$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft File: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft (raw, json) Hash identifier: LlJEiyyB98+xDz0A6SMSBoSyw/nr6bLBjCd7VTJ8pqE= Subject key identifier: D4:30:E5:2E:DB:38:5C:DA:1A:2C:E3:74:9F:08:99:0A:32:36:96:4E Authority key identifier: 20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 Certificate issuer: /CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Certificate serial: 76614A27EBA75CE8744210D617C3C4839F552711 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft Manifest number: 0216 Signing time: Sun 20 Sep 2026 21:23:19 +0000 Manifest this update: Sun 20 Sep 2026 21:18:19 +0000 Manifest next update: Mon 21 Sep 2026 22:17:19 +0000 Files and hashes: 1: 3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.cer (hash: Q7BJ01tr/6JHLPGP911ghDsrU5buibZF5gNXX6+52rQ=) 2: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl (hash: gsa7H3HzWL7YVzWAov7yhyMfvMmZmECk6hNJO1VGsqQ=) 3: 326131343a373538313a333062363a3a2f34382d3438203d3e203331383938.roa (hash: EiykYxl+6FaTNBSgNTe5hk8ztAyCkiKmYpqs3J6XV7E=) 4: 326131343a373538313a333062353a3a2f34382d3438203d3e20323131373239.roa (hash: nUtP3OV4fZsZW1X/gp0Xu/ils8ZvclvedQBTDcf+slw=) 5: 326131343a373538313a333030303a3a2f34302d3438203d3e20323037353239.roa (hash: nO44y4dGpNuxJp2QdoTzjcIWxOsTj19ZEllt1Dvs5Ts=) 6: 326131343a373538313a333039303a3a2f34342d3434203d3e20323034323131.roa (hash: an2CTnY48XCjuCGH81CGgjVXZdlCvh7kWv6euA7rsaw=) 7: 326131343a373538313a333062363a3a2f34382d3438203d3e20323037323939.roa (hash: QF7sj3Q22cpFIfftMWFUaaWBXSTUWiNGhFKa4Gm8DjQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 22:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:61:4a:27:eb:a7:5c:e8:74:42:10:d6:17:c3:c4:83:9f:55:27:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Validity Not Before: Sep 20 21:18:19 2026 GMT Not After : Sep 21 22:17:19 2026 GMT Subject: CN=D430E52EDB385CDA1A2CE3749F08990A3236964E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:51:16:95:95:36:81:ed:6d:44:65:ab:8e:e2: b1:90:58:98:68:6e:19:59:1f:0c:ea:c4:f9:2c:b0: 1d:8c:76:44:77:54:35:76:e0:a4:97:d2:68:b2:bd: 41:7f:cd:65:be:2b:9d:2e:e9:78:17:76:70:06:dc: 1f:95:13:35:1d:73:da:ff:70:e7:1c:30:eb:59:d3: 6f:8f:68:00:28:27:0b:ee:b8:6c:d8:7d:49:6d:09: d0:49:dc:61:19:dc:66:cc:2c:63:96:96:ab:61:fb: 88:d2:cc:b5:3c:cc:42:a1:d4:09:2a:cb:2b:f4:f5: 9e:38:cd:28:0a:cb:13:6e:10:0a:1d:10:ce:41:7c: 90:a3:ed:21:42:9f:f7:39:fd:3b:22:98:15:d7:99: 5e:48:22:a6:3c:87:84:b2:99:b9:d7:38:c1:6f:fc: ff:f0:0c:aa:fb:5f:21:90:a6:8f:62:3b:84:16:74: 44:e1:7e:ba:15:f4:6a:37:09:f7:4b:8a:0e:5c:2f: 2b:50:91:4b:b0:55:83:77:54:db:d2:4d:ca:0d:53: e4:e4:dd:2d:2f:1f:b9:3d:8b:b7:43:d9:3a:8b:d7: 2b:ed:a1:18:a5:70:b1:ae:49:62:cd:1e:8a:06:19: