$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft File: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft (raw, json) Hash identifier: OjMsK3Uuf1vSgFGlc3geTIHPIIrCqUBuR3kJSwXxxZI= Subject key identifier: 93:CB:A2:D2:FB:D2:A9:67:AD:19:A0:A8:51:60:AD:90:B2:06:FE:86 Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Certificate serial: 30D5A51B0B87895BCC7C5CCB7B3BA4C4018A8B68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft Manifest number: 045F Signing time: Sat 25 Oct 2025 02:49:07 +0000 Manifest this update: Sat 25 Oct 2025 02:44:07 +0000 Manifest next update: Sun 26 Oct 2025 05:26:07 +0000 Files and hashes: 1: 37372e38312e3133372e302f32342d3234203d3e20333939363431.roa (hash: xL9s9lGr6Y1GcoWPNRfoiIg5P1LyMl92tRndWKMRxvY=) 2: 38392e34322e3131312e302f32342d3234203d3e203631333137.roa (hash: T+9QQX64dOYanRzHKI9rhWnUyaZt9GgRQXrvhvIBrgs=) 3: 34362e3130322e3233322e302f32342d3234203d3e203231383539.roa (hash: xmss+X7N7YEJYzsofqDqdmVc6hQlkz4fI2F5jzOV+w0=) 4: 37372e38312e3133382e302f32342d3234203d3e203136323736.roa (hash: QSH/lbFqFfB0kjPH8NXF1ssxXFJMA3tQTCmwcMlSfAQ=) 5: 3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa (hash: g8GfxZyUsq5sAHB2Ct+7Z9GS7IIVHVNG2gaO8plmjSA=) 6: 3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa (hash: OZBNVOvtp3V7O1L8kF6JcTp/niAHFDMwWI3RV/AoyZY=) 7: 39332e3131332e3231322e302f32342d3234203d3e203631333137.roa (hash: Mffmj9tigk0AvK8qUYEb5eCtUKaC20yQi7QyJq/JmDA=) 8: 38392e34322e3131302e302f32342d3234203d3e203631333137.roa (hash: VsyHwXGnPa9jTtnErp0xUSN9uxae8b2L7otiSzP7S2M=) 9: 3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa (hash: nmhaoLhqUBAnDccEuteaqmwjmYCIqjMWJmqWnwMVbc8=) 10: 39332e3131332e32352e302f32342d3234203d3e20323134323039.roa (hash: JoDR/IGOmrYGEwu1+N5VZtYwQlvGeImnksk34tLzkIU=) 11: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl (hash: fVYdF65Cf0FTUTk29w0scOABs0TyUYt5wByTpFH1veo=) 12: 34362e3130322e3233332e302f32342d3234203d3e203233383635.roa (hash: e+SnYwDfi/1yFie63JthDdkoXVxOgCTXFxhh6sC9If8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 05:26:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:d5:a5:1b:0b:87:89:5b:cc:7c:5c:cb:7b:3b:a4:c4:01:8a:8b:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Validity Not Before: Oct 25 02:44:07 2025 GMT Not After : Oct 26 05:26:07 2025 GMT Subject: CN=93CBA2D2FBD2A967AD19A0A85160AD90B206FE86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fd:13:86:02:75:cf:47:89:c4:54:3d:9f:3d: 44:b8:3c:55:8e:08:3b:c3:13:8f:06:20:db:c1:22: f3:4f:ad:11:f1:31:16:c0:16:48:3a:04:e7:65:af: 0f:5d:ca:e5:d5:6c:6d:c0:57:d9:69:df:67:6c:a3: 7d:66:2c:38:ed:5d:c9:dd:4d:0d:29:a3:27:82:39: 1f:17:a6:f2:eb:cc:1a:c7:d1:f4:34:e7:be:36:c9: 86:67:21:74:8f:34:31:88:de:9a:23:65:48:49:35: e5:44:c6:2f:4c:f2:1a:68:c4:8d:de:44:65:fa:57: 47:a0:62:ef:4e:91:b6:41:70:3b:79:8f:b5:9e:36: 