$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft File: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft (raw, json) Hash identifier: 97gQfIAX6+CyyHvrcKSYuxLbDcfFZ9CiOJjpkkgb1sM= Subject key identifier: E8:3F:18:4D:43:B7:3C:80:CC:B9:3F:3E:E0:49:54:3E:D5:A6:AE:2D Authority key identifier: 20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 Certificate issuer: /CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Certificate serial: 7C37E432132F8E107D7735BD59CB9297C6A06D3A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft Manifest number: 61 Signing time: Tue 04 Nov 2025 13:52:38 +0000 Manifest this update: Tue 04 Nov 2025 13:47:38 +0000 Manifest next update: Wed 05 Nov 2025 14:17:38 +0000 Files and hashes: 1: 326131343a373538303a666666353a3a2f34382d3438203d3e20323037353239.roa (hash: 8GEpSwKR5aAKrW7JpZcQNrVUIUKVu8YVCYytf208qTw=) 2: 326131343a373538313a333062363a3a2f34382d3438203d3e20323037323939.roa (hash: QF7sj3Q22cpFIfftMWFUaaWBXSTUWiNGhFKa4Gm8DjQ=) 3: 326131343a373538313a333039303a3a2f34342d3434203d3e20323034323131.roa (hash: an2CTnY48XCjuCGH81CGgjVXZdlCvh7kWv6euA7rsaw=) 4: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer (hash: Cg46VfMFxkibHVY72VspTJE2BjBtIpE0lG8+Ny9YFKc=) 5: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl (hash: 9rFEq2rzDPBUVXJ+OXqJSUAo1zZ6TnSk9zJ3uiVgS0I=) 6: 326131343a373538313a333030303a3a2f34302d3438203d3e20323037353239.roa (hash: 49tQr1GLN9QvPACiaQcXfaSDsuhRZJax3rEAyqF9fvs=) 7: 326131343a373538313a333062363a3a2f34382d3438203d3e203331383938.roa (hash: EiykYxl+6FaTNBSgNTe5hk8ztAyCkiKmYpqs3J6XV7E=) 8: 326131343a373538313a333062353a3a2f34382d3438203d3e20323131373239.roa (hash: tFUXq6i30FxB1SNNhCRKk78oQl/FXFjJBGghOw722to=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:37:e4:32:13:2f:8e:10:7d:77:35:bd:59:cb:92:97:c6:a0:6d:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Validity Not Before: Nov 4 13:47:38 2025 GMT Not After : Nov 5 14:17:38 2025 GMT Subject: CN=E83F184D43B73C80CCB93F3EE049543ED5A6AE2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a9:d8:a5:77:ed:ca:92:3e:89:c7:ed:44:c6: 1c:d5:4d:df:0c:75:29:5b:c6:f9:59:5c:e8:2b:df: 3c:f6:f7:74:5f:9c:34:3a:32:5b:ac:e2:ef:06:6c: 66:77:7f:cb:e4:d7:dd:b7:9a:2e:90:f6:88:ef:7e: 5d:9c:20:62:ba:f7:fd:8b:2b:c3:d2:52:08:da:ee: df:e2:cb:3d:3e:fb:41:95:c9:d7:f9:b1:92:75:46: 37:ce:49:81:ac:04:2d:b0:36:ed:95:d0:f0:fa:af: 46:08:46:e6:ee:43:de:e9:c6:ce:6d:ce:4a:0c:23: c5:20:0e:24:8b:39:c7:38:69:c5:fa:59:56:bd:e7: 35:9b:f3:22:c4:ef:1f:49:87:89:af:12:c9:c0:fb: ad:7c:8e:a9:4f:91:b8:45:ac:5f:e2:32:c2:a1:c4: 3d:5e:ba:dc:a1:ea:2f:09:1c:f3:99:2c:4f:16:5a: da:a0:2b:2c:3a:11:1d:6f:3b:ea:3f:18:8a:f7:17: b0:0c:00:ce:4a:b4:ee:41:a4:ba:f2:0b:1a:16:8a: d7:bd:2b:39:c7:38:9a:4e:83:bd:9f:98:d1:9c:e0: c2:31:e0:45:06:cf:49:cf:49:0e:43:b4:a4:6d:58: ae:a6:e6:c7:f3:c0:21:f1:49:f3:4e:86:03:77:14: 59:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3F:18:4D:43:B7:3C:80:CC:B9:3F:3E:E0:49:54:3E:D5:A6:AE:2D X509v3 Authority Key Identifier: keyid:20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:44:7e:52:a4:fa:08:44:fc:ea:fd:d7:c8:2d:12:19:62:00: 62:98:3f:9d:0b:1c:5f:d0:62:f5:40:e5:a5:33:70:04:76:ec: c6:f1:17:98:6d:15:02:ef:61:fc:98:49:26:9b:0f:a6:9c:a6: 17:48:12:28:71:05:5a:a7:db:1e:6d:6d:89:01:71:81:03:21: 32:fd:a1:02:12:26:ba:5b:1e:f6:31:fb:9b:c3:62:a9:58:bf: 9a:6b:0b:3f:09:03:bd:fa:2d:69:86:ea:ce:65:a3:9f:1c:44: 40:8b:d8:7d:e1:f9:b2:11:11:3c:5f:73:ac:c2:1e:ae:6f:e1: 48:83:ab:70:55:19:8c:ed:07:99:52:a9:09:7b:72:f5:ff:ef: 50:59:a5:f0:00:72:e0:f4:46:d4:0b:09:2a:42:c3:55:1a:a0: 5b:c9:fc:41:a1:11:dd:18:1b:56:0c:82:ec:b3:cd:86:f5:52: 62:a0:29:98:95:ef:5f:16:85:41:9e:8f:64:5a:9b:17:99:0f: c9:51:16:72:6c:45:73:d2:0a:e4:20:ca:ca:f0:d5:39:79:5a: 3b:be:e3:f7:04:f0:e4:9b:d2:f8:54:40:da:9d:66:a9:e2:65: 7b:1e:f5:8f:d1:ee:53:a3:fc:7f:0c:16:b2:a9:ab:9c:b3:5a: ea:20:a5:fd -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfDfkMhMvjhB9dzW9WcuSl8agbTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZD ODg5MjNGMDAeFw0yNTExMDQxMzQ3MzhaFw0yNTExMDUxNDE3MzhaMDMxMTAvBgNV BAMTKEU4M0YxODRENDNCNzNDODBDQ0I5M0YzRUUwNDk1NDNFRDVBNkFFMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBqdild+3Kkj6Jx+1ExhzVTd8M dSlbxvlZXOgr3zz293RfnDQ6Mlus4u8GbGZ3f8vk1923mi6Q9ojvfl2cIGK69/2L K8PSUgja7t/iyz0++0GVydf5sZJ1RjfOSYGsBC2wNu2V0PD6r0YIRubuQ97pxs5t zkoMI8UgDiSLOcc4acX6WVa95zWb8yLE7x9Jh4mvEsnA+618jqlPkbhFrF/iMsKh xD1eutyh6i8JHPOZLE8WWtqgKyw6ER1vO+o/GIr3F7AMAM5KtO5BpLryCxoWite9 KznHOJpOg72fmNGc4MIx4EUGz0nPSQ5DtKRtWK6m5sfzwCHxSfNOhgN3FFkRAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU6D8YTUO3PIDMuT8+4ElUPtWmri0wHwYDVR0j BBgwFoAUICqC2m5zzkJi4Yuu1go/psiJI/AwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDliZDM4ODgtOTMwMi00YjZmLWEwMTctMmI0YmJhNWU1 N2JiLzEvMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZDODg5MjNGMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDJBODJEQTZFNzNDRTQyNjJFMThCQUVE NjBBM0ZBNkM4ODkyM0YwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q5YmQzODg4LTkzMDItNGI2Zi1hMDE3LTJiNGJiYTVlNTdiYi8xLzIwMkE4MkRB NkU3M0NFNDI2MkUxOEJBRUQ2MEEzRkE2Qzg4OTIzRjAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA1RH5S pPoIRPzq/dfILRIZYgBimD+dCxxf0GL1QOWlM3AEduzG8ReYbRUC72H8mEkmmw+m nKYXSBIocQVap9sebW2JAXGBAyEy/aECEia6Wx72Mfubw2KpWL+aaws/CQO9+i1p hurOZaOfHERAi9h94fmyERE8X3Oswh6ub+FIg6twVRmM7QeZUqkJe3L1/+9QWaXw AHLg9EbUCwkqQsNVGqBbyfxBoRHdGBtWDILss82G9VJioCmYle9fFoVBno9kWpsX mQ/JURZybEVz0grkIMrK8NU5eVo7vuP3BPDkm9L4VEDanWap4mV7HvWP0e5To/x/ DBayqaucs1rqIKX9 -----END CERTIFICATE-----Generated at Tue Nov 4 18:04:48 2025 by rpki-client