$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft File: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft (raw, json) Hash identifier: wcA+RtAConjrqU9hf/UTeDpe4bDBeMCRhpc5oBSvJkw= Subject key identifier: 3B:E4:FD:72:4D:BD:6B:BF:2A:57:27:FC:2D:45:0B:D8:41:A4:AF:F0 Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 678CA62EEB787235D3073DB246411C5E6A2D2E4C Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft Manifest number: 0163 Signing time: Tue 04 Nov 2025 19:11:15 +0000 Manifest this update: Tue 04 Nov 2025 19:06:15 +0000 Manifest next update: Thu 06 Nov 2025 07:50:15 +0000 Files and hashes: 1: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl (hash: lzhitoYk+25gr2nRLtMVqby0JC0IGQzpXqMNOUnth4c=) 2: 326130623a346530373a363030303a3a2f34302d3438203d3e20323134373031.roa (hash: mhaYla+UsHdOX7ijGa8kmFH/Ey3jwcszbuWBzNvxxRw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 19:14:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:8c:a6:2e:eb:78:72:35:d3:07:3d:b2:46:41:1c:5e:6a:2d:2e:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: Nov 4 19:06:15 2025 GMT Not After : Nov 6 07:50:15 2025 GMT Subject: CN=3BE4FD724DBD6BBF2A5727FC2D450BD841A4AFF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:23:0a:fa:02:7f:b5:8d:69:fb:66:14:55:fa: 00:74:05:6f:9d:7e:40:b2:cf:af:5a:20:97:72:c0: e9:b1:c0:f6:53:bd:34:af:c7:c5:8c:41:1a:d8:e7: 86:84:c1:20:07:29:e3:5c:4f:69:d5:b4:0d:03:81: 48:6c:7c:59:b1:3a:90:42:5e:2d:65:b4:b2:68:5c: 69:1a:3d:88:a0:89:81:f0:0f:2e:98:1e:64:95:58: 81:27:55:53:e0:4f:a5:51:94:7d:2a:0c:0a:54:7a: ee:26:07:20:69:3a:61:10:fe:66:45:bb:62:b9:f1: 40:ba:27:04:55:ba:a7:86:12:29:ed:43:b2:d6:ff: 3f:c8:90:3f:bc:f2:91:67:d1:71:0a:10:04:50:cc: 69:0e:bd:05:03:e0:a0:bf:17:ab:b4:a0:84:d9:51: fd:d0:5b:be:63:71:db:2e:a4:6c:8d:37:1d:44:db: f9:40:4c:2d:af:dd:b0:58:fc:60:84:4d:b2:01:b1: b5:8e:37:1a:81:a4:d8:38:5a:97:79:84:9d:1a:61: 02:5d:28:c7:ef:1e:3e:45:a2:85:73:e2:f6:29:78: 88:c0:d4:73:91:67:4b:07:24:68:2f:d9:5e:ed:b0: ce:8d:18:c2:f2:8a:fa:44:ef:19:38:4c:26:e0:25: 10:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E4:FD:72:4D:BD:6B:BF:2A:57:27:FC:2D:45:0B:D8:41:A4:AF:F0 X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:fe:35:3a:8e:c0:70:cd:1a:14:60:c7:f1:68:95:66:55:aa: db:36:3b:5f:86:e5:4c:71:1f:ec:1c:34:12:fd:51:b2:54:b2: 04:dc:53:70:26:e3:10:db:23:a9:67:96:f6:c4:1d:fe:5c:fc: a7:bb:f8:3e:55:14:75:17:5f:77:a9:3b:90:d1:36:4d:8b:1c: 11:e1:8d:ac:9e:60:17:1d:8f:e5:f7:40:b6:cc:48:f1:d9:5e: 91:be:f1:8f:29:21:47:2d:43:35:e3:d3:0d:6d:0f:73:f8:f2: f0:86:0a:96:83:f3:0a:7a:dd:42:2a:89:41:dc:4c:23:ed:ee: 34:bc:b6:22:30:8b:44:14:ea:0e:40:06:cc:d4:34:65:ce:b6: 62:45:50:b2:20:32:f2:0e:cf:25:67:ae:4f:77:2f:e0:ce:2f: e2:e2:05:76:d4:47:eb:45:c9:ea:f9:56:92:62:b3:fa:f3:45: 2b:c0:85:88:5e:a2:79:b9:f5:32:5b:37:c6:bb:8c:8b:b2:9e: 32:c1:5c:4c:b2:f2:27:f4:53:0f:a9:82:1c:a7:f9:6c:f2:8a: 8f:4c:5d:a7:1f:b1:8a:db:cb:7a:8c:bd:dd:62:34:d5:b2:b0: 8d:7c:d9:ce:6b:ca:26:8f:5b:0b:69:77:00:eb:a7:19:7f:b0: 47:02:b2:24 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUZ4ymLut4cjXTBz2yRkEcXmotLkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNTExMDQxOTA2MTVaFw0yNTExMDYwNzUwMTVaMDMxMTAvBgNV BAMTKDNCRTRGRDcyNERCRDZCQkYyQTU3MjdGQzJENDUwQkQ4NDFBNEFGRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXIwr6An+1jWn7ZhRV+gB0BW+d fkCyz69aIJdywOmxwPZTvTSvx8WMQRrY54aEwSAHKeNcT2nVtA0DgUhsfFmxOpBC Xi1ltLJoXGkaPYigiYHwDy6YHmSVWIEnVVPgT6VRlH0qDApUeu4mByBpOmEQ/mZF u2K58UC6JwRVuqeGEintQ7LW/z/IkD+88pFn0XEKEARQzGkOvQUD4KC/F6u0oITZ Uf3QW75jcdsupGyNNx1E2/lATC2v3bBY/GCETbIBsbWONxqBpNg4Wpd5hJ0aYQJd KMfvHj5FooVz4vYpeIjA1HORZ0sHJGgv2V7tsM6NGMLyivpE7xk4TCbgJRDRAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUO+T9ck29a78qVyf8LUUL2EGkr/AwHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMy9EREMyNUFEMkYxQTQ4OTI0Nzcx M0VFMzlCMUMwM0VBMkZEREE0MTE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIv41Oo7AcM0aFGDH8WiV ZlWq2zY7X4blTHEf7Bw0Ev1RslSyBNxTcCbjENsjqWeW9sQd/lz8p7v4PlUUdRdf d6k7kNE2TYscEeGNrJ5gFx2P5fdAtsxI8dlekb7xjykhRy1DNePTDW0Pc/jy8IYK loPzCnrdQiqJQdxMI+3uNLy2IjCLRBTqDkAGzNQ0Zc62YkVQsiAy8g7PJWeuT3cv 4M4v4uIFdtRH60XJ6vlWkmKz+vNFK8CFiF6iebn1Mls3xruMi7KeMsFcTLLyJ/RT D6mCHKf5bPKKj0xdpx+xitvLeoy93WI01bKwjXzZzmvKJo9bC2l3AOunGX+wRwKy JA== -----END CERTIFICATE-----Generated at Wed Nov 5 07:32:20 2025 by rpki-client