$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft File: 020F7ED217FC36532E6B045CFBCCDA68A6604620.mft (raw, json) Hash identifier: CZwj450/1Ofz5QMGGY/FSyDnTbOGW3SlFNI6wm+LOU0= Subject key identifier: FC:B8:B3:22:AD:A8:2D:44:2B:17:E6:94:41:A0:54:2A:D0:09:D9:23 Authority key identifier: 02:0F:7E:D2:17:FC:36:53:2E:6B:04:5C:FB:CC:DA:68:A6:60:46:20 Certificate issuer: /CN=020F7ED217FC36532E6B045CFBCCDA68A6604620 Certificate serial: 34E16221B914AAD1AE2C32873C55C6DE8421DE44 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft Manifest number: 5E Signing time: Tue 04 Nov 2025 07:25:46 +0000 Manifest this update: Tue 04 Nov 2025 07:20:46 +0000 Manifest next update: Wed 05 Nov 2025 10:04:46 +0000 Files and hashes: 1: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: 9WwOZQ+czh53N90Wic7WKUZpN9yKrnRBc/mSIwdZviM=) 2: 326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa (hash: xTMyG8vk7HfhKOphzDUHjsL1N+HXzTu0fnBjhyB6AKQ=) 3: 326131343a373538313a366665303a3a2f34342d3438203d3e20323134383431.roa (hash: eJoFXZz3vH/PzqNzkkd4bWX4CpO0e/s0UWWhyH7ohGo=) 4: 326131343a373538313a366662303a3a2f34342d3438203d3e20323136343332.roa (hash: cip9cJqKeyNrJhvNYpxl3IQ3uuVk6x6ccrH22pN5xrA=) 5: 020F7ED217FC36532E6B045CFBCCDA68A6604620.crl (hash: vmtewXszkdz4gcjAChci/FTgogyQLbDIDFVCDWlxdGs=) 6: 326131343a373538313a366663303a3a2f34342d3438203d3e20323037333839.roa (hash: k0slLXQGak8JfXgcycld4UCv11bkqqJyVwy8WgUs0W4=) 7: 326131343a373538313a366330303a3a2f34302d3438203d3e20313938393534.roa (hash: fPBlj/OX226nVSvX0NnbhELuUhpZ2u/Ytd/uYZbhMTA=) 8: 326131343a373538313a366664303a3a2f34342d3438203d3e20323135393334.roa (hash: BfxFUd5DTechXRUy4Ex3ytqAtMEr8QPJBcDEM0dDVlg=) 9: 326131343a373538313a366430303a3a2f34302d3438203d3e20323035333239.roa (hash: UAf2blctTo7ZlN86/McI15QZsGre1E35LEt/FhIBXBM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.crl rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:e1:62:21:b9:14:aa:d1:ae:2c:32:87:3c:55:c6:de:84:21:de:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020F7ED217FC36532E6B045CFBCCDA68A6604620 Validity Not Before: Nov 4 07:20:46 2025 GMT Not After : Nov 5 10:04:46 2025 GMT Subject: CN=FCB8B322ADA82D442B17E69441A0542AD009D923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5d:88:1a:5d:00:80:46:d0:41:8a:9f:f0:c6: 71:d7:26:3d:ea:8d:fc:89:3d:a9:48:f6:b1:17:de: 0e:8e:33:5d:6c:6a:50:ec:e8:92:7e:5b:3f:78:ab: 8b:d5:60:85:0b:98:d7:34:c9:c1:cb:e4:df:60:10: 9d:ca:44:03:0c:b3:cd:a5:bb:98:81:bb:8c:ce:e8: 2b:33:ba:a1:2d:a4:a3:e3:78:dd:b1:5e:74:f5:7e: 33:f0:06:9a:bc:93:ec:b3:0d:2f:d4:c3:43:38:02: 57:97:f2:a4:66:db:7b:bc:36:d1:f8:59:ca:fa:4f: 43:e0:42:ef:81:db:c1:87:2e:b0:4c:6c:d2:67:85: bf:22:8c:da:92:ce:90:09:17:5d:dd:78:3c:d6:b8: 45:88:56:75:07:72:7e:ad:28:cf:c3:be:60:f2:ee: ad:ad:57:63:de:4e:28:c4:b8:94:12:63:91:3f:78: 71:25:d5:0b:d4:ee:66:e9:a7:35:e5:4f:84:a1:34: f8:d2:d6:3a:89:d5:4f:35:01:02:fd:c6:0b:ce:50: fa:cd:ca:de:20:3d:3e:c0:cd:9d:c6:02:a3:3a:f7: 91:c9:06:8e:5e:53:4c:3c:53:f7:f3:be:20:cc:bd: 87:37:4d:d3:a2:0e:a5:ae:ae:28:06:5e:3d:45:84: 70:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B8:B3:22:AD:A8:2D:44:2B:17:E6:94:41:A0:54:2A:D0:09:D9:23 X509v3 Authority Key Identifier: keyid:02:0F:7E:D2:17:FC:36:53:2E:6B:04:5C:FB:CC:DA:68:A6:60:46:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:c9:c4:19:2a:9a:c4:9c:9c:a4:1d:25:b8:69:b1:e6:7f:8b: d2:42:b1:4c:50:8d:28:0b:f2:df:c7:14:7e:af:e0:4f:fc:36: 13:87:99:32:cd:ae:74:2d:a5:a0:69:4f:a3:a2:4f:4b:c3:6f: d1:ab:94:0b:b1:a6:c2:e7:80:50:9c:ec:ab:4b:51:4a:b1:f8: ed:f8:46:3d:c8:b5:c1:a8:0c:8d:7a:d5:65:2e:d6:dc:e3:97: 09:a2:e3:2d:86:08:f3:fe:59:f4:eb:2a:f4:ce:a3:2e:b6:14: 69:df:5e:54:6b:e1:29:f9:a7:a5:e7:21:36:dc:70:e4:ec:e9: e2:58:5d:10:a8:92:fa:fc:08:a4:c4:e2:52:ef:74:cd:4a:e8: d2:6f:b7:8c:77:e2:16:c3:ad:c9:71:7a:8b:eb:10:9f:28:0b: 23:be:70:2c:32:a6:c5:cc:d3:6e:32:29:c3:d2:01:8e:91:63: a9:40:d4:85:38:fa:2b:4d:3d:b2:57:d9:ca:8b:3e:64:04:91: bc:80:f5:09:34:a8:a1:c7:2f:23:86:f0:36:d6:3b:48:49:e0: 39:dd:ef:38:73:f6:dc:0c:5b:4f:2b:27:ce:73:62:62:25:9c: 6a:97:35:01:5e:a6:15:6c:3e:6b:89:e1:92:4e:e2:3f:21:a9: ed:87:7a:25 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUNOFiIbkUqtGuLDKHPFXG3oQh3kQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwRjdFRDIxN0ZDMzY1MzJFNkIwNDVDRkJDQ0RBNjhB NjYwNDYyMDAeFw0yNTExMDQwNzIwNDZaFw0yNTExMDUxMDA0NDZaMDMxMTAvBgNV BAMTKEZDQjhCMzIyQURBODJENDQyQjE3RTY5NDQxQTA1NDJBRDAwOUQ5MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdXYgaXQCARtBBip/wxnHXJj3q jfyJPalI9rEX3g6OM11salDs6JJ+Wz94q4vVYIULmNc0ycHL5N9gEJ3KRAMMs82l u5iBu4zO6CszuqEtpKPjeN2xXnT1fjPwBpq8k+yzDS/Uw0M4AleX8qRm23u8NtH4 Wcr6T0PgQu+B28GHLrBMbNJnhb8ijNqSzpAJF13deDzWuEWIVnUHcn6tKM/DvmDy 7q2tV2PeTijEuJQSY5E/eHEl1QvU7mbppzXlT4ShNPjS1jqJ1U81AQL9xgvOUPrN yt4gPT7AzZ3GAqM695HJBo5eU0w8U/fzviDMvYc3TdOiDqWurigGXj1FhHDtAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU/LizIq2oLUQrF+aUQaBUKtAJ2SMwHwYDVR0j BBgwFoAUAg9+0hf8NlMuawRc+8zaaKZgRiAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWE3Yzk1NmMtMjJlYi00YmI4LWEzMjctYWQ5NzE2MTI5 NWJjLzAvMDIwRjdFRDIxN0ZDMzY1MzJFNkIwNDVDRkJDQ0RBNjhBNjYwNDYyMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wMjBGN0VEMjE3RkMzNjUzMkU2QjA0NUNG QkNDREE2OEE2NjA0NjIwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzVhN2M5NTZjLTIyZWItNGJiOC1hMzI3LWFkOTcxNjEyOTViYy8wLzAyMEY3RUQy MTdGQzM2NTMyRTZCMDQ1Q0ZCQ0NEQTY4QTY2MDQ2MjAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBkycQZ KprEnJykHSW4abHmf4vSQrFMUI0oC/LfxxR+r+BP/DYTh5kyza50LaWgaU+jok9L w2/Rq5QLsabC54BQnOyrS1FKsfjt+EY9yLXBqAyNetVlLtbc45cJouMthgjz/ln0 6yr0zqMuthRp315Ua+Ep+ael5yE23HDk7OniWF0QqJL6/AikxOJS73TNSujSb7eM d+IWw63JcXqL6xCfKAsjvnAsMqbFzNNuMinD0gGOkWOpQNSFOPorTT2yV9nKiz5k BJG8gPUJNKihxy8jhvA21jtISeA53e84c/bcDFtPKyfOc2JiJZxqlzUBXqYVbD5r ieGSTuI/Ianth3ol -----END CERTIFICATE-----Generated at Tue Nov 4 18:04:47 2025 by rpki-client