$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft File: EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft (raw, json) Hash identifier: XOb2d9c19K5PmFvS5hh74fHyTTVhZvMBNt6nvhTpFf8= Subject key identifier: A8:55:76:D8:57:1B:41:B7:7A:95:5D:BA:DC:4A:53:3A:59:76:8E:C1 Authority key identifier: EF:B5:DF:07:6C:DF:06:22:94:B1:2C:30:2E:75:D5:7E:FC:D7:F7:CE Certificate issuer: /CN=EFB5DF076CDF062294B12C302E75D57EFCD7F7CE Certificate serial: 3D3B28EE36B47E8AAE5D70B07A0CCAF3AB4725D4 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft Manifest number: 7E Signing time: Sun 27 Sep 2026 03:09:59 +0000 Manifest this update: Sun 27 Sep 2026 03:04:59 +0000 Manifest next update: Mon 28 Sep 2026 06:13:59 +0000 Files and hashes: 1: 326130623a346530373a323930323a3a2f34382d3438203d3e20323139343538.roa (hash: 9BAJ6MLsVJjXed08lJPBguxDXI0HTOPBT+HLg6cwLK4=) 2: EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.crl (hash: akBugcEvlyaPfUurM5LTgIxH+GNOBSm7JUgTY8sorrA=) 3: 326130623a346530373a323931303a3a2f34382d3438203d3e20323139343538.roa (hash: 9GeXEaD9Ha5SPI5oBieu1S85PeA/oPrJ9T28WW3r65g=) 4: 326130623a346530373a323930663a3a2f34382d3438203d3e20323139343538.roa (hash: QdWdCYMQ1B0FZjXFRDlUNhMGI8TuC2nx+5W/1E5RsMo=) 5: 326130623a346530373a323930303a3a2f34382d3438203d3e20323139343538.roa (hash: mDjQQXF1v1WMqSeOU6+LNJClsgR6yYGDAu/LFfF+GPM=) 6: 326130623a346530373a323930653a3a2f34382d3438203d3e20323132383935.roa (hash: xS6W9vpcgkAQc0HRDNFnqDu1C6jkUC2PmU4eLlkKlbg=) 7: 326130623a346530373a323930343a3a2f34372d3438203d3e20323139343538.roa (hash: KRlxFqHowZdaTNViCJhErb//DfzqvDoHewWZPqKtCkA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.crl rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Sep 2026 03:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:3b:28:ee:36:b4:7e:8a:ae:5d:70:b0:7a:0c:ca:f3:ab:47:25:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFB5DF076CDF062294B12C302E75D57EFCD7F7CE Validity Not Before: Sep 27 03:04:59 2026 GMT Not After : Sep 28 06:13:59 2026 GMT Subject: CN=A85576D8571B41B77A955DBADC4A533A59768EC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:25:dc:67:48:77:99:b7:4c:43:55:5d:62:97: 0f:32:44:81:2e:d7:14:c6:af:42:47:c2:77:eb:a4: 5f:fb:26:7c:4b:77:f1:a1:30:84:a7:42:b1:d2:f7: de:3a:c9:c6:01:38:3e:ee:c7:66:bf:6c:dd:e2:22: 7e:ce:45:82:1a:19:13:4d:96:50:bc:6f:76:7f:da: d2:f5:30:26:bd:36:1b:b5:b6:48:cb:fe:33:6f:c1: 3b:ed:55:62:18:b9:f6:47:21:27:06:8b:e2:fd:66: 72:8a:4f:4a:5f:58:bf:a9:75:7a:a9:72:1a:92:82: c3:4a:b3:36:09:fa:8e:e9:d8:60:75:2b:40:1b:15: dd:56:a9:be:36:fd:e5:1c:de:f9:28:b8:07:77:9c: a4:3b:86:7b:5a:54:3b:a6:fd:8b:35:70:11:d5:d5: 77:41:c4:89:19:fc:2a:9e:76:53:8c:ca:81:0e:07: f6:5c:11:db:67:5d:f8:28:e4:fb:42:68:77:3c:5a: 2e:f9:c6:cb:cf:29:00:42:15:26:2b:41:98:83:1d: b3:95:07:18:09:86:c8:b2:4a:f5:53:b7:8a:d6:75: 0f:6b:e1:17:7f:d3:e7:4d:80:85:3f:6b:99:2f:bb: 