$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft File: 5ECB4CADBBADD500F49CA697D566A2761E017608.mft (raw, json) Hash identifier: S4x8FpefRP2Y5yn59BWG/WDOEyYFD3GiOdBBh2KzK3Y= Subject key identifier: D4:87:31:7D:E6:F7:57:35:D1:7A:35:EB:8F:53:06:C9:B2:EB:60:0D Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Certificate serial: 274FB6D23E5F740A12D1AF7A1D799F2D4BF53E7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft Manifest number: 01E6 Signing time: Tue 04 Nov 2025 03:02:05 +0000 Manifest this update: Tue 04 Nov 2025 02:57:05 +0000 Manifest next update: Wed 05 Nov 2025 04:51:05 +0000 Files and hashes: 1: 38362e35342e3137322e302f32342d3234203d3e20323134343332.roa (hash: WVXkrZeMKS19WGWwMJQfqNOjJpC3bIU6zT5pImMreVs=) 2: 3137302e36322e3139302e302f32342d3234203d3e203438393235.roa (hash: TDSLNd9plHJwOulPeBHo1vNBDKxJTlWmh9i0dzSd4do=) 3: 3231332e3235342e3137302e302f32342d3234203d3e20323038343833.roa (hash: gjwDheXZBS8eOtwo7Ja5xPFcujfV7TC07EH1z972oQ4=) 4: 3231332e3235342e3137302e302f32342d3234203d3e203438363738.roa (hash: ttSPLNkVmnmfbB1Jg0U4OFMRv4cZWxzTg6oBluFltrk=) 5: 3134312e3139332e3232382e302f32342d3234203d3e20323134323038.roa (hash: p1kuPenqcy6Et0XPjwxcCLB+vpEy3ekHhe4EodnqolI=) 6: 5ECB4CADBBADD500F49CA697D566A2761E017608.crl (hash: rF0omI7kBAGcrs4WTfasR6tE3oCmwSJnIWI0iE2zaj0=) 7: 3231332e3235342e3137302e302f32342d3234203d3e20323134393431.roa (hash: WuIyFXGDgkt2cltxoxT/RYao20HHu+r0Sn5rfpjFnHA=) 8: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (hash: Q4yUdFFGtrq1xUVDtHn0DoNWjht0ICRHxiUX7p+xRAQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 04:51:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:4f:b6:d2:3e:5f:74:0a:12:d1:af:7a:1d:79:9f:2d:4b:f5:3e:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Validity Not Before: Nov 4 02:57:05 2025 GMT Not After : Nov 5 04:51:05 2025 GMT Subject: CN=D487317DE6F75735D17A35EB8F5306C9B2EB600D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:af:2c:cc:2a:95:0e:e7:24:20:b5:0f:26:9e: ed:9d:1a:ed:38:01:6d:60:88:e3:03:ee:f8:81:d5: e7:50:c5:31:f5:7f:28:dc:d3:2f:cc:4f:88:e7:2c: 1c:e7:42:22:65:4d:60:00:0b:e2:b3:e8:d3:00:4a: 5f:64:21:5a:b7:6f:90:26:9a:d0:7d:ce:49:86:00: ba:22:8c:4b:b1:b4:e2:20:91:70:e0:85:2b:b5:92: 14:8e:ad:65:31:ad:46:b6:2c:b3:e0:ef:19:db:70: 0a:9a:73:a2:e6:92:b6:4d:b0:be:bf:b0:fa:55:f0: 04:30:dd:e8:31:d8:73:b8:f4:fd:58:f6:c0:86:a7: 5a:07:99:3e:59:24:47:04:8b:49:bc:d7:45:99:29: 6a:08:4b:fb:6d:99:86:4f:5a:c1:5a:40:61:9c:29: 66:bc:8a:f4:21:46:db:d6:e0:ab:b7:ee:1f:fe:a0: 89:64:91:3c:de:6f:d3:b2:23:d0:14:d6:e7:38:a5: 6b:a4:26:fe:1d:2b:75:3f:d8:d4:2a:86:b6:ad:b6: 