$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft File: C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft (raw, json) Hash identifier: pOmk62/JuGHF73+DVO5GzWo4zoc2Xz3JhtC24VkS6E8= Subject key identifier: 30:B0:9D:64:6D:25:98:5A:1F:55:F1:C1:8C:CF:B2:2F:FE:8D:82:70 Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf Certificate serial: 472CF7E2EE39E83DB00AA2A9507716DC91A84F11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft Manifest number: 055A Signing time: Tue 04 Nov 2025 06:57:06 +0000 Manifest this update: Tue 04 Nov 2025 06:52:06 +0000 Manifest next update: Wed 05 Nov 2025 06:57:06 +0000 Files and hashes: 1: 3139332e3234362e3130322e302f32342d3234203d3e203630373831.roa (hash: 9YIjshhRHJCTBV0dIP18GlVU8/qr9siO7bVSgJFYoAw=) 2: 3139332e3234362e342e302f32342d3234203d3e20313335343032.roa (hash: x5G3aikxww4wLRaoWnz2KkIIppe2I2SZAi3PiElvQpI=) 3: 3231372e3139382e3138372e302f32342d3234203d3e20323131343135.roa (hash: C9UN/z7rRSIBHXCw3Mn5S1vnSskjCCo5azhWVB5o2V8=) 4: 3231372e3139382e3138372e302f32342d3234203d3e20323131343430.roa (hash: 1b5s7twDP9sp8gcJ29rXGkFdvEaLedS6c1Dcd8xTFyM=) 5: 3231372e3139382e3138372e302f32342d3234203d3e20323132363039.roa (hash: DHsuIdClDCk2AbtF+6NodfNI3JEU6gbRKvoUSbt4bMQ=) 6: 3139332e3234362e352e302f32342d3234203d3e20313939343135.roa (hash: lvghBplCcmXtQEEJ3nC5HmHIcxgk88drnBMjhNzmX2g=) 7: C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl (hash: yqeI6GuPvH4Nt+JpAa+mOWYcxt7qhhlRo+ZwwTEbO04=) 8: 3139332e3234362e3130332e302f32342d3234203d3e20323136313338.roa (hash: fdALPGopwtGvbJEhx+/96pp78JBOCpIXPSPl4+ufmoE=) 9: 3139332e3234362e3130332e302f32342d3234203d3e20323032373336.roa (hash: 25OCay2OV/7fsFzlQCaWuZFV/8gtz5r77rm0KuzYhQc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 06:57:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:2c:f7:e2:ee:39:e8:3d:b0:0a:a2:a9:50:77:16:dc:91:a8:4f:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf Validity Not Before: Nov 4 06:52:06 2025 GMT Not After : Nov 5 06:57:06 2025 GMT Subject: CN=30B09D646D25985A1F55F1C18CCFB22FFE8D8270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:5f:b2:9c:8e:ce:99:b8:5d:75:79:99:39:72: 2c:6b:f3:54:d9:94:c6:d3:e3:54:3f:2e:c9:d2:ce: 0b:21:c2:40:c3:21:5c:cd:59:a7:10:b9:9a:43:a8: 11:90:44:18:85:d9:bb:4c:91:3b:7c:a0:9d:2c:14: 2a:e4:17:58:4b:1d:1e:19:66:5a:04:44:f0:3e:89: 1c:59:c4:8d:61:cb:b6:c1:20:d6:09:32:b8:11:4c: 99:61:10:36:c4:9c:34:a3:3e:0c:67:33:01:f2:db: e0:73:cd:60:f5:cc:cd:21:12:e8:d4:6c:d2:b6:12: 86:3f:09:76:69:39:c1:d2:ef:62:e8:14:29:d2:f4: a5:87:17:5b:1f:f0:62:c1:33:d1:fb:4b:82:3d:1d: 7c:ce:4f:6d:7c:0a:8b:3d:30:1a:45:c9:77:86:3c: 9f:fb:70:b3:e0:94:0f:a6:98:7e:c5:ac:05:1f:87: b1:51:fd:51:16:19:13:ce:f6:9d:7a:e5:f3:14:85: ef:17:65:ea:0a:85:e0:b8:99:80:9e:51:cd:d3:c1: 48:d4:4a:f7:27:63:5d:d8:f8:c9:5c:4c:91:fb:24: bd:72:4b:de:31:c6:09:96:ba:fe:07:d5:4a:62:1b: 6b:97:8e:98:f2:17:3d:cc:ed:a4:f6:6a:24:34:e2: 4e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B0:9D:64:6D:25:98:5A:1F:55:F1:C1:8C:CF:B2:2F:FE:8D:82:70 X509v3 Authority Key Identifier: keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:37:83:42:14:2d:94:b1:a5:f5:46:46:95:66:a2:e0:a0:3b: 46:20:c3:de:b9:b6:44:36:32:42:5b:57:88:0b:41:ad:e9:00: 6d:87:96:9a:47:c0:d7:56:71:28:d1:96:28:45:4f:44:3b:e5: 74:ab:20:69:19:46:4c:11:eb:ee:de:82:1e:ff:5a:1c:8f:88: 17:2a:96:7c:e7:48:7b:dc:7b:03:9c:b3:a1:89:d6:5e:34:1b: 27:25:ba:ae:94:d5:fc:44:e4:21:a9:54:d5:9c:9f:d3:56:3e: b3:05:bb:51:16:82:1a:25:a2:12:41:9c:c7:21:25:f0:9d:9d: 13:b0:2f:a7:92:f6:ab:33:4c:6a:d3:5a:2b:65:bf:52:c1:52: fc:b0:61:c5:08:26:33:43:d6:af:52:22:ad:e3:c8:78:ca:66: 7f:b9:f9:64:13:cf:db:51:16:d2:c4:ee:55:4c:51:03:d5:d2: 8e:f0:0d:5e:c5:b3:1f:d3:f5:fa:e2:13:a7:7f:36:6a:c7:c0: 83:da:48:30:8a:2d:58:38:f0:75:c1:4b:3d:78:0e:7e:b4:3c: b5:b4:e6:a7:36:69:62:20:4c:16:3e:a5:f9:57:1a:85:8c:1a: e1:d9:1b:aa:97:a6:83:71:b1:c1:be:a0:a5:cd:71:01:0f:7a: 52:97:34:72 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURyz34u456D2wCqKpUHcW3JGoTxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc5ZDAyYzYxODg2MWFkNDViYWY3OGNlMzkwMjNjYmNi NDk0YTdiZjAeFw0yNTExMDQwNjUyMDZaFw0yNTExMDUwNjU3MDZaMDMxMTAvBgNV BAMTKDMwQjA5RDY0NkQyNTk4NUExRjU1RjFDMThDQ0ZCMjJGRkU4RDgyNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtX7Kcjs6ZuF11eZk5cixr81TZ lMbT41Q/LsnSzgshwkDDIVzNWacQuZpDqBGQRBiF2btMkTt8oJ0sFCrkF1hLHR4Z ZloERPA+iRxZxI1hy7bBINYJMrgRTJlhEDbEnDSjPgxnMwHy2+BzzWD1zM0hEujU bNK2EoY/CXZpOcHS72LoFCnS9KWHF1sf8GLBM9H7S4I9HXzOT218Cos9MBpFyXeG PJ/7cLPglA+mmH7FrAUfh7FR/VEWGRPO9p165fMUhe8XZeoKheC4mYCeUc3TwUjU SvcnY13Y+MlcTJH7JL1yS94xxgmWuv4H1UpiG2uXjpjyFz3M7aT2aiQ04k5dAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUMLCdZG0lmFofVfHBjM+yL/6NgnAwHwYDVR0j BBgwFoAUx50CxhiGGtRbr3jOOQI8vLSUp78wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDkwYTkzNWEtYTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0 ZjI4LzAvQzc5RDAyQzYxODg2MUFENDVCQUY3OENFMzkwMjNDQkNCNDk0QTdCRi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3g1MEN4aGlHR3RSYnIzak9PUUk4dkxT VXA3OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOTBhOTM1YS1h NzRkLTRiOTgtOTQzMC1iYzdhZTVjMjRmMjgvMC9DNzlEMDJDNjE4ODYxQUQ0NUJB Rjc4Q0UzOTAyM0NCQ0I0OTRBN0JGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDeDQhQtlLGl9UZGlWai 4KA7RiDD3rm2RDYyQltXiAtBrekAbYeWmkfA11ZxKNGWKEVPRDvldKsgaRlGTBHr 7t6CHv9aHI+IFyqWfOdIe9x7A5yzoYnWXjQbJyW6rpTV/ETkIalU1Zyf01Y+swW7 URaCGiWiEkGcxyEl8J2dE7Avp5L2qzNMatNaK2W/UsFS/LBhxQgmM0PWr1IirePI eMpmf7n5ZBPP21EW0sTuVUxRA9XSjvANXsWzH9P1+uITp382asfAg9pIMIotWDjw dcFLPXgOfrQ8tbTmpzZpYiBMFj6l+VcahYwa4dkbqpemg3Gxwb6gpc1xAQ96Upc0 cg== -----END CERTIFICATE-----Generated at Tue Nov 4 11:16:50 2025 by rpki-client