$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft File: 72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft (raw, json) Hash identifier: XC3nYUikc3GvaEDc4mC8KISbZJ5bIpp4rvmi92dDB6w= Subject key identifier: 46:97:81:47:F9:3D:EE:74:84:32:FC:97:43:51:97:E4:BC:28:E4:E1 Authority key identifier: 72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1 Certificate issuer: /CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1 Certificate serial: 674C9C3EAD2A9E8842997F6F019C15F8A9DDBDD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft Manifest number: FF Signing time: Tue 04 Nov 2025 17:03:53 +0000 Manifest this update: Tue 04 Nov 2025 16:58:53 +0000 Manifest next update: Wed 05 Nov 2025 20:17:53 +0000 Files and hashes: 1: 3139352e37342e34302e302f32322d3234203d3e203331313834.roa (hash: OWTrG12il6+R+m95Ctsd+LQNgEyVIDW3AMDlydaSO3g=) 2: 3139332e32322e3235332e302f32342d3234203d3e203331313834.roa (hash: WrMYNrMKiwcHb7Layep1L0ANnPM7z3AEErZKMOJmYxg=) 3: 326131333a363134303a3a2f32392d3332203d3e203331313834.roa (hash: HEAzsbwZSQMPtZWHDUG9J3+dKm/03SetBs7lrO1nkwI=) 4: 72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl (hash: wOT7ZmPnzHlu6DXmeG9gmfJxxFo93JRGRvehLDhR3EU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 20:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:4c:9c:3e:ad:2a:9e:88:42:99:7f:6f:01:9c:15:f8:a9:dd:bd:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1 Validity Not Before: Nov 4 16:58:53 2025 GMT Not After : Nov 5 20:17:53 2025 GMT Subject: CN=46978147F93DEE748432FC97435197E4BC28E4E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e2:4c:fb:0b:db:48:a3:3b:23:e3:45:72:68: bd:85:52:8b:2b:11:74:53:59:2e:84:3c:6c:7d:d0: 5a:ab:31:43:6b:d6:ba:80:bd:c3:7c:6f:54:c8:ac: a9:11:85:30:d2:0b:e4:93:99:e1:a7:3b:97:4f:72: 0a:0f:c3:5e:d4:39:a1:4a:f1:28:6c:85:20:72:bd: 1a:29:a0:e2:8e:30:35:54:8c:cd:fd:c4:2c:d2:48: 40:8e:04:6f:de:6c:76:eb:af:a7:71:3a:11:89:cd: 6b:ea:53:85:bf:b9:bf:0f:06:5d:e7:3d:9c:ed:5f: 1d:8e:f6:11:8d:97:6e:41:e1:4a:ef:74:ec:9a:8b: a5:58:ff:58:c4:ac:41:15:97:df:d1:8a:4e:b5:a0: 81:9e:56:07:13:77:e1:f7:cf:21:12:db:f3:5e:1d: 88:49:00:50:8b:98:6d:1f:9e:d8:fd:63:7b:ca:49: a2:60:8e:72:b7:48:f5:80:d9:b0:72:9f:93:69:5a: f0:fa:4a:e2:a3:af:d1:d7:14:3c:00:42:38:a9:98: be:3c:ec:e8:29:79:1f:05:8e:c5:03:88:1e:67:a9: 7a:1b:9e:9b:18:5d:25:c2:cb:72:82:b2:00:9c:f6: 3f:37:13:49:c9:ff:b9:d8:ce:70:64:51:d7:41:95: 94:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:97:81:47:F9:3D:EE:74:84:32:FC:97:43:51:97:E4:BC:28:E4:E1 X509v3 Authority Key Identifier: keyid:72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:7b:60:be:b2:e3:18:60:22:ea:59:1f:16:28:b8:85:6d:79: b8:8c:68:91:b9:f1:fa:0b:f2:32:c7:35:4c:67:53:e7:20:65: 5a:75:21:54:cb:f2:c4:8b:d0:32:e4:dc:91:b8:29:2f:08:91: a4:33:96:87:16:55:29:b6:8f:db:ac:08:3c:ae:7c:ac:3e:0a: 29:db:29:13:a3:53:35:62:e8:13:c0:bf:3c:39:07:8b:da:6d: 16:69:9b:e5:4f:1c:e6:f5:51:8a:2b:aa:b7:c0:75:1d:58:bc: 7d:02:b0:72:b4:32:b9:e6:51:7a:87:55:11:b6:d6:c9:5d:fb: 3c:37:c8:ca:84:6f:42:f7:43:84:6f:ec:73:96:7a:62:ac:97: ad:2d:c2:11:2c:70:4d:15:2f:64:79:03:02:7c:3c:6c:ca:e9: e5:98:3a:fa:d5:b8:1a:f2:2b:98:5c:c9:26:23:1c:2f:ce:cd: 0e:12:06:22:52:22:7f:3d:f9:1d:42:34:7a:25:bd:07:e8:ca: bd:b8:73:0f:3a:b8:15:56:d4:d7:a8:1c:8f:2b:7b:ed:59:6a: f1:d3:ed:1f:cf:55:58:67:a4:82:a5:9e:3e:a5:d4:1a:55:6b: f4:04:ce:1d:63:9b:d6:28:cd:5a:0a:76:57:b3:d0:d4:53:46: db:c9:18:50 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZ0ycPq0qnohCmX9vAZwV+KndvdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJmM2VlMTY5ZjliZDcxZjc4YTQyZDFhNzJmZTBmMmE4 MjQ4MjJkMTAeFw0yNTExMDQxNjU4NTNaFw0yNTExMDUyMDE3NTNaMDMxMTAvBgNV BAMTKDQ2OTc4MTQ3RjkzREVFNzQ4NDMyRkM5NzQzNTE5N0U0QkMyOEU0RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS4kz7C9tIozsj40VyaL2FUosr EXRTWS6EPGx90FqrMUNr1rqAvcN8b1TIrKkRhTDSC+STmeGnO5dPcgoPw17UOaFK 8ShshSByvRopoOKOMDVUjM39xCzSSECOBG/ebHbrr6dxOhGJzWvqU4W/ub8PBl3n PZztXx2O9hGNl25B4UrvdOyai6VY/1jErEEVl9/Rik61oIGeVgcTd+H3zyES2/Ne HYhJAFCLmG0fntj9Y3vKSaJgjnK3SPWA2bByn5NpWvD6SuKjr9HXFDwAQjipmL48 7OgpeR8FjsUDiB5nqXobnpsYXSXCy3KCsgCc9j83E0nJ/7nYznBkUddBlZQlAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQURpeBR/k97nSEMvyXQ1GX5Lwo5OEwHwYDVR0j BBgwFoAUcvPuFp+b1x94pC0acv4PKoJIItEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjgyYjVlMDAtMmFjMy00OWYxLWEyOWItMjZhNWZkZjBm YTQxLzAvNzJGM0VFMTY5RjlCRDcxRjc4QTQyRDFBNzJGRTBGMkE4MjQ4MjJEMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2N2UHVGcC1iMXg5NHBDMGFjdjRQS29K SUl0RS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yODJiNWUwMC0y YWMzLTQ5ZjEtYTI5Yi0yNmE1ZmRmMGZhNDEvMC83MkYzRUUxNjlGOUJENzFGNzhB NDJEMUE3MkZFMEYyQTgyNDgyMkQxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEXtgvrLjGGAi6lkfFii4 hW15uIxokbnx+gvyMsc1TGdT5yBlWnUhVMvyxIvQMuTckbgpLwiRpDOWhxZVKbaP 26wIPK58rD4KKdspE6NTNWLoE8C/PDkHi9ptFmmb5U8c5vVRiiuqt8B1HVi8fQKw crQyueZReodVEbbWyV37PDfIyoRvQvdDhG/sc5Z6YqyXrS3CESxwTRUvZHkDAnw8 bMrp5Zg6+tW4GvIrmFzJJiMcL87NDhIGIlIifz35HUI0eiW9B+jKvbhzDzq4FVbU 16gcjyt77Vlq8dPtH89VWGekgqWePqXUGlVr9ATOHWOb1ijNWgp2V7PQ1FNG28kY UA== -----END CERTIFICATE-----Generated at Wed Nov 5 07:15:40 2025 by rpki-client