$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft File: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json) Hash identifier: jzamSr/WBKZ6jGA+FVHVi5kh60HSEK7dn+JY+dDswj8= Subject key identifier: 2C:0A:4B:7C:93:32:B4:1E:6E:ED:B7:9B:43:C4:20:36:D2:D8:6C:63 Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Certificate serial: 143299D3C3C02FC25D8FB592C8AA610ED55DA538 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft Manifest number: 04B5 Signing time: Tue 04 Nov 2025 18:55:11 +0000 Manifest this update: Tue 04 Nov 2025 18:50:11 +0000 Manifest next update: Wed 05 Nov 2025 19:02:11 +0000 Files and hashes: 1: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: qGNft1uCzkGwuPJH7iDQ4xUhWrhNnduWexIhT+DgvI8=) 2: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: hY/iIpaGanxmxatebFYi3ijTkZjHjUc/Iwjsijc0S+E=) 3: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (hash: NPxcG44HSvUhEjS0S2kkms3rMNVlot0JsRdIfylKbjg=) 4: 36322e3131322e3134342e302f32302d3230203d3e203539363432.roa (hash: hNXCqst3dZC+Dp3skkO26cOwh1zWEwx2n+JeuoU1IgU=) 5: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: qxlkfW/nLMV9I5WoI6HQ89q00naILT20Rguml63Zf0A=) 6: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: DuCHe81tO8TVOKBTNFQCS5fRuYDjbGZfxshPpJZXNzc=) 7: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: wVoSo5R4C0li3mnrmt+yVn07zBaq5nP6xjz9H1bizQs=) 8: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: oQj2no095+LyjZGzWOfw+sSJOW/7fRxpgUOPswu5nqM=) 9: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: GCjCQc0vdu8E+NZi5emgx2vW0PKbTzGL5UYc+2R4voE=) 10: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: W95e9h2ypKBcN51G9gRI82wozQL8rXCLvGb2mHpv6bk=) 11: 36322e3131322e3134342e302f32302d3234203d3e203230333236.roa (hash: PvFG9BZ+YdbKPRfUC/0dM3w7V209DRWmI/bk8VoBnFU=) 12: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: OKc3uZvr3kmY38TGv/j5cCd/d8TD6IBU2hGWJY9u+K0=) 13: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: X+PLwzsRRQMgaM/TWKrSkseThdECGWKV7QbjrMlPn80=) 14: 3138352e322e3136322e302f32332d3234203d3e20323135323639.roa (hash: sEO5Q+LtE+juFIMx1yqrmSkIjuvpVFxY8R1aiQqtGzs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 16:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:32:99:d3:c3:c0:2f:c2:5d:8f:b5:92:c8:aa:61:0e:d5:5d:a5:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Validity Not Before: Nov 4 18:50:11 2025 GMT Not After : Nov 5 19:02:11 2025 GMT Subject: CN=2C0A4B7C9332B41E6EEDB79B43C42036D2D86C63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:eb:10:ba:89:22:ff:0d:3b:13:98:6b:9a:2f: 10:0e:eb:c5:b6:65:36:8f:5d:e0:a0:34:f6:26:61: b9:a7:03:e5:d2:55:06:3f:74:7f:ba:db:ac:88:f4: a4:10:93:40:bf:7e:62:3d:5c:58:64:35:38:0e:cb: 5d:27:37:14:d7:d3:a0:aa:6c:94:98:a4:90:b6:93: c8:5f:f1:ef:aa:85:6d:8c:2e:ad:20:93:54:ad:f2: 63:27:fe:48:a9:f3:34:4a:cb:14:2c:47:25:4e:c6: d6:47:82:64:f7:d3:0b:4b:de:5b:23:34:94:2e:5a: 