$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft File: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft (raw, json) Hash identifier: DhU2IvrjCH5Wm/3Q+jEJa4ld66+bX1Ft0UdmKByvg9Y= Subject key identifier: 4D:26:29:A8:D3:CD:38:30:74:22:D9:F5:D3:F4:12:43:AE:64:CF:F4 Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Certificate serial: 32464D53F4D8F5DB7D756B6062AF54E052EF9D6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft Manifest number: 017E Signing time: Tue 04 Nov 2025 18:37:15 +0000 Manifest this update: Tue 04 Nov 2025 18:32:15 +0000 Manifest next update: Wed 05 Nov 2025 22:09:15 +0000 Files and hashes: 1: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl (hash: sGsqPwCUbLUtepk/0D2IghOroolLGiDI/8CpKNwhzEI=) 2: 3134312e39382e34312e302f32342d3234203d3e203330303538.roa (hash: 4au55wB65f+exj00ZmF8CDavdM91WWgRwv7GAFTVWFE=) 3: 3134312e39382e34302e302f32342d3234203d3e20313335333931.roa (hash: KIrJ+OxXjbpHnzzrfeXUxWbfPUX2jRDJASLLdltH2j8=) 4: 3134312e39382e34332e302f32342d3234203d3e20383334.roa (hash: CEATl23EYBX+yz/bQgn1uVhhdG2D/AdhO5cExmk73Pg=) 5: 3134312e39382e34322e302f32342d3234203d3e203432383331.roa (hash: 6ZVZSqjoq8egcUsUMz7rnJfuPRuV1YHJP8qC/sHWbVE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:46:4d:53:f4:d8:f5:db:7d:75:6b:60:62:af:54:e0:52:ef:9d:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Validity Not Before: Nov 4 18:32:15 2025 GMT Not After : Nov 5 22:09:15 2025 GMT Subject: CN=4D2629A8D3CD38307422D9F5D3F41243AE64CFF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:32:d1:44:85:0e:57:9c:26:9b:2a:8f:fc:69: f3:46:fa:cd:31:c1:df:20:a3:40:c0:38:c2:39:b0: d5:c8:f4:66:30:63:71:16:25:f1:02:c8:44:68:03: 3e:39:e4:ff:d9:55:76:62:df:4a:92:21:f1:46:d0: fd:b4:f8:25:7e:39:7a:80:5a:cd:79:3e:fc:08:1f: 9c:c6:93:c0:27:44:40:1a:7d:8b:09:6f:88:43:78: 2b:19:d9:1d:6c:04:32:2d:d5:ed:5b:77:3f:a8:5b: aa:fc:0a:20:25:79:4d:e8:10:46:3f:3e:30:8d:b8: 2a:f0:e7:f5:a3:66:98:9c:d3:f1:bc:fe:60:d9:1f: 1d:b8:96:73:00:19:9d:ca:c3:fb:dd:68:f6:ee:ab: f2:89:a9:e7:19:03:21:8b:56:f7:93:d2:e0:a7:eb: 8b:bb:2c:78:a2:eb:85:4e:68:0f:d1:ef:63:1f:02: b8:06:e6:cc:67:33:a9:c6:eb:bb:c4:d9:eb:8f:d2: e8:03:46:87:de:14:fd:4a:78:7a:f1:cb:07:f2:ae: 2c:54:60:0d:f5:74:8c:74:28:8e:ba:7a:0c:b4:0a: 0a:54:7e:1c:13:e5:52:47:62:b5:19:8a:be:69:97: 7b:0d:ca:4d:f5:d9:66:bf:8e:cb:56:25:e7:03:76: 7a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:26:29:A8:D3:CD:38:30:74:22:D9:F5:D3:F4:12:43:AE:64:CF:F4 X509v3 Authority Key Identifier: keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:6f:f4:94:be:e6:47:d2:29:21:41:42:a7:c0:ea:4d:a2:ef: a2:31:c1:62:88:63:06:95:69:18:91:bf:41:e4:fb:d0:ba:80: be:9d:2a:9d:1c:75:13:e8:9b:07:54:4a:93:15:71:29:03:20: 39:2e:44:21:8f:4b:d2:d8:77:93:91:d7:c7:c6:20:29:08:53: c3:f8:bd:37:75:d6:6e:1c:a9:43:2d:13:b6:74:ca:b1:10:b1: 63:6d:5e:c1:38:41:d1:64:3e:a2:58:f5:f1:83:66:e3:93:aa: ee:92:23:f6:98:e8:56:ee:cc:14:e4:37:02:b0:98:29:36:9c: e1:f0:d3:c1:5b:e1:04:7d:91:62:88:20:c0:f4:c4:76:fa:4e: d6:b4:c3:bb:68:35:aa:fe:50:28:e9:a7:e6:d9:18:59:9c:4f: 09:cf:a6:ef:e5:a4:23:3c:f0:1e:f9:76:63:a1:4a:e8:0d:b8: 66:5f:7f:03:36:77:6d:8a:ab:24:c2:ce:e2:c5:46:fd:35:1b: fb:10:c2:c5:c6:8f:1d:5d:3d:a7:76:90:35:c6:03:60:e4:06: c1:9e:ea:fa:4f:5d:02:64:a4:88:62:9f:ab:81:bb:97:08:e7: 46:f0:6e:3d:5d:bd:81:82:0a:96:4a:93:70:f1:b9:5c:54:13: 29:d6:40:fe -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUMkZNU/TY9dt9dWtgYq9U4FLvnW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2U1MWNhYzFjZTJhZmUxOTU4YjFmYjZhNjIzNzcxN2Iw YjVkNDgxMDAeFw0yNTExMDQxODMyMTVaFw0yNTExMDUyMjA5MTVaMDMxMTAvBgNV BAMTKDREMjYyOUE4RDNDRDM4MzA3NDIyRDlGNUQzRjQxMjQzQUU2NENGRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqMtFEhQ5XnCabKo/8afNG+s0x wd8go0DAOMI5sNXI9GYwY3EWJfECyERoAz455P/ZVXZi30qSIfFG0P20+CV+OXqA Ws15PvwIH5zGk8AnREAafYsJb4hDeCsZ2R1sBDIt1e1bdz+oW6r8CiAleU3oEEY/ PjCNuCrw5/WjZpic0/G8/mDZHx24lnMAGZ3Kw/vdaPbuq/KJqecZAyGLVveT0uCn 64u7LHii64VOaA/R72MfArgG5sxnM6nG67vE2euP0ugDRofeFP1KeHrxywfyrixU YA31dIx0KI66egy0CgpUfhwT5VJHYrUZir5pl3sNyk312Wa/jstWJecDdnq7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUTSYpqNPNODB0Itn10/QSQ65kz/QwHwYDVR0j BBgwFoAUflHKwc4q/hlYsftqYjdxewtdSBAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODgxYjdmMDgtZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJi ZDMyLzAvN0U1MUNBQzFDRTJBRkUxOTU4QjFGQjZBNjIzNzcxN0IwQjVENDgxMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZsSEt3YzRxX2hsWXNmdHFZamR4ZXd0 ZFNCQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ODFiN2YwOC1k ZDk0LTRjZDAtYWEzOC04NTEyZjE1MmJkMzIvMC83RTUxQ0FDMUNFMkFGRTE5NThC MUZCNkE2MjM3NzE3QjBCNUQ0ODEwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS2/0lL7mR9IpIUFCp8Dq TaLvojHBYohjBpVpGJG/QeT70LqAvp0qnRx1E+ibB1RKkxVxKQMgOS5EIY9L0th3 k5HXx8YgKQhTw/i9N3XWbhypQy0TtnTKsRCxY21ewThB0WQ+olj18YNm45Oq7pIj 9pjoVu7MFOQ3ArCYKTac4fDTwVvhBH2RYoggwPTEdvpO1rTDu2g1qv5QKOmn5tkY WZxPCc+m7+WkIzzwHvl2Y6FK6A24Zl9/AzZ3bYqrJMLO4sVG/TUb+xDCxcaPHV09 p3aQNcYDYOQGwZ7q+k9dAmSkiGKfq4G7lwjnRvBuPV29gYIKlkqTcPG5XFQTKdZA /g== -----END CERTIFICATE-----Generated at Wed Nov 5 03:48:43 2025 by rpki-client