$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft File: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft (raw, json) Hash identifier: 8RipHducOx3x9HVC5O+jadE2QDR1Q+MOxnCXsrqL7j0= Subject key identifier: 01:68:26:16:AE:A5:8A:F9:07:27:2B:39:16:88:C2:99:0D:1B:96:46 Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Certificate serial: 742DEF50EF28AA09B049E1B37DFE5C8EB062B1CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft Manifest number: 0668 Signing time: Tue 10 Nov 2026 07:19:31 +0000 Manifest this update: Tue 10 Nov 2026 07:14:31 +0000 Manifest next update: Wed 11 Nov 2026 10:29:31 +0000 Files and hashes: 1: 38392e34322e3131312e302f32342d3234203d3e203631333137.roa (hash: zuBRLO+8gED/P8Eo04HfZLlz2ygMpUXoQgp4z4sshfo=) 2: 3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa (hash: HBNUOQKudEQDcJp49GkJ9KtZ4GtR0YuEZnBMnkiRWNc=) 3: 39332e3131332e32352e302f32342d3234203d3e20323135363539.roa (hash: I0itF5+/8CondhM9QNDfv0y0vQPHYwTgwfaL4yXTNmo=) 4: 34362e3130322e3233322e302f32342d3234203d3e203231383539.roa (hash: WpG9gX//WKHDX5DGlDbw7tPwHCU7DWx+UmniDEM55WE=) 5: 37372e38312e3133372e302f32342d3234203d3e20333939363431.roa (hash: 12VqqOdLZaAJa3aHa+Cq0IgL9Ra+dgjtL5I1Sa/ga7w=) 6: 37372e38312e3133382e302f32342d3234203d3e203136323736.roa (hash: cSfuwk5t8sYaMQRs6xIWOg8/5JnKDK/SFBVUi2XUWiI=) 7: 38392e34322e3131312e302f32342d3234203d3e203239383032.roa (hash: L8E/k5WG1P2zSzdmF8rJ5boiZXvKF22tBofIgUqK42s=) 8: 38392e34322e3131302e302f32342d3234203d3e20313337343130.roa (hash: t7w2AjhEwLDRTkiiVetjh9gWTBqs8BnpR2as5Kppaoc=) 9: 3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa (hash: VN4e+deu8014Bud4Ylse4hxNH0QvvP4p6XiVLjfDUhw=) 10: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl (hash: cxE+SQG+klcBkvMox5Tq56WtbIyUDpkzK4qGF/hhESc=) 11: 3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa (hash: hrQEkt0NpUNHioADxhgUOeG4b/FoGPyrx13F5DScoSc=) 12: 34362e3130322e3233332e302f32342d3234203d3e203233383635.roa (hash: 6hPXDpxoSp9EuEfmiuPb4M+w0B+aK71BZeoPnB8RMa8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Nov 2026 00:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:2d:ef:50:ef:28:aa:09:b0:49:e1:b3:7d:fe:5c:8e:b0:62:b1:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Validity Not Before: Nov 10 07:14:31 2026 GMT Not After : Nov 11 10:29:31 2026 GMT Subject: CN=01682616AEA58AF907272B391688C2990D1B9646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1b:37:b8:a8:e0:38:9a:0e:d4:63:a8:2c:30: 1d:e6:f6:a5:d0:52:8e:82:0a:df:68:1d:93:80:0f: 2a:bd:9d:9d:ce:46:e4:1b:2c:59:7a:3f:b4:07:c1: 87:92:a8:79:7c:ea:49:a6:26:85:b9:98:3e:56:63: c6:dc:8d:40:83:79:41:ce:30:d5:ea:27:d4:fe:d7: a1:c1:56:5a:c2:43:c8:e7:57:cb:2a:c2:f0:b1:f6: 39:a2:5d:3c:96:ea:01:d9:7d:3f:02:e5:b6:a2:2b: 8a:08:79:01:ac:ee:10:d9:b7:46:ed:71:34:d5:a2: 17:dc:95:a6:87:c8:b5:e5:bc:95:07:5b:ab:69:c9: 