$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft File: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft (raw, json) Hash identifier: CqCRHaWHDr1Sqn5XvPULoqRM6BWS5vKnV1wSmMyUXhs= Subject key identifier: C7:08:AB:73:6F:AC:BD:EB:8C:BF:5F:DF:40:FE:09:40:86:83:DB:63 Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Certificate serial: 384392E051F69EE34054C530B4B06F833E719480 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft Manifest number: 0457 Signing time: Sun 19 Oct 2025 11:26:37 +0000 Manifest this update: Sun 19 Oct 2025 11:21:37 +0000 Manifest next update: Mon 20 Oct 2025 12:32:37 +0000 Files and hashes: 1: 39332e3131332e3231322e302f32342d3234203d3e203631333137.roa (hash: Mffmj9tigk0AvK8qUYEb5eCtUKaC20yQi7QyJq/JmDA=) 2: 39332e3131332e32352e302f32342d3234203d3e20323134323039.roa (hash: JoDR/IGOmrYGEwu1+N5VZtYwQlvGeImnksk34tLzkIU=) 3: 34362e3130322e3233322e302f32342d3234203d3e203231383539.roa (hash: yDRyc1h8O+mXAEgAFoITsNpFI2VU0vygznR0PJDNh0M=) 4: 3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa (hash: nmhaoLhqUBAnDccEuteaqmwjmYCIqjMWJmqWnwMVbc8=) 5: 38392e34322e3131302e302f32342d3234203d3e203631333137.roa (hash: VsyHwXGnPa9jTtnErp0xUSN9uxae8b2L7otiSzP7S2M=) 6: 37372e38312e3133372e302f32342d3234203d3e20333939363431.roa (hash: xL9s9lGr6Y1GcoWPNRfoiIg5P1LyMl92tRndWKMRxvY=) 7: 3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa (hash: OZBNVOvtp3V7O1L8kF6JcTp/niAHFDMwWI3RV/AoyZY=) 8: 3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa (hash: g8GfxZyUsq5sAHB2Ct+7Z9GS7IIVHVNG2gaO8plmjSA=) 9: 34362e3130322e3233332e302f32342d3234203d3e203233383635.roa (hash: e+SnYwDfi/1yFie63JthDdkoXVxOgCTXFxhh6sC9If8=) 10: 37372e38312e3133382e302f32342d3234203d3e203136323736.roa (hash: QSH/lbFqFfB0kjPH8NXF1ssxXFJMA3tQTCmwcMlSfAQ=) 11: 38392e34322e3131312e302f32342d3234203d3e203631333137.roa (hash: T+9QQX64dOYanRzHKI9rhWnUyaZt9GgRQXrvhvIBrgs=) 12: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl (hash: oceBnsS/NoztUb3eb311k3NlFL9XhXjaLsJYpN0qC9k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 12:32:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:43:92:e0:51:f6:9e:e3:40:54:c5:30:b4:b0:6f:83:3e:71:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Validity Not Before: Oct 19 11:21:37 2025 GMT Not After : Oct 20 12:32:37 2025 GMT Subject: CN=C708AB736FACBDEB8CBF5FDF40FE09408683DB63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f9:82:a6:09:45:9d:7f:a4:fa:5a:f8:cc:59: 21:23:25:16:34:8d:2e:64:4b:36:c0:79:ce:29:cf: 85:53:1a:e1:cb:19:d2:53:73:de:c7:34:81:d6:62: 72:2c:75:c2:c2:31:98:89:f3:7a:95:94:7e:0b:fc: a9:f3:a5:51:a6:55:a3:8e:62:a7:7b:31:7b:18:83: e0:fa:70:a0:9f:49:75:01:a8:36:7c:03:b3:3d:b5: ea:cc:72:71:d8:ac:8f:bc:4e:9f:0e:28:49:d1:fc: 6f:f9:21:48:c3:98:b7:ab:20:d9:5f:07:cf:28:ae: 0f:9f:47:67:7c:27:82:44:65:60:9b:5b:37:f9:a8: 