$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft File: 8184669B0189B7FABE05E700325A0D74957BEB27.mft (raw, json) Hash identifier: 7t1w7S44T+8ZMKCR4LIpIA1qA2PJ85VPCRqRvGVydm8= Subject key identifier: 49:55:D2:BB:7C:2F:BE:6B:9B:78:A9:9A:04:92:F4:79:08:E8:62:81 Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27 Certificate serial: 01432B55B27B87F8DD6FAEE5E80A3EFF10FCA59A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft Manifest number: 012A Signing time: Tue 04 Nov 2025 21:52:22 +0000 Manifest this update: Tue 04 Nov 2025 21:47:22 +0000 Manifest next update: Wed 05 Nov 2025 22:44:22 +0000 Files and hashes: 1: 3231332e3135372e3130372e302f32342d3234203d3e203530323631.roa (hash: fkThFrWbc2SNg5nWL/DjCmp7efO9LKVSLfyHO63Odeo=) 2: 3231332e3135372e3132322e302f32342d3234203d3e2039333034.roa (hash: aUvc4UTsIU7R0m9dsnmxWesOTPr9WQo6/RshJ5X0hb4=) 3: 3231332e3135372e39362e302f32302d3230203d3e203230353130.roa (hash: cK22q6rO6KtktflqsQYlSr1z73xEpoVM/WNGnd6YIEI=) 4: 3231332e3135372e3132332e302f32342d3234203d3e20383334.roa (hash: C0JcuikvC/Uy3ECFh8uVklkN/jsNd0lTBctoOoL3Cvc=) 5: 3231332e3135372e3131382e302f32332d3233203d3e203230353130.roa (hash: U2rsj2GmpPBYV9RPLITNHzbaDI2Gxelnlov5msxX9eI=) 6: 3231332e3135372e3131362e302f32332d3233203d3e203230353130.roa (hash: u6D0nQIamyf1rwT6EphlkmgpGmdsHhrROhbEzSFSSxQ=) 7: 3231332e3135372e3132302e302f32342d3234203d3e203432383331.roa (hash: obPbW0ZKO9rq4yp7c5UqzqijavPW0CV78gaYhHaBReI=) 8: 3231332e3135372e3131322e302f32322d3232203d3e203230353130.roa (hash: oXC9Asr9SJ7DSslxSZaWUX9xWnSBbY5iUxbxwvvcFUI=) 9: 3231332e3135372e3132312e302f32342d3234203d3e2039333034.roa (hash: ZHfI2bxkV7hnGY31X0QEko4MmgUYJCvh7a/XuZiRsPg=) 10: 8184669B0189B7FABE05E700325A0D74957BEB27.crl (hash: RxBibeqEy9xtwakQA5zHJ8cga5xGIHuHoi3a5TNqeVI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:43:2b:55:b2:7b:87:f8:dd:6f:ae:e5:e8:0a:3e:ff:10:fc:a5:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27 Validity Not Before: Nov 4 21:47:22 2025 GMT Not After : Nov 5 22:44:22 2025 GMT Subject: CN=4955D2BB7C2FBE6B9B78A99A0492F47908E86281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f0:23:18:dd:33:5a:9f:f5:2a:89:e8:49:e6: 06:17:09:7d:29:38:d0:9b:d5:1a:f8:05:0a:9a:49: 3e:19:a2:e3:24:f9:a4:8c:9d:01:5f:c2:4c:18:13: 6d:0e:98:0f:c1:e8:8e:19:65:dc:15:70:61:12:db: ec:1b:c4:c6:b0:be:56:51:dd:cf:e4:e9:21:a9:10: e3:64:b4:d2:cb:c9:19:2c:f0:a7:49:33:6c:9f:19: 1f:99:64:48:1c:2a:b9:73:4b:5b:b6:23:9a:64:02: ce:10:85:96:f1:46:f0:2f:fa:07:5b:2e:4d:0f:ce: e1:f3:45:62:68:67:2e:cd:73:ee:49:6d:6c:57:35: e9:95:eb:ab:f8:3d:4e:11:57:5d:c7:60:12:35:68: 90:ee:3f:cc:e4:04:3c:0b:2e:53:f8:4d:f5:08:d1: ed:f3:e8:6c:71:83:28:65:8f:4d:5f:08:df:f5:03: 19:0e:50:90:f5:83:eb:a3:7b:be:24:0e:4f:b0:c3: c4:b8:89:5e:4d:6f:28:a9:99:2c:f1:6e:dd:72:1b: 6a:66:a1:cc:cb:4b:c4:a8:c7:57:83:59:b9:12:9a: 