$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft File: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft (raw, json) Hash identifier: PH7bVnkwNhUiRq4bUBCua+2tYv2W0/37c7WWXlq2RCk= Subject key identifier: 64:60:28:17:83:5D:20:21:E6:A6:D6:F8:EE:4C:18:11:AF:3D:B6:E2 Authority key identifier: 1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 Certificate issuer: /CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Certificate serial: 564B40A74479988C6C4C6420B4A43013123AC8F7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft Manifest number: 0314 Signing time: Wed 05 Nov 2025 01:26:43 +0000 Manifest this update: Wed 05 Nov 2025 01:21:43 +0000 Manifest next update: Thu 06 Nov 2025 02:11:43 +0000 Files and hashes: 1: 326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa (hash: ZBQrTYQq6EzEXXQqVVLmnECxmx5vDStz1fI8gjrWa9o=) 2: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl (hash: yfwi9wkCYb2NSoMzT8kAeCqaX/mPbGCNQW5h9w/68es=) 3: 326131343a316563373a663030653a3a2f34382d3438203d3e203336383332.roa (hash: 0dTOq5r3nzcU4nhnM0SPSmfHWBkaaGJU3KJhAxTcvLU=) 4: 326131343a316563373a663030303a3a2f34302d3430203d3e20323038343533.roa (hash: kUd+OV7q9DAowS2L3/fdq/oS4HUMTFtScny+gWU7CG0=) 5: 326131343a316563373a663030643a3a2f34382d3438203d3e20323136313133.roa (hash: RA+L2a9rUnQEkE0h3dE9SdgUVHKokLJZl3eEmnwupDU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 23:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:4b:40:a7:44:79:98:8c:6c:4c:64:20:b4:a4:30:13:12:3a:c8:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Validity Not Before: Nov 5 01:21:43 2025 GMT Not After : Nov 6 02:11:43 2025 GMT Subject: CN=64602817835D2021E6A6D6F8EE4C1811AF3DB6E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:50:3f:64:c9:63:09:90:ba:e9:36:66:ad:f9: cf:63:04:26:04:fa:33:42:59:a2:e9:a9:59:72:11: 85:a8:3e:98:4e:25:e7:b5:7e:77:48:16:d9:d3:3d: 7d:d3:89:5f:37:93:ea:8e:be:8d:50:e1:35:4d:50: 03:f7:55:47:c0:ba:bc:f1:4e:d3:e4:58:c1:4f:82: 6e:be:cb:ef:3e:6c:17:64:24:9e:ae:01:73:f7:dd: f5:ef:16:15:bb:18:ba:65:97:13:57:bd:87:5b:0f: 8a:1f:b3:63:e9:29:01:62:53:46:81:93:57:8e:32: 4d:bd:b3:f2:b5:8b:8a:5f:39:fb:bb:0f:cd:6c:67: 5e:57:39:7f:3e:65:ec:b8:13:4d:b3:8f:be:e9:ee: c7:c1:8f:87:77:0d:64:a8:a5:2b:4c:c7:3e:b9:9e: c1:c3:1a:21:f4:f7:36:e6:d1:45:7b:be:d6:4c:eb: e2:9f:e3:91:03:1f:12:f3:ef:c7:3f:af:fb:24:c0: 89:9f:6b:eb:b6:42:6a:f3:40:cd:b6:81:48:08:46: bd:9f:de:e7:6d:c8:0e:45:88:29:b8:ee:9a:03:4e: 8c:4d:ee:5a:9f:04:b9:29:4d:11:a0:14:b5:70:4e: e3:c3:9e:1b:9b:8a:38:65:fa:48:fa:89:57:ca:17: