$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft File: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft (raw, json) Hash identifier: 2J4xaboaLkYoMzqfMboImLU80MkpHh6aU+StXt2NaFI= Subject key identifier: 01:C0:88:07:F5:06:AC:15:CC:92:EF:AA:1C:86:78:6C:AD:22:3B:07 Authority key identifier: 20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 Certificate issuer: /CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Certificate serial: 4F3F77A342DE54CC7CC5583C8A61A93BAD6D5BF4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft Manifest number: 01CB Signing time: Tue 28 Jul 2026 06:52:10 +0000 Manifest this update: Tue 28 Jul 2026 06:47:10 +0000 Manifest next update: Wed 29 Jul 2026 10:07:10 +0000 Files and hashes: 1: 326131343a373538313a333062353a3a2f34382d3438203d3e20323131373239.roa (hash: tFUXq6i30FxB1SNNhCRKk78oQl/FXFjJBGghOw722to=) 2: 326131343a373538313a333062363a3a2f34382d3438203d3e20323037323939.roa (hash: QF7sj3Q22cpFIfftMWFUaaWBXSTUWiNGhFKa4Gm8DjQ=) 3: 326131343a373538313a333039303a3a2f34342d3434203d3e20323034323131.roa (hash: an2CTnY48XCjuCGH81CGgjVXZdlCvh7kWv6euA7rsaw=) 4: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl (hash: x/Jt58sC35dFEIpexvXfVq+ds6eIlNR+VB/nkb4RQCo=) 5: 326131343a373538313a333062363a3a2f34382d3438203d3e203331383938.roa (hash: EiykYxl+6FaTNBSgNTe5hk8ztAyCkiKmYpqs3J6XV7E=) 6: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer (hash: Cg46VfMFxkibHVY72VspTJE2BjBtIpE0lG8+Ny9YFKc=) 7: 326131343a373538313a333030303a3a2f34302d3438203d3e20323037353239.roa (hash: 49tQr1GLN9QvPACiaQcXfaSDsuhRZJax3rEAyqF9fvs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 10:07:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:3f:77:a3:42:de:54:cc:7c:c5:58:3c:8a:61:a9:3b:ad:6d:5b:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Validity Not Before: Jul 28 06:47:10 2026 GMT Not After : Jul 29 10:07:10 2026 GMT Subject: CN=01C08807F506AC15CC92EFAA1C86786CAD223B07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2a:21:a6:98:0f:58:9b:9b:67:d4:26:43:8b: 49:59:7e:97:9b:2f:e2:53:b2:0d:66:e0:a2:94:49: 11:eb:66:26:69:02:d2:66:8c:20:9b:0a:d9:83:a5: 41:18:07:3f:8d:12:af:fb:7c:bf:fa:9d:b8:19:d9: bc:bc:d5:d2:8a:0e:46:fc:17:b5:18:a3:9b:cf:a9: d0:c7:0d:03:6b:14:b6:b8:ff:1b:aa:6c:5a:5b:e1: 00:19:9a:19:79:8b:65:d9:03:ee:78:36:ff:f9:97: d7:23:81:d2:31:59:7b:a7:5a:05:dc:f6:a8:75:48: 54:16:4e:48:c7:34:6b:fb:c7:7b:59:a1:f3:31:fb: cf:e5:dc:bd:34:55:04:46:9c:04:85:ac:59:df:9f: 7f:b3:dd:f1:77:87:2c:52:52:83:a5:ad:80:ed:95: 44:be:11:3e:79:0a:ae:60:65:62:b4:01:dc:4e:67: 5b:27:61:85:ef:e5:56:35:46:07:43:16:c5:06:cc: 39:b9:89:20:72:2d:be:aa:1e:87:9e:64:d4:dc:81: 22:16:9c:52:e9:33:f7:a6:d9:6a:23:7a:6d:b9:31: 70:2d:7d:f0:1b:1c:35:0d:9e:51:11:82:cf:bd:22: 