33:1b:0e:e1:52:0f:e2:42:e5:01:a0:bd:9e:70:de: cc:10:36:3d:60:48:52:9a:0d:4b:f9:f1:28:f2:59: 05:ed:c3:b9:26:ad:5b:60:a3:61:f7:63:d7:bc:04: 5b:11:60:e6:ed:48:46:ac:30:0f:d8:d8:3b:a5:e1: 79:a4:cb:81:ed:19:8d:a8:58:1d:50:61:f0:57:3c: 40:bb:ba:78:49:8b:49:b7:b6:e3:66:55:7c:16:06: 3d:ea:cc:fd:41:b1:83:5f:71:7c:4a:63:1b:fd:7c: e9:53:9a:d4:59:dc:42:b4:43:3b:e4:5a:36:3c:48: dc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:08:AB:73:6F:AC:BD:EB:8C:BF:5F:DF:40:FE:09:40:86:83:DB:63 X509v3 Authority Key Identifier: keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:26:3b:51:37:00:0f:96:7c:4b:67:b5:ac:ca:cf:3a:65:df: 4c:62:bc:ea:fe:4e:66:61:5f:22:c4:46:2f:1a:02:b9:f9:7c: a3:71:b7:53:46:2d:1b:c5:09:f5:6b:be:07:ec:95:0f:38:25: c1:6d:59:ef:73:b5:a9:6d:c5:32:e6:b4:29:5c:97:5a:7c:31: 78:59:da:f0:86:1b:e5:da:77:37:93:09:69:fc:7b:c7:f3:34: 78:24:38:50:87:28:8a:31:e0:04:7d:1e:f5:0d:de:24:92:6c: 14:7b:e6:84:4c:1f:56:bb:08:fa:dd:50:fb:da:df:3b:90:b1: 07:25:2c:45:35:5f:07:ac:fb:95:4c:b1:1d:69:cf:ae:11:91: fe:30:79:12:39:37:fa:0e:02:9e:40:9d:86:e7:b6:d9:ae:16: 37:24:98:3a:01:31:72:08:58:69:64:36:7a:a4:52:56:75:5f: a2:69:fd:0c:93:4f:54:37:da:e5:40:69:bf:8b:c8:ea:9c:b8: 98:91:67:16:e6:d8:fa:e8:19:b8:54:f8:2e:b4:fc:43:35:93: 89:8e:f9:e4:8c:ac:bd:56:07:bc:16:86:07:c8:1c:a7:ef:44: ce:33:49:b9:22:30:71:59:10:b9:5a:26:ed:2a:6f:d7:1f:1a: 6d:9e:0d:ee -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOEOS4FH2nuNAVMUwtLBvgz5xlIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi ZmEyY2NhNDAeFw0yNTEwMTkxMTIxMzdaFw0yNTEwMjAxMjMyMzdaMDMxMTAvBgNV BAMTKEM3MDhBQjczNkZBQ0JERUI4Q0JGNUZERjQwRkUwOTQwODY4M0RCNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl+YKmCUWdf6T6WvjMWSEjJRY0 jS5kSzbAec4pz4VTGuHLGdJTc97HNIHWYnIsdcLCMZiJ83qVlH4L/KnzpVGmVaOO Yqd7MXsYg+D6cKCfSXUBqDZ8A7M9terMcnHYrI+8Tp8OKEnR/G/5IUjDmLerINlf B88org+fR2d8J4JEZWCbWzf5qDMbDuFSD+JC5QGgvZ5w3swQNj1gSFKaDUv58Sjy WQXtw7kmrVtgo2H3Y9e8BFsRYObtSEasMA/Y2Dul4Xmky4HtGY2oWB1QYfBXPEC7 unhJi0m3tuNmVXwWBj3qzP1BsYNfcXxKYxv9fOlTmtRZ3EK0QzvkWjY8SNynAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUxwirc2+sveuMv1/fQP4JQIaD22MwHwYDVR0j BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt aXpLUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYTBkZTk3Zi03 ZWU4LTRjZTAtYjA0NS1lZmFjOGMyNDNjNzkvMC9FRDlFREIyQTE1ODcxNzg1RkJB RTM4RTIzQzM4ODIwREJGQTJDQ0E0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCY7UTcAD5Z8S2e1rMrP OmXfTGK86v5OZmFfIsRGLxoCufl8o3G3U0YtG8UJ9Wu+B+yVDzglwW1Z73O1qW3F Mua0KVyXWnwxeFna8IYb5dp3N5MJafx7x/M0eCQ4UIcoijHgBH0e9Q3eJJJsFHvm hEwfVrsI+t1Q+9rfO5CxByUsRTVfB6z7lUyxHWnPrhGR/jB5Ejk3+g4CnkCdhue2 2a4WNySYOgExcghYaWQ2eqRSVnVfomn9DJNPVDfa5UBpv4vI6py4mJFnFubY+ugZ uFT4LrT8QzWTiY755IysvVYHvBaGB8gcp+9EzjNJuSIwcVkQuVom7Spv1x8abZ4N 7g== -----END CERTIFICATE-----Generated at Mon Oct 20 02:35:44 2025 by rpki-client