$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft File: 21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft (raw, json) Hash identifier: 3K9IG6PDz6OVEzKoeaAWoziN69E/ejQa9TBkVETy5tk= Subject key identifier: E6:3F:F0:B7:AB:D3:A9:D8:77:67:2B:95:C2:D9:8F:3A:77:03:A5:39 Authority key identifier: 21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48 Certificate issuer: /CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48 Certificate serial: 7B701214017D8C732F6F23D57C5857AD48A69FF0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft Manifest number: 7C Signing time: Tue 04 Nov 2025 04:45:41 +0000 Manifest this update: Tue 04 Nov 2025 04:40:41 +0000 Manifest next update: Wed 05 Nov 2025 06:59:41 +0000 Files and hashes: 1: 326131343a373538303a6130313a3a2f34382d3438203d3e20323135353433.roa (hash: 9e2yjigX5+cNnGpC5dYpYp4x5beQHVuns4hEprR01WE=) 2: 21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl (hash: f8vzeJH8yrxQuLjLn7WxUNDZzw3oKBI78Y9zhw30H00=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 06:59:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:70:12:14:01:7d:8c:73:2f:6f:23:d5:7c:58:57:ad:48:a6:9f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48 Validity Not Before: Nov 4 04:40:41 2025 GMT Not After : Nov 5 06:59:41 2025 GMT Subject: CN=E63FF0B7ABD3A9D877672B95C2D98F3A7703A539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:14:fe:1f:6c:d5:9d:20:15:b7:61:33:fe:c3: 71:44:1e:c0:5b:1b:74:3d:a6:8f:6a:43:4f:0c:de: 91:f7:5a:d9:2c:71:ef:25:3e:a1:49:83:66:68:85: 2f:c0:d6:42:5a:90:68:31:85:91:95:51:44:a1:25: 72:11:10:5f:15:47:6c:48:98:b3:43:82:bf:79:05: ef:0f:ae:fc:3d:bb:4f:8a:46:de:b5:0b:21:44:42: 78:aa:9d:7c:54:a0:17:ba:c9:fd:31:c4:ae:bc:97: f2:0e:99:04:e0:bb:e5:34:ac:0c:db:4e:a2:5b:67: b5:88:1b:03:5c:ce:d3:1e:4d:bf:2a:06:a8:80:61: 8f:69:2e:05:56:b4:fc:e8:6d:3e:6c:b2:ee:66:9a: 7e:73:c1:93:ff:97:d2:8c:63:7e:29:c2:e2:48:4a: 00:bf:b1:67:b0:98:e4:4c:6b:71:fb:ba:11:1f:70: 27:aa:3a:41:ce:32:26:e2:86:7a:a4:cf:7f:ef:3a: 8b:fb:3d:b8:6e:53:f0:85:96:44:a2:7a:a8:e2:f5: 41:4d:80:64:6b:26:fc:93:cf:88:0e:7f:d9:6e:f4: bc:22:40:9a:e0:a6:69:1b:c7:c7:d4:0b:34:99:82: 06:1c:2e:a5:f1:ad:93:a9:cb:b4:dc:85:52:17:38: b7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3F:F0:B7:AB:D3:A9:D8:77:67:2B:95:C2:D9:8F:3A:77:03:A5:39 X509v3 Authority Key Identifier: keyid:21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:95:0e:50:df:da:a2:8d:bf:fb:bd:c1:dc:38:5a:e3:de:d4: d3:33:d1:e2:98:fe:85:be:f7:36:c5:b9:32:67:33:1f:f5:e1: 2b:b1:5a:be:bb:90:00:a7:c5:5b:3b:47:bb:53:20:85:4f:a8: 44:cb:97:77:5f:15:23:4d:e2:fa:13:c7:26:8c:e5:bb:44:ba: 11:35:b9:8f:e2:c9:b6:e5:05:58:90:87:9f:50:5d:b0:c9:29: 58:80:16:a9:1a:d7:f3:ff:0c:1c:fc:c5:a1:e6:02:50:8d:cf: 94:f3:5a:9a:6b:c7:b6:f8:17:6f:37:6c:8b:55:50:03:32:21: 43:f5:dd:d6:57:28:1c:44:1a:03:ae:2d:08:ed:d8:28:7b:a6: 47:28:95:7c:b6:5b:9d:bb:88:c2:9a:cd:85:42:09:d7:05:a4: f3:78:2e:d1:17:69:8c:f0:87:e4:63:f0:3a:38:df:3c:57:04: ea:b1:16:0d:7c:1a:ad:35:85:66:a4:e4:02:75:a1:52:81:01: 9d:e7:9f:3b:f3:8a:2e:89:d3:01:60:8c:19:ef:c0:05:2b:6b: 33:b0:17:1c:b6:88:22:e7:41:a7:4b:d3:e7:16:13:c7:0e:e0: 02:28:e1:d7:7c:71:69:97:a0:87:83:41:52:b8:6e:02:3e:ae: 68:a4:1a:18 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUe3ASFAF9jHMvbyPVfFhXrUimn/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCNUNCMEJGQjU0MTgzQTYzMzQ4MjBENzA0RURCRjc5 QjA0Q0I0ODAeFw0yNTExMDQwNDQwNDFaFw0yNTExMDUwNjU5NDFaMDMxMTAvBgNV BAMTKEU2M0ZGMEI3QUJEM0E5RDg3NzY3MkI5NUMyRDk4RjNBNzcwM0E1MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkFP4fbNWdIBW3YTP+w3FEHsBb G3Q9po9qQ08M3pH3Wtksce8lPqFJg2ZohS/A1kJakGgxhZGVUUShJXIREF8VR2xI mLNDgr95Be8Prvw9u0+KRt61CyFEQniqnXxUoBe6yf0xxK68l/IOmQTgu+U0rAzb TqJbZ7WIGwNcztMeTb8qBqiAYY9pLgVWtPzobT5ssu5mmn5zwZP/l9KMY34pwuJI SgC/sWewmORMa3H7uhEfcCeqOkHOMibihnqkz3/vOov7PbhuU/CFlkSieqji9UFN gGRrJvyTz4gOf9lu9LwiQJrgpmkbx8fUCzSZggYcLqXxrZOpy7TchVIXOLdtAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU5j/wt6vTqdh3ZyuVwtmPOncDpTkwHwYDVR0j BBgwFoAUIbXLC/tUGDpjNIINcE7b95sEy0gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDBjYTI2NmEtZGY4My00YmIyLTgwMDctNGY4NWI4OTNk YzcwLzAvMjFCNUNCMEJGQjU0MTgzQTYzMzQ4MjBENzA0RURCRjc5QjA0Q0I0OC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMUI1Q0IwQkZCNTQxODNBNjMzNDgyMEQ3 MDRFREJGNzlCMDRDQjQ4LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQwY2EyNjZhLWRmODMtNGJiMi04MDA3LTRmODViODkzZGM3MC8wLzIxQjVDQjBC RkI1NDE4M0E2MzM0ODIwRDcwNEVEQkY3OUIwNENCNDgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC7lQ5Q 39qijb/7vcHcOFrj3tTTM9HimP6Fvvc2xbkyZzMf9eErsVq+u5AAp8VbO0e7UyCF T6hEy5d3XxUjTeL6E8cmjOW7RLoRNbmP4sm25QVYkIefUF2wySlYgBapGtfz/wwc /MWh5gJQjc+U81qaa8e2+BdvN2yLVVADMiFD9d3WVygcRBoDri0I7dgoe6ZHKJV8 tludu4jCms2FQgnXBaTzeC7RF2mM8IfkY/A6ON88VwTqsRYNfBqtNYVmpOQCdaFS gQGd558784ouidMBYIwZ78AFK2szsBcctogi50GnS9PnFhPHDuACKOHXfHFpl6CH g0FSuG4CPq5opBoY -----END CERTIFICATE-----Generated at Tue Nov 4 17:36:33 2025 by rpki-client