$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft File: EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft (raw, json) Hash identifier: v2XELuF7ba2IBw9jimETr8O881MgTKYztGG2idCBg7s= Subject key identifier: 52:79:A2:F2:56:78:38:CB:A1:AD:CF:89:52:07:01:3F:5B:99:81:B9 Authority key identifier: EF:B5:DF:07:6C:DF:06:22:94:B1:2C:30:2E:75:D5:7E:FC:D7:F7:CE Certificate issuer: /CN=EFB5DF076CDF062294B12C302E75D57EFCD7F7CE Certificate serial: 0E4E8BB284CCEC32F6B11C43E63A796546DAD977 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft Manifest number: A5 Signing time: Mon 26 Oct 2026 11:04:41 +0000 Manifest this update: Mon 26 Oct 2026 10:59:41 +0000 Manifest next update: Tue 27 Oct 2026 14:05:41 +0000 Files and hashes: 1: 326130623a346530373a323931303a3a2f34382d3438203d3e20323139343538.roa (hash: 9GeXEaD9Ha5SPI5oBieu1S85PeA/oPrJ9T28WW3r65g=) 2: 326130623a346530373a323930323a3a2f34382d3438203d3e20323139343538.roa (hash: 9BAJ6MLsVJjXed08lJPBguxDXI0HTOPBT+HLg6cwLK4=) 3: 326130623a346530373a323930663a3a2f34382d3438203d3e20323139343538.roa (hash: QdWdCYMQ1B0FZjXFRDlUNhMGI8TuC2nx+5W/1E5RsMo=) 4: 326130623a346530373a323930343a3a2f34372d3438203d3e20323139343538.roa (hash: KRlxFqHowZdaTNViCJhErb//DfzqvDoHewWZPqKtCkA=) 5: EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.crl (hash: awjgJC5v7EjZEpCGMY8AnFwVMPOjjKS+AA2cihAgyAQ=) 6: 326130623a346530373a323930653a3a2f34382d3438203d3e20323132383935.roa (hash: xS6W9vpcgkAQc0HRDNFnqDu1C6jkUC2PmU4eLlkKlbg=) 7: 326130623a346530373a323930303a3a2f34382d3438203d3e20323139343538.roa (hash: mDjQQXF1v1WMqSeOU6+LNJClsgR6yYGDAu/LFfF+GPM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.crl rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 14:05:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:4e:8b:b2:84:cc:ec:32:f6:b1:1c:43:e6:3a:79:65:46:da:d9:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFB5DF076CDF062294B12C302E75D57EFCD7F7CE Validity Not Before: Oct 26 10:59:41 2026 GMT Not After : Oct 27 14:05:41 2026 GMT Subject: CN=5279A2F2567838CBA1ADCF895207013F5B9981B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:42:01:ac:32:ad:ab:05:6a:90:d5:a4:c6:5c: 13:64:40:e2:9c:83:39:de:b6:4c:03:11:11:89:5b: d1:ec:31:69:09:e6:bc:0a:bc:d8:25:0e:0a:a2:a1: 67:19:17:b1:f7:55:95:5a:9c:bc:48:f9:d2:ac:61: df:ea:f7:60:3d:83:83:f4:f2:ed:93:45:00:61:cb: a8:b8:27:65:9b:43:98:1a:ca:81:84:fd:6b:b8:88: d4:cb:e7:45:a5:fc:e0:0d:36:cf:9f:2f:e8:c5:4d: 7a:5f:ed:51:ff:b9:64:e2:b4:2b:2d:2e:13:60:13: fd:54:fe:58:f4:c0:be:09:1b:15:b5:e6:25:53:f8: b7:6b:d0:41:ae:a7:bd:77:31:08:91:b0:05:a4:1b: fc:65:60:71:09:15:10:73:4d:84:9c:f1:eb:da:f4: 96:52:32:3b:02:e7:3e:7e:68:05:a8:cf:b2:1e:1d: e8:83:59:cf:49:96:8c:de:01:b7:be:81:14:7a:e3: 1f:d4:ef:f9:ec:5e:8f:be:35:b7:2c:cb:2e:06:d2: 8a:bd:d9:39:1b:b9:dc:5c:e6:ac:dd:8c:27:46:4d: 0f:87:6a:1f:bb:0a:b6:e1:9e:ff:d9:44:8e:56:37: 