$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft File: 87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft (raw, json) Hash identifier: DEQdfS4khTSFdlxern32YF4JKZVsFirfgKlN4kuDfQs= Subject key identifier: 67:AA:42:0D:EC:F3:FC:7A:5F:18:E6:C2:97:88:EA:F3:A0:87:53:33 Authority key identifier: 87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 Certificate issuer: /CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Certificate serial: 681D58F6FD3F76F0D09BE563E133513DBFED8455 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft Manifest number: 0109 Signing time: Tue 04 Nov 2025 06:23:55 +0000 Manifest this update: Tue 04 Nov 2025 06:18:55 +0000 Manifest next update: Wed 05 Nov 2025 08:01:55 +0000 Files and hashes: 1: 87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl (hash: 3NbC7/ayYs2iP85LdDIbuqvyfev4RCb9WO4R0JFu66k=) 2: 326131343a373538313a393930333a3a2f34382d3438203d3e20323134333434.roa (hash: /zrjZ0ZqEzRDQ5mOWK+S06L45z9UxNhwijRkpqGoHX0=) 3: 326131343a373538303a666634323a3a2f34382d3438203d3e20323134333434.roa (hash: 9k9VorkprwzOj4hWnDvwpKS020LK9HlBFwzRrzgLjKw=) 4: 326131343a373538313a393930313a3a2f34382d3438203d3e20323134333434.roa (hash: i94AFUzw6e810fYgj7x6pZ8Yx8k5H6Glrkwkeys08UU=) 5: 326131343a373538313a393966353a3a2f34382d3438203d3e20323134333434.roa (hash: WwRRTirG7edW5+geax/8pXpN1dZiLKdB/tgwh/uOeTM=) 6: 326131343a373538313a393966313a3a2f34382d3438203d3e20323134333434.roa (hash: eBRv+uDGLUqSp7a6GG/a9BPTN3/sPy8oPhg1ivi/5ik=) 7: 326131343a373538313a393966343a3a2f34382d3438203d3e20323134333434.roa (hash: aT8cghtaGkqPEEByCDT3I1TbWDM5+v3iYF7i8PWrF94=) 8: 326131343a373538303a666634343a3a2f34382d3438203d3e20323134333434.roa (hash: wAwmvjP2Xs/JgKfPKl1DdsDpWK9Z2qkOeMDP05em2JQ=) 9: 326131343a373538303a666634353a3a2f34382d3438203d3e20323134333434.roa (hash: 5PYc1rYfh5soL/5eOkdLi7LFwnLpj6iEncugTNMnU6k=) 10: 326131343a373538313a393966333a3a2f34382d3438203d3e20323134333434.roa (hash: CfKfKnWr6AMoLiLfBVlrhneodY9KAu+Y1wDjsvoRWPk=) 11: 326131343a373538303a666634333a3a2f34382d3438203d3e20323134333434.roa (hash: apRB5OfhlgNP9CjlOyLXHwJtDJcG7Ul2o20dXFYOVFQ=) 12: 326131343a373538313a393965653a3a2f34382d3438203d3e20323134333434.roa (hash: 3oBSnEnPYocyloNNfV7eH1ZnHXiKOV8dASwMij3b8+0=) 13: 326131343a373538303a666634363a3a2f34382d3438203d3e20323134333434.roa (hash: INfgk/A/FB6y22LomhkCbMfma8QUd57K4w9Tk5H86CM=) 14: 