$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft File: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft (raw, json) Hash identifier: DW5B+VZxdduW5oEt7OTYO8M7GLlnxfoEQ+OHkJgXvQo= Subject key identifier: 6A:E9:CE:8A:63:1E:32:44:4B:FD:24:74:C7:BC:CA:19:6A:44:2E:D9 Authority key identifier: 20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 Certificate issuer: /CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Certificate serial: 4819700BA327FAAE341A28E3B78F587AC4DB96A9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft Manifest number: 013E Signing time: Fri 17 Apr 2026 04:03:45 +0000 Manifest this update: Fri 17 Apr 2026 03:58:45 +0000 Manifest next update: Sat 18 Apr 2026 07:57:45 +0000 Files and hashes: 1: 326131343a373538313a333030303a3a2f34302d3438203d3e20323037353239.roa (hash: 49tQr1GLN9QvPACiaQcXfaSDsuhRZJax3rEAyqF9fvs=) 2: 326131343a373538313a333062363a3a2f34382d3438203d3e20323037323939.roa (hash: QF7sj3Q22cpFIfftMWFUaaWBXSTUWiNGhFKa4Gm8DjQ=) 3: 326131343a373538313a333062353a3a2f34382d3438203d3e20323131373239.roa (hash: tFUXq6i30FxB1SNNhCRKk78oQl/FXFjJBGghOw722to=) 4: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer (hash: Cg46VfMFxkibHVY72VspTJE2BjBtIpE0lG8+Ny9YFKc=) 5: 326131343a373538313a333039303a3a2f34342d3434203d3e20323034323131.roa (hash: an2CTnY48XCjuCGH81CGgjVXZdlCvh7kWv6euA7rsaw=) 6: 326131343a373538313a333062363a3a2f34382d3438203d3e203331383938.roa (hash: EiykYxl+6FaTNBSgNTe5hk8ztAyCkiKmYpqs3J6XV7E=) 7: 326131343a373538303a666666353a3a2f34382d3438203d3e20323037353239.roa (hash: 8GEpSwKR5aAKrW7JpZcQNrVUIUKVu8YVCYytf208qTw=) 8: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl (hash: 4FXnX4jYarKPiMmlvRPkSO4PHI2VBFTWZ0FyOk8ZoxU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:19:70:0b:a3:27:fa:ae:34:1a:28:e3:b7:8f:58:7a:c4:db:96:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Validity Not Before: Apr 17 03:58:45 2026 GMT Not After : Apr 18 07:57:45 2026 GMT Subject: CN=6AE9CE8A631E32444BFD2474C7BCCA196A442ED9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7a:6d:3b:c5:9f:32:6a:38:5a:44:3f:e2:62: 00:f8:14:96:27:74:e7:35:35:98:c1:1b:ca:70:0c: 98:5c:44:55:eb:c0:34:dc:92:80:f3:aa:7b:6c:c3: 47:15:7e:81:95:e2:d5:30:64:c4:dd:32:ef:ca:20: 3a:24:40:bb:72:dd:8a:af:28:27:be:8e:80:c0:6f: 45:87:b2:28:ac:28:bf:ee:38:21:87:be:56:5a:b7: 8d:0a:ef:17:74:6d:84:b1:34:89:09:a0:eb:00:35: 88:50:25:28:31:4b:bb:09:50:61:5d:68:2d:83:06: 44:e4:fd:13:7e:6c:4f:6b:95:5e:29:4a:7a:26:29: a8:6c:c8:0f:ac:b1:41:00:dd:9f:4c:8c:89:83:68: fc:22:3a:7e:d0:a5:71:73:76:5b:bf:1e:a0:62:ee: 17:42:9a:da:4a:8b:29:93:6d:36:51:7b:e9:74:05: 9d:1e:b4:95:20:a5:0a:f4:e3:5c:72:26:43:8c:29: 45:5a:43:da:7d:ab:ce:d0:d0:57:ac:9d:2e:65:6b: bb:f8:c0:5e:84:93:79:5a:6e:dd:b8:7e:09:db:ac: