$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft File: 1498141819112B8446C2D4A3111F53038F05DBE9.mft (raw, json) Hash identifier: ydUvGBE7SCMdXXDtYjiNNIZnikDO+0h8D7vP6RgWUL0= Subject key identifier: 08:E9:EB:DD:D3:C0:E9:D9:47:BC:13:4C:57:B7:3B:69:A1:2D:90:64 Authority key identifier: 14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 Certificate issuer: /CN=1498141819112b8446c2d4a3111f53038f05dbe9 Certificate serial: 22DD9D98623F337A157ECA945901EAE138E5ACF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft Manifest number: DF Signing time: Wed 05 Nov 2025 02:22:22 +0000 Manifest this update: Wed 05 Nov 2025 02:17:22 +0000 Manifest next update: Thu 06 Nov 2025 06:01:22 +0000 Files and hashes: 1: 3138352e39312e3131342e302f32342d3234203d3e20323132323338.roa (hash: O3+fkuGYHEGuJgzobwksf3BrAnxvmElLOiQKqynfHQQ=) 2: 1498141819112B8446C2D4A3111F53038F05DBE9.crl (hash: fHI9Oadycv/XVLOZ4NBwiLJMqohJPt9Z8in12WUYrNQ=) 3: 3138352e39312e3131322e302f32342d3234203d3e20323035383836.roa (hash: O1n5JnY1D7Gybc6bse2IOISd30uajo4rcLgj2Y43/4k=) 4: 3138352e39312e3131332e302f32342d3234203d3e20323134323038.roa (hash: qSSu/jTa9CtmAhgZlrJ1s4QldXeKp0EqfLu29FuP5Zs=) 5: 3138352e39312e3131352e302f32342d3234203d3e2034363337.roa (hash: ck91ILJJRhGrU5dcx7s2t1suhnGyLbRTekoZlADPXPE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:dd:9d:98:62:3f:33:7a:15:7e:ca:94:59:01:ea:e1:38:e5:ac:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1498141819112b8446c2d4a3111f53038f05dbe9 Validity Not Before: Nov 5 02:17:22 2025 GMT Not After : Nov 6 06:01:22 2025 GMT Subject: CN=08E9EBDDD3C0E9D947BC134C57B73B69A12D9064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:a5:4a:1b:26:b9:31:02:12:65:18:e9:82:f1: 3a:da:88:dd:06:6f:96:07:97:c5:42:f0:a9:5c:70: 40:5e:da:9a:3d:79:75:05:da:b3:5a:4f:58:1b:75: f3:91:95:0c:ba:d2:a7:cb:4e:ae:88:1e:46:5b:97: 9e:fd:4e:d4:4a:61:84:fa:75:81:69:eb:c8:d6:d4: f9:15:c5:ca:9e:58:88:6b:d6:54:b1:cf:42:32:b9: 5f:ff:6e:87:7f:3d:bf:f2:2c:17:42:99:f5:85:ca: d1:66:73:78:3c:f3:5e:32:f2:09:5d:64:bd:2b:79: 09:f6:98:ad:07:aa:df:88:ac:e1:84:df:e2:b0:b7: 6f:48:82:98:47:84:39:4c:97:b8:ef:c9:5b:58:44: c3:b7:85:45:a8:80:9a:87:92:5d:b5:eb:15:bc:85: e8:b6:de:71:4e:10:8b:d6:61:85:75:0a:70:75:6c: 68:61:df:74:cd:18:93:d5:92:33:f8:ca:b9:83:46: 1e:9e:e9:9b:de:0d:4e:0a:f8:5e:58:9f:6f:9f:16: 5f:c0:bb:ee:aa:1b:95:82:71:9c:6e:e2:fe:51:91: 69:7b:31:c1:c0:f1:33:03:fb:70:46:79:03:45:39: 91:36:a6:5b:c0:f2:82:20:47:f9:04:2a:8e:11:bf: 92:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E9:EB:DD:D3:C0:E9:D9:47:BC:13:4C:57:B7:3B:69:A1:2D:90:64 X509v3 Authority