$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft File: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft (raw, json) Hash identifier: zcur2yGEPl4/zSpM3AoKliiWHc/nNnIE6eGCSmjw4hw= Subject key identifier: 59:93:75:05:F4:A5:09:08:A3:E8:3D:9B:60:88:31:D9:D2:86:5E:EE Authority key identifier: 13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB Certificate issuer: /CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB Certificate serial: 14A64CB0DBE5822174B9DE0E0A04B39AFEEFF9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft Manifest number: 014B Signing time: Tue 04 Nov 2025 00:32:14 +0000 Manifest this update: Tue 04 Nov 2025 00:27:14 +0000 Manifest next update: Wed 05 Nov 2025 03:48:14 +0000 Files and hashes: 1: 326131343a373538303a6430303a3a2f34302d3438203d3e20313939333130.roa (hash: jIRO9mS3d6dPjcdQf+OkOGr/dNujGogdrEuPEpLgZJI=) 2: 326131343a373538303a6430303a3a2f34342d3434203d3e20313939333130.roa (hash: aLNGjeKxhB+lb52UO94MmUGLP8+twH+NGpyj/wZMn3g=) 3: 326131343a373538303a6466303a3a2f34382d3438203d3e20323133373239.roa (hash: u/JR7/M6BcKICssdDR7j/sPwWvJTPX2G+FFLBgXrUyU=) 4: 326131343a373538303a6432303a3a2f34342d3438203d3e20313939333130.roa (hash: MgcoEmS08l4kBvePsItue5HuyPIuQGylETDDY3NTtWk=) 5: 326131343a373538303a6431303a3a2f34342d3434203d3e20313939333130.roa (hash: d85Du7DNvyLWzCRKR6UAK4BxtZR8aY0O/ltb7NM7kI0=) 6: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl (hash: jo7gUUBoT2hbwdFCgdBaMlgObGcqnIzwEvW4U9FY8YQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 03:48:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:a6:4c:b0:db:e5:82:21:74:b9:de:0e:0a:04:b3:9a:fe:ef:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB Validity Not Before: Nov 4 00:27:14 2025 GMT Not After : Nov 5 03:48:14 2025 GMT Subject: CN=59937505F4A50908A3E83D9B608831D9D2865EEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:70:a0:eb:7d:bb:8e:cd:a5:a9:07:37:1a:f3: ed:67:ec:42:b8:3f:6b:bb:6f:13:82:ca:08:d1:c8: cb:19:22:49:00:46:a1:88:7d:89:3a:1d:dc:93:66: 67:5b:68:95:fc:b7:55:d4:4d:aa:3a:60:1d:12:08: 6e:4e:74:e6:57:e9:ce:91:8f:24:ab:f9:e5:54:7c: 56:28:74:29:f5:30:48:93:dd:49:fb:ac:31:02:44: 00:00:6c:a9:3c:b5:6b:db:e4:10:3d:4e:d0:0d:ad: 73:32:96:f9:c5:23:90:19:63:10:f7:02:96:68:8f: 3b:90:9e:6f:8d:05:c4:13:b3:c9:4e:81:ae:d8:3a: de:8a:d6:ef:d0:3d:e4:c9:01:b6:62:f3:9f:9e:45: a8:ae:13:f0:70:84:8b:ff:d6:e1:3e:12:dc:fa:95: 51:67:00:20:3e:e8:a7:19:fb:68:f7:ed:4e:e3:31: 70:7a:7f:af:47:ad:29:32:55:02:8a:7a:46:32:c5: 9f:0a:dd:01:6e:f1:fd:16:bb:68:af:e2:4b:90:9b: 07:1e:59:4d:13:01:3c:fb:ff:10:cc:49:e5:f8:1d: 49:fc:99:83:de:f7:a1:64:f9:3f:09:3f:3c:a1:b9: 32:5d:9a:04:17:a8:32:72:a9:9e:5d:8c:0f:bb:ec: a6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:93:75:05:F4:A5:09:08:A3:E8:3D:9B:60:88:31:D9:D2:86:5E:EE