$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: f7GdVxN6rN53CgjXcAuSZBsJ4qZmPrDU/fqTAmXXWFc= Subject key identifier: 5C:8B:59:DE:42:B0:F5:8E:D9:1B:35:29:9B:A1:6A:C0:31:69:9A:D9 Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 1FA7FE11E44B7EF17D538E9B5EBE3E70FAF91FBA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 02EA Signing time: Tue 04 Nov 2025 17:15:56 +0000 Manifest this update: Tue 04 Nov 2025 17:10:56 +0000 Manifest next update: Wed 05 Nov 2025 19:28:56 +0000 Files and hashes: 1: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: 7RQ0gXCWkNwXJyLVMAjMT4ifOZKJ140AG/jnIia+kz4=) 2: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=) 3: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: Smz/ItxHUl4EAWKDQe2npBWqFfoflxUYt/sYMqGu1cA=) 4: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: Tk4tJu5bvTD5dR9NoM2pYvWxSXCc2/x84lQAlZZqzIs=) 5: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=) 6: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: polxJUQuuGvo82QFQvRtgLcGzpMrITqZaH9JMW5PByU=) 7: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=) 8: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: LIVxcxtvoeze2S46mPqGSXeLOCk0JK2W2QKOiQjUdZQ=) 9: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: gq6me54MBqnqosS7iLksDmqAJs8yyfHwMXcZfgP1ijQ=) 10: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: M4zqLtdUHSAbU4GatESAUlsOQgWU2zpPTfy3/5JmOsg=) 11: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: F6VJOi3vW8ih7gU8rCzD7A7gIu39IHtVGsLlId1ILkM=) 12: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=) 13: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 6RxmKyitzJl4tEe1yv4vU5lxANHGsLOEl2k3HSP2ddo=) 14: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=) 15: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=) 16: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: ZhIUpj5tVPDcWiQ+3SY61ZE9RRhM2AJ7zchpU/cGNbk=) 17: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:a7:fe:11:e4:4b:7e:f1:7d:53:8e:9b:5e:be:3e:70:fa:f9:1f:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Nov 4 17:10:56 2025 GMT Not After : Nov 5 19:28:56 2025 GMT Subject: CN=5C8B59DE42B0F58ED91B35299BA16AC031699AD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ab:96:ea:9d:3c:e7:e7:c7:d8:bb:9c:d0:5d: 72:54:48:fe:f3:7c:77:79:cb:38:e8:39:06:42:be: bf:ed:62:9f:32:ec:dd:69:01:18:65:9c:f0:29:01: 19:2d:40:16:79:b5:e0:c9:13:ae:36:bd:39:81:43: 9e:2e:24:67:d9:2f:cc:c3:77:c8:36:c9:54:ed:01: 10:e8:f5:25:25:71:24:60:d1:d0:27:8a:a0:06:86: 66:3d:9b:ca:39:1c:74:06:d5:e6:f7:42:d5:53:18: 8b:01:be:47:cf:2e:e1:00:b7:75:f5:40:86:a1:d2: a1:94:b5:9b:d5:0b:b7:20:5f:0e:ff:45:e2:67:57: 67:aa:8e:cf:4f:59:2e:fc:60:09:78:80:b4:bc:96: 9e:f8:0d:00:c0:12:1f:6b:24:c1:7f:8d:72:22:f6: 3b:93:2c:55:74:9a:94:a7:1e:64:b5:2d:f6:f9:b9: de:f5:0b:8f:28:38:5a:c2:2c:42:5f:c7:3e:b9:46: f0:d3:12:06:8a:e0:2d:37:91:7d:48:06:ff:96:cb: 13:92:92:5b:c3:f8:ed:71:c8:eb:0a:42:dd:70:23: 87:d1:2a:6d:b1:0f:99:d2:9a:0b:60:51:9e:9a:e5: be:63:97:f9:9d:cc:1d:fe:fc:1b:02:7f:4e:6d:c2: 82:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:8B:59:DE:42:B0:F5:8E:D9:1B:35:29:9B:A1:6A:C0:31:69:9A:D9 X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:93:bc:cf:5d:03:c8:72:62:d9:09:86:78:72:30:ec:aa:26: 0b:dd:82:fd:1c:99:da:c4:3a:d9:bf:9d:9f:7a:e0:da:c9:34: bb:7c:70:04:5c:2d:c4:fa:1c:c4:88:7c:e3:89:bf:05:90:71: 84:dc:6b:06:44:8b:4e:f3:aa:f1:80:79:81:2f:2b:8d:ef:01: 45:1c:12:9f:8b:65:9d:3d:bc:6d:33:00:b9:5f:fd:95:31:2b: 69:47:69:9a:2b:0e:8c:c2:a8:b7:97:ef:f8:e7:19:52:ce:8c: c6:83:53:12:33:f6:c7:4d:37:19:23:9f:af:ad:79:98:14:2b: 8c:3e:f2:b3:b7:0e:8d:ba:b0:8b:d9:4c:f3:fe:3e:5c:e3:41: 62:dd:d6:56:83:43:ea:ab:80:bb:8c:d7:f2:1c:8a:83:e0:ce: 62:72:da:71:af:48:5e:d9:99:97:50:8e:d1:05:ec:d3:3f:8f: 23:0f:7a:86:72:23:90:d0:1d:15:11:66:e4:56:03:2b:e7:e0: 0f:fc:b1:4e:cd:38:8b:41:41:63:e0:da:08:54:76:59:09:59: 4f:1e:05:93:79:4b:f6:bc:ef:86:a7:e8:fb:a3:ef:df:cc:cf: 0a:7e:58:7f:a4:dc:2e:77:2a:e6:a0:c6:93:d4:f5:f5:e7:35: 3f:c8:71:ef -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUH6f+EeRLfvF9U46bXr4+cPr5H7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNTExMDQxNzEwNTZaFw0yNTExMDUxOTI4NTZaMDMxMTAvBgNV BAMTKDVDOEI1OURFNDJCMEY1OEVEOTFCMzUyOTlCQTE2QUMwMzE2OTlBRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaq5bqnTzn58fYu5zQXXJUSP7z fHd5yzjoOQZCvr/tYp8y7N1pARhlnPApARktQBZ5teDJE642vTmBQ54uJGfZL8zD d8g2yVTtARDo9SUlcSRg0dAniqAGhmY9m8o5HHQG1eb3QtVTGIsBvkfPLuEAt3X1 QIah0qGUtZvVC7cgXw7/ReJnV2eqjs9PWS78YAl4gLS8lp74DQDAEh9rJMF/jXIi 9juTLFV0mpSnHmS1Lfb5ud71C48oOFrCLEJfxz65RvDTEgaK4C03kX1IBv+WyxOS klvD+O1xyOsKQt1wI4fRKm2xD5nSmgtgUZ6a5b5jl/mdzB3+/BsCf05twoIXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUXItZ3kKw9Y7ZGzUpm6FqwDFpmtkwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBtk7zP XQPIcmLZCYZ4cjDsqiYL3YL9HJnaxDrZv52feuDayTS7fHAEXC3E+hzEiHzjib8F kHGE3GsGRItO86rxgHmBLyuN7wFFHBKfi2WdPbxtMwC5X/2VMStpR2maKw6Mwqi3 l+/45xlSzozGg1MSM/bHTTcZI5+vrXmYFCuMPvKztw6NurCL2Uzz/j5c40Fi3dZW g0Pqq4C7jNfyHIqD4M5ictpxr0he2ZmXUI7RBezTP48jD3qGciOQ0B0VEWbkVgMr 5+AP/LFOzTiLQUFj4NoIVHZZCVlPHgWTeUv2vO+Gp+j7o+/fzM8Kflh/pNwudyrm oMaT1PX15zU/yHHv -----END CERTIFICATE-----Generated at Wed Nov 5 02:44:09 2025 by rpki-client