$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft File: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft (raw, json) Hash identifier: zAGInI8mzgQNZFSXRhrL+BQw2yEx4qG4Ei/ANpNNfQI= Subject key identifier: 50:57:83:26:DE:90:E9:DC:38:A3:15:42:A8:18:0C:2E:FA:E1:82:82 Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Certificate serial: 0B45E930D00B6BB033294E832091D2E90BE62D17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft Manifest number: 0474 Signing time: Tue 04 Nov 2025 22:52:43 +0000 Manifest this update: Tue 04 Nov 2025 22:47:43 +0000 Manifest next update: Thu 06 Nov 2025 00:07:43 +0000 Files and hashes: 1: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl (hash: MjyJGWoL1FmlnH8xva2sSVP+PXrMOjVfh9PLxWD+IuY=) 2: 3138352e3134392e3135332e302f32342d3234203d3e203133313934.roa (hash: DudKC7EbN/x1z3E3UcohZZDxNJCJJwujdDPss+8DrkI=) 3: 3231372e392e3235342e302f32332d3233203d3e203135343139.roa (hash: iksl6QO5bGAwqBp6Vth9mckUoVZxpFnDxq6gmgw5QDs=) 4: 38362e33382e382e302f32312d3231203d3e203135343139.roa (hash: uWYPVYjRnhouz2kB1gip220mm9ixJ1+yxtSXIITlxEw=) 5: 38392e3131362e312e302f32342d3234203d3e203135343139.roa (hash: QlNtxapPtCDVmKsd/rR7Y2Bq1QIkmg64gwg6mpWc9ZY=) 6: 38322e3134302e3133312e302f32342d3234203d3e203135343139.roa (hash: YcmyLeFBQ+WK9MxW4qT13yT/CsdMqFWcCNcHges7cNY=) 7: 326130323a323633303a3a2f33322d3332203d3e203135343139.roa (hash: qWp9paAJXWyG6T4NlWTD/O+mrcUKf+wb2OOSJ/RUTQM=) 8: 38322e3134302e3138392e302f32342d3234203d3e203135343139.roa (hash: q/tmnbq1kdd2hUMwbcuSKcZt7pux1EaGGpLbn7IfofI=) 9: 326130323a323633303a3a2f32392d3239203d3e203135343139.roa (hash: 8htEN27nXC1XFUYvScmaKLGazPRUUosEipnSlN6XgBk=) 10: 3231372e392e3234312e302f32342d3234203d3e203135343139.roa (hash: hFAW06mmhAPSV/HJ4B8aC2PvIR5CrcKx3FcqsTikSiM=) 11: 38362e33382e332e302f32342d3234203d3e203135343139.roa (hash: 1jWpw+W9zeIRwNdxwEeWvA1uKZ5XVqeLW/yed0hU+d4=) 12: 3138352e3134392e3135352e302f32342d3234203d3e203434373731.roa (hash: W9T8aPnkMAlNbGOA+isd3U8U+YdKRxlDW0/+vHw4iGg=) 13: 3138352e3134392e3135342e302f32342d3234203d3e203434373731.roa (hash: Pgs5ueHQXHOzRUAnFpUKAel9Ig4WE+HMpXX4wHeR3SY=) 14: 38392e3131362e322e302f32332d3233203d3e203135343139.roa (hash: twheygdBU9M/hWK8PwEKS7vel1IBGYLsGKuF6NDPdmA=) 15: 3231372e392e3234322e302f32342d3234203d3e203135343139.roa (hash: mOAttZBNx/CTeO/Z3xtwFj9TNAzOHD7wWSzttDopHBY=) 16: 38392e3131362e3131362e302f32322d3232203d3e203135343139.roa (hash: +6pKiWIr1xfpXpXCXiVMVMi0tFetJIO1JWmpuLH4c10=) 17: 38392e3131362e34322e302f32332d3233203d3e203135343139.roa (hash: dqiC7sfkexEdY4bNAfWo7TkIe5GTWHX5uIAGfupS9Ro=) 