$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft File: 47E9555355C6B007AACD5D45BF41E3383E991641.mft (raw, json) Hash identifier: zaE9VVMjjH05/cS5FjNqikN1+D7l6KoJ6I3JWauaC4A= Subject key identifier: 8B:CC:38:C7:31:BE:65:89:DE:4D:F3:90:C8:C6:43:21:4A:85:CD:C4 Authority key identifier: 47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41 Certificate issuer: /CN=47E9555355C6B007AACD5D45BF41E3383E991641 Certificate serial: 76FB0DA4D2D7612477157AA9B879808725B10704 Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft Manifest number: 049A Signing time: Wed 05 Nov 2025 07:07:36 +0000 Manifest this update: Wed 05 Nov 2025 07:02:36 +0000 Manifest next update: Thu 06 Nov 2025 07:23:36 +0000 Files and hashes: 1: 47E9555355C6B007AACD5D45BF41E3383E991641.crl (hash: LQyt61qoSO7e44g8/iMGH2aHZsEhp/6OvywiV5vOlWM=) 2: 3139382e3138302e3135312e302f32342d3234203d3e20313939353138.roa (hash: 3ipGYMDZ54FZdaI4eg46OMa/ZV0a0Q3rHUY9RUekrv8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 13:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:fb:0d:a4:d2:d7:61:24:77:15:7a:a9:b8:79:80:87:25:b1:07:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47E9555355C6B007AACD5D45BF41E3383E991641 Validity Not Before: Nov 5 07:02:36 2025 GMT Not After : Nov 6 07:23:36 2025 GMT Subject: CN=8BCC38C731BE6589DE4DF390C8C643214A85CDC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6d:85:f6:84:bb:54:87:c1:cf:ec:3e:fa:9d: e9:d8:c5:95:35:c4:b5:ca:23:04:fd:0d:49:ed:75: e5:a6:59:d9:cd:52:5a:84:df:99:5d:93:76:1a:05: 2d:a6:af:45:e6:a0:d5:b5:08:da:5c:be:18:2b:7f: f3:27:18:a6:25:34:22:64:f2:a6:a2:7d:e8:e4:26: d4:4c:0f:78:b0:06:38:5f:c9:86:80:81:66:be:bd: 42:d0:78:85:bb:39:00:e6:74:61:8b:f9:a8:ad:b1: f8:e4:74:76:53:58:27:0d:68:0e:e6:88:41:6e:b0: b1:3b:1c:34:12:a3:f9:a7:72:c8:78:a0:c2:99:b2: 38:52:91:35:c6:ff:ac:78:40:e2:9d:04:ba:80:a5: c2:3a:26:da:fe:94:15:43:9f:7f:9e:cc:b1:62:f9: 4d:4e:d3:af:3f:c6:f5:67:fe:61:f7:32:05:96:47: ba:6b:e5:81:ec:f8:57:cb:1d:ef:28:bb:ee:c6:4b: 7d:c5:78:b2:a0:57:85:30:39:eb:9a:86:6f:aa:e8: 69:39:ca:29:e1:f2:10:67:12:74:0a:1f:99:a5:70: 62:0b:63:3a:13:17:34:e7:33:07:28:35:33:06:5c: 5e:2c:3c:fe:8f:2d:d2:3b:56:60:1f:45:3b:56:44: d5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CC:38:C7:31:BE:65:89:DE:4D:F3:90:C8:C6:43:21:4A:85:CD:C4 X509v3 Authority Key Identifier: keyid:47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:8b:0a:1b:38:27:77:41:36:23:96:75:6e:7e:59:7e:fa:74: 42:8f:37:b2:8f:f1:1f:d8:c0:56:66:98:56:43:44:58:e5:9f: 