$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft File: ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft (raw, json) Hash identifier: MmJVWMpCzmutnKuS+5WukAIypXjlYCQb8uhvQHGrOhU= Subject key identifier: 13:76:65:C0:C1:27:1E:29:9B:41:BA:D5:48:A3:5D:33:30:2F:74:77 Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Certificate serial: 2D6C7BD03CA6E0C9560E1EC687E1C4F7206BDDEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft Manifest number: D3 Signing time: Thu 16 Apr 2026 15:34:42 +0000 Manifest this update: Thu 16 Apr 2026 15:29:42 +0000 Manifest next update: Fri 17 Apr 2026 17:56:42 +0000 Files and hashes: 1: ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl (hash: cg/VNoDWBRdXgn+mwyvhkIDefTw9XIs4mZcIsKigTY4=) 2: 34352e3134332e3136322e302f32342d3234203d3e203233343730.roa (hash: OcZ6EMgc6x8+IMfJh9quglLv9DVchqMI90FMfGysZqA=) 3: 3139342e3234372e34352e302f32342d3234203d3e20313337353137.roa (hash: 7Uz0iGXKq5oSbUI44D0T64XUT0jHl47mRLVxjRhD2eU=) 4: 34352e3134392e36322e302f32342d3234203d3e20383334.roa (hash: K8ltTDgW9HfANPuVJSFbKlcEJqaQBf+iEfDLJr+tHyE=) 5: 34352e3134392e3136352e302f32342d3234203d3e20323039303433.roa (hash: xof4y/WucaiGMtyPzgbTPsOcPFlb9obn6jFW42zp3IM=) 6: 34352e3134392e36312e302f32342d3234203d3e20313337353137.roa (hash: bPblgjM8vXENfZasylb5ZzMp1DkYcmu6TBL1HJESdOc=) 7: 3139342e35302e342e302f32342d3234203d3e20343030303339.roa (hash: 1KQ8U/cyI6RlRLUmJsQ7MnZR4YGCCRfjVSVg2/aEhuA=) 8: 34352e3134392e3136362e302f32342d3234203d3e20323132333834.roa (hash: oGRqBKIGwkwo89Qzo8J8QE2XhyVF3R37X5VJTJkYTLY=) 9: 3139342e35302e312e302f32342d3234203d3e203634323637.roa (hash: Y111o5heSVgTuvX1afqOIbWwexv6C9e08p+YRNlvpVI=) 10: 3139342e3234372e34342e302f32342d3234203d3e20313432313436.roa (hash: TqX0P9wlnvbZoWAo8DlV20oJQITx6kCNiVhWbz6v/l4=) 11: 34352e3134332e3136312e302f32342d3234203d3e203631333137.roa (hash: 8ZjMd6obm3N7HBniZT8uftJQwQbBGvAMihymyaoAi+E=) 12: 3139342e35302e312e302f32342d3234203d3e203534323532.roa (hash: ruvdsYTXtE0Ab54FYmgOEkBccmfDScUwXgNFAX7lgcQ=) 13: 3139342e3234362e33372e302f32342d3234203d3e20313534303439.roa (hash: qsoqYvzpUXEnewa636Uqf3ZdHju9vYqXC78N1RH7Kt0=) 14: 34352e3134332e3136302e302f32342d3234203d3e203232313638.roa (hash: R01FRlBDr9pZoq05BG3LRHuNkIAJs+FNxUn/NkK9at8=) 15: 34352e3134332e3136332e302f32342d3234203d3e203139343337.roa (hash: M8Y5TaWjTiVOLanqncdwCCTpjaAInXMAJmIU/gVIuL8=) 16: 34352e3134392e3136372e302f32342d3234203d3e20323132363639.roa (hash: G5FQ1l+cRk3n7sDIEiJiOqD91u3IjodfdNcjTCN0Zms=) 17: 3139342e35302e302e302f32342d3234203d3e203438333134.roa (hash: BtX3QzIneVP4peKGNcyeJeMDG5hgOoQ4i/5PEk0YGmY=) 18: 3139342e35302e312e302f32342d3234203d3e20333937363330.roa (hash: TeUJtf1ikY7LLYRPrAz/E+BsfW9QE1+7cNe6Ilv12VI=) 19: 34352e3134392e36302e302f32342d3234203d3e20383334.roa (hash: v5z4mH+8qoFiRalLg5vNyoviHu/g6QQvDiLP4ihiaTg=) 20: 34352e3134392e3136342e302f32342d3234203d3e203235333639.roa (hash: a0LqwFPI6pwa1fZnOKWJVr+UvNzZLlo/pfpnRlcnUlw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 17:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:6c:7b:d0:3c:a6:e0:c9:56:0e:1e:c6:87:e1:c4:f7:20:6b:dd:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Validity Not Before: Apr 16 15:29:42 2026 GMT Not After : Apr 17 17:56:42 2026 GMT Subject: