$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/2/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.mft File: EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.mft (raw, json) Hash identifier: 6+CYYa8lTdwEYHnh0pqruEPan4f/VQXdyv0umfeW9UY= Subject key identifier: 9E:44:96:F5:CA:B1:F1:B7:1B:68:F1:65:38:65:CF:FA:C7:C6:4F:F4 Authority key identifier: EA:EE:4A:02:E5:45:C0:2C:2C:5A:25:56:E1:E4:46:F1:C9:4E:52:22 Certificate issuer: /CN=EAEE4A02E545C02C2C5A2556E1E446F1C94E5222 Certificate serial: 264BD74DB77C54C7192E04821FCF2072DFF73688 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/2/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.mft Manifest number: 23 Signing time: Wed 26 Aug 2026 15:17:46 +0000 Manifest this update: Wed 26 Aug 2026 15:12:46 +0000 Manifest next update: Thu 27 Aug 2026 16:50:46 +0000 Files and hashes: 1: 326130623a346530373a323030383a3a2f34362d3438203d3e20313939373436.roa (hash: pgFHR+AdUuTkfh6c1zSUA5zTg+CXzBHNukpIAx2l5rM=) 2: 326130623a346530373a62303a3a2f34362d3438203d3e20323031333938.roa (hash: q4YwK6EWEo+bfT6Kii7A5hXsC7nUph/HDD/nMaXDjdo=) 3: 326130623a346530373a323030303a3a2f33372d3438203d3e20323031333938.roa (hash: ONcitOTF4nf9vG71nL0mbyM38SYfrxQqVzfvqNutiX8=) 4: EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.crl (hash: DcTKCUU4YSESDJRoC29FdMojXrmAneMHStPvX9N9eBY=) 5: 326130623a346530373a323030343a3a2f34362d3438203d3e20323139333331.roa (hash: WwLkOeRgD2xAhxOEdsCC2ANBObDpMM4BGQxexbsQL6o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/2/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.crl rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/2/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 14:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:4b:d7:4d:b7:7c:54:c7:19:2e:04:82:1f:cf:20:72:df:f7:36:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAEE4A02E545C02C2C5A2556E1E446F1C94E5222 Validity Not Before: Aug 26 15:12:46 2026 GMT Not After : Aug 27 16:50:46 2026 GMT Subject: CN=9E4496F5CAB1F1B71B68F1653865CFFAC7C64FF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:70:78:8e:af:4e:6f:57:79:fd:06:d3:9d:f5: 9c:86:86:6b:cf:12:74:63:2b:0d:2f:da:a4:b2:7d: fe:37:c3:bb:fc:b0:b6:6e:be:1a:3d:0e:7e:a2:c1: c0:49:a6:d3:fb:1b:72:9a:5c:76:5e:86:8b:8d:8d: 45:f2:8d:8f:f8:b5:90:6b:e2:e4:30:8e:0e:83:e0: f7:60:61:3e:e0:9f:b1:5f:de:c6:63:d1:3e:5c:5b: 0b:bc:bb:9f:b8:50:fd:3a:43:69:9e:09:0f:4e:4c: 1c:04:b6:d9:3b:14:1c:4a:61:21:37:44:7e:a3:cc: f6:5b:bb:ee:0a:0e:89:c4:05:82:79:13:02:66:3b: 22:b2:7b:04:b3:04:5b:44:e8:b8:84:a0:c2:7f:31: 74:0d:59:e8:3b:d7:e5:83:40:66:70:dd:d1:2c:2d: 80:f3:ed:fb:cf:27:22:a0:9f:50:2c:56:7f:66:e2: 7b:7b:dc:a6:69:83:92:b8:3c:8b:ad:ac:47:35:72: 37:c3:9c:98:ef:15:a5:70:90:96:42:82:f9:37:9c: 12:4b:61:e4:47:e7:5f:47:6e:c8:e5:e8:a3:1b:00: 60:a9:ac:f3:25:ff:3a:6f:7d:36:5c:da:40:a9:51: 12:19:99:c2:0c:f0:a7:58:b8:ec:59:4e:22:e7:10: