$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft File: 51917E722DB03952D9056BED2F6BD4BF98B78976.mft (raw, json) Hash identifier: ZTHnu+FKX+riKqdjRkl4J2vdJbxKKS8ahy6YvOyp/pw= Subject key identifier: 40:E4:92:71:10:CB:2B:25:62:34:B9:D9:6C:46:C9:5F:91:D7:C2:E6 Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 Certificate issuer: /CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Certificate serial: 7F3AD3BACE65B7B98A0FB7CECBDC14746071F500 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft Manifest number: ED Signing time: Tue 04 Nov 2025 18:08:59 +0000 Manifest this update: Tue 04 Nov 2025 18:03:59 +0000 Manifest next update: Wed 05 Nov 2025 19:10:59 +0000 Files and hashes: 1: 326131343a373538303a3530303a3a2f34322d3432203d3e203331383938.roa (hash: 7z5RoyaJRkP9nx99eQ4HknE9KjY7eFLuMQrU4NhLP9s=) 2: 326131343a373538303a666635323a3a2f34382d3438203d3e20323039373130.roa (hash: vs66PWFM6L/hirNyhIXTRaz65c001j+IhkCdp8VdfS4=) 3: 51917E722DB03952D9056BED2F6BD4BF98B78976.crl (hash: zWlvnsSX9+EPv20nBr9C8vDK2cpdpqBkrhwDhXjV2MU=) 4: 326131343a373538303a666635363a3a2f34382d3438203d3e20323039373130.roa (hash: SwKF9ZgurLBB1Omp9sHNYZoTnYJ/E2ALGPkMC5kD1BA=) 5: 326131343a373538303a666635303a3a2f34382d3438203d3e20323039373130.roa (hash: RhrZumuCHn+6y3yZr34sdgh4sb8kS47/Ka9E3B3UluQ=) 6: 326131343a373538303a666635353a3a2f34382d3438203d3e20323039373130.roa (hash: 5weylF9E+kZUqdJn7nMGLccAIkWjUNuo5MqarqyfkO8=) 7: 326131343a373538303a666635313a3a2f34382d3438203d3e20323039373130.roa (hash: KcfiSDiqDvlLOqfaLqph9s6F4NvpySAcmNFiwDriyms=) 8: 326131343a373538303a666635333a3a2f34382d3438203d3e20323039373130.roa (hash: UpFVw7x1NBf/Uix4G0zJEj+QV4riL3tEIjso5GywhOU=) 9: 326131343a373538303a3530303a3a2f34302d3430203d3e20323039373130.roa (hash: UtWLjV2JD6X8emwUC9bu8RyXGCD7bzymrTBVIEkaVv8=) 10: 326131343a373538303a666635343a3a2f34382d3438203d3e20323039373130.roa (hash: i7VkbN6Rb5CnHlmR8BF2dlC+Uq3PFV4wJTcaolWAu+U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:3a:d3:ba:ce:65:b7:b9:8a:0f:b7:ce:cb:dc:14:74:60:71:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Validity Not Before: Nov 4 18:03:59 2025 GMT Not After : Nov 5 19:10:59 2025 GMT Subject: CN=40E4927110CB2B256234B9D96C46C95F91D7C2E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0a:b0:bc:3a:a9:6c:72:0c:13:32:f9:a1:ec: 27:8e:18:47:05:04:84:b9:ce:fa:73:57:58:04:1d: 5b:99:41:d5:f6:b0:bd:76:66:c0:23:49:1f:77:cb: 20:d3:13:51:7a:6f:47:f1:71:8d:81:c5:f3:bf:70: fa:ac:bd:6a:c7:73:b0:f1:2f:9e:31:6b:67:21:bd: 44:f9:eb:e6:dc:49:e7:59:aa:be:4b:86:5d:89:4f: ac:46:84:e1:d8:5f:25:55:6f:8d:10:8f:85:17:22: f6:2a:9c:df:c8:46:a3:0a:89:15:04:f9:71:b6:ed: 7a:76:f8:55:46:c9:fc:c7:f5:ba:1c:12:7f:1f:68: 45:fc:d4:70:cd:c1:d2:6a:18:05:fd:65:27:b0:4f: 28:f1:88:b2:54:13:4a:65:97:7b:b5:73:81:ae:1c: f7:d4:d7:bc:a7:ff:13:84:df:e0:3a:8d:8b:fb:2d: e3:69:4d:48:32:0a:c3:f8:1f:32:79:10:67:a8:bc: 