$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft File: EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft (raw, json) Hash identifier: CMPXC/3Y4bl+/crVmnhdoAsoo1bcM2zh/QSqkzU/3/w= Subject key identifier: 54:A4:47:13:47:16:DD:3B:9A:9E:AE:B5:72:7D:48:C1:20:EA:12:0D Authority key identifier: EF:B5:DF:07:6C:DF:06:22:94:B1:2C:30:2E:75:D5:7E:FC:D7:F7:CE Certificate issuer: /CN=EFB5DF076CDF062294B12C302E75D57EFCD7F7CE Certificate serial: 539F03ACBBAB7DE774E1889DB4BA51A3FE32FA87 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft Manifest number: 68 Signing time: Thu 10 Sep 2026 05:49:42 +0000 Manifest this update: Thu 10 Sep 2026 05:44:42 +0000 Manifest next update: Fri 11 Sep 2026 09:08:42 +0000 Files and hashes: 1: 326130623a346530373a323930653a3a2f34382d3438203d3e20323132383935.roa (hash: xS6W9vpcgkAQc0HRDNFnqDu1C6jkUC2PmU4eLlkKlbg=) 2: 326130623a346530373a323930663a3a2f34382d3438203d3e20323139343538.roa (hash: QdWdCYMQ1B0FZjXFRDlUNhMGI8TuC2nx+5W/1E5RsMo=) 3: 326130623a346530373a323930303a3a2f34382d3438203d3e20323139343538.roa (hash: mDjQQXF1v1WMqSeOU6+LNJClsgR6yYGDAu/LFfF+GPM=) 4: 326130623a346530373a323930323a3a2f34382d3438203d3e20323139343538.roa (hash: 9BAJ6MLsVJjXed08lJPBguxDXI0HTOPBT+HLg6cwLK4=) 5: 326130623a346530373a323930343a3a2f34372d3438203d3e20323139343538.roa (hash: KRlxFqHowZdaTNViCJhErb//DfzqvDoHewWZPqKtCkA=) 6: EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.crl (hash: I7JtoYAOGmxkiqc9P0H26tX9wCiR8QloxzbWqdOiUQw=) 7: 326130623a346530373a323931303a3a2f34382d3438203d3e20323139343538.roa (hash: 9GeXEaD9Ha5SPI5oBieu1S85PeA/oPrJ9T28WW3r65g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.crl rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 18:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:9f:03:ac:bb:ab:7d:e7:74:e1:88:9d:b4:ba:51:a3:fe:32:fa:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFB5DF076CDF062294B12C302E75D57EFCD7F7CE Validity Not Before: Sep 10 05:44:42 2026 GMT Not After : Sep 11 09:08:42 2026 GMT Subject: CN=54A447134716DD3B9A9EAEB5727D48C120EA120D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0e:9a:69:95:74:7c:d4:d0:b6:78:27:af:72: a9:11:03:8a:02:8f:82:4f:49:d2:73:34:11:d6:4b: 00:a8:e9:2d:20:62:cf:58:19:d0:08:93:61:56:bf: 3d:cd:c3:ed:96:6d:fd:b2:eb:6e:6a:b4:2e:43:fe: e9:12:bf:aa:74:be:38:77:6d:3b:23:ab:35:32:92: f7:ce:5b:0d:c7:28:ee:20:32:5b:36:ee:cf:81:dc: af:a9:3a:af:3d:d0:06:7f:a5:50:88:b3:a5:77:4a: 4c:76:e5:55:01:d2:da:9f:e7:a3:6b:b0:a3:10:66: fb:51:33:3f:a6:7f:12:e2:31:8f:fa:df:db:d0:49: 7b:11:c6:29:35:aa:ac:25:ac:c2:e3:a7:57:a3:41: 0a:aa:2b:aa:dd:1f:f3:91:44:c8:dc:ef:2a:6b:0a: f8:15:85:ac:8e:3a:65:9a:57:6a:b3:71:ef:3b:59: aa:f2:7c:d1:4f:8a:ef:2b:e2:58:43:62:c8:d4:dc: df:8c:bb:1b:4d:f2:26:7f:f4:bb:72:b2:92:24:41: 37:cd:9d:90:e9:bb:72:00:c6:d0:7b:5b:1a:dc:90: a6:37:83:d7:3b:60:ca:ba:a8:79:8a:12:b7:25:a8: 