$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft File: C284E54726A876081FA2857EF4AF5B1A78D096B4.mft (raw, json) Hash identifier: nDZuqB/HILq6R/VE/rSXzOGOac/EBhsyr+QYByp/Z/U= Subject key identifier: 8A:E6:DC:98:35:BD:04:11:A8:33:E4:AA:42:B1:60:60:01:82:70:25 Authority key identifier: C2:84:E5:47:26:A8:76:08:1F:A2:85:7E:F4:AF:5B:1A:78:D0:96:B4 Certificate issuer: /CN=C284E54726A876081FA2857EF4AF5B1A78D096B4 Certificate serial: 07444561EB5B7C46E6E3C720800A893410B42951 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/C284E54726A876081FA2857EF4AF5B1A78D096B4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft Manifest number: AB Signing time: Wed 05 Nov 2025 08:12:36 +0000 Manifest this update: Wed 05 Nov 2025 08:07:36 +0000 Manifest next update: Thu 06 Nov 2025 10:03:36 +0000 Files and hashes: 1: C284E54726A876081FA2857EF4AF5B1A78D096B4.crl (hash: ZZNBRBxM1rntcvC7TVSwO3B4zX1SGLJobgKFOBZrLew=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/C284E54726A876081FA2857EF4AF5B1A78D096B4.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 23:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:44:45:61:eb:5b:7c:46:e6:e3:c7:20:80:0a:89:34:10:b4:29:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C284E54726A876081FA2857EF4AF5B1A78D096B4 Validity Not Before: Nov 5 08:07:36 2025 GMT Not After : Nov 6 10:03:36 2025 GMT Subject: CN=8AE6DC9835BD0411A833E4AA42B1606001827025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b1:63:7e:e7:52:d0:2a:8c:44:ab:ca:39:e0: 94:42:e4:97:39:71:31:e3:3e:dd:59:73:0e:6d:14: a2:2e:8a:44:4f:c6:0b:5d:f8:2d:e8:da:0e:4f:8b: 72:3f:c3:1e:2a:2d:c6:a6:7b:47:3c:f4:7d:be:ed: f6:e0:68:30:82:0d:b2:14:72:80:6b:f3:84:9e:61: b4:4c:e7:c2:8a:13:71:3d:d6:94:68:2d:c4:20:2f: 6d:07:9f:22:c4:cc:09:8b:de:c0:10:10:7a:94:b8: a2:cd:ee:8a:97:00:4c:6b:50:47:62:da:ae:06:86: 40:7e:27:76:78:5c:29:20:c5:62:38:3c:a6:62:ce: 91:16:14:fa:e6:1b:d9:37:a7:0a:05:d5:77:a8:59: 60:6c:41:01:84:ef:5d:93:dd:13:91:a3:42:a8:8f: 89:34:dc:ac:71:7a:a6:7a:a0:72:1a:d2:53:90:0b: 4b:b5:1c:3f:cc:dd:92:90:3e:88:1a:0f:c8:8b:cc: 11:65:dd:4d:3f:04:8f:98:35:d5:b5:4c:fb:ac:7c: 68:81:9c:de:aa:45:36:01:45:de:56:21:ff:15:92: 3e:74:e0:16:6b:b1:b7:75:c6:85:4e:c9:81:6a:a6: 39:bd:88:04:81:4a:61:dd:67:23:fe:b5:da:b8:a4: c9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E6:DC:98:35:BD:04:11:A8:33:E4:AA:42:B1:60:60:01:82:70:25 X509v3 Authority Key Identifier: keyid:C2:84:E5:47:26:A8:76:08:1F:A2:85:7E:F4:AF:5B:1A:78:D0:96:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/C284E54726A876081FA2857EF4AF5B1A78D096B4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:68:90:66:7c:60:34:68:75:03:0c:a3:3d:26:92:4f:fe:85: 