$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft File: 2E2674263AECD572673F87614919CA492C79FAEA.mft (raw, json) Hash identifier: 5MdqlFrUPHbNX8kkPCbnTBsv8vCsVbbJcB5aK8Tk5pg= Subject key identifier: 43:FB:A5:01:F2:2A:C8:F3:D4:5D:39:5A:37:5A:B4:A9:EB:7C:53:CF Authority key identifier: 2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA Certificate issuer: /CN=2e2674263aecd572673f87614919ca492c79faea Certificate serial: 15FD139B02962FDA7AC8DFB85ED46D6F58A4C2AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft Manifest number: 017C Signing time: Tue 04 Nov 2025 23:32:22 +0000 Manifest this update: Tue 04 Nov 2025 23:27:22 +0000 Manifest next update: Wed 05 Nov 2025 23:47:22 +0000 Files and hashes: 1: 34352e36362e36302e302f32342d3234203d3e203634323637.roa (hash: ZF32PAG53xWynbk01utLLBmDRxOU851zkR0rreW86uY=) 2: 34352e36362e36302e302f32342d3234203d3e20333937363330.roa (hash: m0lx7gp/PL+dNLZxtVb3q5bMr/J2JBCQr1yWWiLZaNg=) 3: 34352e36362e36322e302f32342d3234203d3e20323131323237.roa (hash: imRIoujslgfIw1o5CZvn1r7w9Uct08AIqiMVjfiL8o4=) 4: 34352e36362e36332e302f32342d3234203d3e20323134343332.roa (hash: bZNP+wA40wAyACtbN5qUmpIVm/KoebsR0HiX5BeNfUM=) 5: 34352e36362e36312e302f32342d3234203d3e20323733323432.roa (hash: tU7tyCca1tIOx1hnSKjuKCDiTN546CQQQvHB6q/i7qk=) 6: 34352e36362e36302e302f32342d3234203d3e203534323532.roa (hash: 07DX+W8TeroyGa5hcwYk2V3rpVrx11S+EMaM/klvGiM=) 7: 2E2674263AECD572673F87614919CA492C79FAEA.crl (hash: qNWotjS4JSwiZ/9bAuvIfMym9du0wou984wWlDfq5uQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 23:47:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:fd:13:9b:02:96:2f:da:7a:c8:df:b8:5e:d4:6d:6f:58:a4:c2:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e2674263aecd572673f87614919ca492c79faea Validity Not Before: Nov 4 23:27:22 2025 GMT Not After : Nov 5 23:47:22 2025 GMT Subject: CN=43FBA501F22AC8F3D45D395A375AB4A9EB7C53CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fd:51:96:e5:fb:e9:c5:99:e7:02:82:97:c8: fd:f5:bc:fb:05:36:df:fe:ac:f0:99:e3:e6:42:e5: 4e:1e:33:cb:b9:1a:fc:f1:62:2f:0c:db:3a:1c:f5: 77:da:80:b2:d2:de:af:58:f6:2b:c9:a6:b4:98:18: c3:da:ed:ab:93:79:bf:8b:71:a6:c1:75:f4:c9:e3: a2:cb:fc:b6:53:65:9e:01:d7:ab:ea:5d:3f:0e:e4: 48:ed:70:e8:b2:cf:30:89:fc:7c:fb:c5:20:0d:4e: 61:dc:39:2b:49:69:70:4c:57:2b:7a:1d:dd:0e:7c: 66:88:78:43:2c:f4:6c:24:9a:9e:3e:a7:9c:85:c1: 54:72:eb:6c:3c:43:53:df:2b:fb:86:f3:e1:07:a9: e3:14:4f:42:e6:4f:a6:be:09:63:e3:23:a1:0f:60: 9a:83:04:64:96:1d:a5:67:d8:8e:37:31:57:4b:34: fc:86:e3:af:3d:4f:5b:6b:e0:4e:2f:b4:80:d3:d0: b9:52:7e:05:53:30:a2:e1:75:83:a6:96:f4:ea:0b: 67:92:95:bf:76:12:84:45:16:3f:86:41:fc:d7:63: ec:13:cd:77:07:32:40:76:3b:e2:33:85:21:52:17: cf:c3:c2:f8:ce:35:d3:ef:ca:ba:a7:a8:db:b2:24: e3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FB:A5:01:F2:2A:C8:F3:D4:5D:39:5A:37:5A:B4:A9:EB:7C:53:CF X509v3 Authority Key Identifier: keyid:2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:46:31:f2:b6:35:fc:c2:be:07:3b:3a:f0:1c:ef:d4:46:98: c1:1b:5b:30:af:a6:5d:d8:8b:43:93:1a:08:07:64:f7:23:5c: 4e:36:3c:bf:d0:3d:ea:b4:29:23:7c:45:f1:bc:f4:36:58:10: d8:08:0d:ad:b0:9d:41:1c:86:a9:00:e4:d2:5b:52:cb:cf:ce: 63:f2:a9:c0:01:9f:8d:06:ca:fe:43:44:28:2d:c8:33:ba:69: 8d:6b:15:43:f3:3c:a1:50:54:b0:17:60:98:27:10:3a:03:03: f7:22:e8:96:6d:e8:cf:67:81:26:6e:00:c9:50:29:d8:d4:6f: d4:d3:a2:25:fd:53:b6:83:24:bc:25:02:21:2e:c3:8b:7d:86: c3:eb:2d:74:57:4f:64:8b:c3:92:58:01:a3:e3:76:28:6a:ba: dd:98:3c:47:ca:f8:ad:23:33:36:fc:2b:72:94:06:3d:7f:79: 3a:7a:06:a8:84:d8:76:36:3b:7e:c4:ec:b6:b8:76:23:ba:f1: 0b:4d:49:d6:1f:9e:fc:80:9b:c4:60:e5:28:7e:b6:a0:ca:04: 85:39:f8:f4:f8:fa:87:6c:84:cd:fd:46:ca:2b:b5:6a:2d:c2: 4e:b1:8d:53:f7:d4:73:1b:0e:de:54:fc:7f:f9:c8:19:cc:0d: d6:88:be:61 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFf0TmwKWL9p6yN+4XtRtb1ikwq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMmUyNjc0MjYzYWVjZDU3MjY3M2Y4NzYxNDkxOWNhNDky Yzc5ZmFlYTAeFw0yNTExMDQyMzI3MjJaFw0yNTExMDUyMzQ3MjJaMDMxMTAvBgNV BAMTKDQzRkJBNTAxRjIyQUM4RjNENDVEMzk1QTM3NUFCNEE5RUI3QzUzQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS/VGW5fvpxZnnAoKXyP31vPsF Nt/+rPCZ4+ZC5U4eM8u5GvzxYi8M2zoc9XfagLLS3q9Y9ivJprSYGMPa7auTeb+L cabBdfTJ46LL/LZTZZ4B16vqXT8O5EjtcOiyzzCJ/Hz7xSANTmHcOStJaXBMVyt6 Hd0OfGaIeEMs9Gwkmp4+p5yFwVRy62w8Q1PfK/uG8+EHqeMUT0LmT6a+CWPjI6EP YJqDBGSWHaVn2I43MVdLNPyG4689T1tr4E4vtIDT0LlSfgVTMKLhdYOmlvTqC2eS lb92EoRFFj+GQfzXY+wTzXcHMkB2O+IzhSFSF8/DwvjONdPvyrqnqNuyJOPHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUQ/ulAfIqyPPUXTlaN1q0qet8U88wHwYDVR0j BBgwFoAULiZ0Jjrs1XJnP4dhSRnKSSx5+uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmQ3YzIzMWUtYTMzYy00NTU1LWI0MmUtZDAyMDkzODQ5 Mjk5LzAvMkUyNjc0MjYzQUVDRDU3MjY3M0Y4NzYxNDkxOUNBNDkyQzc5RkFFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0xpWjBKanJzMVhKblA0ZGhTUm5LU1N4 NS11by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZDdjMjMxZS1h MzNjLTQ1NTUtYjQyZS1kMDIwOTM4NDkyOTkvMC8yRTI2NzQyNjNBRUNENTcyNjcz Rjg3NjE0OTE5Q0E0OTJDNzlGQUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkYx8rY1/MK+Bzs68Bzv 1EaYwRtbMK+mXdiLQ5MaCAdk9yNcTjY8v9A96rQpI3xF8bz0NlgQ2AgNrbCdQRyG qQDk0ltSy8/OY/KpwAGfjQbK/kNEKC3IM7ppjWsVQ/M8oVBUsBdgmCcQOgMD9yLo lm3oz2eBJm4AyVAp2NRv1NOiJf1TtoMkvCUCIS7Di32Gw+stdFdPZIvDklgBo+N2 KGq63Zg8R8r4rSMzNvwrcpQGPX95OnoGqITYdjY7fsTstrh2I7rxC01J1h+e/ICb xGDlKH62oMoEhTn49Pj6h2yEzf1Gyiu1ai3CTrGNU/fUcxsO3lT8f/nIGcwN1oi+ YQ== -----END CERTIFICATE-----Generated at Wed Nov 5 11:42:48 2025 by rpki-client