$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft File: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft (raw, json) Hash identifier: mqQlAi26YR/yQecZE+d+BpjdKQ70vCLJYMTolOc2fSA= Subject key identifier: 02:AA:46:7A:EC:FB:3B:70:F6:D5:51:5D:E4:B9:52:A2:34:D7:B3:AB Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Certificate serial: 266405D617A083A03E7F034FF5BF91E0E507D08E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft Manifest number: 04D2 Signing time: Tue 04 Nov 2025 15:32:07 +0000 Manifest this update: Tue 04 Nov 2025 15:27:07 +0000 Manifest next update: Wed 05 Nov 2025 19:30:07 +0000 Files and hashes: 1: 34362e3138332e32392e302f32342d3234203d3e2039333034.roa (hash: 4l3m4JRRITIOBfhSXA3v4T1Tc1t3gHbU2TsBgQabcVg=) 2: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl (hash: BrUSRMrEEqGCCpqnU/gPFBTARghROxnyBQMnc/36kFc=) 3: 34362e3138332e32362e302f32342d3234203d3e2039303039.roa (hash: ii72WRjo+pDoTtYybgLKaFsOG8JUV0CPdunTnf7/tAg=) 4: 34362e3138332e32342e302f32342d3234203d3e20313432313436.roa (hash: U6sIE1tc5XNg8Vw7jnbxLLCNANnB9wH3voxb1FhuZwc=) 5: 34362e3138332e32352e302f32342d3234203d3e20323132323338.roa (hash: lxi2m0tJ4IwcIv1Qu/mxuwgzf8BGdtHdxfKNM9mKZEQ=) 6: 34362e3138332e32352e302f32342d3234203d3e203633303233.roa (hash: 4jq0qwMJqWtfRUuzz3vPyKHtua4FM5/8Y3cvVGfTKBM=) 7: 34362e3138332e33302e302f32342d3234203d3e203631333137.roa (hash: pxnqedD3kuwz1m+9x0q4e9R46P3xXGAP6tM7JZr4zqQ=) 8: 34362e3138332e32382e302f32342d3234203d3e203631333137.roa (hash: EQc8ZSWRYu3w3yABE1KT+uLZnchUtUDhUBMKc9gsz8U=) 9: 34362e3138332e32372e302f32342d3234203d3e20323132323338.roa (hash: MBTQi0HOcbTwY/4fQl+vTOHLOQ2FmR/EhBIZ6Dj3u14=) 10: 34362e3138332e33312e302f32342d3234203d3e20313734.roa (hash: 3Z7e+5TwzBef1b9VYHjpmL+5jzamN8gXYO/wLKWP7lA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:64:05:d6:17:a0:83:a0:3e:7f:03:4f:f5:bf:91:e0:e5:07:d0:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Validity Not Before: Nov 4 15:27:07 2025 GMT Not After : Nov 5 19:30:07 2025 GMT Subject: CN=02AA467AECFB3B70F6D5515DE4B952A234D7B3AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c5:94:c9:8f:cb:2c:13:9f:0b:49:35:69:ca: a4:b5:0d:e9:ba:9f:e7:81:3e:82:c6:95:3f:36:ef: d7:7e:85:1e:bd:18:b6:a1:f2:58:de:c4:9c:6f:01: 41:06:e5:50:a5:e2:4e:21:92:72:32:ad:5c:da:76: 75:7b:d4:66:1b:56:61:85:b8:14:dd:e0:19:55:7d: 20:d3:d8:f4:1c:7c:90:75:85:9e:f9:64:97:77:d1: 2f:f7:de:3b:69:74:eb:fc:37:72:81:3b:76:27:8b: 74:38:e6:24:d8:c4:d9:81:34:f4:02:da:14:d2:8e: 4a:eb:b0:27:e8:f3:af:ac:e3:d6:00:65:8c:ed:98: 31:97:0c:52:f6:f7:dd:2b:5f:57:31:ad:3c:a4:69: da:a8:fd:51:a7:63:51:43:43:af:af:93:15:f2:81: 38:87:bf:21:ca:36:22:c9:02:48:55:7c:00:07:f6: a0:09:a9:a9:ab:01:b3:e8:44:9e:35:14:79:38:6b: 1e:b1:7d:b7:c5:31:73:e7:77:41:70:9c:1f:47:6e: 31:46:51:0b:cb:ea:65:63:20:52:d1:9b:ff:dd:59: 