bf:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:60:28:17:83:5D:20:21:E6:A6:D6:F8:EE:4C:18:11:AF:3D:B6:E2 X509v3 Authority Key Identifier: keyid:1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:a6:68:de:ab:e4:32:98:8d:1f:0c:64:5c:ce:29:2d:1c:d9: eb:0f:f9:ef:7a:57:dd:e4:29:c3:1b:e3:3f:9a:70:44:ba:7f: 5c:15:8b:89:4d:46:c6:23:45:f4:2e:eb:e7:31:cb:0b:f9:5f: 0c:2c:70:1d:86:86:cd:63:df:0a:89:36:0a:8e:25:ff:3a:69: 83:be:9d:c5:70:c1:d3:96:42:d4:ce:91:5f:5e:e6:99:f5:11: 2f:1f:6a:1d:bb:60:24:9f:be:28:9e:3b:a5:90:38:65:a8:d5: 06:93:e0:35:4d:66:37:2b:88:ac:ef:85:b1:59:14:19:f5:47: 40:d1:86:98:40:80:7d:3e:18:f2:24:a7:e6:ba:34:db:7f:fd: 1e:ab:30:cd:cc:08:d0:cc:70:62:9f:79:79:72:2f:98:ed:de: e1:ab:70:b4:ad:9d:41:63:30:9a:13:4c:d5:3e:2d:df:ea:4e: a0:6c:02:8c:c9:fb:92:93:8f:54:cb:4d:d6:ad:46:c3:b1:24: cc:8d:b2:65:9f:fe:d0:11:1e:16:62:e7:3f:3a:98:ac:1d:15: d1:d0:ce:2f:b0:59:c8:aa:78:ec:d0:33:2f:61:90:e0:fb:fb: 0a:93:ab:01:0a:81:cd:76:c8:fc:03:18:30:0b:54:30:77:0e: 22:d6:b6:8a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUVktAp0R5mIxsTGQgtKQwExI6yPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVG ODNFMEU3MTAeFw0yNTExMDUwMTIxNDNaFw0yNTExMDYwMjExNDNaMDMxMTAvBgNV BAMTKDY0NjAyODE3ODM1RDIwMjFFNkE2RDZGOEVFNEMxODExQUYzREI2RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3UD9kyWMJkLrpNmat+c9jBCYE +jNCWaLpqVlyEYWoPphOJee1fndIFtnTPX3TiV83k+qOvo1Q4TVNUAP3VUfAurzx TtPkWMFPgm6+y+8+bBdkJJ6uAXP33fXvFhW7GLpllxNXvYdbD4ofs2PpKQFiU0aB k1eOMk29s/K1i4pfOfu7D81sZ15XOX8+Zey4E02zj77p7sfBj4d3DWSopStMxz65 nsHDGiH09zbm0UV7vtZM6+Kf45EDHxLz78c/r/skwImfa+u2QmrzQM22gUgIRr2f 3udtyA5FiCm47poDToxN7lqfBLkpTRGgFLVwTuPDnhubijhl+kj6iVfKF7+9AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUZGAoF4NdICHmptb47kwYEa89tuIwHwYDVR0j BBgwFoAUHb0dR/2ORXTIQhdDycxfDvg+DnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzIvMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVGODNFMEU3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8xREJEMUQ0N0ZEOEU0NTc0Qzg0MjE3NDND OUNDNUYwRUY4M0UwRTcxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8yLzFEQkQxRDQ3 RkQ4RTQ1NzRDODQyMTc0M0M5Q0M1RjBFRjgzRTBFNzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAEpmje q+QymI0fDGRcziktHNnrD/nvelfd5CnDG+M/mnBEun9cFYuJTUbGI0X0LuvnMcsL +V8MLHAdhobNY98KiTYKjiX/OmmDvp3FcMHTlkLUzpFfXuaZ9REvH2odu2Akn74o njulkDhlqNUGk+A1TWY3K4is74WxWRQZ9UdA0YaYQIB9PhjyJKfmujTbf/0eqzDN zAjQzHBin3l5ci+Y7d7hq3C0rZ1BYzCaE0zVPi3f6k6gbAKMyfuSk49Uy03WrUbD sSTMjbJln/7QER4WYuc/OpisHRXR0M4vsFnIqnjs0DMvYZDg+/sKk6sBCoHNdsj8 AxgwC1Qwdw4i1raK -----END CERTIFICATE-----Generated at Wed Nov 5 15:13:28 2025 by rpki-client