$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft File: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft (raw, json) Hash identifier: J4izHWHgqNpidlv4O9fanQq7XVk0hODiKAOuT/trnzQ= Subject key identifier: 99:9F:73:EB:5C:57:1A:E8:D1:8B:24:2A:47:6B:37:FD:B9:93:91:D1 Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Certificate serial: 54905314645C62FEDAC61D0EDCBC99E92FAFFA70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft Manifest number: 052D Signing time: Wed 25 Mar 2026 19:16:27 +0000 Manifest this update: Wed 25 Mar 2026 19:11:27 +0000 Manifest next update: Thu 26 Mar 2026 22:14:27 +0000 Files and hashes: 1: 34362e3130322e3233332e302f32342d3234203d3e203233383635.roa (hash: e+SnYwDfi/1yFie63JthDdkoXVxOgCTXFxhh6sC9If8=) 2: 39332e3131332e3231322e302f32342d3234203d3e203631333137.roa (hash: Mffmj9tigk0AvK8qUYEb5eCtUKaC20yQi7QyJq/JmDA=) 3: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl (hash: LWSizcOBherTFwHovJ//TYxU7V/FuE+8y2/o6hD3KX4=) 4: 38392e34322e3131302e302f32342d3234203d3e203239383032.roa (hash: Chbmines5hwhR4F+JuY4APAYPbeg1c32lDZMdiR/MqQ=) 5: 37372e38312e3133372e302f32342d3234203d3e20333939363431.roa (hash: xL9s9lGr6Y1GcoWPNRfoiIg5P1LyMl92tRndWKMRxvY=) 6: 3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa (hash: QWu7fHTZ3PYuiSQam7CYDAJC5NNcXBc6g5huH6iiI3k=) 7: 3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa (hash: miGCXloG7luQuuhAJwRZ+kv5aIjNiE2JcKseZN1V68A=) 8: 38392e34322e3131312e302f32342d3234203d3e203631333137.roa (hash: T+9QQX64dOYanRzHKI9rhWnUyaZt9GgRQXrvhvIBrgs=) 9: 39332e3131332e3231322e302f32342d3234203d3e203239383032.roa (hash: KOkJXzM4wXOGsvFs/zh/ieHh7T/PcK/t6m2YsCzBo+I=) 10: 38392e34322e3131302e302f32342d3234203d3e203631333137.roa (hash: VsyHwXGnPa9jTtnErp0xUSN9uxae8b2L7otiSzP7S2M=) 11: 37372e38312e3133382e302f32342d3234203d3e203136323736.roa (hash: QSH/lbFqFfB0kjPH8NXF1ssxXFJMA3tQTCmwcMlSfAQ=) 12: 39332e3131332e32352e302f32342d3234203d3e20323134323039.roa (hash: JoDR/IGOmrYGEwu1+N5VZtYwQlvGeImnksk34tLzkIU=) 13: 34362e3130322e3233322e302f32342d3234203d3e203231383539.roa (hash: xmss+X7N7YEJYzsofqDqdmVc6hQlkz4fI2F5jzOV+w0=) 14: 38392e34322e3131312e302f32342d3234203d3e203239383032.roa (hash: L8E/k5WG1P2zSzdmF8rJ5boiZXvKF22tBofIgUqK42s=) 15: 3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa (hash: SUmtopgHH8Nww5p/xP0ODKmemVjaFc93EIAThLWzp7U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 22:14:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:90:53:14:64:5c:62:fe:da:c6:1d:0e:dc:bc:99:e9:2f:af:fa:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Validity Not Before: Mar 25 19:11:27 2026 GMT Not After : Mar 26 22:14:27 2026 GMT Subject: CN=999F73EB5C571AE8D18B242A476B37FDB99391D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:89:61:e6:66:5d:0d:d3:03:0b:14:f4:fc:25: 62:3f:8f:59:d9:f6:93:55:58:03:dd:22:f1:10:47: db:98:22:59:32:fb:e0:f7:72:6c:4d:af:c0:a6:fa: 09:06:39:14:b0:86:ad:79:ac:00:63:78:db:b5:6f: 61:11:75:74:bb:43:0f:d8:6b:11:46:44:16:6a:2b: