$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft File: 8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft (raw, json) Hash identifier: Ip/zwMpsI8WVFok9byABAGhDDJTL5NUpppckxWCUngc= Subject key identifier: 7D:4D:BA:05:8A:2E:ED:C8:22:A4:06:69:5D:F9:3E:5C:9E:3A:74:26 Authority key identifier: 8B:D4:F7:EB:FF:97:63:C0:61:D5:37:B8:A1:D0:87:2D:70:69:76:32 Certificate issuer: /CN=8BD4F7EBFF9763C061D537B8A1D0872D70697632 Certificate serial: 58C90985F74A8FF701A19FBAAF496F70CD627616 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8BD4F7EBFF9763C061D537B8A1D0872D70697632.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft Manifest number: 5B Signing time: Tue 04 Nov 2025 09:11:47 +0000 Manifest this update: Tue 04 Nov 2025 09:06:47 +0000 Manifest next update: Wed 05 Nov 2025 09:20:47 +0000 Files and hashes: 1: 8BD4F7EBFF9763C061D537B8A1D0872D70697632.crl (hash: rxyLU4/DWVz5pO5eZolMI1M62349XmTvpV1TXHbOafo=) 2: 326131343a373538333a663532613a3a2f34382d3438203d3e20323130343430.roa (hash: ZdNC5XbbwwexZ9fJQgyFujAFE+pNtA0LnoesNkwLRvA=) 3: 326131343a373538333a663532613a3a2f34382d3438203d3e20323133363035.roa (hash: aV7gG9d5Jm1xL7quU3kvraReedZSPl0atIf2oiaL4bI=) 4: 326131343a373538333a663566303a3a2f34342d3438203d3e20323135373532.roa (hash: CQeQBv1si6HjY/pqPKCiw+E43BXtrCR5FS8uJNoFCsQ=) 5: 326131343a373538333a663530303a3a2f34382d3438203d3e20323133363035.roa (hash: 9/oPKwR86cNPm2ExAL4kDJvYHegTDwwsjfTcMTofdOY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.crl rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8BD4F7EBFF9763C061D537B8A1D0872D70697632.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:c9:09:85:f7:4a:8f:f7:01:a1:9f:ba:af:49:6f:70:cd:62:76:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BD4F7EBFF9763C061D537B8A1D0872D70697632 Validity Not Before: Nov 4 09:06:47 2025 GMT Not After : Nov 5 09:20:47 2025 GMT Subject: CN=7D4DBA058A2EEDC822A406695DF93E5C9E3A7426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f7:65:cb:18:dc:3a:4b:b8:1e:62:bf:82:c7: a3:f4:4b:e5:1c:e7:b3:9e:e8:94:dc:c5:8a:fe:06: db:6c:2f:ca:6e:32:7d:d9:95:3d:f6:83:20:69:d4: 56:ed:64:e6:07:22:d8:21:5e:5e:5f:d4:83:02:e5: 78:51:e7:24:eb:db:b3:20:8b:e6:73:73:57:f0:19: f5:5e:e1:10:c6:98:5c:9a:15:9f:76:b4:de:13:10: 69:18:e8:6e:4f:1d:0a:a0:44:b0:40:ba:ae:db:6c: 10:31:34:26:de:3c:dd:a6:3c:13:4f:72:3f:bd:fa: ce:22:8a:78:63:0a:87:a1:c4:2d:54:a2:2f:42:5c: 70:36:39:14:f7:4e:f1:1a:02:48:57:c1:1c:da:2b: 2f:a8:c7:2d:7f:4d:4d:5f:43:80:48:bb:2c:bc:7a: b7:1b:f8:28:9f:f1:e9:14:4e:b7:9c:61:88:fb:f4: 4d:69:12:ce:6d:3a:6e:e8:19:97:4d:57:cf:33:9f: 5a:4e:00:01:9a:b4:02:7b:b5:20:ec:5a:d8:e5:74: f3:91:fa:1f:a3:ea:53:fb:a1:b5:0b:82:45:cf:4c: a3:ce:94:06:e8:df:9c:68:3d:21:46:0e:4a:46:24: fe:95:90:76:6c:5e:31:43:bf:07:3c:30:ad:c8:0b: 59:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:4D:BA:05:8A:2E:ED:C8:22:A4:06:69:5D:F9:3E:5C:9E:3A:74:26 X509v3 Authority Key Identifier: keyid:8B:D4:F7:EB:FF:97:63:C0:61:D5:37:B8:A1:D0:87:2D:70:69:76:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8BD4F7EBFF9763C061D537B8A1D0872D70697632.