$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft File: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json) Hash identifier: PsEmn13nmv2CEyTntlqiTRf5BNlurLKnLJWbHHcOn44= Subject key identifier: 06:C3:1E:48:54:B2:8E:19:22:DD:E6:C3:84:67:2D:CA:3A:48:3C:4A Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Certificate serial: 5DE2A46C34FC550BFDA2DF53534F68F32CA8DA5A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft Manifest number: 0268 Signing time: Tue 04 Nov 2025 16:29:19 +0000 Manifest this update: Tue 04 Nov 2025 16:24:19 +0000 Manifest next update: Wed 05 Nov 2025 17:12:19 +0000 Files and hashes: 1: 326131343a316563303a3a2f33312d3438203d3e203134363138.roa (hash: TNC4zrNVSYq6rg1HfzOLsFNL5cW5pcjjIopBseDA51Y=) 2: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: 97VZ2wlH78jCF38yKNcBmHv8AeEPFTwPSWcMhgrMjKQ=) 3: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: NDSS2hHdj8htIMoCQNzuGfJRE+FjfS7resxOlAoGNDM=) 4: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: rD1drMlhgCHEm0vlVi8DONqmz75yH/sypTpIzdkNP6c=) 5: 326131343a316563303a3a2f33312d3438203d3e203438373030.roa (hash: NfdCiPZo2V7z2IR8DOEcP9s1WlT0wPdEK10WCc6hh18=) 6: 326131343a316563313a376231303a3a2f34342d3438203d3e20323135363636.roa (hash: pZyYX9vqAixKUDIqsxujnSVA6UfFKeJc5iZ4yNtLX48=) 7: 326131343a316563313a3a2f33322d3332203d3e20323037323532.roa (hash: ZnCFtDlyKKIKHxL+mnWSwMiKEny7fbonjbSjngpcz7c=) 8: 326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa (hash: U8fXRRyT8emRE+fVUuy2ekIUYzd/0os3T2/COS8ejYg=) 9: 326131343a316563373a633430303a3a2f34302d3438203d3e203438373030.roa (hash: LZc2AksEahD5rzoxMFxve6nJwmwqwYYZ+BLhaadaDDA=) 10: 326131343a316563313a376232303a3a2f34342d3438203d3e20323135303933.roa (hash: dVnYLOP17LHBFloAhm1YIONwpYCVs6bwv8Qels/37Kg=) 11: 326131343a316563373a633031303a3a2f34342d3434203d3e2030.roa (hash: SsdW0YpcJfef7CtWvRhhfCUEgjAhSHqFG1h0ACBR214=) 12: 326131343a316563303a3a2f33312d3438203d3e203136353039.roa (hash: DO5U+zbxAW9dCHHkG8v0O5pLZTi9rHV+80EYsqI00GY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 17:12:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:e2:a4:6c:34:fc:55:0b:fd:a2:df:53:53:4f:68:f3:2c:a8:da:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Validity Not Before: Nov 4 16:24:19 2025 GMT Not After : Nov 5 17:12:19 2025 GMT Subject: CN=06C31E4854B28E1922DDE6C384672DCA3A483C4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e0:81:ab:b6:4c:ba:56:50:53:be:f3:22:11: a9:4e:d5:00:c1:80:2c:1b:69:0c:07:69:55:ec:9b: 33:c9:28:0d:5b:dd:fb:de:4d:b0:fd:bb:fc:27:3d: 39:f1:90:19:87:f0:49:be:90:ae:d8:4a:92:02:8a: a8:a1:1e:cf:47:ff:0f:8e:a4:02:9c:e9:cc:7b:f8: 55:5c:90:8f:bf:78:c0:63:16:97:d6:9b:f0:8f:18: bd:09:a9:30:b8:62:61:c8:d4:9f:38:7f:18:4f:48: 77:38:df:a9:49:d5:14:11:88:ec:c9:0b:84:3b:84: 26:49:08:a5:6c:05:e7:8f:66:f0:d2:44:a1:7a:07: 