$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft File: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft (raw, json) Hash identifier: roy92M3fI91Up2kCtLWpz5LpBSnUNqqXpopj9/sJyRI= Subject key identifier: F7:0D:C9:CF:0C:A8:20:12:2D:5C:BC:9B:8B:E4:56:5B:EE:93:3F:20 Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Certificate serial: 549DE6F7254327807EFF5711F553C1C496C31DF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft Manifest number: 0527 Signing time: Sat 21 Mar 2026 08:07:38 +0000 Manifest this update: Sat 21 Mar 2026 08:02:38 +0000 Manifest next update: Sun 22 Mar 2026 09:09:38 +0000 Files and hashes: 1: 38392e34322e3131312e302f32342d3234203d3e203239383032.roa (hash: L8E/k5WG1P2zSzdmF8rJ5boiZXvKF22tBofIgUqK42s=) 2: 38392e34322e3131302e302f32342d3234203d3e203239383032.roa (hash: Chbmines5hwhR4F+JuY4APAYPbeg1c32lDZMdiR/MqQ=) 3: 34362e3130322e3233332e302f32342d3234203d3e203233383635.roa (hash: e+SnYwDfi/1yFie63JthDdkoXVxOgCTXFxhh6sC9If8=) 4: 38392e34322e3131302e302f32342d3234203d3e203631333137.roa (hash: VsyHwXGnPa9jTtnErp0xUSN9uxae8b2L7otiSzP7S2M=) 5: 37372e38312e3133372e302f32342d3234203d3e20333939363431.roa (hash: xL9s9lGr6Y1GcoWPNRfoiIg5P1LyMl92tRndWKMRxvY=) 6: 39332e3131332e3231322e302f32342d3234203d3e203631333137.roa (hash: Mffmj9tigk0AvK8qUYEb5eCtUKaC20yQi7QyJq/JmDA=) 7: 3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa (hash: SUmtopgHH8Nww5p/xP0ODKmemVjaFc93EIAThLWzp7U=) 8: 34362e3130322e3233322e302f32342d3234203d3e203231383539.roa (hash: xmss+X7N7YEJYzsofqDqdmVc6hQlkz4fI2F5jzOV+w0=) 9: 39332e3131332e32352e302f32342d3234203d3e20323134323039.roa (hash: JoDR/IGOmrYGEwu1+N5VZtYwQlvGeImnksk34tLzkIU=) 10: 38392e34322e3131312e302f32342d3234203d3e203631333137.roa (hash: T+9QQX64dOYanRzHKI9rhWnUyaZt9GgRQXrvhvIBrgs=) 11: 3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa (hash: miGCXloG7luQuuhAJwRZ+kv5aIjNiE2JcKseZN1V68A=) 12: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl (hash: vytN9fg1zA/pOSlxtfT1T0GA6HA7uGunxxwkJiSUmHg=) 13: 37372e38312e3133382e302f32342d3234203d3e203136323736.roa (hash: QSH/lbFqFfB0kjPH8NXF1ssxXFJMA3tQTCmwcMlSfAQ=) 14: 3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa (hash: QWu7fHTZ3PYuiSQam7CYDAJC5NNcXBc6g5huH6iiI3k=) 15: 39332e3131332e3231322e302f32342d3234203d3e203239383032.roa (hash: KOkJXzM4wXOGsvFs/zh/ieHh7T/PcK/t6m2YsCzBo+I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 22 Mar 2026 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:9d:e6:f7:25:43:27:80:7e:ff:57:11:f5:53:c1:c4:96:c3:1d:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Validity Not Before: Mar 21 08:02:38 2026 GMT Not After : Mar 22 09:09:38 2026 GMT Subject: CN=F70DC9CF0CA820122D5CBC9B8BE4565BEE933F20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9f:37:6f:6e:26:66:01:d5:d2:76:40:a0:59: 03:ed:1d:c1:b8:40:0b:7d:e2:86:7c:e0:a7:c2:98: bf:7f:48:57:65:2f:f0:99:48:1e:5a:c6:b0:56:3f: f3:24:42:75:28:d2:3b:a5:15:f3:04:4c:c9:cf:64: 4b:1a:37:7e:51:0a:06:18:f3:c5:ce:ef:bf:a8:4e: cb:00:cf:66:cd:80:34:91:64:f9:ea:e0:b1:df:bf: 30:4c:19:c4:79:f2:ca:9f:f4:2d:ca:a3:ef:99:b4: 49:ac:73:fa:7b:98:b0:3d:29:16:7a:94:16:29:21: 45:91:d4:79:17:59:e7:84:62:56:a5:78:9e:9e:88: 1c:14:61:4f:54:db:24:52:7c:30:1c:f0:d8:89:f5: d0:43:40:b8:47:87:88:b9:9f:d3:0b:1b:ae:e2:0d: 8b:de:8f:bc:36:5c:71:53:16:ac:30:df:24:95:ee: ec:ce:1f:61:4e:c6:cc:c6:9a:e3:d7:62:89:f8:83: 3b:87:50:9f:41:2e:bc:1c:3f:b4:f8:a2:04:c2:3b: 97:f8:8f:bc:cd:e7:d7:49:ac:d1:cc:b5:15:6f:72: c9:de:58:be:5c:8e:8a:b0:37:b7:a2:66:68:d8:b9: bd:12:ef:ce:81:0c:da:3f:6d:30:a3:02:76:08:bb: 38:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:0D:C9:CF:0C:A8:20:12:2D:5C:BC:9B:8B:E4:56:5B:EE:93:3F:20 X509v3 Authority Key Identifier: keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:40:b4:e1:b3:5d:c8:cf:f9:33:c8:38:54:ad:ac:66:be:1d: e2:6c:83:a6:17:3a:c2:34:dc:b1:37:27:68:0c:7d:eb:9c:62: a0:50:8a:21:a9:d9:bc:52:85:c5:35:8e:28:ee:a2:f6:bd:73: f6:61:f4:99:06:45:0b:ac:19:d0:48:40:97:a3:5a:64:19:a8: 83:6d:7b:47:7e:ed:8a:49:f0:64:27:32:d7:94:f5:c5:8d:72: a4:ba:2a:e4:91:7b:ce:f5:dc:00:56:1a:cb:d2:13:98:ea:67: 07:82:4f:a6:9a:a4:70:ba:a0:5b:b9:58:7c:3f:82:65:f5:25: d1:ff:63:e7:ce:86:1d:3f:f4:ee:57:17:d4:1d:b5:e3:01:a2: f7:11:b1:8c:5d:b4:76:de:4b:b6:57:6d:0c:81:2b:0a:50:aa: 89:63:51:00:d9:37:2f:ab:17:f8:71:91:f8:4b:65:0f:fd:19: 47:b6:de:98:a6:1e:91:76:92:e4:a9:93:30:09:a8:47:88:0a: 46:a8:4b:67:8e:4b:87:5c:20:6d:47:d9:ac:9c:c4:15:80:50: f4:30:d5:bf:91:03:df:7e:3b:d3:ae:a7:74:dc:90:09:b8:a9: 79:80:fe:82:80:97:71:22:34:9c:f4:af:39:3a:72:e0:8d:ec: ce:2a:c6:ec -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVJ3m9yVDJ4B+/1cR9VPBxJbDHfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi ZmEyY2NhNDAeFw0yNjAzMjEwODAyMzhaFw0yNjAzMjIwOTA5MzhaMDMxMTAvBgNV BAMTKEY3MERDOUNGMENBODIwMTIyRDVDQkM5QjhCRTQ1NjVCRUU5MzNGMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbnzdvbiZmAdXSdkCgWQPtHcG4 QAt94oZ84KfCmL9/SFdlL/CZSB5axrBWP/MkQnUo0julFfMETMnPZEsaN35RCgYY 88XO77+oTssAz2bNgDSRZPnq4LHfvzBMGcR58sqf9C3Ko++ZtEmsc/p7mLA9KRZ6 lBYpIUWR1HkXWeeEYlaleJ6eiBwUYU9U2yRSfDAc8NiJ9dBDQLhHh4i5n9MLG67i DYvej7w2XHFTFqww3ySV7uzOH2FOxszGmuPXYon4gzuHUJ9BLrwcP7T4ogTCO5f4 j7zN59dJrNHMtRVvcsneWL5cjoqwN7eiZmjYub0S786BDNo/bTCjAnYIuzjxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU9w3JzwyoIBItXLybi+RWW+6TPyAwHwYDVR0j BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt aXpLUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYTBkZTk3Zi03 ZWU4LTRjZTAtYjA0NS1lZmFjOGMyNDNjNzkvMC9FRDlFREIyQTE1ODcxNzg1RkJB RTM4RTIzQzM4ODIwREJGQTJDQ0E0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATUC04bNdyM/5M8g4VK2s Zr4d4myDphc6wjTcsTcnaAx965xioFCKIanZvFKFxTWOKO6i9r1z9mH0mQZFC6wZ 0EhAl6NaZBmog217R37tiknwZCcy15T1xY1ypLoq5JF7zvXcAFYay9ITmOpnB4JP ppqkcLqgW7lYfD+CZfUl0f9j586GHT/07lcX1B214wGi9xGxjF20dt5LtldtDIEr ClCqiWNRANk3L6sX+HGR+EtlD/0ZR7bemKYekXaS5KmTMAmoR4gKRqhLZ45Lh1wg bUfZrJzEFYBQ9DDVv5ED3347066ndNyQCbipeYD+goCXcSI0nPSvOTpy4I3szirG 7A== -----END CERTIFICATE-----Generated at Sat Mar 21 13:16:09 2026 by rpki-client