$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft File: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft (raw, json) Hash identifier: 3TBiqCnjZSEpLw4mMEsuCdhmHLfMqutC3ESoDjDakcw= Subject key identifier: 12:D9:F9:6F:A8:F9:A7:A9:C1:ED:F9:25:BD:96:1B:CA:B8:65:8F:A7 Authority key identifier: 1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 Certificate issuer: /CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Certificate serial: 42166221A155F2D7C0765E71A1577CD5D3C17627 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft Manifest number: 0315 Signing time: Wed 05 Nov 2025 18:15:42 +0000 Manifest this update: Wed 05 Nov 2025 18:10:42 +0000 Manifest next update: Thu 06 Nov 2025 21:29:42 +0000 Files and hashes: 1: 326131343a316563373a663030643a3a2f34382d3438203d3e20323136313133.roa (hash: RA+L2a9rUnQEkE0h3dE9SdgUVHKokLJZl3eEmnwupDU=) 2: 326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa (hash: ZBQrTYQq6EzEXXQqVVLmnECxmx5vDStz1fI8gjrWa9o=) 3: 326131343a316563373a663030303a3a2f34302d3430203d3e20323038343533.roa (hash: kUd+OV7q9DAowS2L3/fdq/oS4HUMTFtScny+gWU7CG0=) 4: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl (hash: DIP2X6VmYtX+7gg4RgTIjH5JVZaHcZR7XBJHS3JIDbE=) 5: 326131343a316563373a663030653a3a2f34382d3438203d3e203336383332.roa (hash: 0dTOq5r3nzcU4nhnM0SPSmfHWBkaaGJU3KJhAxTcvLU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:16:62:21:a1:55:f2:d7:c0:76:5e:71:a1:57:7c:d5:d3:c1:76:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Validity Not Before: Nov 5 18:10:42 2025 GMT Not After : Nov 6 21:29:42 2025 GMT Subject: CN=12D9F96FA8F9A7A9C1EDF925BD961BCAB8658FA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fa:fc:ca:2e:8a:01:11:1c:b6:da:f0:3e:2c: e6:35:61:91:27:b9:46:15:be:b2:40:73:f1:b4:46: 14:1a:00:cb:9b:5a:21:8b:04:cd:e6:df:ff:fe:a8: 8d:fb:e9:e6:da:35:9c:b3:2e:1f:4b:83:51:bb:f9: 06:ea:fa:a6:12:ff:ab:9f:c1:55:39:5d:8c:f3:b8: 96:0e:2e:03:7b:13:7f:92:86:f9:5b:02:2a:24:89: 86:63:ae:13:aa:c4:8c:e3:8e:58:fd:4f:c1:8e:bc: a2:79:b1:3d:22:86:77:ce:c1:90:7d:ce:05:24:05: 8f:5c:c6:06:fb:57:93:8a:a2:bb:99:8f:9a:4d:40: a8:b0:25:86:a2:3b:c7:51:5b:ec:4e:6c:a8:ac:6b: 4f:29:6c:20:6c:9f:a4:1f:6d:37:02:fc:d6:5d:cd: d9:ed:40:1c:20:c8:2f:a5:43:b6:9f:9b:f7:65:e3: 14:f0:d4:79:72:e7:ff:27:6e:d0:89:fb:84:0d:78: 44:63:58:4b:d6:bc:2d:69:a7:58:ba:82:ea:52:48: 1f:87:c5:58:c2:13:41:53:c0:bb:4b:cd:b3:ef:bd: aa:b8:6f:f6:85:fc:4a:82:69:dc:cc:2c:a4:ea:88: 4d:36:1c:d7:f2:18:6d:51:f3:a3:5e:e9:c1:b8:fb: 20:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D9:F9:6F:A8:F9:A7:A9:C1:ED:F9:25:BD:96:1B:CA:B8:65:8F:A7 