$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft File: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft (raw, json) Hash identifier: YwJ1zG/bZvPQnZA72jvPCti19CnP6ug33JSArj2GoB8= Subject key identifier: EC:53:53:D5:43:FC:13:5F:38:A6:99:A1:68:57:1E:46:8E:23:D7:E2 Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Certificate serial: 1A6B8A9B215659BFC30A1CE8DD487BB90F2060EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft Manifest number: 0564 Signing time: Tue 05 May 2026 08:10:19 +0000 Manifest this update: Tue 05 May 2026 08:05:19 +0000 Manifest next update: Wed 06 May 2026 11:39:19 +0000 Files and hashes: 1: 3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa (hash: QWu7fHTZ3PYuiSQam7CYDAJC5NNcXBc6g5huH6iiI3k=) 2: 34362e3130322e3233332e302f32342d3234203d3e203233383635.roa (hash: e+SnYwDfi/1yFie63JthDdkoXVxOgCTXFxhh6sC9If8=) 3: 37372e38312e3133372e302f32342d3234203d3e20333939363431.roa (hash: xL9s9lGr6Y1GcoWPNRfoiIg5P1LyMl92tRndWKMRxvY=) 4: 3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa (hash: SUmtopgHH8Nww5p/xP0ODKmemVjaFc93EIAThLWzp7U=) 5: 3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa (hash: miGCXloG7luQuuhAJwRZ+kv5aIjNiE2JcKseZN1V68A=) 6: 39332e3131332e32352e302f32342d3234203d3e20323134323039.roa (hash: JoDR/IGOmrYGEwu1+N5VZtYwQlvGeImnksk34tLzkIU=) 7: 37372e38312e3133382e302f32342d3234203d3e203136323736.roa (hash: QSH/lbFqFfB0kjPH8NXF1ssxXFJMA3tQTCmwcMlSfAQ=) 8: 38392e34322e3131302e302f32342d3234203d3e203631333137.roa (hash: VsyHwXGnPa9jTtnErp0xUSN9uxae8b2L7otiSzP7S2M=) 9: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl (hash: 3P/bxNSMMUXjYLvPO/QYw/zQJliazSbKCezFYZImWII=) 10: 39332e3131332e3231322e302f32342d3234203d3e203631333137.roa (hash: Mffmj9tigk0AvK8qUYEb5eCtUKaC20yQi7QyJq/JmDA=) 11: 38392e34322e3131312e302f32342d3234203d3e203239383032.roa (hash: L8E/k5WG1P2zSzdmF8rJ5boiZXvKF22tBofIgUqK42s=) 12: 34362e3130322e3233322e302f32342d3234203d3e203231383539.roa (hash: xmss+X7N7YEJYzsofqDqdmVc6hQlkz4fI2F5jzOV+w0=) 13: 39332e3131332e3231322e302f32342d3234203d3e203239383032.roa (hash: KOkJXzM4wXOGsvFs/zh/ieHh7T/PcK/t6m2YsCzBo+I=) 14: 38392e34322e3131312e302f32342d3234203d3e203631333137.roa (hash: T+9QQX64dOYanRzHKI9rhWnUyaZt9GgRQXrvhvIBrgs=) 15: 38392e34322e3131302e302f32342d3234203d3e203239383032.roa (hash: Chbmines5hwhR4F+JuY4APAYPbeg1c32lDZMdiR/MqQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 May 2026 11:39:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:6b:8a:9b:21:56:59:bf:c3:0a:1c:e8:dd:48:7b:b9:0f:20:60:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Validity Not Before: May 5 08:05:19 2026 GMT Not After : May 6 11:39:19 2026 GMT Subject: CN=EC5353D543FC135F38A699A168571E468E23D7E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:56:25:ff:90:46:69:4a:4e:d9:8b:fd:41:80: 4c:44:64:14:f9:82:76:35:95:f9:6d:5d:fb:65:73: 17:2c:fe:43:d5:25:3f:77:59:7c:fa:13:9d:8e:27: 34:be:8f:52:e2:b5:e3:13:a1:98:03:1c:7d:77:b6: 53:e6:37:a3:37:74:57:1f:bc:cc:7f:03:ec:95:8c: 