$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft File: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft (raw, json) Hash identifier: 0sIoF+szHmweJZvN0502NtzrLyBmNiBGE89AxE1sRk4= Subject key identifier: 9C:87:5A:6E:E2:00:2A:FD:D4:3A:AE:8B:03:D7:18:04:14:BA:EA:14 Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB Certificate issuer: /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Certificate serial: 64050AD3AE7FA74B1F86FAFFA8DAA552463E12C1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft Manifest number: 02AD Signing time: Tue 04 Nov 2025 03:51:41 +0000 Manifest this update: Tue 04 Nov 2025 03:46:41 +0000 Manifest next update: Wed 05 Nov 2025 03:59:41 +0000 Files and hashes: 1: 326131343a373538313a643130303a3a2f34302d3438203d3e203533363637.roa (hash: e+p8+Sw9X8S3Ty3gF9pg+LdvDbV5qMXAYBBthQD4LPE=) 2: 326131343a373538313a643330303a3a2f34302d3430203d3e2037353435.roa (hash: 9phDdz/jhh9vxdEc5WXHXIl+cdnJzAyh/6SdvyVejiI=) 3: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl (hash: yQlpI5QGq+Qxkk6PxWWAJkBJ7dwwwxrunByZJ4qJ278=) 4: 326131343a373538313a643130303a3a2f34302d3430203d3e203533363637.roa (hash: M0+yHEN3VX8K+aVDmpusml/7Hx8dbBnadNDMaFbGOzQ=) 5: 326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa (hash: DvQHKT6M+fkiG6o9KW4wBm0yNbqCXWjg78L/cu4BiJ0=) 6: 326131343a373538313a643230303a3a2f34302d3430203d3e203533363637.roa (hash: KPVNDBydB4lEOCddQAWiNda/rm6IVb4G2i+sUeOhrYg=) 7: 326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa (hash: OTYsTfrglFs/JKFj7RJtAXdrMe1OUcjbc3WSXqeD0dk=) 8: 326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa (hash: R4oy1L8+rEt1QdmoGVV7PiYt423B/xK5i6kPhc7W9aI=) 9: 326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa (hash: BL4+PYIdcLs3fiOkkamkg94lgyO9kcRHp6ACoQUQ5y8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 03:59:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:05:0a:d3:ae:7f:a7:4b:1f:86:fa:ff:a8:da:a5:52:46:3e:12:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Validity Not Before: Nov 4 03:46:41 2025 GMT Not After : Nov 5 03:59:41 2025 GMT Subject: CN=9C875A6EE2002AFDD43AAE8B03D7180414BAEA14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:fd:ca:67:25:7e:30:39:af:72:2d:ac:d4:24: 86:a2:ac:6b:be:ad:c2:08:8e:aa:19:46:31:5c:c0: 4d:cc:df:8c:8f:1a:b9:c1:07:74:9c:53:e8:c1:43: 70:b6:b6:ce:23:cf:ad:05:63:d7:87:a3:04:10:26: c5:5e:8c:88:83:d8:21:30:dc:89:5b:3e:0b:37:36: 31:4e:86:df:15:a2:b2:14:1b:5b:a6:68:1a:1d:65: e9:cd:42:53:82:fe:8f:86:85:be:d1:09:85:d6:72: f4:32:13:98:fa:e4:56:05:7c:11:56:2f:35:25:9d: 04:2f:37:b0:2e:54:7e:d1:ce:e0:65:97:69:5b:7d: e0:7a:d1:ff:20:67:b3:5a:fe:4c:ec:20:f3:96:c8: c1:dd:9b:c4:de:4f:43:c9:b7:40:68:1e:ba:91:58: 6d:8c:43:1d:90:22:94:9b:3f:28:63:26:a8:67:dd: a0:f9:58:e3:78:b3:66:51:10:7e:37:e8:75:6d:1d: 39:f7:a2:e3:4f:80:f2:65:62:f2:12:fd:e8:cc:84: e9:29:fe:4b:68:4d:ab:9f:6e:29:6b:22:16:e6:96: 0d:df:ee:7a:9f:90:3a:76:46:97:d4:32:66:e7:9a: a8:0d:f0:b1:f1:98:8f:e4:92:d1:a0:61:21:5c:48: 34:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:87:5A:6E:E2:00:2A:FD:D4:3A:AE:8B:03:D7:18:04:14:BA:EA:14 X509v3 Authority Key Identifier: keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:3e:c5:a7:5c:1a:3a:59:25:0b:1a:ad:49:6d:8b:67:65:d4: 70:58:7d:55:0e:e1:c5:a4:0a:9f:e9:29:12:ec:32:35:60:a6: 0c:00:87:a4:33:9c:c0:27:44:3c:7a:bc:65:34:ee:77:86:49: 1c:4e:7d:55:9d:26:43:d6:fd:5e:83:96:03:4b:f6:4f:08:bb: 1e:44:cd:55:73:b3:57:83:f3:05:f9:44:7e:e9:04:64:c2:a5: 39:1c:61:cc:38:1d:5c:92:68:0d:8b:a1:38:6e:3d:ec:21:c3: f3:c9:67:df:85:a0:6b:ea:3a:85:40:3c:dd:7b:15:58:d8:62: 9a:9e:f5:88:5b:54:6a:dd:e5:09:c3:79:bc:5a:1f:24:2f:59: f5:be:05:12:28:44:3a:03:7f:c4:c0:d1:20:3d:77:b6:22:94: c5:6e:56:a7:8b:db:f7:f6:ca:ea:ec:3c:ef:09:cf:16:f6:03: 42:7d:49:bd:22:e4:0b:6c:a5:18:fa:4d:40:70:c9:a0:81:99: 7c:99:43:2e:c2:7b:00:53:f3:33:41:b9:58:7a:c0:f3:48:0c: 15:db:46:41:d4:1d:35:66:23:59:a0:fa:03:75:eb:eb:79:de: 0e:ca:5b:8e:4f:5d:28:75:81:ca:e0:32:d2:e3:1e:dd:cc:15: db:d2:57:e3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUZAUK065/p0sfhvr/qNqlUkY+EsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFC RUM4OTBCQjAeFw0yNTExMDQwMzQ2NDFaFw0yNTExMDUwMzU5NDFaMDMxMTAvBgNV BAMTKDlDODc1QTZFRTIwMDJBRkRENDNBQUU4QjAzRDcxODA0MTRCQUVBMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp/cpnJX4wOa9yLazUJIairGu+ rcIIjqoZRjFcwE3M34yPGrnBB3ScU+jBQ3C2ts4jz60FY9eHowQQJsVejIiD2CEw 3IlbPgs3NjFOht8VorIUG1umaBodZenNQlOC/o+Ghb7RCYXWcvQyE5j65FYFfBFW LzUlnQQvN7AuVH7RzuBll2lbfeB60f8gZ7Na/kzsIPOWyMHdm8TeT0PJt0BoHrqR WG2MQx2QIpSbPyhjJqhn3aD5WON4s2ZREH436HVtHTn3ouNPgPJlYvIS/ejMhOkp /ktoTaufbilrIhbmlg3f7nqfkDp2RpfUMmbnmqgN8LHxmI/kktGgYSFcSDQ/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUnIdabuIAKv3UOq6LA9cYBBS66hQwHwYDVR0j BBgwFoAUH0yCgnaplmhlqytZUz0csb7IkLswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjU5YzEwNmMtNTNiNC00ZTkyLTlmYmEtZDYwODI3YjVi ZGI4LzAvMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFCRUM4OTBCQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xRjRDODI4Mjc2QTk5NjY4NjVBQjJCNTk1 MzNEMUNCMUJFQzg5MEJCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I1OWMxMDZjLTUzYjQtNGU5Mi05ZmJhLWQ2MDgyN2I1YmRiOC8wLzFGNEM4Mjgy NzZBOTk2Njg2NUFCMkI1OTUzM0QxQ0IxQkVDODkwQkIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAqPsWn XBo6WSULGq1JbYtnZdRwWH1VDuHFpAqf6SkS7DI1YKYMAIekM5zAJ0Q8erxlNO53 hkkcTn1VnSZD1v1eg5YDS/ZPCLseRM1Vc7NXg/MF+UR+6QRkwqU5HGHMOB1ckmgN i6E4bj3sIcPzyWffhaBr6jqFQDzdexVY2GKanvWIW1Rq3eUJw3m8Wh8kL1n1vgUS KEQ6A3/EwNEgPXe2IpTFblani9v39srq7DzvCc8W9gNCfUm9IuQLbKUY+k1AcMmg gZl8mUMuwnsAU/MzQblYesDzSAwV20ZB1B01ZiNZoPoDdevred4OyluOT10odYHK 4DLS4x7dzBXb0lfj -----END CERTIFICATE-----Generated at Tue Nov 4 10:55:27 2025 by rpki-client