$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft File: 20914720382A1F52B950212C138E5E1E81BA69B7.mft (raw, json) Hash identifier: pb3QxUAX+dY9yP6rbsIjB8LeIIz+bgR6E4aORRyemGw= Subject key identifier: 75:E6:2A:68:75:71:48:5B:37:B7:08:9C:DF:DA:A9:A0:F5:D8:26:23 Authority key identifier: 20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 Certificate issuer: /CN=20914720382A1F52B950212C138E5E1E81BA69B7 Certificate serial: 7123B7242E83D0B5E26D872D55D97D043A0164B9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft Manifest number: 72 Signing time: Mon 02 Mar 2026 02:29:15 +0000 Manifest this update: Mon 02 Mar 2026 02:24:15 +0000 Manifest next update: Tue 03 Mar 2026 04:40:15 +0000 Files and hashes: 1: 326131343a373538363a363130323a3a2f34382d3438203d3e20323034323131.roa (hash: qV00rauBPvkNMm+ROCk1kFFtfkMd60Wl/gebvBC2C58=) 2: 140CF895225100CF571959173341D92070FF6E7C.cer (hash: +gzaj8eEKWdYwLDpey4WTnj+Qv54R/A4poIj/Ug/o3g=) 3: 326131343a373538363a363130303a3a2f34382d3438203d3e20323034323131.roa (hash: hfCW4qJm06QDdE+1PQmTBkAa6OyHhAnzRXdcN0xPhW4=) 4: 4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.cer (hash: znj2KhD7dc90RL/SNmhicRPp3l/LZp/snY3wx3mPdJM=) 5: 326131343a373538363a363130353a3a2f34382d3438203d3e20323034323131.roa (hash: dJUl+RAxxY+nIO2HtMh4e2KW3S6TxZr3e2E6ku/vRA8=) 6: 326131343a373538363a363130363a3a2f34382d3438203d3e20323034323131.roa (hash: 8Vi1BDc187e4orwxGy0/rqG4GuMIpMb05XZjAeVSKdg=) 7: 326131343a373538363a363130333a3a2f34382d3438203d3e20323034323131.roa (hash: EI2JmFR4s32Lz8tNongWwvU2DoYm1aiqo+qr8ZW+vPo=) 8: 326131343a373538363a363130313a3a2f34382d3438203d3e20323034323131.roa (hash: DvKmhwWtZsD6TNvQ0eoVfIFrblMkYKUJ35ZR+X3ClBk=) 9: 20914720382A1F52B950212C138E5E1E81BA69B7.crl (hash: fNm3JoXZEZ3b9hYKrjLOlEX8PVqnjdqqDEMrZ331jqs=) 10: 326131343a373538363a363130343a3a2f34382d3438203d3e20323034323131.roa (hash: Mx3SvpD488YSM7QhBcQhFXDhTEiCBu3kBzOrFFQvDHI=) 11: 326131343a373538363a363130373a3a2f34382d3438203d3e20323034323131.roa (hash: V2Vm92YYMyExADS3i94TFi72XsprSieZvIiYJxwsskY=) 12: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer (hash: pIADUm7hELp/Vqdstf8d4gGEQz21lMe/aoJyEiVS1CI=) 13: 326131343a373538363a363130303a3a2f34302d3430203d3e20323034323131.roa (hash: 19M0+L8lsNIFDtff0HfVclIoXr1C9PUiZKAd5BnzLVk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:23:b7:24:2e:83:d0:b5:e2:6d:87:2d:55:d9:7d:04:3a:01:64:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20914720382A1F52B950212C138E5E1E81BA69B7 Validity Not Before: Mar 2 02:24:15 2026 GMT Not After : Mar 3 04:40:15 2026 GMT Subject: CN=75E62A687571485B37B7089CDFDAA9A0F5D82623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:be:2e:a4:17:b6:3c:43:1e:f7:ec:e3:dd:07: 7c:f2:b3:c7:ab:bd:6c:c6:a0:c9:fc:45:0e:fa:f8: d0:5d:ad:7e:07:6c:3d:fd:ef:54:f1:e1:d8:9d:b4: 19:0b:13:0d:6c:d2:01:a5:df:4d:be:ea:48:7b:a8: 8a:45:cd:83:e8:d9:70:3b:2f:3b:a1:78:31:b6:47: 42:79:65:be:b3:48:f7:2d:d9:b3:75:a5:c4:2d:c2: d1:fd:29:10:bb:e3:23:1f:bc:95:26:6f:01:bf:a8: 3f:2a:6c:f1:9f:b1:b4:0d:6d:49:e7:00:da:64:75: 