$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft File: 20914720382A1F52B950212C138E5E1E81BA69B7.mft (raw, json) Hash identifier: AJJigwX6nVP5l7yq9EJKiey6ESrvUsF7+dMf4bd8Slw= Subject key identifier: 61:E2:90:E7:34:56:C5:23:BB:3C:98:9A:7F:F4:37:51:AE:7D:F3:35 Authority key identifier: 20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 Certificate issuer: /CN=20914720382A1F52B950212C138E5E1E81BA69B7 Certificate serial: 7CB5F8A4B105144BB34AFC81442C488D86E0CA9B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft Manifest number: BA Signing time: Thu 16 Apr 2026 19:59:21 +0000 Manifest this update: Thu 16 Apr 2026 19:54:21 +0000 Manifest next update: Fri 17 Apr 2026 22:42:21 +0000 Files and hashes: 1: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer (hash: pIADUm7hELp/Vqdstf8d4gGEQz21lMe/aoJyEiVS1CI=) 2: 326131343a373538363a363131303a3a2f34382d3438203d3e20323034323131.roa (hash: 6oVaAmUHgRd5I4Ls+xapNszkxDvRNa6SDHify0SU1pc=) 3: 140CF895225100CF571959173341D92070FF6E7C.cer (hash: +gzaj8eEKWdYwLDpey4WTnj+Qv54R/A4poIj/Ug/o3g=) 4: 326131343a373538363a363130303a3a2f34302d3438203d3e20323034323131.roa (hash: 15ggjMeHqDIREZjw9l6zy4xOfQOxACvn6hmmAmBgsSg=) 5: 326131343a373538363a363130323a3a2f34382d3438203d3e20323034323131.roa (hash: qV00rauBPvkNMm+ROCk1kFFtfkMd60Wl/gebvBC2C58=) 6: 326131343a373538363a363130363a3a2f34382d3438203d3e20323034323131.roa (hash: 8Vi1BDc187e4orwxGy0/rqG4GuMIpMb05XZjAeVSKdg=) 7: 326131343a373538363a363130393a3a2f34382d3438203d3e20323036303639.roa (hash: 9Mftss1+c95DzTv4paxBdS9SaT6MzQYoLspmrnfShYQ=) 8: A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer (hash: X5zL+qFsTHjBVtJO8DBIRg7aXq+SvC2G1IFUHERfTGM=) 9: 326131343a373538363a363130313a3a2f34382d3438203d3e20323034323131.roa (hash: DvKmhwWtZsD6TNvQ0eoVfIFrblMkYKUJ35ZR+X3ClBk=) 10: 326131343a373538363a363130333a3a2f34382d3438203d3e20323034323131.roa (hash: EI2JmFR4s32Lz8tNongWwvU2DoYm1aiqo+qr8ZW+vPo=) 11: 326131343a373538363a363130303a3a2f34382d3438203d3e20323034323131.roa (hash: i8FxewYN5kk5O+OQO1ECyW70BJ7pMmYObv0lFKAtrXI=) 12: 20914720382A1F52B950212C138E5E1E81BA69B7.crl (hash: JCg5TVA/MoayO5INF4q/oxq4qZDwKE1Go9PsEcWqR5w=) 13: 326131343a373538363a363130373a3a2f34382d3438203d3e20323034323131.roa (hash: V2Vm92YYMyExADS3i94TFi72XsprSieZvIiYJxwsskY=) 14: 326131343a373538363a363130383a3a2f34382d3438203d3e20323036303639.roa (hash: YcX2njhT0h6sqLfQ++klkVsJcPGnxKOwp/btnzs91NI=) 15: 4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.cer (hash: znj2KhD7dc90RL/SNmhicRPp3l/LZp/snY3wx3mPdJM=) 16: 326131343a373538363a363130343a3a2f34382d3438203d3e20323034323131.roa (hash: Mx3SvpD488YSM7QhBcQhFXDhTEiCBu3kBzOrFFQvDHI=) 17: 326131343a373538363a363130353a3a2f34382d3438203d3e20323034323131.roa (hash: dJUl+RAxxY+nIO2HtMh4e2KW3S6TxZr3e2E6ku/vRA8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:42:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:b5:f8:a4:b1:05:14:4b:b3:4a:fc:81:44:2c:48:8d:86:e0:ca:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20914720382A1F52B950212C138E5E1E81BA69B7 Validity Not Before: Apr 16 19:54:21 2026 GMT Not After : Apr 17 22:42:21 2026 GMT Subject: CN=61E290E73456C523BB3C989A7FF43751AE7DF335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:25:66:75:e5:49:ad:11:cf:f9:30:5c:64:58: 7d:1a:db:42:bc:b7:d4:1f:00:e9:a6:f3:60:b7:5b: 