
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
File: B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft (raw, json)
Hash identifier: Q3DQpDEAzReogtYvyVH7FQatkMhlGSKeaqBFDS/aodg=
Subject key identifier: B0:43:BE:EC:BB:23:68:91:D6:E6:AC:26:6E:8E:5D:7A:9E:71:A9:BF
Authority key identifier: B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C
Certificate issuer: /CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C
Certificate serial: 589735328C1DF93C7B9063461157511FB7932391
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
Manifest number: 7A
Signing time: Wed 05 Nov 2025 10:45:58 +0000
Manifest this update: Wed 05 Nov 2025 10:40:58 +0000
Manifest next update: Thu 06 Nov 2025 14:03:58 +0000
Files and hashes: 1: B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl (hash: 43PancjLzAV+dyOZMrBloSCXVmwOhA0ap+D0xpfvLHI=)
2: 326130623a396534373a666666663a3a2f34382d3438203d3e20323132333936.roa (hash: 75MQYcrJ2fBMIggMxPD0oPJNZ5TBWMJfZ5gCQQu+izk=)
3: 326130623a396534303a3a2f33322d3332203d3e20323134343531.roa (hash: GwXhJxTPfppTl2To2mF3GpvFgaV+3IGFSczXonJ1+q0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl
rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:97:35:32:8c:1d:f9:3c:7b:90:63:46:11:57:51:1f:b7:93:23:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C
Validity
Not Before: Nov 5 10:40:58 2025 GMT
Not After : Nov 6 14:03:58 2025 GMT
Subject: CN=B043BEECBB236891D6E6AC266E8E5D7A9E71A9BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f6:ea:0d:d3:09:0f:b6:7a:fe:9d:33:fc:7f:
86:b8:14:2a:9b:3d:b0:06:2e:24:e3:fa:ed:fb:e0:
d0:56:69:e6:0b:28:90:d2:5e:44:ff:a1:e2:04:43:
cb:97:e3:55:3e:00:97:2e:ca:03:97:c7:68:da:af:
b8:32:d2:24:a7:cf:f5:c6:85:71:90:2c:3c:30:e3:
a2:f8:00:ed:d0:c7:71:3d:0e:fe:fe:92:c7:b3:51:
4f:ff:0c:2e:07:6d:a6:5a:8c:03:b7:78:66:1f:0e:
8b:3d:ca:25:02:71:37:a2:b4:13:be:a3:f9:84:0a:
1a:4a:b2:87:7a:e7:48:ff:77:75:04:fa:8f:51:c5:
90:9d:6b:26:09:34:8e:37:c6:8f:7e:6d:bd:6a:f7:
e5:35:16:fa:13:24:71:dc:e4:2b:64:4f:22:c0:d2:
d5:e3:ef:bf:6b:2a:4f:b7:04:84:be:4e:d1:77:f2:
14:bc:74:49:d6:f4:f0:64:5e:4e:3c:01:ca:d0:da:
73:91:9f:83:be:74:5b:e1:b6:c5:bc:00:60:7c:df:
65:a6:b4:29:2e:e4:44:33:4a:39:2d:8c:1d:71:cc:
88:9a:aa:0d:76:6f:77:1b:c0:09:bd:45:bf:2d:14:
82:30:d5:2f:48:b5:83:2d:83:55:ae:d2:5d:9e:ad:
e0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:43:BE:EC:BB:23:68:91:D6:E6:AC:26:6E:8E:5D:7A:9E:71:A9:BF
X509v3 Authority Key Identifier:
keyid:B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:2c:ea:76:71:55:c2:23:7d:5f:71:9a:aa:88:c0:1f:da:25:
