$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft File: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft (raw, json) Hash identifier: sdylymCZraWC/lVu3OAo6kn6nOoYHVyBVuatG0UsN1I= Subject key identifier: 56:90:29:40:1D:3D:56:D0:BA:E0:49:A6:CA:6B:32:94:4A:72:E7:A6 Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 3373B313AD57D3FB50FAB902358A8FD5A9D3BB50 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft Manifest number: 0164 Signing time: Wed 05 Nov 2025 07:51:15 +0000 Manifest this update: Wed 05 Nov 2025 07:46:15 +0000 Manifest next update: Thu 06 Nov 2025 22:25:15 +0000 Files and hashes: 1: 326130623a346530373a363030303a3a2f34302d3438203d3e20323134373031.roa (hash: mhaYla+UsHdOX7ijGa8kmFH/Ey3jwcszbuWBzNvxxRw=) 2: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl (hash: cPob5+4dmj7xMdVPKFL7uxhgpnqMu870L3eRE6TSVFo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:73:b3:13:ad:57:d3:fb:50:fa:b9:02:35:8a:8f:d5:a9:d3:bb:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: Nov 5 07:46:15 2025 GMT Not After : Nov 6 22:25:15 2025 GMT Subject: CN=569029401D3D56D0BAE049A6CA6B32944A72E7A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:27:11:20:bb:5a:8e:3b:f5:f1:97:fd:67:46: 0e:cf:da:c0:a2:7f:21:6f:13:1e:4b:e1:7c:d7:39: 3a:4b:af:55:f1:af:f4:cc:e0:b6:74:f0:c7:a2:dc: 4a:ba:20:c7:93:7c:6f:95:db:ac:d8:8a:ba:8d:ea: 73:0e:28:d5:7d:5b:c0:3d:46:36:39:03:71:37:89: 77:df:eb:45:0e:40:d1:6a:c8:cf:d8:37:52:07:77: 2c:b7:de:74:63:66:89:00:e9:71:fd:58:28:76:9c: 8b:09:3c:5b:c8:4b:99:dd:e5:fc:26:8c:8d:3e:d6: 69:74:b1:d0:0f:d8:33:9e:3d:66:39:7f:ca:fa:7a: 5c:5e:4b:50:f6:c2:87:09:03:f8:88:9b:90:a7:ae: 77:c4:29:25:2a:54:8a:f3:60:5c:c9:a9:d1:bd:4f: 5d:99:9c:7c:be:d8:fb:62:e4:61:01:bd:8f:03:bf: fa:d0:63:fd:dc:9d:10:fe:ca:34:fa:59:a0:cd:b8: da:c5:8d:6f:98:81:ba:c0:60:f3:63:af:42:98:24: 4b:18:b1:fa:bd:46:70:02:87:0b:8e:98:fd:1f:80: d3:4e:d2:d8:9f:d6:6f:60:53:ae:d0:38:d3:6d:a8: 0d:89:3b:9f:a8:a3:7c:08:84:37:84:2e:89:f0:72: d1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:90:29:40:1D:3D:56:D0:BA:E0:49:A6:CA:6B:32:94:4A:72:E7:A6 X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:f0:cf:c5:81:69:68:2e:62:34:8d:f3:4c:2b:5e:05:17:b9: 05:c3:6c:86:2b:ce:43:08:6c:86:dd:c5:0c:ed:c7:0c:73:ef: 56:44:30:fb:9e:f1:0b:67:98:55:d1:ec:5b:c4:1f:2e:1b:51: ab:e5:1b:3a:e7:a3:24:d0:f5:ee:12:83:af:d8:05:0d:e5:d5: 2d:d0:94:10:bf:62:b8:4a:3b:ca:bd:3d:30:a5:96:3b:b5:83: 13:1d:4e:c4:8c:37:b2:8e:a3:33:3e:fd:b1:16:34:c7:7d:d7: 5d:f4:f7:07:33:38:d8:82:30:28:09:eb:a9:ab:88:fc:18:07: 2d:bb:11:4f:5c:e4:6c:0f:ba:ac:0a:5a:49:99:32:e4:06:fb: ac:61:0c:0e:8f:4f:47:e2:29:b7:30:13:fc:91:76:7f:91:fe: 8c:54:17:27:b0:bc:b4:c1:d0:e2:0f:0f:6a:51:ef:24:75:a5: 3a:d5:e3:33:70:8a:ed:1d:46:30:3e:ee:1a:4a:23:e7:f2:1e: fb:06:f0:8e:05:6c:36:51:85:bd:56:f9:d7:95:1a:ea:8f:5d: b1:fa:fb:7b:75:7f:7a:6e:68:de:8d:06:3c:19:03:d4:ea:10: 99:53:4e:0d:0c:40:f1:7f:d2:86:3d:b7:eb:c7:29:e4:98:23: 70:5d:6f:b2 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUM3OzE61X0/tQ+rkCNYqP1anTu1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNTExMDUwNzQ2MTVaFw0yNTExMDYyMjI1MTVaMDMxMTAvBgNV BAMTKDU2OTAyOTQwMUQzRDU2RDBCQUUwNDlBNkNBNkIzMjk0NEE3MkU3QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcJxEgu1qOO/Xxl/1nRg7P2sCi fyFvEx5L4XzXOTpLr1Xxr/TM4LZ08Mei3Eq6IMeTfG+V26zYirqN6nMOKNV9W8A9 RjY5A3E3iXff60UOQNFqyM/YN1IHdyy33nRjZokA6XH9WCh2nIsJPFvIS5nd5fwm jI0+1ml0sdAP2DOePWY5f8r6elxeS1D2wocJA/iIm5CnrnfEKSUqVIrzYFzJqdG9 T12ZnHy+2Pti5GEBvY8Dv/rQY/3cnRD+yjT6WaDNuNrFjW+YgbrAYPNjr0KYJEsY sfq9RnAChwuOmP0fgNNO0tif1m9gU67QONNtqA2JO5+oo3wIhDeELonwctHnAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUVpApQB09VtC64EmmymsylEpy56YwHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMy9EREMyNUFEMkYxQTQ4OTI0Nzcx M0VFMzlCMUMwM0VBMkZEREE0MTE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxfDPxYFpaC5iNI3zTCte BRe5BcNshivOQwhsht3FDO3HDHPvVkQw+57xC2eYVdHsW8QfLhtRq+UbOuejJND1 7hKDr9gFDeXVLdCUEL9iuEo7yr09MKWWO7WDEx1OxIw3so6jMz79sRY0x33XXfT3 BzM42IIwKAnrqauI/BgHLbsRT1zkbA+6rApaSZky5Ab7rGEMDo9PR+IptzAT/JF2 f5H+jFQXJ7C8tMHQ4g8PalHvJHWlOtXjM3CK7R1GMD7uGkoj5/Ie+wbwjgVsNlGF vVb515Ua6o9dsfr7e3V/em5o3o0GPBkD1OoQmVNODQxA8X/Shj2368cp5JgjcF1v sg== -----END CERTIFICATE-----Generated at Wed Nov 5 14:56:31 2025 by rpki-client