$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft File: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft (raw, json) Hash identifier: GzcytMnyS3GEPvzoIy6gzOjoDkRKdqKHmYe8NDA2aJc= Subject key identifier: 48:22:5D:7F:A6:65:11:3B:42:3B:9D:D0:37:6D:31:9C:55:3F:2A:AD Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Certificate serial: 10A20017F9891D81C809A1E721B96CD711CAD87E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft Manifest number: 01D6 Signing time: Tue 04 Nov 2025 06:17:06 +0000 Manifest this update: Tue 04 Nov 2025 06:12:06 +0000 Manifest next update: Wed 05 Nov 2025 07:54:06 +0000 Files and hashes: 1: 38352e3131372e3233312e302f32342d3234203d3e20323133373234.roa (hash: ohyXGo6Fwg3029u2hdROae+jQf4VI2skgvLUXH3jI8w=) 2: 3138352e3231332e3235302e302f32342d3234203d3e20323132323338.roa (hash: ygSJr7gJnzCgddZdASy6lFYbTZobnImgktqUZvda03k=) 3: 3139342e33342e3235342e302f32342d3234203d3e203339353231.roa (hash: NlXPjFULkcx7gkn+N7DXp0UvA+RAqFzlxOrFX93rGv4=) 4: 3138352e3231332e3235312e302f32342d3234203d3e20393834.roa (hash: +mGpTck72lzkh7Ood/3OgnV6lEE5Ty61FGiwl0p4XrE=) 5: 3138352e3231332e3234392e302f32342d3234203d3e20343030393039.roa (hash: 4O3foUV7f18NUYJQaeBYgK+aW1lr+7o+ea8CcQjVzCw=) 6: 38352e3131372e3232382e302f32342d3234203d3e20323134343538.roa (hash: rcAG2FX2+ZD0Qb1+KeZK9os832Q7CwzkoxVHQi9yY7k=) 7: 3139342e33342e3235332e302f32342d3234203d3e2035303635.roa (hash: tD+eYvXQsGkCcpnz6s7EBRYpOf8Iu4vdb3Qy27wUI6g=) 8: 3139342e33342e3235322e302f32342d3234203d3e20313335343032.roa (hash: PzY2ZjUPUkaqIDtZu9fHD0rPK6Exx+TMbdxcEJS1upA=) 9: 3138352e3231332e3235312e302f32342d3234203d3e20313337353537.roa (hash: eYILiT2JPXpEDLdM1mRS7Zrw3uThCrbSVHgyCN3lFo4=) 10: 38352e3131372e3232392e302f32342d3234203d3e20323132323338.roa (hash: qWG9h0hKE/+rc67V6b0QtNqJKNBV/dmrN+3owun/5GY=) 11: 3139342e33342e3235352e302f32342d3234203d3e20313431393638.roa (hash: iQ9RYSqOmsvIqARX4nqI9wEFn//drkKsHCDo7XaSdTU=) 12: 38352e3131372e3233302e302f32342d3234203d3e2035303635.roa (hash: 8/mMTd8OI6hx+rEazKaA5i9flVTt9So8wwSfFF6xpVo=) 13: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl (hash: AGDPeTRjDa0rWtdVOnDUX4MGhW/Xfi5yvdpxknanizc=) 14: 3138352e3231332e3234382e302f32342d3234203d3e20323035383836.roa (hash: ODfn5/rpX0/qAWjZsS/cv+gVh3kFgfI7CdBECTg9zww=) 15: 3138352e3231332e3235312e302f32342d3234203d3e20313338383838.roa (hash: u9k1CEDVyAGe8je2Y99pF+EO5LdgGSTfU7yFr7GEyGA=) 16: 3138352e3231332e3235312e302f32342d3234203d3e20313338313630.roa (hash: fygAQSb+QwiyUnesqK4IcvvWfRduHnIesYUaMnTC6go=) 17: 3138352e3231332e3234392e302f32342d3234203d3e203235313938.roa (hash: RAmqdtOqt2GXnv4T7A8gAKdg4H2+TG5CqjE3/MvQxnU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 07:54:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:a2:00:17:f9:89:1d:81:c8:09:a1:e7:21:b9:6c:d7:11:ca:d8:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Validity Not Before: Nov 4 06:12:06 2025 GMT Not After : Nov 5 07:54:06 2025 GMT Subject: CN=48225D7FA665113B423B9DD0376D319C553F2AAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:44:84:15:fe:2c:96:4e:a6:27:c2:36:03:5d: 2a:6d:48:98:0c:1a:df:55:7b:8e:16:a4:5c:ec:58: fe:29:e8:23:7c:6b:02:7b:cf:5d:c3:49:68:c9:8a: d1:87:4f:8f:b2:89:bd:63:f6:c7:0e:34:76:23:ba: 7a:72:fb:0f:37:73:2d:9f:19:01:96:3f:67:37:55: 00:f3:bd:0d:f3:c5:3a:35:02:bf:d7:8d:82:65:74: 13:87:27:c9:fc:bd:28:ed:26:d6:01:91:80:36:46: ed:11:06:9c:c9:c2:0a:5f:d7:f6:b7:16:f6:9f:4c: 20:35:ff:01:c7:8d:80:09:54:3f:b4:e3:b3:d0:05: e3:77:5a:4c:03:81:06:5e:ca:0d:22:04:3a:d7:60: f8:9d:b8:5e:f5:88:fc:cd:8e:55:04:b5:17:f9:05: ad:d3:0f:29:68:15:ab:c7:71:45:f4:b6:90:4f:fe: 7b:79:3b:15:9b:8d:83:aa:37:cc:94:98:17:bd:bf: 66:f1:4c:b6:bb:30:0c:14:73:ef:72:01:27:50:66: b2:61:78:91:55:3d:77:f9:d7:dc:d3:40:74:45:c9: fd:74:86:38:10:a2:26:f9:b0:ac:b7:e5:df:92:a1: a9:0b:8d:be:cb:fc:56:58:07:be:be:7f:a3:d2:9d: cd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:22:5D:7F:A6:65:11:3B:42:3B:9D:D0:37:6D:31:9C:55:3F:2A:AD X509v3 Authority Key Identifier: keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:23:71:72:0d:da:f3:09:59:46:e5:c8:b6:83:b5:f9:62:67: a1:b6:80:e6:ef:df:00:c9:de:87:ee:6e:08:72:10:d7:81:72: 55:f0:da:b0:a0:50:b6:7d:80:e6:e4:0f:ac:42:eb:61:43:76: fd:fc:0a:de:30:fe:5f:3f:e6:0a:33:85:66:22:14:c2:98:7f: 25:18:bd:fa:2d:b9:2a:b8:16:aa:eb:97:66:c0:12:e6:6c:c4: c4:6e:51:21:9d:f9:a0:1d:69:1e:bf:f3:21:ba:2e:6d:ac:5f: 22:84:a0:12:06:28:dc:4e:9d:ae:9e:e6:7a:da:53:f6:86:e9: 1e:83:58:03:62:07:a9:1f:e0:6e:17:c8:fa:8b:8a:b2:af:32: 80:6c:3c:e8:25:74:16:ca:2e:0e:7f:b5:c3:48:67:98:a7:8f: 45:49:1d:cd:6e:c1:ee:f1:df:b0:27:63:b0:79:0a:59:d7:a1: a3:fd:1b:50:97:a0:f4:37:19:96:89:f2:14:57:63:6b:44:d5: c8:82:af:1e:08:29:3a:45:9e:3a:1e:ac:51:f7:06:53:1b:00: 8c:bf:b6:6b:a6:f7:e8:23:80:ce:68:53:d1:ee:69:ee:24:f5: 4a:b9:ac:56:8d:2c:c5:6c:cd:b4:80:a3:cc:ed:e7:a1:10:84: fe:7a:6c:26 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUEKIAF/mJHYHICaHnIbls1xHK2H4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl ODQxYTRkMzAeFw0yNTExMDQwNjEyMDZaFw0yNTExMDUwNzU0MDZaMDMxMTAvBgNV BAMTKDQ4MjI1RDdGQTY2NTExM0I0MjNCOUREMDM3NkQzMTlDNTUzRjJBQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCRIQV/iyWTqYnwjYDXSptSJgM Gt9Ve44WpFzsWP4p6CN8awJ7z13DSWjJitGHT4+yib1j9scONHYjunpy+w83cy2f GQGWP2c3VQDzvQ3zxTo1Ar/XjYJldBOHJ8n8vSjtJtYBkYA2Ru0RBpzJwgpf1/a3 FvafTCA1/wHHjYAJVD+047PQBeN3WkwDgQZeyg0iBDrXYPiduF71iPzNjlUEtRf5 Ba3TDyloFavHcUX0tpBP/nt5OxWbjYOqN8yUmBe9v2bxTLa7MAwUc+9yASdQZrJh eJFVPXf519zTQHRFyf10hjgQoib5sKy35d+SoakLjb7L/FZYB76+f6PSnc1DAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUSCJdf6ZlETtCO53QN20xnFU/Kq0wHwYDVR0j BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4 Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o QnBOTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MTEzZGRhNi03 YWRlLTQ0NWQtOGM2ZS00NDhhNzhlNDhjYTEvMS8wRDdGRkFFMzAwREVGMDg3NkJG ODQ4OTBGQjZFQTE3QkU4NDFBNEQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSNxcg3a8wlZRuXItoO1 +WJnobaA5u/fAMneh+5uCHIQ14FyVfDasKBQtn2A5uQPrELrYUN2/fwK3jD+Xz/m CjOFZiIUwph/JRi9+i25KrgWquuXZsAS5mzExG5RIZ35oB1pHr/zIboubaxfIoSg EgYo3E6drp7metpT9obpHoNYA2IHqR/gbhfI+ouKsq8ygGw86CV0FsouDn+1w0hn mKePRUkdzW7B7vHfsCdjsHkKWdeho/0bUJeg9DcZlonyFFdja0TVyIKvHggpOkWe Oh6sUfcGUxsAjL+2a6b36COAzmhT0e5p7iT1SrmsVo0sxWzNtICjzO3noRCE/nps Jg== -----END CERTIFICATE-----Generated at Tue Nov 4 18:08:04 2025 by rpki-client