$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft File: E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft (raw, json) Hash identifier: +q+feLAgY3bPlL97NJCn9q61CcyTkxr8ZEl3m2hPfp0= Subject key identifier: 94:9D:0B:60:21:49:66:79:E9:23:94:01:C9:47:65:24:CA:93:64:8A Authority key identifier: E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C Certificate issuer: /CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C Certificate serial: 3FC5233494A28C354559ACCBC1685E0BF6FFB581 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft Manifest number: 87 Signing time: Tue 04 Nov 2025 13:17:32 +0000 Manifest this update: Tue 04 Nov 2025 13:12:32 +0000 Manifest next update: Wed 05 Nov 2025 14:42:32 +0000 Files and hashes: 1: 326131343a373538313a333936323a3a2f34382d3634203d3e20313939373633.roa (hash: oCjl7TQd0xhHJ9B8MSi48PHfMmMZri62JgNd0y5lz+I=) 2: E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl (hash: Kld5iJg9iRdgGVYJ8NbshepyfvKq4ldWFwpbnYc5a0c=) 3: 326131343a373538313a333937373a3a2f34382d3634203d3e20313939373633.roa (hash: 6W8xvuJxWbwP3DdLZ6e8Sa+pGsBO2lzU710UJC28MHg=) 4: 326131343a373538313a333936363a3a2f34382d3634203d3e20313939373633.roa (hash: +BDNAKrmKMibTT2xQwMz+K+qOmE3P6UuU3BvjMVQ0iI=) 5: 326131343a373538313a333966663a3a2f34382d3634203d3e20313939373633.roa (hash: aCq/jKA1GGay4DL6ZU284taMNq3/9u17cmIYZEHZP9Y=) 6: 326131343a373538313a333936313a3a2f34382d3634203d3e20313939373633.roa (hash: V25LiWzxXAuXeQVJTbroIsiNYHCj/akr9IIXebvCE7Q=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 14:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:c5:23:34:94:a2:8c:35:45:59:ac:cb:c1:68:5e:0b:f6:ff:b5:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C Validity Not Before: Nov 4 13:12:32 2025 GMT Not After : Nov 5 14:42:32 2025 GMT Subject: CN=949D0B6021496679E9239401C9476524CA93648A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:19:90:90:c8:5c:c6:1f:7d:1e:65:b2:b6:64: 8a:ee:4c:d5:18:25:5a:5b:37:68:a8:b1:99:18:23: 43:59:f7:3e:f2:bb:20:78:c9:e0:e5:06:19:52:f8: 80:90:c6:dd:d5:d3:c1:14:14:67:13:c4:a8:c8:2c: 75:54:0d:88:d3:06:8e:9b:78:db:40:20:d2:38:32: 9d:6b:97:2f:48:5f:3a:d5:86:b3:bb:60:f4:35:31: 76:00:6b:cc:f7:0e:66:35:36:5e:91:58:04:d0:c1: ce:49:70:60:24:d7:cc:6f:86:c2:a0:56:99:7f:59: 3e:41:d2:a5:50:cc:41:85:b3:75:5d:e8:f4:a1:55: 28:a0:69:3e:3a:ff:f8:ff:90:b2:44:bd:88:e7:14: 2f:c4:77:01:21:a7:92:0d:26:1f:73:73:fc:70:ed: e7:7d:82:95:99:68:b4:97:d0:71:f0:44:38:ac:4e: 75:85:c4:ff:1e:e7:d6:2f:08:72:e2:1f:9d:57:50: e3:e6:2f:c0:74:11:91:06:b6:37:7f:ee:58:5c:0a: fd:a6:7d:40:4b:7c:f1:b4:e7:31:da:8f:82:b9:3e: fd:08:85:7f:91:53:3e:5f:95:b7:00:b7:6f:58:c6: 8b:6d:40:f0:9b:9e:db:10:1a:ad:f5:3b:54:fe:7b: 07:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:9D:0B:60:21:49:66:79:E9:23:94:01:C9:47:65:24:CA:93:64:8A X509v3 Authority Key Identifier: keyid:E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:53:81:f6:ee:07:c5:81:d6:22:e2:97:e9:85:86:b7:40:86: ae:33:e4:8b:48:92:70:68:f3:a8:71:c5:b2:33:9b:62:fb:d6: b4:b3:6c:d4:59:32:42:a1:20:af:90:1c:c6:e0:3b:20:08:e1: 58:70:26:13:7c:a3:2e:cf:4a:a7:f3:ea:f9:0c:c5:73:a4:a1: 08:f2:87:c7:59:2a:43:8c:54:bd:37:62:14:8d:a0:d7:da:d4: 8a:73:f3:27:3a:90:30:46:09:55:d1:10:f4:10:4a:f0:88:f7: cc:df:90:a8:b4:4f:d3:b9:86:ec:6e:97:cb:37:3f:ec:72:81: 24:04:02:f5:d6:0e:58:69:c0:25:0f:49:40:14:b7:2c:c3:86: 56:eb:c7:43:b4:fa:99:80:2f:d4:12:8d:a8:63:f9:9f:62:6a: 5f:c0:af:bf:6e:15:02:34:6e:33:7e:5e:3e:d8:6b:82:e6:f3: 0f:fc:d1:0f:82:fa:4e:ac:fb:90:89:f5:13:0a:c7:98:bd:50: d8:39:08:e7:97:21:8f:ca:99:9c:71:09:f2:b0:85:8f:3c:de: c5:fb:f6:9e:35:d3:1a:d1:82:e7:c7:51:bc:66:90:82:7f:8a: 7c:88:c0:c3:e5:4d:c1:a2:00:ce:a1:be:3c:24:1e:d8:b3:c8: df:a0:ee:f3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUP8UjNJSijDVFWazLwWheC/b/tYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5RjkxNUQ4NkJCOUYxM0QwRjIyOUNBNzhDRDZEOUYz RUFCQ0Y3QzAeFw0yNTExMDQxMzEyMzJaFw0yNTExMDUxNDQyMzJaMDMxMTAvBgNV BAMTKDk0OUQwQjYwMjE0OTY2NzlFOTIzOTQwMUM5NDc2NTI0Q0E5MzY0OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBGZCQyFzGH30eZbK2ZIruTNUY JVpbN2iosZkYI0NZ9z7yuyB4yeDlBhlS+ICQxt3V08EUFGcTxKjILHVUDYjTBo6b eNtAINI4Mp1rly9IXzrVhrO7YPQ1MXYAa8z3DmY1Nl6RWATQwc5JcGAk18xvhsKg Vpl/WT5B0qVQzEGFs3Vd6PShVSigaT46//j/kLJEvYjnFC/EdwEhp5INJh9zc/xw 7ed9gpWZaLSX0HHwRDisTnWFxP8e59YvCHLiH51XUOPmL8B0EZEGtjd/7lhcCv2m fUBLfPG05zHaj4K5Pv0IhX+RUz5flbcAt29YxottQPCbntsQGq31O1T+ewdXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUlJ0LYCFJZnnpI5QByUdlJMqTZIowHwYDVR0j BBgwFoAU6J+RXYa7nxPQ8inKeM1tnz6rz3wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzU4MzZlNjAtNmE5Mi00N2VmLTliOWItOTJhODRkNmQz NWJhLzEvRTg5RjkxNUQ4NkJCOUYxM0QwRjIyOUNBNzhDRDZEOUYzRUFCQ0Y3Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9FODlGOTE1RDg2QkI5RjEzRDBGMjI5Q0E3 OENENkQ5RjNFQUJDRjdDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M1ODM2ZTYwLTZhOTItNDdlZi05YjliLTkyYTg0ZDZkMzViYS8xL0U4OUY5MTVE ODZCQjlGMTNEMEYyMjlDQTc4Q0Q2RDlGM0VBQkNGN0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB5U4H2 7gfFgdYi4pfphYa3QIauM+SLSJJwaPOoccWyM5ti+9a0s2zUWTJCoSCvkBzG4Dsg COFYcCYTfKMuz0qn8+r5DMVzpKEI8ofHWSpDjFS9N2IUjaDX2tSKc/MnOpAwRglV 0RD0EErwiPfM35CotE/TuYbsbpfLNz/scoEkBAL11g5YacAlD0lAFLcsw4ZW68dD tPqZgC/UEo2oY/mfYmpfwK+/bhUCNG4zfl4+2GuC5vMP/NEPgvpOrPuQifUTCseY vVDYOQjnlyGPypmccQnysIWPPN7F+/aeNdMa0YLnx1G8ZpCCf4p8iMDD5U3BogDO ob48JB7Ys8jfoO7z -----END CERTIFICATE-----Generated at Tue Nov 4 22:37:01 2025 by rpki-client