ee:ba:92:fb:8d:95:5f:24:b2:8b:62:3d:4b:9d:45: 94:45:37:4b:1d:ba:95:00:77:7d:17:4c:35:c6:94: 22:35:e2:ba:b8:2f:e9:30:47:e3:bb:0e:d0:c0:62: d2:6e:7d:b4:3e:9c:8a:39:6f:02:34:10:8c:a4:ae: 10:5c:4b:87:35:a8:ea:1b:de:37:b7:e1:ec:8c:d7: 25:35:a6:87:82:aa:b0:9e:7b:72:d3:cc:a7:57:0d: 9f:7e:14:55:47:56:ca:67:ea:b3:fd:63:da:7f:7d: 43:c0:a9:35:b5:76:97:03:98:09:5b:99:74:04:78: 7c:42:63:a5:07:32:dd:7e:69:96:64:1e:cb:6b:8f: 9c:4b:7f:aa:da:f7:5e:2a:c3:94:ec:1e:5d:9a:b2: 8d:1a:8e:75:c5:98:ab:30:66:ac:9e:67:91:79:8c: c1:69:7b:af:c2:0a:56:1f:eb:ef:b0:6f:30:de:4c: 8e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:9F:73:EB:5C:57:1A:E8:D1:8B:24:2A:47:6B:37:FD:B9:93:91:D1 X509v3 Authority Key Identifier: keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:84:c5:d0:8c:80:a3:5a:37:90:a9:a3:47:a1:2d:f3:fa:11: 49:12:22:18:8f:40:93:9b:cb:1a:34:a0:68:72:5d:8d:24:12: 63:d3:5b:ee:f1:54:7d:ee:35:53:80:36:bf:3d:3c:aa:7b:d3: cf:1b:b2:03:72:33:fd:db:1c:e8:36:4c:db:29:f4:9a:2c:01: 7d:a5:fb:c2:11:0b:29:36:9c:94:11:ce:f3:95:45:68:35:3b: ab:65:4f:d7:1a:49:3a:e7:5f:94:76:24:f8:8d:46:b2:71:66: 25:25:eb:c5:83:f8:b9:90:9b:0e:ba:90:3b:4b:57:49:c0:fc: 56:5c:84:bc:99:c4:0d:88:e9:26:0e:1d:76:ac:ab:20:ee:cb: 0e:e6:b8:fd:68:5a:c9:f4:bc:a8:cc:7f:3b:61:64:7c:a2:12: 1d:fe:3a:f7:30:6d:89:3d:2a:c7:80:5e:15:e9:0f:a2:51:de: 19:e6:22:f4:0f:35:ec:53:81:61:28:e5:b8:5c:65:d9:b0:fb: c5:d9:95:38:cb:38:8a:95:9d:43:7a:78:07:a3:5f:31:46:6a: ae:4c:d3:27:ab:62:16:16:2b:85:e7:4c:ad:c9:b0:1c:86:0f: 07:db:58:b9:83:e9:98:34:49:6b:a2:f5:b6:b8:03:21:1c:b6: 42:e0:0c:8f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVJBTFGRcYv7axh0O3LyZ6S+v+nAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi ZmEyY2NhNDAeFw0yNjAzMjUxOTExMjdaFw0yNjAzMjYyMjE0MjdaMDMxMTAvBgNV BAMTKDk5OUY3M0VCNUM1NzFBRThEMThCMjQyQTQ3NkIzN0ZEQjk5MzkxRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyiWHmZl0N0wMLFPT8JWI/j1nZ 9pNVWAPdIvEQR9uYIlky++D3cmxNr8Cm+gkGORSwhq15rABjeNu1b2ERdXS7Qw/Y axFGRBZqK+66kvuNlV8ksotiPUudRZRFN0sdupUAd30XTDXGlCI14rq4L+kwR+O7 DtDAYtJufbQ+nIo5bwI0EIykrhBcS4c1qOob3je34eyM1yU1poeCqrCee3LTzKdX DZ9+FFVHVspn6rP9Y9p/fUPAqTW1dpcDmAlbmXQEeHxCY6UHMt1+aZZkHstrj5xL f6ra914qw5TsHl2aso0ajnXFmKswZqyeZ5F5jMFpe6/CClYf6++wbzDeTI6PAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUmZ9z61xXGujRiyQqR2s3/bmTkdEwHwYDVR0j BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt aXpLUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYTBkZTk3Zi03 ZWU4LTRjZTAtYjA0NS1lZmFjOGMyNDNjNzkvMC9FRDlFREIyQTE1ODcxNzg1RkJB RTM4RTIzQzM4ODIwREJGQTJDQ0E0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANoTF0IyAo1o3kKmjR6Et 8/oRSRIiGI9Ak5vLGjSgaHJdjSQSY9Nb7vFUfe41U4A2vz08qnvTzxuyA3Iz/dsc 6DZM2yn0miwBfaX7whELKTaclBHO85VFaDU7q2VP1xpJOudflHYk+I1GsnFmJSXr xYP4uZCbDrqQO0tXScD8VlyEvJnEDYjpJg4ddqyrIO7LDua4/WhayfS8qMx/O2Fk fKISHf469zBtiT0qx4BeFekPolHeGeYi9A817FOBYSjluFxl2bD7xdmVOMs4ipWd Q3p4B6NfMUZqrkzTJ6tiFhYrhedMrcmwHIYPB9tYuYPpmDRJa6L1trgDIRy2QuAM jw== -----END CERTIFICATE-----Generated at Thu Mar 26 08:46:58 2026 by rpki-client