$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft File: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft (raw, json) Hash identifier: 5brCeUO5y/oOkfgoibkWxNWYOizUoKTwUZ8RB9dxOk4= Subject key identifier: B4:3D:9D:59:5D:59:C3:67:88:43:A5:25:AF:82:AC:5C:AC:B8:98:28 Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Certificate serial: 33AD623ACE67F52FD48F11A825EE3181A0B97D1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft Manifest number: 0623 Signing time: Sun 20 Sep 2026 06:14:16 +0000 Manifest this update: Sun 20 Sep 2026 06:09:16 +0000 Manifest next update: Mon 21 Sep 2026 09:28:16 +0000 Files and hashes: 1: 39332e3131332e32352e302f32342d3234203d3e20323135363539.roa (hash: I0itF5+/8CondhM9QNDfv0y0vQPHYwTgwfaL4yXTNmo=) 2: 39332e3131332e3231322e302f32342d3234203d3e203631333137.roa (hash: CUK9BLYWAoY9RH/0vBT8OlenT5Pgl+QBvak8dy0OD58=) 3: 37372e38312e3133372e302f32342d3234203d3e20333939363431.roa (hash: 12VqqOdLZaAJa3aHa+Cq0IgL9Ra+dgjtL5I1Sa/ga7w=) 4: 38392e34322e3131312e302f32342d3234203d3e203631333137.roa (hash: zuBRLO+8gED/P8Eo04HfZLlz2ygMpUXoQgp4z4sshfo=) 5: 39332e3131332e3231322e302f32342d3234203d3e203239383032.roa (hash: KOkJXzM4wXOGsvFs/zh/ieHh7T/PcK/t6m2YsCzBo+I=) 6: 34362e3130322e3233322e302f32342d3234203d3e203231383539.roa (hash: xmss+X7N7YEJYzsofqDqdmVc6hQlkz4fI2F5jzOV+w0=) 7: 34362e3130322e3233332e302f32342d3234203d3e203233383635.roa (hash: 6hPXDpxoSp9EuEfmiuPb4M+w0B+aK71BZeoPnB8RMa8=) 8: 37372e38312e3133382e302f32342d3234203d3e203136323736.roa (hash: cSfuwk5t8sYaMQRs6xIWOg8/5JnKDK/SFBVUi2XUWiI=) 9: 3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa (hash: miGCXloG7luQuuhAJwRZ+kv5aIjNiE2JcKseZN1V68A=) 10: 38392e34322e3131312e302f32342d3234203d3e203239383032.roa (hash: L8E/k5WG1P2zSzdmF8rJ5boiZXvKF22tBofIgUqK42s=) 11: 3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa (hash: QWu7fHTZ3PYuiSQam7CYDAJC5NNcXBc6g5huH6iiI3k=) 12: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl (hash: P2MCwqlrVVeADCxR2pUe+Jl7n38ZgUPvLDrwcriJchs=) 13: 3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa (hash: SUmtopgHH8Nww5p/xP0ODKmemVjaFc93EIAThLWzp7U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 09:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ad:62:3a:ce:67:f5:2f:d4:8f:11:a8:25:ee:31:81:a0:b9:7d:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Validity Not Before: Sep 20 06:09:16 2026 GMT Not After : Sep 21 09:28:16 2026 GMT Subject: CN=B43D9D595D59C3678843A525AF82AC5CACB89828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c8:08:e3:5b:3b:dd:1e:7f:0a:bd:dd:6e:31: 89:f5:a4:40:4e:cf:ca:dc:57:88:ee:e8:a4:5f:2c: 9d:aa:57:be:6c:cf:eb:2f:27:88:fa:1d:a3:34:05: ef:ef:96:10:7e:29:ac:d4:a5:61:7b:90:5c:af:1a: 0e:cc:3c:8f:4f:dc:27:d1:0f:d3:58:f4:17:10:7e: 6d:0f:e8:b1:43:a5:3a:32:9d:9f:76:77:76:83:d1: ce:c8:35:d1:9b:5b:8a:1d:95:57:4a:56:b7:0d:59: cf:12:dd:db:c3:7d:48:e1:fd:0d:ad:34:ee:4e:62: 