$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.mft File: 6E57E27AC23C8932C53853BF557B28CD590488AC.mft (raw, json) Hash identifier: EpA2gaCXCsUBBTdsicV8zW5/4mDQ3rWp7AAaZNS75Bc= Subject key identifier: D9:D8:6B:93:0C:56:78:88:D7:17:60:36:E3:84:D6:BA:E8:72:94:5C Authority key identifier: 6E:57:E2:7A:C2:3C:89:32:C5:38:53:BF:55:7B:28:CD:59:04:88:AC Certificate issuer: /CN=6E57E27AC23C8932C53853BF557B28CD590488AC Certificate serial: 0E38025A167FB2D4BB89015AA8EF62F480C605B8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6E57E27AC23C8932C53853BF557B28CD590488AC.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.mft Manifest number: 62 Signing time: Tue 04 Nov 2025 08:56:11 +0000 Manifest this update: Tue 04 Nov 2025 08:51:11 +0000 Manifest next update: Wed 05 Nov 2025 11:24:11 +0000 Files and hashes: 1: 6E57E27AC23C8932C53853BF557B28CD590488AC.crl (hash: p+3ntxXE0aynQzgNFnR65RK0Pe75m2fdDb9v962iVFA=) 2: 326131343a373538333a663330303a3a2f34302d3438203d3e20323035303038.roa (hash: Pw4yBx8L2Vx0/YJcoRiVJ2ZHCDI/+/xVhxU2P0lxb8w=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.crl rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6E57E27AC23C8932C53853BF557B28CD590488AC.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:38:02:5a:16:7f:b2:d4:bb:89:01:5a:a8:ef:62:f4:80:c6:05:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E57E27AC23C8932C53853BF557B28CD590488AC Validity Not Before: Nov 4 08:51:11 2025 GMT Not After : Nov 5 11:24:11 2025 GMT Subject: CN=D9D86B930C567888D7176036E384D6BAE872945C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:35:4a:27:53:2d:11:b4:c4:53:b4:eb:0d:e6: 06:b2:fd:3c:ee:b1:d6:53:28:44:99:21:76:04:c8: f7:2d:8c:d5:fa:3b:3d:29:65:4a:ee:57:ad:1b:63: 51:f3:7b:5f:a8:ad:da:24:84:2c:98:e2:6d:98:0c: 1b:e4:5b:a2:04:b0:c2:bd:91:04:83:1f:0b:74:7e: 47:7f:f4:c3:08:7f:46:89:ee:e4:a9:b4:19:98:11: 63:18:14:54:a3:45:8f:d9:8c:ab:f9:84:7a:75:9f: cf:f8:a2:71:8a:5f:04:4f:8b:ec:af:8d:b9:9b:2a: 8e:20:56:e4:92:8c:f1:d0:fc:8c:a0:a8:45:c4:2f: 9f:af:85:65:b8:e5:ef:a4:5e:57:93:68:51:37:ae: 45:ce:3a:3f:a6:f9:ac:69:21:f1:e0:a5:3c:10:9b: 9b:a8:b2:b4:93:88:b6:03:0f:7d:f7:48:a5:33:73: cd:b5:81:2c:34:df:1c:f9:33:d6:ab:be:c8:7a:1a: 08:87:cb:c7:04:d6:8b:b9:41:7a:b5:e8:b5:08:2e: 53:ee:37:c4:26:da:a0:58:77:7b:7e:61:3a:ad:39: 6a:0b:62:0a:37:e7:61:9b:b3:38:f8:ca:5f:5f:75: b8:24:99:dc:97:cf:02:4c:78:03:71:79:09:fb:e0: c7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D8:6B:93:0C:56:78:88:D7:17:60:36:E3:84:D6:BA:E8:72:94:5C X509v3 Authority Key Identifier: keyid:6E:57:E2:7A:C2:3C:89:32:C5:38:53:BF:55:7B:28:CD:59:04:88:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6E57E27AC23C8932C53853BF557B28CD590488AC.