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:4f:01:27:03:db:43:4f:2f:74:58:03:fa:1c:32:24:4e:0f: c2:f0:6e:12:5f:f7:d4:3c:b9:14:e3:e4:b7:ff:4d:84:f8:af: 47:8c:1b:a2:42:b7:e7:bc:e7:ec:90:51:ef:ba:17:f1:97:1d: 2b:6e:39:8e:ef:64:d8:f1:73:88:d1:69:a6:1c:8c:d0:d7:50: 6f:bc:a1:0c:3a:1b:29:1d:e5:6f:1f:71:6f:6f:81:3c:c3:da: 8f:4a:1a:9c:cc:46:bb:93:a1:0e:66:ce:4c:1f:70:a1:23:3a: fa:68:15:00:5e:ca:43:1d:c5:a2:c1:78:36:84:99:2f:f7:81: d8:97:5f:c4:31:f4:5c:c7:92:cc:6e:ae:e1:0f:8f:2a:0b:17: 39:fb:ed:d0:3c:8e:50:b1:2a:04:42:6c:c7:ab:c6:3d:b5:24: ae:76:97:98:c5:64:ee:86:66:5d:7c:ff:61:c6:19:ad:28:c8: 7c:34:50:10:3b:0b:ef:7d:dd:85:8a:95:f1:0a:66:69:37:fd: 57:81:62:13:6c:d8:d3:61:d3:69:6d:2d:74:df:3d:d6:d8:98: e3:c4:29:8d:07:a7:81:80:91:94:7d:1a:bb:77:6f:d1:18:03: 4c:7e:3a:71:f9:1a:64:34:a8:08:84:77:ee:f2:68:4f:21:fa: e8:26:7e:77 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUWMkJhfdKj/cBoZ+6r0lvcM1idhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJENEY3RUJGRjk3NjNDMDYxRDUzN0I4QTFEMDg3MkQ3 MDY5NzYzMjAeFw0yNTExMDQwOTA2NDdaFw0yNTExMDUwOTIwNDdaMDMxMTAvBgNV BAMTKDdENERCQTA1OEEyRUVEQzgyMkE0MDY2OTVERjkzRTVDOUUzQTc0MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk92XLGNw6S7geYr+Cx6P0S+Uc 57Oe6JTcxYr+BttsL8puMn3ZlT32gyBp1FbtZOYHItghXl5f1IMC5XhR5yTr27Mg i+Zzc1fwGfVe4RDGmFyaFZ92tN4TEGkY6G5PHQqgRLBAuq7bbBAxNCbePN2mPBNP cj+9+s4iinhjCoehxC1Uoi9CXHA2ORT3TvEaAkhXwRzaKy+oxy1/TU1fQ4BIuyy8 ercb+Cif8ekUTrecYYj79E1pEs5tOm7oGZdNV88zn1pOAAGatAJ7tSDsWtjldPOR +h+j6lP7obULgkXPTKPOlAbo35xoPSFGDkpGJP6VkHZsXjFDvwc8MK3IC1nPAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUfU26BYou7cgipAZpXfk+XJ46dCYwHwYDVR0j BBgwFoAUi9T36/+XY8Bh1Te4odCHLXBpdjIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODdkOGRiNzEtYTViZS00NjRjLWE4YjktOGI3YjM3NGFl M2ZhLzEvOEJENEY3RUJGRjk3NjNDMDYxRDUzN0I4QTFEMDg3MkQ3MDY5NzYzMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84QkQ0RjdFQkZGOTc2M0MwNjFENTM3QjhB MUQwODcyRDcwNjk3NjMyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg3ZDhkYjcxLWE1YmUtNDY0Yy1hOGI5LThiN2IzNzRhZTNmYS8xLzhCRDRGN0VC RkY5NzYzQzA2MUQ1MzdCOEExRDA4NzJENzA2OTc2MzIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCpTwEn A9tDTy90WAP6HDIkTg/C8G4SX/fUPLkU4+S3/02E+K9HjBuiQrfnvOfskFHvuhfx lx0rbjmO72TY8XOI0WmmHIzQ11BvvKEMOhspHeVvH3Fvb4E8w9qPShqczEa7k6EO Zs5MH3ChIzr6aBUAXspDHcWiwXg2hJkv94HYl1/EMfRcx5LMbq7hD48qCxc5++3Q PI5QsSoEQmzHq8Y9tSSudpeYxWTuhmZdfP9hxhmtKMh8NFAQOwvvfd2FipXxCmZp N/1XgWITbNjTYdNpbS103z3W2JjjxCmNB6eBgJGUfRq7d2/RGANMfjpx+RpkNKgI hHfu8mhPIfroJn53 -----END CERTIFICATE-----Generated at Tue Nov 4 10:55:24 2025 by rpki-client