$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft File: 5E5179BB1757068D7028510FEEB1177AA7CC8818.mft (raw, json) Hash identifier: Dd0JcKbhF1xxbTmh68jMwy5Qfp+ts0gLFRLneK+HpZU= Subject key identifier: 16:40:29:08:01:A1:4F:4B:17:23:6E:70:6E:3D:D3:1D:C0:EC:70:47 Authority key identifier: 5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18 Certificate issuer: /CN=5e5179bb1757068d7028510feeb1177aa7cc8818 Certificate serial: 0BEFF987CF0E91C5604C5675573A0F7AA4623E56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft Manifest number: 0573 Signing time: Tue 04 Nov 2025 12:37:06 +0000 Manifest this update: Tue 04 Nov 2025 12:32:06 +0000 Manifest next update: Wed 05 Nov 2025 14:14:06 +0000 Files and hashes: 1: 3139322e3130392e31312e302f32342d3234203d3e203136323736.roa (hash: qRWEBAMqR9/oXRv8A+nfXFduPkpHZgx8k4TEVcf/LOk=) 2: 38332e3135302e3231372e302f32342d3234203d3e20323132353034.roa (hash: k8RY7QTEncAN/MOxUGAuMRRlssrdtl7ahwCsdlVrRY0=) 3: 38332e3135302e3231362e302f32342d3234203d3e203630353538.roa (hash: CNBsLk3b8bUsaLSMZ5OmCj7rjJ6VgS1iooePZAAZtvw=) 4: 38332e3135302e3231362e302f32322d3234203d3e203631333137.roa (hash: bA7vtpR0TyML0HjZJJdgMHPc1uK0jGA3YpWrjwZ8y+U=) 5: 5E5179BB1757068D7028510FEEB1177AA7CC8818.crl (hash: DkKxFFOpCZkafSCflZbM43SvDbmndZmRh5X3FBi1boo=) 6: 38332e3135302e3231382e302f32342d3234203d3e20313939343135.roa (hash: yCFgEcnTSAhMVf29HMHp04B1k4DqC3mlqJPDdmg8wFQ=) 7: 38332e3135302e3231392e302f32342d3234203d3e203533333430.roa (hash: GXLgWx6Q3CLvfyeGG+4M+PXnBAwSeVlRcKDTfEKYkeQ=) 8: 3139322e3130392e31302e302f32342d3234203d3e203239383032.roa (hash: zPOJooX1SbIfEdoUfLmfFj+bOWKjqS7oznOqpFqjTp4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:ef:f9:87:cf:0e:91:c5:60:4c:56:75:57:3a:0f:7a:a4:62:3e:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e5179bb1757068d7028510feeb1177aa7cc8818 Validity Not Before: Nov 4 12:32:06 2025 GMT Not After : Nov 5 14:14:06 2025 GMT Subject: CN=1640290801A14F4B17236E706E3DD31DC0EC7047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:88:eb:4b:2e:e8:8c:ab:ab:64:34:fa:2c:db: 6a:d7:ca:8f:09:f7:41:ea:b1:2c:11:ec:0c:4e:3c: fc:9e:f9:d7:92:e2:a5:59:d3:7a:a2:f8:1f:94:3a: a6:b1:aa:16:08:1d:30:2b:dd:49:ec:d2:c2:53:fc: a9:c3:3f:53:eb:b8:11:27:47:02:cc:a5:11:d4:a4: 2b:db:a8:1d:47:5e:e8:48:18:65:a8:33:0a:33:a9: e8:f7:58:b3:3c:b3:f6:e8:e3:f1:6c:32:ae:f8:90: 17:ff:84:94:2b:df:bb:08:ca:7a:44:16:c3:ff:18: 4a:f9:a5:db:bc:67:7f:ba:79:7b:7b:c0:01:9e:fe: 97:de:be:b1:4c:fb:12:2c:a4:50:31:0c:7a:59:df: 6e:5e:1d:e2:36:bd:50:96:f0:16:b2:f4:26:1d:b0: c9:0c:79:42:9e:5a:85:1b:8e:52:b9:8f:69:4c:e4: b2:88:39:28:5a:74:ab:55:0d:1b:71:01:46:7b:80: 7a:e6:ab:35:35:80:63:e3:20:ed:35:74:f5:57:53: e3:9a:1c:a5:55:0a:1b:d9:02:89:65:5b:d3:79:b5: 71:8f:02:d4:97:7e:77:21:19:6e:9c:45:f8:c7:05: 