$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft File: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft (raw, json) Hash identifier: bEKkK4vy02dMEhN4YBFHr267Lg3OpBfiyP9QY4shkYQ= Subject key identifier: 3F:F1:95:5C:37:08:A8:4F:82:EF:B8:D5:F8:9C:89:DF:5D:54:50:13 Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Certificate serial: 38F6BCC811EFE9E53AABC76EF4E0DB4E1CC2A213 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft Manifest number: 046D Signing time: Tue 04 Nov 2025 12:52:06 +0000 Manifest this update: Tue 04 Nov 2025 12:47:06 +0000 Manifest next update: Wed 05 Nov 2025 14:33:06 +0000 Files and hashes: 1: 34362e3130322e3233332e302f32342d3234203d3e203233383635.roa (hash: e+SnYwDfi/1yFie63JthDdkoXVxOgCTXFxhh6sC9If8=) 2: 39332e3131332e32352e302f32342d3234203d3e20323134323039.roa (hash: JoDR/IGOmrYGEwu1+N5VZtYwQlvGeImnksk34tLzkIU=) 3: 38392e34322e3131302e302f32342d3234203d3e203631333137.roa (hash: VsyHwXGnPa9jTtnErp0xUSN9uxae8b2L7otiSzP7S2M=) 4: 3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa (hash: nmhaoLhqUBAnDccEuteaqmwjmYCIqjMWJmqWnwMVbc8=) 5: 3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa (hash: OZBNVOvtp3V7O1L8kF6JcTp/niAHFDMwWI3RV/AoyZY=) 6: 34362e3130322e3233322e302f32342d3234203d3e203231383539.roa (hash: xmss+X7N7YEJYzsofqDqdmVc6hQlkz4fI2F5jzOV+w0=) 7: 37372e38312e3133382e302f32342d3234203d3e203136323736.roa (hash: QSH/lbFqFfB0kjPH8NXF1ssxXFJMA3tQTCmwcMlSfAQ=) 8: 39332e3131332e3231322e302f32342d3234203d3e203631333137.roa (hash: Mffmj9tigk0AvK8qUYEb5eCtUKaC20yQi7QyJq/JmDA=) 9: 37372e38312e3133372e302f32342d3234203d3e20333939363431.roa (hash: xL9s9lGr6Y1GcoWPNRfoiIg5P1LyMl92tRndWKMRxvY=) 10: 3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa (hash: g8GfxZyUsq5sAHB2Ct+7Z9GS7IIVHVNG2gaO8plmjSA=) 11: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl (hash: +EDic5V7bmnSbdx8IgHVCJ2SKrG8FEvvF9BNeSzJeD8=) 12: 38392e34322e3131312e302f32342d3234203d3e203631333137.roa (hash: T+9QQX64dOYanRzHKI9rhWnUyaZt9GgRQXrvhvIBrgs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 14:33:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:f6:bc:c8:11:ef:e9:e5:3a:ab:c7:6e:f4:e0:db:4e:1c:c2:a2:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Validity Not Before: Nov 4 12:47:06 2025 GMT Not After : Nov 5 14:33:06 2025 GMT Subject: CN=3FF1955C3708A84F82EFB8D5F89C89DF5D545013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:12:ac:20:dc:72:e1:92:77:7f:3c:de:26:c8: 7a:b3:e0:38:05:11:88:a3:6d:e8:bf:a3:db:61:fb: 67:c1:50:8c:18:b5:c0:75:6f:30:b2:fe:c1:ba:9c: 58:08:76:78:da:b6:a8:71:02:d7:1a:a3:dc:32:ca: ad:eb:e3:2b:c6:99:c0:26:5a:e9:fe:23:5c:2f:e4: 89:14:9d:ba:dc:0a:32:68:a6:93:65:4b:3a:3a:ea: 2a:12:dd:71:93:56:42:39:59:80:a9:c1:3c:4b:ea: 1e:d5:fd:c8:3a:7f:e3:c9:74:f8:42:a6:c4:5c:9b: 58:62:36:03:4b:ef:6d:1f:36:fb:5a:50:0f:27:ce: 