66:47:0d:24:4d:fb:29:94:aa:45:da:b7:b3:52:c2:fd:2f:45: ce:2a:ae:a7:aa:12:85:05:c6:ed:a7:9d:c2:31:ba:11:0d:e2: 62:0c:28:5b:b6:60:95:a4:83:28:b0:b4:a0:a6:45:9b:d0:e2: a4:41:7e:c0:58:fa:a0:bd:bb:19:ef:2b:f3:58:e7:3b:cb:b1: 9e:5c:46:37:3f:bc:8b:01:da:b5:fc:a9:d2:77:73:71:75:a9: e7:64:61:15:56:f2:f6:82:84:b4:04:28:f2:7e:92:ea:1a:2c: 1e:cc:27:86:64:9b:ab:59:92:da:f6:ab:45:db:37:09:65:95: 09:84:0e:3c:35:70:d5:32:9c:a7:e5:cf:5a:b0:c3:ad:66:df: 8b:c4:70:c4:a3:f5:70:fe:4e:4f:14:a1:b9:16:0a:88:9c:54: 25:ca:65:49:fe:e4:b2:c5:06:a1:97:d1:36:af:31:9d:4d:3f: f8:5b:01:cb:d6:85:9f:d6:5c:5d:69:60:69:18:e3:00:48:0d: 84:93:0c:b4:78:ad:fe:39:44:d9:c7:15:fc:8a:61:d8:4b:a4: 78:62:b4:49 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUdvsNpNLXYSR3FXqpuHmAhyWxBwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdFOTU1NTM1NUM2QjAwN0FBQ0Q1RDQ1QkY0MUUzMzgz RTk5MTY0MTAeFw0yNTExMDUwNzAyMzZaFw0yNTExMDYwNzIzMzZaMDMxMTAvBgNV BAMTKDhCQ0MzOEM3MzFCRTY1ODlERTRERjM5MEM4QzY0MzIxNEE4NUNEQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDbYX2hLtUh8HP7D76nenYxZU1 xLXKIwT9DUntdeWmWdnNUlqE35ldk3YaBS2mr0XmoNW1CNpcvhgrf/MnGKYlNCJk 8qaifejkJtRMD3iwBjhfyYaAgWa+vULQeIW7OQDmdGGL+aitsfjkdHZTWCcNaA7m iEFusLE7HDQSo/mncsh4oMKZsjhSkTXG/6x4QOKdBLqApcI6Jtr+lBVDn3+ezLFi +U1O068/xvVn/mH3MgWWR7pr5YHs+FfLHe8ou+7GS33FeLKgV4UwOeuahm+q6Gk5 yinh8hBnEnQKH5mlcGILYzoTFzTnMwcoNTMGXF4sPP6PLdI7VmAfRTtWRNV3AgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUi8w4xzG+ZYneTfOQyMZDIUqFzcQwHwYDVR0j BBgwFoAUR+lVU1XGsAeqzV1Fv0HjOD6ZFkEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzQvNDdFOTU1NTM1NUM2QjAwN0FBQ0Q1RDQ1QkY0MUUzMzgzRTk5MTY0MS5j cmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJnLm5l dC9ycGtpL1JHbmV0LU9VL1ItbFZVMVhHc0FlcXpWMUZ2MEhqT0Q2WkZrRS5jZXIw gZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9yc3luYy5w YWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZTdkNTVmNy1lZTYwLTQwMDUt YmFkNy1iNDI4MThjZjUwZTgvNC80N0U5NTU1MzU1QzZCMDA3QUFDRDVENDVCRjQx RTMzODNFOTkxNjQxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAE oAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ4sKGzgnd0E2I5Z1bn5Zfvp0Qo83so/x H9jAVmaYVkNEWOWfZkcNJE37KZSqRdq3s1LC/S9Fziqup6oShQXG7aedwjG6EQ3i YgwoW7ZglaSDKLC0oKZFm9DipEF+wFj6oL27Ge8r81jnO8uxnlxGNz+8iwHatfyp 0ndzcXWp52RhFVby9oKEtAQo8n6S6hosHswnhmSbq1mS2varRds3CWWVCYQOPDVw 1TKcp+XPWrDDrWbfi8RwxKP1cP5OTxShuRYKiJxUJcplSf7kssUGoZfRNq8xnU0/ +FsBy9aFn9ZcXWlgaRjjAEgNhJMMtHit/jlE2ccV/Iph2EukeGK0SQ== -----END CERTIFICATE-----Generated at Wed Nov 5 08:59:21 2025 by rpki-client