$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft File: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft (raw, json) Hash identifier: yzUc+ZcSlOUO7GC0ZLDze8a8sd1nxzRkU4ywgA0ZFpw= Subject key identifier: 91:01:A0:A0:CE:1D:B5:D5:CD:51:8E:3A:7E:36:F1:4C:FC:E3:DA:F5 Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Certificate serial: 12229DB8A18D13200DEF992A61D78787E2720C05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft Manifest number: 0598 Signing time: Fri 12 Jun 2026 17:16:14 +0000 Manifest this update: Fri 12 Jun 2026 17:11:14 +0000 Manifest next update: Sat 13 Jun 2026 19:24:14 +0000 Files and hashes: 1: 37372e38312e3133372e302f32342d3234203d3e20333939363431.roa (hash: xL9s9lGr6Y1GcoWPNRfoiIg5P1LyMl92tRndWKMRxvY=) 2: 3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa (hash: SUmtopgHH8Nww5p/xP0ODKmemVjaFc93EIAThLWzp7U=) 3: 38392e34322e3131302e302f32342d3234203d3e203239383032.roa (hash: Chbmines5hwhR4F+JuY4APAYPbeg1c32lDZMdiR/MqQ=) 4: 39332e3131332e3231322e302f32342d3234203d3e203631333137.roa (hash: CUK9BLYWAoY9RH/0vBT8OlenT5Pgl+QBvak8dy0OD58=) 5: 39332e3131332e3231322e302f32342d3234203d3e203239383032.roa (hash: KOkJXzM4wXOGsvFs/zh/ieHh7T/PcK/t6m2YsCzBo+I=) 6: 37372e38312e3133382e302f32342d3234203d3e203136323736.roa (hash: QSH/lbFqFfB0kjPH8NXF1ssxXFJMA3tQTCmwcMlSfAQ=) 7: 38392e34322e3131312e302f32342d3234203d3e203631333137.roa (hash: zuBRLO+8gED/P8Eo04HfZLlz2ygMpUXoQgp4z4sshfo=) 8: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl (hash: tVSOHVNNG4C+4DDa9sOsVK4r/xDEfcFt/UMJ0ZSkqmM=) 9: 3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa (hash: QWu7fHTZ3PYuiSQam7CYDAJC5NNcXBc6g5huH6iiI3k=) 10: 38392e34322e3131312e302f32342d3234203d3e203239383032.roa (hash: L8E/k5WG1P2zSzdmF8rJ5boiZXvKF22tBofIgUqK42s=) 11: 34362e3130322e3233332e302f32342d3234203d3e203233383635.roa (hash: e+SnYwDfi/1yFie63JthDdkoXVxOgCTXFxhh6sC9If8=) 12: 39332e3131332e32352e302f32342d3234203d3e20323135363539.roa (hash: I0itF5+/8CondhM9QNDfv0y0vQPHYwTgwfaL4yXTNmo=) 13: 3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa (hash: miGCXloG7luQuuhAJwRZ+kv5aIjNiE2JcKseZN1V68A=) 14: 34362e3130322e3233322e302f32342d3234203d3e203231383539.roa (hash: xmss+X7N7YEJYzsofqDqdmVc6hQlkz4fI2F5jzOV+w0=) 15: 38392e34322e3131302e302f32342d3234203d3e203631333137.roa (hash: ddUfkHeCwtKl5WGfj5ycG+M0yfiLFFTumHKpeiCmC6o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 19:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:22:9d:b8:a1:8d:13:20:0d:ef:99:2a:61:d7:87:87:e2:72:0c:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Validity Not Before: Jun 12 17:11:14 2026 GMT Not After : Jun 13 19:24:14 2026 GMT Subject: CN=9101A0A0CE1DB5D5CD518E3A7E36F14CFCE3DAF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b9:1a:44:65:c4:85:3c:9e:53:a2:75:ed:1e: 0b:91:1b:1a:12:ae:3b:7d:a8:f3:b8:a8:e7:77:a6: f8:1f:67:ce:e4:b4:49:d5:77:fe:57:d8:6f:67:60: de:c4:2b:70:c5:7b:6b:c9:de:57:8f:54:f5:42:26: b7:4d:30:f7:81:86:bc:a9:28:42:52:43:f4:7c:b4: