$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft File: EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft (raw, json) Hash identifier: VwLaRzqXCMXxRMWfl73E3eB2q9me2NJmLnns23D34Os= Subject key identifier: 9D:A8:1D:90:18:08:2E:FC:5D:77:7A:66:E6:07:36:EE:EE:B6:6F:CE Authority key identifier: EF:B5:DF:07:6C:DF:06:22:94:B1:2C:30:2E:75:D5:7E:FC:D7:F7:CE Certificate issuer: /CN=EFB5DF076CDF062294B12C302E75D57EFCD7F7CE Certificate serial: 22E19133805EF55BE00D4FD4BBB40B33A70FF000 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft Manifest number: 77 Signing time: Mon 21 Sep 2026 20:59:56 +0000 Manifest this update: Mon 21 Sep 2026 20:54:56 +0000 Manifest next update: Tue 22 Sep 2026 22:23:56 +0000 Files and hashes: 1: 326130623a346530373a323930663a3a2f34382d3438203d3e20323139343538.roa (hash: QdWdCYMQ1B0FZjXFRDlUNhMGI8TuC2nx+5W/1E5RsMo=) 2: 326130623a346530373a323931303a3a2f34382d3438203d3e20323139343538.roa (hash: 9GeXEaD9Ha5SPI5oBieu1S85PeA/oPrJ9T28WW3r65g=) 3: 326130623a346530373a323930343a3a2f34372d3438203d3e20323139343538.roa (hash: KRlxFqHowZdaTNViCJhErb//DfzqvDoHewWZPqKtCkA=) 4: EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.crl (hash: ybD945F+en1g3a08jCsZfXHnjNCqKTjqShkDNsnd7Ac=) 5: 326130623a346530373a323930653a3a2f34382d3438203d3e20323132383935.roa (hash: xS6W9vpcgkAQc0HRDNFnqDu1C6jkUC2PmU4eLlkKlbg=) 6: 326130623a346530373a323930303a3a2f34382d3438203d3e20323139343538.roa (hash: mDjQQXF1v1WMqSeOU6+LNJClsgR6yYGDAu/LFfF+GPM=) 7: 326130623a346530373a323930323a3a2f34382d3438203d3e20323139343538.roa (hash: 9BAJ6MLsVJjXed08lJPBguxDXI0HTOPBT+HLg6cwLK4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.crl rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 19:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:e1:91:33:80:5e:f5:5b:e0:0d:4f:d4:bb:b4:0b:33:a7:0f:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFB5DF076CDF062294B12C302E75D57EFCD7F7CE Validity Not Before: Sep 21 20:54:56 2026 GMT Not After : Sep 22 22:23:56 2026 GMT Subject: CN=9DA81D9018082EFC5D777A66E60736EEEEB66FCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:84:20:58:73:74:6d:1d:48:3f:3d:3f:eb:0b: 46:71:5d:10:4b:8b:a8:96:ef:b9:8d:fa:70:72:b5: c5:83:39:e0:83:fb:d4:92:53:cb:11:1f:6d:1b:83: 2a:cc:64:fc:47:53:3a:77:e9:de:ac:ac:64:45:5d: 48:01:23:a0:6f:3a:69:9c:f4:59:9e:5c:e6:d2:47: ed:01:0e:bc:26:05:17:a8:95:f4:b8:d8:07:a8:31: 9d:6a:3f:c3:ec:81:6d:11:b0:a7:ed:1a:91:fe:c2: e1:5a:c6:dd:fb:bc:95:38:15:32:54:6a:a8:46:54: d6:22:4d:54:84:fd:d6:fd:66:42:2f:a5:21:9a:2c: 1e:ab:f5:6a:ff:4f:a9:14:e4:0b:df:e6:30:49:53: f7:6e:a4:58:73:6e:67:2e:38:da:4a:75:ca:8d:c0: d2:88:ef:fa:16:2e:e2:d4:4b:97:96:63:9b:18:cb: 48:a6:5a:b3:61:21:67:27:12:e1:dd:6a:30:00:d1: 3f:32:1a:6d:df:9b:db:79:c1:94:b8:9d:e6:c0:94: 76:45:16:38:18:9a:7e:60:a1:ca:95:ae:cc:0a:4e: e5:0d:61:f5:30:fb:87:c7:43:e1:11:8e:34:53:e4: b8:95:88:65:9a:fd:3f:68:ac:d4:61:f9:0a:17:c2: 4b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A8:1D:90:18:08:2E:FC:5D:77:7A:66:E6:07:36:EE:EE:B6:6F:CE X509v3 Authority Key Identifier: keyid:EF:B5:DF:07:6C:DF:06:22:94:B1:2C:30:2E:75:D5:7E:FC:D7:F7:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:cc:9b:dc:04:17:82:74:18:55:65:f5:76:7c:f2:ed:d9:22: 72:56:f3:94:1f:c8:26:c5:4e:9c:4c:7c:eb:c3:4a:45:7f:20: 51:a3:ea:76:34:03:54:3d:e3:c3:2b:26:aa:f4:56:a3:bc:4f: 03:5a:96:15:fe:cb:96:ed:a4:04:e5:f0:21:ce:be:62:e9:0f: c3:ee:5f:f0:d5:a5:40:15:56:61:a1:f8:b2:81:9f:aa:1c:d7: 84:84:5d:14:4e:5c:fb:81:cd:a9:62:7d:8b:06:72:ff:16:a2: 48:78:5c:2a:02:ac:cb:cf:32:69:79:ff:33:f7:a7:9a:4f:5d: 0b:35:45:f8:c6:55:9c:d7:67:84:cc:0b:e0:5b:5d:b9:cd:e4: 84:90:50:ae:16:0e:e4:c9:c8:05:50:a5:8b:d3:25:a8:36:3c: 6b:27:10:fc:cd:df:2a:0d:cb:1e:01:a8:73:25:b5:29:8c:cf: f4:26:50:88:c4:32:b7:0f:29:63:19:83:fa:d1:9a:5c:c6:04: 7f:90:d2:09:67:0f:97:d0:8d:80:d5:93:d3:b6:e5:ce:c4:46: b5:5b:a8:93:c3:35:77:df:ad:34:41:ed:05:24:63:7b:db:fa: b5:7c:72:86:7b:a9:b9:75:4a:9c:c5:e0:f7:68:27:e3:7e:2e: bf:c4:54:3d -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUIuGRM4Be9VvgDU/Uu7QLM6cP8AAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZCNURGMDc2Q0RGMDYyMjk0QjEyQzMwMkU3NUQ1N0VG Q0Q3RjdDRTAeFw0yNjA5MjEyMDU0NTZaFw0yNjA5MjIyMjIzNTZaMDMxMTAvBgNV BAMTKDlEQTgxRDkwMTgwODJFRkM1RDc3N0E2NkU2MDczNkVFRUVCNjZGQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvhCBYc3RtHUg/PT/rC0ZxXRBL i6iW77mN+nBytcWDOeCD+9SSU8sRH20bgyrMZPxHUzp36d6srGRFXUgBI6BvOmmc 9FmeXObSR+0BDrwmBReolfS42AeoMZ1qP8PsgW0RsKftGpH+wuFaxt37vJU4FTJU aqhGVNYiTVSE/db9ZkIvpSGaLB6r9Wr/T6kU5Avf5jBJU/dupFhzbmcuONpKdcqN wNKI7/oWLuLUS5eWY5sYy0imWrNhIWcnEuHdajAA0T8yGm3fm9t5wZS4nebAlHZF FjgYmn5gocqVrswKTuUNYfUw+4fHQ+ERjjRT5LiViGWa/T9orNRh+QoXwks9AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUnagdkBgILvxdd3pm5gc27u62b84wHwYDVR0j BBgwFoAU77XfB2zfBiKUsSwwLnXVfvzX984wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYxYjQxY2ItYTM3Zi00ZDkzLTg4NTYtNDA5MmFmYjIy YjE3LzEvRUZCNURGMDc2Q0RGMDYyMjk0QjEyQzMwMkU3NUQ1N0VGQ0Q3RjdDRS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRUZCNURGMDc2Q0RGMDYyMjk0QjEyQzMwMkU3NUQ1N0VGQ0Q3 RjdDRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjFiNDFjYi1h MzdmLTRkOTMtODg1Ni00MDkyYWZiMjJiMTcvMS9FRkI1REYwNzZDREYwNjIyOTRC MTJDMzAyRTc1RDU3RUZDRDdGN0NFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMsyb3AQXgnQYVWX1dnzy 7dkiclbzlB/IJsVOnEx868NKRX8gUaPqdjQDVD3jwysmqvRWo7xPA1qWFf7Llu2k BOXwIc6+YukPw+5f8NWlQBVWYaH4soGfqhzXhIRdFE5c+4HNqWJ9iwZy/xaiSHhc KgKsy88yaXn/M/enmk9dCzVF+MZVnNdnhMwL4Ftduc3khJBQrhYO5MnIBVCli9Ml qDY8aycQ/M3fKg3LHgGocyW1KYzP9CZQiMQytw8pYxmD+tGaXMYEf5DSCWcPl9CN gNWT07blzsRGtVuok8M1d9+tNEHtBSRje9v6tXxyhnupuXVKnMXg92gn434uv8RU PQ== -----END CERTIFICATE-----Generated at Tue Sep 22 03:19:00 2026 by rpki-client