$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft File: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft (raw, json) Hash identifier: KJSDZwdaoLWWKcU/CYKVWw9yeNa7aFiid9wjeGZJ/vY= Subject key identifier: 4E:03:68:7A:78:F9:4C:06:0C:35:78:BC:FA:AE:34:91:39:A4:AC:29 Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Certificate serial: 3F37C17161AF6467638512D286CEB2C3BE424569 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft Manifest number: 04D9 Signing time: Mon 03 Nov 2025 23:52:00 +0000 Manifest this update: Mon 03 Nov 2025 23:47:00 +0000 Manifest next update: Wed 05 Nov 2025 02:51:00 +0000 Files and hashes: 1: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl (hash: YtwW0oKUH3H8gP9GVAFVmcmJyXoUqnZ7xpXcq1AhPFg=) 2: 3138382e3136342e3135352e302f32342d3234203d3e203631333137.roa (hash: W1I8woHaqJ6kU4xjFwKm1g6uV7UZ51m6Dv8R/7Dp0Oc=) 3: 3138382e3136342e3135362e302f32342d3234203d3e20383334.roa (hash: sY/xAuh6Mg68YWt7c8TloEoU7TIBsTXsCx6tRGi7xp4=) 4: 3138382e3136342e3135332e302f32342d3234203d3e203631333137.roa (hash: pkJz5L9iLZRF+OIvLDh3t2xUInq31L6An4us+3j1eD0=) 5: 3138382e3136342e3135322e302f32342d3234203d3e203631333137.roa (hash: PjHq1CK+fSk+5WuONiKJilG5oXTFh0dZnkKMEZVNP8E=) 6: 3138382e3136342e3135342e302f32342d3234203d3e2039333034.roa (hash: Xrl4k2Y1ZQnjBYts0VWEIYeb2G4oTSJ6MhQs1UM8vvM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 02:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:37:c1:71:61:af:64:67:63:85:12:d2:86:ce:b2:c3:be:42:45:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Validity Not Before: Nov 3 23:47:00 2025 GMT Not After : Nov 5 02:51:00 2025 GMT Subject: CN=4E03687A78F94C060C3578BCFAAE349139A4AC29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3e:50:5a:71:9b:bc:68:12:ff:d4:d5:79:b2: a0:6e:20:2f:e3:c0:a6:e6:93:b4:57:00:55:6b:83: 59:06:56:4c:70:00:d3:2f:8e:d4:b2:50:20:c6:b7: 24:36:a3:ff:32:a6:28:16:8a:12:2b:a0:33:31:f0: 55:f5:33:db:ed:f1:60:e4:09:80:83:64:b9:de:38: e4:32:47:ce:9d:df:2a:3b:73:d2:a4:de:35:7f:1e: 55:fe:b0:d4:45:8a:fc:81:38:06:3c:2e:5f:c4:8b: d3:1d:d0:f4:e7:b9:4d:3c:2f:30:0e:5e:06:06:d0: 92:2e:5d:2c:27:a3:2b:9c:30:f0:a3:fe:d9:bd:77: ec:02:00:b7:12:1d:a3:35:a2:8b:5a:44:0e:79:fc: bf:8e:5c:72:fa:a3:6b:61:fc:cc:d1:c3:38:79:fe: 8c:90:8a:8e:50:15:37:80:f8:13:e0:a6:1b:83:1c: 8c:3b:dd:bd:1e:a2:53:3a:4d:17:7c:61:ea:79:61: e7:21:d9:b5:22:1c:cf:e4:21:f3:34:d9:c3:2d:4d: a1:c9:7f:64:6e:bc:7c:ee:3d:86:46:f9:ea:cf:54: 8c:c1:15:b8:54:20:7e:32:f1:e3:dd:f4:40:db:69: ba:39:54:d3:a8:57:30:05:c4:7d:6b:5b:48:26:4a: 02:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:03:68:7A:78:F9:4C:06:0C:35:78:BC:FA:AE:34:91:39:A4:AC:29 