d5:6d:2e:e1:7a:5c:76:49:bf:a2:68:22:7d:51:04: 21:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:30:E5:2E:DB:38:5C:DA:1A:2C:E3:74:9F:08:99:0A:32:36:96:4E X509v3 Authority Key Identifier: keyid:20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ce:ae:32:1b:d9:15:44:16:94:9b:60:8a:e2:a8:ae:d3:fb: 7e:c5:48:fe:55:b3:88:f5:4c:fc:96:dc:ea:97:a0:57:9c:c9: ea:84:07:fe:45:e5:c2:34:38:2f:54:69:34:fa:cd:5b:2f:cf: 24:cd:51:1b:cb:58:e7:ee:60:ac:84:aa:3c:67:cb:93:93:2f: b7:70:99:1d:a6:95:cb:60:67:db:44:eb:91:0d:08:0f:3c:23: 9a:64:94:1d:b2:ea:73:a3:87:04:51:48:0b:30:b9:f9:24:a9: e4:c3:9d:c1:23:25:16:50:9e:53:fd:b4:5d:bc:2e:cd:5f:f1: 93:be:07:b4:c8:d6:6e:61:36:c7:6a:7d:91:e2:11:fb:29:d9: c1:22:6a:b8:ba:fd:2d:c6:8a:e9:91:df:07:65:74:2c:62:5f: 90:d2:9b:e0:b4:18:cd:95:be:b6:aa:3e:b1:93:2d:be:49:0f: 69:a1:0f:c7:7d:03:5e:98:8d:4c:d2:7a:08:46:58:41:2b:0c: 56:26:fb:4c:c1:38:c2:7b:76:7f:a4:0e:9e:06:9b:8b:d9:74: 1a:83:6c:87:2f:e8:bd:74:4c:f3:27:c5:59:10:1a:de:8f:3e: c2:40:de:36:1c:01:4e:d4:d1:09:ca:96:94:03:ff:16:59:d7: 79:dd:56:13 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUdmFKJ+unXOh0QhDWF8PEg59VJxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZD ODg5MjNGMDAeFw0yNjA5MjAyMTE4MTlaFw0yNjA5MjEyMjE3MTlaMDMxMTAvBgNV BAMTKEQ0MzBFNTJFREIzODVDREExQTJDRTM3NDlGMDg5OTBBMzIzNjk2NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEURaVlTaB7W1EZauO4rGQWJho bhlZHwzqxPkssB2MdkR3VDV24KSX0miyvUF/zWW+K50u6XgXdnAG3B+VEzUdc9r/ cOccMOtZ02+PaAAoJwvuuGzYfUltCdBJ3GEZ3GbMLGOWlqth+4jSzLU8zEKh1Akq yyv09Z44zSgKyxNuEAodEM5BfJCj7SFCn/c5/TsimBXXmV5IIqY8h4SymbnXOMFv /P/wDKr7XyGQpo9iO4QWdEThfroV9Go3CfdLig5cLytQkUuwVYN3VNvSTcoNU+Tk 3S0vH7k9i7dD2TqL1yvtoRilcLGuSWLNHooGGdVtLuF6XHZJv6JoIn1RBCGxAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU1DDlLts4XNoaLON0nwiZCjI2lk4wHwYDVR0j BBgwFoAUICqC2m5zzkJi4Yuu1go/psiJI/AwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDliZDM4ODgtOTMwMi00YjZmLWEwMTctMmI0YmJhNWU1 N2JiLzEvMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZDODg5MjNGMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDJBODJEQTZFNzNDRTQyNjJFMThCQUVE NjBBM0ZBNkM4ODkyM0YwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q5YmQzODg4LTkzMDItNGI2Zi1hMDE3LTJiNGJiYTVlNTdiYi8xLzIwMkE4MkRB NkU3M0NFNDI2MkUxOEJBRUQ2MEEzRkE2Qzg4OTIzRjAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAMzq4y G9kVRBaUm2CK4qiu0/t+xUj+VbOI9Uz8ltzql6BXnMnqhAf+ReXCNDgvVGk0+s1b L88kzVEby1jn7mCshKo8Z8uTky+3cJkdppXLYGfbROuRDQgPPCOaZJQdsupzo4cE UUgLMLn5JKnkw53BIyUWUJ5T/bRdvC7NX/GTvge0yNZuYTbHan2R4hH7KdnBImq4 uv0txorpkd8HZXQsYl+Q0pvgtBjNlb62qj6xky2+SQ9poQ/HfQNemI1M0noIRlhB KwxWJvtMwTjCe3Z/pA6eBpuL2XQag2yHL+i9dEzzJ8VZEBrejz7CQN42HAFO1NEJ ypaUA/8WWdd53VYT -----END CERTIFICATE-----Generated at Mon Sep 21 15:45:47 2026 by rpki-client