18: 3138352e3134392e3135332e302f32342d3234203d3e203135343430.roa (hash: ld9bmw/lU5ViE7fFfnUAARe92vzpSXeZ47xTrIGHE2Y=) 19: 38392e3131362e31322e302f32332d3233203d3e203135343139.roa (hash: vCrLMX0eSFK/WsSjH4NPI6BnYmwIN7ZEFJbozFxO6uE=) 20: D34606949D385DB42714FE71274FAC9948EF279C.cer (hash: TQCZQkzK1CqgemnKR/erluvTKMYq58W//DcXZ16FiAE=) 21: 3138352e3134392e3135322e302f32322d3232203d3e203135343139.roa (hash: yiPh36TU1+o+jLX45pyYr1yhJEOI86BPrMUwrS94mMI=) 22: 38322e3134302e3137382e302f32342d3234203d3e203135343139.roa (hash: kVZlSJSrWOIFgbVyyqSUiD6jECTpvfhx5mx8hRL1cGE=) 23: 38392e3131362e31362e302f32332d3233203d3e203135343139.roa (hash: 7gdiZpTYF4VKwdmEsTHKuwi6oAiZC6mVLx4cpcdl/GE=) 24: 38392e3131362e31392e302f32342d3234203d3e203135343139.roa (hash: 4JL3Gtu7UsX3IaHs3LaQwmdxUfCfFV6YWJerzJoc+wE=) 25: 3138352e3134392e3135332e302f32342d3234203d3e203434373731.roa (hash: 3LQCLtbZ2cAzmsqD8inTKmHS0+b4RIJVefCUUonuvB0=) 26: 38392e3131362e342e302f32322d3232203d3e203135343139.roa (hash: S7PYQmgyaS+nUukOrNi+7gU0SVsm2vupfOTXwPtPOXM=) 27: 38392e3131362e34312e302f32342d3234203d3e203135343139.roa (hash: nrTdofG3QiyT59ifvXqBtX8pF4lYbmqFJc6mO1yyOW0=) 28: 38392e3131362e31352e302f32342d3234203d3e203135343139.roa (hash: /LejqbWiFUxs1DgkjzVItnmcQXCtVjOkQxj/fIk9rAQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 00:07:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:45:e9:30:d0:0b:6b:b0:33:29:4e:83:20:91:d2:e9:0b:e6:2d:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Validity Not Before: Nov 4 22:47:43 2025 GMT Not After : Nov 6 00:07:43 2025 GMT Subject: CN=50578326DE90E9DC38A31542A8180C2EFAE18282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:78:17:a2:38:bd:21:a8:34:a0:09:f5:74:48: 9d:44:71:aa:54:1c:11:01:ec:77:6c:e0:b7:dc:ea: 70:2e:68:2b:51:bd:5d:0f:55:4a:99:02:9a:9f:96: 9d:3e:a1:36:4d:63:11:b5:cf:8c:54:a4:2a:35:24: 2b:27:42:40:79:18:75:ae:49:75:16:bf:34:59:f7: a9:ce:13:1d:fa:b3:b1:2c:be:85:38:21:6b:85:21: 90:8c:db:66:b0:37:02:22:c2:6d:f7:4f:1d:ac:f7: ab:5c:89:f8:3b:08:89:01:9b:24:d6:3b:ce:d3:08: de:43:c3:93:b2:8a:26:4b:90:42:57:67:58:ca:4f: ed:b4:6a:4e:90:af:3d:00:04:f3:51:85:e7:7d:9f: 8f:a9:3f:0d:cb:c6:37:b8:30:ef:d0:eb:77:38:40: f0:5d:bb:98:83:df:d3:1c:25:b2:70:e7:4d:21:e6: a8:07:84:f4:2c:6f:2a:22:e6:c4:90:73:a7:66:8b: 0b:80:b2:d2:f5:09:04:06:be:a7:95:ff:49:a1:99: 6b:af:6d:7f:f4:b8:95:34:09:a6:c9:b0:e2:2c:db: 1f:32:00:72:4d:f3:51:04:d3:44:1f:94:73:80:b1: ee:e9:e3:c2:16:b8:f9:f8:01:86:34:b0:6f:51:a9: ff:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:57:83:26:DE:90:E9:DC:38:A3:15:42:A8:18:0C:2E:FA:E1:82:82 X509v3 