$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/0/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.mft File: B11D50A5D47F732F3F808FEAE6A3906CC4509C44.mft (raw, json) Hash identifier: fXAFym2DloM1hlH9Fl66/IXKJFwXXPNG/TS5CvlMLms= Subject key identifier: C6:BE:08:5C:12:C2:98:B9:BF:E5:CD:B2:FB:49:7A:70:AF:86:91:31 Authority key identifier: B1:1D:50:A5:D4:7F:73:2F:3F:80:8F:EA:E6:A3:90:6C:C4:50:9C:44 Certificate issuer: /CN=B11D50A5D47F732F3F808FEAE6A3906CC4509C44 Certificate serial: 6F09E5DAD629211420BA26EF87CC1278484355EF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/0/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.mft Manifest number: 41 Signing time: Tue 04 Nov 2025 09:29:41 +0000 Manifest this update: Tue 04 Nov 2025 09:24:41 +0000 Manifest next update: Wed 05 Nov 2025 13:09:41 +0000 Files and hashes: 1: 326131343a373538333a663430303a3a2f34342d3438203d3e20323130333532.roa (hash: vvwHl6BLBwWiKAXvEKkLi0Wv5qZBfvWXONHc86WQ1Rk=) 2: B11D50A5D47F732F3F808FEAE6A3906CC4509C44.crl (hash: cDScF1BNHdDnhqRV5s5fV0O6iz8NG8oYCk/yak9tNjA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/0/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.crl rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/0/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.mft rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.cer rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 13:09:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:09:e5:da:d6:29:21:14:20:ba:26:ef:87:cc:12:78:48:43:55:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B11D50A5D47F732F3F808FEAE6A3906CC4509C44 Validity Not Before: Nov 4 09:24:41 2025 GMT Not After : Nov 5 13:09:41 2025 GMT Subject: CN=C6BE085C12C298B9BFE5CDB2FB497A70AF869131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4f:7d:d9:4d:b1:98:b0:7f:5e:4b:eb:d5:c6: 03:40:98:91:de:86:e1:71:fd:4d:89:44:fb:f2:65: 67:64:5b:7f:df:87:ce:22:c7:23:87:e5:e9:50:4b: f7:56:2d:76:ed:8b:ae:c8:12:22:e8:ec:3f:70:56: 8d:d8:d5:74:3f:9a:98:6d:03:fd:2b:1e:cf:f8:84: cd:54:88:46:63:fe:1f:cf:d3:c9:cf:15:71:1f:2b: 8c:77:d1:9f:7e:77:f6:fd:d8:32:18:b5:9e:ae:40: e4:52:68:c1:75:73:33:82:1b:a7:9d:96:c1:ca:f2: fc:29:a1:18:40:79:f7:54:b7:20:da:35:ba:de:f9: af:c5:9c:17:08:78:0b:70:49:ff:64:30:25:2e:c1: 3f:27:95:6b:0a:f3:a3:cd:16:d2:4d:84:f0:9d:5d: 5b:be:f9:26:76:24:62:c7:9b:09:ed:af:f8:c8:c1: d7:08:00:8d:cf:d4:38:c6:57:21:49:67:6d:bd:d8: 74:93:61:44:31:fc:6a:33:56:c0:e8:1c:f6:72:93: 03:66:13:9b:3f:5d:c5:72:99:3f:c5:7b:58:9a:22: 67:47:a0:5a:22:7a:68:c3:31:73:f7:e2:be:a0:fc: a2:e4:2c:ff:f4:df:f2:cb:99:87:3e:d8:f5:4f:8d: 18:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:BE:08:5C:12:C2:98:B9:BF:E5:CD:B2:FB:49:7A:70:AF:86:91:31 X509v3 Authority Key Identifier: keyid:B1:1D:50:A5:D4:7F:73:2F:3F:80:8F:EA:E6:A3:90:6C:C4:50:9C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/0/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/0/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:fa:a1:61:da:c8:c6:08:54:5a:92:41:75:99:68:fb:23:90: 3d:12:bc:b0:f8:9b:ac:0d:22:2f:2b:e4:fa:4a:e9:d4:44:f4: 10:00:74:c4:f5:0e:3b:68:aa:6b:1c:d0:a7:8c:17:d8:aa:37: 7d:e4:09:0a:d7:32:77:c0:26:3d:a0:d9:b5:46:cd:ec:af:c0: f7:a8:1a:0f:05:d9:1c:0e:28:14:71:cf:34:19:e6:14:6d:c9: b1:eb:cb:ec:0c:f4:73:7c:ab:c5:f0:4f:ec:f4:7f:b4:23:63: 35:68:e3:5b:c3:5d:58:4f:28:17:8f:be:07:67:de:cf:73:41: 0d:0d:41:0d:9d:ad:5f:98:ad:23:64:71:dd:5f:0e:12:ce:cb: 2a:24:d8:3d:27:6a:62:d7:d0:db:61:8f:a5:26:cf:62:90:36: 3d:4c:17:9b:95:67:c3:5c:9a:9c:97:1b:7c:1d:dc:22:82:1b: 7a:0d:fe:88:62:d8:33:7e:3a:3a:64:bf:54:a1:47:d7:7c:f3: 6f:5a:30:d0:05:e4:7e:68:0a:83:1b:12:de:f7:39:39:8e:a3: 79:09:cc:1c:5a:90:ab:62:da:21:d7:ef:2b:36:15:0b:a9:b7: c6:a9:27:82:98:3b:7f:b9:d7:e2:06:c3:b3:32:d1:3c:1f:8c: 98:5b:91:4e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUbwnl2tYpIRQguibvh8wSeEhDVe8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExRDUwQTVENDdGNzMyRjNGODA4RkVBRTZBMzkwNkND NDUwOUM0NDAeFw0yNTExMDQwOTI0NDFaFw0yNTExMDUxMzA5NDFaMDMxMTAvBgNV BAMTKEM2QkUwODVDMTJDMjk4QjlCRkU1Q0RCMkZCNDk3QTcwQUY4NjkxMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYT33ZTbGYsH9eS+vVxgNAmJHe huFx/U2JRPvyZWdkW3/fh84ixyOH5elQS/dWLXbti67IEiLo7D9wVo3Y1XQ/mpht A/0rHs/4hM1UiEZj/h/P08nPFXEfK4x30Z9+d/b92DIYtZ6uQORSaMF1czOCG6ed lsHK8vwpoRhAefdUtyDaNbre+a/FnBcIeAtwSf9kMCUuwT8nlWsK86PNFtJNhPCd XVu++SZ2JGLHmwntr/jIwdcIAI3P1DjGVyFJZ2292HSTYUQx/GozVsDoHPZykwNm E5s/XcVymT/Fe1iaImdHoFoiemjDMXP34r6g/KLkLP/03/LLmYc+2PVPjRgXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUxr4IXBLCmLm/5c2y+0l6cK+GkTEwHwYDVR0j BBgwFoAUsR1QpdR/cy8/gI/q5qOQbMRQnEQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmMyNjc2M2UtYWRkZi00M2ZkLWJmMmUtN2M3ZTM4OTIz ZTdjLzAvQjExRDUwQTVENDdGNzMyRjNGODA4RkVBRTZBMzkwNkNDNDUwOUM0NC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODFmOTc4Mi04OThlLTRi ODMtOTVlNi00ZmY0YWI3NWM5ZGMvMi9CMTFENTBBNUQ0N0Y3MzJGM0Y4MDhGRUFF NkEzOTA2Q0M0NTA5QzQ0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJjMjY3NjNlLWFkZGYtNDNmZC1iZjJlLTdjN2UzODkyM2U3Yy8wL0IxMUQ1MEE1 RDQ3RjczMkYzRjgwOEZFQUU2QTM5MDZDQzQ1MDlDNDQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAh+qFh 2sjGCFRakkF1mWj7I5A9Eryw+JusDSIvK+T6SunURPQQAHTE9Q47aKprHNCnjBfY qjd95AkK1zJ3wCY9oNm1Rs3sr8D3qBoPBdkcDigUcc80GeYUbcmx68vsDPRzfKvF 8E/s9H+0I2M1aONbw11YTygXj74HZ97Pc0ENDUENna1fmK0jZHHdXw4SzssqJNg9 J2pi19DbYY+lJs9ikDY9TBeblWfDXJqclxt8Hdwight6Df6IYtgzfjo6ZL9UoUfX fPNvWjDQBeR+aAqDGxLe9zk5jqN5CcwcWpCrYtoh1+8rNhULqbfGqSeCmDt/udfi BsOzMtE8H4yYW5FO -----END CERTIFICATE-----Generated at Tue Nov 4 22:30:21 2025 by rpki-client