$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft File: ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft (raw, json) Hash identifier: lwebx2mgIQVmpwoNQp3Myr2SouBPjDZCxTcxzpgC6Po= Subject key identifier: 6C:89:CE:73:9C:3B:9F:8D:1D:D6:6B:A6:88:1F:7F:AD:6C:E9:81:BF Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Certificate serial: 2D7365C76FA64A730D05CDEDD336EA5F5D1E9524 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft Manifest number: C8 Signing time: Wed 08 Apr 2026 10:23:17 +0000 Manifest this update: Wed 08 Apr 2026 10:18:17 +0000 Manifest next update: Thu 09 Apr 2026 12:43:17 +0000 Files and hashes: 1: 3139342e35302e312e302f32342d3234203d3e203634323637.roa (hash: Y111o5heSVgTuvX1afqOIbWwexv6C9e08p+YRNlvpVI=) 2: 3139342e35302e342e302f32342d3234203d3e20343030303339.roa (hash: 1KQ8U/cyI6RlRLUmJsQ7MnZR4YGCCRfjVSVg2/aEhuA=) 3: 34352e3134332e3136312e302f32342d3234203d3e203631333137.roa (hash: 8ZjMd6obm3N7HBniZT8uftJQwQbBGvAMihymyaoAi+E=) 4: ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl (hash: CIxiRT85i3rpwH8N7o28FYuimqym8pX1KQ2aO4quEOc=) 5: 34352e3134392e3136372e302f32342d3234203d3e20323132363639.roa (hash: G5FQ1l+cRk3n7sDIEiJiOqD91u3IjodfdNcjTCN0Zms=) 6: 34352e3134392e36302e302f32342d3234203d3e20383334.roa (hash: v5z4mH+8qoFiRalLg5vNyoviHu/g6QQvDiLP4ihiaTg=) 7: 34352e3134392e36322e302f32342d3234203d3e20383334.roa (hash: K8ltTDgW9HfANPuVJSFbKlcEJqaQBf+iEfDLJr+tHyE=) 8: 34352e3134392e3136362e302f32342d3234203d3e20323132333834.roa (hash: oGRqBKIGwkwo89Qzo8J8QE2XhyVF3R37X5VJTJkYTLY=) 9: 34352e3134392e3136342e302f32342d3234203d3e203235333639.roa (hash: a0LqwFPI6pwa1fZnOKWJVr+UvNzZLlo/pfpnRlcnUlw=) 10: 34352e3134392e3136352e302f32342d3234203d3e20323039303433.roa (hash: xof4y/WucaiGMtyPzgbTPsOcPFlb9obn6jFW42zp3IM=) 11: 3139342e3234372e34352e302f32342d3234203d3e20313337353137.roa (hash: 7Uz0iGXKq5oSbUI44D0T64XUT0jHl47mRLVxjRhD2eU=) 12: 34352e3134332e3136332e302f32342d3234203d3e203139343337.roa (hash: M8Y5TaWjTiVOLanqncdwCCTpjaAInXMAJmIU/gVIuL8=) 13: 3139342e3234372e34342e302f32342d3234203d3e20313432313436.roa (hash: TqX0P9wlnvbZoWAo8DlV20oJQITx6kCNiVhWbz6v/l4=) 14: 3139342e35302e312e302f32342d3234203d3e20333937363330.roa (hash: TeUJtf1ikY7LLYRPrAz/E+BsfW9QE1+7cNe6Ilv12VI=) 15: 3139342e3234362e33372e302f32342d3234203d3e20313534303439.roa (hash: qsoqYvzpUXEnewa636Uqf3ZdHju9vYqXC78N1RH7Kt0=) 16: 34352e3134392e36312e302f32342d3234203d3e20313337353137.roa (hash: bPblgjM8vXENfZasylb5ZzMp1DkYcmu6TBL1HJESdOc=) 17: 3139342e35302e302e302f32342d3234203d3e203438333134.roa (hash: BtX3QzIneVP4peKGNcyeJeMDG5hgOoQ4i/5PEk0YGmY=) 18: 34352e3134332e3136322e302f32342d3234203d3e203233343730.roa (hash: OcZ6EMgc6x8+IMfJh9quglLv9DVchqMI90FMfGysZqA=) 19: 34352e3134332e3136302e302f32342d3234203d3e203232313638.roa (hash: R01FRlBDr9pZoq05BG3LRHuNkIAJs+FNxUn/NkK9at8=) 20: 3139342e35302e312e302f32342d3234203d3e203534323532.roa (hash: ruvdsYTXtE0Ab54FYmgOEkBccmfDScUwXgNFAX7lgcQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 09 Apr 2026 12:43:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:73:65:c7:6f:a6:4a:73:0d:05:cd:ed:d3:36:ea:5f:5d:1e:95:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Validity Not Before: Apr 8 10:18:17 2026 GMT Not After : Apr 9 12:43:17 2026 GMT Subject: CN=6C89CE739C3B9F8D1DD66BA6881F7FAD6CE981BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:72:2f:35:74:d1:12:3c:9c:72:98:6f:f8:64: 2a:27:47:f8:b5:ef:59:04:39:0b:69:bf:43:1f:c9: 12:6b:c2:0a:e1:91:a3:52:ff:2f:a6:12:53:d4:45: c4:ed:39:05:74:3a:c9:ab:a7:eb:62:65:73:49:40: 0c:e2:a1:aa:e1:f6:c9:ef:3b:b0:e9:47:11:80:69: a8:78:ef:09:dc:ef:2f:29:e3:5d:da:df:35:32:6d: 79:3e:4f:4f:e1:5d:0a:fd:9d:7b:46:43:a4:bb:d5: fe:a8:35:91:f1:bc:9c:72:8a:d6:35:0b:d7:bd:b2: 3a:2c:a2:f1:90:54:33:79:7b:54:4f:be:d6:39:d3: 12:97:53:24:03:b1:0c:5a:92:08:ff:be:09:88:d4: c7:7a:89:2c:23:ed:f5:13:27:f0:a9:a6:85:89:d4: c3:64:cd:ab:c6:1a:25:fa:1e:46:2d:be:ed:22:73: 76:70:2d:c1:28:62:39:9c:84:50:f6:a3:55:71:ae: 0e:00:cb:05:76:37:67:50:1a:f3:92:d9:4f:18:44: cc:23:f4:6d:20:6f:9b:93:05:ec:f7:e1:ef:f5:f7: 9c:fb:16:b2:e6:1f:70:a0:ae:99:be:f3:18:1a:12: dd:64:56:5c:fe:08:b0:1d:05:06:f8:80:c4:8b:97: 6a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:89:CE:73:9C:3B:9F:8D:1D:D6:6B:A6:88:1F:7F:AD:6C:E9:81:BF X509v3 Authority Key Identifier: keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:78:89:f0:43:25:7e:24:db:1f:7f:aa:9c:a6:f4:e1:d7:4c: 65:50:cb:c8:a5:c0:a0:cf:48:d9:9b:b9:2a:3b:12:d5:c4:79: 6c:00:2e:26:ff:2a:0c:c6:26:b4:2e:b1:13:8b:0e:c6:fd:89: b6:fc:58:86:ba:a0:ff:c5:87:db:83:7f:b2:6c:bd:00:94:80: 21:0b:fa:bb:27:47:4e:b7:12:1b:67:ad:47:ca:e3:a7:38:cb: 97:0b:45:0a:20:04:ad:d9:f5:fb:db:73:d7:2d:9c:4e:dd:b1: d8:fa:3f:a1:f0:0c:c4:85:7c:ef:0e:43:06:e7:99:22:18:d6: 00:03:1d:76:ba:4f:84:ab:1d:03:0d:6b:19:aa:89:49:ff:6b: 20:42:d0:b8:05:7d:ec:3d:0f:de:a5:48:5a:3e:7a:62:37:d4: dd:8a:0b:8b:0c:94:8e:fd:74:4d:3e:8e:ee:fb:38:6c:b1:ab: 97:dd:82:3f:9f:31:2d:35:bc:1a:e4:ae:0f:3a:e9:53:fc:46: 24:e8:be:10:16:22:fa:83:7d:55:83:82:dd:7c:90:9a:68:a0: 94:2c:b7:c8:01:95:ba:47:a0:64:5c:3d:9f:b7:fd:5b:86:42: f6:b3:6a:00:b5:ea:7b:2c:de:69:55:9b:5f:e8:03:43:20:1b: 0b:8d:69:73 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULXNlx2+mSnMNBc3t0zbqX10elSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm ZjZkNjQ1YjAeFw0yNjA0MDgxMDE4MTdaFw0yNjA0MDkxMjQzMTdaMDMxMTAvBgNV BAMTKDZDODlDRTczOUMzQjlGOEQxREQ2NkJBNjg4MUY3RkFENkNFOTgxQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjci81dNESPJxymG/4ZConR/i1 71kEOQtpv0MfyRJrwgrhkaNS/y+mElPURcTtOQV0Osmrp+tiZXNJQAzioarh9snv O7DpRxGAaah47wnc7y8p413a3zUybXk+T0/hXQr9nXtGQ6S71f6oNZHxvJxyitY1 C9e9sjosovGQVDN5e1RPvtY50xKXUyQDsQxakgj/vgmI1Md6iSwj7fUTJ/CppoWJ 1MNkzavGGiX6HkYtvu0ic3ZwLcEoYjmchFD2o1Vxrg4AywV2N2dQGvOS2U8YRMwj 9G0gb5uTBez34e/195z7FrLmH3Cgrpm+8xgaEt1kVlz+CLAdBQb4gMSLl2qdAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUbInOc5w7n40d1mumiB9/rWzpgb8wHwYDVR0j BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5 dFpGcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MDMwNzlkZS0z OGE3LTQ1ZjMtYWE4Mi01NDJlYWYzNzM3NjAvMC9FRDhGOUE3QzcxRDk0MDA3MzlC QjhGQzk3MTZFNDM0MkZGNkQ2NDVCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3iJ8EMlfiTbH3+qnKb0 4ddMZVDLyKXAoM9I2Zu5KjsS1cR5bAAuJv8qDMYmtC6xE4sOxv2JtvxYhrqg/8WH 24N/smy9AJSAIQv6uydHTrcSG2etR8rjpzjLlwtFCiAErdn1+9tz1y2cTt2x2Po/ ofAMxIV87w5DBueZIhjWAAMddrpPhKsdAw1rGaqJSf9rIELQuAV97D0P3qVIWj56 YjfU3YoLiwyUjv10TT6O7vs4bLGrl92CP58xLTW8GuSuDzrpU/xGJOi+EBYi+oN9 VYOC3XyQmmiglCy3yAGVukegZFw9n7f9W4ZC9rNqALXqeyzeaVWbX+gDQyAbC41p cw== -----END CERTIFICATE-----Generated at Thu Apr 9 00:21:53 2026 by rpki-client