$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft File: B3F1737E90F240D7ABB33C72F84D71482FE62679.mft (raw, json) Hash identifier: Tp/tSL1AbDgvv/h8w9PwPSz3ICvN6ho24y3AYHuP/u0= Subject key identifier: D3:25:06:02:B7:22:A6:D8:C1:F0:E6:AF:C7:9A:2D:25:0F:F8:97:C9 Authority key identifier: B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79 Certificate issuer: /CN=B3F1737E90F240D7ABB33C72F84D71482FE62679 Certificate serial: 3E90A73CACD647D45A22657FE8133ACD484BBC5A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft Manifest number: AB Signing time: Wed 05 Nov 2025 08:13:06 +0000 Manifest this update: Wed 05 Nov 2025 08:08:06 +0000 Manifest next update: Thu 06 Nov 2025 08:18:06 +0000 Files and hashes: 1: 326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa (hash: dERySCDhc3+rlKwMAYMhD9XvddhhgSjXbVZeRoj98gc=) 2: 326130373a353463373a356630303a3a2f34342d3434203d3e20323135353737.roa (hash: x50UL+Ve3n2XGikbTbQdFLaQIWslIjcJnasiyHq58lM=) 3: 326130373a353463373a356631303a3a2f34382d3438203d3e20323135353737.roa (hash: 7mCuwzfIey+Hcqy/Vhuj4zUx9bQcgkzpUeh+UNvlKO4=) 4: B3F1737E90F240D7ABB33C72F84D71482FE62679.crl (hash: Stc1h6xkd12i0vs1p9C6dKGUiN9IJNBBVkhYFp65qIQ=) 5: 326130373a353463373a356666653a3a2f34382d3438203d3e20323135353737.roa (hash: FG+PaaelFQQTh0Pl3BlClI1RFrk+FdkeBozLHlfkasU=) 6: 326130373a353463373a353939393a3a2f34382d3438203d3e20323136343535.roa (hash: SvnI/kKkXn3yiVhNqVKN9Taah5WCLs8Rw+D4PBjSrbo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 23:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:90:a7:3c:ac:d6:47:d4:5a:22:65:7f:e8:13:3a:cd:48:4b:bc:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F1737E90F240D7ABB33C72F84D71482FE62679 Validity Not Before: Nov 5 08:08:06 2025 GMT Not After : Nov 6 08:18:06 2025 GMT Subject: CN=D3250602B722A6D8C1F0E6AFC79A2D250FF897C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fa:b3:99:a6:4e:b7:2b:52:ef:a6:38:9f:5f: 22:5b:dd:8c:d2:02:f7:b1:16:19:c1:69:0b:be:52: b6:bd:24:f4:bf:13:a1:7f:b7:55:ad:bb:9f:0a:15: 8b:0a:73:da:b2:24:14:2b:6b:4f:67:e8:a9:33:48: 3a:dc:fc:5e:90:78:1d:3d:c2:24:f1:06:8d:1e:70: 63:57:d6:fd:04:c6:17:76:12:da:9c:6e:9c:bb:e4: 8a:3c:37:34:46:a3:9c:dd:43:5e:5d:07:30:b2:da: 40:bb:a5:09:f2:7d:54:a3:20:69:8b:ed:9c:8d:0c: ba:10:8d:c3:7d:56:e0:21:25:78:96:16:bd:13:2f: b4:e1:b8:14:76:d9:0b:d8:8d:4d:e7:18:2f:c0:2a: 87:89:4e:5c:5b:4c:82:b0:ef:f4:03:d5:de:ec:ae: cf:79:ac:8d:dd:f2:4e:4a:ba:3a:51:3a:82:d8:87: 77:b8:c2:08:dd:98:4d:0e:b9:f0:de:77:3e:05:b7: ca:d8:bc:3d:de:7c:c8:68:22:87:b8:8d:fe:fb:d6: 97:de:51:ed:87:c5:30:f7:36:98:67:24:08:85:7f: 50:e8:26:72:a0:8b:25:ee:fe:b1:e4:f3:c5:8a:c5: 17:d9:11:74:a8:ce:d4:b5:5d:e0:72:b5:01:3b:f4: 49:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:25:06:02:B7:22:A6:D8:C1:F0:E6:AF:C7:9A:2D:25:0F:F8:97:C9 X509v3 Authority Key Identifier: keyid:B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:de:5a:04:91:56:87:d4:a6:79:d9:4f:0c:d8:e6:65:40:63: d6:4d:a0:82:d3:55:9d:cd:ce:08:b2:83:90:ee:5f:53:55:db: dd:ad:fc:d3:bb:0f:b6:1b:18:c0:38:e4:59:99:d0:7d:28:16: ac:cd:4f:14:67:cd:13:ae:b7:4a:1a:59:43:97:be:3a:da:bc: be:4e:3d:27:e2:54:9d:b6:06:09:ad:c0:f1:70:f7:cb:f6:cf: a2:f0:e9:ca:05:4c:7a:1e:8a:66:36:e5:a2:79:51:f9:f5:dc: aa:a4:dd:1f:5d:70:54:9b:0c:24:88:f1:25:62:fe:e8:00:f7: 9a:cd:51:a5:37:8a:74:45:bf:1a:46:ed:95:f8:05:71:d8:2f: d8:73:73:c4:09:f6:58:1f:c3:c7:e4:22:7f:6a:53:62:46:28: a0:fb:bf:85:08:04:5f:92:21:63:42:15:5c:77:78:37:31:de: 9a:fd:fd:d3:c4:56:26:fb:32:7a:48:11:3c:d9:52:c9:03:a2: 44:18:4a:89:a5:c2:ca:cb:c6:6b:24:92:b6:c8:15:ef:95:a2: 49:aa:98:61:59:da:7a:c5:df:12:00:40:6e:af:82:7e:f9:3d: 10:e1:5a:22:e6:d3:76:7b:3d:a5:f3:14:5d:39:ba:48:74:6b: 2d:ff:b5:ec -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPpCnPKzWR9RaImV/6BM6zUhLvFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgy RkU2MjY3OTAeFw0yNTExMDUwODA4MDZaFw0yNTExMDYwODE4MDZaMDMxMTAvBgNV BAMTKEQzMjUwNjAyQjcyMkE2RDhDMUYwRTZBRkM3OUEyRDI1MEZGODk3QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW+rOZpk63K1LvpjifXyJb3YzS AvexFhnBaQu+Ura9JPS/E6F/t1Wtu58KFYsKc9qyJBQra09n6KkzSDrc/F6QeB09 wiTxBo0ecGNX1v0Exhd2Etqcbpy75Io8NzRGo5zdQ15dBzCy2kC7pQnyfVSjIGmL 7ZyNDLoQjcN9VuAhJXiWFr0TL7ThuBR22QvYjU3nGC/AKoeJTlxbTIKw7/QD1d7s rs95rI3d8k5KujpROoLYh3e4wgjdmE0OufDedz4Ft8rYvD3efMhoIoe4jf771pfe Ue2HxTD3NphnJAiFf1DoJnKgiyXu/rHk88WKxRfZEXSoztS1XeBytQE79ElNAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU0yUGArciptjB8Oavx5otJQ/4l8kwHwYDVR0j BBgwFoAUs/FzfpDyQNerszxy+E1xSC/mJnkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzIvQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgyRkU2MjY3OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC9CM0YxNzM3RTkwRjI0MEQ3QUJCMzNDNzJG ODRENzE0ODJGRTYyNjc5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzU4MjFjNDdlLWU4MTUtNDJkZS1iZDZiLTE5YTJlMWFlNTY0YS8yL0IzRjE3MzdF OTBGMjQwRDdBQkIzM0M3MkY4NEQ3MTQ4MkZFNjI2NzkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBf3loE kVaH1KZ52U8M2OZlQGPWTaCC01Wdzc4IsoOQ7l9TVdvdrfzTuw+2GxjAOORZmdB9 KBaszU8UZ80TrrdKGllDl7462ry+Tj0n4lSdtgYJrcDxcPfL9s+i8OnKBUx6Hopm NuWieVH59dyqpN0fXXBUmwwkiPElYv7oAPeazVGlN4p0Rb8aRu2V+AVx2C/Yc3PE CfZYH8PH5CJ/alNiRiig+7+FCARfkiFjQhVcd3g3Md6a/f3TxFYm+zJ6SBE82VLJ A6JEGEqJpcLKy8ZrJJK2yBXvlaJJqphhWdp6xd8SAEBur4J++T0Q4Voi5tN2ez2l 8xRdObpIdGst/7Xs -----END CERTIFICATE-----Generated at Wed Nov 5 11:09:54 2025 by rpki-client