50:1f:a5:4a:5c:f1:9b:b3:7f:0c:4f:59:6f:3e:78: e9:f7:14:72:05:b3:7c:c6:15:53:d9:94:f6:45:61: b3:3a:ff:68:ac:d0:6a:03:fb:6d:6f:5b:a0:0c:5b: 80:a3:a0:23:67:11:c2:91:f1:5b:8d:f7:25:47:37: f1:46:52:d2:91:3b:41:3e:5b:5e:e4:a3:e4:30:cc: d5:05:d7:c6:71:fc:4d:9a:cb:89:88:97:52:3d:8a: 74:2e:32:9e:27:23:2d:36:51:bb:a3:89:b8:62:35: 28:7e:57:77:a6:86:59:5a:75:90:e1:20:76:35:14: dd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F1:95:5C:37:08:A8:4F:82:EF:B8:D5:F8:9C:89:DF:5D:54:50:13 X509v3 Authority Key Identifier: keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:65:7d:8a:a0:d9:e3:9a:09:8e:c4:19:d1:bc:f5:dc:16:61: 6c:a7:6a:58:bf:59:a2:e5:26:13:6d:f5:f6:15:13:ea:4c:13: a7:1f:b3:5b:29:b2:10:80:d2:01:d7:50:49:f1:9b:5f:8f:b3: 25:ee:be:6c:a5:89:08:55:32:c9:e1:a3:a4:14:a4:97:25:e8: ee:7a:63:48:62:1a:f4:75:2d:e1:fd:45:28:db:fc:b8:07:13: 29:1e:2f:dd:83:99:67:07:c6:22:21:77:51:05:cf:20:6f:ac: a5:65:dc:20:b7:ab:bc:03:6a:37:7b:ee:44:ac:97:c6:18:e7: 51:d7:67:a3:85:0e:d3:41:50:d7:b5:6e:d6:5b:24:22:40:f0: 90:1e:2e:78:7b:9d:27:c9:df:3c:ef:b0:00:5e:c9:dd:8c:6b: dd:cd:1c:74:a7:43:4c:57:77:ad:04:41:f3:5b:7b:e3:ed:96: 9e:75:2d:68:47:55:29:a0:73:8b:7a:d3:48:69:c9:25:98:d3: 31:32:19:66:ff:03:bf:a2:7a:21:29:5b:30:70:92:9e:42:0e: 63:2d:1c:4a:38:4e:14:43:d3:d1:3c:0b:79:9d:a3:7c:1a:21: dd:5a:0e:29:b5:f0:58:30:76:45:49:64:6c:a2:31:e7:a8:61: 4e:74:e1:d1 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOPa8yBHv6eU6q8du9ODbThzCohMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi ZmEyY2NhNDAeFw0yNTExMDQxMjQ3MDZaFw0yNTExMDUxNDMzMDZaMDMxMTAvBgNV BAMTKDNGRjE5NTVDMzcwOEE4NEY4MkVGQjhENUY4OUM4OURGNUQ1NDUwMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Eqwg3HLhknd/PN4myHqz4DgF EYijbei/o9th+2fBUIwYtcB1bzCy/sG6nFgIdnjatqhxAtcao9wyyq3r4yvGmcAm Wun+I1wv5IkUnbrcCjJoppNlSzo66ioS3XGTVkI5WYCpwTxL6h7V/cg6f+PJdPhC psRcm1hiNgNL720fNvtaUA8nzlAfpUpc8ZuzfwxPWW8+eOn3FHIFs3zGFVPZlPZF YbM6/2is0GoD+21vW6AMW4CjoCNnEcKR8VuN9yVHN/FGUtKRO0E+W17ko+QwzNUF 18Zx/E2ay4mIl1I9inQuMp4nIy02UbujibhiNSh+V3emhlladZDhIHY1FN1HAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUP/GVXDcIqE+C77jV+JyJ311UUBMwHwYDVR0j BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt aXpLUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYTBkZTk3Zi03 ZWU4LTRjZTAtYjA0NS1lZmFjOGMyNDNjNzkvMC9FRDlFREIyQTE1ODcxNzg1RkJB RTM4RTIzQzM4ODIwREJGQTJDQ0E0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeWV9iqDZ45oJjsQZ0bz1 3BZhbKdqWL9ZouUmE2319hUT6kwTpx+zWymyEIDSAddQSfGbX4+zJe6+bKWJCFUy yeGjpBSklyXo7npjSGIa9HUt4f1FKNv8uAcTKR4v3YOZZwfGIiF3UQXPIG+spWXc ILervANqN3vuRKyXxhjnUddno4UO00FQ17Vu1lskIkDwkB4ueHudJ8nfPO+wAF7J 3Yxr3c0cdKdDTFd3rQRB81t74+2WnnUtaEdVKaBzi3rTSGnJJZjTMTIZZv8Dv6J6 ISlbMHCSnkIOYy0cSjhOFEPT0TwLeZ2jfBoh3VoOKbXwWDB2RUlkbKIx56hhTnTh 0Q== -----END CERTIFICATE-----Generated at Tue Nov 4 21:05:33 2025 by rpki-client