$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft File: EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft (raw, json) Hash identifier: 2LyxcuaxpKYWFgxabrD9Ti6FH5QZ2dAniA6OZItKBc0= Subject key identifier: 1C:A9:08:76:28:1B:B1:9C:1E:01:12:91:D0:42:84:16:4E:2A:8C:95 Authority key identifier: EF:B5:DF:07:6C:DF:06:22:94:B1:2C:30:2E:75:D5:7E:FC:D7:F7:CE Certificate issuer: /CN=EFB5DF076CDF062294B12C302E75D57EFCD7F7CE Certificate serial: 59EE571552305D4C77AED97513D15E9DED003EF7 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft Manifest number: 22 Signing time: Tue 21 Jul 2026 13:38:12 +0000 Manifest this update: Tue 21 Jul 2026 13:33:12 +0000 Manifest next update: Wed 22 Jul 2026 14:37:12 +0000 Files and hashes: 1: 326130623a346530373a323930663a3a2f34382d3438203d3e20323139343538.roa (hash: QdWdCYMQ1B0FZjXFRDlUNhMGI8TuC2nx+5W/1E5RsMo=) 2: 326130623a346530373a323930303a3a2f34382d3438203d3e20323139343538.roa (hash: mDjQQXF1v1WMqSeOU6+LNJClsgR6yYGDAu/LFfF+GPM=) 3: 326130623a346530373a323930343a3a2f34372d3438203d3e20323139343538.roa (hash: KRlxFqHowZdaTNViCJhErb//DfzqvDoHewWZPqKtCkA=) 4: EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.crl (hash: DMRSWSXbxEnXgZ6XoJVbSeZME1I2KmyGGyYvsflVSsY=) 5: 326130623a346530373a323931303a3a2f34382d3438203d3e20323139343538.roa (hash: 9GeXEaD9Ha5SPI5oBieu1S85PeA/oPrJ9T28WW3r65g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.crl rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:ee:57:15:52:30:5d:4c:77:ae:d9:75:13:d1:5e:9d:ed:00:3e:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFB5DF076CDF062294B12C302E75D57EFCD7F7CE Validity Not Before: Jul 21 13:33:12 2026 GMT Not After : Jul 22 14:37:12 2026 GMT Subject: CN=1CA90876281BB19C1E011291D04284164E2A8C95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:83:bf:a7:63:13:db:bc:4c:2c:5b:6f:93:b8: da:ea:1d:ed:c1:ca:bb:1d:ca:8b:f3:5a:6e:f9:6e: 3c:5e:37:31:90:3a:06:e9:57:a9:ee:00:54:74:7d: ac:a3:66:54:b2:c6:6f:e0:96:26:fc:53:68:18:85: 8a:b2:5d:c7:b8:d6:f8:17:d0:a7:7b:e1:3c:a0:db: af:76:79:0d:3e:20:8d:f2:f3:5e:94:10:fe:c3:f2: bb:13:f8:93:49:60:8e:00:b8:ea:b5:92:ea:6d:f5: 63:da:26:25:67:69:82:97:fa:6c:61:97:0e:37:f4: be:6e:de:76:5a:1d:8d:52:b7:1b:05:49:f6:e9:c3: 1f:0c:9b:64:d2:a5:64:85:43:f9:0e:1f:25:0e:e8: 8d:a7:cf:95:dc:ca:39:9a:33:7e:27:4c:35:53:1a: 4f:f3:aa:a7:74:21:a8:21:97:15:e9:9a:2a:c2:e2: 32:20:1c:5f:7d:2a:42:74:ef:86:0e:a2:47:10:b4: 22:06:ea:b9:38:d6:18:c1:c3:eb:90:0e:d3:b1:c9: a7:64:7a:5f:fe:8a:0e:77:17:0e:d8:5f:06:2e:98: b1:08:68:cd:4d:ce:0e:6d:e6:56:bb:b3:61:e7:0a: 74:3a:d3:3f:0d:06:2b:86:c9:5f:92:be:8b:9a:87: 43:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A9:08:76:28:1B:B1:9C:1E:01:12:91:D0:42:84:16:4E:2A:8C:95 