$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft File: B3D0280F500695A43204251C9830454CA8A2E7AC.mft (raw, json) Hash identifier: URppNy0s3uRCc6ShWEgNe24jDt8om4ixgtmEHBHFE+Q= Subject key identifier: 49:AB:67:30:FA:D7:FD:76:0E:A8:76:EF:30:57:75:F4:B2:BA:0F:46 Authority key identifier: B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC Certificate issuer: /CN=b3d0280f500695a43204251c9830454ca8a2e7ac Certificate serial: 3B92F32391DCA8D02D52BA6C5AA20A10B45FB8E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft Manifest number: 02D6 Signing time: Tue 04 Nov 2025 04:27:06 +0000 Manifest this update: Tue 04 Nov 2025 04:22:06 +0000 Manifest next update: Wed 05 Nov 2025 04:47:06 +0000 Files and hashes: 1: B3D0280F500695A43204251C9830454CA8A2E7AC.crl (hash: 6Ic/e8nY0OYNfgBK2OsjYWrST7AXW04aGtH5U2IkFkY=) 2: 3138352e3138362e32352e302f32342d3234203d3e203135343430.roa (hash: zbKaWYwmjPPC167P5YL6I94JcPZEWN0HKnmqpfcR9u4=) 3: 3138352e3138362e32362e302f32342d3234203d3e20323135373033.roa (hash: FBdBmLEGxXhvarnPJcmElFlCgeLSIQ6GXw75K+usirs=) 4: 3138352e3138362e32372e302f32342d3234203d3e203631333137.roa (hash: jD3TEx8Q8JwdsmzwyDZ9zaukL1sMlGUp0uzFac23xJs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 04:47:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:92:f3:23:91:dc:a8:d0:2d:52:ba:6c:5a:a2:0a:10:b4:5f:b8:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d0280f500695a43204251c9830454ca8a2e7ac Validity Not Before: Nov 4 04:22:06 2025 GMT Not After : Nov 5 04:47:06 2025 GMT Subject: CN=49AB6730FAD7FD760EA876EF305775F4B2BA0F46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:41:d9:28:f6:1f:12:90:d2:e4:0b:d6:fb:c2: 57:1a:c1:3a:2e:e6:8d:7f:c2:a8:f4:9e:53:d8:e3: 1f:24:ad:00:e1:9e:7d:95:f5:0e:89:08:de:de:9a: e0:be:3f:1f:c3:bb:7d:c8:27:17:1e:c2:0d:60:be: 88:94:20:7a:e1:7e:14:a6:97:01:f6:2e:f5:70:d5: 9d:19:a1:ec:e6:16:bb:4f:b1:bd:1d:24:76:f3:fc: 7c:ea:da:58:45:78:bb:2a:7f:d0:3e:66:bf:77:30: 94:1f:8f:88:17:b6:b2:0e:bc:fb:6d:9b:af:1c:76: 9d:90:6f:d4:e7:c0:0a:15:fd:ea:0f:69:dc:91:e6: 20:43:1b:cd:7f:6a:77:92:d4:e8:02:06:7b:bc:dc: ae:fe:aa:17:1e:ef:96:ce:aa:17:40:1b:db:e3:06: 0a:c7:a7:2d:41:a0:1b:c3:e1:01:0a:fd:0b:40:31: 7e:fd:9f:e4:14:6e:f9:a3:b5:60:6a:c6:9c:06:79: dc:11:cc:74:0a:f5:a6:75:e3:f5:18:3e:70:7a:0e: 34:14:40:cb:a4:33:32:9a:8a:af:45:35:c7:a8:6c: ea:a5:fa:92:86:91:8a:de:ed:16:61:9f:5a:e5:f0: 39:8f:3b:45:12:96:94:a7:0a:c3:46:cf:db:a4:62: 57:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AB:67:30:FA:D7:FD:76:0E:A8:76:EF:30:57:75:F4:B2:BA:0F:46 X509v3 Authority Key Identifier: keyid:B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:d9:63:0c:49:d1:b2:a1:6d:1e:55:71:62:ac:c7:23:24:76: 29:a2:b1:a4:2a:10:04:7f:9d:07:b6:f0:e5:e2:44:9c:66:42: a5:b1:9c:5b:13:48:2a:2c:ed:5a:2a:72:d7:e2:4a:76:67:0e: 53:07:b4:53:87:40:1f:a1:03:a5:47:03:06:49:f4:00:d0:a1: 54:bc:80:6a:18:06:81:04:ec:6c:83:bd:0e:f9:f8:fa:f6:31: f7:cf:fa:e5:6f:59:51:d5:f8:b4:11:ca:33:63:e3:29:9b:5d: 4d:ec:07:09:6d:83:12:8f:88:ae:0a:ca:07:83:ef:61:c7:70: e2:66:75:44:ee:8b:56:ce:31:40:c6:a6:d8:0c:e8:56:12:3e: b3:b3:4b:7c:73:69:73:77:30:6e:96:b6:45:89:bc:59:f6:11: fe:cd:b5:4a:af:dc:79:6d:8a:ba:1b:0a:72:db:df:7b:bc:cb: b5:03:ce:e6:c3:34:d2:c4:5c:3a:5c:fb:8f:a8:e9:08:48:f6: cd:6d:e6:87:cd:ea:90:fe:8a:19:49:2e:25:ab:ae:5d:cd:54: eb:69:fe:f9:bb:db:28:4e:44:e8:f5:eb:d3:ec:30:f4:0f:39: 92:54:68:e3:6c:65:a8:a4:f7:6a:3a:23:ed:ca:97:41:0d:c5: da:c5:86:3a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUO5LzI5HcqNAtUrpsWqIKELRfuOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjNkMDI4MGY1MDA2OTVhNDMyMDQyNTFjOTgzMDQ1NGNh OGEyZTdhYzAeFw0yNTExMDQwNDIyMDZaFw0yNTExMDUwNDQ3MDZaMDMxMTAvBgNV BAMTKDQ5QUI2NzMwRkFEN0ZENzYwRUE4NzZFRjMwNTc3NUY0QjJCQTBGNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYQdko9h8SkNLkC9b7wlcawTou 5o1/wqj0nlPY4x8krQDhnn2V9Q6JCN7emuC+Px/Du33IJxcewg1gvoiUIHrhfhSm lwH2LvVw1Z0ZoezmFrtPsb0dJHbz/Hzq2lhFeLsqf9A+Zr93MJQfj4gXtrIOvPtt m68cdp2Qb9TnwAoV/eoPadyR5iBDG81/aneS1OgCBnu83K7+qhce75bOqhdAG9vj BgrHpy1BoBvD4QEK/QtAMX79n+QUbvmjtWBqxpwGedwRzHQK9aZ14/UYPnB6DjQU QMukMzKaiq9FNceobOql+pKGkYre7RZhn1rl8DmPO0USlpSnCsNGz9ukYlclAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUSatnMPrX/XYOqHbvMFd19LK6D0YwHwYDVR0j BBgwFoAUs9AoD1AGlaQyBCUcmDBFTKii56wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODdhZTI1ZjMtNzA2Yi00N2VkLWJiNzQtNDY2ODRhZTBl ZjJiLzAvQjNEMDI4MEY1MDA2OTVBNDMyMDQyNTFDOTgzMDQ1NENBOEEyRTdBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3M5QW9EMUFHbGFReUJDVWNtREJGVEtp aTU2dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84N2FlMjVmMy03 MDZiLTQ3ZWQtYmI3NC00NjY4NGFlMGVmMmIvMC9CM0QwMjgwRjUwMDY5NUE0MzIw NDI1MUM5ODMwNDU0Q0E4QTJFN0FDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAtljDEnRsqFtHlVxYqzH IyR2KaKxpCoQBH+dB7bw5eJEnGZCpbGcWxNIKiztWipy1+JKdmcOUwe0U4dAH6ED pUcDBkn0ANChVLyAahgGgQTsbIO9Dvn4+vYx98/65W9ZUdX4tBHKM2PjKZtdTewH CW2DEo+IrgrKB4PvYcdw4mZ1RO6LVs4xQMam2AzoVhI+s7NLfHNpc3cwbpa2RYm8 WfYR/s21Sq/ceW2KuhsKctvfe7zLtQPO5sM00sRcOlz7j6jpCEj2zW3mh83qkP6K GUkuJauuXc1U62n++bvbKE5E6PXr0+ww9A85klRo42xlqKT3ajoj7cqXQQ3F2sWG Og== -----END CERTIFICATE-----Generated at Tue Nov 4 19:12:58 2025 by rpki-client