$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft File: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft (raw, json) Hash identifier: nf3/zqtTAs/p2VXbZkeIiba+3zt1kcePDUNEC5iuxtQ= Subject key identifier: 25:7B:D6:FE:F4:D8:45:22:A3:C7:24:6A:B1:9E:19:FB:98:7D:1D:8F Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Certificate serial: 561D352ABCF4017A23A5DC2B294FF1BE5765FA65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft Manifest number: 054B Signing time: Thu 16 Apr 2026 22:59:42 +0000 Manifest this update: Thu 16 Apr 2026 22:54:42 +0000 Manifest next update: Fri 17 Apr 2026 23:34:42 +0000 Files and hashes: 1: 3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa (hash: SUmtopgHH8Nww5p/xP0ODKmemVjaFc93EIAThLWzp7U=) 2: 38392e34322e3131312e302f32342d3234203d3e203239383032.roa (hash: L8E/k5WG1P2zSzdmF8rJ5boiZXvKF22tBofIgUqK42s=) 3: 38392e34322e3131302e302f32342d3234203d3e203631333137.roa (hash: VsyHwXGnPa9jTtnErp0xUSN9uxae8b2L7otiSzP7S2M=) 4: 38392e34322e3131312e302f32342d3234203d3e203631333137.roa (hash: T+9QQX64dOYanRzHKI9rhWnUyaZt9GgRQXrvhvIBrgs=) 5: 39332e3131332e3231322e302f32342d3234203d3e203239383032.roa (hash: KOkJXzM4wXOGsvFs/zh/ieHh7T/PcK/t6m2YsCzBo+I=) 6: 39332e3131332e3231322e302f32342d3234203d3e203631333137.roa (hash: Mffmj9tigk0AvK8qUYEb5eCtUKaC20yQi7QyJq/JmDA=) 7: 34362e3130322e3233332e302f32342d3234203d3e203233383635.roa (hash: e+SnYwDfi/1yFie63JthDdkoXVxOgCTXFxhh6sC9If8=) 8: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl (hash: Vjq6NNBwE5jo/UaD58Tq3slPg1c/GuixyNtsXhG8EHo=) 9: 3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa (hash: QWu7fHTZ3PYuiSQam7CYDAJC5NNcXBc6g5huH6iiI3k=) 10: 37372e38312e3133372e302f32342d3234203d3e20333939363431.roa (hash: xL9s9lGr6Y1GcoWPNRfoiIg5P1LyMl92tRndWKMRxvY=) 11: 34362e3130322e3233322e302f32342d3234203d3e203231383539.roa (hash: xmss+X7N7YEJYzsofqDqdmVc6hQlkz4fI2F5jzOV+w0=) 12: 38392e34322e3131302e302f32342d3234203d3e203239383032.roa (hash: Chbmines5hwhR4F+JuY4APAYPbeg1c32lDZMdiR/MqQ=) 13: 3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa (hash: miGCXloG7luQuuhAJwRZ+kv5aIjNiE2JcKseZN1V68A=) 14: 39332e3131332e32352e302f32342d3234203d3e20323134323039.roa (hash: JoDR/IGOmrYGEwu1+N5VZtYwQlvGeImnksk34tLzkIU=) 15: 37372e38312e3133382e302f32342d3234203d3e203136323736.roa (hash: QSH/lbFqFfB0kjPH8NXF1ssxXFJMA3tQTCmwcMlSfAQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:1d:35:2a:bc:f4:01:7a:23:a5:dc:2b:29:4f:f1:be:57:65:fa:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Validity Not Before: Apr 16 22:54:42 2026 GMT Not After : Apr 17 23:34:42 2026 GMT Subject: CN=257BD6FEF4D84522A3C7246AB19E19FB987D1D8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1c:71:2c:18:25:59:0c:60:85:93:23:8e:f9: 5f:c9:5b:bd:a8:06:18:c8:f1:70:4d:6f:5f:18:38: c2:4c:d8:4b:a4:76:87:ea:46:c4:e1:fa:6c:94:d8: 98:cc:30:6a:80:d1:09:69:6a:c4:8a:f8:ec:43:2a: 85:5b:49:45:6e:fd:a7:28:82:9f:d2:da:58:db:51: 7a:0a:a1:d3:14:f7:5f:9c:3d:90:b5:e6:4a:fb:8b: ce:27:c3:78:c4:84:f9:e5:fe:94:fc:58:c4:ec:d1: 50:2a:52:7a:e4:61:f5:7b:e2:46:0b:f5:55:fb:24: 65:9a:e4:3c:29:f1:bc:cb:4a:5a:b1:5b:0c:bf:f6: 10:76:0f:b1:9f:f1:3b:b6:07:ab:0d:86:b5:c4:c8: 57:f8:4e:77:0c:cf:99:84:54:09:d1:05:4f:82:0f: 20:c0:b8:40:1b:69:cd:e0:35:2b:73:1f:65:5c:3c: cd:fb:be:f7:44:fd:16:24:e6:9d:1d:ca:b2:2d:c1: 7b:26:c3:76:61:0e:7e:f1:76:19:cf:fd:eb:47:e8: 46:d7:c5:5e:1b:e1:27:a6:05:ba:48:ea:aa:25:56: 5f:1d:30:35:af:97:16:a1:d6:72:b7:ec:fb:9e:b9: fc:94:61:d5:90:ff:73:56:b2:6f:1a:1f:91:a2:be: 15:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:7B:D6:FE:F4:D8:45:22:A3:C7:24:6A:B1:9E:19:FB:98:7D:1D:8F X509v3 Authority Key Identifier: keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:4b:b1:45:6c:b0:cd:cd:bd:81:c7:a1:3e:be:9a:04:8d:ee: e5:33:db:38:28:e0:28:fd:75:af:49:3d:88:fe:a4:96:ec:4d: 49:ef:db:53:7d:0d:74:6d:8f:8a:b9:a6:dc:ad:11:85:52:9a: 89:10:10:c4:47:83:55:83:a8:d8:43:83:57:a6:24:fd:d5:0e: 7a:a8:08:58:da:e7:f9:2a:42:18:11:03:39:0c:1a:61:bd:db: af:7c:de:0d:d2:bd:e6:29:14:9d:d3:dd:80:de:c1:99:c6:c6: 6d:d9:ed:50:a3:88:0c:e2:e4:92:57:80:4b:18:72:3a:d2:bc: c5:83:4f:d2:4a:2e:b5:5f:a0:3a:6e:ad:cb:0c:98:5d:bd:ae: 1f:32:15:e4:e2:ba:4c:52:ff:5f:01:78:2e:f1:f7:31:f1:79: 41:ae:07:05:03:57:ac:ac:2a:6e:25:ae:29:81:07:7e:a7:94: bf:15:c0:ea:3e:a7:30:c8:a7:d2:f8:76:9c:7e:c2:2b:37:c3: a9:46:e6:73:59:f0:b4:f6:c0:d6:e2:32:50:e3:a4:77:e6:56: 82:a4:8a:bc:43:d0:60:7e:2c:85:95:77:95:88:2b:79:44:53: 2e:14:d2:b1:ae:de:67:bb:05:4f:29:f8:17:8b:ed:41:9d:dc: 3d:19:50:ee -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVh01Krz0AXojpdwrKU/xvldl+mUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi ZmEyY2NhNDAeFw0yNjA0MTYyMjU0NDJaFw0yNjA0MTcyMzM0NDJaMDMxMTAvBgNV BAMTKDI1N0JENkZFRjREODQ1MjJBM0M3MjQ2QUIxOUUxOUZCOTg3RDFEOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsHHEsGCVZDGCFkyOO+V/JW72o BhjI8XBNb18YOMJM2EukdofqRsTh+myU2JjMMGqA0QlpasSK+OxDKoVbSUVu/aco gp/S2ljbUXoKodMU91+cPZC15kr7i84nw3jEhPnl/pT8WMTs0VAqUnrkYfV74kYL 9VX7JGWa5Dwp8bzLSlqxWwy/9hB2D7Gf8Tu2B6sNhrXEyFf4TncMz5mEVAnRBU+C DyDAuEAbac3gNStzH2VcPM37vvdE/RYk5p0dyrItwXsmw3ZhDn7xdhnP/etH6EbX xV4b4SemBbpI6qolVl8dMDWvlxah1nK37PueufyUYdWQ/3NWsm8aH5GivhW/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUJXvW/vTYRSKjxyRqsZ4Z+5h9HY8wHwYDVR0j BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt aXpLUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYTBkZTk3Zi03 ZWU4LTRjZTAtYjA0NS1lZmFjOGMyNDNjNzkvMC9FRDlFREIyQTE1ODcxNzg1RkJB RTM4RTIzQzM4ODIwREJGQTJDQ0E0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXEuxRWywzc29gcehPr6a BI3u5TPbOCjgKP11r0k9iP6kluxNSe/bU30NdG2Pirmm3K0RhVKaiRAQxEeDVYOo 2EODV6Yk/dUOeqgIWNrn+SpCGBEDOQwaYb3br3zeDdK95ikUndPdgN7BmcbGbdnt UKOIDOLkkleASxhyOtK8xYNP0koutV+gOm6tywyYXb2uHzIV5OK6TFL/XwF4LvH3 MfF5Qa4HBQNXrKwqbiWuKYEHfqeUvxXA6j6nMMin0vh2nH7CKzfDqUbmc1nwtPbA 1uIyUOOkd+ZWgqSKvEPQYH4shZV3lYgreURTLhTSsa7eZ7sFTyn4F4vtQZ3cPRlQ 7g== -----END CERTIFICATE-----Generated at Fri Apr 17 06:20:28 2026 by rpki-client