$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft File: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft (raw, json) Hash identifier: PwaJWrMsysv49i3gpjhH0qzPKz0YvcpTCCIDs80WaTw= Subject key identifier: F3:33:9D:A7:48:76:7F:61:0F:D3:DE:89:61:A2:04:70:A9:3E:E3:FB Authority key identifier: 5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F Certificate issuer: /CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Certificate serial: 2B520D8EB1A2AB774A07485338D6FD5B040E1843 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft Manifest number: A9 Signing time: Wed 05 Nov 2025 03:23:08 +0000 Manifest this update: Wed 05 Nov 2025 03:18:08 +0000 Manifest next update: Thu 06 Nov 2025 06:11:08 +0000 Files and hashes: 1: 326130363a396634313a3130303a3a2f34302d3430203d3e20323134373233.roa (hash: sTs8O8KBp3/QEgTlhnDJhb+nhykdynr848iPv4Z/TIo=) 2: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl (hash: U7DectaLxHID6ywL5S+HIimnuhM7cqWqA66Q1cC3h0Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 06:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:52:0d:8e:b1:a2:ab:77:4a:07:48:53:38:d6:fd:5b:04:0e:18:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Validity Not Before: Nov 5 03:18:08 2025 GMT Not After : Nov 6 06:11:08 2025 GMT Subject: CN=F3339DA748767F610FD3DE8961A20470A93EE3FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:61:cf:34:a8:94:dd:af:16:ea:f8:3d:33:d6: 65:be:88:e9:83:c6:ae:84:90:81:46:16:3c:32:18: 1f:ec:fa:60:17:72:e1:b5:85:4b:72:ef:55:5a:72: 77:79:cc:e8:81:75:3a:1f:e5:01:11:cd:3e:d6:8b: 15:d9:c3:29:1f:60:d2:ad:c5:30:38:1e:41:e8:6b: 14:06:c5:7a:0d:f0:9f:c9:f1:35:2a:b0:0d:7f:03: 19:3d:fc:77:ba:ba:e6:a8:b5:90:98:e7:7c:9f:08: b1:16:12:af:0e:a0:4a:c8:b4:51:4c:8d:a5:cb:36: a3:56:fa:48:13:d0:c3:20:5a:76:7c:a9:59:61:cc: f3:a6:7f:df:c3:75:bf:34:68:f8:57:6c:98:83:01: 05:52:83:2a:1d:df:8b:12:df:2c:ea:bc:88:dc:a8: 85:26:61:c0:f8:98:69:81:9c:aa:8c:77:35:ce:cc: 8c:ae:24:e4:a9:a1:d7:44:af:c9:d6:d3:0a:41:7e: ff:bf:08:6a:0f:90:98:d7:5d:62:46:14:da:57:00: 05:d7:83:9f:4c:69:75:d7:67:8e:6f:97:b0:db:28: 1d:5f:a1:24:14:e2:8a:90:0e:55:ed:da:7a:b0:57: 15:41:7b:39:92:ce:a4:76:72:db:3c:42:04:3a:9a: 04:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:33:9D:A7:48:76:7F:61:0F:D3:DE:89:61:A2:04:70:A9:3E:E3:FB X509v3 Authority Key Identifier: keyid:5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:07:98:56:a0:49:2e:c8:a7:da:00:26:52:d3:56:0d:34:cd: 4d:90:e2:2e:77:99:32:20:c1:33:36:2f:81:9a:64:fb:8a:b7: 1a:14:9e:d9:8c:00:2a:a4:7f:19:90:e7:5d:b4:5a:97:5b:87: 8e:9c:ba:af:a3:14:8d:97:84:f7:36:1d:1a:dc:f6:f8:60:05: 3b:6c:ae:cd:d6:08:8f:15:27:f8:98:63:63:6d:ee:da:c8:c4: 13:8b:42:3b:d3:a8:49:04:0e:20:fd:64:6e:6d:97:a1:da:1a: 34:58:89:85:23:74:f3:5e:15:b1:52:74:80:b7:8e:93:0b:bf: 3d:27:f1:e5:0e:70:3e:4a:e9:69:ab:d1:03:75:1a:90:05:f9: c7:26:6b:85:c0:62:da:ca:57:5d:2e:78:7c:bd:0a:29:b3:74: a1:53:aa:d2:b7:04:4a:24:91:73:5b:89:d3:c3:b5:c2:22:4e: 33:76:ca:78:aa:df:df:4b:c0:50:d3:72:0c:bc:df:d4:48:77: 3c:72:d0:02:30:6f:2c:61:49:41:7b:24:6a:9f:33:5f:51:2c: b7:5b:e3:81:bf:64:d6:d7:0d:f0:20:43:66:bc:02:80:1c:0b: 3a:79:01:47:5f:e3:93:fc:e5:47:ef:92:37:f0:39:4a:f1:a0: a5:9b:e2:ae -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUK1INjrGiq3dKB0hTONb9WwQOGEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQw QkY1OTE1RjAeFw0yNTExMDUwMzE4MDhaFw0yNTExMDYwNjExMDhaMDMxMTAvBgNV BAMTKEYzMzM5REE3NDg3NjdGNjEwRkQzREU4OTYxQTIwNDcwQTkzRUUzRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgYc80qJTdrxbq+D0z1mW+iOmD xq6EkIFGFjwyGB/s+mAXcuG1hUty71Vacnd5zOiBdTof5QERzT7WixXZwykfYNKt xTA4HkHoaxQGxXoN8J/J8TUqsA1/Axk9/He6uuaotZCY53yfCLEWEq8OoErItFFM jaXLNqNW+kgT0MMgWnZ8qVlhzPOmf9/Ddb80aPhXbJiDAQVSgyod34sS3yzqvIjc qIUmYcD4mGmBnKqMdzXOzIyuJOSpoddEr8nW0wpBfv+/CGoPkJjXXWJGFNpXAAXX g59MaXXXZ45vl7DbKB1foSQU4oqQDlXt2nqwVxVBezmSzqR2cts8QgQ6mgSDAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU8zOdp0h2f2EP096JYaIEcKk+4/swHwYDVR0j BBgwFoAUWj94GTU84P0TuP/Ny4g37Qv1kV8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzUvNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQwQkY1OTE1Ri5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03ZWIzLTRm NjMtYTE1OS1jZmYwMmMwMjZhYmYvMi81QTNGNzgxOTM1M0NFMEZEMTNCOEZGQ0RD Qjg4MzdFRDBCRjU5MTVGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy81LzVBM0Y3ODE5 MzUzQ0UwRkQxM0I4RkZDRENCODgzN0VEMEJGNTkxNUYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCFB5hW oEkuyKfaACZS01YNNM1NkOIud5kyIMEzNi+BmmT7ircaFJ7ZjAAqpH8ZkOddtFqX W4eOnLqvoxSNl4T3Nh0a3Pb4YAU7bK7N1giPFSf4mGNjbe7ayMQTi0I706hJBA4g /WRubZeh2ho0WImFI3TzXhWxUnSAt46TC789J/HlDnA+Sulpq9EDdRqQBfnHJmuF wGLaylddLnh8vQops3ShU6rStwRKJJFzW4nTw7XCIk4zdsp4qt/fS8BQ03IMvN/U SHc8ctACMG8sYUlBeyRqnzNfUSy3W+OBv2TW1w3wIENmvAKAHAs6eQFHX+OT/OVH 75I38DlK8aClm+Ku -----END CERTIFICATE-----Generated at Wed Nov 5 21:09:21 2025 by rpki-client