5b:6d:51:7c:a0:05:db:48:bf:c3:ba:c1:03:e5:5c: e5:f2:20:1b:60:16:d6:46:0e:4e:54:24:63:ce:ce: 6b:7d:e7:a8:97:2c:3e:9c:61:90:b8:d7:de:d6:8f: 47:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:87:31:7D:E6:F7:57:35:D1:7A:35:EB:8F:53:06:C9:B2:EB:60:0D X509v3 Authority Key Identifier: keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:fa:92:f0:6b:a9:be:81:7d:f2:d7:43:cc:f7:fd:e2:78:d3: 99:e8:45:70:fb:36:15:d0:7e:7a:f5:c0:64:cd:2c:32:cf:a1: 41:b9:37:e4:2c:5c:f9:44:46:ef:cd:6e:ff:22:d8:32:a3:05: 11:d3:e4:0c:b8:87:1b:c5:d4:8e:71:c6:fa:f0:74:e4:5c:4a: a3:c3:b8:33:07:57:e2:f5:65:00:03:df:95:84:a2:e4:69:d5: df:81:01:11:b2:11:59:bb:cf:61:dc:0f:34:e4:fa:35:ab:0e: 34:05:b3:ae:e0:bf:4c:ef:7c:df:0f:fb:53:01:04:4f:7e:1b: fe:b4:bc:be:64:22:9b:6c:e9:a7:6f:61:d3:e2:5d:f8:bd:aa: 27:bd:47:99:ba:c8:b9:cf:60:2a:ab:ae:fc:86:8a:2b:76:49: 41:2e:9e:f3:11:02:f4:ea:35:c2:af:b4:a9:8b:23:df:59:a0: 64:db:2a:e7:54:16:12:06:77:9c:87:2a:37:4a:42:81:22:14: 13:17:98:7e:99:c2:86:0a:b2:55:b2:35:33:80:99:6a:78:6d: 23:87:07:c5:02:ba:d4:09:2d:27:50:48:ff:f7:7a:be:a9:ce: d9:96:e9:76:c8:c2:53:c7:da:3f:0e:cf:f2:38:fa:69:32:17: 61:92:ef:01 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJ0+20j5fdAoS0a96HXmfLUv1PnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx ZTAxNzYwODAeFw0yNTExMDQwMjU3MDVaFw0yNTExMDUwNDUxMDVaMDMxMTAvBgNV BAMTKEQ0ODczMTdERTZGNzU3MzVEMTdBMzVFQjhGNTMwNkM5QjJFQjYwMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwryzMKpUO5yQgtQ8mnu2dGu04 AW1giOMD7viB1edQxTH1fyjc0y/MT4jnLBznQiJlTWAAC+Kz6NMASl9kIVq3b5Am mtB9zkmGALoijEuxtOIgkXDghSu1khSOrWUxrUa2LLPg7xnbcAqac6LmkrZNsL6/ sPpV8AQw3egx2HO49P1Y9sCGp1oHmT5ZJEcEi0m810WZKWoIS/ttmYZPWsFaQGGc KWa8ivQhRtvW4Ku37h/+oIlkkTzeb9OyI9AU1uc4pWukJv4dK3U/2NQqhrattltt UXygBdtIv8O6wQPlXOXyIBtgFtZGDk5UJGPOzmt956iXLD6cYZC4197Wj0dPAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU1Icxfeb3VzXRejXrj1MGybLrYA0wHwYDVR0j BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0 QmRnZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzBlMTNkOC1i ZmUwLTQyMzUtYWZiNC1kNTNlZGZiYWNkZDIvMC81RUNCNENBREJCQURENTAwRjQ5 Q0E2OTdENTY2QTI3NjFFMDE3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHPqS8GupvoF98tdDzPf9 4njTmehFcPs2FdB+evXAZM0sMs+hQbk35Cxc+URG781u/yLYMqMFEdPkDLiHG8XU jnHG+vB05FxKo8O4MwdX4vVlAAPflYSi5GnV34EBEbIRWbvPYdwPNOT6NasONAWz ruC/TO983w/7UwEET34b/rS8vmQim2zpp29h0+Jd+L2qJ71HmbrIuc9gKquu/IaK K3ZJQS6e8xEC9Oo1wq+0qYsj31mgZNsq51QWEgZ3nIcqN0pCgSIUExeYfpnChgqy VbI1M4CZanhtI4cHxQK61AktJ1BI//d6vqnO2ZbpdsjCU8faPw7P8jj6aTIXYZLv AQ== -----END CERTIFICATE-----Generated at Tue Nov 4 10:47:32 2025 by rpki-client