$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft File: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft (raw, json) Hash identifier: qqyk6okth9dOOtoXV5S//j73r+aNJJihx+Iis9l08vM= Subject key identifier: 14:E6:F4:3C:0C:EC:42:5D:AD:27:4F:62:3D:F2:94:21:E1:EF:45:94 Authority key identifier: 0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 Certificate issuer: /CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Certificate serial: 19ACD07BF36297BF0CA5C5859BC75256364A5B17 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft Manifest number: A5 Signing time: Wed 05 Nov 2025 02:51:43 +0000 Manifest this update: Wed 05 Nov 2025 02:46:43 +0000 Manifest next update: Thu 06 Nov 2025 06:43:43 +0000 Files and hashes: 1: 326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (hash: PoxwFIHy8kdey2mlHnL1hmx4hhF1/GhCPxY1mv6kDWE=) 2: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl (hash: CI7Qtrf3B9X2PhjBHaPlO5TYXFBIoappM+F5bR+wkAM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 01:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:ac:d0:7b:f3:62:97:bf:0c:a5:c5:85:9b:c7:52:56:36:4a:5b:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Validity Not Before: Nov 5 02:46:43 2025 GMT Not After : Nov 6 06:43:43 2025 GMT Subject: CN=14E6F43C0CEC425DAD274F623DF29421E1EF4594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2a:0a:de:f5:1d:10:69:b6:35:87:0f:61:ea: f4:a9:e6:d1:4b:ad:d9:4a:6e:4a:90:35:83:67:4e: 1e:39:47:5c:4e:ba:78:93:05:5a:8f:bb:b3:65:e3: 8a:a6:e0:c9:f6:bf:48:f8:c5:4b:66:a1:2a:9b:b1: 3c:db:05:0d:ca:e5:62:0d:ee:1e:d2:6c:38:5f:c2: 6d:5e:8e:10:f9:69:f7:a7:8c:31:a1:5f:b5:3c:e8: 6f:2f:38:e2:10:09:84:3f:ff:41:59:3d:50:8c:23: 77:50:74:97:82:2a:eb:7c:32:e4:1f:ea:0d:d8:04: 96:ac:39:7c:df:2a:d7:6c:7a:a5:5a:9a:70:23:fe: 45:2a:4c:8d:78:ff:2c:8d:93:50:f9:6f:7d:04:35: e7:12:6c:d6:7c:a9:61:a3:b8:fc:ad:03:42:1b:46: 0d:94:0a:e5:15:28:07:8e:a3:ae:9b:e7:7e:09:28: 28:47:8b:b6:5d:fc:2d:3a:63:d3:fb:b0:3a:a2:9f: f5:84:b3:2e:2f:f7:29:f0:ea:51:b1:c0:1f:94:e6: b3:f8:24:a9:5e:ec:bf:ef:5c:8a:db:f1:9b:a6:bf: 93:25:b5:97:1a:e0:5d:b8:5a:67:07:fc:c1:20:fd: 6b:aa:78:c1:08:12:5a:e7:8c:26:c7:2a:64:ba:0a: b2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E6:F4:3C:0C:EC:42:5D:AD:27:4F:62:3D:F2:94:21:E1:EF:45:94 X509v3 Authority Key Identifier: keyid:0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:15:a9:de:b3:5f:8a:72:e8:f8:4d:ab:49:99:bf:67:58:82: 39:d6:5a:ad:c5:76:18:ad:07:1d:5b:5e:52:5b:8c:71:bc:8c: 67:7f:a7:f4:58:4a:31:fa:41:2c:d5:7d:e5:48:1b:a6:f7:8c: 7c:f4:7c:1b:d9:c7:bb:8b:f2:c5:12:dd:be:99:63:86:dd:5b: 3a:0e:df:51:60:4a:1b:1a:27:0c:ec:5e:12:6e:bf:3b:17:02: e1:07:63:3a:7c:96:8f:11:7c:db:64:7a:46:eb:cc:59:5d:5e: eb:97:68:d5:e9:ad:a3:45:ce:f8:8c:44:bf:5e:3d:e1:45:0a: 06:00:84:cc:4d:9f:4d:9b:e2:68:4c:c8:97:e5:ac:7a:8f:b0: 51:24:85:70:e2:21:62:2b:c7:f2:7b:5a:42:64:c3:d8:80:67: 96:f8:50:b6:80:cf:e8:14:56:33:dc:5d:3b:0c:c8:45:4d:76: 94:ee:b7:2e:cb:44:51:de:8b:4a:16:3a:31:14:82:5d:67:a1: cb:4b:2c:71:1f:da:f3:e4:c8:51:af:da:43:93:27:b6:dd:cd: 0e:6a:9f:d6:0f:ea:b6:d3:a2:04:f5:14:5c:e8:62:be:ad:e0: b1:0b:2e:b0:19:b0:72:5a:fb:14:32:ef:f8:37:cd:1a:53:d8: 6e:c0:28:11 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUGazQe/Nil78MpcWFm8dSVjZKWxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1 RjRCMDlCOTAeFw0yNTExMDUwMjQ2NDNaFw0yNTExMDYwNjQzNDNaMDMxMTAvBgNV BAMTKDE0RTZGNDNDMENFQzQyNURBRDI3NEY2MjNERjI5NDIxRTFFRjQ1OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgKgre9R0QabY1hw9h6vSp5tFL rdlKbkqQNYNnTh45R1xOuniTBVqPu7Nl44qm4Mn2v0j4xUtmoSqbsTzbBQ3K5WIN 7h7SbDhfwm1ejhD5afenjDGhX7U86G8vOOIQCYQ//0FZPVCMI3dQdJeCKut8MuQf 6g3YBJasOXzfKtdseqVamnAj/kUqTI14/yyNk1D5b30ENecSbNZ8qWGjuPytA0Ib Rg2UCuUVKAeOo66b534JKChHi7Zd/C06Y9P7sDqin/WEsy4v9ynw6lGxwB+U5rP4 JKle7L/vXIrb8Zumv5MltZca4F24WmcH/MEg/WuqeMEIElrnjCbHKmS6CrL9AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUFOb0PAzsQl2tJ09iPfKUIeHvRZQwHwYDVR0j BBgwFoAUCv23IiueujOmXim74/KdfF9LCbkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzMvMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1RjRCMDlCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC8wQUZEQjcyMjJCOUVCQTMzQTY1RTI5QkJF M0YyOUQ3QzVGNEIwOUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8zLzBBRkRCNzIy MkI5RUJBMzNBNjVFMjlCQkUzRjI5RDdDNUY0QjA5QjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA/Fane s1+Kcuj4TatJmb9nWII51lqtxXYYrQcdW15SW4xxvIxnf6f0WEox+kEs1X3lSBum 94x89Hwb2ce7i/LFEt2+mWOG3Vs6Dt9RYEobGicM7F4Sbr87FwLhB2M6fJaPEXzb ZHpG68xZXV7rl2jV6a2jRc74jES/Xj3hRQoGAITMTZ9Nm+JoTMiX5ax6j7BRJIVw 4iFiK8fye1pCZMPYgGeW+FC2gM/oFFYz3F07DMhFTXaU7rcuy0RR3otKFjoxFIJd Z6HLSyxxH9rz5MhRr9pDkye23c0Oap/WD+q206IE9RRc6GK+reCxCy6wGbByWvsU Mu/4N80aU9huwCgR -----END CERTIFICATE-----Generated at Wed Nov 5 17:15:05 2025 by rpki-client