56:29:78:7e:0c:3d:aa:32:41:cf:28:b5:3b:fe:fa: ef:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:79:A2:F2:56:78:38:CB:A1:AD:CF:89:52:07:01:3F:5B:99:81:B9 X509v3 Authority Key Identifier: keyid:EF:B5:DF:07:6C:DF:06:22:94:B1:2C:30:2E:75:D5:7E:FC:D7:F7:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:1e:e4:46:8a:a8:f7:90:e1:38:32:1d:f6:0b:89:b0:40:ac: 21:87:e4:c1:43:1f:60:a1:40:7d:9f:16:9d:07:a6:a8:a4:a3: c8:c3:3c:46:e2:90:bd:8a:12:aa:ae:c8:ef:44:43:f9:20:b9: fd:59:11:bc:a3:62:50:09:ae:83:d7:42:76:0d:23:72:e9:f3: ff:11:0b:67:b5:5e:16:51:a9:c6:fe:70:4a:1d:93:53:e6:8d: 77:f9:5f:44:aa:2d:19:e1:03:a9:e9:8a:d0:55:b9:87:47:e0: 84:97:2e:24:87:b6:41:9b:27:74:36:39:d5:df:ec:1e:52:67: 77:01:f4:b6:76:bf:b0:6a:b0:51:7e:ef:44:3a:aa:64:35:7a: e0:e7:11:e3:fc:5a:42:eb:28:f4:54:a2:6e:89:58:94:78:42: b4:27:f1:60:d7:04:c9:82:24:ba:bd:e2:c4:b9:18:c3:8f:4d: 65:e8:7f:31:f0:b6:31:48:6e:a7:36:24:79:d5:a2:bc:55:b8: 33:6b:83:62:21:c0:a6:74:df:7a:6b:39:3b:66:f2:51:bc:7e: 49:8a:1d:34:2c:1f:fa:18:86:d9:5c:1d:07:4f:46:13:b9:01: fc:fa:bb:12:73:22:25:cc:d7:ff:a4:f8:3b:05:6b:af:8f:95: 2a:1b:31:18 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUDk6LsoTM7DL2sRxD5jp5ZUba2XcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZCNURGMDc2Q0RGMDYyMjk0QjEyQzMwMkU3NUQ1N0VG Q0Q3RjdDRTAeFw0yNjEwMjYxMDU5NDFaFw0yNjEwMjcxNDA1NDFaMDMxMTAvBgNV BAMTKDUyNzlBMkYyNTY3ODM4Q0JBMUFEQ0Y4OTUyMDcwMTNGNUI5OTgxQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwQgGsMq2rBWqQ1aTGXBNkQOKc gznetkwDERGJW9HsMWkJ5rwKvNglDgqioWcZF7H3VZVanLxI+dKsYd/q92A9g4P0 8u2TRQBhy6i4J2WbQ5gayoGE/Wu4iNTL50Wl/OANNs+fL+jFTXpf7VH/uWTitCst LhNgE/1U/lj0wL4JGxW15iVT+Ldr0EGup713MQiRsAWkG/xlYHEJFRBzTYSc8eva 9JZSMjsC5z5+aAWoz7IeHeiDWc9JlozeAbe+gRR64x/U7/nsXo++Nbcsyy4G0oq9 2Tkbudxc5qzdjCdGTQ+Hah+7Crbhnv/ZRI5WN1YpeH4MPaoyQc8otTv++u/bAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUUnmi8lZ4OMuhrc+JUgcBP1uZgbkwHwYDVR0j BBgwFoAU77XfB2zfBiKUsSwwLnXVfvzX984wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYxYjQxY2ItYTM3Zi00ZDkzLTg4NTYtNDA5MmFmYjIy YjE3LzEvRUZCNURGMDc2Q0RGMDYyMjk0QjEyQzMwMkU3NUQ1N0VGQ0Q3RjdDRS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRUZCNURGMDc2Q0RGMDYyMjk0QjEyQzMwMkU3NUQ1N0VGQ0Q3 RjdDRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjFiNDFjYi1h MzdmLTRkOTMtODg1Ni00MDkyYWZiMjJiMTcvMS9FRkI1REYwNzZDREYwNjIyOTRC MTJDMzAyRTc1RDU3RUZDRDdGN0NFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcx7kRoqo95DhODId9guJ sECsIYfkwUMfYKFAfZ8WnQemqKSjyMM8RuKQvYoSqq7I70RD+SC5/VkRvKNiUAmu g9dCdg0jcunz/xELZ7VeFlGpxv5wSh2TU+aNd/lfRKotGeEDqemK0FW5h0fghJcu JIe2QZsndDY51d/sHlJndwH0tna/sGqwUX7vRDqqZDV64OcR4/xaQuso9FSibolY lHhCtCfxYNcEyYIkur3ixLkYw49NZeh/MfC2MUhupzYkedWivFW4M2uDYiHApnTf ems5O2byUbx+SYodNCwf+hiG2VwdB09GE7kB/Pq7EnMiJczX/6T4OwVrr4+VKhsx GA== -----END CERTIFICATE-----Generated at Tue Oct 27 06:01:10 2026 by rpki-client