8c:2a:e3:8d:bd:98:66:3d:66:0c:f2:e3:46:4e:3e: 98:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A4:47:13:47:16:DD:3B:9A:9E:AE:B5:72:7D:48:C1:20:EA:12:0D X509v3 Authority Key Identifier: keyid:EF:B5:DF:07:6C:DF:06:22:94:B1:2C:30:2E:75:D5:7E:FC:D7:F7:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:49:fc:5a:d9:67:65:ea:ea:85:ce:a7:0a:03:fb:3d:94:a5: 75:1c:8b:2c:a1:a3:43:4d:fb:28:23:25:20:34:ea:37:8e:2e: a0:c8:ca:c5:9b:46:a0:6e:93:68:da:05:06:b6:4f:d9:dc:54: ad:73:51:cc:22:d3:0c:1a:6c:29:f1:2d:cc:63:11:36:73:6e: 62:2d:99:30:10:a9:e4:5b:a2:19:b4:c8:8e:c6:40:50:7b:e0: 4e:56:d3:50:a5:ac:7e:ec:e5:3c:88:4c:17:9d:12:9c:01:08: 7f:4c:76:71:e0:7d:a7:7e:5d:13:e9:fe:72:3a:ea:50:4b:26: 3a:e8:5e:af:4d:4d:91:0f:a6:86:b7:67:24:f4:5c:b6:7b:f3: 5a:bf:dc:f9:df:c3:66:3d:d0:6f:f9:22:4e:4b:42:ef:a7:c5: 5e:5e:0c:d6:93:ec:50:59:30:eb:6f:d5:a3:40:9a:93:45:7f: 9d:20:3c:0a:20:4b:73:3a:b8:75:d0:c2:f7:63:41:54:6d:4b: ff:c4:a1:2f:2f:39:0d:90:b1:5a:8b:26:cb:78:6c:af:ce:9d: c9:6c:57:f3:d1:b8:17:23:1b:79:b5:d5:68:70:ec:6b:93:6f: fe:0f:45:e0:ec:c0:2a:ab:0e:54:b2:47:62:b7:7e:49:b0:f5: 9a:33:53:21 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUU58DrLurfed04YidtLpRo/4y+ocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZCNURGMDc2Q0RGMDYyMjk0QjEyQzMwMkU3NUQ1N0VG Q0Q3RjdDRTAeFw0yNjA5MTAwNTQ0NDJaFw0yNjA5MTEwOTA4NDJaMDMxMTAvBgNV BAMTKDU0QTQ0NzEzNDcxNkREM0I5QTlFQUVCNTcyN0Q0OEMxMjBFQTEyMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfDppplXR81NC2eCevcqkRA4oC j4JPSdJzNBHWSwCo6S0gYs9YGdAIk2FWvz3Nw+2Wbf2y625qtC5D/ukSv6p0vjh3 bTsjqzUykvfOWw3HKO4gMls27s+B3K+pOq890AZ/pVCIs6V3Skx25VUB0tqf56Nr sKMQZvtRMz+mfxLiMY/639vQSXsRxik1qqwlrMLjp1ejQQqqK6rdH/ORRMjc7ypr CvgVhayOOmWaV2qzce87WaryfNFPiu8r4lhDYsjU3N+MuxtN8iZ/9LtyspIkQTfN nZDpu3IAxtB7WxrckKY3g9c7YMq6qHmKErclqIwq4429mGY9Zgzy40ZOPphXAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUVKRHE0cW3Tuanq61cn1IwSDqEg0wHwYDVR0j BBgwFoAU77XfB2zfBiKUsSwwLnXVfvzX984wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYxYjQxY2ItYTM3Zi00ZDkzLTg4NTYtNDA5MmFmYjIy YjE3LzEvRUZCNURGMDc2Q0RGMDYyMjk0QjEyQzMwMkU3NUQ1N0VGQ0Q3RjdDRS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRUZCNURGMDc2Q0RGMDYyMjk0QjEyQzMwMkU3NUQ1N0VGQ0Q3 RjdDRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjFiNDFjYi1h MzdmLTRkOTMtODg1Ni00MDkyYWZiMjJiMTcvMS9FRkI1REYwNzZDREYwNjIyOTRC MTJDMzAyRTc1RDU3RUZDRDdGN0NFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuUn8WtlnZerqhc6nCgP7 PZSldRyLLKGjQ037KCMlIDTqN44uoMjKxZtGoG6TaNoFBrZP2dxUrXNRzCLTDBps KfEtzGMRNnNuYi2ZMBCp5FuiGbTIjsZAUHvgTlbTUKWsfuzlPIhMF50SnAEIf0x2 ceB9p35dE+n+cjrqUEsmOuher01NkQ+mhrdnJPRctnvzWr/c+d/DZj3Qb/kiTktC 76fFXl4M1pPsUFkw62/Vo0Cak0V/nSA8CiBLczq4ddDC92NBVG1L/8ShLy85DZCx Wosmy3hsr86dyWxX89G4FyMbebXVaHDsa5Nv/g9F4OzAKqsOVLJHYrd+SbD1mjNT IQ== -----END CERTIFICATE-----Generated at Thu Sep 10 11:19:50 2026 by rpki-client