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a8:b8:0a:9e:17:62:a8:aa:27:02:b7:3d:44:1c:7d:85:6d: 97:a1:a9:36:46:bf:a7:49:ab:40:77:fa:1e:73:4e:1a:1f:96: 64:b1:76:21:f7:c0:00:0a:04:3b:c2:d7:68:f5:e3:6b:ce:b5: 7b:56:fc:3d:ec:61:13:f2:0a:6f:77:6a:e4:f1:10:71:8c:33: ba:3d:83:8b:0a:e8:8d:7c:7c:d8:af:bf:fb:47:3c:4d:cd:8d: 34:b2:6b:d9:31:60:a2:50:1b:37:c9:a4:6f:99:fe:32:3c:b2: f2:18:aa:aa:e1:0a:4c:ad:3c:22:c8:be:80:e9:7d:25:1f:54: 7a:1c:ca:df:52:15:5c:6e:c2:d9:01:4c:45:48:7c:c7:8f:ad: a5:60:e9:21:52:d2:82:09:10:3a:fc:94:85:0f:99:3e:2a:f1: b1:b9:e6:36:a3:12:02:fe:57:8b:fd:12:0c:7f:23:f0:1a:4a: ed:ca:04:bd:fe:5b:d2:da:e9:c0:8b:a8:37:b5:19:09:e4:fa: 4e:d7:f7:85:75:86:56:66:a3:3d:a1:b7:95:a7:bd:9c:63:1c: 8c:66:8c:fd:dd:a0:44:d5:25:3d:2d:60:ad:08:a6:80:60:52: d2:14:1b:9b:1a:9d:49:b5:79:12:78:5a:43:9f:66:f4:6e:9a: 94:91:ab:3f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUDjgCWhZ/stS7iQFaqO9i9IDGBbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU1N0UyN0FDMjNDODkzMkM1Mzg1M0JGNTU3QjI4Q0Q1 OTA0ODhBQzAeFw0yNTExMDQwODUxMTFaFw0yNTExMDUxMTI0MTFaMDMxMTAvBgNV BAMTKEQ5RDg2QjkzMEM1Njc4ODhENzE3NjAzNkUzODRENkJBRTg3Mjk0NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnNUonUy0RtMRTtOsN5gay/Tzu sdZTKESZIXYEyPctjNX6Oz0pZUruV60bY1Hze1+ordokhCyY4m2YDBvkW6IEsMK9 kQSDHwt0fkd/9MMIf0aJ7uSptBmYEWMYFFSjRY/ZjKv5hHp1n8/4onGKXwRPi+yv jbmbKo4gVuSSjPHQ/IygqEXEL5+vhWW45e+kXleTaFE3rkXOOj+m+axpIfHgpTwQ m5uosrSTiLYDD333SKUzc821gSw03xz5M9arvsh6GgiHy8cE1ou5QXq16LUILlPu N8Qm2qBYd3t+YTqtOWoLYgo352Gbszj4yl9fdbgkmdyXzwJMeANxeQn74MdHAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU2dhrkwxWeIjXF2A244TWuuhylFwwHwYDVR0j BBgwFoAUblfiesI8iTLFOFO/VXsozVkEiKwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjI4NWJlNmYtNTExMS00YzNjLTgyNTQtZDJlNDE1NTEw Mjg0LzEvNkU1N0UyN0FDMjNDODkzMkM1Mzg1M0JGNTU3QjI4Q0Q1OTA0ODhBQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC82RTU3RTI3QUMyM0M4OTMyQzUzODUzQkY1 NTdCMjhDRDU5MDQ4OEFDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIyODViZTZmLTUxMTEtNGMzYy04MjU0LWQyZTQxNTUxMDI4NC8xLzZFNTdFMjdB QzIzQzg5MzJDNTM4NTNCRjU1N0IyOENENTkwNDg4QUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA/qLgK nhdiqKonArc9RBx9hW2Xoak2Rr+nSatAd/oec04aH5ZksXYh98AACgQ7wtdo9eNr zrV7Vvw97GET8gpvd2rk8RBxjDO6PYOLCuiNfHzYr7/7RzxNzY00smvZMWCiUBs3 yaRvmf4yPLLyGKqq4QpMrTwiyL6A6X0lH1R6HMrfUhVcbsLZAUxFSHzHj62lYOkh UtKCCRA6/JSFD5k+KvGxueY2oxIC/leL/RIMfyPwGkrtygS9/lvS2unAi6g3tRkJ 5PpO1/eFdYZWZqM9obeVp72cYxyMZoz93aBE1SU9LWCtCKaAYFLSFBubGp1JtXkS eFpDn2b0bpqUkas/ -----END CERTIFICATE-----Generated at Tue Nov 4 10:55:20 2025 by rpki-client