f0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:44:96:F5:CA:B1:F1:B7:1B:68:F1:65:38:65:CF:FA:C7:C6:4F:F4 X509v3 Authority Key Identifier: keyid:EA:EE:4A:02:E5:45:C0:2C:2C:5A:25:56:E1:E4:46:F1:C9:4E:52:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/2/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/2/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:66:b3:39:02:2d:37:9f:83:23:c6:08:47:62:e5:7d:61:ae: b7:b6:5a:c0:28:63:b9:5b:3e:a6:b7:ea:d2:75:1a:78:e8:3a: 0e:aa:9d:74:36:7d:9f:fc:d1:27:a2:ef:0b:75:d7:1a:08:fd: d1:79:c1:49:50:25:3a:1c:94:6c:6c:32:1b:6e:66:2a:d8:34: 36:7b:0c:5a:02:38:c3:1b:3d:23:9d:c2:e6:3c:7c:c8:95:54: 25:92:44:80:4a:a1:04:6e:2a:29:c8:7b:4f:e0:c1:d0:55:3e: d3:18:77:a7:29:78:fe:c2:8a:6e:44:ad:4d:b6:96:ad:69:47: cb:6c:46:a4:98:d6:44:80:8f:7a:e5:e9:30:11:c1:64:da:2c: ad:1b:9e:d7:a4:bd:2a:e0:12:79:f8:fd:44:2b:33:51:d8:98: 61:31:b8:fe:ac:ca:a2:cd:b4:55:ea:d2:e2:ed:78:e1:9a:0a: 7c:a8:b5:9d:3b:ac:e7:bf:f7:85:1a:ab:ee:48:23:3d:72:b8: 65:fe:13:73:94:ae:28:f4:04:7c:a6:74:da:35:39:c7:bc:0e: db:3e:a4:f3:bd:c9:a5:5b:f6:38:92:65:ea:e1:a5:f6:7d:40: bd:db:a3:05:05:67:5e:21:ce:8e:3d:79:b0:b3:4d:77:4e:e2: 5e:16:4d:99 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUJkvXTbd8VMcZLgSCH88gct/3NogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFFRTRBMDJFNTQ1QzAyQzJDNUEyNTU2RTFFNDQ2RjFD OTRFNTIyMjAeFw0yNjA4MjYxNTEyNDZaFw0yNjA4MjcxNjUwNDZaMDMxMTAvBgNV BAMTKDlFNDQ5NkY1Q0FCMUYxQjcxQjY4RjE2NTM4NjVDRkZBQzdDNjRGRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+cHiOr05vV3n9BtOd9ZyGhmvP EnRjKw0v2qSyff43w7v8sLZuvho9Dn6iwcBJptP7G3KaXHZehouNjUXyjY/4tZBr 4uQwjg6D4PdgYT7gn7Ff3sZj0T5cWwu8u5+4UP06Q2meCQ9OTBwEttk7FBxKYSE3 RH6jzPZbu+4KDonEBYJ5EwJmOyKyewSzBFtE6LiEoMJ/MXQNWeg71+WDQGZw3dEs LYDz7fvPJyKgn1AsVn9m4nt73KZpg5K4PIutrEc1cjfDnJjvFaVwkJZCgvk3nBJL YeRH519Hbsjl6KMbAGCprPMl/zpvfTZc2kCpURIZmcIM8KdYuOxZTiLnEPCdAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUnkSW9cqx8bcbaPFlOGXP+sfGT/QwHwYDVR0j BBgwFoAU6u5KAuVFwCwsWiVW4eRG8clOUiIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmNmZDlhMmMtODdmMS00OGE5LWI2ZWEtMjhhZDA5N2I3 NWQzLzIvRUFFRTRBMDJFNTQ1QzAyQzJDNUEyNTU2RTFFNDQ2RjFDOTRFNTIyMi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRUFFRTRBMDJFNTQ1QzAyQzJDNUEyNTU2RTFFNDQ2RjFDOTRF NTIyMi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82Y2ZkOWEyYy04 N2YxLTQ4YTktYjZlYS0yOGFkMDk3Yjc1ZDMvMi9FQUVFNEEwMkU1NDVDMDJDMkM1 QTI1NTZFMUU0NDZGMUM5NEU1MjIyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmazOQItN5+DI8YIR2Ll fWGut7ZawChjuVs+prfq0nUaeOg6DqqddDZ9n/zRJ6LvC3XXGgj90XnBSVAlOhyU bGwyG25mKtg0NnsMWgI4wxs9I53C5jx8yJVUJZJEgEqhBG4qKch7T+DB0FU+0xh3 pyl4/sKKbkStTbaWrWlHy2xGpJjWRICPeuXpMBHBZNosrRue16S9KuASefj9RCsz UdiYYTG4/qzKos20VerS4u144ZoKfKi1nTus57/3hRqr7kgjPXK4Zf4Tc5SuKPQE fKZ02jU5x7wO2z6k873JpVv2OJJl6uGl9n1AvdujBQVnXiHOjj15sLNNd07iXhZN mQ== -----END CERTIFICATE-----Generated at Wed Aug 26 17:24:10 2026 by rpki-client