$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft File: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft (raw, json) Hash identifier: 2O1AWF5cMlAjgfvtdzKMuuoXzK+fGwMcp1RZC4vTceE= Subject key identifier: 4D:2A:C2:FD:4B:1D:2C:CB:77:71:94:10:21:42:E7:A0:14:BA:8E:6F Authority key identifier: 20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 Certificate issuer: /CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Certificate serial: 5A5D8798727795F631E477372126DC6AF6E352F0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft Manifest number: FD Signing time: Sun 01 Mar 2026 04:17:57 +0000 Manifest this update: Sun 01 Mar 2026 04:12:57 +0000 Manifest next update: Mon 02 Mar 2026 08:06:57 +0000 Files and hashes: 1: 326131343a373538313a333030303a3a2f34302d3438203d3e20323037353239.roa (hash: 49tQr1GLN9QvPACiaQcXfaSDsuhRZJax3rEAyqF9fvs=) 2: 326131343a373538313a333062363a3a2f34382d3438203d3e20323037323939.roa (hash: QF7sj3Q22cpFIfftMWFUaaWBXSTUWiNGhFKa4Gm8DjQ=) 3: 326131343a373538313a333062363a3a2f34382d3438203d3e203331383938.roa (hash: EiykYxl+6FaTNBSgNTe5hk8ztAyCkiKmYpqs3J6XV7E=) 4: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer (hash: Cg46VfMFxkibHVY72VspTJE2BjBtIpE0lG8+Ny9YFKc=) 5: 326131343a373538313a333039303a3a2f34342d3434203d3e20323034323131.roa (hash: an2CTnY48XCjuCGH81CGgjVXZdlCvh7kWv6euA7rsaw=) 6: 326131343a373538313a333062353a3a2f34382d3438203d3e20323131373239.roa (hash: tFUXq6i30FxB1SNNhCRKk78oQl/FXFjJBGghOw722to=) 7: 326131343a373538303a666666353a3a2f34382d3438203d3e20323037353239.roa (hash: 8GEpSwKR5aAKrW7JpZcQNrVUIUKVu8YVCYytf208qTw=) 8: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl (hash: FOlR/vhKwiLWjNSDlbUHzSw2kHBRF0418Rz6U/fNA3c=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 08:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:5d:87:98:72:77:95:f6:31:e4:77:37:21:26:dc:6a:f6:e3:52:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Validity Not Before: Mar 1 04:12:57 2026 GMT Not After : Mar 2 08:06:57 2026 GMT Subject: CN=4D2AC2FD4B1D2CCB777194102142E7A014BA8E6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:1c:75:97:77:a6:eb:40:1e:8e:e2:af:1c:14: f8:6b:c4:ec:0a:93:18:15:10:15:df:52:80:dd:47: 9c:3d:ab:94:1c:fd:2b:f5:da:52:d5:a4:46:ac:55: 31:13:1d:5b:ff:d7:ad:00:c5:19:a4:f1:7a:0c:21: b7:5a:77:1b:bd:a0:47:e8:8f:ea:f7:0d:bb:b5:95: b7:ad:ba:21:1e:71:17:93:ae:ab:51:3f:50:ee:fd: 3c:bb:fd:b9:f7:ec:8e:b4:f5:b7:92:30:53:b1:c7: 80:13:ef:fa:d7:5a:6d:d4:f2:16:9b:03:9e:c6:2e: d8:e6:4d:72:02:f8:8e:01:b7:e5:59:ed:d8:d6:53: 17:e7:82:e0:b4:29:bd:56:2a:92:0b:ec:51:e3:fc: 2e:6c:d5:af:d3:03:e9:17:fe:5b:80:b7:b7:ba:d4: f9:cb:9d:e1:c2:33:49:24:fc:e2:a1:db:44:83:c0: cc:cc:3c:99:d5:91:4b:76:c6:bc:dc:4b:f8:4a:be: 26:21:dd:7e:34:39:1e:60:84:f2:ba:65:fb:a9:fb: 66:4f:0d:30:72:d3:fe:a1:5f:c5:93:69:6c:56:0d: 