$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft File: 5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft (raw, json) Hash identifier: U5WLVxpwh2Ex8iHlgBs4uULWhAZlc3anB3oYRvcg37I= Subject key identifier: 4D:25:3B:7F:23:0D:6D:92:A6:FE:A5:5C:C3:8B:64:C5:E2:C6:A1:84 Authority key identifier: 5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3 Certificate issuer: /CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3 Certificate serial: 7B049D6AA8BF562AF06FA2982D163C7E9ECD65E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft Manifest number: 0414 Signing time: Mon 03 Nov 2025 22:26:59 +0000 Manifest this update: Mon 03 Nov 2025 22:21:59 +0000 Manifest next update: Wed 05 Nov 2025 00:52:59 +0000 Files and hashes: 1: 5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl (hash: ENjehzST4VL/rfDowR+TdceAptJ3OZhGa7qv4HlijgA=) 2: 34352e3134362e3136302e302f32332d3233203d3e203437343437.roa (hash: RhIjHNXayp0tS4DN32atD6aHafLrHUAz0HkdV618CRY=) 3: 34352e3134362e3136322e302f32342d3234203d3e203138363331.roa (hash: C/6HJC1mRnTjt5un9I/ly/ex3eg1Ngny62cwbLuyXag=) 4: 34352e3134362e3136332e302f32342d3234203d3e20323136313833.roa (hash: dEyrefnnKSg66lfx459XJ2SroTggGi4go9Zp+DRZdvU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 00:52:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:04:9d:6a:a8:bf:56:2a:f0:6f:a2:98:2d:16:3c:7e:9e:cd:65:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3 Validity Not Before: Nov 3 22:21:59 2025 GMT Not After : Nov 5 00:52:59 2025 GMT Subject: CN=4D253B7F230D6D92A6FEA55CC38B64C5E2C6A184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:55:39:97:33:28:3d:5b:6c:55:f5:6b:2a:4b: 66:77:16:a6:ca:34:4d:89:fd:ac:18:13:a0:6b:86: 9a:1b:a5:8b:37:1b:7a:6d:65:c7:8c:99:eb:52:3f: 46:c2:f6:65:a2:de:f4:a3:46:29:0c:b9:ce:08:da: 65:63:59:a7:f9:d2:95:e3:35:73:2f:f1:77:92:56: ec:35:01:75:c6:b7:30:cf:1a:02:1a:1f:8b:5e:11: 22:db:f1:b5:03:c5:e1:17:ed:f4:41:93:f6:3f:ad: ae:e4:d4:11:ef:5e:e7:f3:90:f3:4a:c4:3c:02:e2: 49:8d:d0:b8:73:62:72:d5:7a:18:ea:23:67:a0:d8: 5d:65:3c:73:33:92:37:d4:0a:04:ba:ef:69:cb:b8: f5:ee:82:51:08:ae:62:d8:0b:7a:28:a4:09:55:d8: ef:12:8a:88:dd:61:96:64:7b:99:40:53:02:97:c1: 2f:b1:16:7b:b0:a7:17:1c:b5:54:8f:2e:26:07:31: cd:02:4d:7a:ce:28:26:62:73:4f:7b:69:90:14:b7: 43:a0:e7:28:d1:15:5a:fc:a1:70:ac:80:97:9e:69: ab:5c:c4:91:03:16:89:44:09:e5:8a:f8:12:fe:98: d0:1c:86:f8:7b:e2:33:be:fa:93:81:65:25:4e:df: b6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:25:3B:7F:23:0D:6D:92:A6:FE:A5:5C:C3:8B:64:C5:E2:C6:A1:84 X509v3 Authority Key Identifier: keyid:5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:cf:4d:c1:c0:bf:2b:41:c4:f0:63:be:d7:95:87:07:1d:f7: be:b5:81:f3:c2:39:68:f7:08:c9:49:8d:aa:5a:d2:3e:fd:90: b3:b5:a2:6e:6c:8e:5c:9d:4f:bb:f2:d4:52:c0:fd:f9:a0:94: 31:9e:cb:f4:40:a4:84:9a:f5:cb:66:0b:c2:2b:7d:11:01:53: 83:0d:cd:77:5f:d3:9e:3d:a7:e3:90:c8:7d:e4:e4:29:64:e9: 99:61:c8:ba:94:b6:cf:2b:63:6d:f1:e9:92:0b:a6:ad:44:64: 17:2d:f1:b8:25:bd:ac:c5:4a:11:bb:99:c0:87:c7:9f:a2:0c: 2b:06:fb:99:02:99:a7:a1:01:82:78:b3:ca:40:af:b0:7b:2b: 61:45:63:30:fe:cf:41:05:f8:ce:ec:ae:82:d3:8e:d8:09:66: 60:d3:66:25:80:70:b3:3f:74:21:43:21:a6:db:da:db:ab:a5: f6:2b:04:c5:e6:1e:0f:70:5e:1b:53:62:6d:1d:bc:da:18:24: b1:a3:4d:27:7a:e2:4f:05:0b:c7:1f:4e:d4:83:79:ab:13:04: 07:32:d7:ba:11:aa:03:67:34:89:65:1e:bd:a6:2d:11:a9:41: 13:26:ef:b9:e4:6b:be:00:b5:da:3a:39:89:e4:64:2d:2e:1d: b4:eb:3f:98 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUewSdaqi/Virwb6KYLRY8fp7NZeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRlZmUwOTIyZjRmNTUyNzBkY2Q1YzA4ZjA0ZjFjN2Jm MjYwNzNjMzAeFw0yNTExMDMyMjIxNTlaFw0yNTExMDUwMDUyNTlaMDMxMTAvBgNV BAMTKDREMjUzQjdGMjMwRDZEOTJBNkZFQTU1Q0MzOEI2NEM1RTJDNkExODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7VTmXMyg9W2xV9WsqS2Z3FqbK NE2J/awYE6BrhpobpYs3G3ptZceMmetSP0bC9mWi3vSjRikMuc4I2mVjWaf50pXj NXMv8XeSVuw1AXXGtzDPGgIaH4teESLb8bUDxeEX7fRBk/Y/ra7k1BHvXufzkPNK xDwC4kmN0LhzYnLVehjqI2eg2F1lPHMzkjfUCgS672nLuPXuglEIrmLYC3oopAlV 2O8SiojdYZZke5lAUwKXwS+xFnuwpxcctVSPLiYHMc0CTXrOKCZic097aZAUt0Og 5yjRFVr8oXCsgJeeaatcxJEDFolECeWK+BL+mNAchvh74jO++pOBZSVO37aJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUTSU7fyMNbZKm/qVcw4tkxeLGoYQwHwYDVR0j BBgwFoAUXe/gki9PVScNzVwI8E8ce/Jgc8MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmZlMmIyN2EtMWVjNS00YWI3LTk3OGUtNmRhOWNmOWYz NzkwLzAvNURFRkUwOTIyRjRGNTUyNzBEQ0Q1QzA4RjA0RjFDN0JGMjYwNzNDMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hlX2draTlQVlNjTnpWd0k4RThjZV9K Z2M4TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yZmUyYjI3YS0x ZWM1LTRhYjctOTc4ZS02ZGE5Y2Y5ZjM3OTAvMC81REVGRTA5MjJGNEY1NTI3MERD RDVDMDhGMDRGMUM3QkYyNjA3M0MzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY89NwcC/K0HE8GO+15WH Bx33vrWB88I5aPcIyUmNqlrSPv2Qs7WibmyOXJ1Pu/LUUsD9+aCUMZ7L9ECkhJr1 y2YLwit9EQFTgw3Nd1/Tnj2n45DIfeTkKWTpmWHIupS2zytjbfHpkgumrURkFy3x uCW9rMVKEbuZwIfHn6IMKwb7mQKZp6EBgnizykCvsHsrYUVjMP7PQQX4zuyugtOO 2AlmYNNmJYBwsz90IUMhptva26ul9isExeYeD3BeG1NibR282hgksaNNJ3riTwUL xx9O1IN5qxMEBzLXuhGqA2c0iWUevaYtEalBEybvueRrvgC12jo5ieRkLS4dtOs/ mA== -----END CERTIFICATE-----Generated at Tue Nov 4 15:04:56 2025 by rpki-client