d0:a8:50:65:80:65:b1:41:45:31:ae:cd:15:e3:26: c6:fd:b5:9f:4a:2a:a2:16:54:71:86:61:f1:0d:68: c8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E9:CE:8A:63:1E:32:44:4B:FD:24:74:C7:BC:CA:19:6A:44:2E:D9 X509v3 Authority Key Identifier: keyid:20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:5c:d6:4c:bd:52:40:71:47:bd:64:49:a8:d6:59:08:38:d1: 68:a9:4c:12:1a:21:52:81:14:9c:3e:05:e3:b2:22:10:5c:3c: 9b:44:d0:e6:53:21:54:7c:7e:02:93:a3:a9:68:f8:a3:7c:93: 8d:e3:29:70:aa:a8:c6:da:c5:4b:f4:4d:e9:24:69:b5:d3:98: 4f:00:20:ec:f0:8e:eb:30:57:76:0f:3e:d3:ed:72:6c:01:59: be:d3:62:e6:26:62:6e:36:0c:31:5a:0c:12:1b:22:0e:f8:c2: 16:ad:78:b4:79:41:df:63:1a:91:b6:b2:e1:99:62:c9:39:2d: df:a5:16:12:7f:10:1f:5e:21:69:0d:fa:b6:7b:05:ea:04:db: 58:00:c6:a6:7e:9a:df:61:ca:a1:3d:5d:eb:10:c4:81:0c:ac: 80:b0:6a:d1:d3:65:d4:df:a0:d7:7f:37:0b:8c:31:e6:33:28: ff:cd:9f:77:36:e7:49:fb:41:24:b8:0c:72:ca:6e:92:49:ac: 49:0e:cf:b1:bd:30:55:26:de:ff:c7:fc:b9:a2:df:4d:28:fd: 07:7c:d9:1c:2e:2a:be:f6:de:94:79:e9:a5:66:82:d2:d2:a1: aa:11:d9:9b:39:f9:a3:16:1e:10:88:fd:70:2f:19:c5:7b:90: 5e:f3:f8:e0 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSBlwC6Mn+q40Gijjt49YesTblqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZD ODg5MjNGMDAeFw0yNjA0MTcwMzU4NDVaFw0yNjA0MTgwNzU3NDVaMDMxMTAvBgNV BAMTKDZBRTlDRThBNjMxRTMyNDQ0QkZEMjQ3NEM3QkNDQTE5NkE0NDJFRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFem07xZ8yajhaRD/iYgD4FJYn dOc1NZjBG8pwDJhcRFXrwDTckoDzqntsw0cVfoGV4tUwZMTdMu/KIDokQLty3Yqv KCe+joDAb0WHsiisKL/uOCGHvlZat40K7xd0bYSxNIkJoOsANYhQJSgxS7sJUGFd aC2DBkTk/RN+bE9rlV4pSnomKahsyA+ssUEA3Z9MjImDaPwiOn7QpXFzdlu/HqBi 7hdCmtpKiymTbTZRe+l0BZ0etJUgpQr041xyJkOMKUVaQ9p9q87Q0FesnS5la7v4 wF6Ek3labt24fgnbrNCoUGWAZbFBRTGuzRXjJsb9tZ9KKqIWVHGGYfENaMhdAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUaunOimMeMkRL/SR0x7zKGWpELtkwHwYDVR0j BBgwFoAUICqC2m5zzkJi4Yuu1go/psiJI/AwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDliZDM4ODgtOTMwMi00YjZmLWEwMTctMmI0YmJhNWU1 N2JiLzEvMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZDODg5MjNGMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDJBODJEQTZFNzNDRTQyNjJFMThCQUVE NjBBM0ZBNkM4ODkyM0YwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q5YmQzODg4LTkzMDItNGI2Zi1hMDE3LTJiNGJiYTVlNTdiYi8xLzIwMkE4MkRB NkU3M0NFNDI2MkUxOEJBRUQ2MEEzRkE2Qzg4OTIzRjAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQASXNZM vVJAcUe9ZEmo1lkIONFoqUwSGiFSgRScPgXjsiIQXDybRNDmUyFUfH4Ck6OpaPij fJON4ylwqqjG2sVL9E3pJGm105hPACDs8I7rMFd2Dz7T7XJsAVm+02LmJmJuNgwx WgwSGyIO+MIWrXi0eUHfYxqRtrLhmWLJOS3fpRYSfxAfXiFpDfq2ewXqBNtYAMam fprfYcqhPV3rEMSBDKyAsGrR02XU36DXfzcLjDHmMyj/zZ93NudJ+0EkuAxyym6S SaxJDs+xvTBVJt7/x/y5ot9NKP0HfNkcLiq+9t6UeemlZoLS0qGqEdmbOfmjFh4Q iP1wLxnFe5Be8/jg -----END CERTIFICATE-----Generated at Fri Apr 17 18:54:48 2026 by rpki-client