326131343a373538313a393966323a3a2f34382d3438203d3e20323134333434.roa (hash: GgRgpO0cir6J2JIvLpFaBWDg0/fcSkJg//f6BlSBDCY=) 15: 326131343a373538303a666634313a3a2f34382d3438203d3e20323134333434.roa (hash: pdCqfiQKAk5mpE38Sur9HB4NVG9NXvRtOzzMMORY0Ss=) 16: 326131343a373538313a393930353a3a2f34382d3438203d3e20323134333434.roa (hash: 0tk68iktR4A+Tmx1ow+QCPfURRQdgNg7+hqUgrcV4SU=) 17: 326131343a373538313a393939393a3a2f34382d3438203d3e20323134333434.roa (hash: gWNOGizaCWeT+eChfA6O1CcYgC4CppF3JVd8ZgY0qsY=) 18: 326131343a373538313a393930323a3a2f34382d3438203d3e20323134333434.roa (hash: 3uRQGY7O+ZvtbHNtgC5MF4VJ4PR1W0vGtZuXeGQdfrI=) 19: 326131343a373538313a393930343a3a2f34382d3438203d3e20323134333434.roa (hash: Kr++/O1eWk2rhooTEwkNaOpIKHaAHhcWSp5UY9Du6eM=) 20: 326131343a373538303a666634303a3a2f34382d3438203d3e20323134333434.roa (hash: dPCGiKkWz0E9rMprVOstBFLQuVK9OG6CBSKX+fk7UXw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 08:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:1d:58:f6:fd:3f:76:f0:d0:9b:e5:63:e1:33:51:3d:bf:ed:84:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Validity Not Before: Nov 4 06:18:55 2025 GMT Not After : Nov 5 08:01:55 2025 GMT Subject: CN=67AA420DECF3FC7A5F18E6C29788EAF3A0875333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8e:b0:94:55:10:be:cc:52:13:31:32:56:09: c1:c1:dd:85:4d:c0:76:94:94:75:c9:a9:78:6b:9e: 43:25:7e:e6:2d:1c:fb:0f:e9:18:ca:23:e7:ae:75: ae:f4:0d:34:a8:b3:35:90:75:11:9e:22:41:5a:75: 1e:13:b1:12:50:96:93:50:73:5b:52:79:d0:9e:6f: e8:48:da:85:be:a1:86:3c:1f:a7:05:63:fd:27:52: 18:99:51:be:35:ef:6a:5e:c0:8e:44:3f:64:3a:36: c4:4e:f5:42:61:5a:83:6b:1a:8c:fa:22:b7:f6:47: 1a:e6:1c:8b:00:e7:a1:fb:a2:ae:1a:23:67:d6:45: 1c:60:68:ad:2a:b2:a3:54:a9:24:26:c8:64:0c:cd: 8c:9d:ab:f6:48:10:5a:29:be:81:7a:ff:69:f3:9c: cd:0c:84:ff:ff:b7:5e:28:6d:a0:d1:9d:bd:a9:4b: 7f:eb:91:44:2e:a0:a4:f1:eb:de:19:0e:3b:1b:f5: 70:8f:cc:05:fb:71:86:ea:5f:58:f8:de:c6:13:9a: e0:d8:a5:43:c6:56:e3:e1:cc:6e:ba:a5:09:e9:8e: b3:6e:3a:96:b9:28:8e:b4:28:dc:23:c1:9b:51:6f: c6:dc:13:63:b6:e5:83:08:34:a2:f1:42:b5:09:77: a8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:AA:42:0D:EC:F3:FC:7A:5F:18:E6:C2:97:88:EA:F3:A0:87:53:33 X509v3 Authority Key Identifier: keyid:87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:b5:02:a3:b8:0a:a8:95:96:f7:b1:79:c0:98:9b:bc:c4:85: 63:85:74:97:06:ee:47:1d:92:94:ae:cd:94:42:a7:20:51:95: 