$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft File: F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft (raw, json) Hash identifier: R5edoUOr99/CWQVcZkEOfNlqlXKBB611a+n2UlROPm4= Subject key identifier: 86:4E:AC:38:15:BA:2C:1B:C6:79:54:12:05:D9:DF:18:9B:90:EE:9A Authority key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE Certificate issuer: /CN=f1d0572fe72991bd32854bac716676ebdad22ace Certificate serial: 6B0BEA86ED147758FF2505FF63A4312FAE8DBA06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft Manifest number: 0285 Signing time: Tue 04 Nov 2025 14:45:57 +0000 Manifest this update: Tue 04 Nov 2025 14:40:57 +0000 Manifest next update: Wed 05 Nov 2025 15:55:57 +0000 Files and hashes: 1: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer (hash: Nz2k0o2IS41o55idTp4HvK3uNxIMYgMNKvrr57G+kIE=) 2: 326131333a393634343a31303a3a2f34362d3438203d3e203438313934.roa (hash: WOAaZY65k+/GoeKbXXymPrZVu7CfbDlQvCXqyS0ZjLA=) 3: 326131333a393634343a343030303a3a2f34302d3438203d3e203133333335.roa (hash: 3m2Z/mjozERlCSY+vSBpPSC7mc1wNvFz/UzxCrw2jy0=) 4: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer (hash: nYcdq/fifitjvFyPoNBEJvUP1WGfqAJvzv/Dj2Iivv0=) 5: 326131333a393634343a323232303a3a2f34342d3438203d3e20323134393932.roa (hash: 894RTKAEh4ciZZOdefpuTBSaNDM2TQpQSdGle6pgy08=) 6: 326131333a393634343a34303a3a2f34342d3438203d3e20323136333336.roa (hash: lNHaIlVxi/lYCx53I3+MfwePjUfRoiP0WtejKnMjprU=) 7: F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl (hash: 4Ie1vWRxz9WktcEpvCUQsgH9POQ3SsKTUcjEuqisX7E=) 8: 326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa (hash: e3gM8xBShVESXc8MaKIMDq1iDa8wjJWbHPjdOfhPuFQ=) 9: 326131333a393634303a3a2f34342d3434203d3e203532313132.roa (hash: DOR1Pt3ct68s+ey18ZghPrs5rAUoZlIbwxjvP68BE+k=) 10: 326131333a393634343a343030303a3a2f34302d3438203d3e20323034323931.roa (hash: OXH7kpuguUKmKnwoouN0IGAOMj3E/W/ffH2kJO7vbOY=) 11: 326131333a393634323a3130303a3a2f34382d3438203d3e203438323830.roa (hash: j84/Fm1nc/JJrf9h3dAaKkat+XV/si7APTv6iSnl64I=) 12: 326131333a393634313a3a2f34382d3438203d3e203532313132.roa (hash: 5o2ZOradY5DoOPidcJ775vbaNLbxYZsPfZS6MPweSnY=) 13: 39312e3230372e31332e302f32342d3234203d3e203532313132.roa (hash: +JU+ydXmMjIBHlt1kVXfkJBGqdmH1ATfk8PRfe8t4Rc=) 14: 326131333a393634343a34303a3a2f34342d3438203d3e20323131343331.roa (hash: UQpEpactphMaN3i4tpyR5s9Tmz685dUuNs8hSuG0cJQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 15:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:0b:ea:86:ed:14:77:58:ff:25:05:ff:63:a4:31:2f:ae:8d:ba:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d0572fe72991bd32854bac716676ebdad22ace Validity Not Before: Nov 4 14:40:57 2025 GMT Not After : Nov 5 15:55:57 2025 GMT Subject: CN=864EAC3815BA2C1BC679541205D9DF189B90EE9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:36:c4:e4:69:26:81:1c:88:7e:14:e0:e7:2a: 5b:89:47:05:3b:b3:a0:e4:53:a7:5c:6a:bb:74:5e: f8:64:2b:85:4e:9f:94:e9:6c:6d:db:59:7b:08:a5: 93:af:92:ae:7f:73:35:6d:9f:1e:1e:da:41:12:eb: 0a:ed:68:d9:55:6e:9c:f3:03:37:59:1b:bc:f5:6a: e5:07:4b:ed:d6:55:13:e9:18:c2:ab:8b:48:37:99: a3:ba:21:87:bc:d8:8b:48:bb:2e:a7:b8:6a:b3:49: 63:50:8f:25:d8:bb:fa:77:06:39:57:05:e6:b1:bc: 