f2:47:d0:90:40:30:6c:78:c8:54:3d:8e:66:9f:a6: 66:df:dc:66:d3:dd:90:5a:ea:97:4c:a6:a6:ad:1e: b7:cc:4f:2f:3e:b9:e1:20:3c:09:65:a3:38:7c:09: 17:66:5b:8a:4b:ec:fd:9b:c6:1d:f9:0c:e3:9e:0b: e1:e4:02:b5:2c:1a:ad:94:d4:ac:dc:86:93:da:12: c6:d3:08:c9:9c:0a:a1:42:e9:3b:8f:19:4e:9b:e9: 43:ea:21:5d:4f:6f:88:aa:e2:5d:eb:7a:41:d7:cd: b9:06:34:5c:93:9c:57:55:af:c4:5e:29:19:9b:60: 7e:d2:5d:bd:40:97:82:59:12:16:ec:cb:79:4b:50: dc:1f:95:dc:09:5c:09:fe:ba:08:9a:9f:b0:d1:76: 2f:e8:b9:24:e7:c1:72:6c:24:a9:e2:ec:7b:c6:95: 88:dc:13:8f:40:34:59:4b:3b:85:58:05:cc:05:73: b9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:01:A0:A0:CE:1D:B5:D5:CD:51:8E:3A:7E:36:F1:4C:FC:E3:DA:F5 X509v3 Authority Key Identifier: keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:3a:5b:f0:ed:4e:2d:b5:53:a5:f6:3f:04:b9:f8:44:a6:dc: ce:e9:f8:8b:7a:5c:c0:bd:62:50:d3:c8:2e:7c:ff:92:33:b4: 0b:f3:68:05:ef:0e:57:9a:cd:75:44:13:90:6d:ad:8e:a1:fd: 9a:8c:e6:01:70:15:7b:18:6e:ff:eb:ff:3f:10:8e:26:a4:f5: ca:c8:a7:6c:05:cd:1d:b2:bf:e9:a4:31:b1:e9:38:fd:b1:d1: 0b:de:d3:ef:dc:91:46:81:5b:a4:6e:f4:34:30:92:79:62:3c: 4e:c1:16:00:de:d6:39:72:07:99:ca:f7:d8:08:b1:3f:26:74: 01:41:5e:c5:8e:3f:07:e9:31:09:0e:5d:19:28:5e:47:65:dd: 66:e8:2a:fd:0f:99:96:44:7d:05:bb:87:f0:1d:fc:59:5d:c6: 0d:dd:bf:e2:9e:3c:04:e8:b9:e7:cf:6a:e1:7e:5c:ed:52:bf: da:68:44:96:8c:35:da:36:5a:83:72:b4:21:7e:e6:8b:c5:47: 9e:4b:bf:c2:14:ab:b2:e5:97:e4:17:11:b7:18:f1:64:8b:a2: aa:12:cb:c3:ab:80:95:48:d3:b4:aa:c5:d1:cc:58:65:88:1c: d5:90:4e:56:3e:18:cf:6d:6c:3b:42:25:80:89:96:47:c0:51: 59:a7:17:36 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUEiKduKGNEyAN75kqYdeHh+JyDAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi ZmEyY2NhNDAeFw0yNjA2MTIxNzExMTRaFw0yNjA2MTMxOTI0MTRaMDMxMTAvBgNV BAMTKDkxMDFBMEEwQ0UxREI1RDVDRDUxOEUzQTdFMzZGMTRDRkNFM0RBRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJuRpEZcSFPJ5TonXtHguRGxoS rjt9qPO4qOd3pvgfZ87ktEnVd/5X2G9nYN7EK3DFe2vJ3lePVPVCJrdNMPeBhryp KEJSQ/R8tPJH0JBAMGx4yFQ9jmafpmbf3GbT3ZBa6pdMpqatHrfMTy8+ueEgPAll ozh8CRdmW4pL7P2bxh35DOOeC+HkArUsGq2U1KzchpPaEsbTCMmcCqFC6TuPGU6b 6UPqIV1Pb4iq4l3rekHXzbkGNFyTnFdVr8ReKRmbYH7SXb1Al4JZEhbsy3lLUNwf ldwJXAn+ugian7DRdi/ouSTnwXJsJKni7HvGlYjcE49ANFlLO4VYBcwFc7mvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUkQGgoM4dtdXNUY46fjbxTPzj2vUwHwYDVR0j BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt aXpLUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYTBkZTk3Zi03 ZWU4LTRjZTAtYjA0NS1lZmFjOGMyNDNjNzkvMC9FRDlFREIyQTE1ODcxNzg1RkJB RTM4RTIzQzM4ODIwREJGQTJDQ0E0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjpb8O1OLbVTpfY/BLn4 RKbczun4i3pcwL1iUNPILnz/kjO0C/NoBe8OV5rNdUQTkG2tjqH9mozmAXAVexhu /+v/PxCOJqT1ysinbAXNHbK/6aQxsek4/bHRC97T79yRRoFbpG70NDCSeWI8TsEW AN7WOXIHmcr32AixPyZ0AUFexY4/B+kxCQ5dGSheR2XdZugq/Q+ZlkR9BbuH8B38 WV3GDd2/4p48BOi5589q4X5c7VK/2mhElow12jZag3K0IX7mi8VHnku/whSrsuWX 5BcRtxjxZIuiqhLLw6uAlUjTtKrF0cxYZYgc1ZBOVj4Yz21sO0IlgImWR8BRWacX Ng== -----END CERTIFICATE-----Generated at Sat Jun 13 08:27:12 2026 by rpki-client