X509v3 Authority Key Identifier: keyid:EF:B5:DF:07:6C:DF:06:22:94:B1:2C:30:2E:75:D5:7E:FC:D7:F7:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:2d:40:b4:18:ba:dd:e9:cf:3d:18:05:fa:c6:b2:a4:50:9b: 94:f7:13:36:da:0f:b5:d3:57:7f:8a:d6:fe:81:46:98:e2:4a: 0b:40:a5:c4:05:8a:6c:23:01:78:89:53:cb:4d:8e:88:7d:aa: 66:0a:05:60:c0:c4:ce:20:b8:aa:2f:86:66:35:2c:63:7f:ed: a5:88:1a:d3:e8:c9:91:97:a2:36:1b:e5:09:07:50:2a:05:41: 36:89:23:d5:d1:71:bf:cb:80:2f:42:8b:e7:83:2a:5e:a4:c1: 0f:11:c3:5b:96:07:1c:dd:d9:c1:17:47:59:2d:a0:0d:ae:34: 0a:8b:36:a4:a6:04:42:6a:28:4b:1d:89:1a:ef:1f:19:f3:96: b3:c8:33:9d:e3:10:82:03:e4:55:21:db:54:b0:01:9d:5f:91: bc:70:e5:c0:cf:0b:17:7d:c7:2c:88:b5:d6:47:76:33:b7:ca: 10:41:e5:ca:7f:2a:5c:b8:41:3f:cd:af:3f:7f:18:48:b6:1b: e2:e7:60:e6:42:4a:97:ff:50:79:d4:35:13:99:f7:f4:23:a6: 89:8d:b8:87:7e:95:d6:72:e7:24:12:c7:87:d9:72:e0:15:62: f3:f0:5e:63:1c:01:ef:0d:aa:0e:15:5c:81:67:d1:bf:21:02: a2:83:59:44 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUWe5XFVIwXUx3rtl1E9Fene0APvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZCNURGMDc2Q0RGMDYyMjk0QjEyQzMwMkU3NUQ1N0VG Q0Q3RjdDRTAeFw0yNjA3MjExMzMzMTJaFw0yNjA3MjIxNDM3MTJaMDMxMTAvBgNV BAMTKDFDQTkwODc2MjgxQkIxOUMxRTAxMTI5MUQwNDI4NDE2NEUyQThDOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5g7+nYxPbvEwsW2+TuNrqHe3B yrsdyovzWm75bjxeNzGQOgbpV6nuAFR0fayjZlSyxm/glib8U2gYhYqyXce41vgX 0Kd74Tyg2692eQ0+II3y816UEP7D8rsT+JNJYI4AuOq1kupt9WPaJiVnaYKX+mxh lw439L5u3nZaHY1StxsFSfbpwx8Mm2TSpWSFQ/kOHyUO6I2nz5XcyjmaM34nTDVT Gk/zqqd0IaghlxXpmirC4jIgHF99KkJ074YOokcQtCIG6rk41hjBw+uQDtOxyadk el/+ig53Fw7YXwYumLEIaM1Nzg5t5la7s2HnCnQ60z8NBiuGyV+Svouah0OFAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUHKkIdigbsZweARKR0EKEFk4qjJUwHwYDVR0j BBgwFoAU77XfB2zfBiKUsSwwLnXVfvzX984wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYxYjQxY2ItYTM3Zi00ZDkzLTg4NTYtNDA5MmFmYjIy YjE3LzEvRUZCNURGMDc2Q0RGMDYyMjk0QjEyQzMwMkU3NUQ1N0VGQ0Q3RjdDRS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRUZCNURGMDc2Q0RGMDYyMjk0QjEyQzMwMkU3NUQ1N0VGQ0Q3 RjdDRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjFiNDFjYi1h MzdmLTRkOTMtODg1Ni00MDkyYWZiMjJiMTcvMS9FRkI1REYwNzZDREYwNjIyOTRC MTJDMzAyRTc1RDU3RUZDRDdGN0NFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcy1AtBi63enPPRgF+say pFCblPcTNtoPtdNXf4rW/oFGmOJKC0ClxAWKbCMBeIlTy02OiH2qZgoFYMDEziC4 qi+GZjUsY3/tpYga0+jJkZeiNhvlCQdQKgVBNokj1dFxv8uAL0KL54MqXqTBDxHD W5YHHN3ZwRdHWS2gDa40Cos2pKYEQmooSx2JGu8fGfOWs8gzneMQggPkVSHbVLAB nV+RvHDlwM8LF33HLIi11kd2M7fKEEHlyn8qXLhBP82vP38YSLYb4udg5kJKl/9Q edQ1E5n39COmiY24h36V1nLnJBLHh9ly4BVi8/BeYxwB7w2qDhVcgWfRvyECooNZ RA== -----END CERTIFICATE-----Generated at Tue Jul 21 22:56:10 2026 by rpki-client