09:3d:1c:c8:73:34:99:9e:26:23:34:0f:ad:79:80: 2d:27:c9:4f:8e:46:e6:3d:f6:b7:c8:4c:da:45:07: 40:c9:4b:a4:ae:e8:7f:96:6b:38:cb:da:81:6f:df: 2f:b4:13:51:82:57:6b:52:f9:dc:e5:6b:17:ef:3d: 32:77:c9:38:ec:67:12:15:d3:3c:30:9e:2b:a8:5f: 5f:ff:eb:84:3a:78:4e:2f:7a:53:9d:5e:ec:af:c8: 84:23:ca:02:9f:cf:a3:b1:49:9d:c7:b0:8a:7f:bd: 21:d2:53:a8:3a:22:32:19:8f:21:31:37:06:89:9b: 74:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C3:1E:48:54:B2:8E:19:22:DD:E6:C3:84:67:2D:CA:3A:48:3C:4A X509v3 Authority Key Identifier: keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:e7:34:81:34:3d:72:b8:cf:d0:f6:5e:52:9d:93:a4:1f:55: 48:09:8a:07:cc:cc:ad:70:c1:7d:cf:6a:ad:95:f7:3f:de:f5: 48:f4:af:19:34:d7:7a:47:ff:df:96:6d:ad:b2:3f:87:e8:1a: ae:ab:52:88:a9:39:cd:05:0d:e3:8e:33:9d:ed:4f:de:61:49: 75:d3:57:ec:cd:0a:05:66:dc:28:3d:18:93:4f:d4:b6:7b:b4: 82:ce:26:ec:ee:0f:a5:81:5d:0e:e4:1a:5c:0f:65:0b:1f:9f: 30:e0:5e:68:d9:4c:37:ed:0f:69:85:70:0c:59:fa:47:00:7e: e7:d3:99:b6:53:4e:99:fb:66:c3:7c:1c:5e:65:6b:83:91:84: 75:eb:f6:93:b8:4d:64:7e:d1:f9:01:89:ac:7a:9f:24:71:4f: d1:a2:ae:a1:e4:66:3f:fe:7a:e6:d7:b4:f1:18:5f:85:03:68: 45:02:8a:07:40:99:c9:1a:5a:83:7c:49:62:ed:86:25:bd:df: 1c:f5:e4:a6:55:d4:e4:93:d8:00:dd:e0:e0:03:25:34:3a:9b: 43:c1:7c:08:84:46:bd:d5:13:ff:89:eb:93:87:2a:a6:ea:76: 88:9f:80:64:5c:92:3c:a5:07:25:03:49:8b:46:70:d4:ed:37: 64:c2:1d:a8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXeKkbDT8VQv9ot9TU09o8yyo2lowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG NEFCREVDNjAeFw0yNTExMDQxNjI0MTlaFw0yNTExMDUxNzEyMTlaMDMxMTAvBgNV BAMTKDA2QzMxRTQ4NTRCMjhFMTkyMkRERTZDMzg0NjcyRENBM0E0ODNDNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy4IGrtky6VlBTvvMiEalO1QDB gCwbaQwHaVXsmzPJKA1b3fveTbD9u/wnPTnxkBmH8Em+kK7YSpICiqihHs9H/w+O pAKc6cx7+FVckI+/eMBjFpfWm/CPGL0JqTC4YmHI1J84fxhPSHc436lJ1RQRiOzJ C4Q7hCZJCKVsBeePZvDSRKF6Bwk9HMhzNJmeJiM0D615gC0nyU+ORuY99rfITNpF B0DJS6Su6H+WazjL2oFv3y+0E1GCV2tS+dzlaxfvPTJ3yTjsZxIV0zwwniuoX1// 64Q6eE4velOdXuyvyIQjygKfz6OxSZ3HsIp/vSHSU6g6IjIZjyExNwaJm3SxAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUBsMeSFSyjhki3ebDhGctyjpIPEowHwYDVR0j BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD QkIzOTg3NkY0QUJERUM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJhZjczYTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS8wLzIwRjY5QzRD MTQ2MTM4Q0IwMTIxQzRDNENCQjM5ODc2RjRBQkRFQzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAQ5zSB ND1yuM/Q9l5SnZOkH1VICYoHzMytcMF9z2qtlfc/3vVI9K8ZNNd6R//flm2tsj+H 6Bquq1KIqTnNBQ3jjjOd7U/eYUl101fszQoFZtwoPRiTT9S2e7SCzibs7g+lgV0O 5BpcD2ULH58w4F5o2Uw37Q9phXAMWfpHAH7n05m2U06Z+2bDfBxeZWuDkYR16/aT uE1kftH5AYmsep8kcU/Roq6h5GY//nrm17TxGF+FA2hFAooHQJnJGlqDfEli7YYl vd8c9eSmVdTkk9gA3eDgAyU0OptDwXwIhEa91RP/ieuThyqm6naIn4BkXJI8pQcl A0mLRnDU7Tdkwh2o -----END CERTIFICATE-----Generated at Wed Nov 5 01:03:27 2025 by rpki-client