$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft File: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft (raw, json) Hash identifier: j2NLXFeoTqjwOHW/w3BQ56wv7YrBFwDwVzsu3OCr+0I= Subject key identifier: E0:99:D8:09:50:9B:10:82:E1:77:3B:B4:82:23:F9:C6:D2:FA:F7:A0 Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Certificate serial: 407E4CCE13D9F35F2F5A51B822CA7D2DF4BD335B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft Manifest number: 0626 Signing time: Tue 22 Sep 2026 11:49:35 +0000 Manifest this update: Tue 22 Sep 2026 11:44:35 +0000 Manifest next update: Wed 23 Sep 2026 14:31:35 +0000 Files and hashes: 1: 34362e3130322e3233322e302f32342d3234203d3e203231383539.roa (hash: WpG9gX//WKHDX5DGlDbw7tPwHCU7DWx+UmniDEM55WE=) 2: 39332e3131332e32352e302f32342d3234203d3e20323135363539.roa (hash: I0itF5+/8CondhM9QNDfv0y0vQPHYwTgwfaL4yXTNmo=) 3: 37372e38312e3133372e302f32342d3234203d3e20333939363431.roa (hash: 12VqqOdLZaAJa3aHa+Cq0IgL9Ra+dgjtL5I1Sa/ga7w=) 4: 37372e38312e3133382e302f32342d3234203d3e203136323736.roa (hash: cSfuwk5t8sYaMQRs6xIWOg8/5JnKDK/SFBVUi2XUWiI=) 5: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl (hash: d85ZwVZEnYifcGa0dL48j/1era8qN11L5FCkCyphKno=) 6: 38392e34322e3131312e302f32342d3234203d3e203631333137.roa (hash: zuBRLO+8gED/P8Eo04HfZLlz2ygMpUXoQgp4z4sshfo=) 7: 34362e3130322e3233332e302f32342d3234203d3e203233383635.roa (hash: 6hPXDpxoSp9EuEfmiuPb4M+w0B+aK71BZeoPnB8RMa8=) 8: 38392e34322e3131312e302f32342d3234203d3e203239383032.roa (hash: L8E/k5WG1P2zSzdmF8rJ5boiZXvKF22tBofIgUqK42s=) 9: 39332e3131332e3231322e302f32342d3234203d3e203631333137.roa (hash: CUK9BLYWAoY9RH/0vBT8OlenT5Pgl+QBvak8dy0OD58=) 10: 3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa (hash: SUmtopgHH8Nww5p/xP0ODKmemVjaFc93EIAThLWzp7U=) 11: 39332e3131332e3231322e302f32342d3234203d3e203239383032.roa (hash: KOkJXzM4wXOGsvFs/zh/ieHh7T/PcK/t6m2YsCzBo+I=) 12: 3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa (hash: QWu7fHTZ3PYuiSQam7CYDAJC5NNcXBc6g5huH6iiI3k=) 13: 3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa (hash: miGCXloG7luQuuhAJwRZ+kv5aIjNiE2JcKseZN1V68A=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 14:31:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:7e:4c:ce:13:d9:f3:5f:2f:5a:51:b8:22:ca:7d:2d:f4:bd:33:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Validity Not Before: Sep 22 11:44:35 2026 GMT Not After : Sep 23 14:31:35 2026 GMT Subject: CN=E099D809509B1082E1773BB48223F9C6D2FAF7A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fc:fe:c8:2c:fa:cb:8c:a9:8a:0a:15:bc:61: 39:2b:2f:c3:45:21:86:a3:ae:c9:20:ce:c1:9d:92: 77:4d:90:fe:90:c4:bb:47:ea:b3:0a:a5:4c:1d:90: 56:c4:c6:ce:de:a9:71:b7:f8:57:cd:0e:e0:c6:65: 5a:85:b6:8f:1f:ee:b3:c6:c8:62:6b:49:cd:36:05: 53:d2:53:c4:a2:f1:82:89:39:75:1b:d2:b8:25:7c: d2:d8:84:1e:de:c8:69:ca:0c:88:dc:b4:ad:c1:02: 1d:31:44:b1:2f:0f:51:2a:10:e3:53:0d:0a:9a:5c: