2:2c:7c:92:ef:7e:54: 4c:5e:a1:72:2d:52:5c:45:5c:78:76:5d:18:78:d1: ad:85:4a:65:c6:1d:ab:ef:8d:59:3b:67:d9:af:e6: 10:c6:63:99:02:d2:96:e5:d4:ea:4a:8f:62:b5:82: 33:ce:ad:7c:fa:13:3c:ab:60:fd:c5:9b:76:54:c4: f8:19:66:9c:9f:e1:fb:7d:e1:09:76:1d:85:97:72: d6:b1:75:39:46:d6:da:36:58:95:3a:da:86:f4:54: 8a:a1:81:51:e5:eb:01:1b:e5:9f:65:c0:e8:ed:17: 2f:38:0f:73:a2:e7:1b:8b:47:7f:f3:23:1c:81:ba: 50:1e:5d:4c:1a:9f:c1:b3:fd:57:cc:34:0f:ab:f8: f9:a7:5d:50:6c:31:10:36:70:36:18:41:02:b4:32: 55:b7:01:df:a3:7a:16:84:b3:90:77:9b:dd:e7:68: 4e:29:86:c7:00:89:8a:7e:27:bd:84:07:0b:1c:cb: 6f:71:ff:1c:4b:2f:3f:10:9c:25:b8:2d:82:a7:ca: 34:6f:ab:03:44:6c:d5:be:03:c5:1b:8e:d6:6c:a5: 0c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:CB:22:63:19:24:19:66:71:95:DA:7E:90:5D:2A:FF:9D:51:B0:9B X509v3 Authority Key Identifier: keyid:20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:b8:65:2b:4c:5f:73:fc:5a:b4:28:61:20:a1:ad:1b:5b:ed: a4:59:4a:ff:1f:da:27:43:56:ed:c1:c9:e1:1d:a7:0f:11:b5: b4:fb:0d:1c:90:91:94:b6:cf:c8:af:36:b3:f9:48:a4:60:ab: 5d:6a:97:6f:ac:9f:dc:dd:68:91:88:64:1e:2c:1e:7a:30:df: fe:14:cb:f8:58:3d:a7:bd:47:28:a4:a5:d3:0a:62:ce:ee:0d: eb:07:8c:6b:7a:ce:3b:f1:3f:79:ec:25:78:95:f3:8d:fc:17: aa:fc:52:d1:c6:8a:8f:90:12:ad:d7:f0:bc:21:b8:1b:18:0b: bd:e9:42:eb:1a:2f:c3:9a:c7:5c:95:a6:3d:e3:dd:5b:98:a5: 83:d4:7e:b4:84:ea:4e:a9:a6:24:2a:a2:ed:6d:30:f3:a4:23: 59:d7:75:29:e8:17:dc:42:fc:c2:f7:39:0e:16:08:4a:24:b5: a0:05:d5:55:db:df:5e:10:f2:8b:1d:b8:5d:69:0c:35:81:93: ec:1e:0e:21:20:6c:15:64:72:f8:4d:d7:08:46:ac:76:55:21: 3f:b9:58:2f:59:89:82:da:1a:50:b0:50:b0:83:f5:ff:34:48: 30:58:dd:30:b9:fd:1f:b5:8b:0b:ae:59:f2:d3:9f:be:c0:f0: b0:8c:08:4f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUE434agaeCFQuh+ku/oYdNns32EAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZD ODg5MjNGMDAeFw0yNjA2MTMwMjA0MzZaFw0yNjA2MTQwNTM5MzZaMDMxMTAvBgNV BAMTKDU3Q0IyMjYzMTkyNDE5NjY3MTk1REE3RTkwNUQyQUZGOUQ1MUIwOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgz9nn9Zx3orIeDpKhzp4AN6ME ZNFPMw7MvPeJjAydKhnPEVbo4ix8ku9+VExeoXItUlxFXHh2XRh40a2FSmXGHavv jVk7Z9mv5hDGY5kC0pbl1OpKj2K1gjPOrXz6EzyrYP3Fm3ZUxPgZZpyf4ft94Ql2 HYWXctaxdTlG1to2WJU62ob0VIqhgVHl6wEb5Z9lwOjtFy84D3Oi5xuLR3/zIxyB ulAeXUwan8Gz/VfMNA+r+PmnXVBsMRA2cDYYQQK0MlW3Ad+jehaEs5B3m93naE4p hscAiYp+J72EBwscy29x/xxLLz8QnCW4LYKnyjRvqwNEbNW+A8UbjtZspQxtAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUV8siYxkkGWZxldp+kF0q/51RsJswHwYDVR0j BBgwFoAUICqC2m5zzkJi4Yuu1go/psiJI/AwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDliZDM4ODgtOTMwMi00YjZmLWEwMTctMmI0YmJhNWU1 N2JiLzEvMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZDODg5MjNGMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDJBODJEQTZFNzNDRTQyNjJFMThCQUVE NjBBM0ZBNkM4ODkyM0YwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q5YmQzODg4LTkzMDItNGI2Zi1hMDE3LTJiNGJiYTVlNTdiYi8xLzIwMkE4MkRB NkU3M0NFNDI2MkUxOEJBRUQ2MEEzRkE2Qzg4OTIzRjAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCKuGUr TF9z/Fq0KGEgoa0bW+2kWUr/H9onQ1btwcnhHacPEbW0+w0ckJGUts/Irzaz+Uik YKtdapdvrJ/c3WiRiGQeLB56MN/+FMv4WD2nvUcopKXTCmLO7g3rB4xres478T95 7CV4lfON/Beq/FLRxoqPkBKt1/C8IbgbGAu96ULrGi/DmsdclaY9491bmKWD1H60 hOpOqaYkKqLtbTDzpCNZ13Up6BfcQvzC9zkOFghKJLWgBdVV299eEPKLHbhdaQw1 gZPsHg4hIGwVZHL4TdcIRqx2VSE/uVgvWYmC2hpQsFCwg/X/NEgwWN0wuf0ftYsL rlny05++wPCwjAhP -----END CERTIFICATE-----Generated at Sat Jun 13 10:07:35 2026 by rpki-client