0e:44:57:8f:ae:cf:b7:68:b8:a2:35:8b:c9:5e:9b: 42:b9:88:30:d8:07:a7:f8:8f:e5:72:95:b1:8d:5e: 43:0b:cc:49:d6:dc:cd:66:25:ad:a5:04:a8:c3:67: ba:c4:b3:6f:49:6d:b0:9a:ce:4c:4a:a9:84:4e:07: 91:34:1c:7b:7c:05:60:af:35:99:e2:5b:cf:33:a5: 6d:1d:cf:1c:ba:c2:15:4b:8a:e5:7a:36:f9:36:52: 40:2d:4d:d6:d3:22:38:a6:9c:d3:05:3d:3f:c5:23: 6c:5f:46:e9:46:da:40:fc:37:71:ee:ed:18:43:fb: 80:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:CB:A2:D2:FB:D2:A9:67:AD:19:A0:A8:51:60:AD:90:B2:06:FE:86 X509v3 Authority Key Identifier: keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f3:8a:99:5f:a4:a1:2a:53:48:49:e5:e9:dc:a4:01:06:82: ba:a8:f8:71:f1:d7:02:d4:3d:3f:09:d7:66:46:c2:86:34:82: 12:21:66:22:ab:20:2a:bd:39:7c:b7:88:b1:67:26:76:6d:f9: 6e:a1:a5:e4:f7:f8:af:18:e6:b6:cd:44:60:be:23:ee:8e:34: 26:39:ee:4b:a8:98:55:83:42:8b:d6:2d:71:4c:61:30:5c:4e: ac:7f:ba:79:fc:f6:d9:82:19:3d:8a:2a:f7:55:b8:c3:5e:bd: f2:7b:8e:00:6d:1b:de:ea:81:4c:f7:ff:ff:3e:6f:67:a5:fa: e4:65:0d:59:0e:d5:1d:cb:ea:2d:eb:58:44:e6:94:79:03:02: 6d:32:f2:b0:a3:f0:22:f9:9c:9a:21:45:3d:4f:b4:62:e6:7f: 3c:5c:df:d5:5a:79:97:19:15:92:c5:4a:7a:b4:83:c4:1a:6d: cb:d5:af:34:16:3b:7a:65:10:61:16:ef:07:27:8c:73:db:41: 5c:ce:a9:64:8f:56:3b:17:2a:f0:d4:a7:62:6f:60:f7:c1:5a: 82:54:80:2b:f2:96:4e:b0:69:c1:7c:e4:bf:ec:ef:1a:fd:2d: 60:51:bf:80:bc:15:35:f5:44:0b:59:bc:a4:50:b7:62:3c:ca: 63:77:46:5b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUMNWlGwuHiVvMfFzLezukxAGKi2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi ZmEyY2NhNDAeFw0yNTEwMjUwMjQ0MDdaFw0yNTEwMjYwNTI2MDdaMDMxMTAvBgNV BAMTKDkzQ0JBMkQyRkJEMkE5NjdBRDE5QTBBODUxNjBBRDkwQjIwNkZFODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg/ROGAnXPR4nEVD2fPUS4PFWO CDvDE48GINvBIvNPrRHxMRbAFkg6BOdlrw9dyuXVbG3AV9lp32dso31mLDjtXcnd TQ0poyeCOR8XpvLrzBrH0fQ05742yYZnIXSPNDGI3pojZUhJNeVExi9M8hpoxI3e RGX6V0egYu9OkbZBcDt5j7WeNg5EV4+uz7douKI1i8lem0K5iDDYB6f4j+VylbGN XkMLzEnW3M1mJa2lBKjDZ7rEs29JbbCazkxKqYROB5E0HHt8BWCvNZniW88zpW0d zxy6whVLiuV6Nvk2UkAtTdbTIjimnNMFPT/FI2xfRulG2kD8N3Hu7RhD+4DVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUk8ui0vvSqWetGaCoUWCtkLIG/oYwHwYDVR0j BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt aXpLUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYTBkZTk3Zi03 ZWU4LTRjZTAtYjA0NS1lZmFjOGMyNDNjNzkvMC9FRDlFREIyQTE1ODcxNzg1RkJB RTM4RTIzQzM4ODIwREJGQTJDQ0E0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGvOKmV+koSpTSEnl6dyk AQaCuqj4cfHXAtQ9PwnXZkbChjSCEiFmIqsgKr05fLeIsWcmdm35bqGl5Pf4rxjm ts1EYL4j7o40JjnuS6iYVYNCi9YtcUxhMFxOrH+6efz22YIZPYoq91W4w1698nuO AG0b3uqBTPf//z5vZ6X65GUNWQ7VHcvqLetYROaUeQMCbTLysKPwIvmcmiFFPU+0 YuZ/PFzf1Vp5lxkVksVKerSDxBpty9WvNBY7emUQYRbvByeMc9tBXM6pZI9WOxcq 8NSnYm9g98FaglSAK/KWTrBpwXzkv+zvGv0tYFG/gLwVNfVEC1m8pFC3YjzKY3dG Ww== -----END CERTIFICATE-----Generated at Sat Oct 25 22:10:12 2025 by rpki-client