53:c5:f1:87:8c:4e:7c:37:d9:6a:59:c5:aa:93:9d: 89:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C0:88:07:F5:06:AC:15:CC:92:EF:AA:1C:86:78:6C:AD:22:3B:07 X509v3 Authority Key Identifier: keyid:20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:5d:ef:9c:fd:f3:26:96:c5:d4:0e:4d:f5:dd:f6:55:f6:b3: 02:4f:69:32:e7:45:da:0e:63:05:a0:61:57:13:24:9f:22:41: bb:d4:8e:4e:5a:c0:52:ba:83:2c:90:9d:36:11:52:0f:df:5f: d1:ac:33:73:1b:ef:a4:b0:c7:71:ae:a9:df:3f:8a:3b:51:cd: 10:28:d8:b4:81:e6:0f:cb:00:3d:cf:94:a3:f4:3a:8a:bc:aa: 7c:d7:a1:98:bc:8e:24:d9:69:ce:ab:36:b5:21:34:5f:4d:63: 1c:d0:65:4d:15:0d:93:8c:a2:6c:2c:0a:57:a7:63:76:09:31: 0c:9d:b9:24:24:40:bc:38:c0:ad:c5:13:f7:17:fa:2a:46:4a: 9f:2f:08:67:ec:55:3e:c9:cb:bf:08:f2:ce:2f:8e:11:ea:07: e8:b5:54:2f:e4:40:c1:5f:fd:36:f6:d1:9b:9d:e8:63:45:32: 0d:6d:73:6a:eb:b0:30:9a:df:b6:2e:ba:b9:6e:1a:f5:fa:b1: 0e:6d:1c:fc:5f:89:79:e4:d1:3d:93:f4:25:b0:6e:bc:6e:6d: 6d:f5:7a:d2:40:b5:35:1f:d9:86:6b:54:6b:74:bf:a0:5a:9a: d6:0d:d9:de:65:11:21:26:f5:78:69:fc:53:7f:48:5e:35:71: 87:19:92:4e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUTz93o0LeVMx8xVg8imGpO61tW/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZD ODg5MjNGMDAeFw0yNjA3MjgwNjQ3MTBaFw0yNjA3MjkxMDA3MTBaMDMxMTAvBgNV BAMTKDAxQzA4ODA3RjUwNkFDMTVDQzkyRUZBQTFDODY3ODZDQUQyMjNCMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnKiGmmA9Ym5tn1CZDi0lZfpeb L+JTsg1m4KKUSRHrZiZpAtJmjCCbCtmDpUEYBz+NEq/7fL/6nbgZ2by81dKKDkb8 F7UYo5vPqdDHDQNrFLa4/xuqbFpb4QAZmhl5i2XZA+54Nv/5l9cjgdIxWXunWgXc 9qh1SFQWTkjHNGv7x3tZofMx+8/l3L00VQRGnASFrFnfn3+z3fF3hyxSUoOlrYDt lUS+ET55Cq5gZWK0AdxOZ1snYYXv5VY1RgdDFsUGzDm5iSByLb6qHoeeZNTcgSIW nFLpM/em2Wojem25MXAtffAbHDUNnlERgs+9IlPF8YeMTnw32WpZxaqTnYl3AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUAcCIB/UGrBXMku+qHIZ4bK0iOwcwHwYDVR0j BBgwFoAUICqC2m5zzkJi4Yuu1go/psiJI/AwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDliZDM4ODgtOTMwMi00YjZmLWEwMTctMmI0YmJhNWU1 N2JiLzEvMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZDODg5MjNGMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDJBODJEQTZFNzNDRTQyNjJFMThCQUVE NjBBM0ZBNkM4ODkyM0YwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q5YmQzODg4LTkzMDItNGI2Zi1hMDE3LTJiNGJiYTVlNTdiYi8xLzIwMkE4MkRB NkU3M0NFNDI2MkUxOEJBRUQ2MEEzRkE2Qzg4OTIzRjAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAoXe+c /fMmlsXUDk313fZV9rMCT2ky50XaDmMFoGFXEySfIkG71I5OWsBSuoMskJ02EVIP 31/RrDNzG++ksMdxrqnfP4o7Uc0QKNi0geYPywA9z5Sj9DqKvKp816GYvI4k2WnO qza1ITRfTWMc0GVNFQ2TjKJsLApXp2N2CTEMnbkkJEC8OMCtxRP3F/oqRkqfLwhn 7FU+ycu/CPLOL44R6gfotVQv5EDBX/029tGbnehjRTINbXNq67Awmt+2Lrq5bhr1 +rEObRz8X4l55NE9k/QlsG68bm1t9XrSQLU1H9mGa1RrdL+gWprWDdneZREhJvV4 afxTf0heNXGHGZJO -----END CERTIFICATE-----Generated at Tue Jul 28 18:23:40 2026 by rpki-client