$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft File: E19302BE91C9D4211CDF4AFF091055A173B3593B.mft (raw, json) Hash identifier: /Xbiw+IniwIoJzzM/Xo/IhDVluVIopizP8W/KvOZqzI= Subject key identifier: FB:AB:DE:5F:3A:60:40:9E:A1:FC:AE:54:45:E5:AE:A5:89:58:39:21 Authority key identifier: E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B Certificate issuer: /CN=E19302BE91C9D4211CDF4AFF091055A173B3593B Certificate serial: 02F0DF4CA42EBDB366435E7E4B969CFADFB407BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft Manifest number: A8 Signing time: Tue 04 Nov 2025 09:57:34 +0000 Manifest this update: Tue 04 Nov 2025 09:52:34 +0000 Manifest next update: Wed 05 Nov 2025 11:34:34 +0000 Files and hashes: 1: 326130373a353463313a343230303a3a2f34302d3430203d3e20313939353138.roa (hash: p0V0EhuR94jsdFZ1UsjzKoR4Va7GATjKkx+PVQ3cRs4=) 2: 326130373a353463313a343236313a3a2f34382d3438203d3e203436373636.roa (hash: 7m4uBl7pjkxamzWCFShzOT8dP3zXIx3Ew/sIEJmrOk4=) 3: E19302BE91C9D4211CDF4AFF091055A173B3593B.crl (hash: qnOV3TJ1QXe6nqDPDiNUnhemC+LErN6D6vcsYXA3SJU=) 4: 326130373a353463313a343234323a3a2f34382d3438203d3e20313939353138.roa (hash: BOG3fQtugkiXpKS/p2fTg16ei6qBO6dg8xuWYfodSgU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 11:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:f0:df:4c:a4:2e:bd:b3:66:43:5e:7e:4b:96:9c:fa:df:b4:07:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E19302BE91C9D4211CDF4AFF091055A173B3593B Validity Not Before: Nov 4 09:52:34 2025 GMT Not After : Nov 5 11:34:34 2025 GMT Subject: CN=FBABDE5F3A60409EA1FCAE5445E5AEA589583921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f8:93:3c:a4:25:2d:41:8f:75:ad:26:76:e0: b9:cb:43:48:08:af:9d:26:b2:08:10:87:8f:6e:30: a2:05:45:89:35:6f:96:2d:6b:aa:b6:8a:d4:48:9e: 37:67:70:2f:78:41:1b:fd:d7:48:cc:8c:07:f1:c6: df:d5:a2:86:6e:59:c3:18:f2:86:34:a1:fb:5f:c3: df:15:5b:59:81:65:ec:6a:45:b6:d1:9a:fe:be:35: 14:3c:90:71:dd:dc:91:69:f0:df:c5:d1:e6:e0:be: 9b:99:06:d9:c1:e8:c4:ae:67:f5:44:fc:c9:f6:61: 93:a5:6c:f2:28:c8:cd:4a:ea:17:7c:ab:83:6a:f5: 8b:dc:32:08:76:bd:b8:06:d1:c8:85:c4:e6:18:bf: 28:94:df:33:92:85:a6:12:9b:dc:7c:51:af:b3:d3: 2a:0c:4d:c2:9d:5e:94:30:d2:b0:9c:8a:f7:a7:b2: 48:74:b5:a3:65:23:ab:a1:b3:14:32:22:f6:35:d6: 86:55:ad:03:b6:ed:8a:15:5c:38:70:c2:69:30:dc: 57:d3:22:3f:90:a0:04:07:a6:70:76:21:35:cd:45: c5:a4:02:c1:1a:4b:7d:c2:02:58:16:5d:ef:48:e8: 37:0e:ce:7e:39:2d:ee:81:ee:24:17:3f:4b:d7:48: 06:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AB:DE:5F:3A:60:40:9E:A1:FC:AE:54:45:E5:AE:A5:89:58:39:21 X509v3 Authority Key Identifier: keyid:E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e1:18:26:ed:cb:a8:c5:74:7a:00:dd:95:c0:3e:7c:f1:8b: 61:55:1d:63:ad:67:b7:48:45:2f:dd:db:3e:f9:93:8e:41:10: 47:9d:32:60:27:cb:30:04:1f:50:a6:5e:f5:d0:5d:72:f4:17: c1:a3:1c:85:c8:11:97:9d:51:fc:dd:6b:85:36:f5:90:da:2e: ea:f0:24:7f:80:8a:e6:b1:7a:f0:84:92:21:cc:2c:55:47:f5: 83:74:26:c0:35:90:f2:a2:93:d3:07:79:59:43:13:1f:80:da: 99:98:58:76:0b:a2:b5:ce:65:af:a6:ad:8a:67:37:9c:45:08: eb:5b:0a:21:24:b8:8f:16:9f:ec:73:2a:59:36:bd:83:91:ad: 8a:62:51:d5:ac:ba:ff:b6:c5:0c:6c:2d:68:c7:22:78:4c:e9: c8:02:21:4e:fb:c0:8a:bf:47:56:64:d1:0c:94:f6:77:a2:f7: a0:bd:f2:71:da:b9:7e:11:c3:ef:79:fc:6e:e2:9b:b5:e1:02: c3:07:b4:2b:92:dd:c1:6a:bf:53:7c:79:40:49:f5:04:57:6e: e6:12:0f:ab:b8:9e:a2:a8:45:be:db:0a:0c:6d:14:65:e1:6c: 5c:db:0f:ce:c8:fa:11:81:45:94:72:9d:c3:97:19:50:dc:b0: 26:e5:2a:59 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIUAvDfTKQuvbNmQ15+S5ac+t+0B74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE5MzAyQkU5MUM5RDQyMTFDREY0QUZGMDkxMDU1QTE3 M0IzNTkzQjAeFw0yNTExMDQwOTUyMzRaFw0yNTExMDUxMTM0MzRaMDMxMTAvBgNV BAMTKEZCQUJERTVGM0E2MDQwOUVBMUZDQUU1NDQ1RTVBRUE1ODk1ODM5MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk+JM8pCUtQY91rSZ24LnLQ0gI r50msggQh49uMKIFRYk1b5Yta6q2itRInjdncC94QRv910jMjAfxxt/VooZuWcMY 8oY0oftfw98VW1mBZexqRbbRmv6+NRQ8kHHd3JFp8N/F0ebgvpuZBtnB6MSuZ/VE /Mn2YZOlbPIoyM1K6hd8q4Nq9YvcMgh2vbgG0ciFxOYYvyiU3zOShaYSm9x8Ua+z 0yoMTcKdXpQw0rCcivenskh0taNlI6uhsxQyIvY11oZVrQO27YoVXDhwwmkw3FfT Ij+QoAQHpnB2ITXNRcWkAsEaS33CAlgWXe9I6DcOzn45Le6B7iQXP0vXSAa7AgMB AAGjggKGMIICgjAdBgNVHQ4EFgQU+6veXzpgQJ6h/K5UReWupYlYOSEwHwYDVR0j BBgwFoAU4ZMCvpHJ1CEc30r/CRBVoXOzWTswDgYDVR0PAQH/BAQDAgeAMIGXBgNV HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNm NTBlOC8xMC9FMTkzMDJCRTkxQzlENDIxMUNERjRBRkYwOTEwNTVBMTczQjM1OTNC LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0UxOTMwMkJFOTFDOUQ0MjExQ0RGNEFG RjA5MTA1NUExNzNCMzU5M0IuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYB BQUHMAuGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC8xMC9FMTkz MDJCRTkxQzlENDIxMUNERjRBRkYwOTEwNTVBMTczQjM1OTNCLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA iuEYJu3LqMV0egDdlcA+fPGLYVUdY61nt0hFL93bPvmTjkEQR50yYCfLMAQfUKZe 9dBdcvQXwaMchcgRl51R/N1rhTb1kNou6vAkf4CK5rF68ISSIcwsVUf1g3QmwDWQ 8qKT0wd5WUMTH4DamZhYdguitc5lr6atimc3nEUI61sKISS4jxaf7HMqWTa9g5Gt imJR1ay6/7bFDGwtaMcieEzpyAIhTvvAir9HVmTRDJT2d6L3oL3ycdq5fhHD73n8 buKbteECwwe0K5LdwWq/U3x5QEn1BFdu5hIPq7ieoqhFvtsKDG0UZeFsXNsPzsj6 EYFFlHKdw5cZUNywJuUqWQ== -----END CERTIFICATE-----Generated at Wed Nov 5 03:31:56 2025 by rpki-client