14:ae:19:35:48:88:42:da:7a:f7:c6:81:60:cd:5f: 98:48:f7:7f:5d:5b:93:74:f3:eb:a3:8d:77:bf:f1: 49:21:46:64:2b:46:d5:75:9f:4b:de:c1:4f:96:12: 3f:d5:22:32:cf:ff:46:dd:fc:40:6b:bc:87:26:d6: 87:e4:ec:81:cb:0d:cc:2c:7f:5d:f8:58:50:65:f9: 77:44:cb:13:f9:1e:8a:94:a4:79:46:23:de:66:b4: ef:d2:0a:fc:74:8a:39:2d:11:fd:e5:6b:42:04:76: 03:00:74:2f:4a:b3:40:7a:76:e7:27:f2:31:cc:6c: c0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:68:26:16:AE:A5:8A:F9:07:27:2B:39:16:88:C2:99:0D:1B:96:46 X509v3 Authority Key Identifier: keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:bd:fc:48:84:76:80:78:60:6b:e4:57:f8:de:99:73:e9:98: 7a:17:83:91:28:70:fd:a7:89:e4:df:9c:e5:fe:14:cd:a8:5b: ba:1e:02:78:c4:eb:28:44:15:aa:1e:5d:37:5a:00:66:24:58: a6:2c:92:50:e4:e8:19:b8:20:82:a5:ed:c2:90:ff:8b:7f:31: 2a:f3:c4:04:be:94:2e:e7:b0:96:99:9c:bf:4d:cc:6a:0c:a1: 6d:75:b1:78:fd:e2:27:09:7c:73:05:c8:ca:75:6e:6d:88:1a: 48:02:19:30:ba:71:9d:76:48:37:f5:f5:2d:33:09:7a:36:1e: 37:f0:e9:b6:a4:e6:0b:ac:74:16:a1:e0:68:c8:12:2e:9f:ce: 4f:16:bc:f7:3c:19:4b:df:16:6c:c1:ac:10:c8:cd:a5:2f:26: d1:ed:e8:35:51:a1:e1:90:61:db:e4:d1:a8:05:bb:3d:67:84: c4:3f:dd:b0:cd:2b:ee:cf:54:c0:05:e8:aa:ba:de:4c:4a:35: 80:d4:ef:73:bd:65:11:92:24:26:9c:1e:00:79:8c:43:8b:d8: 4e:b2:30:33:0b:24:9d:5d:3c:9e:ee:cf:7f:91:53:20:5b:bb: fb:11:27:f2:9b:c9:49:d7:3f:38:44:83:68:41:79:cd:25:ab: 14:8a:54:c1 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdC3vUO8oqgmwSeGzff5cjrBiscswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi ZmEyY2NhNDAeFw0yNjExMTAwNzE0MzFaFw0yNjExMTExMDI5MzFaMDMxMTAvBgNV BAMTKDAxNjgyNjE2QUVBNThBRjkwNzI3MkIzOTE2ODhDMjk5MEQxQjk2NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqGze4qOA4mg7UY6gsMB3m9qXQ Uo6CCt9oHZOADyq9nZ3ORuQbLFl6P7QHwYeSqHl86kmmJoW5mD5WY8bcjUCDeUHO MNXqJ9T+16HBVlrCQ8jnV8sqwvCx9jmiXTyW6gHZfT8C5baiK4oIeQGs7hDZt0bt cTTVohfclaaHyLXlvJUHW6tpyRSuGTVIiELaevfGgWDNX5hI939dW5N08+ujjXe/ 8UkhRmQrRtV1n0vewU+WEj/VIjLP/0bd/EBrvIcm1ofk7IHLDcwsf134WFBl+XdE yxP5HoqUpHlGI95mtO/SCvx0ijktEf3la0IEdgMAdC9Ks0B6ducn8jHMbMDHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUAWgmFq6livkHJys5FojCmQ0blkYwHwYDVR0j BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt aXpLUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYTBkZTk3Zi03 ZWU4LTRjZTAtYjA0NS1lZmFjOGMyNDNjNzkvMC9FRDlFREIyQTE1ODcxNzg1RkJB RTM4RTIzQzM4ODIwREJGQTJDQ0E0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZb38SIR2gHhga+RX+N6Z c+mYeheDkShw/aeJ5N+c5f4Uzahbuh4CeMTrKEQVqh5dN1oAZiRYpiySUOToGbgg gqXtwpD/i38xKvPEBL6ULuewlpmcv03MagyhbXWxeP3iJwl8cwXIynVubYgaSAIZ MLpxnXZIN/X1LTMJejYeN/DptqTmC6x0FqHgaMgSLp/OTxa89zwZS98WbMGsEMjN pS8m0e3oNVGh4ZBh2+TRqAW7PWeExD/dsM0r7s9UwAXoqrreTEo1gNTvc71lEZIk JpweAHmMQ4vYTrIwMwsknV08nu7Pf5FTIFu7+xEn8pvJSdc/OESDaEF5zSWrFIpU wQ== -----END CERTIFICATE-----Generated at Tue Nov 10 11:06:39 2026 by rpki-client