$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft File: B172548FA3C460E26CB519EE524361BCA6C7132E.mft (raw, json) Hash identifier: 4R2HVfd98i+GZ8Ia5opSppxjP18+68pj9zYxPJwCqEU= Subject key identifier: E6:AC:B2:0D:A2:5B:45:D6:50:20:56:3C:6D:D9:5B:66:D1:47:91:1B Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e Certificate serial: 4FE6A725CE9F9A37DE8239052FA7E612F7B53D8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft Manifest number: 0405 Signing time: Tue 04 Nov 2025 00:12:06 +0000 Manifest this update: Tue 04 Nov 2025 00:07:06 +0000 Manifest next update: Wed 05 Nov 2025 00:49:06 +0000 Files and hashes: 1: 39332e39352e3131322e302f32342d3234203d3e20383334.roa (hash: VBESJfIooHy0zJiO9Ixvdk9UfFM21Teo3XpQGIbWXdo=) 2: 39332e39352e3131362e302f32342d3234203d3e203630373831.roa (hash: wiR4lXrHDBacVR9rhY/OZ5EVnNOlMyR8f6ZVRqs7p88=) 3: B172548FA3C460E26CB519EE524361BCA6C7132E.crl (hash: bAoaxdFhd2i4S5aJl74OPc2HIoRkhtJMdJuFqkzpv+k=) 4: 39332e39352e3131382e302f32342d3234203d3e20313336353537.roa (hash: RxEOrEQDuw8FdSr63g/e7GeuRwx0a/xo6StPeRUp3pQ=) 5: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (hash: fGOsLQpuq7w+Mlth5Jlzw6zSul9g+K81meekR3kD4oA=) 6: 39332e39352e3131372e302f32342d3234203d3e203231383539.roa (hash: Un+iljfa6BQzZnEghHopYhiwkN2j6KkmFMitjF4eFLQ=) 7: 39332e39352e3131342e302f32342d3234203d3e20383334.roa (hash: 9slNHWe/rU70bOx5vd9mZUqmB1nBl1QE+Gk0eZLBnt8=) 8: 39332e39352e3131352e302f32342d3234203d3e20313938353834.roa (hash: FutqYRyHBMmN+0PD6TfHd0Z48pzfzxz1hCrgLY7AwAA=) 9: 39332e39352e3131392e302f32342d3234203d3e20323135343337.roa (hash: iuam+Y72SFbVuzZ6DMbPvd9+i2O4uNgJ9aW8l1vNV9U=) 10: 39332e39352e3131332e302f32342d3234203d3e203136323736.roa (hash: cS6LWz+NEHJoa0EQVb5z92UR8C9jaztUFOxHHwpRPsY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 00:49:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:e6:a7:25:ce:9f:9a:37:de:82:39:05:2f:a7:e6:12:f7:b5:3d:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e Validity Not Before: Nov 4 00:07:06 2025 GMT Not After : Nov 5 00:49:06 2025 GMT Subject: CN=E6ACB20DA25B45D65020563C6DD95B66D147911B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f9:07:8c:50:81:db:6f:71:d5:f2:a6:0c:fd: 36:f3:c2:86:12:e5:66:34:80:81:72:55:9f:90:47: 88:62:5f:a7:1f:6a:0d:05:d0:87:55:2e:f9:86:39: 50:5e:e5:88:09:36:78:e6:f1:13:98:2e:0b:c6:fb: 98:ae:ae:cc:d1:08:33:ce:3b:15:c5:f3:ac:ee:01: 55:2b:ec:3f:37:47:f3:92:6a:84:38:d4:9e:ec:4a: b9:1a:19:c0:fa:73:ec:08:db:41:b3:da:b8:e9:8f: c0:9d:72:b2:1b:9b:0e:e5:87:40:ad:7c:41:f1:d7: 7e:fe:d0:3c:87:af:d3:30:e1:bc:af:3a:98:4e:f1: 7e:cf:7d:3e:fa:4d:e7:36:1f:9f:d9:3c:c7:fa:80: f7:48:57:59:1b:43:98:1f:fa:05:28:ca:10:41:53: c2:5d:4d:35:cf:f0:5c:dc:d8:f8:f3:40:63:dd:8f: b1:9e:d7:d5:66:00:b0:43:e6:4e:22:a5:b4:70:62: b3:3d:05:c9:5f:a5:bc:cb:da:84:b0:22:10:63:d2: d6:cb:66:d5:43:02:4b:da:99:aa:b3:28:c6:8a:bc: c6:de:32:db:a2:92:3f:70:f3:38:e2:75:52:6e:07: 96:48:8f:34:0d:c7:c7:9a:40:12:4b:d1:15:2a:6e: db:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:AC:B2:0D:A2:5B:45:D6:50:20:56:3C:6D:D9:5B:66:D1:47:91:1B X509v3 Authority Key Identifier: keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:a7:58:73:90:28:38:ba:75:52:e9:a1:55:6c:a2:fd:da:ad: 69:db:1e:19:ea:6f:c6:8b:8b:76:0c:10:1c:dd:42:84:72:1d: 12:06:40:ec:99:fa:04:ab:4a:c3:8d:20:60:a2:c7:8e:80:0b: 54:99:c9:fa:bf:5a:7f:3f:c1:83:46:3d:7b:fb:c6:cc:a0:6f: 32:33:5e:aa:f4:2f:a0:1d:c2:b5:cc:91:e1:f5:03:fe:bc:52: 01:de:05:5b:94:e4:ef:43:3c:98:39:db:55:ca:92:22:a0:8d: 73:17:e0:73:9c:c6:87:c5:62:05:c6:fa:76:6d:4c:68:be:fa: 91:7b:14:43:b9:4c:c6:f9:dd:d1:8c:84:bf:63:3f:e2:f9:95: 1b:bd:35:20:6e:7d:3d:a3:3b:b0:33:04:56:0a:cc:70:53:2c: 2f:41:96:b0:c9:fc:b6:8b:15:42:c6:f7:d5:c5:be:76:2f:a2: 3d:c5:39:97:b1:98:f0:12:65:22:39:c9:97:68:87:b5:6d:3c: 82:d0:04:30:7a:a0:c8:4d:eb:ea:f7:00:e6:27:b0:b0:6b:c8: 16:32:10:be:bc:54:30:0e:f8:e0:c9:42:ee:ec:82:1d:ff:73: d2:c5:63:30:3a:ea:6e:e3:d4:07:4f:ba:cc:4a:98:7e:e5:65: 1b:2a:80:cc -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUT+anJc6fmjfegjkFL6fmEve1PY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh NmM3MTMyZTAeFw0yNTExMDQwMDA3MDZaFw0yNTExMDUwMDQ5MDZaMDMxMTAvBgNV BAMTKEU2QUNCMjBEQTI1QjQ1RDY1MDIwNTYzQzZERDk1QjY2RDE0NzkxMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu+QeMUIHbb3HV8qYM/TbzwoYS 5WY0gIFyVZ+QR4hiX6cfag0F0IdVLvmGOVBe5YgJNnjm8ROYLgvG+5iurszRCDPO OxXF86zuAVUr7D83R/OSaoQ41J7sSrkaGcD6c+wI20Gz2rjpj8CdcrIbmw7lh0Ct fEHx137+0DyHr9Mw4byvOphO8X7PfT76Tec2H5/ZPMf6gPdIV1kbQ5gf+gUoyhBB U8JdTTXP8Fzc2PjzQGPdj7Ge19VmALBD5k4ipbRwYrM9BclfpbzL2oSwIhBj0tbL ZtVDAkvamaqzKMaKvMbeMtuikj9w8zjidVJuB5ZIjzQNx8eaQBJL0RUqbtsPAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU5qyyDaJbRdZQIFY8bdlbZtFHkRswHwYDVR0j BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti SEV5NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85NjU3M2U4OC1k YWJhLTRhYzctYTJlZC0zMjFjODI3N2QyNWUvMC9CMTcyNTQ4RkEzQzQ2MEUyNkNC NTE5RUU1MjQzNjFCQ0E2QzcxMzJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKdYc5AoOLp1UumhVWyi /dqtadseGepvxouLdgwQHN1ChHIdEgZA7Jn6BKtKw40gYKLHjoALVJnJ+r9afz/B g0Y9e/vGzKBvMjNeqvQvoB3CtcyR4fUD/rxSAd4FW5Tk70M8mDnbVcqSIqCNcxfg c5zGh8ViBcb6dm1MaL76kXsUQ7lMxvnd0YyEv2M/4vmVG701IG59PaM7sDMEVgrM cFMsL0GWsMn8tosVQsb31cW+di+iPcU5l7GY8BJlIjnJl2iHtW08gtAEMHqgyE3r 6vcA5iewsGvIFjIQvrxUMA744MlC7uyCHf9z0sVjMDrqbuPUB0+6zEqYfuVlGyqA zA== -----END CERTIFICATE-----Generated at Tue Nov 4 17:58:27 2025 by rpki-client