$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft File: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft (raw, json) Hash identifier: r3oJpGXmrfnnvJq9VyXZiklBtv6PMFAWuDWbqFv40cM= Subject key identifier: 43:23:CD:A7:F3:7A:71:9B:34:74:50:58:DA:0C:6F:3B:DC:B4:B3:24 Authority key identifier: D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8 Certificate issuer: /CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8 Certificate serial: 3F4C46296EDDEF4E4C38FBBDCCC2911BE70404E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft Manifest number: 03F4 Signing time: Wed 05 Nov 2025 08:55:25 +0000 Manifest this update: Wed 05 Nov 2025 08:50:25 +0000 Manifest next update: Thu 06 Nov 2025 11:25:25 +0000 Files and hashes: 1: AS202881.asa (hash: nU1V64f2UOlswo0H6MWNfigd4IjLYoZXApoQceO/AvU=) 2: 323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa (hash: SVc+06+kSTZLFSZYHt+18ILRTqVegdlc2kojDgxmDjY=) 3: 323030313a3637633a326265383a3a2f34382d3438203d3e20323035333239.roa (hash: 3ZFhB/5ygf5t4lpptEoHt4tGKQVifxYsEJPws7ZipKw=) 4: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl (hash: d/VQmAyJv5x2IXU2mevgBJ5TM4KgT2sONrrchXJhEPM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:4c:46:29:6e:dd:ef:4e:4c:38:fb:bd:cc:c2:91:1b:e7:04:04:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8 Validity Not Before: Nov 5 08:50:25 2025 GMT Not After : Nov 6 11:25:25 2025 GMT Subject: CN=4323CDA7F37A719B34745058DA0C6F3BDCB4B324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d4:21:a9:d4:77:0c:11:b2:22:f7:30:6d:35: 52:d1:1b:81:74:6e:d7:0f:15:c7:65:a2:36:85:b9: 26:48:fc:05:1b:10:11:e9:c4:d8:bb:9f:08:4f:08: 2a:d8:da:cc:46:bc:25:6f:5d:91:0b:bf:29:ff:28: a8:a9:a7:82:5f:04:b7:21:a3:a8:e0:b1:06:f6:17: 78:1a:b6:a0:54:35:5a:bd:b7:96:96:e8:6a:4b:88: 0c:fd:48:bf:9b:b8:b2:96:72:11:f1:90:68:f2:29: d1:19:15:db:fe:31:27:69:3a:82:21:00:44:52:06: fb:53:5e:4a:d4:49:b6:39:0e:c5:d7:31:e6:38:8a: 81:ce:b6:8f:db:0c:d1:53:91:ca:54:5a:e0:59:50: 54:90:05:32:d1:8e:0c:42:2e:e0:9c:89:b1:94:2c: 0a:67:86:09:f9:43:b1:db:a4:8d:b0:c3:a5:b1:29: 98:e4:f5:01:02:e2:36:27:45:b1:c3:c7:b0:b9:fd: cb:0c:57:62:ed:0e:a3:0a:28:ac:58:0e:75:88:30: 1c:2e:c0:8c:a5:95:de:97:28:3d:a8:45:84:e2:f1: 9c:44:6e:5d:fe:6a:a7:4d:de:9e:49:db:28:f5:6b: 6c:cc:45:bc:69:7f:ac:44:80:7b:ca:c7:66:b1:2c: bd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:23:CD:A7:F3:7A:71:9B:34:74:50:58:DA:0C:6F:3B:DC:B4:B3:24 X509v3 Authority Key Identifier: keyid:D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:02:7f:93:f7:5e:23:d3:12:cd:24:0d:a5:bc:ac:a9:f1:cf: b4:1c:85:f7:bb:bd:8a:b0:ec:ba:36:0e:6b:b4:32:ca:eb:07: 9f:6c:cd:f2:b5:81:a7:e6:ff:02:27:93:a2:38:37:21:ee:52: f7:07:63:0e:57:fd:e8:3a:7a:bf:16:f6:00:eb:42:53:aa:8e: 49:43:c6:83:0d:8c:6b:7c:30:ca:b0:e3:9a:c1:d5:4d:82:86: bf:44:4c:4a:4a:cb:a7:a4:e2:83:98:37:65:9a:14:c9:ff:a9: 4d:6f:a5:42:b9:f1:ce:34:fc:0b:72:c2:2a:6f:38:f0:b9:50: 41:09:84:13:26:e0:10:6b:25:96:29:ca:f9:5c:07:54:17:ae: 0d:f4:58:58:ac:78:ab:6c:39:9f:7c:9b:2f:89:28:eb:eb:7e: c1:fd:3a:c4:a8:38:3a:9e:7e:bc:30:6e:d8:ed:08:95:62:13: 56:c1:73:07:e9:08:97:30:e0:d5:22:9a:5a:8b:1d:f0:29:8f: 9b:0f:11:65:4c:ef:08:3a:31:3d:fa:3d:be:0c:9b:be:d8:80: fa:d9:eb:01:77:fd:fa:c3:39:ca:7a:c4:6a:33:28:4f:2c:0b: cc:a8:a2:0f:88:a5:d3:59:04:5f:1c:ac:1a:0e:8b:cb:4a:f8: a6:f7:c0:96 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUP0xGKW7d705MOPu9zMKRG+cEBOEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDY0Mjk3NWY1MzVmNDVmZDlmNmQ4ZmVhNjI2YmM2ZDI0 YmM5ZDhkODAeFw0yNTExMDUwODUwMjVaFw0yNTExMDYxMTI1MjVaMDMxMTAvBgNV BAMTKDQzMjNDREE3RjM3QTcxOUIzNDc0NTA1OERBMEM2RjNCRENCNEIzMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa1CGp1HcMEbIi9zBtNVLRG4F0 btcPFcdlojaFuSZI/AUbEBHpxNi7nwhPCCrY2sxGvCVvXZELvyn/KKipp4JfBLch o6jgsQb2F3gatqBUNVq9t5aW6GpLiAz9SL+buLKWchHxkGjyKdEZFdv+MSdpOoIh AERSBvtTXkrUSbY5DsXXMeY4ioHOto/bDNFTkcpUWuBZUFSQBTLRjgxCLuCcibGU LApnhgn5Q7HbpI2ww6WxKZjk9QEC4jYnRbHDx7C5/csMV2LtDqMKKKxYDnWIMBwu wIylld6XKD2oRYTi8ZxEbl3+aqdN3p5J2yj1a2zMRbxpf6xEgHvKx2axLL11AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUQyPNp/N6cZs0dFBY2gxvO9y0syQwHwYDVR0j BBgwFoAU1kKXX1NfRf2fbY/qYmvG0kvJ2NgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDY5NzE2MGMtYWNjNS00YjUxLWJmNTUtMTBjN2E2ZTY2 OTgwLzMvRDY0Mjk3NUY1MzVGNDVGRDlGNkQ4RkVBNjI2QkM2RDI0QkM5RDhEOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFrS1hYMU5mUmYyZmJZX3FZbXZHMGt2 SjJOZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kNjk3MTYwYy1h Y2M1LTRiNTEtYmY1NS0xMGM3YTZlNjY5ODAvMy9ENjQyOTc1RjUzNUY0NUZEOUY2 RDhGRUE2MjZCQzZEMjRCQzlEOEQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwgJ/k/deI9MSzSQNpbys qfHPtByF97u9irDsujYOa7QyyusHn2zN8rWBp+b/AieTojg3Ie5S9wdjDlf96Dp6 vxb2AOtCU6qOSUPGgw2Ma3wwyrDjmsHVTYKGv0RMSkrLp6Tig5g3ZZoUyf+pTW+l QrnxzjT8C3LCKm848LlQQQmEEybgEGsllinK+VwHVBeuDfRYWKx4q2w5n3ybL4ko 6+t+wf06xKg4Op5+vDBu2O0IlWITVsFzB+kIlzDg1SKaWosd8CmPmw8RZUzvCDox Pfo9vgybvtiA+tnrAXf9+sM5ynrEajMoTywLzKiiD4il01kEXxysGg6Ly0r4pvfA lg== -----END CERTIFICATE-----Generated at Wed Nov 5 10:44:50 2025 by rpki-client