$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft File: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft (raw, json) Hash identifier: se7H5EvFKEH83Wi1KqBHYHv5I37ozj1fYkOW+pONxxs= Subject key identifier: BB:06:1D:16:5A:94:C1:B0:31:D8:47:8F:45:E7:D5:70:F0:8A:0B:30 Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Certificate serial: 2ED4964E4EA205266862C9A6271E7F3EA4DA7AF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft Manifest number: 0422 Signing time: Tue 09 Sep 2025 08:49:10 +0000 Manifest this update: Tue 09 Sep 2025 08:44:10 +0000 Manifest next update: Wed 10 Sep 2025 11:57:10 +0000 Files and hashes: 1: 39332e3131332e32352e302f32342d3234203d3e20323134323039.roa (hash: JoDR/IGOmrYGEwu1+N5VZtYwQlvGeImnksk34tLzkIU=) 2: 3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa (hash: OZBNVOvtp3V7O1L8kF6JcTp/niAHFDMwWI3RV/AoyZY=) 3: 3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa (hash: nmhaoLhqUBAnDccEuteaqmwjmYCIqjMWJmqWnwMVbc8=) 4: 38392e34322e3131302e302f32342d3234203d3e203631333137.roa (hash: VsyHwXGnPa9jTtnErp0xUSN9uxae8b2L7otiSzP7S2M=) 5: 37372e38312e3133372e302f32342d3234203d3e20333939363431.roa (hash: xL9s9lGr6Y1GcoWPNRfoiIg5P1LyMl92tRndWKMRxvY=) 6: 3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa (hash: g8GfxZyUsq5sAHB2Ct+7Z9GS7IIVHVNG2gaO8plmjSA=) 7: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl (hash: Aqpyyx7pdZdBWsqEML+3OwcYk0sSrwEzrwZ6y4FvuwE=) 8: 34362e3130322e3233332e302f32342d3234203d3e203233383635.roa (hash: YyMBgTPVms4MPnbkUVc7TpGwl6ukB7kzc/uAePl3SRA=) 9: 34362e3130322e3233322e302f32342d3234203d3e203231383539.roa (hash: yDRyc1h8O+mXAEgAFoITsNpFI2VU0vygznR0PJDNh0M=) 10: 37372e38312e3133382e302f32342d3234203d3e203136323736.roa (hash: QSH/lbFqFfB0kjPH8NXF1ssxXFJMA3tQTCmwcMlSfAQ=) 11: 38392e34322e3131312e302f32342d3234203d3e203631333137.roa (hash: T+9QQX64dOYanRzHKI9rhWnUyaZt9GgRQXrvhvIBrgs=) 12: 39332e3131332e3231322e302f32342d3234203d3e203631333137.roa (hash: Mffmj9tigk0AvK8qUYEb5eCtUKaC20yQi7QyJq/JmDA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 08:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:d4:96:4e:4e:a2:05:26:68:62:c9:a6:27:1e:7f:3e:a4:da:7a:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Validity Not Before: Sep 9 08:44:10 2025 GMT Not After : Sep 10 11:57:10 2025 GMT Subject: CN=BB061D165A94C1B031D8478F45E7D570F08A0B30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1e:a9:48:f0:ea:b5:d7:0c:d8:5a:3f:13:51: 59:19:c6:8a:86:82:57:1f:4e:8f:12:8e:39:4f:ac: 52:f4:1b:87:dc:d7:4d:1a:9e:5a:49:a6:d9:a1:9e: 98:d5:cb:55:74:e4:83:44:ce:2d:73:f3:bc:d9:ba: 4f:e0:c7:19:c6:ad:e5:06:aa:19:d3:52:49:f9:28: b5:13:6e:1c:17:56:c3:76:d0:e8:00:d5:81:b3:00: 04:31:a6:92:98:98:30:9a:ac:d8:ef:7e:71:b2:e6: 5f:4e:85:63:15:f5:b8:b2:b6:53:22:90:95:7a:68: 31:7b:7d:27:e4:b6:b2:03:5f:6a:09:a7:ab:7e:98: df:93:a8:4f:29:e4:1c:55:ab:3f:d6:d8:84:d0:cf: b1:a2:77:b8:e2:fc:4f:1a:05:5c:b4:5a:a8:3e:28: 12:ba:2f:03:90:14:2f:f6:0c:75:03:11:ae:f3:80: 89:dc:85:55:c5:fb:f9:aa:dc:0d:0d:79:e3:62:dc: 73:49:32:db:af:c8:8d:a2:1d:2d:32:3f:60:c7:8e: 17:e3:57:df:99:b9:be:1f:12:e1:e1:66:c2:2b:ff: e5:d8:40:86:8a:65:56:e9:e4:67:29:5c:e7:03:d7: f6:89:37:4c:bd:8a:35:2c:7f:c1:c9:b4:42:9c:a9: cb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:06:1D:16:5A:94:C1:B0:31:D8:47:8F:45:E7:D5:70:F0:8A:0B:30 X509v3 Authority Key Identifier: keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:90:8a:54:fa:39:5f:6b:ca:62:d0:88:4a:01:1a:ec:53:66: e0:87:dd:99:6d:e7:91:4a:b4:99:4d:f5:ab:c8:7b:f6:27:1b: 50:1f:e8:2c:1c:6e:93:ad:3d:ee:21:01:95:e6:25:06:10:e5: 7e:19:47:ad:5e:42:93:2f:e8:54:e8:22:fd:53:b7:65:d4:5f: 8f:22:ba:ae:32:1e:6a:f0:3f:2b:07:eb:e0:9d:0c:a5:d4:0e: fe:6a:1b:0f:21:99:fb:90:c9:2b:bc:06:94:3a:70:fa:57:6a: 55:5d:e5:e4:d8:8b:1a:52:91:22:22:77:93:4a:fb:67:8f:71: 6a:53:ed:9d:8d:c0:7b:c2:09:80:0a:c1:b2:35:c7:62:26:ad: c0:c6:59:37:6c:15:77:03:35:f4:85:31:5c:cc:5b:df:80:fd: ac:c4:8a:43:2d:5b:fe:02:ea:69:02:1d:98:49:2a:0c:08:88: 43:98:f0:53:b0:46:95:8e:32:ca:4d:17:b5:13:11:c6:c8:18: b3:27:b5:31:79:e4:8b:fe:67:66:7c:fd:21:dd:f7:fa:3b:1a: 29:31:40:44:ce:b5:1c:86:6e:ae:2f:00:86:59:78:2a:cf:df: 8a:2c:d8:bf:4f:ea:42:7c:8d:6b:84:c6:99:23:91:7c:27:7e: 68:61:0e:fe -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULtSWTk6iBSZoYsmmJx5/PqTaevUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi ZmEyY2NhNDAeFw0yNTA5MDkwODQ0MTBaFw0yNTA5MTAxMTU3MTBaMDMxMTAvBgNV BAMTKEJCMDYxRDE2NUE5NEMxQjAzMUQ4NDc4RjQ1RTdENTcwRjA4QTBCMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpHqlI8Oq11wzYWj8TUVkZxoqG glcfTo8SjjlPrFL0G4fc100anlpJptmhnpjVy1V05INEzi1z87zZuk/gxxnGreUG qhnTUkn5KLUTbhwXVsN20OgA1YGzAAQxppKYmDCarNjvfnGy5l9OhWMV9biytlMi kJV6aDF7fSfktrIDX2oJp6t+mN+TqE8p5BxVqz/W2ITQz7Gid7ji/E8aBVy0Wqg+ KBK6LwOQFC/2DHUDEa7zgInchVXF+/mq3A0NeeNi3HNJMtuvyI2iHS0yP2DHjhfj V9+Zub4fEuHhZsIr/+XYQIaKZVbp5GcpXOcD1/aJN0y9ijUsf8HJtEKcqcvDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUuwYdFlqUwbAx2EePRefVcPCKCzAwHwYDVR0j BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt aXpLUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYTBkZTk3Zi03 ZWU4LTRjZTAtYjA0NS1lZmFjOGMyNDNjNzkvMC9FRDlFREIyQTE1ODcxNzg1RkJB RTM4RTIzQzM4ODIwREJGQTJDQ0E0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5CKVPo5X2vKYtCISgEa 7FNm4IfdmW3nkUq0mU31q8h79icbUB/oLBxuk6097iEBleYlBhDlfhlHrV5Cky/o VOgi/VO3ZdRfjyK6rjIeavA/Kwfr4J0MpdQO/mobDyGZ+5DJK7wGlDpw+ldqVV3l 5NiLGlKRIiJ3k0r7Z49xalPtnY3Ae8IJgArBsjXHYiatwMZZN2wVdwM19IUxXMxb 34D9rMSKQy1b/gLqaQIdmEkqDAiIQ5jwU7BGlY4yyk0XtRMRxsgYsye1MXnki/5n Znz9Id33+jsaKTFARM61HIZuri8Ahll4Ks/fiizYv0/qQnyNa4TGmSORfCd+aGEO /g== -----END CERTIFICATE-----Generated at Tue Sep 9 10:21:33 2025 by rpki-client