7b:61:39:2e:9e:78:ef:bf:50:74:8d:e3:a1:de:37: e4:fa:fb:ce:74:ad:21:04:85:e9:89:29:b0:94:80: 94:d2:d3:7c:5e:ee:18:17:8b:72:ed:03:41:ac:a8: ea:5d:35:f4:24:16:4b:fb:9f:94:d1:bf:60:3b:af: c5:b3:24:1c:b7:47:ac:7a:62:25:62:94:c0:33:ca: dd:e0:cd:18:ff:5d:59:a7:64:d9:5b:ca:84:27:72: 65:4f:18:50:8d:6f:57:6d:9b:3d:c2:df:9c:92:46: 70:68:9d:2a:ee:97:1e:6d:83:7f:f6:b8:eb:37:78: e7:5c:48:87:c4:e5:87:e4:df:a7:d9:f1:9f:ec:53: b3:74:64:d2:25:eb:bc:11:53:87:7e:b7:26:ff:99: b7:14:8a:2c:a0:68:e0:ad:e7:f4:09:45:18:55:17: ef:ef:e2:72:65:70:84:0d:07:19:ba:8e:52:5a:ac: 12:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:53:53:D5:43:FC:13:5F:38:A6:99:A1:68:57:1E:46:8E:23:D7:E2 X509v3 Authority Key Identifier: keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:7d:82:50:07:d3:af:7b:24:b1:18:7d:2d:70:8a:71:51:ea: c1:e5:af:5d:ce:b0:d3:1e:09:e4:d5:40:2a:c9:6e:bf:21:47: 7a:60:61:60:34:6b:64:fe:18:31:97:65:dc:db:d7:a8:db:89: 84:5e:48:6f:88:dc:81:7c:9b:e9:db:41:89:34:ba:50:a9:6c: 6a:52:e6:14:e1:ee:16:eb:f0:de:6f:52:37:48:c4:e9:10:84: 83:99:d9:52:ab:f1:d8:9f:73:0e:b4:4c:91:9b:13:56:5e:0c: 8a:a8:db:1e:df:12:60:d1:8a:d3:28:9d:42:ba:64:0f:68:96: 09:ae:cc:76:4e:fa:2f:c6:81:46:ce:d3:f8:b5:62:9e:38:ad: 7d:03:cf:54:b1:53:7c:d4:f1:98:63:31:47:9a:58:95:41:92: 54:c1:ef:bc:18:71:f4:81:9a:d5:6c:2f:91:56:4c:61:12:ac: 32:da:31:78:5a:7a:ae:ce:d0:b5:c6:e6:25:31:06:1c:c5:ac: 88:bd:9d:e4:08:2b:5c:76:57:68:3e:8a:34:32:36:a8:93:cb: ce:d9:3a:ec:66:60:b0:46:11:e7:c6:cc:2d:5a:b6:a6:60:c2: 6d:13:2e:ab:a5:cd:6f:69:93:3a:63:16:03:f8:31:89:1b:e1: 6c:34:a9:f8 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUGmuKmyFWWb/DChzo3Uh7uQ8gYO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi ZmEyY2NhNDAeFw0yNjA1MDUwODA1MTlaFw0yNjA1MDYxMTM5MTlaMDMxMTAvBgNV BAMTKEVDNTM1M0Q1NDNGQzEzNUYzOEE2OTlBMTY4NTcxRTQ2OEUyM0Q3RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrViX/kEZpSk7Zi/1BgExEZBT5 gnY1lfltXftlcxcs/kPVJT93WXz6E52OJzS+j1LiteMToZgDHH13tlPmN6M3dFcf vMx/A+yVjHthOS6eeO+/UHSN46HeN+T6+850rSEEhemJKbCUgJTS03xe7hgXi3Lt A0GsqOpdNfQkFkv7n5TRv2A7r8WzJBy3R6x6YiVilMAzyt3gzRj/XVmnZNlbyoQn cmVPGFCNb1dtmz3C35ySRnBonSrulx5tg3/2uOs3eOdcSIfE5Yfk36fZ8Z/sU7N0 ZNIl67wRU4d+tyb/mbcUiiygaOCt5/QJRRhVF+/v4nJlcIQNBxm6jlJarBL7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU7FNT1UP8E184ppmhaFceRo4j1+IwHwYDVR0j BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt aXpLUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYTBkZTk3Zi03 ZWU4LTRjZTAtYjA0NS1lZmFjOGMyNDNjNzkvMC9FRDlFREIyQTE1ODcxNzg1RkJB RTM4RTIzQzM4ODIwREJGQTJDQ0E0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWX2CUAfTr3sksRh9LXCK cVHqweWvXc6w0x4J5NVAKsluvyFHemBhYDRrZP4YMZdl3NvXqNuJhF5Ib4jcgXyb 6dtBiTS6UKlsalLmFOHuFuvw3m9SN0jE6RCEg5nZUqvx2J9zDrRMkZsTVl4Miqjb Ht8SYNGK0yidQrpkD2iWCa7Mdk76L8aBRs7T+LVinjitfQPPVLFTfNTxmGMxR5pY lUGSVMHvvBhx9IGa1WwvkVZMYRKsMtoxeFp6rs7QtcbmJTEGHMWsiL2d5AgrXHZX aD6KNDI2qJPLztk67GZgsEYR58bMLVq2pmDCbRMuq6XNb2mTOmMWA/gxiRvhbDSp +A== -----END CERTIFICATE-----Generated at Wed May 6 03:26:39 2026 by rpki-client