$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft File: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft (raw, json) Hash identifier: Y/h3ZbDj13TQ1waKALpBV40dnbS6Pl3kPDHkrDa3B8s= Subject key identifier: BC:DE:B2:DA:82:29:67:03:9F:C2:62:C5:0C:5F:75:58:81:5F:62:9B Authority key identifier: 0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30 Certificate issuer: /CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30 Certificate serial: 4C133F6A3C6D693E1DDDE52944FA9918C2A490A9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft Manifest number: 04C0 Signing time: Thu 06 Nov 2025 13:22:42 +0000 Manifest this update: Thu 06 Nov 2025 13:17:42 +0000 Manifest next update: Fri 07 Nov 2025 15:19:42 +0000 Files and hashes: 1: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl (hash: 5A0VGb9ZbnPCBUG8beWp2r2Z3a6MjzO8unDUFj7Aoqo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 07 Nov 2025 15:19:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:13:3f:6a:3c:6d:69:3e:1d:dd:e5:29:44:fa:99:18:c2:a4:90:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30 Validity Not Before: Nov 6 13:17:42 2025 GMT Not After : Nov 7 15:19:42 2025 GMT Subject: CN=BCDEB2DA822967039FC262C50C5F7558815F629B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:9d:b5:a3:64:ed:d5:d4:9e:fa:fc:e1:22:e6: 20:36:1f:da:29:99:72:b8:22:6f:40:5f:b2:cc:e0: 17:14:a6:8b:72:ff:a0:96:33:7d:f0:11:e4:f7:7b: 7b:14:fc:89:07:70:68:4c:00:27:1d:c8:68:1f:a5: 61:08:54:9a:49:13:a0:f6:f8:89:a9:a9:d3:94:90: dc:4a:5c:19:22:83:6b:47:d8:3b:69:98:7d:e9:5a: 79:e2:3a:b4:52:f7:cb:6c:59:24:0c:10:4c:68:a3: 4a:c8:75:1e:bb:16:c6:07:e4:28:ac:79:f6:f9:a7: 12:5d:a0:50:2b:47:2e:a5:95:7f:9f:11:71:9f:2c: 6e:5c:84:b9:22:78:ef:c5:31:87:d3:94:f4:41:a1: 92:70:e7:36:06:33:7f:92:10:d1:ff:f7:66:8d:5b: 54:36:25:fc:31:f1:d9:ae:b5:c0:73:b8:ae:d5:e7: 6f:17:f1:5d:a1:ff:6b:9e:ff:df:c5:30:83:d6:4f: 13:72:72:91:00:36:17:da:aa:c5:6b:2f:6e:7f:1a: a5:a5:99:a7:fa:00:6d:09:78:28:b4:d3:2e:0f:8d: 80:07:e8:47:ad:8d:94:25:92:37:9f:a2:80:6f:6b: b0:03:c3:44:68:30:c1:5e:10:62:43:05:1a:15:1b: 9c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:DE:B2:DA:82:29:67:03:9F:C2:62:C5:0C:5F:75:58:81:5F:62:9B X509v3 Authority Key Identifier: keyid:0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:75:46:6d:e6:00:94:de:0d:be:e1:15:0d:fc:c1:9e:ab:76: 0b:05:d9:62:81:67:29:6e:83:82:e0:e6:f9:ba:b6:ec:ab:ae: 91:f9:ff:4e:dd:b8:41:2c:7e:a4:d3:62:7b:9d:61:f3:29:6f: b5:18:ca:81:b4:65:be:7b:83:3b:b4:6d:e5:2e:02:a5:0b:b7: 41:3e:42:d3:13:d0:8e:59:23:66:d5:80:0c:1a:df:1c:c9:cf: 8d:d2:50:09:63:63:2b:4f:eb:f4:94:0b:c2:88:7f:ef:69:d7: 44:07:f1:05:66:0e:c4:4d:a3:3f:76:5d:cf:7b:3c:1d:f8:5e: fd:fa:c3:92:89:aa:51:0a:a9:29:53:85:06:dd:fd:33:0f:74: cc:a4:b4:31:c3:5b:3f:4c:06:1a:05:b5:60:50:e7:57:ed:c1: 95:38:73:41:43:b0:0a:a4:42:25:70:a6:c9:41:9b:10:62:ba: de:54:8c:36:a0:49:66:0f:34:b5:9c:c1:50:ba:63:63:79:c0: 70:d4:d0:68:22:95:9a:b1:e7:51:f2:ef:2d:ea:ed:1a:4a:70: 89:d0:db:09:03:fe:92:65:48:e5:6b:e1:a3:37:bc:73:fd:70: c0:2d:86:0f:d6:ba:35:f0:7f:ab:e1:53:d8:ae:4b:b7:03:1c: 24:fb:c1:cd -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUTBM/ajxtaT4d3eUpRPqZGMKkkKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUx RDA0MEEzMDAeFw0yNTExMDYxMzE3NDJaFw0yNTExMDcxNTE5NDJaMDMxMTAvBgNV BAMTKEJDREVCMkRBODIyOTY3MDM5RkMyNjJDNTBDNUY3NTU4ODE1RjYyOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlnbWjZO3V1J76/OEi5iA2H9op mXK4Im9AX7LM4BcUpoty/6CWM33wEeT3e3sU/IkHcGhMACcdyGgfpWEIVJpJE6D2 +ImpqdOUkNxKXBkig2tH2DtpmH3pWnniOrRS98tsWSQMEExoo0rIdR67FsYH5Cis efb5pxJdoFArRy6llX+fEXGfLG5chLkieO/FMYfTlPRBoZJw5zYGM3+SENH/92aN W1Q2Jfwx8dmutcBzuK7V528X8V2h/2ue/9/FMIPWTxNycpEANhfaqsVrL25/GqWl maf6AG0JeCi00y4PjYAH6EetjZQlkjefooBva7ADw0RoMMFeEGJDBRoVG5x3AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUvN6y2oIpZwOfwmLFDF91WIFfYpswHwYDVR0j BBgwFoAUDk68Qx41E/w/ZB24gOKy/h0ECjAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm YmY1LzEvMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUxRDA0MEEzMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00YjFhLTQ2 ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC8wRTRFQkM0MzFFMzUxM0ZDM0Y2NDFEQjg4 MEUyQjJGRTFEMDQwQTMwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzgxMTE1YmM2LTEwZjYtNGFmMy1iYTA5LThiNjg3YTU2ZmJmNS8xLzBFNEVCQzQz MUUzNTEzRkMzRjY0MURCODgwRTJCMkZFMUQwNDBBMzAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCYdUZt 5gCU3g2+4RUN/MGeq3YLBdligWcpboOC4Ob5urbsq66R+f9O3bhBLH6k02J7nWHz KW+1GMqBtGW+e4M7tG3lLgKlC7dBPkLTE9COWSNm1YAMGt8cyc+N0lAJY2MrT+v0 lAvCiH/vaddEB/EFZg7ETaM/dl3Pezwd+F79+sOSiapRCqkpU4UG3f0zD3TMpLQx w1s/TAYaBbVgUOdX7cGVOHNBQ7AKpEIlcKbJQZsQYrreVIw2oElmDzS1nMFQumNj ecBw1NBoIpWasedR8u8t6u0aSnCJ0NsJA/6SZUjla+GjN7xz/XDALYYP1ro18H+r 4VPYrku3Axwk+8HN -----END CERTIFICATE-----Generated at Fri Nov 7 04:38:24 2025 by rpki-client