30:a5:8a:ee:46:f1:a2:0a:19:15:b6:b8:8b:61:42: 2f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:40:29:08:01:A1:4F:4B:17:23:6E:70:6E:3D:D3:1D:C0:EC:70:47 X509v3 Authority Key Identifier: keyid:5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:10:1b:e4:b6:19:b0:80:2d:35:9a:cc:1f:b4:86:d6:59:01: 53:39:30:6e:31:86:cb:3d:80:71:6f:6d:4b:b3:57:a1:c0:ce: 26:cf:44:aa:d8:17:3f:e8:d2:ba:ef:f5:a2:a6:4a:8a:ca:e9: a2:a1:cc:94:7b:a4:13:aa:44:3f:d9:a9:ec:8f:ee:af:93:56: ef:2d:37:67:96:2f:61:ca:38:ab:6c:40:55:90:35:15:09:fa: 72:ef:03:dd:8a:a8:90:30:61:93:87:76:0e:ed:2c:02:1b:90: 8b:58:66:f9:d8:71:86:64:34:75:e9:83:11:1a:e1:5c:ba:f2: 8f:34:32:ca:81:35:10:97:7d:32:00:e4:40:88:d4:1c:22:60: 72:0b:89:7c:44:09:49:15:6b:e5:ff:32:5f:3d:21:d0:31:9a: cd:25:1f:af:01:66:8b:ad:6d:3a:35:04:1c:5a:4a:d2:90:4c: 27:6b:91:ed:22:b9:1d:c4:4a:4a:9d:4d:5f:03:26:b0:68:03: 4c:47:f6:59:27:f5:fe:0d:81:db:a9:a2:96:2f:c4:6b:0e:a3: 6d:dc:98:ab:b8:43:24:24:bb:10:2d:76:44:c2:0b:a3:a6:02: 37:94:fe:b6:c5:13:e3:ee:aa:de:09:b2:e5:5e:90:7d:da:cd: aa:30:1d:46 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUC+/5h88OkcVgTFZ1VzoPeqRiPlYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWU1MTc5YmIxNzU3MDY4ZDcwMjg1MTBmZWViMTE3N2Fh N2NjODgxODAeFw0yNTExMDQxMjMyMDZaFw0yNTExMDUxNDE0MDZaMDMxMTAvBgNV BAMTKDE2NDAyOTA4MDFBMTRGNEIxNzIzNkU3MDZFM0REMzFEQzBFQzcwNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoiOtLLuiMq6tkNPos22rXyo8J 90HqsSwR7AxOPPye+deS4qVZ03qi+B+UOqaxqhYIHTAr3Uns0sJT/KnDP1PruBEn RwLMpRHUpCvbqB1HXuhIGGWoMwozqej3WLM8s/bo4/FsMq74kBf/hJQr37sIynpE FsP/GEr5pdu8Z3+6eXt7wAGe/pfevrFM+xIspFAxDHpZ325eHeI2vVCW8Bay9CYd sMkMeUKeWoUbjlK5j2lM5LKIOShadKtVDRtxAUZ7gHrmqzU1gGPjIO01dPVXU+Oa HKVVChvZAollW9N5tXGPAtSXfnchGW6cRfjHBTCliu5G8aIKGRW2uIthQi+ZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUFkApCAGhT0sXI25wbj3THcDscEcwHwYDVR0j BBgwFoAUXlF5uxdXBo1wKFEP7rEXeqfMiBgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODNlNDc1N2YtZDM3Zi00ZmQ2LWE2OWItZDc0YmRkNmI4 N2RjLzAvNUU1MTc5QkIxNzU3MDY4RDcwMjg1MTBGRUVCMTE3N0FBN0NDODgxOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hsRjV1eGRYQm8xd0tGRVA3ckVYZXFm TWlCZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84M2U0NzU3Zi1k MzdmLTRmZDYtYTY5Yi1kNzRiZGQ2Yjg3ZGMvMC81RTUxNzlCQjE3NTcwNjhENzAy ODUxMEZFRUIxMTc3QUE3Q0M4ODE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABhAb5LYZsIAtNZrMH7SG 1lkBUzkwbjGGyz2AcW9tS7NXocDOJs9EqtgXP+jSuu/1oqZKisrpoqHMlHukE6pE P9mp7I/ur5NW7y03Z5YvYco4q2xAVZA1FQn6cu8D3YqokDBhk4d2Du0sAhuQi1hm +dhxhmQ0demDERrhXLryjzQyyoE1EJd9MgDkQIjUHCJgcguJfEQJSRVr5f8yXz0h 0DGazSUfrwFmi61tOjUEHFpK0pBMJ2uR7SK5HcRKSp1NXwMmsGgDTEf2WSf1/g2B 26mili/Eaw6jbdyYq7hDJCS7EC12RMILo6YCN5T+tsUT4+6q3gmy5V6QfdrNqjAd Rg== -----END CERTIFICATE-----Generated at Tue Nov 4 18:05:00 2025 by rpki-client