$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft File: ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft (raw, json) Hash identifier: qE2DtXDjr2eZfsE9MueWPQw9lmKBHDjejOOzyb5sinA= Subject key identifier: B5:B9:9A:46:2E:A1:B1:1D:15:69:1F:CA:1E:FF:A0:87:3D:45:74:9E Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Certificate serial: 4CD2D3F7DF42E8C210822A48CDE066096AF90018 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft Manifest number: 01B4 Signing time: Wed 23 Sep 2026 23:40:53 +0000 Manifest this update: Wed 23 Sep 2026 23:35:53 +0000 Manifest next update: Fri 25 Sep 2026 01:27:53 +0000 Files and hashes: 1: 34352e3134392e36332e302f32342d3234203d3e20323134343833.roa (hash: mQg7Rad/kKZcSLKWUMcvftwu7Gok/Q3zJLvicbmuesI=) 2: 3139342e35302e312e302f32342d3234203d3e203534323532.roa (hash: ruvdsYTXtE0Ab54FYmgOEkBccmfDScUwXgNFAX7lgcQ=) 3: 34352e3134332e3136322e302f32342d3234203d3e203233343730.roa (hash: OcZ6EMgc6x8+IMfJh9quglLv9DVchqMI90FMfGysZqA=) 4: 34352e3134392e36302e302f32342d3234203d3e2039333034.roa (hash: z9ItEX8PaLlf+9uchVJAZNUpHljuvgQ+N1QS8/y6ykI=) 5: 34352e3134332e3136302e302f32342d3234203d3e203232313638.roa (hash: R01FRlBDr9pZoq05BG3LRHuNkIAJs+FNxUn/NkK9at8=) 6: 34352e3134392e36322e302f32342d3234203d3e20383334.roa (hash: llP8g/0WrRmSn1X308T/5f3EuZAU9g/XCLuH1bMAcIY=) 7: 34352e3134392e3136372e302f32342d3234203d3e20323132363639.roa (hash: G5FQ1l+cRk3n7sDIEiJiOqD91u3IjodfdNcjTCN0Zms=) 8: 3139342e35302e342e302f32342d3234203d3e20343030303339.roa (hash: 1KQ8U/cyI6RlRLUmJsQ7MnZR4YGCCRfjVSVg2/aEhuA=) 9: 3139342e35302e302e302f32342d3234203d3e203438333134.roa (hash: BtX3QzIneVP4peKGNcyeJeMDG5hgOoQ4i/5PEk0YGmY=) 10: ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl (hash: mykN6MsandgXDUK4PyashzhCNV7aMWg/0X+o9iELNxo=) 11: 34352e3134392e36312e302f32342d3234203d3e20313337353137.roa (hash: bPblgjM8vXENfZasylb5ZzMp1DkYcmu6TBL1HJESdOc=) 12: 34352e3134332e3136332e302f32342d3234203d3e203139343337.roa (hash: M8Y5TaWjTiVOLanqncdwCCTpjaAInXMAJmIU/gVIuL8=) 13: 3139342e35302e312e302f32342d3234203d3e203634323637.roa (hash: Y111o5heSVgTuvX1afqOIbWwexv6C9e08p+YRNlvpVI=) 14: 34352e3134392e3136342e302f32342d3234203d3e203235333639.roa (hash: a0LqwFPI6pwa1fZnOKWJVr+UvNzZLlo/pfpnRlcnUlw=) 15: 3139342e3234362e33372e302f32342d3234203d3e20313437323831.roa (hash: Je8vOuvO8vmi0C+HW9/2FSLCLUlPSQcN2eHpx1G3DXw=) 16: 3139342e3234372e34352e302f32342d3234203d3e20313337353137.roa (hash: 7Uz0iGXKq5oSbUI44D0T64XUT0jHl47mRLVxjRhD2eU=) 17: 34352e3134392e3136362e302f32342d3234203d3e20323132333834.roa (hash: oGRqBKIGwkwo89Qzo8J8QE2XhyVF3R37X5VJTJkYTLY=) 18: 34352e3134332e3136312e302f32342d3234203d3e203631333137.roa (hash: 8ZjMd6obm3N7HBniZT8uftJQwQbBGvAMihymyaoAi+E=) 19: 3139342e35302e312e302f32342d3234203d3e20333937363330.roa (hash: TeUJtf1ikY7LLYRPrAz/E+BsfW9QE1+7cNe6Ilv12VI=) 20: 3139342e3234372e34342e302f32342d3234203d3e20313432313436.roa (hash: TqX0P9wlnvbZoWAo8DlV20oJQITx6kCNiVhWbz6v/l4=) 21: 34352e3134392e3136352e302f32342d3234203d3e20323039303433.roa (hash: xof4y/WucaiGMtyPzgbTPsOcPFlb9obn6jFW42zp3IM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 18:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:d2:d3:f7:df:42:e8:c2:10:82:2a:48:cd:e0:66:09:6a:f9:00:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Validity Not Before: Sep 23 23:35:53 2026 GMT Not After : Sep 25 