$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft File: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft (raw, json) Hash identifier: YnxctKbfNjXbythe/lNAwtzskAOVyHrbmUsNTdrPjso= Subject key identifier: BF:72:14:0D:4C:65:8D:EA:F4:83:E3:7B:79:71:9D:32:63:78:4E:66 Authority key identifier: 40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 Certificate issuer: /CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Certificate serial: 5169624EA040E9DB62E238868E65D9553B92A87F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft Manifest number: 01CB Signing time: Tue 04 Nov 2025 17:06:25 +0000 Manifest this update: Tue 04 Nov 2025 17:01:25 +0000 Manifest next update: Wed 05 Nov 2025 17:38:25 +0000 Files and hashes: 1: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl (hash: vaFuwmAZJ2D05oP8h8blOPjPUA/xOpYfruxthNnIzhY=) 2: 326131343a373538313a396632303a3a2f34342d3434203d3e20323135323838.roa (hash: Si3nvIvR6vlJSP9N899TEpLNTv8CH8Xf9C307NCghTQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 17:38:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:69:62:4e:a0:40:e9:db:62:e2:38:86:8e:65:d9:55:3b:92:a8:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Validity Not Before: Nov 4 17:01:25 2025 GMT Not After : Nov 5 17:38:25 2025 GMT Subject: CN=BF72140D4C658DEAF483E37B79719D3263784E66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:23:76:51:89:f4:3f:88:0a:91:d3:15:43:2b: 0c:07:97:5d:44:49:99:57:06:7b:94:7c:ef:19:6e: f0:5b:99:4e:58:90:e7:18:de:b5:77:12:a7:6e:3a: 11:72:8f:27:2c:3e:a2:2b:ec:18:10:b2:17:22:3c: 06:29:74:5c:af:4f:a9:7e:a9:fe:93:e8:1e:da:5f: fe:f8:00:e6:f6:b6:52:d9:7e:8a:e5:bc:53:4b:4c: 85:64:25:44:34:bc:c6:cb:e7:9a:d0:b4:0a:ea:81: 39:55:73:a4:03:d5:01:ae:0f:0c:88:9e:f2:a2:cb: 6f:f1:df:41:c7:04:50:c7:19:ac:16:84:42:ef:0a: 3d:b7:05:8b:47:0a:df:07:2e:9e:72:94:72:72:be: ed:a8:7e:ee:90:9a:41:3b:cf:20:4e:66:04:8b:14: d6:66:a4:26:97:bd:9f:99:3b:7b:40:e3:3d:f7:b8: 89:be:1b:5b:f1:d1:03:20:49:f5:ff:50:40:46:c7: dd:32:80:52:ea:fa:f2:45:41:b1:0d:21:3a:ee:a6: 0f:f4:0c:bf:00:e1:31:16:39:14:9f:88:f3:9d:98: 74:0d:bb:a4:a1:9f:87:fb:85:f9:03:40:56:83:7b: d1:54:e2:52:7e:a5:3d:81:cc:2e:37:b2:4f:c8:1b: bb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:72:14:0D:4C:65:8D:EA:F4:83:E3:7B:79:71:9D:32:63:78:4E:66 X509v3 Authority Key Identifier: keyid:40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:27:ce:6f:05:19:f4:56:78:5c:70:19:57:13:2d:51:88:2a: d9:3a:b8:70:7a:9e:25:67:95:52:b3:7c:7c:1a:b8:7e:6f:ef: 7b:7c:42:d4:ee:5e:9d:9c:2e:1f:8e:af:50:2b:10:b3:13:01: c4:e1:54:77:76:61:90:95:7b:5c:66:c4:11:10:14:fe:73:df: b0:8e:da:0a:7f:47:2a:42:03:fa:32:24:60:2b:19:90:2d:af: 1f:fe:e8:e9:bd:1c:ee:e7:1d:a5:6e:f3:6f:36:ae:33:0a:e3: d0:33:b9:b7:17:0f:26:00:a0:6f:3c:18:a8:97:cb:5b:02:43: a2:43:58:e5:66:6a:3e:89:1b:15:51:6e:c7:69:f7:ae:8f:68: bb:e3:88:33:51:70:0b:09:7a:02:7a:d3:30:e8:fd:db:07:7e: e7:44:8f:56:c9:17:b9:13:33:61:d5:66:5e:da:11:33:57:1b: 59:ab:17:3e:ca:4d:22:c9:b5:e5:de:f1:62:79:f2:07:bb:bc: 9a:77:1e:f3:ca:3f:9b:39:eb:54:40:97:0a:66:ac:38:56:12: d3:30:eb:81:66:67:c2:e4:14:8f:8a:70:19:ba:6a:7b:e7:3d: 0c:fa:bd:07:56:5c:06:7f:bc:fa:37:71:6e:c5:35:48:8f:a5: 91:3d:f4:75 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUUWliTqBA6dti4jiGjmXZVTuSqH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBG RTIyMkJENjAeFw0yNTExMDQxNzAxMjVaFw0yNTExMDUxNzM4MjVaMDMxMTAvBgNV BAMTKEJGNzIxNDBENEM2NThERUFGNDgzRTM3Qjc5NzE5RDMyNjM3ODRFNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkI3ZRifQ/iAqR0xVDKwwHl11E SZlXBnuUfO8ZbvBbmU5YkOcY3rV3EqduOhFyjycsPqIr7BgQshciPAYpdFyvT6l+ qf6T6B7aX/74AOb2tlLZforlvFNLTIVkJUQ0vMbL55rQtArqgTlVc6QD1QGuDwyI nvKiy2/x30HHBFDHGawWhELvCj23BYtHCt8HLp5ylHJyvu2ofu6QmkE7zyBOZgSL FNZmpCaXvZ+ZO3tA4z33uIm+G1vx0QMgSfX/UEBGx90ygFLq+vJFQbENITrupg/0 DL8A4TEWORSfiPOdmHQNu6Shn4f7hfkDQFaDe9FU4lJ+pT2BzC43sk/IG7uhAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUv3IUDUxljer0g+N7eXGdMmN4TmYwHwYDVR0j BBgwFoAUQFChe64cXzdj1Fo43P6s4P4iK9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzg2YjY1YjEtNDVlOS00ZmIyLWFkYzUtODdiYTcxMWUy MWI3LzEvNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBGRTIyMkJENi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC80MDUwQTE3QkFFMUM1RjM3NjNENDVBMzhE Q0ZFQUNFMEZFMjIyQkQ2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M4NmI2NWIxLTQ1ZTktNGZiMi1hZGM1LTg3YmE3MTFlMjFiNy8xLzQwNTBBMTdC QUUxQzVGMzc2M0Q0NUEzOERDRkVBQ0UwRkUyMjJCRDYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAcJ85v BRn0VnhccBlXEy1RiCrZOrhwep4lZ5VSs3x8Grh+b+97fELU7l6dnC4fjq9QKxCz EwHE4VR3dmGQlXtcZsQREBT+c9+wjtoKf0cqQgP6MiRgKxmQLa8f/ujpvRzu5x2l bvNvNq4zCuPQM7m3Fw8mAKBvPBiol8tbAkOiQ1jlZmo+iRsVUW7Hafeuj2i744gz UXALCXoCetMw6P3bB37nRI9WyRe5EzNh1WZe2hEzVxtZqxc+yk0iybXl3vFiefIH u7yadx7zyj+bOetUQJcKZqw4VhLTMOuBZmfC5BSPinAZump75z0M+r0HVlwGf7z6 N3FuxTVIj6WRPfR1 -----END CERTIFICATE-----Generated at Tue Nov 4 22:17:00 2025 by rpki-client