$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft File: ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft (raw, json) Hash identifier: i0DmtvhlkRUjT56sNSDeKVj4HFK4RmuKRlVj217RqEc= Subject key identifier: B2:0E:D6:A7:B6:2C:8E:D2:70:C5:C2:75:9B:DA:08:77:BB:22:06:4F Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Certificate serial: 61B5E764C5D0B4836444D6E3165ABE138F633790 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft Manifest number: A8 Signing time: Mon 16 Mar 2026 17:25:23 +0000 Manifest this update: Mon 16 Mar 2026 17:20:23 +0000 Manifest next update: Tue 17 Mar 2026 19:23:23 +0000 Files and hashes: 1: 3139342e35302e312e302f32342d3234203d3e203634323637.roa (hash: Y111o5heSVgTuvX1afqOIbWwexv6C9e08p+YRNlvpVI=) 2: ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl (hash: 3XS33TMWIZXoKdYgObA8MrQ6ey4cSxZLePEM5gM+0gg=) 3: 34352e3134392e36312e302f32342d3234203d3e20313335333931.roa (hash: CjBHEb6e8KCFokD4ry4Ct4NNWk9/i3N//pYJT3Rzvpg=) 4: 3139342e3234372e34342e302f32342d3234203d3e20313432313436.roa (hash: TqX0P9wlnvbZoWAo8DlV20oJQITx6kCNiVhWbz6v/l4=) 5: 34352e3134332e3136312e302f32342d3234203d3e203631333137.roa (hash: 8ZjMd6obm3N7HBniZT8uftJQwQbBGvAMihymyaoAi+E=) 6: 3139342e35302e312e302f32342d3234203d3e203534323532.roa (hash: ruvdsYTXtE0Ab54FYmgOEkBccmfDScUwXgNFAX7lgcQ=) 7: 34352e3134392e3136362e302f32342d3234203d3e20323132333834.roa (hash: oGRqBKIGwkwo89Qzo8J8QE2XhyVF3R37X5VJTJkYTLY=) 8: 34352e3134392e3136372e302f32342d3234203d3e20323132363639.roa (hash: G5FQ1l+cRk3n7sDIEiJiOqD91u3IjodfdNcjTCN0Zms=) 9: 34352e3134392e36302e302f32342d3234203d3e20383334.roa (hash: v5z4mH+8qoFiRalLg5vNyoviHu/g6QQvDiLP4ihiaTg=) 10: 3139342e35302e302e302f32342d3234203d3e203438333134.roa (hash: BtX3QzIneVP4peKGNcyeJeMDG5hgOoQ4i/5PEk0YGmY=) 11: 3139342e3234372e34352e302f32342d3234203d3e20313337353137.roa (hash: 7Uz0iGXKq5oSbUI44D0T64XUT0jHl47mRLVxjRhD2eU=) 12: 3139342e35302e312e302f32342d3234203d3e20333937363330.roa (hash: TeUJtf1ikY7LLYRPrAz/E+BsfW9QE1+7cNe6Ilv12VI=) 13: 34352e3134332e3136332e302f32342d3234203d3e203139343337.roa (hash: M8Y5TaWjTiVOLanqncdwCCTpjaAInXMAJmIU/gVIuL8=) 14: 3139342e35302e342e302f32342d3234203d3e20343030303339.roa (hash: 1KQ8U/cyI6RlRLUmJsQ7MnZR4YGCCRfjVSVg2/aEhuA=) 15: 34352e3134392e3136342e302f32342d3234203d3e203235333639.roa (hash: a0LqwFPI6pwa1fZnOKWJVr+UvNzZLlo/pfpnRlcnUlw=) 16: 34352e3134392e3136352e302f32342d3234203d3e20323039303433.roa (hash: xof4y/WucaiGMtyPzgbTPsOcPFlb9obn6jFW42zp3IM=) 17: 34352e3134332e3136302e302f32342d3234203d3e203232313638.roa (hash: R01FRlBDr9pZoq05BG3LRHuNkIAJs+FNxUn/NkK9at8=) 18: 34352e3134332e3136322e302f32342d3234203d3e203233343730.roa (hash: OcZ6EMgc6x8+IMfJh9quglLv9DVchqMI90FMfGysZqA=) 19: 3139342e3234362e33372e302f32342d3234203d3e20313534303439.roa (hash: qsoqYvzpUXEnewa636Uqf3ZdHju9vYqXC78N1RH7Kt0=) 20: 34352e3134392e36322e302f32342d3234203d3e20383334.roa (hash: K8ltTDgW9HfANPuVJSFbKlcEJqaQBf+iEfDLJr+tHyE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Mar 2026 19:23:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:b5:e7:64:c5:d0:b4:83:64:44:d6:e3:16:5a:be:13:8f:63:37:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Validity Not Before: Mar 16 17:20:23 2026 GMT Not After : Mar 17 19:23:23 2026 GMT Subject: CN=B20ED6A7B62C8ED270C5C2759BDA0877BB22064F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:95:a7:1e:2b:7e:76:4d:5b:46:d4:fa:88:1a: 71:ea:27:be:14:04:87:cb:a3:4d:3b:15:16:3d:d2: a3:c1:02:42:ec:5c:16:d1:d8:1b:f8:3a:aa:cf:78: e4:6a:5e:fc:39:31:83:8a:69:21:e1:5f:9f:89:c9: 62:fd:28:7b:e7:0b:b8:07:c4:16:6e:a3:43:5b:e0: 13:e2:50:5c:f2:c8:38:05:51:e3:05:8e:f0:06:5f: c7:45:19:e7:c7:85:cc:1b:28:f2:16:80:9e:e1:4a: 21:11:1c:f6:85:c1:0a:53:ab:3f:11:df:8b:23:36: f0:cc:ec:5e:eb:26:91:c2:c9:ed:e8:63:36:f0:09: 91:74:63:ce:f7:e5:a4:b5:41:93:b4:8a:54:45:ba: ad:27:25:b1:db:87:cc:43:8c:c2:46:7a:78:ef:2f: 7c:e8:be:1e:3e:f6:53:27:91:ee:0f:74:ef:38:20: 47:b4:9e:a3:30:a6:6d:60:b6:bb:7d:1d:5f:2b:cb: dd:94:dd:cf:7e:b7:93:14:9e:1c:c9:67:71:be:78: 7f:2e:08:fd:20:8c:f5:74:88:f0:2d:fe:32:4c:99: e6:32:c6:e6:47:3f:8e:0c:56:03:96:f8:d4:c9:89: 99:8f:60:ce:41:f4:a6:51:74:7a:11:d4:11:cc:04: 9c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:0E:D6:A7:B6:2C:8E:D2:70:C5:C2:75:9B:DA:08:77:BB:22:06:4F X509v3 Authority Key Identifier: keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:18:5e:fc:bf:05:90:b0:5f:6f:65:78:05:6f:72:cd:a7:07: 0c:4f:48:ab:cc:f9:d8:03:d3:6f:7a:ea:12:16:d3:ce:51:d5: 92:5c:02:79:94:fd:13:7a:07:52:01:65:a2:7e:f8:be:d6:bf: 21:6c:7b:a6:c6:ae:67:7f:79:e6:c8:0b:1d:c7:4b:1b:39:a9: 60:5d:00:70:8a:0a:dd:83:b4:b1:87:b9:e0:99:b6:fb:9e:61: bb:95:64:b7:b9:8a:d6:6b:b4:0a:cb:71:2b:4c:17:b4:cc:1c: 61:cd:f1:bc:c8:53:ec:5a:71:eb:59:95:65:f8:d7:ea:41:3d: 4a:a4:52:99:f0:86:c6:39:6b:a5:8d:81:3e:c2:a1:55:6d:c2: 78:5d:03:1d:ad:30:16:17:5f:0c:21:64:ac:ec:00:25:f2:82: ce:c3:40:6c:1e:94:fe:e1:71:d3:2d:7d:45:52:55:45:91:86: e9:43:09:2b:cd:4a:9b:8d:c0:60:47:f2:f2:ee:f3:ae:12:4b: 91:c7:43:95:3f:77:5f:e3:cf:ea:a7:ee:a2:2a:c0:2f:a5:41: a5:98:7f:87:2f:8c:84:ff:88:59:6d:44:22:47:1f:39:fe:05: ea:f9:94:6a:4a:6e:8c:e2:98:54:4f:68:0c:eb:df:8a:dc:7d: 53:ca:fc:d2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYbXnZMXQtINkRNbjFlq+E49jN5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm ZjZkNjQ1YjAeFw0yNjAzMTYxNzIwMjNaFw0yNjAzMTcxOTIzMjNaMDMxMTAvBgNV BAMTKEIyMEVENkE3QjYyQzhFRDI3MEM1QzI3NTlCREEwODc3QkIyMjA2NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCilaceK352TVtG1PqIGnHqJ74U BIfLo007FRY90qPBAkLsXBbR2Bv4OqrPeORqXvw5MYOKaSHhX5+JyWL9KHvnC7gH xBZuo0Nb4BPiUFzyyDgFUeMFjvAGX8dFGefHhcwbKPIWgJ7hSiERHPaFwQpTqz8R 34sjNvDM7F7rJpHCye3oYzbwCZF0Y8735aS1QZO0ilRFuq0nJbHbh8xDjMJGenjv L3zovh4+9lMnke4PdO84IEe0nqMwpm1gtrt9HV8ry92U3c9+t5MUnhzJZ3G+eH8u CP0gjPV0iPAt/jJMmeYyxuZHP44MVgOW+NTJiZmPYM5B9KZRdHoR1BHMBJyjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUsg7Wp7YsjtJwxcJ1m9oId7siBk8wHwYDVR0j BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5 dFpGcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MDMwNzlkZS0z OGE3LTQ1ZjMtYWE4Mi01NDJlYWYzNzM3NjAvMC9FRDhGOUE3QzcxRDk0MDA3MzlC QjhGQzk3MTZFNDM0MkZGNkQ2NDVCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAexhe/L8FkLBfb2V4BW9y zacHDE9Iq8z52APTb3rqEhbTzlHVklwCeZT9E3oHUgFlon74vta/IWx7psauZ395 5sgLHcdLGzmpYF0AcIoK3YO0sYe54Jm2+55hu5Vkt7mK1mu0CstxK0wXtMwcYc3x vMhT7Fpx61mVZfjX6kE9SqRSmfCGxjlrpY2BPsKhVW3CeF0DHa0wFhdfDCFkrOwA JfKCzsNAbB6U/uFx0y19RVJVRZGG6UMJK81Km43AYEfy8u7zrhJLkcdDlT93X+PP 6qfuoirAL6VBpZh/hy+MhP+IWW1EIkcfOf4F6vmUakpujOKYVE9oDOvfitx9U8r8 0g== -----END CERTIFICATE-----Generated at Tue Mar 17 06:24:50 2026 by rpki-client