X509v3 Authority Key Identifier: keyid:1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:ac:01:48:1e:21:68:d3:c4:6b:60:09:f0:bd:1c:8b:5b:b9: 87:db:31:f0:9e:a3:b0:58:4f:ce:cb:a4:5f:7c:07:c4:fc:c5: 3e:87:61:10:55:20:1c:0a:4d:c9:43:83:49:82:1d:a8:a6:b2: a1:ae:67:17:c2:ce:ed:74:61:82:b3:da:2e:26:3b:fe:82:cf: de:e4:f2:96:84:d1:0f:07:89:c9:c5:9e:9d:c8:95:0c:c1:11: 1c:ba:dc:90:29:82:34:96:c4:5a:9e:8d:ed:6d:b6:f8:c2:d9: 1e:37:62:98:ee:4e:bb:f9:c1:e1:b3:c0:f0:47:84:ce:12:d3: 2b:72:78:37:0e:71:c4:28:09:65:be:7a:86:d5:e4:dd:6f:0e: f9:bb:a7:e8:34:29:b8:77:04:1d:1f:a8:f9:55:7b:a4:46:fc: d1:57:98:78:64:49:5f:c9:bc:7e:14:51:79:6e:1b:51:50:2b: 4a:03:60:2a:47:69:f5:56:bb:42:91:26:de:5e:7a:1a:8b:ce: 43:ae:e1:3a:42:47:21:56:42:85:aa:37:96:6c:ee:06:31:84: 2b:07:bf:ce:b7:0f:47:c1:74:a6:01:fe:d9:c0:6e:2c:19:ab: dd:b8:d2:ad:8a:9a:1e:a0:81:25:42:05:87:34:31:3a:e7:7c: a5:b1:35:20 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUQhZiIaFV8tfAdl5xoVd81dPBdicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVG ODNFMEU3MTAeFw0yNTExMDUxODEwNDJaFw0yNTExMDYyMTI5NDJaMDMxMTAvBgNV BAMTKDEyRDlGOTZGQThGOUE3QTlDMUVERjkyNUJEOTYxQkNBQjg2NThGQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB+vzKLooBERy22vA+LOY1YZEn uUYVvrJAc/G0RhQaAMubWiGLBM3m3//+qI376ebaNZyzLh9Lg1G7+Qbq+qYS/6uf wVU5XYzzuJYOLgN7E3+ShvlbAiokiYZjrhOqxIzjjlj9T8GOvKJ5sT0ihnfOwZB9 zgUkBY9cxgb7V5OKoruZj5pNQKiwJYaiO8dRW+xObKisa08pbCBsn6QfbTcC/NZd zdntQBwgyC+lQ7afm/dl4xTw1Hly5/8nbtCJ+4QNeERjWEvWvC1pp1i6gupSSB+H xVjCE0FTwLtLzbPvvaq4b/aF/EqCadzMLKTqiE02HNfyGG1R86Ne6cG4+yB/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUEtn5b6j5p6nB7fklvZYbyrhlj6cwHwYDVR0j BBgwFoAUHb0dR/2ORXTIQhdDycxfDvg+DnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzIvMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVGODNFMEU3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8xREJEMUQ0N0ZEOEU0NTc0Qzg0MjE3NDND OUNDNUYwRUY4M0UwRTcxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8yLzFEQkQxRDQ3 RkQ4RTQ1NzRDODQyMTc0M0M5Q0M1RjBFRjgzRTBFNzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCnrAFI HiFo08RrYAnwvRyLW7mH2zHwnqOwWE/Oy6RffAfE/MU+h2EQVSAcCk3JQ4NJgh2o prKhrmcXws7tdGGCs9ouJjv+gs/e5PKWhNEPB4nJxZ6dyJUMwREcutyQKYI0lsRa no3tbbb4wtkeN2KY7k67+cHhs8DwR4TOEtMrcng3DnHEKAllvnqG1eTdbw75u6fo NCm4dwQdH6j5VXukRvzRV5h4ZElfybx+FFF5bhtRUCtKA2AqR2n1VrtCkSbeXnoa i85DruE6QkchVkKFqjeWbO4GMYQrB7/Otw9HwXSmAf7ZwG4sGavduNKtipoeoIEl QgWHNDE653ylsTUg -----END CERTIFICATE-----Generated at Wed Nov 5 20:47:07 2025 by rpki-client