Key Identifier: keyid:14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:ac:dd:32:7f:81:15:78:4f:80:01:e8:10:b7:05:82:98:11: 41:10:61:0d:71:58:5c:6f:50:a8:10:df:2f:4b:32:24:3d:bc: 35:4b:99:eb:3b:f4:07:f9:31:3c:56:c0:63:70:8c:f2:51:4b: c8:ae:ef:4c:f1:14:83:bb:3e:1d:e0:7e:8d:73:28:f8:57:9f: c6:2f:5f:9d:58:74:68:d8:ff:3b:73:c9:26:8d:36:cb:14:b9: 21:68:13:5b:8f:72:79:a4:46:bb:77:c0:81:3b:3c:3e:11:a1: 46:2b:9e:be:5e:16:f0:7f:1e:ea:19:77:ac:9f:43:d2:34:68: 19:06:20:4c:dc:0b:62:e2:64:41:e1:b2:f1:a0:2e:fc:68:a0: c9:7e:26:8b:8c:4b:42:f8:9c:68:f4:4b:cd:e9:6d:78:96:4a: e3:e5:d9:b2:5c:31:6a:7f:17:0c:b5:64:71:f1:e5:48:57:34: d3:a6:87:16:bc:b8:a7:57:d2:6d:f2:03:b2:4c:12:d3:83:f4: 54:58:06:64:c9:48:ce:77:e3:41:e6:30:5e:5b:54:9e:2e:c9: bd:5e:4d:e9:4d:75:db:01:c5:66:ab:74:9c:85:0a:c2:73:2c: ff:a5:8d:39:1b:d4:6b:e7:d0:b7:8a:5f:52:de:dd:84:6a:b7: 0b:8a:a5:cf -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIt2dmGI/M3oVfsqUWQHq4TjlrPEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5ODE0MTgxOTExMmI4NDQ2YzJkNGEzMTExZjUzMDM4 ZjA1ZGJlOTAeFw0yNTExMDUwMjE3MjJaFw0yNTExMDYwNjAxMjJaMDMxMTAvBgNV BAMTKDA4RTlFQkRERDNDMEU5RDk0N0JDMTM0QzU3QjczQjY5QTEyRDkwNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8pUobJrkxAhJlGOmC8TraiN0G b5YHl8VC8KlccEBe2po9eXUF2rNaT1gbdfORlQy60qfLTq6IHkZbl579TtRKYYT6 dYFp68jW1PkVxcqeWIhr1lSxz0IyuV//bod/Pb/yLBdCmfWFytFmc3g8814y8gld ZL0reQn2mK0Hqt+IrOGE3+Kwt29IgphHhDlMl7jvyVtYRMO3hUWogJqHkl216xW8 hei23nFOEIvWYYV1CnB1bGhh33TNGJPVkjP4yrmDRh6e6ZveDU4K+F5Yn2+fFl/A u+6qG5WCcZxu4v5RkWl7McHA8TMD+3BGeQNFOZE2plvA8oIgR/kEKo4Rv5L3AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUCOnr3dPA6dlHvBNMV7c7aaEtkGQwHwYDVR0j BBgwFoAUFJgUGBkRK4RGwtSjER9TA48F2+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjkwNjZmNWQtZWNjMS00OTI3LTk1YzEtZTFhOGRmOGY5 ODk3LzAvMTQ5ODE0MTgxOTExMkI4NDQ2QzJENEEzMTExRjUzMDM4RjA1REJFOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ZKZ1VHQmtSSzRSR3d0U2pFUjlUQTQ4 RjItay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOTA2NmY1ZC1l Y2MxLTQ5MjctOTVjMS1lMWE4ZGY4Zjk4OTcvMC8xNDk4MTQxODE5MTEyQjg0NDZD MkQ0QTMxMTFGNTMwMzhGMDVEQkU5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEKzdMn+BFXhPgAHoELcF gpgRQRBhDXFYXG9QqBDfL0syJD28NUuZ6zv0B/kxPFbAY3CM8lFLyK7vTPEUg7s+ HeB+jXMo+Fefxi9fnVh0aNj/O3PJJo02yxS5IWgTW49yeaRGu3fAgTs8PhGhRiue vl4W8H8e6hl3rJ9D0jRoGQYgTNwLYuJkQeGy8aAu/GigyX4mi4xLQvicaPRLzelt eJZK4+XZslwxan8XDLVkcfHlSFc006aHFry4p1fSbfIDskwS04P0VFgGZMlIznfj QeYwXltUni7JvV5N6U112wHFZqt0nIUKwnMs/6WNORvUa+fQt4pfUt7dhGq3C4ql zw== -----END CERTIFICATE-----Generated at Wed Nov 5 04:33:01 2025 by rpki-client