$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft File: A4A082EAE8EF48C7B407C40E742479EADD862089.mft (raw, json) Hash identifier: B/7//wiAZY6B3VLUWyJPyXZyStexC25UTSsK7/cQTG0= Subject key identifier: C3:A5:1F:7D:CE:77:D0:4C:09:B9:AF:8D:4A:D7:5C:49:80:EF:B5:B9 Authority key identifier: A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 Certificate issuer: /CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Certificate serial: 47E179549D11F62B67F79AC92F8E3B63B2A293B1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft Manifest number: 0172 Signing time: Tue 04 Nov 2025 20:30:28 +0000 Manifest this update: Tue 04 Nov 2025 20:25:28 +0000 Manifest next update: Wed 05 Nov 2025 21:21:28 +0000 Files and hashes: 1: 326130663a383563313a6234643a3a2f34382d3438203d3e20323133343238.roa (hash: MorJ8/zqWP+ENMZ78Dfg8lahRlU/VfcwHwmQyMuE7hc=) 2: 326130663a383563313a3339303a3a2f34382d3438203d3e20323135343730.roa (hash: mky/ldC1XpVEwoLHqIyOpw4wZEQNfx0y97P4Ne2BiJs=) 3: A4A082EAE8EF48C7B407C40E742479EADD862089.crl (hash: kCmKYMKJjHYdvA9X2wNOYl0QuLsmvk0FBjVJ3UwSuGs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 21:21:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:e1:79:54:9d:11:f6:2b:67:f7:9a:c9:2f:8e:3b:63:b2:a2:93:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Validity Not Before: Nov 4 20:25:28 2025 GMT Not After : Nov 5 21:21:28 2025 GMT Subject: CN=C3A51F7DCE77D04C09B9AF8D4AD75C4980EFB5B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:30:20:68:e6:9a:43:66:31:ac:cb:4a:2f:29: e2:6a:87:23:ea:d2:11:36:ac:26:33:ab:43:30:76: 2f:25:92:35:61:da:02:fc:02:e7:b0:ac:c5:cd:18: dc:85:4e:b7:f2:09:f3:63:ca:03:02:cc:26:aa:b3: f8:ed:e2:97:46:a0:15:9a:2d:0b:5e:96:db:21:e1: 7c:b9:a1:30:cb:60:87:0b:ee:c1:d0:53:27:f1:47: d1:cc:2c:6f:79:92:1b:ee:12:28:5a:28:e0:ed:bf: e3:5e:f0:fb:16:28:d8:98:b4:99:d4:bd:90:3d:63: 49:d0:34:fb:86:f9:8e:aa:7e:7c:0f:c3:29:84:fa: 6b:4d:2e:90:ee:0e:88:df:83:4e:1d:3b:96:03:bb: bd:0c:b1:96:c5:9e:cf:50:3c:39:6b:00:4f:67:bf: 6d:5c:83:40:2e:e7:25:c6:fd:a5:ae:16:9f:ff:8b: 88:00:a3:4b:29:cf:9f:97:a7:3b:e4:5b:e5:73:a7: a9:9c:44:30:3f:6e:91:d0:50:ac:b0:3f:2d:c9:eb: d2:62:f8:65:9d:58:05:cf:58:da:f4:92:47:ab:03: 57:e6:e6:5b:d1:54:d5:ad:8d:bc:c1:65:25:ec:34: e2:1e:83:e3:85:cd:fa:0a:3a:7e:bb:6e:75:26:4e: 2b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A5:1F:7D:CE:77:D0:4C:09:B9:AF:8D:4A:D7:5C:49:80:EF:B5:B9 X509v3 Authority Key Identifier: keyid:A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:c1:fa:8b:f8:7f:1e:0c:a6:39:a8:44:c2:5a:67:62:03:bb: 02:87:60:f1:62:53:54:ca:63:27:bf:0e:48:5b:36:72:70:e9: 0d:86:79:9b:4a:77:fa:ae:57:2b:7d:80:03:4c:0f:bd:85:1a: 69:31:6a:c9:a5:04:d0:6b:a9:04:90:c5:7a:03:25:d7:b6:8f: 9a:32:f5:bc:2f:27:3a:54:fb:b1:e3:d0:d4:4b:fa:34:5b:a1: cb:87:22:84:69:09:78:5a:e6:ad:c3:74:31:fa:51:8d:50:e2: 98:0a:4e:81:ed:b7:57:59:80:22:9a:8a:a8:07:42:a6:52:63: 3c:7b:2a:81:06:43:a6:26:04:b0:ae:33:1d:10:16:dc:f3:60: e8:10:55:18:f0:ee:94:b5:43:7a:43:c1:a5:ce:1e:56:e2:fd: ac:23:fe:38:c4:90:3e:f1:50:6a:62:9a:79:c9:c4:c5:fe:96: 8e:8d:a4:e1:3f:04:09:32:b2:3e:b6:06:ea:53:85:0f:6c:1c: c9:d0:e7:58:f3:26:b4:64:8f:ca:8e:4a:fd:52:b2:1d:7e:bd: fa:83:62:0e:b3:52:b5:27:f3:e3:76:1d:6f:7e:3c:08:db:79: 4e:2f:54:10:f0:f2:42:1d:46:b6:65:7d:57:d8:52:dd:54:a5: 1f:1b:c2:97 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUR+F5VJ0R9itn95rJL447Y7Kik7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFE RDg2MjA4OTAeFw0yNTExMDQyMDI1MjhaFw0yNTExMDUyMTIxMjhaMDMxMTAvBgNV BAMTKEMzQTUxRjdEQ0U3N0QwNEMwOUI5QUY4RDRBRDc1QzQ5ODBFRkI1QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeMCBo5ppDZjGsy0ovKeJqhyPq 0hE2rCYzq0Mwdi8lkjVh2gL8AuewrMXNGNyFTrfyCfNjygMCzCaqs/jt4pdGoBWa LQteltsh4Xy5oTDLYIcL7sHQUyfxR9HMLG95khvuEihaKODtv+Ne8PsWKNiYtJnU vZA9Y0nQNPuG+Y6qfnwPwymE+mtNLpDuDojfg04dO5YDu70MsZbFns9QPDlrAE9n v21cg0Au5yXG/aWuFp//i4gAo0spz5+XpzvkW+Vzp6mcRDA/bpHQUKywPy3J69Ji +GWdWAXPWNr0kkerA1fm5lvRVNWtjbzBZSXsNOIeg+OFzfoKOn67bnUmTiu7AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUw6Uffc530EwJua+NStdcSYDvtbkwHwYDVR0j BBgwFoAUpKCC6ujvSMe0B8QOdCR56t2GIIkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzEvQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFERDg2MjA4OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9BNEEwODJFQUU4RUY0OEM3QjQwN0M0MEU3 NDI0NzlFQUREODYyMDg5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE5YWE5ZGE3LWYxZTQtNGQ5OC1iZjk1LTlmZGZjZjQ0OGY3Ny8xL0E0QTA4MkVB RThFRjQ4QzdCNDA3QzQwRTc0MjQ3OUVBREQ4NjIwODkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBMwfqL +H8eDKY5qETCWmdiA7sCh2DxYlNUymMnvw5IWzZycOkNhnmbSnf6rlcrfYADTA+9 hRppMWrJpQTQa6kEkMV6AyXXto+aMvW8Lyc6VPux49DUS/o0W6HLhyKEaQl4Wuat w3Qx+lGNUOKYCk6B7bdXWYAimoqoB0KmUmM8eyqBBkOmJgSwrjMdEBbc82DoEFUY 8O6UtUN6Q8Glzh5W4v2sI/44xJA+8VBqYpp5ycTF/paOjaThPwQJMrI+tgbqU4UP bBzJ0OdY8ya0ZI/Kjkr9UrIdfr36g2IOs1K1J/Pjdh1vfjwI23lOL1QQ8PJCHUa2 ZX1X2FLdVKUfG8KX -----END CERTIFICATE-----Generated at Wed Nov 5 12:14:18 2025 by rpki-client