01:27:53 2026 GMT Subject: CN=B5B99A462EA1B11D15691FCA1EFFA0873D45749E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3f:7e:a9:18:df:d9:ad:8f:19:20:bf:91:7a: 01:1d:eb:63:0a:b4:83:69:63:c9:b1:42:ff:b0:5b: 1c:16:13:e7:33:db:99:b7:66:ef:e6:5e:ef:67:cb: 42:7f:39:a6:6c:5a:91:2f:82:eb:1f:05:87:4b:83: b0:b5:6d:0a:28:86:da:38:19:24:46:c6:e2:4d:5d: 5d:b3:fd:50:19:91:af:cb:9d:37:85:ff:de:10:d7: 4c:9f:64:9b:03:33:30:74:da:d7:6f:30:f0:64:fe: 91:2b:83:49:d6:f9:c6:61:dc:16:42:33:3b:09:a3: 45:af:18:7d:60:bc:d3:50:4a:2d:2f:2a:e7:14:19: 9a:0c:fe:70:f2:e0:d7:1b:a1:ca:db:e6:7b:f7:ad: a2:68:76:e8:f1:57:2a:e1:a5:3c:fc:f6:d4:d5:77: 2e:b3:6c:00:40:b3:c2:65:de:c7:fb:33:e8:54:65: 45:b9:88:00:e7:8c:fe:d8:a0:6c:45:32:39:44:b5: 29:bf:65:8d:ee:ec:98:16:dc:1a:5b:f7:43:ab:f4: 86:6f:c4:5b:79:c6:88:08:d0:c7:0e:ad:44:0b:db: 34:83:71:f8:24:c5:24:c5:42:32:c3:ae:cc:82:6c: 03:93:ce:37:7a:62:63:65:f9:87:53:c1:36:c0:dd: a8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B9:9A:46:2E:A1:B1:1D:15:69:1F:CA:1E:FF:A0:87:3D:45:74:9E X509v3 Authority Key Identifier: keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:ae:35:0b:e3:27:c1:07:e0:7f:3e:c8:a6:75:90:28:10:e9: 79:e3:28:f2:d7:ab:2d:04:68:44:78:37:1c:75:30:52:e5:bb: a2:d4:0b:8a:59:3d:fc:98:37:f6:58:74:cc:ab:02:e2:3a:00: 61:e4:04:3c:d2:4c:5e:6b:4f:ec:67:e9:33:51:c5:9a:29:1f: 05:14:61:a6:4d:24:1c:e8:28:49:36:a6:c2:a5:22:7b:a7:91: 83:b5:12:81:bf:75:65:38:04:bc:e1:de:8e:0d:58:eb:57:8d: cf:90:65:85:7a:4a:a2:20:ab:f8:6f:e0:a5:c3:11:27:fb:7a: 5e:04:84:fe:d4:b7:08:e2:c2:57:49:6a:53:c9:15:58:e9:a5: 51:3a:79:d6:7e:36:ac:f4:36:62:f8:e5:4b:99:97:11:ca:4d: 3f:2a:ae:c6:8f:a8:76:4a:bb:dc:cb:54:dd:08:4c:2e:3c:47: fa:45:da:3a:d5:96:a7:2f:3b:3e:30:d5:ad:41:48:02:96:8d: 12:ec:5d:f8:34:b2:f9:53:bb:ee:48:43:c8:3c:7a:20:eb:c2: 6c:1f:c7:25:65:31:6d:59:70:d7:db:72:95:40:20:83:8f:6c: 76:62:c6:c3:fd:76:68:8b:a6:78:fb:fc:ed:91:0c:9d:48:26: 94:95:05:f7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTNLT999C6MIQgipIzeBmCWr5ABgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm ZjZkNjQ1YjAeFw0yNjA5MjMyMzM1NTNaFw0yNjA5MjUwMTI3NTNaMDMxMTAvBgNV BAMTKEI1Qjk5QTQ2MkVBMUIxMUQxNTY5MUZDQTFFRkZBMDg3M0Q0NTc0OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFP36pGN/ZrY8ZIL+RegEd62MK tINpY8mxQv+wWxwWE+cz25m3Zu/mXu9ny0J/OaZsWpEvgusfBYdLg7C1bQoohto4 GSRGxuJNXV2z/VAZka/LnTeF/94Q10yfZJsDMzB02tdvMPBk/pErg0nW+cZh3BZC MzsJo0WvGH1gvNNQSi0vKucUGZoM/nDy4Ncbocrb5nv3raJodujxVyrhpTz89tTV dy6zbABAs8Jl3sf7M+hUZUW5iADnjP7YoGxFMjlEtSm/ZY3u7JgW3Bpb90Or9IZv xFt5xogI0McOrUQL2zSDcfgkxSTFQjLDrsyCbAOTzjd6YmNl+YdTwTbA3aidAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUtbmaRi6hsR0VaR/KHv+ghz1FdJ4wHwYDVR0j BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5 dFpGcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MDMwNzlkZS0z OGE3LTQ1ZjMtYWE4Mi01NDJlYWYzNzM3NjAvMC9FRDhGOUE3QzcxRDk0MDA3MzlC QjhGQzk3MTZFNDM0MkZGNkQ2NDVCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd641C+MnwQfgfz7IpnWQ KBDpeeMo8terLQRoRHg3HHUwUuW7otQLilk9/Jg39lh0zKsC4joAYeQEPNJMXmtP 7GfpM1HFmikfBRRhpk0kHOgoSTamwqUie6eRg7USgb91ZTgEvOHejg1Y61eNz5Bl hXpKoiCr+G/gpcMRJ/t6XgSE/tS3COLCV0lqU8kVWOmlUTp51n42rPQ2YvjlS5mX EcpNPyquxo+odkq73MtU3QhMLjxH+kXaOtWWpy87PjDVrUFIApaNEuxd+DSy+VO7 7khDyDx6IOvCbB/HJWUxbVlw19tylUAgg49sdmLGw/12aIumePv87ZEMnUgmlJUF 9w== -----END CERTIFICATE-----Generated at Thu Sep 24 04:05:58 2026 by rpki-client