$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft File: B149F23A3E99C4760297DD7104B400C835D86D19.mft (raw, json) Hash identifier: qwCck69gbmcFDt3hAFX74Z6tJLFjDRyel6+bsUqemaM= Subject key identifier: 90:DA:65:60:01:98:B4:9C:EC:DD:38:23:46:8F:8E:33:66:45:96:A7 Authority key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 Certificate issuer: /CN=B149F23A3E99C4760297DD7104B400C835D86D19 Certificate serial: 4B08D4409022F7BA708F15E234D39BD6CDFAD48B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft Manifest number: 67 Signing time: Mon 03 Nov 2025 23:03:09 +0000 Manifest this update: Mon 03 Nov 2025 22:58:09 +0000 Manifest next update: Wed 05 Nov 2025 02:01:09 +0000 Files and hashes: 1: E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer (hash: ttIHeVow2IErbUXmp4n67KjX2H68UmfVMTfPkOmulDw=) 2: B11D50A5D47F732F3F808FEAE6A3906CC4509C44.cer (hash: fOEqRqKlaLKUtKYMsGd37ZJXvbw9QPqtaVQY5rFpBpQ=) 3: B149F23A3E99C4760297DD7104B400C835D86D19.crl (hash: GqYU/QGvF97lIPZWQQ+mnsSvQjUb9Whz5683ERVWtmc=) 4: 326131343a373538333a663436303a3a2f34342d3438203d3e20323134373230.roa (hash: 4YEjtMXLVEjj9+5CMQ85BeokEYmpgzJkQtl+GYY10z4=) 5: 326131343a373538333a663436303a3a2f34342d3438203d3e20323131353735.roa (hash: LMFmuLJ4IgxIQCv2slhgNeKFDMCx6rSWhmkOn3RblbI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 02:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:08:d4:40:90:22:f7:ba:70:8f:15:e2:34:d3:9b:d6:cd:fa:d4:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B149F23A3E99C4760297DD7104B400C835D86D19 Validity Not Before: Nov 3 22:58:09 2025 GMT Not After : Nov 5 02:01:09 2025 GMT Subject: CN=90DA65600198B49CECDD3823468F8E33664596A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bf:0b:32:1f:15:11:a5:7f:d9:02:cc:1e:0d: 0f:d0:53:81:ae:6a:48:e0:e8:81:6a:2b:4b:d6:9c: 6c:e2:3b:aa:32:55:7e:ea:b0:1d:ea:bc:ae:2e:00: d4:21:8b:81:48:6e:e2:36:87:ce:a5:1f:5a:74:8f: 43:8a:d5:a6:46:8a:a2:6d:5e:fb:f9:a5:b2:48:ad: 5b:ec:33:83:57:c2:b0:b7:3e:1c:19:11:6e:34:0a: 5e:43:c2:60:8d:26:4b:de:70:7c:b9:ce:f7:0a:2a: 97:3b:b8:e0:c9:f9:6d:e6:ba:73:36:11:aa:b2:98: b7:9c:53:20:1c:42:0b:9f:5b:67:32:0c:5d:b2:1c: 61:a7:70:79:ba:1e:07:21:9c:d0:41:42:7f:e7:59: 0e:2b:07:2a:78:2b:0b:9c:48:6d:f0:d5:c3:e6:18: 3f:93:83:35:db:40:fb:17:5d:1a:d8:6e:6a:0c:83: 64:31:32:e4:dd:fc:01:85:fe:bd:79:de:74:03:11: b5:9d:67:1a:36:62:65:c4:0d:76:21:a8:d0:b7:e9: 90:19:ce:dd:44:23:07:92:ac:ad:75:9a:f3:da:0d: b6:8d:07:34:e9:02:63:cb:1f:0d:50:e1:98:ba:df: f3:f1:85:20:9f:6d:0b:9a:1c:cf:bb:2e:88:69:3c: 73:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:DA:65:60:01:98:B4:9C:EC:DD:38:23:46:8F:8E:33:66:45:96:A7 