$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft File: E205EBF065FC4929F1802662AE62D7F9762600E6.mft (raw, json) Hash identifier: 27Hblbm3iVdjBWkg2q6Cfp55lDsvc3g5zsBu+gzwMuM= Subject key identifier: 90:6F:08:79:89:F5:5D:A9:49:96:70:92:65:8B:D9:EA:81:46:19:AE Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6 Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6 Certificate serial: 74BCEE8DCC65AE157D93BD56072ABEC6C7F0C6D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft Manifest number: 014C Signing time: Tue 04 Nov 2025 14:07:06 +0000 Manifest this update: Tue 04 Nov 2025 14:02:06 +0000 Manifest next update: Wed 05 Nov 2025 17:53:06 +0000 Files and hashes: 1: E205EBF065FC4929F1802662AE62D7F9762600E6.crl (hash: XFGzOgQVozpXV6/LOf+TFw/8+0Eg+hlJt8Va/AhKFEU=) 2: 326130663a356663303a646561643a3a2f34382d3438203d3e203339363733.roa (hash: gO+lPcmBJ3b3FFlaD55CICvRL4LDSg56OGDANGd62H4=) 3: 39312e3230392e35302e302f32342d3234203d3e20323039333732.roa (hash: UjFw0WQQLm//XoiWgykA8VWz+amzh0YCKaelwGihPq4=) 4: 39312e3230392e34382e302f32342d3234203d3e2034363337.roa (hash: 4+D5jdmTDYB1GvCAU0z5GBGlSPW7Q/zpduO0wdWv8pU=) 5: 39312e3230392e34302e302f32342d3234203d3e203232343237.roa (hash: na/qAaTdIJ7PT1YXsvaqUnpzD/nkfVV0HbNT3JlIn2w=) 6: 326130663a356663303a666565643a3a2f34382d3438203d3e20323035303336.roa (hash: Qj8pflv8KszWoeUIqOpeKQUtZrsbyJDTmnxefpUjjlo=) 7: 39312e3230392e35382e302f32342d3234203d3e203634323637.roa (hash: vVPhAwxMoGbJX95BZTqrmZCi086rlFMNDRhMBQEniYs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:bc:ee:8d:cc:65:ae:15:7d:93:bd:56:07:2a:be:c6:c7:f0:c6:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6 Validity Not Before: Nov 4 14:02:06 2025 GMT Not After : Nov 5 17:53:06 2025 GMT Subject: CN=906F087989F55DA949967092658BD9EA814619AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2b:b2:78:27:6a:f3:c2:25:d5:cf:53:5c:5f: f2:74:1d:95:b5:9b:4f:97:65:f4:3e:e8:42:f2:e2: d8:49:f5:9e:b8:b0:63:b6:77:e2:79:d6:2b:91:23: 2d:a7:c8:c2:58:8d:ca:74:1c:c2:cf:d4:3f:b5:21: 80:9c:90:2e:3d:ee:0a:f5:ca:63:63:c6:20:42:30: e5:bb:5c:e7:cd:2e:81:17:92:f4:05:ea:ec:8d:f4: 2b:dc:c1:77:17:1b:63:7f:46:6d:d8:f1:83:8a:cb: 78:b0:15:f3:20:b6:1a:b5:8f:3c:2f:1a:9c:10:d8: 7f:4c:1e:c0:db:28:f4:42:47:2d:fc:5f:42:d8:7e: b2:3f:eb:ae:c1:66:40:1a:43:29:23:95:65:b1:d9: b0:d6:7a:06:cd:5f:31:66:72:9d:67:b5:c4:07:db: 10:c0:ad:3f:88:f2:15:91:66:f5:26:01:5e:85:b7: 71:be:cf:d8:5b:b2:c7:73:3d:bb:e6:12:00:0a:c2: 11:72:7d:65:85:1d:34:a1:6e:eb:11:b1:34:2a:9b: 5d:77:fe:61:4f:ee:37:5f:3e:51:18:a7:0c:1b:1b: d8:8c:00:a0:12:36:84:e2:93:4f:ae:17:bd:d7:00: cd:f5:b6:a3:23:f3:45:d1:46:4d:6a:42:c7:19:4d: 67:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:6F:08:79:89:F5:5D:A9:49:96:70:92:65:8B:D9:EA:81:46:19:AE X509v3 Authority Key Identifier: keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:48:b0:a5:09:c6:05:63:05:81:76:18:a1:16:f7:61:70:2e: ee:c2:6d:ec:d1:70:0c:3b:56:0c:8c:1d:34:63:72:de:0e:8a: 77:39:78:e4:4a:89:8d:18:63:0a:81:6a:f1:77:b2:a2:a9:e6: 42:07:73:96:f7:13:01:fa:52:4b:99:01:86:d7:9f:15:c9:f6: d3:ce:fa:45:51:82:4a:3d:60:43:26:95:1a:ff:2a:5a:93:4e: 28:47:9a:a7:4a:13:9c:bd:33:6f:d7:a3:f5:fc:73:02:35:59: c0:09:59:79:18:cd:e9:5c:2f:44:1d:be:6a:c2:83:d8:92:48: 41:e8:e1:b0:b9:53:75:35:b3:0d:e2:a0:44:f6:4b:5a:90:ee: 70:46:21:6f:4a:88:8c:b0:be:16:11:47:c7:07:48:e1:4b:9a: 37:e0:f1:e2:2b:9b:2f:bb:6a:ec:4f:5e:e6:ed:70:66:a3:36: be:98:69:3b:17:b0:ab:43:32:89:94:b7:79:bf:df:eb:70:43: b5:3b:75:97:ad:b7:50:f8:aa:e9:c7:42:58:e9:82:eb:d8:52: 30:89:34:51:12:c9:f1:ab:80:35:c1:5e:68:38:10:cd:d4:55: 8e:4f:26:06:e4:0e:33:c5:4f:78:8e:ea:9f:e1:c4:71:53:6f: c9:66:7d:3d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdLzujcxlrhV9k71WByq+xsfwxtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTIwNWViZjA2NWZjNDkyOWYxODAyNjYyYWU2MmQ3Zjk3 NjI2MDBlNjAeFw0yNTExMDQxNDAyMDZaFw0yNTExMDUxNzUzMDZaMDMxMTAvBgNV BAMTKDkwNkYwODc5ODlGNTVEQTk0OTk2NzA5MjY1OEJEOUVBODE0NjE5QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbK7J4J2rzwiXVz1NcX/J0HZW1 m0+XZfQ+6ELy4thJ9Z64sGO2d+J51iuRIy2nyMJYjcp0HMLP1D+1IYCckC497gr1 ymNjxiBCMOW7XOfNLoEXkvQF6uyN9CvcwXcXG2N/Rm3Y8YOKy3iwFfMgthq1jzwv GpwQ2H9MHsDbKPRCRy38X0LYfrI/667BZkAaQykjlWWx2bDWegbNXzFmcp1ntcQH 2xDArT+I8hWRZvUmAV6Ft3G+z9hbssdzPbvmEgAKwhFyfWWFHTShbusRsTQqm113 /mFP7jdfPlEYpwwbG9iMAKASNoTik0+uF73XAM31tqMj80XRRk1qQscZTWenAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUkG8IeYn1XalJlnCSZYvZ6oFGGa4wHwYDVR0j BBgwFoAU4gXr8GX8SSnxgCZirmLX+XYmAOYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYwYmUzZTEtODU0ZS00NjYyLTkyZTgtMDI4OTUwZmY1 N2ZlLzAvRTIwNUVCRjA2NUZDNDkyOUYxODAyNjYyQUU2MkQ3Rjk3NjI2MDBFNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRnWHI4R1g4U1NueGdDWmlybUxYLVhZ bUFPWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjBiZTNlMS04 NTRlLTQ2NjItOTJlOC0wMjg5NTBmZjU3ZmUvMC9FMjA1RUJGMDY1RkM0OTI5RjE4 MDI2NjJBRTYyRDdGOTc2MjYwMEU2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd0iwpQnGBWMFgXYYoRb3 YXAu7sJt7NFwDDtWDIwdNGNy3g6Kdzl45EqJjRhjCoFq8XeyoqnmQgdzlvcTAfpS S5kBhtefFcn20876RVGCSj1gQyaVGv8qWpNOKEeap0oTnL0zb9ej9fxzAjVZwAlZ eRjN6VwvRB2+asKD2JJIQejhsLlTdTWzDeKgRPZLWpDucEYhb0qIjLC+FhFHxwdI 4UuaN+Dx4iubL7tq7E9e5u1wZqM2vphpOxewq0MyiZS3eb/f63BDtTt1l623UPiq 6cdCWOmC69hSMIk0URLJ8auANcFeaDgQzdRVjk8mBuQOM8VPeI7qn+HEcVNvyWZ9 PQ== -----END CERTIFICATE-----Generated at Tue Nov 4 18:59:16 2025 by rpki-client