X509v3 Authority Key Identifier: keyid:13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:92:87:09:99:b1:d2:17:41:b2:4d:9a:66:67:34:3c:1e:96: 32:59:48:0d:c1:3b:c1:cf:ab:e3:69:d4:f8:ad:7e:db:d0:64: 9e:70:4f:e3:59:f1:43:a4:05:3c:a1:4e:db:c0:58:15:6a:fe: 3f:0e:da:56:51:ee:65:fb:ae:be:90:ea:b0:5a:44:7b:53:2f: 6f:b0:ae:a2:a8:de:db:b8:15:d0:61:00:27:85:26:4c:79:4b: 72:11:43:af:a1:42:a2:aa:30:14:e7:c1:e4:61:47:2d:be:57: 3b:36:8a:a8:20:b9:59:e4:7b:e9:4a:6f:78:ee:a2:37:03:10: 0a:4d:fc:53:01:c1:77:a5:ba:20:02:e6:d8:60:4a:c0:d8:9a: cc:92:71:b0:98:d0:fe:1d:a2:b3:84:82:6f:25:77:f1:3f:89: 87:4d:d7:a8:3c:3c:d1:49:cf:65:04:fb:70:06:0c:0d:e6:28: 76:b3:cb:16:d9:74:ce:9c:91:a7:0c:ad:24:7a:95:c3:19:51: c4:48:6e:b8:cd:ca:87:29:59:35:f5:70:65:ed:4f:a4:29:9b: b5:1d:f3:39:a4:e3:01:b1:77:2b:cf:2e:52:86:22:d5:f3:ac: 67:e5:98:d4:d2:cd:5f:78:bf:94:bc:87:50:c5:a9:a3:e4:77: 18:62:3c:70 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgITFKZMsNvlgiF0ud4OCgSzmv7v+TANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygxM0UxQTk5OEY3N0Q3QzFGRjI5NTVDMEI2ODhGRUJGRTBG ODE5NkVCMB4XDTI1MTEwNDAwMjcxNFoXDTI1MTEwNTAzNDgxNFowMzExMC8GA1UE AxMoNTk5Mzc1MDVGNEE1MDkwOEEzRTgzRDlCNjA4ODMxRDlEMjg2NUVFRTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJxwoOt9u47NpakHNxrz7WfsQrg/ a7tvE4LKCNHIyxkiSQBGoYh9iTod3JNmZ1tolfy3VdRNqjpgHRIIbk505lfpzpGP JKv55VR8Vih0KfUwSJPdSfusMQJEAABsqTy1a9vkED1O0A2tczKW+cUjkBljEPcC lmiPO5Ceb40FxBOzyU6Brtg63orW79A95MkBtmLzn55FqK4T8HCEi//W4T4S3PqV UWcAID7opxn7aPftTuMxcHp/r0etKTJVAop6RjLFnwrdAW7x/Ra7aK/iS5CbBx5Z TRMBPPv/EMxJ5fgdSfyZg973oWT5Pwk/PKG5Ml2aBBeoMnKpnl2MD7vspmECAwEA AaOCAoIwggJ+MB0GA1UdDgQWBBRZk3UF9KUJCKPoPZtgiDHZ0oZe7jAfBgNVHSME GDAWgBQT4amY9318H/KVXAtoj+v+D4GW6zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u ZXQvcmVwb3NpdG9yeS8wMTU3NjQ3Yy05MWQ2LTRhMDQtOGE5MS1kMTUzODVkMWZh YjIvMS8xM0UxQTk5OEY3N0Q3QzFGRjI5NTVDMEI2ODhGRUJGRTBGODE5NkVCLmNy bDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5j LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5 OS1iMDc5LTMwOWVkOTdmMzgyNC8wLzEzRTFBOTk4Rjc3RDdDMUZGMjk1NUMwQjY4 OEZFQkZFMEY4MTk2RUIuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv MDE1NzY0N2MtOTFkNi00YTA0LThhOTEtZDE1Mzg1ZDFmYWIyLzEvMTNFMUE5OThG NzdEN0MxRkYyOTU1QzBCNjg4RkVCRkUwRjgxOTZFQi5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAD6ShwmZ sdIXQbJNmmZnNDweljJZSA3BO8HPq+Np1PitftvQZJ5wT+NZ8UOkBTyhTtvAWBVq /j8O2lZR7mX7rr6Q6rBaRHtTL2+wrqKo3tu4FdBhACeFJkx5S3IRQ6+hQqKqMBTn weRhRy2+Vzs2iqgguVnke+lKb3juojcDEApN/FMBwXeluiAC5thgSsDYmsyScbCY 0P4dorOEgm8ld/E/iYdN16g8PNFJz2UE+3AGDA3mKHazyxbZdM6ckacMrSR6lcMZ UcRIbrjNyocpWTX1cGXtT6Qpm7Ud8zmk4wGxdyvPLlKGItXzrGflmNTSzV94v5S8 h1DFqaPkdxhiPHA= -----END CERTIFICATE-----Generated at Tue Nov 4 14:21:15 2025 by rpki-client