X509v3 Authority Key Identifier: keyid:B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:0e:83:2c:d5:7f:86:66:fd:40:e8:3a:db:4e:02:4a:1a:d0: aa:56:c1:42:6f:a8:7d:13:77:93:50:f0:38:c8:6e:1d:64:5f: 99:72:5f:72:04:30:84:2c:93:32:66:ae:82:0f:2a:bd:66:ff: 9e:b8:d2:a5:00:3c:0f:f8:7d:52:88:a6:dc:aa:42:c3:01:43: 1f:b2:32:81:fc:fb:3e:8a:6f:50:5a:22:ab:4b:6b:e5:32:87: 56:56:e9:87:df:f7:f7:85:5b:c5:d0:cf:1e:7e:65:95:86:00: c0:b7:9d:52:db:7f:ca:5a:34:7b:d7:ef:9d:bd:03:23:ef:7f: f6:b7:de:93:3b:cf:49:39:b2:dc:d0:fd:35:43:71:87:f0:8f: 40:8a:17:77:cd:23:f6:60:cf:40:84:f9:21:8c:a8:b2:3c:3b: 3f:9a:f9:ef:a4:22:d9:ec:89:c9:9d:2f:e4:f8:9e:eb:8a:61: 4d:03:83:d5:bf:d3:f2:d6:cc:e4:42:c0:71:32:12:dd:4b:7f: ff:df:21:cf:df:5e:76:11:37:a9:e0:5e:b1:97:3e:2d:fc:9a: fe:64:e3:8e:d8:1a:0d:1b:e2:a3:8d:e1:2d:8f:11:0e:a3:25: 7c:fb:d6:ae:10:2d:e0:fa:f5:ef:c8:dd:ff:7f:40:31:75:2a: 49:81:5f:32 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSwjUQJAi97pwjxXiNNOb1s361IswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgz NUQ4NkQxOTAeFw0yNTExMDMyMjU4MDlaFw0yNTExMDUwMjAxMDlaMDMxMTAvBgNV BAMTKDkwREE2NTYwMDE5OEI0OUNFQ0REMzgyMzQ2OEY4RTMzNjY0NTk2QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnvwsyHxURpX/ZAsweDQ/QU4Gu akjg6IFqK0vWnGziO6oyVX7qsB3qvK4uANQhi4FIbuI2h86lH1p0j0OK1aZGiqJt Xvv5pbJIrVvsM4NXwrC3PhwZEW40Cl5DwmCNJkvecHy5zvcKKpc7uODJ+W3munM2 EaqymLecUyAcQgufW2cyDF2yHGGncHm6HgchnNBBQn/nWQ4rByp4KwucSG3w1cPm GD+TgzXbQPsXXRrYbmoMg2QxMuTd/AGF/r153nQDEbWdZxo2YmXEDXYhqNC36ZAZ zt1EIweSrK11mvPaDbaNBzTpAmPLHw1Q4Zi63/PxhSCfbQuaHM+7LohpPHNRAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUkNplYAGYtJzs3TgjRo+OM2ZFlqcwHwYDVR0j BBgwFoAUsUnyOj6ZxHYCl91xBLQAyDXYbRkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVj OWRjLzIvQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgzNUQ4NkQxOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CMTQ5RjIzQTNFOTlDNDc2MDI5N0RENzEw NEI0MDBDODM1RDg2RDE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzk4MWY5NzgyLTg5OGUtNGI4My05NWU2LTRmZjRhYjc1YzlkYy8yL0IxNDlGMjNB M0U5OUM0NzYwMjk3REQ3MTA0QjQwMEM4MzVEODZEMTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC/DoMs 1X+GZv1A6DrbTgJKGtCqVsFCb6h9E3eTUPA4yG4dZF+Zcl9yBDCELJMyZq6CDyq9 Zv+euNKlADwP+H1SiKbcqkLDAUMfsjKB/Ps+im9QWiKrS2vlModWVumH3/f3hVvF 0M8efmWVhgDAt51S23/KWjR71++dvQMj73/2t96TO89JObLc0P01Q3GH8I9Aihd3 zSP2YM9AhPkhjKiyPDs/mvnvpCLZ7InJnS/k+J7rimFNA4PVv9Py1szkQsBxMhLd S3//3yHP3152ETep4F6xlz4t/Jr+ZOOO2BoNG+KjjeEtjxEOoyV8+9auEC3g+vXv yN3/f0AxdSpJgV8y -----END CERTIFICATE-----Generated at Tue Nov 4 10:55:24 2025 by rpki-client