32:7b:fd:7c:a8:49:03:dc:0c:09:54:14:e3:ae:28: cb:40:25:4d:c6:50:59:3c:38:d5:e4:37:7e:06:9f: 0b:30:f7:97:a2:e7:ee:2c:7c:c1:62:59:20:dd:83: 21:ca:dd:f9:2c:6a:8d:6f:05:70:ab:83:64:44:fb: 5e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E4:92:71:10:CB:2B:25:62:34:B9:D9:6C:46:C9:5F:91:D7:C2:E6 X509v3 Authority Key Identifier: keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:54:aa:b4:d2:6d:a5:e1:5f:62:43:70:83:7a:2d:ad:11:6a: f6:65:57:14:49:c5:ac:8d:dd:5e:f8:25:7a:24:fb:f3:d0:77: 10:01:ea:22:71:b0:72:c3:d8:ce:9c:c6:ef:0b:61:50:f2:fd: 10:fc:0d:57:d2:b1:e4:9c:21:bf:4a:e9:64:a4:d5:8e:72:74: 39:f3:27:fb:ef:e7:d0:7b:10:ad:11:5c:0f:35:69:5b:23:39: 4a:95:0a:4c:88:ee:05:da:52:03:52:38:3f:70:15:59:fd:61: f8:b8:17:85:51:3c:75:4e:cf:31:81:e5:57:11:f6:97:5c:45: 9b:9d:08:a5:56:b0:64:7e:4f:e1:07:82:29:30:cc:cc:0d:ec: 87:8a:3c:9a:ec:f4:6d:83:a2:6c:11:09:64:07:3c:48:6f:c6: 1b:2e:d2:52:b3:5e:84:af:e5:52:83:e3:4c:6a:76:07:26:df: c0:51:5c:00:49:92:c5:90:72:a8:26:a9:a3:60:c0:8b:6d:3d: 32:f6:b9:52:90:37:95:09:a2:be:20:11:5d:db:c9:31:05:a3: 44:1b:33:5a:6b:ef:80:87:fc:ae:f3:57:27:f8:61:d3:0a:70: 4e:31:b9:8f:de:01:84:cf:47:45:71:5b:de:31:45:d0:c4:96: 2e:c9:d7:27 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfzrTus5lt7mKD7fOy9wUdGBx9QAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5 OEI3ODk3NjAeFw0yNTExMDQxODAzNTlaFw0yNTExMDUxOTEwNTlaMDMxMTAvBgNV BAMTKDQwRTQ5MjcxMTBDQjJCMjU2MjM0QjlEOTZDNDZDOTVGOTFEN0MyRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaCrC8OqlscgwTMvmh7CeOGEcF BIS5zvpzV1gEHVuZQdX2sL12ZsAjSR93yyDTE1F6b0fxcY2BxfO/cPqsvWrHc7Dx L54xa2chvUT56+bcSedZqr5Lhl2JT6xGhOHYXyVVb40Qj4UXIvYqnN/IRqMKiRUE +XG27Xp2+FVGyfzH9bocEn8faEX81HDNwdJqGAX9ZSewTyjxiLJUE0pll3u1c4Gu HPfU17yn/xOE3+A6jYv7LeNpTUgyCsP4HzJ5EGeovDJ7/XyoSQPcDAlUFOOuKMtA JU3GUFk8ONXkN34Gnwsw95ei5+4sfMFiWSDdgyHK3fksao1vBXCrg2RE+17hAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUQOSScRDLKyViNLnZbEbJX5HXwuYwHwYDVR0j BBgwFoAUUZF+ci2wOVLZBWvtL2vUv5i3iXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWVjYWM0MTMtNGNkMi00NzJjLWIwMWUtNzQ0NThjZWEz ODZjLzAvNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5OEI3ODk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MTkxN0U3MjJEQjAzOTUyRDkwNTZCRUQy RjZCRDRCRjk4Qjc4OTc2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzllY2FjNDEzLTRjZDItNDcyYy1iMDFlLTc0NDU4Y2VhMzg2Yy8wLzUxOTE3RTcy MkRCMDM5NTJEOTA1NkJFRDJGNkJENEJGOThCNzg5NzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDLVKq0 0m2l4V9iQ3CDei2tEWr2ZVcUScWsjd1e+CV6JPvz0HcQAeoicbByw9jOnMbvC2FQ 8v0Q/A1X0rHknCG/SulkpNWOcnQ58yf77+fQexCtEVwPNWlbIzlKlQpMiO4F2lID Ujg/cBVZ/WH4uBeFUTx1Ts8xgeVXEfaXXEWbnQilVrBkfk/hB4IpMMzMDeyHijya 7PRtg6JsEQlkBzxIb8YbLtJSs16Er+VSg+NManYHJt/AUVwASZLFkHKoJqmjYMCL bT0y9rlSkDeVCaK+IBFd28kxBaNEGzNaa++Ah/yu81cn+GHTCnBOMbmP3gGEz0dF cVveMUXQxJYuydcn -----END CERTIFICATE-----Generated at Wed Nov 5 01:51:19 2025 by rpki-client