$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft File: 98A87CAD5B710890A9528F166F4202393824E6B8.mft (raw, json) Hash identifier: WUURt9+zIKcecgVdhk/Jv263J8klFIpvZh1N9xrln1U= Subject key identifier: 0E:38:87:2A:F0:6D:34:F0:40:6E:0C:E6:F6:A0:72:49:1B:2A:2A:37 Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8 Certificate serial: 1EFE56814891EF6DBDF8FE702D550A8165F4DC43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft Manifest number: 0479 Signing time: Tue 04 Nov 2025 12:59:11 +0000 Manifest this update: Tue 04 Nov 2025 12:54:11 +0000 Manifest next update: Wed 05 Nov 2025 16:30:11 +0000 Files and hashes: 1: 98A87CAD5B710890A9528F166F4202393824E6B8.crl (hash: mDawFm2tFytM/iNkzbwbAVISmZysR6wY5n3QIYK3LKM=) 2: 39342e3132362e3233332e302f32342d3234203d3e203438303730.roa (hash: /8dVa93viKNoM1pCJooeH0rtbsVAVvDJFpjlC3WNZyI=) 3: 39342e3132362e3233352e302f32342d3234203d3e203438303730.roa (hash: S5WIAkzllTXfMiWpREUuucFgM0BSw7Pb5gT995rR5+k=) 4: AS48070.asa (hash: 5MT6ORI/F8ffsUlifpuRiZkf4qUWanqmxrgKmyiz55A=) 5: 39342e3132362e3233342e302f32342d3234203d3e203438303730.roa (hash: wQ/YXS5V0WqyAz3I38Grxwtf2vC7Tnq0YU0pMolmNpk=) 6: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer (hash: Pc4F216M/oD/fxZDUk8HLynWg8D1IQ0ANHs5N2ZC0VQ=) 7: 326131313a353730303a3a2f33322d3332203d3e203438303730.roa (hash: Fqs+xGh2wCPoRebx3WWGGz8gG+3wDYrzV+eGaABVra0=) 8: 326131313a353730373a3a2f33322d3332203d3e203438303730.roa (hash: 242POLRepYH713AUptOGvBkM/JpRNVCsIm5BodQGTyY=) 9: 39342e3132362e3233362e302f32342d3234203d3e203438303730.roa (hash: ma+wlMqMsb7J0TC2Gy822cEZS57hTDfS/GzCjZsgQ1k=) 10: 326131313a353730313a31303a3a2f34342d3434203d3e20323030313938.roa (hash: IiLsd5rWyRAEtPC2BRNztBwgXOWFkCLAq6FHsMnhQxg=) 11: 39342e3132362e3233322e302f32342d3234203d3e203438303730.roa (hash: VIdYFIOIqW5zJ3T1LDGwWjmJ764XjM+ac+86S8Ja5hk=) 12: 326131313a353730373a61613a3a2f34382d3438203d3e203438303730.roa (hash: JswRhPyDtXHdt3LcnGr0rU+2WVgkSTrzy91w1+vHXG0=) 13: 39342e3132362e3233372e302f32342d3234203d3e203438303730.roa (hash: SY6OvQv9R/Ut8R5yFxdy0RVK/9dKsg8ZwmC3iNS9Rpw=) 14: 39342e3132362e3233392e302f32342d3234203d3e203438303730.roa (hash: NDHvIIcUiAk7uX5boyMA8yHxKUGe6BZWK+cptlXNnOA=) 15: 39342e3132362e3233382e302f32342d3234203d3e203438303730.roa (hash: EEtfGKQPQ42nFzzdsRfixi4zKQ5tTYPEdAQ1iAcmdE4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:fe:56:81:48:91:ef:6d:bd:f8:fe:70:2d:55:0a:81:65:f4:dc:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8 Validity Not Before: Nov 4 12:54:11 2025 GMT Not After : Nov 5 16:30:11 2025 GMT Subject: CN=0E38872AF06D34F0406E0CE6F6A072491B2A2A37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:94:ea:28:f7:cf:69:44:3d:f0:d3:28:b7:82: fb:c6:65:7d:d8:a9:9f:36:48:d8:db:9f:0f:8a:7e: 4a:97:e3:b0:27:e1:b2:4f:52:27:e6:8a:17:bd:0f: cb:6d:63:1d:44:41:6b:75:12:2b:66:88:cb:2c:04: f3:a1:cc:4c:15:ab:c3:d3:82:e9:a6:f8:b9:26:90: 75:81:5e:0e:62:c5:82:a8:ad:4a:0e:81:22:f6:5f: 74:8c:97:20:61:30:ee:0c:7e:2a:50:ad:bf:28:cd: 09:0d:06:84:3f:37:a4:1c:ad:11:12:6f:13:11:91: 9b:be:c3:07:b6:d7:b2:f4:6c:05:3a:6b:c2:c7:b0: 