$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft File: EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft (raw, json) Hash identifier: B6PG20f2kmAVGMF4c0rykJkY3MhmNN77pNo/YcTNd5E= Subject key identifier: 30:D5:D2:BF:2C:A8:C3:AE:DF:92:BE:54:9C:30:4E:54:2B:46:D5:3C Authority key identifier: EF:B5:DF:07:6C:DF:06:22:94:B1:2C:30:2E:75:D5:7E:FC:D7:F7:CE Certificate issuer: /CN=EFB5DF076CDF062294B12C302E75D57EFCD7F7CE Certificate serial: 67825EA4425C2B6C12B7E19242AF9153FADA268B Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft Manifest number: 25 Signing time: Thu 23 Jul 2026 16:43:12 +0000 Manifest this update: Thu 23 Jul 2026 16:38:12 +0000 Manifest next update: Fri 24 Jul 2026 17:24:12 +0000 Files and hashes: 1: 326130623a346530373a323930303a3a2f34382d3438203d3e20323139343538.roa (hash: mDjQQXF1v1WMqSeOU6+LNJClsgR6yYGDAu/LFfF+GPM=) 2: 326130623a346530373a323930663a3a2f34382d3438203d3e20323139343538.roa (hash: QdWdCYMQ1B0FZjXFRDlUNhMGI8TuC2nx+5W/1E5RsMo=) 3: 326130623a346530373a323930343a3a2f34372d3438203d3e20323139343538.roa (hash: KRlxFqHowZdaTNViCJhErb//DfzqvDoHewWZPqKtCkA=) 4: EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.crl (hash: aRgM3EDiwriwoXh+L0RAyr1H4T/mxqcZSS++nbtEImo=) 5: 326130623a346530373a323931303a3a2f34382d3438203d3e20323139343538.roa (hash: 9GeXEaD9Ha5SPI5oBieu1S85PeA/oPrJ9T28WW3r65g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.crl rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 09:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:82:5e:a4:42:5c:2b:6c:12:b7:e1:92:42:af:91:53:fa:da:26:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFB5DF076CDF062294B12C302E75D57EFCD7F7CE Validity Not Before: Jul 23 16:38:12 2026 GMT Not After : Jul 24 17:24:12 2026 GMT Subject: CN=30D5D2BF2CA8C3AEDF92BE549C304E542B46D53C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:69:f4:0f:7c:9c:21:8a:37:0d:4b:8c:92:ce: cd:ef:7f:af:5f:03:6a:0d:f6:07:63:85:d2:93:d4: 21:57:94:04:0f:0f:12:d7:72:ec:77:16:24:20:11: 2d:91:c3:62:51:75:b7:1e:cd:c0:b6:54:27:77:5d: da:f0:64:b1:e4:eb:50:4a:1e:bd:9a:e3:22:ee:3d: 5a:07:2c:dc:3e:de:3e:83:ed:a4:db:bc:b6:b2:97: ef:91:04:9f:b9:67:5a:38:a2:e0:cb:4a:3b:c3:c5: df:fa:e3:c4:3e:7e:b7:86:88:63:f9:44:1a:47:2b: b7:40:c9:ad:6e:42:ad:88:da:34:bb:4a:7d:2b:da: 0e:eb:71:31:64:ac:dc:6c:03:4e:c9:75:40:47:99: f2:33:4f:5c:1f:0e:8e:98:9c:e2:8a:ac:b4:33:d7: 2c:ee:cc:87:92:ad:d9:8b:ce:dc:c7:0e:1d:12:4a: 69:99:d2:45:df:88:c1:23:39:4f:9d:e5:9e:de:cb: 2b:98:de:52:26:74:65:8f:5a:53:f1:7d:79:56:9d: bd:4d:7e:dd:2f:7c:2e:ea:9f:07:7c:cc:44:f8:62: 25:04:a0:75:6e:7f:d2:6d:24:8b:73:84:3e:43:9d: 88:cd:a8:0c:14:3e:c4:76:e8:2d:0f:5c:3d:3c:08: fc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D5:D2:BF:2C:A8:C3:AE:DF:92:BE:54:9C:30:4E:54:2B:46:D5:3C