56:1f:8e:24:49:10:d7:cb:53:26:54:10:f8:29:9a:ad:9f:2a: b8:bc:5b:78:cd:20:54:3d:64:be:92:9d:a1:b7:c8:18:f0:d6: 49:f2:63:85:5b:75:b0:f8:88:9c:70:68:63:3c:45:9a:a7:2c: 6c:36:b7:cd:0a:2e:3c:0c:7a:01:2f:c2:5b:8c:d6:38:91:74: e9:93:dd:d0:4f:61:0a:e4:77:0a:80:0a:77:00:4d:cc:b9:e1: c1:04:a2:6f:e1:7e:ad:4e:2e:0e:99:ec:a1:b7:cf:9e:d4:db: 7f:e7:58:7c:59:eb:58:b2:7f:6a:5f:33:81:64:83:68:3c:76: 9a:93:a0:ce:c9:ea:6b:ff:d1:ee:85:1b:75:f6:ac:c0:43:45: 9b:24:b3:69:98:81:24:90:59:29:f8:fa:bf:1f:e3:2f:e4:f9: 14:05:24:4c:84:03:71:1f:6d:3a:a2:1e:c6:fa:46:06:9f:11: 78:22:96:2a:e8:6d:e2:e9:db:9c:af:3f:e2:20:d6:26:8d:ac: d8:40:bf:7a:96:3b:89:ee:17:81:82:b8:49:ef:d1:7f:c0:5f: 89:16:34:28 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUaB1Y9v0/dvDQm+Vj4TNRPb/thFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdBNEM4NEQ0MzY2REJCMTVBOTA5MEE1NUFBMkRDRUJB ODcyMzk0NTAeFw0yNTExMDQwNjE4NTVaFw0yNTExMDUwODAxNTVaMDMxMTAvBgNV BAMTKDY3QUE0MjBERUNGM0ZDN0E1RjE4RTZDMjk3ODhFQUYzQTA4NzUzMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOjrCUVRC+zFITMTJWCcHB3YVN wHaUlHXJqXhrnkMlfuYtHPsP6RjKI+euda70DTSoszWQdRGeIkFadR4TsRJQlpNQ c1tSedCeb+hI2oW+oYY8H6cFY/0nUhiZUb4172pewI5EP2Q6NsRO9UJhWoNrGoz6 Irf2RxrmHIsA56H7oq4aI2fWRRxgaK0qsqNUqSQmyGQMzYydq/ZIEFopvoF6/2nz nM0MhP//t14obaDRnb2pS3/rkUQuoKTx694ZDjsb9XCPzAX7cYbqX1j43sYTmuDY pUPGVuPhzG66pQnpjrNuOpa5KI60KNwjwZtRb8bcE2O25YMINKLxQrUJd6h7AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUZ6pCDezz/HpfGObCl4jq86CHUzMwHwYDVR0j BBgwFoAUh6TITUNm27FakJClWqLc66hyOUUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTVkNGMwMGItZDEwNS00OTA2LWI5ODEtMWQwMzQzZTMw MWRhLzEvODdBNEM4NEQ0MzY2REJCMTVBOTA5MEE1NUFBMkRDRUJBODcyMzk0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84N0E0Qzg0RDQzNjZEQkIxNUE5MDkwQTU1 QUEyRENFQkE4NzIzOTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2E1ZDRjMDBiLWQxMDUtNDkwNi1iOTgxLTFkMDM0M2UzMDFkYS8xLzg3QTRDODRE NDM2NkRCQjE1QTkwOTBBNTVBQTJEQ0VCQTg3MjM5NDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAZtQKj uAqolZb3sXnAmJu8xIVjhXSXBu5HHZKUrs2UQqcgUZVWH44kSRDXy1MmVBD4KZqt nyq4vFt4zSBUPWS+kp2ht8gY8NZJ8mOFW3Ww+IiccGhjPEWapyxsNrfNCi48DHoB L8JbjNY4kXTpk93QT2EK5HcKgAp3AE3MueHBBKJv4X6tTi4Omeyht8+e1Nt/51h8 WetYsn9qXzOBZINoPHaak6DOyepr/9HuhRt19qzAQ0WbJLNpmIEkkFkp+Pq/H+Mv 5PkUBSRMhANxH206oh7G+kYGnxF4IpYq6G3i6ducrz/iINYmjazYQL96ljuJ7heB grhJ79F/wF+JFjQo -----END CERTIFICATE-----Generated at Tue Nov 4 20:17:02 2025 by rpki-client