$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft File: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft (raw, json) Hash identifier: fVMrfKjqI/YHqNOfagkGDRZL5QpBUTuYGXjdPo1Y/jI= Subject key identifier: 8C:48:14:70:14:06:6A:1C:4A:0C:51:D7:4E:F9:E3:81:45:41:A0:3B Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Certificate serial: 59015E8739B3AED4C54D2D5FFA7617D0C6457825 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft Manifest number: 05D7 Signing time: Tue 28 Jul 2026 03:37:02 +0000 Manifest this update: Tue 28 Jul 2026 03:32:02 +0000 Manifest next update: Wed 29 Jul 2026 03:47:02 +0000 Files and hashes: 1: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl (hash: nxsft0w19CSMSpXY38LLopIPPqMTioOI4fF/XRIzJf4=) 2: 34362e3130322e3233332e302f32342d3234203d3e203233383635.roa (hash: e+SnYwDfi/1yFie63JthDdkoXVxOgCTXFxhh6sC9If8=) 3: 38392e34322e3131312e302f32342d3234203d3e203239383032.roa (hash: L8E/k5WG1P2zSzdmF8rJ5boiZXvKF22tBofIgUqK42s=) 4: 3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa (hash: miGCXloG7luQuuhAJwRZ+kv5aIjNiE2JcKseZN1V68A=) 5: 37372e38312e3133372e302f32342d3234203d3e20333939363431.roa (hash: xL9s9lGr6Y1GcoWPNRfoiIg5P1LyMl92tRndWKMRxvY=) 6: 38392e34322e3131302e302f32342d3234203d3e203430363736.roa (hash: Zg2PZ6Yq/39MmczP1UsIKru9yNOBAAic0pHNwnEwagI=) 7: 38392e34322e3131312e302f32342d3234203d3e203631333137.roa (hash: zuBRLO+8gED/P8Eo04HfZLlz2ygMpUXoQgp4z4sshfo=) 8: 3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa (hash: QWu7fHTZ3PYuiSQam7CYDAJC5NNcXBc6g5huH6iiI3k=) 9: 3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa (hash: SUmtopgHH8Nww5p/xP0ODKmemVjaFc93EIAThLWzp7U=) 10: 34362e3130322e3233322e302f32342d3234203d3e203231383539.roa (hash: xmss+X7N7YEJYzsofqDqdmVc6hQlkz4fI2F5jzOV+w0=) 11: 39332e3131332e32352e302f32342d3234203d3e20323135363539.roa (hash: I0itF5+/8CondhM9QNDfv0y0vQPHYwTgwfaL4yXTNmo=) 12: 39332e3131332e3231322e302f32342d3234203d3e203239383032.roa (hash: KOkJXzM4wXOGsvFs/zh/ieHh7T/PcK/t6m2YsCzBo+I=) 13: 37372e38312e3133382e302f32342d3234203d3e203136323736.roa (hash: QSH/lbFqFfB0kjPH8NXF1ssxXFJMA3tQTCmwcMlSfAQ=) 14: 39332e3131332e3231322e302f32342d3234203d3e203631333137.roa (hash: CUK9BLYWAoY9RH/0vBT8OlenT5Pgl+QBvak8dy0OD58=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 03:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:01:5e:87:39:b3:ae:d4:c5:4d:2d:5f:fa:76:17:d0:c6:45:78:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Validity Not Before: Jul 28 03:32:02 2026 GMT Not After : Jul 29 03:47:02 2026 GMT Subject: CN=8C48147014066A1C4A0C51D74EF9E3814541A03B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fd:46:07:78:9a:b8:df:bd:ff:7d:43:07:63: a1:73:1c:d8:e8:a1:82:53:14:a0:b5:99:61:6d:09: 58:16:9f:66:02:8e:27:48:6f:b8:0a:1f:16:4a:e9: da:52:d9:bd:c2:f3:0a:6f:d8:3a:fe:73:5d:12:5f: ff:5b:e4:04:3b:2d:4a:56:45:b2:80:28:96:a0:0e: 4a:6f:f9:03:89:af:24:54:b3:1e:9d:52:79:97:26: 