9f:e4:b8:c5:65:91:1c:61:e7:48:7e:9f:b9:15:b8: 69:82:a4:2b:83:2c:3f:0f:5b:ff:fe:b0:65:29:40: cd:e3:96:3c:4c:44:47:67:03:9d:e8:eb:0d:89:02: f8:e8:39:69:72:20:01:bd:66:2e:de:a6:c7:2c:7e: 12:c6:38:3a:61:cf:fd:98:ce:40:6c:b7:18:42:ed: 71:f5:62:5b:1a:ee:15:4f:d1:4b:9a:fc:ce:16:87: 57:c5:5f:97:3a:7c:6f:0f:b8:70:51:24:0f:ba:04: ae:b0:32:05:82:a3:73:72:a6:db:2d:28:07:70:f3: fc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:38:87:2A:F0:6D:34:F0:40:6E:0C:E6:F6:A0:72:49:1B:2A:2A:37 X509v3 Authority Key Identifier: keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:92:1b:7f:36:32:a6:7b:55:cb:b2:17:4e:4a:5d:c7:ae:f4: d5:80:63:ae:ba:80:8d:aa:38:cc:98:1c:13:fc:5e:1f:e6:a9: b8:79:c1:39:2e:0a:a6:38:69:65:a4:6f:0d:b1:41:a6:bd:f1: c2:fe:40:fd:f7:f4:c1:10:7b:b2:60:c6:2f:5b:88:ca:ae:c2: 62:3c:3c:2b:66:fa:9f:6e:d0:52:01:ad:f8:5b:dd:df:90:a1: a6:31:93:67:c3:6d:a4:3e:d7:e3:4c:82:d6:77:44:9f:a9:3c: 33:2c:96:0d:dd:55:a2:42:2f:fc:4f:b0:ac:c5:48:f0:91:61: 65:89:25:b0:cf:c3:db:b3:2f:fc:96:07:c3:55:1d:0e:92:9e: cd:5e:70:b7:07:de:1e:c1:d4:52:c8:70:10:87:d4:b9:a8:7d: ae:97:59:5b:40:60:0a:b6:35:4c:8c:f6:b4:3f:8c:7e:c2:39: b3:75:f0:4b:40:c2:dc:e8:ad:22:20:e5:dc:56:5d:d9:c4:c6: 60:af:59:a0:ae:4d:00:cc:64:e6:3e:90:a8:c4:3c:7b:99:6a: 86:b4:96:70:0f:46:9b:ed:6f:4f:e6:57:95:14:e7:11:14:00: c5:3b:18:4b:37:d6:8f:d6:c4:75:27:3e:d9:6e:51:b0:9e:bf: df:bc:70:d4 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUHv5WgUiR7229+P5wLVUKgWX03EMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThhODdjYWQ1YjcxMDg5MGE5NTI4ZjE2NmY0MjAyMzkz ODI0ZTZiODAeFw0yNTExMDQxMjU0MTFaFw0yNTExMDUxNjMwMTFaMDMxMTAvBgNV BAMTKDBFMzg4NzJBRjA2RDM0RjA0MDZFMENFNkY2QTA3MjQ5MUIyQTJBMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5lOoo989pRD3w0yi3gvvGZX3Y qZ82SNjbnw+KfkqX47An4bJPUifmihe9D8ttYx1EQWt1EitmiMssBPOhzEwVq8PT gumm+LkmkHWBXg5ixYKorUoOgSL2X3SMlyBhMO4MfipQrb8ozQkNBoQ/N6QcrRES bxMRkZu+wwe217L0bAU6a8LHsJ/kuMVlkRxh50h+n7kVuGmCpCuDLD8PW//+sGUp QM3jljxMREdnA53o6w2JAvjoOWlyIAG9Zi7epscsfhLGODphz/2YzkBstxhC7XH1 Ylsa7hVP0Uua/M4Wh1fFX5c6fG8PuHBRJA+6BK6wMgWCo3NyptstKAdw8/yjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUDjiHKvBtNPBAbgzm9qBySRsqKjcwHwYDVR0j BBgwFoAUmKh8rVtxCJCpUo8Wb0ICOTgk5rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUtNGIxYS00NmVhLTljOTUtNGFmMTI5NjRh NDlkLzAvOThBODdDQUQ1QjcxMDg5MEE5NTI4RjE2NkY0MjAyMzkzODI0RTZCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL21LaDhyVnR4Q0pDcFVvOFdiMElDT1Rn azVyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00 YjFhLTQ2ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC85OEE4N0NBRDVCNzEwODkwQTk1 MjhGMTY2RjQyMDIzOTM4MjRFNkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANpIbfzYypntVy7IXTkpd x6701YBjrrqAjao4zJgcE/xeH+apuHnBOS4KpjhpZaRvDbFBpr3xwv5A/ff0wRB7 smDGL1uIyq7CYjw8K2b6n27QUgGt+Fvd35ChpjGTZ8NtpD7X40yC1ndEn6k8MyyW Dd1VokIv/E+wrMVI8JFhZYklsM/D27Mv/JYHw1UdDpKezV5wtwfeHsHUUshwEIfU uah9rpdZW0BgCrY1TIz2tD+MfsI5s3XwS0DC3OitIiDl3FZd2cTGYK9ZoK5NAMxk 5j6QqMQ8e5lqhrSWcA9Gm+1vT+ZXlRTnERQAxTsYSzfWj9bEdSc+2W5RsJ6/37xw 1A== -----END CERTIFICATE-----Generated at Tue Nov 4 14:52:45 2025 by rpki-client