CN=137665C0C1271E299B41BAD548A35D33302F7477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bf:7b:21:94:b6:49:35:21:51:1d:8e:7b:d4: e2:9c:06:3a:a5:a2:f4:3a:91:0e:df:7f:85:22:11: 53:55:13:82:c8:bc:6b:d6:ac:57:d9:79:17:3f:58: dd:6c:8e:2a:16:93:e7:26:22:1f:ed:60:8f:fb:77: 78:d2:5a:0f:a3:d7:59:a4:f2:5f:2c:85:b5:c1:11: 99:f6:92:3e:f1:3d:24:d9:de:9d:c7:8d:b4:80:a1: 25:2e:d6:7a:e2:c1:67:38:c5:52:3e:07:5c:22:99: f3:22:c6:9b:cc:d5:82:98:09:28:bd:67:71:c3:41: 21:c1:7d:74:f6:91:c4:86:64:9f:a9:6a:52:dd:5f: 0f:e8:84:e1:86:ed:75:9c:b8:35:a2:16:37:07:63: 54:d8:54:b4:ee:7d:2d:e7:a4:9b:f8:6a:d7:ab:30: a4:d3:8e:88:98:ae:90:f4:6f:53:9d:78:0c:56:8d: 98:f1:f4:7f:11:b2:09:63:d4:71:1f:19:ba:52:35: bd:6c:7e:d4:df:9d:a9:65:fe:4b:67:f3:cd:1b:bc: 96:32:21:cc:55:78:cb:45:cb:f6:d6:05:3e:26:85: aa:f6:b8:12:f8:b2:97:9d:ea:80:f0:d5:b6:e1:68: 22:4a:f1:b1:36:49:a1:2d:e7:16:0c:6c:33:1e:6b: 69:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:76:65:C0:C1:27:1E:29:9B:41:BA:D5:48:A3:5D:33:30:2F:74:77 X509v3 Authority Key Identifier: keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:10:67:fc:38:1b:7b:79:ee:39:e4:01:ad:24:f3:22:c6:05: de:30:28:6d:71:d3:1b:ce:53:77:a2:47:82:b4:70:cf:ab:4e: d1:60:f7:75:79:97:05:78:c0:cd:d1:4d:4c:b4:a8:53:32:2b: f3:4e:00:98:63:ea:59:25:35:73:ab:94:31:ee:09:75:64:fc: 40:ac:43:36:4d:90:7f:07:4d:38:85:2c:fb:db:3d:61:f6:c1: 82:61:7c:d8:20:95:19:41:3d:8e:58:c4:af:fc:04:66:e8:e2: ac:7c:12:42:b2:26:14:e5:2d:d3:a4:25:56:a9:3c:49:a5:d2: 41:d8:b3:32:95:3a:bb:5f:5c:25:c7:6c:45:82:a3:0e:42:42: eb:e5:a6:cb:b3:bd:9b:cf:64:43:cf:32:55:58:b3:ea:6a:d9: e1:b3:e4:5e:ae:01:3d:05:37:a6:11:3e:61:7d:b0:47:6e:3a: 31:57:cc:1c:89:d9:74:18:15:4d:0e:f8:5f:c7:fb:dc:9a:94: e7:5f:47:3a:f7:0b:a3:d5:b2:b5:38:ab:a2:20:75:4b:45:1c: 5c:98:4d:d8:37:39:c8:8f:ce:47:0b:82:39:ca:e7:af:f3:7c: 93:7a:d3:a6:31:c7:2b:88:a7:8e:a9:e9:4c:09:c8:30:85:12: e1:8a:24:1a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULWx70Dym4MlWDh7Gh+HE9yBr3ewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm ZjZkNjQ1YjAeFw0yNjA0MTYxNTI5NDJaFw0yNjA0MTcxNzU2NDJaMDMxMTAvBgNV BAMTKDEzNzY2NUMwQzEyNzFFMjk5QjQxQkFENTQ4QTM1RDMzMzAyRjc0NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/v3shlLZJNSFRHY571OKcBjql ovQ6kQ7ff4UiEVNVE4LIvGvWrFfZeRc/WN1sjioWk+cmIh/tYI/7d3jSWg+j11mk 8l8shbXBEZn2kj7xPSTZ3p3HjbSAoSUu1nriwWc4xVI+B1wimfMixpvM1YKYCSi9 Z3HDQSHBfXT2kcSGZJ+palLdXw/ohOGG7XWcuDWiFjcHY1TYVLTufS3npJv4ater MKTTjoiYrpD0b1OdeAxWjZjx9H8Rsglj1HEfGbpSNb1sftTfnall/ktn880bvJYy IcxVeMtFy/bWBT4mhar2uBL4sped6oDw1bbhaCJK8bE2SaEt5xYMbDMea2mbAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUE3ZlwMEnHimbQbrVSKNdMzAvdHcwHwYDVR0j BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5 dFpGcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MDMwNzlkZS0z OGE3LTQ1ZjMtYWE4Mi01NDJlYWYzNzM3NjAvMC9FRDhGOUE3QzcxRDk0MDA3MzlC QjhGQzk3MTZFNDM0MkZGNkQ2NDVCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRBn/Dgbe3nuOeQBrSTz IsYF3jAobXHTG85Td6JHgrRwz6tO0WD3dXmXBXjAzdFNTLSoUzIr804AmGPqWSU1 c6uUMe4JdWT8QKxDNk2QfwdNOIUs+9s9YfbBgmF82CCVGUE9jljEr/wEZujirHwS QrImFOUt06QlVqk8SaXSQdizMpU6u19cJcdsRYKjDkJC6+Wmy7O9m89kQ88yVViz 6mrZ4bPkXq4BPQU3phE+YX2wR246MVfMHInZdBgVTQ74X8f73JqU519HOvcLo9Wy tTiroiB1S0UcXJhN2Dc5yI/ORwuCOcrnr/N8k3rTpjHHK4injqnpTAnIMIUS4Yok Gg== -----END CERTIFICATE-----Generated at Fri Apr 17 09:48:15 2026 by rpki-client