60:86:5a:a9:13:37:e4:a6:cb:44:d5:a4:bf:73:94: a6:ee:99:d9:3b:3a:90:f0:9a:af:cd:c5:0a:7f:78: 95:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:2A:C2:FD:4B:1D:2C:CB:77:71:94:10:21:42:E7:A0:14:BA:8E:6F X509v3 Authority Key Identifier: keyid:20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:65:fa:e5:88:25:ea:24:c4:bb:8c:cc:7e:63:c1:1a:52:16: 47:13:66:0b:e1:98:71:b8:70:ac:3a:dd:62:1d:3d:6b:53:75: 3e:ca:63:bc:c9:26:a3:b1:53:18:1c:24:46:cf:16:64:15:e7: 04:2a:96:1d:11:27:53:3c:20:8e:ca:c8:2d:f7:f2:c3:0a:82: b5:4c:f1:d5:6b:b6:e6:cb:ba:7b:c5:7b:6d:c7:66:fc:86:db: 43:9c:22:8f:75:36:26:7c:57:1a:18:54:ed:78:3b:6a:d5:a5: f5:9e:d6:c7:ab:ef:23:f2:47:45:32:c3:c3:3a:54:44:65:18: 9a:94:ff:d8:67:5c:a3:dc:c6:87:38:01:cb:a2:bf:7a:e5:01: 1a:fc:d3:59:35:02:f7:43:c0:6f:69:ea:dd:e6:17:16:da:99: d0:bd:70:61:e3:f4:37:3f:d2:20:8b:dc:90:e5:24:39:7c:98: 7a:8d:73:62:47:f0:0c:78:69:ee:d7:24:24:93:7f:7b:17:8d: ab:74:8b:83:50:e1:3b:ea:0d:c1:57:21:34:1d:bc:62:31:de: 07:c6:1d:d9:dc:2f:75:72:ad:f6:2e:ca:0a:b0:a0:e7:2c:07: d8:eb:f5:f8:fe:45:a9:1e:eb:c9:66:58:90:df:ca:7d:73:c1: cd:50:6a:81 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUWl2HmHJ3lfYx5Hc3ISbcavbjUvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZD ODg5MjNGMDAeFw0yNjAzMDEwNDEyNTdaFw0yNjAzMDIwODA2NTdaMDMxMTAvBgNV BAMTKDREMkFDMkZENEIxRDJDQ0I3NzcxOTQxMDIxNDJFN0EwMTRCQThFNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrHHWXd6brQB6O4q8cFPhrxOwK kxgVEBXfUoDdR5w9q5Qc/Sv12lLVpEasVTETHVv/160AxRmk8XoMIbdadxu9oEfo j+r3Dbu1lbetuiEecReTrqtRP1Du/Ty7/bn37I609beSMFOxx4AT7/rXWm3U8hab A57GLtjmTXIC+I4Bt+VZ7djWUxfnguC0Kb1WKpIL7FHj/C5s1a/TA+kX/luAt7e6 1PnLneHCM0kk/OKh20SDwMzMPJnVkUt2xrzcS/hKviYh3X40OR5ghPK6Zfup+2ZP DTBy0/6hX8WTaWxWDWCGWqkTN+Smy0TVpL9zlKbumdk7OpDwmq/NxQp/eJWTAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUTSrC/UsdLMt3cZQQIULnoBS6jm8wHwYDVR0j BBgwFoAUICqC2m5zzkJi4Yuu1go/psiJI/AwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDliZDM4ODgtOTMwMi00YjZmLWEwMTctMmI0YmJhNWU1 N2JiLzEvMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZDODg5MjNGMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDJBODJEQTZFNzNDRTQyNjJFMThCQUVE NjBBM0ZBNkM4ODkyM0YwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q5YmQzODg4LTkzMDItNGI2Zi1hMDE3LTJiNGJiYTVlNTdiYi8xLzIwMkE4MkRB NkU3M0NFNDI2MkUxOEJBRUQ2MEEzRkE2Qzg4OTIzRjAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBpZfrl iCXqJMS7jMx+Y8EaUhZHE2YL4ZhxuHCsOt1iHT1rU3U+ymO8ySajsVMYHCRGzxZk FecEKpYdESdTPCCOysgt9/LDCoK1TPHVa7bmy7p7xXttx2b8httDnCKPdTYmfFca GFTteDtq1aX1ntbHq+8j8kdFMsPDOlREZRialP/YZ1yj3MaHOAHLor965QEa/NNZ NQL3Q8Bvaerd5hcW2pnQvXBh4/Q3P9Igi9yQ5SQ5fJh6jXNiR/AMeGnu1yQkk397 F42rdIuDUOE76g3BVyE0HbxiMd4Hxh3Z3C91cq32LsoKsKDnLAfY6/X4/kWpHuvJ ZliQ38p9c8HNUGqB -----END CERTIFICATE-----Generated at Mon Mar 2 01:04:19 2026 by rpki-client