60:11:74:95:4e:af:af:2b:92:57:b8:57:7a:8a:09: ac:0a:47:ac:9a:a9:53:11:31:6d:14:18:30:62:48: e9:e8:9e:3a:19:2a:c2:e7:48:ed:2b:12:7b:6f:86: cf:c5:ed:a0:33:4b:87:e0:6a:e4:c5:8e:87:55:3b: 99:70:8a:57:b9:a1:e1:43:5f:a7:25:91:f8:2b:6e: 9c:f5:31:13:76:04:73:60:14:1e:32:ca:c3:89:58: 5d:2b:49:7d:a3:d1:9b:f7:48:49:7d:d9:9a:ee:8c: 29:b8:8e:f6:70:af:96:2c:f0:3a:87:36:ce:0c:a2: ef:e3:7c:04:fa:90:ad:d0:b0:5f:2a:1d:ea:a3:b6: f6:12:48:7e:a9:d8:82:3e:83:bf:97:44:25:f3:e6: 49:8b:eb:39:3e:25:79:e9:30:d4:65:06:9c:76:eb: 6b:6b:6e:41:de:b6:6f:09:d9:32:68:37:f1:19:65: 5e:4f:2b:b2:c3:a3:86:ff:a5:1f:3f:dd:79:f8:fd: ed:47:86:d4:95:11:2c:39:89:4b:20:47:8a:99:16: d9:b1:0b:7a:6f:42:9f:6e:9c:f5:43:dd:f3:50:39: a1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:E2:90:E7:34:56:C5:23:BB:3C:98:9A:7F:F4:37:51:AE:7D:F3:35 X509v3 Authority Key Identifier: keyid:20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:63:c8:52:34:19:f9:85:92:6d:bb:ac:3a:ff:62:2b:dc:ca: 95:fc:a0:cb:92:aa:d5:74:6b:bd:c0:a1:1d:22:c6:8f:e1:72: 0a:8b:d7:d3:07:0c:03:e8:8c:c8:7c:14:28:0e:ad:7d:72:26: fd:52:14:f3:b3:01:d2:ad:e2:58:3c:ac:8f:a1:da:29:df:a4: e1:ec:07:11:f1:89:f0:9c:00:30:21:ab:18:99:84:43:0e:ea: 8a:95:4c:12:be:4f:e6:70:32:db:a3:63:35:d6:f8:b1:fa:97: 92:d3:51:7c:46:be:ef:e1:15:7d:00:3c:bc:14:d5:5f:ca:2c: 15:8b:f5:4d:0f:da:bc:29:86:cd:32:cf:5e:05:5c:11:07:da: 97:a3:d7:aa:e3:5a:96:86:32:ca:0d:9d:e4:7d:da:34:74:90: 12:4d:61:35:27:04:9d:91:98:6c:47:9d:bf:1a:d5:5c:2c:ee: e5:59:02:03:d3:ca:af:83:c7:a0:4a:17:21:35:a9:33:ef:db: f1:89:64:e4:70:7e:09:79:39:93:88:69:83:c1:0b:4e:f5:e8: f5:3c:8f:4e:2c:c8:fe:3e:75:03:0c:e1:f3:00:a6:1b:fd:72: 62:12:5b:29:47:2e:40:92:d7:1a:26:15:3a:15:6c:6e:b8:3b: 42:c3:48:ef -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfLX4pLEFFEuzSvyBRCxIjYbgypswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4 MUJBNjlCNzAeFw0yNjA0MTYxOTU0MjFaFw0yNjA0MTcyMjQyMjFaMDMxMTAvBgNV BAMTKDYxRTI5MEU3MzQ1NkM1MjNCQjNDOTg5QTdGRjQzNzUxQUU3REYzMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTJWZ15UmtEc/5MFxkWH0a20K8 t9QfAOmm82C3W2ARdJVOr68rkle4V3qKCawKR6yaqVMRMW0UGDBiSOnonjoZKsLn SO0rEntvhs/F7aAzS4fgauTFjodVO5lwile5oeFDX6clkfgrbpz1MRN2BHNgFB4y ysOJWF0rSX2j0Zv3SEl92ZrujCm4jvZwr5Ys8DqHNs4Mou/jfAT6kK3QsF8qHeqj tvYSSH6p2II+g7+XRCXz5kmL6zk+JXnpMNRlBpx262trbkHetm8J2TJoN/EZZV5P K7LDo4b/pR8/3Xn4/e1HhtSVESw5iUsgR4qZFtmxC3pvQp9unPVD3fNQOaFjAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUYeKQ5zRWxSO7PJiaf/Q3Ua598zUwHwYDVR0j BBgwFoAUIJFHIDgqH1K5UCEsE45eHoG6abcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzMvMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4MUJBNjlCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDkxNDcyMDM4MkExRjUyQjk1MDIxMkMx MzhFNUUxRTgxQkE2OUI3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y1MzJiOWViLTJmYWUtNDhhOC05NzkzLTMzZWVjMDY3Y2UzOS8zLzIwOTE0NzIw MzgyQTFGNTJCOTUwMjEyQzEzOEU1RTFFODFCQTY5QjcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC4Y8hS NBn5hZJtu6w6/2Ir3MqV/KDLkqrVdGu9wKEdIsaP4XIKi9fTBwwD6IzIfBQoDq19 cib9UhTzswHSreJYPKyPodop36Th7AcR8YnwnAAwIasYmYRDDuqKlUwSvk/mcDLb o2M11vix+peS01F8Rr7v4RV9ADy8FNVfyiwVi/VND9q8KYbNMs9eBVwRB9qXo9eq 41qWhjLKDZ3kfdo0dJASTWE1JwSdkZhsR52/GtVcLO7lWQID08qvg8egShchNakz 79vxiWTkcH4JeTmTiGmDwQtO9ej1PI9OLMj+PnUDDOHzAKYb/XJiElspRy5Aktca JhU6FWxuuDtCw0jv -----END CERTIFICATE-----Generated at Fri Apr 17 09:54:32 2026 by rpki-client