4c:c1:45:3b:5f:cd:b1:7a:4f:4d:47:a8:a2:c7:a9: f8:53:29:ed:f0:af:bd:50:e3:d6:e8:df:9e:3a:1c: e4:61:24:1b:1a:db:f9:8e:1b:79:0d:d8:98:4e:03: 04:52:12:1f:24:79:bf:92:6e:b6:24:a7:a6:49:bf: e4:f9:bd:15:0a:3b:25:fa:21:93:41:60:fa:a1:30: 9b:3c:81:ec:2e:59:4b:a6:00:fd:eb:f8:93:b7:66: f5:34:88:6d:12:98:ba:f5:77:1f:64:3a:f7:42:bb: 75:82:43:4e:ee:f3:30:8f:29:89:60:5a:33:45:6e: bd:b3:ce:ee:3a:39:ff:ba:e8:2a:f4:ee:25:d0:7b: 1d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0A:4B:7C:93:32:B4:1E:6E:ED:B7:9B:43:C4:20:36:D2:D8:6C:63 X509v3 Authority Key Identifier: keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:45:bb:7e:62:ff:e3:b9:29:eb:c7:4a:cb:d2:d2:3b:db:b5: ee:36:7c:e5:3d:c2:58:28:ee:8b:5d:aa:b1:e6:17:95:c9:ee: e1:8a:fa:36:77:0d:35:ca:cc:65:f4:9a:b6:2a:07:35:df:65: 97:97:60:0c:ed:d1:58:c0:02:a7:3d:3b:73:23:4f:7f:d8:40: 4e:62:a8:0f:3e:db:39:9c:0f:f1:63:b7:a5:fc:cc:2f:6a:61: 0f:ff:3d:57:13:bc:9a:89:d8:61:4a:b9:5e:70:8f:04:24:e4: 31:70:e4:7b:71:a0:e3:ef:e5:e0:56:8c:39:38:b9:89:63:98: 53:61:f9:01:66:6b:8e:0b:a9:cf:a3:1e:0c:5b:31:5c:82:c2: cb:24:7c:27:4e:ca:c0:3a:75:fe:b5:95:e6:65:5e:5d:5c:dc: 56:40:f4:f6:bf:43:2d:20:35:52:3f:a0:cf:92:af:2c:3b:92: 0f:12:83:8e:ae:f0:76:7c:70:15:6e:d5:b0:ed:56:e7:8d:79: 0e:ea:1d:e4:cc:57:1e:e9:c0:9b:fd:bc:10:ec:6e:4f:47:53: 20:98:45:77:fa:b4:b3:3f:b4:78:6c:9a:29:0a:f2:1c:b8:50: b0:ae:5b:68:77:62:5a:4c:ee:da:eb:36:27:25:18:a0:76:24: 2b:8b:cb:31 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFDKZ08PAL8Jdj7WSyKphDtVdpTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3 MDgzZWQ0ZDAeFw0yNTExMDQxODUwMTFaFw0yNTExMDUxOTAyMTFaMDMxMTAvBgNV BAMTKDJDMEE0QjdDOTMzMkI0MUU2RUVEQjc5QjQzQzQyMDM2RDJEODZDNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI6xC6iSL/DTsTmGuaLxAO68W2 ZTaPXeCgNPYmYbmnA+XSVQY/dH+626yI9KQQk0C/fmI9XFhkNTgOy10nNxTX06Cq bJSYpJC2k8hf8e+qhW2MLq0gk1St8mMn/kip8zRKyxQsRyVOxtZHgmT30wtL3lsj NJQuWkzBRTtfzbF6T01HqKLHqfhTKe3wr71Q49bo3546HORhJBsa2/mOG3kN2JhO AwRSEh8keb+SbrYkp6ZJv+T5vRUKOyX6IZNBYPqhMJs8gewuWUumAP3r+JO3ZvU0 iG0SmLr1dx9kOvdCu3WCQ07u8zCPKYlgWjNFbr2zzu46Of+66Cr07iXQex2ZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQULApLfJMytB5u7bebQ8QgNtLYbGMwHwYDVR0j BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3 ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD RDdVMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjMxNzY4ZC00 MmIxLTRlOTItYjgzZi1iZWY3ZWUwMTc4MTMvMC85RjBEMjRDODU1RUVFMDBGRTRB QkYzOTAzQzZFOEZDQzcwODNFRDRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXEW7fmL/47kp68dKy9LS O9u17jZ85T3CWCjui12qseYXlcnu4Yr6NncNNcrMZfSatioHNd9ll5dgDO3RWMAC pz07cyNPf9hATmKoDz7bOZwP8WO3pfzML2phD/89VxO8monYYUq5XnCPBCTkMXDk e3Gg4+/l4FaMOTi5iWOYU2H5AWZrjgupz6MeDFsxXILCyyR8J07KwDp1/rWV5mVe XVzcVkD09r9DLSA1Uj+gz5KvLDuSDxKDjq7wdnxwFW7VsO1W5415Duod5MxXHunA m/28EOxuT0dTIJhFd/q0sz+0eGyaKQryHLhQsK5baHdiWkzu2us2JyUYoHYkK4vL MQ== -----END CERTIFICATE-----Generated at Tue Nov 4 20:16:13 2025 by rpki-client