$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft File: ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft (raw, json) Hash identifier: FSpWFsbJiAsvkIswOtVxo3+uBQD0YdzjR0jF0YmmW8g= Subject key identifier: 7F:52:F4:2F:D8:E7:62:5C:40:0C:EC:02:1E:14:87:39:69:31:51:9F Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Certificate serial: 216FEA6B1B8AB830AAF00EF281054316064BBDE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft Manifest number: 01CA Signing time: Thu 08 Oct 2026 14:21:12 +0000 Manifest this update: Thu 08 Oct 2026 14:16:12 +0000 Manifest next update: Fri 09 Oct 2026 16:49:12 +0000 Files and hashes: 1: 34352e3134392e3136362e302f32342d3234203d3e20323132333834.roa (hash: oGRqBKIGwkwo89Qzo8J8QE2XhyVF3R37X5VJTJkYTLY=) 2: 34352e3134392e3136342e302f32342d3234203d3e203235333639.roa (hash: a0LqwFPI6pwa1fZnOKWJVr+UvNzZLlo/pfpnRlcnUlw=) 3: 34352e3134392e3136372e302f32342d3234203d3e20323132363639.roa (hash: G5FQ1l+cRk3n7sDIEiJiOqD91u3IjodfdNcjTCN0Zms=) 4: 34352e3134332e3136312e302f32342d3234203d3e203631333137.roa (hash: 8ZjMd6obm3N7HBniZT8uftJQwQbBGvAMihymyaoAi+E=) 5: 3139342e35302e312e302f32342d3234203d3e20333937363330.roa (hash: TeUJtf1ikY7LLYRPrAz/E+BsfW9QE1+7cNe6Ilv12VI=) 6: 34352e3134332e3136332e302f32342d3234203d3e203139343337.roa (hash: M8Y5TaWjTiVOLanqncdwCCTpjaAInXMAJmIU/gVIuL8=) 7: 3139342e3234362e33372e302f32342d3234203d3e20313938353636.roa (hash: 2rpheoF0iJkT6m1Ot1ZveF05gZERdVyle0HSXr4CMS0=) 8: 3139342e35302e312e302f32342d3234203d3e203634323637.roa (hash: Y111o5heSVgTuvX1afqOIbWwexv6C9e08p+YRNlvpVI=) 9: 3139342e35302e342e302f32342d3234203d3e20343030303339.roa (hash: 1KQ8U/cyI6RlRLUmJsQ7MnZR4YGCCRfjVSVg2/aEhuA=) 10: 34352e3134392e36322e302f32342d3234203d3e203633373933.roa (hash: oy5gMQGGM7V8693/jNixJCe0gJ3wzXsGETUWwTd8ZEA=) 11: 34352e3134332e3136322e302f32342d3234203d3e203233343730.roa (hash: OcZ6EMgc6x8+IMfJh9quglLv9DVchqMI90FMfGysZqA=) 12: 3139342e3234372e34352e302f32342d3234203d3e20313337353137.roa (hash: 7Uz0iGXKq5oSbUI44D0T64XUT0jHl47mRLVxjRhD2eU=) 13: 34352e3134392e36312e302f32342d3234203d3e20313337353137.roa (hash: bPblgjM8vXENfZasylb5ZzMp1DkYcmu6TBL1HJESdOc=) 14: 34352e3134392e3136352e302f32342d3234203d3e20323039303433.roa (hash: xof4y/WucaiGMtyPzgbTPsOcPFlb9obn6jFW42zp3IM=) 15: 34352e3134392e36332e302f32342d3234203d3e20323134343833.roa (hash: mQg7Rad/kKZcSLKWUMcvftwu7Gok/Q3zJLvicbmuesI=) 16: 34352e3134392e36302e302f32342d3234203d3e20383334.roa (hash: DFUpVXNMh3OIJq1txAvrPc8PceQuJD5RqJxOtkruWkw=) 17: 34352e3134332e3136302e302f32342d3234203d3e203232313638.roa (hash: R01FRlBDr9pZoq05BG3LRHuNkIAJs+FNxUn/NkK9at8=) 18: 3139342e35302e302e302f32342d3234203d3e203438333134.roa (hash: BtX3QzIneVP4peKGNcyeJeMDG5hgOoQ4i/5PEk0YGmY=) 19: 3139342e35302e312e302f32342d3234203d3e203534323532.roa (hash: ruvdsYTXtE0Ab54FYmgOEkBccmfDScUwXgNFAX7lgcQ=) 20: ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl (hash: squ/BuIiQlGIEAopRYqL8Tu8gSBPT2S5UqXYP3rUkW4=) 21: 3139342e3234372e34342e302f32342d3234203d3e20313432313436.roa (hash: TqX0P9wlnvbZoWAo8DlV20oJQITx6kCNiVhWbz6v/l4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 16:49:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:6f:ea:6b:1b:8a:b8:30:aa:f0:0e:f2:81:05:43:16:06:4b:bd:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Validity Not Before: Oct 8 14:16:12 2026 GMT Not After : Oct 9 