$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft File: 20914720382A1F52B950212C138E5E1E81BA69B7.mft (raw, json) Hash identifier: 8CrDFnedX0uurNuEpD7u/8V+ifgMBLAA2pn4DN/oQcg= Subject key identifier: 41:91:1F:96:F0:2F:56:15:59:D2:55:B8:1D:47:DF:81:36:1C:CA:DB Authority key identifier: 20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 Certificate issuer: /CN=20914720382A1F52B950212C138E5E1E81BA69B7 Certificate serial: 0B301F30666A9BFF1A84810FB56A65F9D1EF84C1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft Manifest number: 019B Signing time: Tue 28 Jul 2026 04:43:38 +0000 Manifest this update: Tue 28 Jul 2026 04:38:38 +0000 Manifest next update: Wed 29 Jul 2026 05:36:38 +0000 Files and hashes: 1: 326131343a373538363a363130303a3a2f34382d3438203d3e20323034323131.roa (hash: i8FxewYN5kk5O+OQO1ECyW70BJ7pMmYObv0lFKAtrXI=) 2: 326131343a373538363a363130363a3a2f34382d3438203d3e20323034323131.roa (hash: 8Vi1BDc187e4orwxGy0/rqG4GuMIpMb05XZjAeVSKdg=) 3: 326131343a373538363a363130393a3a2f34382d3438203d3e20323036303639.roa (hash: 9Mftss1+c95DzTv4paxBdS9SaT6MzQYoLspmrnfShYQ=) 4: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer (hash: pIADUm7hELp/Vqdstf8d4gGEQz21lMe/aoJyEiVS1CI=) 5: 326131343a373538363a363131303a3a2f34382d3438203d3e20323034323131.roa (hash: 6oVaAmUHgRd5I4Ls+xapNszkxDvRNa6SDHify0SU1pc=) 6: 20914720382A1F52B950212C138E5E1E81BA69B7.crl (hash: lbAZxV4ZHTQYtm/jAt9d8Pm+HZiBpz4HGLBdnWJxGnw=) 7: 326131343a373538363a363131333a3a2f34382d3438203d3e20323034323131.roa (hash: sZKmIrdMvk64uefomVxqrQfIRfYdr41SjuDolYGmZ5U=) 8: 326131343a373538363a363130343a3a2f34382d3438203d3e20323034323131.roa (hash: Mx3SvpD488YSM7QhBcQhFXDhTEiCBu3kBzOrFFQvDHI=) 9: 9868B8A018D41E9D418D93B52C0A31174F40F11E.cer (hash: 23+dwQKC9EhxR8/c837o7SVJ7wuGJrKYeRXm+DcGamE=) 10: 326131343a373538363a363130313a3a2f34382d3438203d3e20323034323131.roa (hash: DvKmhwWtZsD6TNvQ0eoVfIFrblMkYKUJ35ZR+X3ClBk=) 11: 326131343a373538363a363130353a3a2f34382d3438203d3e20323034323131.roa (hash: dJUl+RAxxY+nIO2HtMh4e2KW3S6TxZr3e2E6ku/vRA8=) 12: 326131343a373538363a363131343a3a2f34382d3438203d3e203131343231.roa (hash: N8XzyTZUvph6r/e12CjdTH60sBk3Wl4kicz6qoC6S0s=) 13: 326131343a373538363a363130373a3a2f34382d3438203d3e20323034323131.roa (hash: V2Vm92YYMyExADS3i94TFi72XsprSieZvIiYJxwsskY=) 14: 326131343a373538363a363130333a3a2f34382d3438203d3e20323034323131.roa (hash: EI2JmFR4s32Lz8tNongWwvU2DoYm1aiqo+qr8ZW+vPo=) 15: 326131343a373538363a363130323a3a2f34382d3438203d3e20323034323131.roa (hash: qV00rauBPvkNMm+ROCk1kFFtfkMd60Wl/gebvBC2C58=) 16: 326131343a373538363a363131323a3a2f34382d3438203d3e20323036303639.roa (hash: w5QHtu9cQyKjArMrfA6wboJd2mLuch9xpK2TkgucmN8=) 17: 326131343a373538363a363131313a3a2f34382d3438203d3e20323036303639.roa (hash: 3q7X88pIOl+dnnYtANwsrZeJh9YzsRCK2Bzv3ILW5DA=) 18: A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer (hash: aaIJrWdGq5AnSa6a4+/ZMpC8d9KfCxV0FNpaeDUU/D8=) 19: 140CF895225100CF571959173341D92070FF6E7C.cer (hash: +gzaj8eEKWdYwLDpey4WTnj+Qv54R/A4poIj/Ug/o3g=) 20: 326131343a373538363a363130383a3a2f34382d3438203d3e20323034323131.roa (hash: ZgjB8m1thnqWfHedFQRot49v76xsWvW29soNj1KmfdQ=) 21: 326131343a373538363a363530303a3a2f34302d3438203d3e20323032333936.roa (hash: dYDF2I04t+LIOjBAiMrzBqWk6adCjIN+miZ36ttNxLA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 05:36:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:30:1f:30:66:6a:9b:ff:1a:84:81:0f:b5:6a:65:f9:d1:ef:84:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20914720382A1F52B950212C138E5E1E81BA69B7 Validity Not Before: Jul 28 04:38:38 2026 GMT Not After : Jul 29 05:36:38 2026 GMT Subject: CN=41911F96F02F561559D255B81D47DF81361CCADB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:36:78:48:d8:e4:fb:d1:a5:6c:25:b3:f0:aa: b0:25:33:46:f7:bf:1e:d3:b5:15:9b:c8:1f:1d:e8: 4a:af:e7:f7:8d:4e:b6:48:91:3c:55:e7:49:19:59: 13:a8:f2:7e:b2:b7:90:c1:30:1e:50:26:60:fb:d0: 32:d9:d7:dc:87:00:07:cf:2e:dd:c7:aa:cd:cf:53: 5a:5b:92:bb:23:a7:2a:3a:e6:4b:86:48:6c:c6:68: cf:13:ef:17:94:f0:4b:ca:de:4a:d4:f9:81:5d:04: 2b:a7:9a:41:7d:f2:f5:f4:1d:3d:b4:88:6b:fe:92: 0f:39:ad:84:2e:60:16:4e:06:2c:5c:bb:5b:5d:9e: 7c:5c:3e:4d:15:b3:7c:65:fe:f4:07:b8:ee:fe:d5: 89:0d:b7:f2:6a:4e:0d:47:09:bc:9f:1f:7c:96:42: 76:b0:a3:ec:89:0c:d2:d9:70:8a:f8:f8:e0:ba:ce: 93:5a:e3:38:0a:8e:fc:61:ff:bf:7d:e1:55:f4:40: 36:d1:f8:87:a0:05:98:10:a4:e6:4b:77:70:f7:e0: af:25:0b:93:4c:d1:2c:8b:c4:93:9b:60:d4:5d:6e: a3:b0:f8:02:80:25:7f:3e:14:39:46:7f:1a:02:e2: 9c:3d:db:77:8b:e4:9c:9b:15:bf:42:a0:b1:be:7e: 3e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:91:1F:96:F0:2F:56:15:59:D2:55:B8:1D:47:DF:81:36:1C:CA:DB X509v3 Authority Key Identifier: keyid:20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:e4:e8:a6:cd:3e:b7:1e:54:2b:44:8a:1f:51:d4:4f:14:56: 