$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft File: ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft (raw, json) Hash identifier: i4kHfRrthjXQPo6VdIuln5t0is901uz6Q9qZOdEK5vQ= Subject key identifier: 5F:1B:1B:45:DF:DA:A2:32:84:84:82:F0:15:87:C9:C8:41:75:EB:71 Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Certificate serial: 32D0B750977E3DE05E5557EB336EF0FAE9B6D553 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft Manifest number: 0105 Signing time: Sat 23 May 2026 23:32:47 +0000 Manifest this update: Sat 23 May 2026 23:27:47 +0000 Manifest next update: Mon 25 May 2026 02:25:47 +0000 Files and hashes: 1: 34352e3134392e3136352e302f32342d3234203d3e20323039303433.roa (hash: xof4y/WucaiGMtyPzgbTPsOcPFlb9obn6jFW42zp3IM=) 2: 34352e3134332e3136322e302f32342d3234203d3e203233343730.roa (hash: OcZ6EMgc6x8+IMfJh9quglLv9DVchqMI90FMfGysZqA=) 3: 34352e3134332e3136332e302f32342d3234203d3e203139343337.roa (hash: M8Y5TaWjTiVOLanqncdwCCTpjaAInXMAJmIU/gVIuL8=) 4: 34352e3134392e36302e302f32342d3234203d3e20383334.roa (hash: v5z4mH+8qoFiRalLg5vNyoviHu/g6QQvDiLP4ihiaTg=) 5: ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl (hash: t5bPGqOScw1jxqtINcltnmfFXMymT00Smt5mOH/KWkI=) 6: 3139342e35302e312e302f32342d3234203d3e203634323637.roa (hash: Y111o5heSVgTuvX1afqOIbWwexv6C9e08p+YRNlvpVI=) 7: 34352e3134392e36312e302f32342d3234203d3e20313337353137.roa (hash: bPblgjM8vXENfZasylb5ZzMp1DkYcmu6TBL1HJESdOc=) 8: 3139342e3234362e33372e302f32342d3234203d3e20313534303439.roa (hash: qsoqYvzpUXEnewa636Uqf3ZdHju9vYqXC78N1RH7Kt0=) 9: 34352e3134392e3136342e302f32342d3234203d3e203235333639.roa (hash: a0LqwFPI6pwa1fZnOKWJVr+UvNzZLlo/pfpnRlcnUlw=) 10: 34352e3134392e36322e302f32342d3234203d3e20383334.roa (hash: K8ltTDgW9HfANPuVJSFbKlcEJqaQBf+iEfDLJr+tHyE=) 11: 3139342e35302e302e302f32342d3234203d3e203438333134.roa (hash: BtX3QzIneVP4peKGNcyeJeMDG5hgOoQ4i/5PEk0YGmY=) 12: 34352e3134332e3136312e302f32342d3234203d3e203631333137.roa (hash: 8ZjMd6obm3N7HBniZT8uftJQwQbBGvAMihymyaoAi+E=) 13: 3139342e3234372e34342e302f32342d3234203d3e20313432313436.roa (hash: TqX0P9wlnvbZoWAo8DlV20oJQITx6kCNiVhWbz6v/l4=) 14: 34352e3134332e3136302e302f32342d3234203d3e203232313638.roa (hash: R01FRlBDr9pZoq05BG3LRHuNkIAJs+FNxUn/NkK9at8=) 15: 3139342e35302e312e302f32342d3234203d3e203534323532.roa (hash: ruvdsYTXtE0Ab54FYmgOEkBccmfDScUwXgNFAX7lgcQ=) 16: 3139342e35302e312e302f32342d3234203d3e20333937363330.roa (hash: TeUJtf1ikY7LLYRPrAz/E+BsfW9QE1+7cNe6Ilv12VI=) 17: 34352e3134392e3136362e302f32342d3234203d3e20323132333834.roa (hash: oGRqBKIGwkwo89Qzo8J8QE2XhyVF3R37X5VJTJkYTLY=) 18: 3139342e35302e342e302f32342d3234203d3e20343030303339.roa (hash: 1KQ8U/cyI6RlRLUmJsQ7MnZR4YGCCRfjVSVg2/aEhuA=) 19: 34352e3134392e3136372e302f32342d3234203d3e20323132363639.roa (hash: G5FQ1l+cRk3n7sDIEiJiOqD91u3IjodfdNcjTCN0Zms=) 20: 3139342e3234372e34352e302f32342d3234203d3e20313337353137.roa (hash: 7Uz0iGXKq5oSbUI44D0T64XUT0jHl47mRLVxjRhD2eU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 25 May 2026 02:25:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:d0:b7:50:97:7e:3d:e0:5e:55:57:eb:33:6e:f0:fa:e9:b6:d5:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Validity Not Before: May 23 23:27:47 2026 GMT Not After : May 25 02:25:47 2026 GMT Subject: CN=5F1B1B45DFDAA232848482F01587C9C84175EB71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6f:2d:1a:f7:11:ee:cf:5a:de:0b:36:9f:3d: 48:58:5e:e9:db:8e:2e:7b:31:ef:f7:f8:63:39:fe: 3a:ad:59:d0:40:26:65:23:83:24:73:6f:07:5a:51: 92:74:f0:35:4c:e2:cb:fa:f4:4b:61:87:80:76:e5: c1:36:82:02:78:c5:c9:8d:7c:2d:64:e4:00:69:bf: 07:6c:c8:1d:02:bb:82:77:e4:55:7d:19:66:78:6d: e6:e3:eb:60:c3:4b:ba:b7:df:3d:c3:bd:55:10:8c: 1c:05:41:34:d9:48:23:85:60:85:48:36:b5:80:1e: 76:96:2a:d5:b3:c1:85:70:34:96:fd:23:56:03:1d: 76:bc:53:c7:3b:54:19:9d:da:41:6a:a2:73:1a:e2: af:97:1e:3c:31:8b:e0:ff:b6:f7:86:3a:e0:e9:ca: 5b:4e:44:a1:f5:ac:30:7d:78:84:85:4e:3b:39:d9: 19:e5:90:d8:e6:2a:b4:a8:ae:92:55:2a:85:fe:ba: 83:04:a7:c2:7b:e8:b1:c1:fe:9d:41:e6:f2:0d:5b: 85:44:cc:6f:81:6c:41:8a:c6:4c:a9:c1:2f:71:fc: ea:ba:e9:46:47:aa:9b:d3:40:ce:ee:15:d0:d3:70: c1:fb:20:e0:be:87:3c:f9:e8:7e:22:01:d5:cf:6b: 98:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1B:1B:45:DF:DA:A2:32:84:84:82:F0:15:87:C9:C8:41:75:EB:71 X509v3 Authority Key Identifier: keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e2:26:8c:af:eb:b8:ed:97:af:88:65:0a:e0:ae:10:3e:ea: 65:ec:64:68:a6:08:54:56:2f:1e:6f:1d:95:3c:8f:e1:d4:6e: 26:df:68:25:e9:b2:da:90:73:0c:a3:69:14:7a:9d:c6:7a:af: 98:d8:78:df:61:3c:88:fa:b5:88:f4:60:fb:e8:f3:81:5d:3d: a2:f9:22:97:d4:6f:8e:d5:74:cd:11:79:74:71:ba:cc:dd:1b: d8:6e:60:92:1c:c8:dc:2f:91:d6:c0:0a:f4:f3:e6:b4:af:85: 78:d7:db:65:f4:50:7d:e4:9b:ca:a1:36:86:cb:40:bb:25:8a: 33:9b:3e:37:eb:4e:5e:e9:9a:fc:4c:6d:b2:dd:d6:24:0c:d4: d8:e5:21:21:61:11:1c:8e:7b:1e:e0:d6:26:8a:eb:07:88:41: b5:81:59:55:cf:ea:68:7f:a9:0c:1b:4a:66:b1:65:78:5b:e1: a0:d2:c7:f2:41:09:cc:13:01:22:c5:ec:b7:a8:01:31:45:0e: ee:24:dc:43:a1:3e:2e:ee:84:28:a7:7c:f2:c0:d2:95:37:7c: c0:4e:45:59:ad:85:27:e8:d0:d0:95:3d:bf:1a:01:bd:99:79: ac:28:6e:b3:49:08:d6:66:40:ce:7f:9d:9d:9b:3a:a7:28:41: 6b:4c:4d:e8 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUMtC3UJd+PeBeVVfrM27w+um21VMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm ZjZkNjQ1YjAeFw0yNjA1MjMyMzI3NDdaFw0yNjA1MjUwMjI1NDdaMDMxMTAvBgNV BAMTKDVGMUIxQjQ1REZEQUEyMzI4NDg0ODJGMDE1ODdDOUM4NDE3NUVCNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8by0a9xHuz1reCzafPUhYXunb ji57Me/3+GM5/jqtWdBAJmUjgyRzbwdaUZJ08DVM4sv69Ethh4B25cE2ggJ4xcmN fC1k5ABpvwdsyB0Cu4J35FV9GWZ4bebj62DDS7q33z3DvVUQjBwFQTTZSCOFYIVI NrWAHnaWKtWzwYVwNJb9I1YDHXa8U8c7VBmd2kFqonMa4q+XHjwxi+D/tveGOuDp yltORKH1rDB9eISFTjs52RnlkNjmKrSorpJVKoX+uoMEp8J76LHB/p1B5vINW4VE zG+BbEGKxkypwS9x/Oq66UZHqpvTQM7uFdDTcMH7IOC+hzz56H4iAdXPa5g1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUXxsbRd/aojKEhILwFYfJyEF163EwHwYDVR0j BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5 dFpGcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MDMwNzlkZS0z OGE3LTQ1ZjMtYWE4Mi01NDJlYWYzNzM3NjAvMC9FRDhGOUE3QzcxRDk0MDA3MzlC QjhGQzk3MTZFNDM0MkZGNkQ2NDVCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKuImjK/ruO2Xr4hlCuCu ED7qZexkaKYIVFYvHm8dlTyP4dRuJt9oJemy2pBzDKNpFHqdxnqvmNh432E8iPq1 iPRg++jzgV09ovkil9RvjtV0zRF5dHG6zN0b2G5gkhzI3C+R1sAK9PPmtK+FeNfb ZfRQfeSbyqE2hstAuyWKM5s+N+tOXuma/Extst3WJAzU2OUhIWERHI57HuDWJorr B4hBtYFZVc/qaH+pDBtKZrFleFvhoNLH8kEJzBMBIsXst6gBMUUO7iTcQ6E+Lu6E KKd88sDSlTd8wE5FWa2FJ+jQ0JU9vxoBvZl5rChus0kI1mZAzn+dnZs6pyhBa0xN 6A== -----END CERTIFICATE-----Generated at Sun May 24 11:11:45 2026 by rpki-client