16:49:12 2026 GMT Subject: CN=7F52F42FD8E7625C400CEC021E1487396931519F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a5:cf:65:8f:64:ed:8a:97:bf:a9:9a:b8:a8: 44:93:7c:2c:57:0c:44:19:25:ff:fa:14:58:b2:7b: 65:3e:c8:01:85:ce:fa:42:9d:46:91:f7:71:25:29: 3c:28:5f:54:18:cf:41:37:dc:a5:3c:d0:7d:70:5b: 00:74:ea:d9:e9:07:2b:3b:93:0a:16:0e:45:3a:ec: 42:6c:04:e0:86:07:c1:15:8c:5c:94:41:d0:82:8e: 5e:c8:0b:b6:cb:f5:b6:7d:4d:ea:c3:24:b2:bd:3b: 79:1a:9d:29:99:93:22:7d:8b:3d:10:07:f2:02:d8: bf:2d:ec:ed:ce:75:0c:c2:66:64:b3:ba:b3:a6:06: 11:43:7f:ef:95:f1:86:93:81:b2:94:a3:7d:98:1f: 56:49:5b:93:95:fa:70:36:21:16:e6:ec:c2:df:34: 3e:30:1f:13:8f:81:ed:b4:7c:d7:db:ae:ea:38:0a: 77:57:59:99:78:b9:95:84:f4:3a:2c:b0:63:94:c9: 6a:ec:40:d1:5d:9b:80:a2:5a:13:68:5c:c9:3d:45: 27:5e:44:2b:f5:fe:db:e5:6f:a8:9f:a3:bc:4a:d7: fc:7a:9e:e3:d4:ea:c2:28:63:b3:a2:93:9d:7d:a4: 57:9e:c6:44:1e:6d:99:d9:6a:af:a1:21:4b:b1:38: 91:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:52:F4:2F:D8:E7:62:5C:40:0C:EC:02:1E:14:87:39:69:31:51:9F X509v3 Authority Key Identifier: keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:41:9f:44:19:65:fc:e9:33:cc:a3:00:21:64:c3:de:89:62: 3e:e8:8e:ce:be:2e:29:e7:94:12:68:4a:75:41:ce:75:aa:0d: 96:f5:b8:41:35:e7:e8:d8:62:2a:9a:37:dd:89:b6:ec:b1:48: 1e:71:5b:95:39:c9:e0:ce:f2:40:ef:fa:18:a9:7a:27:bb:d5: 61:e1:50:11:65:43:95:96:ff:cb:3f:36:e5:0c:de:93:0a:c7: 88:52:ad:69:f9:5e:22:63:9e:c3:54:59:16:7b:21:ae:23:54: cd:a4:2f:ee:a0:6e:ef:b9:1b:d9:c5:02:00:bc:79:d7:b3:5b: 62:15:3b:ac:55:77:a3:e5:62:4b:7a:c0:97:a1:97:b0:0f:7a: cc:bf:65:b7:29:8b:8f:9c:f3:27:12:ca:b6:02:37:04:40:a5: aa:b9:8c:9e:9f:29:6d:43:fa:5b:ee:fb:df:2d:34:c3:e3:04: 67:59:44:45:f4:6f:b3:f4:cc:8a:3c:68:3a:59:bf:18:0b:f7: 30:54:bf:25:ac:c0:8f:58:75:15:4e:71:b1:84:52:4f:91:eb: dd:e3:e8:30:7d:7d:dc:ee:3e:f4:12:0a:f9:dc:c4:01:88:89: 97:48:f7:2e:44:89:03:58:a3:58:a4:30:22:15:75:e5:5f:db: 3b:49:54:dd -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIW/qaxuKuDCq8A7ygQVDFgZLvegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm ZjZkNjQ1YjAeFw0yNjEwMDgxNDE2MTJaFw0yNjEwMDkxNjQ5MTJaMDMxMTAvBgNV BAMTKDdGNTJGNDJGRDhFNzYyNUM0MDBDRUMwMjFFMTQ4NzM5NjkzMTUxOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcpc9lj2Ttipe/qZq4qESTfCxX DEQZJf/6FFiye2U+yAGFzvpCnUaR93ElKTwoX1QYz0E33KU80H1wWwB06tnpBys7 kwoWDkU67EJsBOCGB8EVjFyUQdCCjl7IC7bL9bZ9TerDJLK9O3kanSmZkyJ9iz0Q B/IC2L8t7O3OdQzCZmSzurOmBhFDf++V8YaTgbKUo32YH1ZJW5OV+nA2IRbm7MLf ND4wHxOPge20fNfbruo4CndXWZl4uZWE9DossGOUyWrsQNFdm4CiWhNoXMk9RSde RCv1/tvlb6ifo7xK1/x6nuPU6sIoY7Oik519pFeexkQebZnZaq+hIUuxOJEBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUf1L0L9jnYlxADOwCHhSHOWkxUZ8wHwYDVR0j BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5 dFpGcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MDMwNzlkZS0z OGE3LTQ1ZjMtYWE4Mi01NDJlYWYzNzM3NjAvMC9FRDhGOUE3QzcxRDk0MDA3MzlC QjhGQzk3MTZFNDM0MkZGNkQ2NDVCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ0GfRBll/OkzzKMAIWTD 3oliPuiOzr4uKeeUEmhKdUHOdaoNlvW4QTXn6NhiKpo33Ym27LFIHnFblTnJ4M7y QO/6GKl6J7vVYeFQEWVDlZb/yz825QzekwrHiFKtafleImOew1RZFnshriNUzaQv 7qBu77kb2cUCALx517NbYhU7rFV3o+ViS3rAl6GXsA96zL9ltymLj5zzJxLKtgI3 BEClqrmMnp8pbUP6W+773y00w+MEZ1lERfRvs/TMijxoOlm/GAv3MFS/JazAj1h1 FU5xsYRST5Hr3ePoMH193O4+9BIK+dzEAYiJl0j3LkSJA1ijWKQwIhV15V/bO0lU 3Q== -----END CERTIFICATE-----Generated at Fri Oct 9 04:51:27 2026 by rpki-client