$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.mft File: AFF4C2C7543A73C42DFA94F9950C37BDC859D280.mft (raw, json) Hash identifier: 3kT3znzbghuP/MM0KB6/cLuw+U8Jz7BL6ASZPt1/sis= Subject key identifier: F2:E7:44:DC:31:81:5B:6B:E3:81:71:D8:F4:5B:45:E2:EE:AA:42:C3 Authority key identifier: AF:F4:C2:C7:54:3A:73:C4:2D:FA:94:F9:95:0C:37:BD:C8:59:D2:80 Certificate issuer: /CN=AFF4C2C7543A73C42DFA94F9950C37BDC859D280 Certificate serial: 6AF266DB39B9D187F831F750DE368CC21C8D9F9E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.mft Manifest number: 12 Signing time: Thu 06 Nov 2025 01:16:47 +0000 Manifest this update: Thu 06 Nov 2025 01:11:47 +0000 Manifest next update: Fri 07 Nov 2025 03:08:47 +0000 Files and hashes: 1: AFF4C2C7543A73C42DFA94F9950C37BDC859D280.crl (hash: qHKME2RkqjIimjrMSQbg3K8HUVQx9DzZaJgI0SjaJ8o=) 2: 326130663a316363363a626162303a3a2f34342d3438203d3e20323034353335.roa (hash: 1+IhrNjfDlSrKMldoQWSJhujOmN03JwrltC4p7zGNeE=) 3: 9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer (hash: E9CNptHKWNvvuPC6W5ihJwZNW+cRtTj6Wt8oB63Ybug=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.crl rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.mft rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.cer rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 13:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:f2:66:db:39:b9:d1:87:f8:31:f7:50:de:36:8c:c2:1c:8d:9f:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFF4C2C7543A73C42DFA94F9950C37BDC859D280 Validity Not Before: Nov 6 01:11:47 2025 GMT Not After : Nov 7 03:08:47 2025 GMT Subject: CN=F2E744DC31815B6BE38171D8F45B45E2EEAA42C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b1:0e:98:93:6c:75:d4:93:72:33:46:7a:3e: ae:46:67:f1:35:3a:a1:d6:f5:c0:64:62:64:b3:31: fe:a2:65:10:7f:30:ad:2c:04:1a:dd:13:3d:9b:9b: 10:bf:d4:64:33:e2:56:1c:9e:18:30:a5:d5:ff:2b: 9d:14:18:24:82:7b:b3:59:d2:52:4f:c2:fb:a6:55: cf:72:7e:17:2b:e9:7c:53:8f:49:82:60:da:0a:84: 42:e9:0e:4b:76:cc:33:cf:25:74:4d:09:0c:1f:5d: 15:b7:8f:3c:e9:24:40:4d:60:dc:3d:17:d6:8b:3e: 9e:ee:51:64:b6:bd:df:04:8a:b0:bb:22:65:bf:d6: 4e:94:98:ed:c6:f9:95:fc:63:91:f8:78:1a:3d:eb: 39:ab:d8:c5:75:83:9e:a9:4c:40:b6:e3:fb:f7:77: 69:7d:13:b3:7a:b4:e9:9e:71:b0:0f:70:af:cb:60: 05:57:75:b4:1b:b7:9c:18:b3:65:7c:71:80:d1:09: 51:1a:ef:87:15:87:a2:8f:93:fe:4b:89:22:fe:5f: bd:49:06:a0:ba:d5:07:fd:7b:81:cf:c7:44:d9:3d: 7c:4e:a0:ac:39:06:ce:dc:33:75:5e:f1:82:6a:93: c8:c6:23:0a:4d:b7:dd:0c:30:2e:b2:1e:2d:37:0e: 2d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E7:44:DC:31:81:5B:6B:E3:81:71:D8:F4:5B:45:E2:EE:AA:42:C3 X509v3 Authority Key Identifier: keyid:AF:F4:C2:C7:54:3A:73:C4:2D:FA:94:F9:95:0C:37:BD:C8:59:D2:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:a1:28:98:05:a6:ca:28:6e:47:e3:fc:61:c8:55:aa:63:b6: 40:94:e5:d2:68:c0:64:d7:64:a1:d9:23:24:63:1d:79:8f:0d: a1:84:b2:ef:c8:c5:25:58:66:f5:a6:31:0d:47:35:d5:44:49: 7f:12:19:32:22:a7:87:e5:d4:34:b4:fd:c0:81:65:59:01:09: b4:66:6f:c3:30:ae:73:8a:cc:b3:23:98:f7:9e:4d:74:6e:1e: 0f:0d:be:a7:b4:7f:48:b4:c2:aa:3a:eb:2e:cd:2b:43:86:30: f0:6d:94:c1:de:56:a6:76:92:21:a5:5f:23:1b:13:7b:d5:a2: a5:3a:ad:d8:c6:4a:a5:ed:7e:95:bf:0d:7f:bf:f0:f4:42:ba: 16:8f:f9:b1:95:6d:ea:50:37:08:f2:01:23:b5:26:32:b3:52: cf:cc:64:75:ce:6d:0f:ab:a1:01:97:1e:d8:05:7e:c3:3a:ab: 66:99:c8:21:51:32:39:45:ab:f4:15:af:83:e5:54:4a:a1:a7: 64:5f:23:43:90:6e:8c:a3:b3:5b:61:ca:91:97:d4:0c:08:b9: 90:12:20:2a:cd:f4:b8:8d:03:dc:f4:f0:17:97:79:44:69:65: 56:0e:59:25:fe:d0:f1:d4:07:7a:01:51:9a:4d:6b:35:b2:6d: c0:57:5b:70 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUavJm2zm50Yf4MfdQ3jaMwhyNn54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGNEMyQzc1NDNBNzNDNDJERkE5NEY5OTUwQzM3QkRD ODU5RDI4MDAeFw0yNTExMDYwMTExNDdaFw0yNTExMDcwMzA4NDdaMDMxMTAvBgNV BAMTKEYyRTc0NERDMzE4MTVCNkJFMzgxNzFEOEY0NUI0NUUyRUVBQTQyQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7sQ6Yk2x11JNyM0Z6Pq5GZ/E1 OqHW9cBkYmSzMf6iZRB/MK0sBBrdEz2bmxC/1GQz4lYcnhgwpdX/K50UGCSCe7NZ 0lJPwvumVc9yfhcr6XxTj0mCYNoKhELpDkt2zDPPJXRNCQwfXRW3jzzpJEBNYNw9 F9aLPp7uUWS2vd8EirC7ImW/1k6UmO3G+ZX8Y5H4eBo96zmr2MV1g56pTEC24/v3 d2l9E7N6tOmecbAPcK/LYAVXdbQbt5wYs2V8cYDRCVEa74cVh6KPk/5LiSL+X71J BqC61Qf9e4HPx0TZPXxOoKw5Bs7cM3Ve8YJqk8jGIwpNt90MMC6yHi03Di2/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU8udE3DGBW2vjgXHY9FtF4u6qQsMwHwYDVR0j BBgwFoAUr/TCx1Q6c8Qt+pT5lQw3vchZ0oAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODdkOGRiNzEtYTViZS00NjRjLWE4YjktOGI3YjM3NGFl M2ZhLzIvQUZGNEMyQzc1NDNBNzNDNDJERkE5NEY5OTUwQzM3QkRDODU5RDI4MC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMjZlYjEzNi00ZmU1LTRl NjEtYTRkOC1mMzQ1ZjUyYmMyNWQvMC9BRkY0QzJDNzU0M0E3M0M0MkRGQTk0Rjk5 NTBDMzdCREM4NTlEMjgwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg3ZDhkYjcxLWE1YmUtNDY0Yy1hOGI5LThiN2IzNzRhZTNmYS8yL0FGRjRDMkM3 NTQzQTczQzQyREZBOTRGOTk1MEMzN0JEQzg1OUQyODAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBSoSiY BabKKG5H4/xhyFWqY7ZAlOXSaMBk12Sh2SMkYx15jw2hhLLvyMUlWGb1pjENRzXV REl/EhkyIqeH5dQ0tP3AgWVZAQm0Zm/DMK5zisyzI5j3nk10bh4PDb6ntH9ItMKq OusuzStDhjDwbZTB3lamdpIhpV8jGxN71aKlOq3Yxkql7X6Vvw1/v/D0QroWj/mx lW3qUDcI8gEjtSYys1LPzGR1zm0Pq6EBlx7YBX7DOqtmmcghUTI5Rav0Fa+D5VRK oadkXyNDkG6Mo7NbYcqRl9QMCLmQEiAqzfS4jQPc9PAXl3lEaWVWDlkl/tDx1Ad6 AVGaTWs1sm3AV1tw -----END CERTIFICATE-----Generated at Thu Nov 6 05:47:18 2025 by rpki-client