4f:26:e9:5d:d9:86:8b:cc:87:6b:87:68:4f:24:b0: 4a:fd:81:9f:c2:6b:73:25:db:48:5b:65:83:6f:d7: ea:87:0c:87:23:c3:29:b3:4f:71:61:81:74:fe:97: 9b:ae:96:b4:75:fd:27:ae:42:1c:6b:d9:1d:71:a2: 44:7e:34:52:f4:b1:c3:9b:d5:5e:0c:fd:5d:c0:3c: 09:39:ff:5e:f1:7c:d0:d8:12:9d:e2:d6:91:cd:f6: cd:b3:ff:ac:8e:23:a9:17:48:ed:c0:d5:79:38:f0: 57:69:f5:8f:2d:a6:ee:8a:ec:05:22:74:cc:b9:9b: f1:1b:6f:b0:91:4e:ec:7f:f0:b2:22:4d:5e:5b:bc: 2a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:4E:AC:38:15:BA:2C:1B:C6:79:54:12:05:D9:DF:18:9B:90:EE:9A X509v3 Authority Key Identifier: keyid:F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:f8:8c:04:54:4e:bc:0d:ce:8f:86:55:e9:cf:e0:df:85:73: f4:17:c9:82:bc:a2:f7:b8:a0:66:60:05:bf:72:5a:81:e6:35: d2:9b:b6:b8:13:90:c0:42:d0:68:3e:50:cb:90:13:40:db:17: f7:45:e6:85:ca:27:bc:6b:25:ff:d9:b9:36:b1:21:5d:bf:2e: 38:01:ea:1e:a9:40:b8:1a:67:1d:fc:46:5a:45:cb:94:33:bc: ef:9a:f9:9c:80:c2:1b:11:a6:c1:0f:7e:80:dd:2e:22:a1:24: 43:2b:bc:12:2c:15:5f:2e:bc:90:b7:cf:94:21:81:a1:25:7d: 73:41:c1:d0:ba:5e:4d:81:45:1d:07:6f:61:5e:bf:1a:a5:ed: 6b:37:e3:70:ea:cf:47:50:50:dd:46:db:1f:08:3d:67:4f:98: f6:a6:83:48:c4:3b:0e:c3:37:07:00:3c:9c:20:19:63:25:b8: 23:f6:4a:72:8c:c1:34:89:3e:b4:64:c8:c4:44:ba:96:5c:b4: c8:9d:68:30:ee:b5:78:25:f0:02:0f:12:26:72:27:df:49:d9: d4:3b:05:ea:34:47:6c:52:c7:d1:64:82:07:17:89:8a:f8:91: da:b4:6e:c7:63:ff:65:d9:90:38:17:ad:72:3d:1e:32:d4:3a: ed:e5:14:ed -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUawvqhu0Ud1j/JQX/Y6QxL66NugYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjFkMDU3MmZlNzI5OTFiZDMyODU0YmFjNzE2Njc2ZWJk YWQyMmFjZTAeFw0yNTExMDQxNDQwNTdaFw0yNTExMDUxNTU1NTdaMDMxMTAvBgNV BAMTKDg2NEVBQzM4MTVCQTJDMUJDNjc5NTQxMjA1RDlERjE4OUI5MEVFOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5NsTkaSaBHIh+FODnKluJRwU7 s6DkU6dcart0XvhkK4VOn5TpbG3bWXsIpZOvkq5/czVtnx4e2kES6wrtaNlVbpzz AzdZG7z1auUHS+3WVRPpGMKri0g3maO6IYe82ItIuy6nuGqzSWNQjyXYu/p3BjlX BeaxvE8m6V3ZhovMh2uHaE8ksEr9gZ/Ca3Ml20hbZYNv1+qHDIcjwymzT3FhgXT+ l5uulrR1/SeuQhxr2R1xokR+NFL0scOb1V4M/V3APAk5/17xfNDYEp3i1pHN9s2z /6yOI6kXSO3A1Xk48Fdp9Y8tpu6K7AUidMy5m/Ebb7CRTux/8LIiTV5bvCrhAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUhk6sOBW6LBvGeVQSBdnfGJuQ7powHwYDVR0j BBgwFoAU8dBXL+cpkb0yhUuscWZ269rSKs4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTMwZGU4NGItNDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1 YjQ5LzAvRjFEMDU3MkZFNzI5OTFCRDMyODU0QkFDNzE2Njc2RUJEQUQyMkFDRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkQlhMLWNwa2IweWhVdXNjV1oyNjly U0tzNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00 MDBhLTRmZDEtYWI4YS1lNzYxNmUyNDViNDkvMC9GMUQwNTcyRkU3Mjk5MUJEMzI4 NTRCQUM3MTY2NzZFQkRBRDIyQUNFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALfiMBFROvA3Oj4ZV6c/g 34Vz9BfJgryi97igZmAFv3JageY10pu2uBOQwELQaD5Qy5ATQNsX90XmhconvGsl /9m5NrEhXb8uOAHqHqlAuBpnHfxGWkXLlDO875r5nIDCGxGmwQ9+gN0uIqEkQyu8 EiwVXy68kLfPlCGBoSV9c0HB0LpeTYFFHQdvYV6/GqXtazfjcOrPR1BQ3UbbHwg9 Z0+Y9qaDSMQ7DsM3BwA8nCAZYyW4I/ZKcozBNIk+tGTIxES6lly0yJ1oMO61eCXw Ag8SJnIn30nZ1DsF6jRHbFLH0WSCBxeJiviR2rRux2P/ZdmQOBetcj0eMtQ67eUU 7Q== -----END CERTIFICATE-----Generated at Wed Nov 5 09:09:06 2025 by rpki-client