01:31:be:1d:2a:bc:2f:66:a4:29:82:bf:67:43:e2:40:e2:b9: 98:cc:08:86:e0:71:6a:6c:85:78:2b:cc:a3:de:74:f7:e5:8c: fc:87:e0:ea:76:d1:99:4b:27:7e:a9:3b:5f:aa:55:1e:4f:bd: 5c:bf:89:4a:a6:79:e3:83:af:aa:59:59:cb:23:e5:ad:19:b2: b3:6e:d8:5f:e1:81:21:76:a1:fe:f1:8e:90:ea:87:66:80:ea: 58:ba:ea:36:b9:d8:ed:88:c9:09:23:5a:50:b0:d2:26:4d:ab: 3b:a2:3e:59:87:92:f2:93:3c:e3:b0:5d:3c:b8:b4:bd:6c:7d: 4d:0f:53:7f:71:0a:77:97:f2:36:01:98:bc:c6:9d:44:ff:ae: df:6d:8d:36:36:3e:6a:75:46:82:96:0d:2a:e9:53:e9:7d:d0: 44:9b:38:8a:d4:bc:a9:05:0d:7a:bf:dd:bb:0a:b3:74:6b:24: fc:8d:a0:b6:34:17:7a:bd:1f:fe:02:1c:95:ac:ae:f7:0d:51: e6:5b:bc:53:0e:06:34:84:24:2b:db:c7:b9:9d:4c:44:d5:20: af:b5:8a:58:12:8d:22:d3:54:14:fc:a1:b1:17:cf:41:e7:dc: 40:94:96:93 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUCzAfMGZqm/8ahIEPtWpl+dHvhMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4 MUJBNjlCNzAeFw0yNjA3MjgwNDM4MzhaFw0yNjA3MjkwNTM2MzhaMDMxMTAvBgNV BAMTKDQxOTExRjk2RjAyRjU2MTU1OUQyNTVCODFENDdERjgxMzYxQ0NBREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyNnhI2OT70aVsJbPwqrAlM0b3 vx7TtRWbyB8d6Eqv5/eNTrZIkTxV50kZWROo8n6yt5DBMB5QJmD70DLZ19yHAAfP Lt3Hqs3PU1pbkrsjpyo65kuGSGzGaM8T7xeU8EvK3krU+YFdBCunmkF98vX0HT20 iGv+kg85rYQuYBZOBixcu1tdnnxcPk0Vs3xl/vQHuO7+1YkNt/JqTg1HCbyfH3yW Qnawo+yJDNLZcIr4+OC6zpNa4zgKjvxh/7994VX0QDbR+IegBZgQpOZLd3D34K8l C5NM0SyLxJObYNRdbqOw+AKAJX8+FDlGfxoC4pw923eL5JybFb9CoLG+fj5FAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUQZEflvAvVhVZ0lW4HUffgTYcytswHwYDVR0j BBgwFoAUIJFHIDgqH1K5UCEsE45eHoG6abcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzMvMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4MUJBNjlCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDkxNDcyMDM4MkExRjUyQjk1MDIxMkMx MzhFNUUxRTgxQkE2OUI3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y1MzJiOWViLTJmYWUtNDhhOC05NzkzLTMzZWVjMDY3Y2UzOS8zLzIwOTE0NzIw MzgyQTFGNTJCOTUwMjEyQzEzOEU1RTFFODFCQTY5QjcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBP5Oim zT63HlQrRIofUdRPFFYBMb4dKrwvZqQpgr9nQ+JA4rmYzAiG4HFqbIV4K8yj3nT3 5Yz8h+DqdtGZSyd+qTtfqlUeT71cv4lKpnnjg6+qWVnLI+WtGbKzbthf4YEhdqH+ 8Y6Q6odmgOpYuuo2udjtiMkJI1pQsNImTas7oj5Zh5LykzzjsF08uLS9bH1ND1N/ cQp3l/I2AZi8xp1E/67fbY02Nj5qdUaClg0q6VPpfdBEmziK1LypBQ16v927CrN0 ayT8jaC2NBd6vR/+AhyVrK73DVHmW7xTDgY0hCQr28e5nUxE1SCvtYpYEo0i01QU /KGxF89B59xAlJaT -----END CERTIFICATE-----Generated at Tue Jul 28 20:51:30 2026 by rpki-client