90:b9:18:75:10:22:bb:1d:05:c7:ef:b6:d5:42:6c: 06:c5:eb:96:6e:bd:90:a7:6c:70:0a:c2:4c:c5:6c: df:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:55:D2:BB:7C:2F:BE:6B:9B:78:A9:9A:04:92:F4:79:08:E8:62:81 X509v3 Authority Key Identifier: keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:22:e9:33:44:7d:5a:e7:bb:01:5d:2f:19:fe:11:9a:a1:d3: 9e:45:fc:45:51:a6:57:35:45:5c:6b:fe:f5:bd:5a:fd:38:16: 9b:05:94:de:91:58:8b:9a:83:2e:ec:f5:55:8e:df:b0:b2:5d: 3f:df:84:8b:8f:6f:43:30:53:80:75:fa:61:23:9e:e1:f3:c9: 8b:44:1d:db:64:63:c2:e0:47:ce:69:85:19:00:f9:09:b0:98: c5:02:d8:ae:5f:4f:ff:19:65:cc:65:89:c0:7f:33:74:e2:3c: 34:43:4b:30:a0:50:08:df:67:b6:9a:d7:7c:9f:5c:af:d0:15: b6:17:9d:8f:64:1a:8a:09:3f:33:28:c8:4c:26:1c:c7:1a:f6: c0:af:e4:0a:f0:88:3d:c2:75:74:d1:fd:62:8b:12:76:70:15: a9:c6:7d:e5:9a:2b:18:13:93:3f:b6:cd:d9:d8:18:ef:71:21: f0:fa:e1:a0:f2:e5:e6:cd:f6:57:ea:95:cb:36:73:18:f7:57: 10:61:78:96:e6:5a:30:7f:77:26:87:2c:83:9d:6d:59:1c:a9: 16:19:5c:b8:b7:3f:1c:84:c9:bc:a6:15:cb:f2:9a:d7:c9:94: 01:3b:40:4e:ec:17:ce:69:11:df:fc:03:6b:36:9c:fa:e7:e2: b6:36:d0:25 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUAUMrVbJ7h/jdb67l6Ao+/xD8pZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE4NDY2OWIwMTg5YjdmYWJlMDVlNzAwMzI1YTBkNzQ5 NTdiZWIyNzAeFw0yNTExMDQyMTQ3MjJaFw0yNTExMDUyMjQ0MjJaMDMxMTAvBgNV BAMTKDQ5NTVEMkJCN0MyRkJFNkI5Qjc4QTk5QTA0OTJGNDc5MDhFODYyODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ8CMY3TNan/UqiehJ5gYXCX0p ONCb1Rr4BQqaST4ZouMk+aSMnQFfwkwYE20OmA/B6I4ZZdwVcGES2+wbxMawvlZR 3c/k6SGpEONktNLLyRks8KdJM2yfGR+ZZEgcKrlzS1u2I5pkAs4QhZbxRvAv+gdb Lk0PzuHzRWJoZy7Nc+5JbWxXNemV66v4PU4RV13HYBI1aJDuP8zkBDwLLlP4TfUI 0e3z6Gxxgyhlj01fCN/1AxkOUJD1g+uje74kDk+ww8S4iV5NbyipmSzxbt1yG2pm oczLS8Sox1eDWbkSmpC5GHUQIrsdBcfvttVCbAbF65ZuvZCnbHAKwkzFbN8dAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUSVXSu3wvvmubeKmaBJL0eQjoYoEwHwYDVR0j BBgwFoAUgYRmmwGJt/q+BecAMloNdJV76ycwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUtMGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJi ZTI1LzAvODE4NDY2OUIwMTg5QjdGQUJFMDVFNzAwMzI1QTBENzQ5NTdCRUIyNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dZUm1td0dKdF9xLUJlY0FNbG9OZEpW NzZ5Yy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNDMxZTQyZS0w ZDdmLTQ0ZDAtODEzZi1iNWUzYTJhYmJlMjUvMC84MTg0NjY5QjAxODlCN0ZBQkUw NUU3MDAzMjVBMEQ3NDk1N0JFQjI3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASiLpM0R9Wue7AV0vGf4R mqHTnkX8RVGmVzVFXGv+9b1a/TgWmwWU3pFYi5qDLuz1VY7fsLJdP9+Ei49vQzBT gHX6YSOe4fPJi0Qd22RjwuBHzmmFGQD5CbCYxQLYrl9P/xllzGWJwH8zdOI8NENL MKBQCN9ntprXfJ9cr9AVthedj2Qaigk/MyjITCYcxxr2wK/kCvCIPcJ1dNH9YosS dnAVqcZ95ZorGBOTP7bN2dgY73Eh8PrhoPLl5s32V+qVyzZzGPdXEGF4luZaMH93 Jocsg51tWRypFhlcuLc/HITJvKYVy/Ka18mUATtATuwXzmkR3/wDazac+ufitjbQ JQ== -----END CERTIFICATE-----Generated at Wed Nov 5 04:38:33 2025 by rpki-client