$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft File: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft (raw, json) Hash identifier: 8sRQaBnjozueQ55Dq1eOFCif8gQxgs3xhK0bw5W2uZY= Subject key identifier: 9C:04:86:55:B5:99:20:34:B6:46:C3:84:08:43:C8:82:2F:08:95:41 Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Certificate serial: 430184A65A59FCF4C2C25ECCE8856D5AD0897BB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft Manifest number: 050D Signing time: Sun 01 Mar 2026 13:11:43 +0000 Manifest this update: Sun 01 Mar 2026 13:06:43 +0000 Manifest next update: Mon 02 Mar 2026 17:01:43 +0000 Files and hashes: 1: 37372e38312e3133382e302f32342d3234203d3e203136323736.roa (hash: QSH/lbFqFfB0kjPH8NXF1ssxXFJMA3tQTCmwcMlSfAQ=) 2: 34362e3130322e3233332e302f32342d3234203d3e203233383635.roa (hash: e+SnYwDfi/1yFie63JthDdkoXVxOgCTXFxhh6sC9If8=) 3: 3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa (hash: miGCXloG7luQuuhAJwRZ+kv5aIjNiE2JcKseZN1V68A=) 4: 39332e3131332e32352e302f32342d3234203d3e20323134323039.roa (hash: JoDR/IGOmrYGEwu1+N5VZtYwQlvGeImnksk34tLzkIU=) 5: 38392e34322e3131302e302f32342d3234203d3e203239383032.roa (hash: Chbmines5hwhR4F+JuY4APAYPbeg1c32lDZMdiR/MqQ=) 6: 3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa (hash: QWu7fHTZ3PYuiSQam7CYDAJC5NNcXBc6g5huH6iiI3k=) 7: 39332e3131332e3231322e302f32342d3234203d3e203631333137.roa (hash: Mffmj9tigk0AvK8qUYEb5eCtUKaC20yQi7QyJq/JmDA=) 8: 38392e34322e3131312e302f32342d3234203d3e203631333137.roa (hash: T+9QQX64dOYanRzHKI9rhWnUyaZt9GgRQXrvhvIBrgs=) 9: 34362e3130322e3233322e302f32342d3234203d3e203231383539.roa (hash: xmss+X7N7YEJYzsofqDqdmVc6hQlkz4fI2F5jzOV+w0=) 10: 38392e34322e3131312e302f32342d3234203d3e203239383032.roa (hash: L8E/k5WG1P2zSzdmF8rJ5boiZXvKF22tBofIgUqK42s=) 11: 3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa (hash: SUmtopgHH8Nww5p/xP0ODKmemVjaFc93EIAThLWzp7U=) 12: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl (hash: V+8SnoBgGnFHag+4F4Ns5W3vLX3Ur+atuoNnp49mSqE=) 13: 38392e34322e3131302e302f32342d3234203d3e203631333137.roa (hash: VsyHwXGnPa9jTtnErp0xUSN9uxae8b2L7otiSzP7S2M=) 14: 39332e3131332e3231322e302f32342d3234203d3e203239383032.roa (hash: KOkJXzM4wXOGsvFs/zh/ieHh7T/PcK/t6m2YsCzBo+I=) 15: 37372e38312e3133372e302f32342d3234203d3e20333939363431.roa (hash: xL9s9lGr6Y1GcoWPNRfoiIg5P1LyMl92tRndWKMRxvY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:01:84:a6:5a:59:fc:f4:c2:c2:5e:cc:e8:85:6d:5a:d0:89:7b:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Validity Not Before: Mar 1 13:06:43 2026 GMT Not After : Mar 2 17:01:43 2026 GMT Subject: CN=9C048655B5992034B646C3840843C8822F089541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f2:ab:75:5b:25:02:1d:57:90:2a:17:d0:96: 5f:19:23:28:12:1b:f6:95:c4:f0:e3:73:29:0d:ae: 9b:4c:8c:c0:c5:90:42:72:81:01:e1:29:61:8e:19: e1:11:1a:aa:03:3e:0f:b1:0b:8b:99:6f:e1:66:09: 34:01:34:4b:a6:a8:b2:c8:cc:d1:eb:06:2f:3a:42: b4:b7:55:03:93:17:f6:ab:0f:a1:ae:f4:c2:4d:7e: d8:46:07:be:cc:87:d8:0b:6c:0f:d4:42:42:1b:6b: f3:2c:ec:5b:e5:55:92:a0:2a:7e:18:94:bf:d5:c5: 1c:0e:2f:44:88:c4:86:be:e5:a7:76:19:45:7b:21: 3f:64:a4:72:ca:02:07:ad:96:e9:d6:1c:c9:2d:ab: 3a:37:cb:39:2a:f7:9d:c5:1c:64:6b:44:df:cb:fa: 9e:06:cc:4f:0a:5f:06:d0:b9:8d:ed:ca:90:ac:f7: b6:9e:97:88:f6:74:df:19:9d:d4:f3:45:f2:4f:44: 24:a1:25:2c:06:95:41:96:f2:27:4d:89:89:ad:a0: a8:af:b9:25:57:24:4d:ae:f7:f8:ef:2f:1b:ee:6c: 3c:ae:7a:f5:ff:29:eb:5f:7d:a1:cb:d8:4a:44:71: 17:9b:6d:af:1f:87:e9:7b:e3:03:a0:43:51:52:77: 6a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:04:86:55:B5:99:20:34:B6:46:C3:84:08:43:C8:82:2F:08:95:41 X509v3 Authority Key Identifier: keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:f3:b0:5d:2c:09:0a:b4:2e:e5:ba:69:03:e6:80:0d:51:1c: 7c:8d:8f:5e:07:ae:99:59:44:4b:7f:af:f1:ca:ab:08:57:dd: 88:9e:44:10:e9:96:d2:60:fc:d3:0a:3d:5d:e3:88:fe:04:45: d6:1c:1c:84:f2:53:71:42:51:47:f5:a3:f7:f6:61:22:99:22: e8:99:9a:a4:3d:d3:76:e7:2d:28:d6:92:86:c8:02:5f:68:a9: 8d:a3:73:07:12:a1:a2:24:01:90:76:6d:f3:0e:cc:8d:e0:db: ed:f7:3b:b7:51:83:74:00:de:95:c1:11:4b:ce:1f:6f:09:5a: ed:37:cc:94:1f:89:49:e0:6a:ac:d7:1f:78:60:d3:28:51:1e: d8:c8:a9:43:b2:9a:b3:29:3d:37:44:f6:fa:eb:ff:ab:9f:1d: 0b:07:56:c8:0a:51:20:b2:02:e9:bc:ce:ec:85:2a:a8:85:e2: c7:2b:74:cf:c2:ad:85:bc:a9:b1:aa:e2:86:45:03:31:78:41: 75:c6:33:36:d0:bc:61:d2:28:ab:6c:db:6d:60:b3:2c:22:0f: 12:a0:ae:ce:2d:35:7b:36:6c:0e:f0:21:a5:e3:22:08:68:a6: e3:e8:5f:05:d2:df:66:54:37:65:8d:80:42:f8:96:8a:78:ff: ee:0a:20:39 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQwGEplpZ/PTCwl7M6IVtWtCJe7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi ZmEyY2NhNDAeFw0yNjAzMDExMzA2NDNaFw0yNjAzMDIxNzAxNDNaMDMxMTAvBgNV BAMTKDlDMDQ4NjU1QjU5OTIwMzRCNjQ2QzM4NDA4NDNDODgyMkYwODk1NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD8qt1WyUCHVeQKhfQll8ZIygS G/aVxPDjcykNrptMjMDFkEJygQHhKWGOGeERGqoDPg+xC4uZb+FmCTQBNEumqLLI zNHrBi86QrS3VQOTF/arD6Gu9MJNfthGB77Mh9gLbA/UQkIba/Ms7FvlVZKgKn4Y lL/VxRwOL0SIxIa+5ad2GUV7IT9kpHLKAgetlunWHMktqzo3yzkq953FHGRrRN/L +p4GzE8KXwbQuY3typCs97ael4j2dN8ZndTzRfJPRCShJSwGlUGW8idNiYmtoKiv uSVXJE2u9/jvLxvubDyuevX/KetffaHL2EpEcRebba8fh+l74wOgQ1FSd2ppAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUnASGVbWZIDS2RsOECEPIgi8IlUEwHwYDVR0j BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt aXpLUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYTBkZTk3Zi03 ZWU4LTRjZTAtYjA0NS1lZmFjOGMyNDNjNzkvMC9FRDlFREIyQTE1ODcxNzg1RkJB RTM4RTIzQzM4ODIwREJGQTJDQ0E0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/OwXSwJCrQu5bppA+aA DVEcfI2PXgeumVlES3+v8cqrCFfdiJ5EEOmW0mD80wo9XeOI/gRF1hwchPJTcUJR R/Wj9/ZhIpki6JmapD3TductKNaShsgCX2ipjaNzBxKhoiQBkHZt8w7MjeDb7fc7 t1GDdADelcERS84fbwla7TfMlB+JSeBqrNcfeGDTKFEe2MipQ7Kasyk9N0T2+uv/ q58dCwdWyApRILIC6bzO7IUqqIXixyt0z8KthbypsarihkUDMXhBdcYzNtC8YdIo q2zbbWCzLCIPEqCuzi01ezZsDvAhpeMiCGim4+hfBdLfZlQ3ZY2AQviWinj/7gog OQ== -----END CERTIFICATE-----Generated at Mon Mar 2 00:06:05 2026 by rpki-client