f9:f7:50:04:4c:3d:de:f0:c7:13:ed:2b:b3:81:cd: 02:92:84:2b:1b:87:c3:5b:fa:d5:6d:59:e5:e6:34: 5c:13:e5:10:ff:03:f4:8c:2b:ee:5b:54:3a:2f:6f: 9d:35:d1:52:96:35:7f:f9:2a:55:91:27:f6:85:48: c2:0c:ba:a5:8e:68:86:71:18:c3:41:0e:6a:41:21: f8:bd:fa:ae:3c:df:8f:20:e7:e4:f0:00:5e:f1:90: 44:4a:0c:cc:87:85:d4:dd:7d:eb:43:fc:75:9f:d4: c6:cb:60:e3:f3:cc:84:8e:08:3c:14:c8:6f:b0:e5: 50:3e:7c:02:31:bd:50:47:22:49:aa:bd:a1:6e:8c: ac:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:99:D8:09:50:9B:10:82:E1:77:3B:B4:82:23:F9:C6:D2:FA:F7:A0 X509v3 Authority Key Identifier: keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:19:cd:d5:57:1e:83:72:f5:fc:37:4d:6e:39:69:a3:e9:d1: 75:cc:bc:e3:1d:4d:65:25:41:74:58:76:f4:63:43:8a:c8:1b: 2c:b4:01:57:f4:76:ac:01:39:64:f9:0f:7f:de:80:16:0c:4b: 06:24:e3:24:b9:a5:25:48:8c:2b:a6:fd:f7:72:d9:53:a0:e3: 0a:b4:bc:ab:d2:f8:3a:0b:12:c3:7b:da:c7:3d:aa:21:3c:87: 04:50:de:12:14:ae:46:ec:fe:09:c7:9d:fb:c9:e1:5e:e2:83: 90:19:1c:1c:b1:a3:0e:16:eb:a3:6d:23:c7:61:41:45:36:5b: 08:ab:66:f1:4b:10:f4:40:5f:7d:a7:65:ea:d5:37:87:b2:3d: 57:8f:3f:61:bd:c5:e4:b3:0a:7d:3a:07:d9:c7:e8:6e:3a:bf: 49:70:f3:c5:bf:16:5c:d8:3d:a9:d1:24:03:1f:c4:e1:b6:31: bb:dd:ad:e4:52:3f:fb:fc:01:da:44:d3:9d:89:56:c3:6b:60: 09:d0:ab:d2:b3:af:5d:53:3f:ef:17:fc:1b:a9:02:af:7c:b5: 94:31:f1:bb:4c:30:35:99:be:96:50:03:65:a3:f4:c4:37:75: 3e:7c:51:17:d6:d4:d7:2e:c1:ff:cd:1a:26:44:06:5d:29:25: 68:00:7e:f0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQH5MzhPZ818vWlG4Isp9LfS9M1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi ZmEyY2NhNDAeFw0yNjA5MjIxMTQ0MzVaFw0yNjA5MjMxNDMxMzVaMDMxMTAvBgNV BAMTKEUwOTlEODA5NTA5QjEwODJFMTc3M0JCNDgyMjNGOUM2RDJGQUY3QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3/P7ILPrLjKmKChW8YTkrL8NF IYajrskgzsGdkndNkP6QxLtH6rMKpUwdkFbExs7eqXG3+FfNDuDGZVqFto8f7rPG yGJrSc02BVPSU8Si8YKJOXUb0rglfNLYhB7eyGnKDIjctK3BAh0xRLEvD1EqEONT DQqaXPn3UARMPd7wxxPtK7OBzQKShCsbh8Nb+tVtWeXmNFwT5RD/A/SMK+5bVDov b5010VKWNX/5KlWRJ/aFSMIMuqWOaIZxGMNBDmpBIfi9+q48348g5+TwAF7xkERK DMyHhdTdfetD/HWf1MbLYOPzzISOCDwUyG+w5VA+fAIxvVBHIkmqvaFujKxRAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU4JnYCVCbEILhdzu0giP5xtL696AwHwYDVR0j BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt aXpLUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYTBkZTk3Zi03 ZWU4LTRjZTAtYjA0NS1lZmFjOGMyNDNjNzkvMC9FRDlFREIyQTE1ODcxNzg1RkJB RTM4RTIzQzM4ODIwREJGQTJDQ0E0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBnN1Vceg3L1/DdNbjlp o+nRdcy84x1NZSVBdFh29GNDisgbLLQBV/R2rAE5ZPkPf96AFgxLBiTjJLmlJUiM K6b993LZU6DjCrS8q9L4OgsSw3vaxz2qITyHBFDeEhSuRuz+Cced+8nhXuKDkBkc HLGjDhbro20jx2FBRTZbCKtm8UsQ9EBffadl6tU3h7I9V48/Yb3F5LMKfToH2cfo bjq/SXDzxb8WXNg9qdEkAx/E4bYxu92t5FI/+/wB2kTTnYlWw2tgCdCr0rOvXVM/ 7xf8G6kCr3y1lDHxu0wwNZm+llADZaP0xDd1PnxRF9bU1y7B/80aJkQGXSklaAB+ 8A== -----END CERTIFICATE-----Generated at Wed Sep 23 07:21:56 2026 by rpki-client