24:59:dc:2b:fb:1a:f9:b7:58:c5:3b:ad:79:91:df:bb:31:12: 9b:b3:d8:d3:00:a4:a1:80:19:18:79:56:b6:58:fb:1f:74:ae: 19:4a:8b:60:fb:e1:3e:f6:5e:f9:60:ad:b4:2a:54:1c:5f:32: c9:2d:c1:b0:f2:b9:22:23:65:e4:bc:40:34:15:6a:82:b8:3e: 02:e9:eb:90:ad:ee:99:0e:64:d8:6d:d3:1e:fd:fa:57:e7:73: 16:a3:3a:c9:4a:12:17:77:00:ae:04:39:b4:1c:00:a0:bb:30: bb:e9:37:f0:c3:fd:34:d4:7d:09:7c:32:1d:98:9b:cc:e2:cb: 5e:fa:37:28:3c:bc:5a:be:88:96:07:50:f7:b7:f0:3f:ca:1f: 7e:8e:52:d2:cb:68:f7:3b:80:d6:52:64:d1:88:a2:67:a5:1a: 30:1e:84:d5:fd:9a:bd:49:6a:1f:42:b6:ff:f2:b2:58:0e:ad: 87:c7:82:79:94:4f:db:c9:2d:1d:f9:95:46:bc:87:9a:95:fa: a2:28:ad:46:03:b5:f5:38:20:bd:eb:67:2f:d2:7b:66:a1:34: 09:bb:67:00:1c:d6:13:23:8b:d5:9e:4a:42:e4:e7:71:bd:be: e7:a0:8a:e7 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUB0RFYetbfEbm48cggAqJNBC0KVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI4NEU1NDcyNkE4NzYwODFGQTI4NTdFRjRBRjVCMUE3 OEQwOTZCNDAeFw0yNTExMDUwODA3MzZaFw0yNTExMDYxMDAzMzZaMDMxMTAvBgNV BAMTKDhBRTZEQzk4MzVCRDA0MTFBODMzRTRBQTQyQjE2MDYwMDE4MjcwMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwsWN+51LQKoxEq8o54JRC5Jc5 cTHjPt1Zcw5tFKIuikRPxgtd+C3o2g5Pi3I/wx4qLcame0c89H2+7fbgaDCCDbIU coBr84SeYbRM58KKE3E91pRoLcQgL20HnyLEzAmL3sAQEHqUuKLN7oqXAExrUEdi 2q4GhkB+J3Z4XCkgxWI4PKZizpEWFPrmG9k3pwoF1XeoWWBsQQGE712T3RORo0Ko j4k03KxxeqZ6oHIa0lOQC0u1HD/M3ZKQPogaD8iLzBFl3U0/BI+YNdW1TPusfGiB nN6qRTYBRd5WIf8Vkj504BZrsbd1xoVOyYFqpjm9iASBSmHdZyP+tdq4pMmLAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUiubcmDW9BBGoM+SqQrFgYAGCcCUwHwYDVR0j BBgwFoAUwoTlRyaodggfooV+9K9bGnjQlrQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5 YjNkLzUvQzI4NEU1NDcyNkE4NzYwODFGQTI4NTdFRjRBRjVCMUE3OEQwOTZCNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC9DMjg0RTU0NzI2QTg3NjA4MUZBMjg1N0VG NEFGNUIxQTc4RDA5NkI0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzZmZjdhOTg5LWVjZGYtNDNkNi04NmUxLWY2YzM5MzViOWIzZC81L0MyODRFNTQ3 MjZBODc2MDgxRkEyODU3RUY0QUY1QjFBNzhEMDk2QjQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCLaJBm fGA0aHUDDKM9JpJP/oUkWdwr+xr5t1jFO615kd+7MRKbs9jTAKShgBkYeVa2WPsf dK4ZSotg++E+9l75YK20KlQcXzLJLcGw8rkiI2XkvEA0FWqCuD4C6euQre6ZDmTY bdMe/fpX53MWozrJShIXdwCuBDm0HACguzC76Tfww/001H0JfDIdmJvM4ste+jco PLxavoiWB1D3t/A/yh9+jlLSy2j3O4DWUmTRiKJnpRowHoTV/Zq9SWofQrb/8rJY Dq2Hx4J5lE/byS0d+ZVGvIealfqiKK1GA7X1OCC962cv0ntmoTQJu2cAHNYTI4vV nkpC5Odxvb7noIrn -----END CERTIFICATE-----Generated at Wed Nov 5 11:10:19 2025 by rpki-client