5a:81:4a:c0:38:cf:c3:71:86:23:6a:cd:96:9d:c2: 40:9a:ca:d2:dc:fc:96:68:ed:96:1d:95:b2:54:fb: 12:f8:ee:bf:e3:20:5b:d8:bf:c5:5f:10:de:5b:03: 77:4e:dd:ab:0d:4a:fd:15:b7:41:19:05:84:d8:4d: a0:b5:d0:c7:b1:e5:43:e2:3d:85:5a:fe:b2:27:44: 4a:9c:83:9f:f7:80:87:a1:26:6b:c9:f0:c6:f3:71: 4d:a6:67:aa:b0:75:5b:30:dc:26:10:d9:e4:e4:32: dd:5b:fb:31:e1:81:7d:cf:89:c2:f2:cf:6f:8f:54: a9:6e:99:aa:e1:19:fe:ec:64:b5:dc:bb:06:8c:f1: c0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3D:9D:59:5D:59:C3:67:88:43:A5:25:AF:82:AC:5C:AC:B8:98:28 X509v3 Authority Key Identifier: keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:56:a3:86:2f:8c:28:e1:ef:10:94:0f:7f:66:4d:4d:21:cb: 0e:cd:a5:77:9b:9f:d9:47:11:69:19:c3:51:b3:6e:9a:ac:f2: 2a:7f:15:f9:15:e0:05:d8:23:6c:13:22:6c:55:0c:5f:71:7c: 1e:3b:3d:7a:7d:d1:c9:d8:c9:9d:29:6a:6a:e4:73:e5:44:65: c0:6d:07:de:99:ca:dc:b3:ef:5c:8a:d6:22:99:ab:26:ed:77: 1f:4d:fd:7c:5a:4d:63:47:98:cd:8c:50:97:d7:eb:06:57:f0: 5c:9c:9c:51:d3:ec:77:c7:d7:01:e0:0d:87:21:55:93:db:e1: be:18:73:f4:b8:90:eb:e7:ff:29:26:ab:4a:6a:7a:90:6b:33: a6:e4:c4:dd:6b:33:7f:b7:38:80:c9:c8:94:2e:a2:10:35:13: 01:1f:26:ca:a1:53:5f:30:da:9a:1d:6c:9d:ae:bd:79:be:7e: 52:97:d6:4c:43:39:82:b5:fb:fc:44:21:69:d5:03:3d:8b:be: ae:2d:96:fa:6f:63:33:c4:7d:46:09:b4:d1:9a:5b:fa:ee:d2: db:3a:3a:d6:10:e1:40:2b:e1:7b:2e:bd:4f:2e:cf:99:79:13: e9:a1:7d:4d:29:c7:0d:b5:57:88:ee:36:1f:58:f2:bb:5c:1d: 1f:ca:b0:32 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUM61iOs5n9S/UjxGoJe4xgaC5fRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi ZmEyY2NhNDAeFw0yNjA5MjAwNjA5MTZaFw0yNjA5MjEwOTI4MTZaMDMxMTAvBgNV BAMTKEI0M0Q5RDU5NUQ1OUMzNjc4ODQzQTUyNUFGODJBQzVDQUNCODk4MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMyAjjWzvdHn8Kvd1uMYn1pEBO z8rcV4ju6KRfLJ2qV75sz+svJ4j6HaM0Be/vlhB+KazUpWF7kFyvGg7MPI9P3CfR D9NY9BcQfm0P6LFDpToynZ92d3aD0c7INdGbW4odlVdKVrcNWc8S3dvDfUjh/Q2t NO5OYlqBSsA4z8NxhiNqzZadwkCaytLc/JZo7ZYdlbJU+xL47r/jIFvYv8VfEN5b A3dO3asNSv0Vt0EZBYTYTaC10Mex5UPiPYVa/rInREqcg5/3gIehJmvJ8MbzcU2m Z6qwdVsw3CYQ2eTkMt1b+zHhgX3PicLyz2+PVKlumarhGf7sZLXcuwaM8cC/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUtD2dWV1Zw2eIQ6Ulr4KsXKy4mCgwHwYDVR0j BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt aXpLUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYTBkZTk3Zi03 ZWU4LTRjZTAtYjA0NS1lZmFjOGMyNDNjNzkvMC9FRDlFREIyQTE1ODcxNzg1RkJB RTM4RTIzQzM4ODIwREJGQTJDQ0E0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFlajhi+MKOHvEJQPf2ZN TSHLDs2ld5uf2UcRaRnDUbNumqzyKn8V+RXgBdgjbBMibFUMX3F8Hjs9en3RydjJ nSlqauRz5URlwG0H3pnK3LPvXIrWIpmrJu13H039fFpNY0eYzYxQl9frBlfwXJyc UdPsd8fXAeANhyFVk9vhvhhz9LiQ6+f/KSarSmp6kGszpuTE3Wszf7c4gMnIlC6i EDUTAR8myqFTXzDamh1sna69eb5+UpfWTEM5grX7/EQhadUDPYu+ri2W+m9jM8R9 Rgm00Zpb+u7S2zo61hDhQCvhey69Ty7PmXkT6aF9TSnHDbVXiO42H1jyu1wdH8qw Mg== -----END CERTIFICATE-----Generated at Sun Sep 20 23:49:42 2026 by rpki-client