$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft File: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft (raw, json) Hash identifier: MJd1B6qd67Qc3xIQCX60v1IiQAjYuuH8bBQVGR8yopw= Subject key identifier: 1B:3A:0E:E2:55:8F:DF:5A:20:4A:CF:BD:90:62:F7:84:0C:A8:DD:96 Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 486556A7E4887C5735CBBB7DE12DF16EDC917EAD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft Manifest number: 0314 Signing time: Tue 04 Nov 2025 01:35:56 +0000 Manifest this update: Tue 04 Nov 2025 01:30:56 +0000 Manifest next update: Wed 05 Nov 2025 02:28:56 +0000 Files and hashes: 1: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl (hash: wWl6YeBAHWhSn0rcr6QJOcpWif4nX2jYtDMi6z0jJS4=) 2: 326131343a373538313a6634303a3a2f34342d3438203d3e20323134363433.roa (hash: jjg3HPw+XVWQVO0XHgF/TKZW97oaDPDZVvcbfhgJX94=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 02:28:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:65:56:a7:e4:88:7c:57:35:cb:bb:7d:e1:2d:f1:6e:dc:91:7e:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Nov 4 01:30:56 2025 GMT Not After : Nov 5 02:28:56 2025 GMT Subject: CN=1B3A0EE2558FDF5A204ACFBD9062F7840CA8DD96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:07:84:d8:45:6f:81:0f:10:5c:77:69:64:dc: 53:75:e4:71:8e:c8:02:df:eb:31:c0:cc:6a:15:f1: 1c:96:34:d5:9e:80:03:7d:be:d5:83:97:8a:6d:1c: 7e:90:1c:fa:4f:a8:ef:a5:bd:73:19:5d:26:2a:52: 3e:b5:f8:93:14:d6:c5:2e:a4:98:6d:dd:ff:b3:a3: a4:c8:b2:ab:1e:08:8e:45:df:a9:03:7e:d6:c2:01: 7b:78:ae:5d:dd:53:5d:a3:11:08:43:50:5f:ae:ec: a3:5f:06:bd:57:bc:0d:4d:82:e2:6e:c9:b4:70:57: b4:44:40:d5:9d:15:76:06:d6:01:75:c0:1c:ff:a6: 09:42:0f:74:b0:a2:96:99:01:5a:89:6a:da:b0:79: 1d:f0:f6:4c:36:c6:36:53:48:84:c2:7f:23:95:5a: ba:d8:c0:a4:4a:9c:f0:9f:12:9a:43:2b:7f:d6:85: 1a:5f:fa:51:c4:69:b3:17:4d:d0:34:68:8f:df:f3: 96:4a:67:91:43:19:7c:ce:12:c2:43:6b:54:a7:01: ea:9a:33:b0:c6:2d:c5:b5:91:6b:8e:cd:27:96:e8: 0d:05:89:18:74:8d:58:78:94:db:68:f5:52:50:4a: fe:05:65:8b:68:69:76:b5:1e:7c:d7:16:43:2b:56: 7f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3A:0E:E2:55:8F:DF:5A:20:4A:CF:BD:90:62:F7:84:0C:A8:DD:96 X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:04:4d:f1:ba:cb:2c:46:e5:fa:10:d2:e9:ab:e4:71:bf:80: 38:44:60:3c:af:fa:84:c0:74:97:e1:be:0d:37:fa:43:ed:55: 50:82:88:ff:01:40:da:f3:06:c1:81:c5:55:7a:45:ec:eb:84: 34:8c:f4:b8:75:52:d8:27:e1:d9:9c:20:6a:a1:ad:1a:67:d2: 7c:84:09:25:2a:22:c0:fb:1a:74:ba:9a:6e:89:d8:40:79:90: 29:2e:4b:fa:ac:20:16:de:5e:6a:8e:50:e1:d5:e1:7a:0d:c5: 17:f4:b0:47:85:39:45:6a:fb:9a:be:50:8b:19:6c:93:9b:90: f3:b5:4c:34:6a:b0:8f:23:99:29:87:79:c1:fe:f9:10:de:87: 66:b8:a6:4a:0a:da:ef:37:a1:c1:f2:25:0d:49:f7:4e:1f:b0: ad:98:25:c8:94:0f:e4:b0:da:bc:bf:8c:71:bc:2c:67:98:97: 57:e6:a5:67:e8:20:a2:83:a8:4a:74:ab:5a:0b:a8:d3:ac:32: 39:fe:ae:d1:69:65:80:c8:12:54:20:3d:c7:29:00:22:cc:8c: ce:83:be:2f:af:8c:b8:4a:6a:27:ba:a9:44:ef:16:bc:f2:66: e4:88:7b:f6:de:cf:70:fa:59:07:fc:36:90:6e:ae:56:21:e5: 91:74:06:d5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSGVWp+SIfFc1y7t94S3xbtyRfq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNTExMDQwMTMwNTZaFw0yNTExMDUwMjI4NTZaMDMxMTAvBgNV BAMTKDFCM0EwRUUyNTU4RkRGNUEyMDRBQ0ZCRDkwNjJGNzg0MENBOEREOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8B4TYRW+BDxBcd2lk3FN15HGO yALf6zHAzGoV8RyWNNWegAN9vtWDl4ptHH6QHPpPqO+lvXMZXSYqUj61+JMU1sUu pJht3f+zo6TIsqseCI5F36kDftbCAXt4rl3dU12jEQhDUF+u7KNfBr1XvA1NguJu ybRwV7REQNWdFXYG1gF1wBz/pglCD3SwopaZAVqJatqweR3w9kw2xjZTSITCfyOV WrrYwKRKnPCfEppDK3/WhRpf+lHEabMXTdA0aI/f85ZKZ5FDGXzOEsJDa1SnAeqa M7DGLcW1kWuOzSeW6A0FiRh0jVh4lNto9VJQSv4FZYtoaXa1HnzXFkMrVn85AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUGzoO4lWP31ogSs+9kGL3hAyo3ZYwHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RiOGQ4YjdkLWM0ODYtNDIzOS05ZDlmLThmOGY1ZGNlZDhkMC8xL0Y5RjdBMjg4 NUNGMzAxMkZBMTM5MEQzQjMyNTlGQzc4QUVGN0FEMUEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCZBE3x usssRuX6ENLpq+Rxv4A4RGA8r/qEwHSX4b4NN/pD7VVQgoj/AUDa8wbBgcVVekXs 64Q0jPS4dVLYJ+HZnCBqoa0aZ9J8hAklKiLA+xp0uppuidhAeZApLkv6rCAW3l5q jlDh1eF6DcUX9LBHhTlFavuavlCLGWyTm5DztUw0arCPI5kph3nB/vkQ3odmuKZK CtrvN6HB8iUNSfdOH7CtmCXIlA/ksNq8v4xxvCxnmJdX5qVn6CCig6hKdKtaC6jT rDI5/q7RaWWAyBJUID3HKQAizIzOg74vr4y4SmonuqlE7xa88mbkiHv23s9w+lkH /DaQbq5WIeWRdAbV -----END CERTIFICATE-----Generated at Tue Nov 4 10:51:28 2025 by rpki-client