Authority Key Identifier: keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:b8:9d:a4:54:cc:a2:1a:ab:36:bd:a7:ba:6b:3b:77:4d:44: 3d:32:eb:57:0f:14:9e:f8:8d:cb:8f:ff:72:1b:e6:3b:ae:4b: 21:45:46:7e:f5:de:09:50:67:6a:38:a7:92:de:95:e0:6d:84: 51:92:bc:c0:83:f1:bd:60:59:f3:6b:2c:03:01:b6:8b:db:a8: d5:f5:92:8c:1b:d3:ca:d4:62:7f:45:df:8c:1d:07:3b:be:50: 6f:8c:d9:21:04:c1:fc:9a:13:f9:ef:28:1c:93:59:df:c7:2c: 78:9a:dc:91:9b:ea:e8:f7:74:49:97:eb:a2:f4:46:34:1a:23: 38:46:77:4a:c3:8f:a0:4d:a0:a7:88:d7:69:f8:36:97:a6:b5: 08:b4:5c:24:57:20:6e:e3:d0:70:d8:cd:5e:a3:84:b5:8a:d5: 4d:88:2b:60:57:b2:a6:49:dd:0e:76:69:dd:a7:43:af:f8:54: 06:1d:0f:54:08:06:5f:86:78:c2:de:b4:fb:3e:88:b3:d6:49: 76:1e:f1:0f:cc:02:3a:41:4b:27:cb:b0:e7:83:60:fe:2c:d4: 65:c0:e6:88:06:b3:1e:d2:02:c4:45:62:23:3e:ae:d7:26:40: 94:67:21:57:e5:c3:7a:28:c5:65:84:0e:cc:9e:f3:8f:f7:6e: da:00:ca:7e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUC0XpMNALa7AzKU6DIJHS6QvmLRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmODU5OTdiMWI5YjM1OGUxYzQzZjM2NzY1YWEwYTRh MDIxNDRhZTAeFw0yNTExMDQyMjQ3NDNaFw0yNTExMDYwMDA3NDNaMDMxMTAvBgNV BAMTKDUwNTc4MzI2REU5MEU5REMzOEEzMTU0MkE4MTgwQzJFRkFFMTgyODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBeBeiOL0hqDSgCfV0SJ1EcapU HBEB7Hds4Lfc6nAuaCtRvV0PVUqZApqflp0+oTZNYxG1z4xUpCo1JCsnQkB5GHWu SXUWvzRZ96nOEx36s7EsvoU4IWuFIZCM22awNwIiwm33Tx2s96tcifg7CIkBmyTW O87TCN5Dw5OyiiZLkEJXZ1jKT+20ak6Qrz0ABPNRhed9n4+pPw3Lxje4MO/Q63c4 QPBdu5iD39McJbJw500h5qgHhPQsbyoi5sSQc6dmiwuAstL1CQQGvqeV/0mhmWuv bX/0uJU0CabJsOIs2x8yAHJN81EE00QflHOAse7p48IWuPn4AYY0sG9Rqf8nAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUUFeDJt6Q6dw4oxVCqBgMLvrhgoIwHwYDVR0j BBgwFoAUnfhZl7G5s1jhxD82dlqgpKAhRK4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDAyZTBiYTMtZmU2MC00NWIxLTkxNjAtODY4YTJmOGE0 M2IxLzMvOURGODU5OTdCMUI5QjM1OEUxQzQzRjM2NzY1QUEwQTRBMDIxNDRBRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25maFpsN0c1czFqaHhEODJkbHFncEtB aFJLNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJlMGJhMy1m ZTYwLTQ1YjEtOTE2MC04NjhhMmY4YTQzYjEvMy85REY4NTk5N0IxQjlCMzU4RTFD NDNGMzY3NjVBQTBBNEEwMjE0NEFFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgridpFTMohqrNr2nums7 d01EPTLrVw8UnviNy4//chvmO65LIUVGfvXeCVBnajinkt6V4G2EUZK8wIPxvWBZ 82ssAwG2i9uo1fWSjBvTytRif0XfjB0HO75Qb4zZIQTB/JoT+e8oHJNZ38cseJrc kZvq6Pd0SZfrovRGNBojOEZ3SsOPoE2gp4jXafg2l6a1CLRcJFcgbuPQcNjNXqOE tYrVTYgrYFeypkndDnZp3adDr/hUBh0PVAgGX4Z4wt60+z6Is9ZJdh7xD8wCOkFL J8uw54Ng/izUZcDmiAazHtICxEViIz6u1yZAlGchV+XDeijFZYQOzJ7zj/du2gDK fg== -----END CERTIFICATE-----Generated at Wed Nov 5 10:06:09 2025 by rpki-client