16:a6:22:4f:09:da:01:97:05:a6:dc:e6:a6:8a:e4: 91:ec:70:75:bc:b7:6e:fe:ca:69:9f:75:86:49:d0: 97:69:96:1e:fc:54:28:ce:43:ec:aa:bf:17:61:29: bc:ea:e0:22:46:88:52:59:59:67:da:a7:e9:ff:33: e0:cd:11:7b:e5:b7:42:86:b4:b7:a5:26:9f:7b:c0: ed:d2:2a:a1:f5:44:e4:4e:56:3c:ea:1b:f3:85:a1: 57:aa:70:a3:9c:11:d6:ef:d4:67:21:1d:70:e3:50: 54:24:57:1f:04:89:9e:fe:b8:5e:ad:90:d5:c3:47: aa:e9:75:c4:b8:6e:4b:aa:d8:89:ae:80:6c:93:f7: 9b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E6:2A:68:75:71:48:5B:37:B7:08:9C:DF:DA:A9:A0:F5:D8:26:23 X509v3 Authority Key Identifier: keyid:20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:9f:36:1c:94:91:dc:a8:7c:fb:64:a2:d4:d6:da:77:fa:a9: ac:f3:53:fb:45:fd:f1:42:3e:1c:68:10:f9:d7:d2:bb:6c:ab: 4b:38:09:68:08:c8:27:59:b3:a8:41:c9:a7:46:ed:2c:23:4a: 34:3e:d6:f9:bf:b5:1b:c9:37:de:e5:83:1b:d9:68:9a:fe:3a: 85:4c:3f:cb:71:07:67:40:d7:7f:0f:16:69:be:c5:7a:3d:c9: 23:13:9b:fa:ce:1a:b6:2e:03:fb:4f:27:35:43:20:66:c3:f7: 92:a5:15:e4:1d:7e:b6:3d:df:38:b2:84:61:ed:64:e3:1e:2d: 77:57:62:70:cc:1d:3c:6b:58:69:df:41:fb:d0:02:9b:66:69: a3:28:99:17:44:19:f8:c0:c9:18:d7:be:6c:96:57:0e:76:8e: f1:be:19:7a:50:c3:52:fb:03:83:86:4f:4b:23:08:d2:89:61: c1:1d:60:dd:54:92:b4:f2:fb:1f:93:af:0a:df:7d:78:d8:96: 78:3d:29:e7:ab:4a:50:f4:b9:36:11:09:c3:a7:ec:62:e0:7d: 3b:64:d9:7a:28:8d:52:7d:f0:d7:c8:8b:54:0d:22:20:13:8a: bd:dc:1d:a4:bc:af:b6:20:ee:83:73:81:b1:d7:89:78:e9:3e: 54:25:54:7d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUcSO3JC6D0LXibYctVdl9BDoBZLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4 MUJBNjlCNzAeFw0yNjAzMDIwMjI0MTVaFw0yNjAzMDMwNDQwMTVaMDMxMTAvBgNV BAMTKDc1RTYyQTY4NzU3MTQ4NUIzN0I3MDg5Q0RGREFBOUEwRjVEODI2MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDivi6kF7Y8Qx737OPdB3zys8er vWzGoMn8RQ76+NBdrX4HbD3971Tx4didtBkLEw1s0gGl302+6kh7qIpFzYPo2XA7 LzuheDG2R0J5Zb6zSPct2bN1pcQtwtH9KRC74yMfvJUmbwG/qD8qbPGfsbQNbUnn ANpkdRamIk8J2gGXBabc5qaK5JHscHW8t27+ymmfdYZJ0Jdplh78VCjOQ+yqvxdh Kbzq4CJGiFJZWWfap+n/M+DNEXvlt0KGtLelJp97wO3SKqH1ROROVjzqG/OFoVeq cKOcEdbv1GchHXDjUFQkVx8EiZ7+uF6tkNXDR6rpdcS4bkuq2ImugGyT95tPAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUdeYqaHVxSFs3twic39qpoPXYJiMwHwYDVR0j BBgwFoAUIJFHIDgqH1K5UCEsE45eHoG6abcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzMvMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4MUJBNjlCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDkxNDcyMDM4MkExRjUyQjk1MDIxMkMx MzhFNUUxRTgxQkE2OUI3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y1MzJiOWViLTJmYWUtNDhhOC05NzkzLTMzZWVjMDY3Y2UzOS8zLzIwOTE0NzIw MzgyQTFGNTJCOTUwMjEyQzEzOEU1RTFFODFCQTY5QjcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCFnzYc lJHcqHz7ZKLU1tp3+qms81P7Rf3xQj4caBD519K7bKtLOAloCMgnWbOoQcmnRu0s I0o0Ptb5v7UbyTfe5YMb2Wia/jqFTD/LcQdnQNd/DxZpvsV6PckjE5v6zhq2LgP7 Tyc1QyBmw/eSpRXkHX62Pd84soRh7WTjHi13V2JwzB08a1hp30H70AKbZmmjKJkX RBn4wMkY175sllcOdo7xvhl6UMNS+wODhk9LIwjSiWHBHWDdVJK08vsfk68K3314 2JZ4PSnnq0pQ9Lk2EQnDp+xi4H07ZNl6KI1SffDXyItUDSIgE4q93B2kvK+2IO6D c4Gx14l46T5UJVR9 -----END CERTIFICATE-----Generated at Mon Mar 2 08:40:26 2026 by rpki-client