12:db:b5:c9:cc:e7:59:78:b7:21:29:4a:d2:d7:de:55:41:10:
9e:50:52:23:53:81:4c:f5:ea:88:25:24:9a:ab:33:ff:7b:b8:
7f:58:93:3a:d7:9c:63:b4:69:c3:a6:14:39:47:f4:3a:35:f0:
b3:3f:ad:b3:f1:d9:34:0d:50:0d:5e:52:18:dd:73:7d:60:eb:
7e:cd:17:ab:d1:7c:35:7c:f3:0e:3a:c3:d0:1b:f9:91:cd:b5:
04:af:04:d4:04:ce:36:92:5b:41:97:83:90:08:b4:28:83:2c:
70:70:43:f2:99:06:47:80:cf:2e:2f:3e:7d:29:5b:9d:23:82:
43:ff:96:3f:89:9e:60:78:ed:78:84:9e:c3:3b:77:b3:bb:4b:
50:63:0a:5a:d3:54:94:85:cf:89:15:1a:5c:33:7c:01:3a:5a:
44:68:b1:ee:7d:42:a3:18:42:36:09:9f:34:bf:e9:1c:e6:2a:
4c:36:e8:16:90:62:e8:4d:b0:ff:d6:5b:a9:1e:49:d8:a0:4b:
b7:23:4b:d4:30:a5:d7:30:9e:40:6b:b3:50:0b:8d:3a:7f:67:
3a:5a:5e:97:71:a1:a6:69:02:04:5b:1d:ff:62:c4:6c:da:59:
66:72:78:c9
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUWJc1Mowd+Tx7kGNGEVdRH7eTI5EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVGNUVDNUM1NjdGRDQ4OUJFNzM5MDI4NjJFQkVFODFD
Q0RFRTM1QzAeFw0yNTExMDUxMDQwNThaFw0yNTExMDYxNDAzNThaMDMxMTAvBgNV
BAMTKEIwNDNCRUVDQkIyMzY4OTFENkU2QUMyNjZFOEU1RDdBOUU3MUE5QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJ9uoN0wkPtnr+nTP8f4a4FCqb
PbAGLiTj+u374NBWaeYLKJDSXkT/oeIEQ8uX41U+AJcuygOXx2jar7gy0iSnz/XG
hXGQLDww46L4AO3Qx3E9Dv7+ksezUU//DC4HbaZajAO3eGYfDos9yiUCcTeitBO+
o/mEChpKsod650j/d3UE+o9RxZCdayYJNI43xo9+bb1q9+U1FvoTJHHc5CtkTyLA
0tXj779rKk+3BIS+TtF38hS8dEnW9PBkXk48AcrQ2nORn4O+dFvhtsW8AGB832Wm
tCku5EQzSjktjB1xzIiaqg12b3cbwAm9Rb8tFIIw1S9ItYMtg1Wu0l2ereApAgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQUsEO+7LsjaJHW5qwmbo5dep5xqb8wHwYDVR0j
BBgwFoAUtfXsXFZ/1Im+c5AoYuvugcze41wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJjZjhiYTctY2IwMi00MThiLWJlMDQtNGQ5ZjNhMDdl
OTUwLzUvQjVGNUVDNUM1NjdGRDQ4OUJFNzM5MDI4NjJFQkVFODFDQ0RFRTM1Qy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvQjVGNUVDNUM1NjdGRDQ4OUJFNzM5MDI4NjJFQkVFODFDQ0RF
RTM1Qy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMmNmOGJhNy1j
YjAyLTQxOGItYmUwNC00ZDlmM2EwN2U5NTAvNS9CNUY1RUM1QzU2N0ZENDg5QkU3
MzkwMjg2MkVCRUU4MUNDREVFMzVDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsizqdnFVwiN9X3GaqojA
H9olEtu1ycznWXi3ISlK0tfeVUEQnlBSI1OBTPXqiCUkmqsz/3u4f1iTOtecY7Rp
w6YUOUf0OjXwsz+ts/HZNA1QDV5SGN1zfWDrfs0Xq9F8NXzzDjrD0Bv5kc21BK8E
1ATONpJbQZeDkAi0KIMscHBD8pkGR4DPLi8+fSlbnSOCQ/+WP4meYHjteISewzt3
s7tLUGMKWtNUlIXPiRUaXDN8ATpaRGix7n1CoxhCNgmfNL/pHOYqTDboFpBi6E2w
/9ZbqR5J2KBLtyNL1DCl1zCeQGuzUAuNOn9nOlpel3GhpmkCBFsd/2LEbNpZZnJ4
yQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:19:16 2025 by rpki-client