52:8f:7f:2c:e0:e3:d5:31:e0:4d:a3:56:f3:3d:eb: 11:b2:f1:79:39:95:79:58:84:72:c7:60:7d:09:54: 89:e0:0c:d7:08:1b:9a:cf:29:3f:ba:2c:ed:d5:42: 65:12:14:9f:14:b7:24:33:bb:a5:ba:f6:b2:94:a5: 88:98:62:e0:9b:9c:8d:5c:a0:c8:4d:b1:83:ad:a4: 77:4f:0e:8c:0a:da:99:c8:c0:e5:fc:a8:3b:9b:4c: da:65:3d:83:a5:92:d3:df:76:dd:28:5d:b6:0d:f8: 7d:56:94:4a:0b:e6:40:6b:e5:15:26:02:53:f8:ea: 1a:a7:ba:56:e5:46:91:f0:31:96:d3:a7:09:85:ad: 5c:8d:fc:a0:f6:44:61:3f:aa:df:26:55:87:f8:82: 2b:21:cd:ec:d5:dd:b1:37:00:b2:21:fa:70:56:06: 63:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:48:14:70:14:06:6A:1C:4A:0C:51:D7:4E:F9:E3:81:45:41:A0:3B X509v3 Authority Key Identifier: keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:ed:81:38:cc:e7:8a:80:f7:95:a4:f9:dc:e6:62:72:53:f7: 15:e8:c1:bc:5b:e7:38:f9:f3:d6:dc:bb:7f:58:db:56:ca:12: 8b:86:5c:ac:e2:dd:d4:48:0c:c5:56:a4:ba:f6:fd:28:4d:78: 67:92:29:20:35:8d:5e:9b:90:55:fb:09:70:fe:7b:4f:92:5f: 33:3c:97:f9:eb:22:df:12:e1:65:03:1b:00:0e:41:55:8e:40: 55:2a:7e:12:46:c3:3a:04:fa:cc:b3:42:65:1b:0c:18:77:a7: 7f:cb:de:a0:5d:80:31:50:c7:91:bb:15:71:36:47:e9:72:50: c9:4e:aa:ef:4d:86:73:f2:61:1a:ec:11:c8:7e:2c:3f:ff:83: 38:9d:97:d3:03:d0:52:ac:2f:ca:e2:be:14:9e:e8:64:d7:c2: e8:e7:02:8f:b9:fe:65:ea:22:c4:4e:ea:06:74:f4:2d:45:32: 21:2e:8b:bd:87:ce:f2:5b:87:1a:63:50:24:e9:52:b8:fc:df: 96:1a:8a:c8:30:ea:26:d4:24:4a:98:d0:58:e3:c1:c6:db:72: b6:3b:99:f8:e5:37:d4:8e:df:c5:68:98:df:5d:e8:ed:df:11: 36:64:41:a7:f4:43:51:16:dd:c4:31:30:ad:52:8f:d5:03:ec: 10:a6:12:92 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWQFehzmzrtTFTS1f+nYX0MZFeCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi ZmEyY2NhNDAeFw0yNjA3MjgwMzMyMDJaFw0yNjA3MjkwMzQ3MDJaMDMxMTAvBgNV BAMTKDhDNDgxNDcwMTQwNjZBMUM0QTBDNTFENzRFRjlFMzgxNDU0MUEwM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl/UYHeJq4373/fUMHY6FzHNjo oYJTFKC1mWFtCVgWn2YCjidIb7gKHxZK6dpS2b3C8wpv2Dr+c10SX/9b5AQ7LUpW RbKAKJagDkpv+QOJryRUsx6dUnmXJlKPfyzg49Ux4E2jVvM96xGy8Xk5lXlYhHLH YH0JVIngDNcIG5rPKT+6LO3VQmUSFJ8UtyQzu6W69rKUpYiYYuCbnI1coMhNsYOt pHdPDowK2pnIwOX8qDubTNplPYOlktPfdt0oXbYN+H1WlEoL5kBr5RUmAlP46hqn ulblRpHwMZbTpwmFrVyN/KD2RGE/qt8mVYf4gishzezV3bE3ALIh+nBWBmPVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUjEgUcBQGahxKDFHXTvnjgUVBoDswHwYDVR0j BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt aXpLUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYTBkZTk3Zi03 ZWU4LTRjZTAtYjA0NS1lZmFjOGMyNDNjNzkvMC9FRDlFREIyQTE1ODcxNzg1RkJB RTM4RTIzQzM4ODIwREJGQTJDQ0E0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFu2BOMznioD3laT53OZi clP3FejBvFvnOPnz1ty7f1jbVsoSi4ZcrOLd1EgMxVakuvb9KE14Z5IpIDWNXpuQ VfsJcP57T5JfMzyX+esi3xLhZQMbAA5BVY5AVSp+EkbDOgT6zLNCZRsMGHenf8ve oF2AMVDHkbsVcTZH6XJQyU6q702Gc/JhGuwRyH4sP/+DOJ2X0wPQUqwvyuK+FJ7o ZNfC6OcCj7n+ZeoixE7qBnT0LUUyIS6LvYfO8luHGmNQJOlSuPzflhqKyDDqJtQk SpjQWOPBxttytjuZ+OU31I7fxWiY313o7d8RNmRBp/RDURbdxDEwrVKP1QPsEKYS kg== -----END CERTIFICATE-----Generated at Tue Jul 28 17:08:22 2026 by rpki-client