$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/2/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.mft File: EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.mft (raw, json) Hash identifier: uAUagt7DaoZfNrc/AbKbhNXIWkQbMzvz+gkMEGCWX4U= Subject key identifier: 02:EC:3E:48:EC:89:6A:EF:3F:A9:13:7D:0E:85:9E:5E:EB:BE:31:13 Authority key identifier: EA:EE:4A:02:E5:45:C0:2C:2C:5A:25:56:E1:E4:46:F1:C9:4E:52:22 Certificate issuer: /CN=EAEE4A02E545C02C2C5A2556E1E446F1C94E5222 Certificate serial: 7A5CA1936D16E7B99AA365E652DBF592C470DFBA Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/2/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.mft Manifest number: 4D Signing time: Wed 23 Sep 2026 17:51:15 +0000 Manifest this update: Wed 23 Sep 2026 17:46:15 +0000 Manifest next update: Thu 24 Sep 2026 20:46:15 +0000 Files and hashes: 1: 326130623a346530373a323030383a3a2f34362d3438203d3e20313939373436.roa (hash: pgFHR+AdUuTkfh6c1zSUA5zTg+CXzBHNukpIAx2l5rM=) 2: 326130623a346530373a323030303a3a2f33372d3438203d3e20323031333938.roa (hash: ONcitOTF4nf9vG71nL0mbyM38SYfrxQqVzfvqNutiX8=) 3: EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.crl (hash: 3KBu70daXbn8f6f910oRqzULXF/6nS1myk+gwzVcYog=) 4: 326130623a346530373a323030343a3a2f34362d3438203d3e20323139333331.roa (hash: WwLkOeRgD2xAhxOEdsCC2ANBObDpMM4BGQxexbsQL6o=) 5: 326130623a346530373a62303a3a2f34362d3438203d3e20323031333938.roa (hash: q4YwK6EWEo+bfT6Kii7A5hXsC7nUph/HDD/nMaXDjdo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/2/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.crl rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/2/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 09:08:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:5c:a1:93:6d:16:e7:b9:9a:a3:65:e6:52:db:f5:92:c4:70:df:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAEE4A02E545C02C2C5A2556E1E446F1C94E5222 Validity Not Before: Sep 23 17:46:15 2026 GMT Not After : Sep 24 20:46:15 2026 GMT Subject: CN=02EC3E48EC896AEF3FA9137D0E859E5EEBBE3113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ec:5c:55:f2:0d:61:74:b1:45:64:a1:20:1d: 10:d6:29:fc:34:fe:c3:d0:67:21:fb:ee:fe:84:0c: 7d:27:cb:55:6f:64:8c:d5:fe:4d:5a:d8:48:41:9d: 2d:98:ca:db:13:24:bf:9e:8c:5b:bf:94:16:3d:50: 14:5d:d3:ac:37:d1:73:dd:26:12:40:4f:df:77:3f: 9e:b5:f9:56:11:22:70:99:52:91:91:71:86:12:f2: 56:12:ee:53:91:81:26:d6:3b:bd:19:aa:ea:b6:00: 8a:87:c0:00:b4:92:d9:6f:b4:5a:cc:66:d4:b1:63: eb:2d:48:83:4d:d4:2a:47:51:cf:21:2f:22:bf:9d: ad:79:75:a2:58:16:05:5d:5d:6a:58:ae:cf:59:d8: 70:e4:3b:17:53:33:fb:c8:fc:27:6c:4a:4d:82:fe: 68:ff:b9:a9:78:72:8b:d1:34:bf:bf:16:fe:8c:a3: 33:d1:65:8e:26:8b:da:81:7b:5d:72:84:29:dd:a2: c1:10:b1:8c:b0:cf:14:b7:f8:c5:f3:bf:89:8f:8d: 53:ab:1a:36:12:2f:84:71:f4:2b:b4:16:4a:15:96: 68:36:ff:a9:68:10:c3:ea:d4:c7:b9:5e:64:9e:1f: 04:36:8d:a2:10:0b:29:bc:11:e7:3c:46:57:71:ce: e5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:EC:3E:48:EC:89:6A:EF:3F:A9:13:7D:0E:85:9E:5E:EB:BE:31:13 X509v3 Authority Key Identifier: keyid:EA:EE:4A:02:E5:45:C0:2C:2C:5A:25:56:E1:E4:46:F1:C9:4E:52:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/2/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/2/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:e7:87:7d:b4:86:78:73:21:c2:41:c9:8e:7b:fe:09:65:fc: c8:de:04:94:d1:db:e8:ac:2f:a3:ee:ba:dd:96:61:f0:00:a8: 14:4b:2e:36:7c:de:bf:25:fd:92:1c:ec:59:2f:28:57:bb:84: c6:32:d6:4a:26:40:cb:f5:ee:c7:f6:25:bf:f7:6d:48:2d:e3: 16:d2:bd:10:d0:2f:3c:af:b8:20:03:b8:1e:d1:10:3e:d9:74: 6d:34:60:1e:37:43:99:fa:83:eb:5b:92:73:7b:77:50:5d:3e: 08:1c:f5:72:94:c6:23:9d:71:1b:79:cf:63:f3:1f:8b:57:37: 61:08:77:ed:54:37:5f:d0:37:83:e4:63:e0:aa:ea:bd:98:88: 39:c0:5c:0d:be:d4:25:20:b5:d4:2e:95:21:fa:a0:8d:d2:09: f5:39:71:c6:34:6d:e6:8c:e1:af:3d:4c:39:b7:f3:22:14:0c: db:47:83:9e:87:ae:97:06:a2:2b:95:4d:6d:b9:be:4d:cb:54: 90:e6:47:c8:d0:82:72:62:3c:3a:33:09:c6:45:62:31:c2:c8: 9d:42:08:56:db:27:30:6b:e5:e6:47:7a:92:6f:44:bd:78:ad: 60:21:c0:29:3a:18:a3:a7:73:37:dd:f9:94:27:67:b3:3e:7b: 93:5b:ca:ab -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUelyhk20W57mao2XmUtv1ksRw37owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFFRTRBMDJFNTQ1QzAyQzJDNUEyNTU2RTFFNDQ2RjFD OTRFNTIyMjAeFw0yNjA5MjMxNzQ2MTVaFw0yNjA5MjQyMDQ2MTVaMDMxMTAvBgNV BAMTKDAyRUMzRTQ4RUM4OTZBRUYzRkE5MTM3RDBFODU5RTVFRUJCRTMxMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr7FxV8g1hdLFFZKEgHRDWKfw0 /sPQZyH77v6EDH0ny1VvZIzV/k1a2EhBnS2YytsTJL+ejFu/lBY9UBRd06w30XPd JhJAT993P561+VYRInCZUpGRcYYS8lYS7lORgSbWO70Zquq2AIqHwAC0ktlvtFrM ZtSxY+stSINN1CpHUc8hLyK/na15daJYFgVdXWpYrs9Z2HDkOxdTM/vI/CdsSk2C /mj/ual4covRNL+/Fv6MozPRZY4mi9qBe11yhCndosEQsYywzxS3+MXzv4mPjVOr GjYSL4Rx9Cu0FkoVlmg2/6loEMPq1Me5XmSeHwQ2jaIQCym8Eec8RldxzuWFAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUAuw+SOyJau8/qRN9DoWeXuu+MRMwHwYDVR0j BBgwFoAU6u5KAuVFwCwsWiVW4eRG8clOUiIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmNmZDlhMmMtODdmMS00OGE5LWI2ZWEtMjhhZDA5N2I3 NWQzLzIvRUFFRTRBMDJFNTQ1QzAyQzJDNUEyNTU2RTFFNDQ2RjFDOTRFNTIyMi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRUFFRTRBMDJFNTQ1QzAyQzJDNUEyNTU2RTFFNDQ2RjFDOTRF NTIyMi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82Y2ZkOWEyYy04 N2YxLTQ4YTktYjZlYS0yOGFkMDk3Yjc1ZDMvMi9FQUVFNEEwMkU1NDVDMDJDMkM1 QTI1NTZFMUU0NDZGMUM5NEU1MjIyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaeeHfbSGeHMhwkHJjnv+ CWX8yN4ElNHb6Kwvo+663ZZh8ACoFEsuNnzevyX9khzsWS8oV7uExjLWSiZAy/Xu x/Ylv/dtSC3jFtK9ENAvPK+4IAO4HtEQPtl0bTRgHjdDmfqD61uSc3t3UF0+CBz1 cpTGI51xG3nPY/Mfi1c3YQh37VQ3X9A3g+Rj4KrqvZiIOcBcDb7UJSC11C6VIfqg jdIJ9TlxxjRt5ozhrz1MObfzIhQM20eDnoeulwaiK5VNbbm+TctUkOZHyNCCcmI8 OjMJxkViMcLInUIIVtsnMGvl5kd6km9EvXitYCHAKToYo6dzN935lCdnsz57k1vK qw== -----END CERTIFICATE-----Generated at Thu Sep 24 01:03:56 2026 by rpki-client