75:46:c0:dc:4d:f3:7a:84:7c:d0:c4:ee:ee:2e:06: fa:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:55:76:D8:57:1B:41:B7:7A:95:5D:BA:DC:4A:53:3A:59:76:8E:C1 X509v3 Authority Key Identifier: keyid:EF:B5:DF:07:6C:DF:06:22:94:B1:2C:30:2E:75:D5:7E:FC:D7:F7:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:12:95:12:7b:32:69:54:ab:32:c8:63:cb:93:3d:7d:9e:f0: e2:04:77:8e:57:32:79:04:23:89:bf:a6:cb:b8:c1:c9:76:07: 5a:a9:51:df:c3:1f:db:a5:95:ef:b6:12:72:49:98:6e:b6:2b: 83:58:5f:4e:d3:4b:ae:92:46:0d:3c:a9:4d:28:25:34:15:e5: f0:f6:32:c6:8a:3d:88:9f:04:09:f5:ee:1c:fb:0e:63:fc:fc: f4:2f:94:27:04:fa:b5:5f:76:e9:fe:11:78:15:98:47:98:57: 07:21:f6:4f:d9:b1:1a:03:5d:9a:d2:df:a1:51:d0:15:60:34: 6b:3d:8e:81:81:c6:16:43:0f:7c:b0:db:46:25:3b:e4:ee:a6: 9e:ed:92:e0:5b:69:d8:14:24:54:b2:05:c9:1e:4d:50:b4:d7: 48:39:d7:12:4f:8f:bb:1e:04:d6:77:fc:af:c3:d3:88:b5:52: 94:d9:fa:07:ca:16:79:5f:51:35:e5:63:f8:cf:ad:70:9e:87: 60:6a:95:0a:31:37:9f:ff:8f:9d:59:6f:8e:9e:45:a9:91:20: be:f1:e0:35:e3:ed:60:5e:a4:dc:03:6a:a9:4f:d7:8e:b2:64: f6:8e:41:c5:ba:0d:60:58:02:2b:85:9b:31:50:cf:e2:a0:a2: 03:44:e8:af -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUPTso7ja0foquXXCwegzK86tHJdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZCNURGMDc2Q0RGMDYyMjk0QjEyQzMwMkU3NUQ1N0VG Q0Q3RjdDRTAeFw0yNjA5MjcwMzA0NTlaFw0yNjA5MjgwNjEzNTlaMDMxMTAvBgNV BAMTKEE4NTU3NkQ4NTcxQjQxQjc3QTk1NURCQURDNEE1MzNBNTk3NjhFQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKJdxnSHeZt0xDVV1ilw8yRIEu 1xTGr0JHwnfrpF/7JnxLd/GhMISnQrHS9946ycYBOD7ux2a/bN3iIn7ORYIaGRNN llC8b3Z/2tL1MCa9Nhu1tkjL/jNvwTvtVWIYufZHIScGi+L9ZnKKT0pfWL+pdXqp chqSgsNKszYJ+o7p2GB1K0AbFd1Wqb42/eUc3vkouAd3nKQ7hntaVDum/Ys1cBHV 1XdBxIkZ/CqedlOMyoEOB/ZcEdtnXfgo5PtCaHc8Wi75xsvPKQBCFSYrQZiDHbOV BxgJhsiySvVTt4rWdQ9r4Rd/0+dNgIU/a5kvu3VGwNxN83qEfNDE7u4uBvpDAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUqFV22FcbQbd6lV263EpTOll2jsEwHwYDVR0j BBgwFoAU77XfB2zfBiKUsSwwLnXVfvzX984wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYxYjQxY2ItYTM3Zi00ZDkzLTg4NTYtNDA5MmFmYjIy YjE3LzEvRUZCNURGMDc2Q0RGMDYyMjk0QjEyQzMwMkU3NUQ1N0VGQ0Q3RjdDRS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRUZCNURGMDc2Q0RGMDYyMjk0QjEyQzMwMkU3NUQ1N0VGQ0Q3 RjdDRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjFiNDFjYi1h MzdmLTRkOTMtODg1Ni00MDkyYWZiMjJiMTcvMS9FRkI1REYwNzZDREYwNjIyOTRC MTJDMzAyRTc1RDU3RUZDRDdGN0NFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKhKVEnsyaVSrMshjy5M9 fZ7w4gR3jlcyeQQjib+my7jByXYHWqlR38Mf26WV77YSckmYbrYrg1hfTtNLrpJG DTypTSglNBXl8PYyxoo9iJ8ECfXuHPsOY/z89C+UJwT6tV926f4ReBWYR5hXByH2 T9mxGgNdmtLfoVHQFWA0az2OgYHGFkMPfLDbRiU75O6mnu2S4Ftp2BQkVLIFyR5N ULTXSDnXEk+Pux4E1nf8r8PTiLVSlNn6B8oWeV9RNeVj+M+tcJ6HYGqVCjE3n/+P nVlvjp5FqZEgvvHgNePtYF6k3ANqqU/XjrJk9o5BxboNYFgCK4WbMVDP4qCiA0To rw== -----END CERTIFICATE-----Generated at Sun Sep 27 21:35:53 2026 by rpki-client