X509v3 Authority Key Identifier: keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e3:98:b7:7b:2f:58:d2:39:e5:2a:49:35:62:16:37:91:8e: a9:79:3b:c2:e6:6b:d2:4a:50:4f:95:07:a4:ff:0a:c7:af:2e: a0:a5:ea:64:8d:6f:3b:96:a4:3a:6e:27:cc:8c:f5:a4:d0:58: 2b:c0:a2:9c:09:7c:4c:ed:7a:a3:28:45:7f:1b:5d:55:3f:f3: 75:bb:cf:c8:6e:99:e5:48:19:7c:80:a6:b6:d9:02:ff:cc:92: 59:1c:49:29:8c:c7:fd:8b:72:be:bf:03:11:98:17:92:bd:0e: c3:a3:5a:fe:47:77:fd:de:f5:84:1b:0c:af:11:09:8d:64:f4: 23:eb:7a:17:7a:a9:27:33:80:0e:f7:6e:31:25:0a:92:ae:b8: e6:56:f4:eb:d3:42:b9:62:12:06:7b:2d:8d:8c:eb:99:99:51: aa:5a:01:7e:86:e9:d0:62:f8:7d:e5:75:e9:e7:d2:44:58:d6: 02:1b:ca:1a:20:8c:7a:2e:fd:91:f8:bd:a2:4d:fb:c1:4c:97: 8c:87:31:b3:2c:b9:d4:3d:dc:68:39:54:30:8d:02:70:b2:0d: 86:12:09:2a:23:48:ab:92:72:5b:41:08:26:b6:d9:38:47:50: 67:24:db:9c:d1:e4:83:e0:e9:45:33:2f:1a:b6:65:d8:83:ba: d6:bb:8f:96 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPzfBcWGvZGdjhRLShs6yw75CRWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI5YmE5YWRkZTk2MzU3NzdiZjU4NmZkNDkzZTE0Y2Qz MGY3YzRjYTAeFw0yNTExMDMyMzQ3MDBaFw0yNTExMDUwMjUxMDBaMDMxMTAvBgNV BAMTKDRFMDM2ODdBNzhGOTRDMDYwQzM1NzhCQ0ZBQUUzNDkxMzlBNEFDMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtPlBacZu8aBL/1NV5sqBuIC/j wKbmk7RXAFVrg1kGVkxwANMvjtSyUCDGtyQ2o/8ypigWihIroDMx8FX1M9vt8WDk CYCDZLneOOQyR86d3yo7c9Kk3jV/HlX+sNRFivyBOAY8Ll/Ei9Md0PTnuU08LzAO XgYG0JIuXSwnoyucMPCj/tm9d+wCALcSHaM1ootaRA55/L+OXHL6o2th/MzRwzh5 /oyQio5QFTeA+BPgphuDHIw73b0eolM6TRd8Yep5Yech2bUiHM/kIfM02cMtTaHJ f2RuvHzuPYZG+erPVIzBFbhUIH4y8ePd9EDbabo5VNOoVzAFxH1rW0gmSgIBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUTgNoenj5TAYMNXi8+q40kTmkrCkwHwYDVR0j BBgwFoAUi5uprd6WNXd79Yb9ST4UzTD3xMowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmMwMzA4OTAtZjZlMC00MTBjLWJjOTktYWYwOTIxZDFj M2E0LzAvOEI5QkE5QURERTk2MzU3NzdCRjU4NkZENDkzRTE0Q0QzMEY3QzRDQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2k1dXByZDZXTlhkNzlZYjlTVDRVelRE M3hNby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzAzMDg5MC1m NmUwLTQxMGMtYmM5OS1hZjA5MjFkMWMzYTQvMC84QjlCQTlBRERFOTYzNTc3N0JG NTg2RkQ0OTNFMTRDRDMwRjdDNENBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWuOYt3svWNI55SpJNWIW N5GOqXk7wuZr0kpQT5UHpP8Kx68uoKXqZI1vO5akOm4nzIz1pNBYK8CinAl8TO16 oyhFfxtdVT/zdbvPyG6Z5UgZfICmttkC/8ySWRxJKYzH/Ytyvr8DEZgXkr0Ow6Na /kd3/d71hBsMrxEJjWT0I+t6F3qpJzOADvduMSUKkq645lb069NCuWISBnstjYzr mZlRqloBfobp0GL4feV16efSRFjWAhvKGiCMei79kfi9ok37wUyXjIcxsyy51D3c aDlUMI0CcLINhhIJKiNIq5JyW0EIJrbZOEdQZyTbnNHkg+DpRTMvGrZl2IO61ruP lg== -----END CERTIFICATE-----Generated at Tue Nov 4 17:36:36 2025 by rpki-client