X509v3 Authority Key Identifier: keyid:EF:B5:DF:07:6C:DF:06:22:94:B1:2C:30:2E:75:D5:7E:FC:D7:F7:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:3b:e2:55:d4:d3:b5:0b:a8:34:03:f5:12:d7:2d:c8:68:a2: 0b:56:80:86:cd:d0:62:7d:da:8d:78:a5:70:d1:34:58:fb:33: 6c:ce:07:e3:fb:32:cc:30:e4:ab:40:9f:7e:7e:c8:d3:f4:2b: 1d:4c:f7:07:ce:fa:d1:96:36:ad:16:e9:3e:ea:32:9c:6d:cb: 0c:67:a4:5d:07:a7:a5:b7:4e:d5:4d:10:fd:89:bc:96:35:51: ab:a9:17:d0:32:61:7a:fd:fd:35:8b:3c:96:27:87:80:74:16: c6:1b:fe:66:e1:a3:e3:52:15:87:1d:c2:52:de:3d:16:c0:a3: 68:6f:6b:9f:75:e1:c4:d7:b1:b8:04:15:df:fc:a3:d2:7c:78: 63:53:1b:8d:bd:2e:cf:40:e6:01:29:8d:e1:55:50:5c:53:4f: 1d:f8:32:62:12:7f:7e:4c:a4:0b:85:2d:6b:cc:46:c2:61:19: 5c:75:74:7d:1a:a9:76:cd:85:ca:b7:f2:ba:b3:04:31:5e:13: 13:9c:b6:6a:13:48:11:58:5d:f6:ed:0a:13:60:d9:92:1f:c0: 11:08:e4:b5:a1:df:9e:eb:c5:ea:9c:a7:57:42:c3:f2:3e:7d: 95:29:e0:35:a2:d9:33:d7:a5:3c:e4:33:c6:7a:aa:86:c6:80: 07:65:30:6c -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUZ4JepEJcK2wSt+GSQq+RU/raJoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZCNURGMDc2Q0RGMDYyMjk0QjEyQzMwMkU3NUQ1N0VG Q0Q3RjdDRTAeFw0yNjA3MjMxNjM4MTJaFw0yNjA3MjQxNzI0MTJaMDMxMTAvBgNV BAMTKDMwRDVEMkJGMkNBOEMzQUVERjkyQkU1NDlDMzA0RTU0MkI0NkQ1M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5afQPfJwhijcNS4ySzs3vf69f A2oN9gdjhdKT1CFXlAQPDxLXcux3FiQgES2Rw2JRdbcezcC2VCd3XdrwZLHk61BK Hr2a4yLuPVoHLNw+3j6D7aTbvLayl++RBJ+5Z1o4ouDLSjvDxd/648Q+freGiGP5 RBpHK7dAya1uQq2I2jS7Sn0r2g7rcTFkrNxsA07JdUBHmfIzT1wfDo6YnOKKrLQz 1yzuzIeSrdmLztzHDh0SSmmZ0kXfiMEjOU+d5Z7eyyuY3lImdGWPWlPxfXlWnb1N ft0vfC7qnwd8zET4YiUEoHVuf9JtJItzhD5DnYjNqAwUPsR26C0PXD08CPzZAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUMNXSvyyow67fkr5UnDBOVCtG1TwwHwYDVR0j BBgwFoAU77XfB2zfBiKUsSwwLnXVfvzX984wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYxYjQxY2ItYTM3Zi00ZDkzLTg4NTYtNDA5MmFmYjIy YjE3LzEvRUZCNURGMDc2Q0RGMDYyMjk0QjEyQzMwMkU3NUQ1N0VGQ0Q3RjdDRS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRUZCNURGMDc2Q0RGMDYyMjk0QjEyQzMwMkU3NUQ1N0VGQ0Q3 RjdDRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjFiNDFjYi1h MzdmLTRkOTMtODg1Ni00MDkyYWZiMjJiMTcvMS9FRkI1REYwNzZDREYwNjIyOTRC MTJDMzAyRTc1RDU3RUZDRDdGN0NFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaTviVdTTtQuoNAP1Etct yGiiC1aAhs3QYn3ajXilcNE0WPszbM4H4/syzDDkq0Cffn7I0/QrHUz3B8760ZY2 rRbpPuoynG3LDGekXQenpbdO1U0Q/Ym8ljVRq6kX0DJhev39NYs8lieHgHQWxhv+ ZuGj41IVhx3CUt49FsCjaG9rn3XhxNexuAQV3/yj0nx4Y1Mbjb0uz0DmASmN4VVQ XFNPHfgyYhJ/fkykC4Uta8xGwmEZXHV0fRqpds2FyrfyurMEMV4TE5y2ahNIEVhd 9u0KE2DZkh/AEQjktaHfnuvF6pynV0LD8j59lSngNaLZM9elPOQzxnqqhsaAB2Uw bA== -----END CERTIFICATE-----Generated at Thu Jul 23 21:06:48 2026 by rpki-client