57:07:a4:be:6e:69:cf:ac:b6:28:08:11:d5:82:8d: 59:a5:d3:a8:ed:4c:63:a6:76:81:b9:68:69:bc:b0: da:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AA:46:7A:EC:FB:3B:70:F6:D5:51:5D:E4:B9:52:A2:34:D7:B3:AB X509v3 Authority Key Identifier: keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:28:5e:b7:f5:c6:ac:af:82:21:e0:d1:30:4f:ff:72:44:ad: 90:30:bc:c3:09:8c:0a:d5:6a:3c:cd:58:3e:49:3d:12:4d:08: 28:30:69:1f:99:c1:09:b0:1d:60:b7:36:ad:7b:d5:38:60:b3: 29:62:8b:c6:b1:f4:a8:e0:30:13:11:e3:f7:f0:2d:cc:53:80: 67:52:53:56:d3:ac:68:a0:3e:c8:01:1a:07:17:ac:1f:dc:b4: 21:32:b0:e5:fc:8f:5f:ab:2a:ca:6c:66:58:2d:20:a4:f8:5d: 6b:08:71:c4:25:0b:4a:51:e1:d7:92:4d:9a:06:b4:82:bc:99: 94:15:7f:42:41:d4:4c:30:d2:96:9e:c8:54:2f:1e:ad:96:41: 66:37:fe:31:56:88:7e:8f:ef:d8:e0:b5:fd:5f:90:c4:a1:cc: 88:1b:43:5c:5b:83:63:a6:f3:9f:93:c6:a3:ed:e5:83:0d:69: 31:34:90:a0:71:1f:48:00:c2:f7:a1:6f:b8:90:50:37:79:56: ba:23:43:93:a3:85:84:00:eb:4d:8f:f9:66:30:9d:26:bc:b2: 3e:fb:57:be:fa:4e:16:2f:72:3d:5d:d2:74:80:49:83:19:a8: 46:fc:35:f5:8d:71:e1:eb:49:ea:fe:e5:ac:59:a6:c4:c2:7b: e5:4d:c2:6f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJmQF1hegg6A+fwNP9b+R4OUH0I4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRlNTM3ODhiZDRlZmEyM2IxYTgyMDdiN2U3NGE4ZTFj YzY3N2IwMDAeFw0yNTExMDQxNTI3MDdaFw0yNTExMDUxOTMwMDdaMDMxMTAvBgNV BAMTKDAyQUE0NjdBRUNGQjNCNzBGNkQ1NTE1REU0Qjk1MkEyMzREN0IzQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxxZTJj8ssE58LSTVpyqS1Dem6 n+eBPoLGlT8279d+hR69GLah8ljexJxvAUEG5VCl4k4hknIyrVzadnV71GYbVmGF uBTd4BlVfSDT2PQcfJB1hZ75ZJd30S/33jtpdOv8N3KBO3Yni3Q45iTYxNmBNPQC 2hTSjkrrsCfo86+s49YAZYztmDGXDFL2990rX1cxrTykadqo/VGnY1FDQ6+vkxXy gTiHvyHKNiLJAkhVfAAH9qAJqamrAbPoRJ41FHk4ax6xfbfFMXPnd0FwnB9HbjFG UQvL6mVjIFLRm//dWVcHpL5uac+stigIEdWCjVml06jtTGOmdoG5aGm8sNpDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUAqpGeuz7O3D21VFd5LlSojTXs6swHwYDVR0j BBgwFoAUJOU3iL1O+iOxqCB7fnSo4cxnewAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAtNmQxZS00YWU0LTkxNzctZDkzOGU5ODA0 Mzk1LzAvMjRFNTM3ODhCRDRFRkEyM0IxQTgyMDdCN0U3NEE4RTFDQzY3N0IwMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pPVTNpTDFPLWlPeHFDQjdmblNvNGN4 bmV3QS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xNmFjYjlhMC02 ZDFlLTRhZTQtOTE3Ny1kOTM4ZTk4MDQzOTUvMC8yNEU1Mzc4OEJENEVGQTIzQjFB ODIwN0I3RTc0QThFMUNDNjc3QjAwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXChet/XGrK+CIeDRME// ckStkDC8wwmMCtVqPM1YPkk9Ek0IKDBpH5nBCbAdYLc2rXvVOGCzKWKLxrH0qOAw ExHj9/AtzFOAZ1JTVtOsaKA+yAEaBxesH9y0ITKw5fyPX6sqymxmWC0gpPhdawhx xCULSlHh15JNmga0gryZlBV/QkHUTDDSlp7IVC8erZZBZjf+MVaIfo/v2OC1/V+Q xKHMiBtDXFuDY6bzn5PGo+3lgw1pMTSQoHEfSADC96FvuJBQN3lWuiNDk6OFhADr TY/5ZjCdJryyPvtXvvpOFi9yPV3SdIBJgxmoRvw19Y1x4etJ6v7lrFmmxMJ75U3C bw== -----END CERTIFICATE-----Generated at Tue Nov 4 23:29:39 2025 by rpki-client