$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft File: 578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft (raw, json) Hash identifier: T/3954tOT03RSYJX8Cfds/U4VQptQI+MFAlKdGhKxCU= Subject key identifier: A1:3D:36:6F:B0:53:E7:C9:97:08:58:23:19:2A:83:C6:76:F5:27:BF Authority key identifier: 57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3 Certificate issuer: /CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3 Certificate serial: 4999945D73445993C18EFA5AEC05BD4DC2A1D7D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft Manifest number: 0165 Signing time: Wed 05 Nov 2025 05:36:26 +0000 Manifest this update: Wed 05 Nov 2025 05:31:26 +0000 Manifest next update: Thu 06 Nov 2025 06:15:26 +0000 Files and hashes: 1: 3130332e3134372e3135332e302f32342d3234203d3e20323135323936.roa (hash: 54w2F3M9c9ZMYqej/uVTYoc9lVaBw0QpLSZEW7mlB7o=) 2: 323030313a3637633a6533633a3a2f34382d3438203d3e20323135323936.roa (hash: 9+L5QD9C8ye40Ikj2zBEBBChEOO2tsV/W1In9gyAruM=) 3: AS215296.asa (hash: ZUhznpJKsAa9LaDOPMe8wN6G79cK71SOYf6WHfqiJOY=) 4: 578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl (hash: cEL8FPlsAoOF3nRLOnaxPaY1w3Dit1rPNywC8EiMT4w=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:99:94:5d:73:44:59:93:c1:8e:fa:5a:ec:05:bd:4d:c2:a1:d7:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3 Validity Not Before: Nov 5 05:31:26 2025 GMT Not After : Nov 6 06:15:26 2025 GMT Subject: CN=A13D366FB053E7C997085823192A83C676F527BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:37:e3:16:0f:5d:7b:9e:1a:5d:36:ca:8d:e4: d6:25:51:42:e5:b7:1e:a2:77:ee:f5:46:b4:39:2c: d5:7e:ef:35:4e:17:f1:09:71:34:e9:8a:fc:23:65: bd:42:bd:37:a5:78:de:fd:f4:49:ff:4f:06:06:fe: 53:ff:73:b0:c5:72:3a:89:70:87:00:eb:8e:3e:b1: 65:69:c9:be:09:06:a9:dc:e1:62:55:16:09:9e:e2: 77:cd:26:6e:a7:ec:30:4f:ce:7a:16:4f:de:0c:f2: 2b:6b:4c:9e:d0:83:d1:5b:d8:93:1e:7e:47:49:45: 10:cf:56:6f:f6:34:c9:da:7f:ba:5d:e9:7f:54:c9: 0e:64:37:65:e6:33:50:d3:ce:00:6b:4a:88:3f:b1: c0:7b:dd:dd:01:e7:40:ec:3a:12:ec:aa:71:39:c3: 0c:6a:a4:e7:8b:8f:1a:11:57:b3:74:89:e2:af:0f: 6f:5e:8d:27:c5:4a:41:f1:1f:44:2a:e6:d4:d3:9f: b0:3e:03:a9:24:53:f7:b3:79:fa:4c:01:74:8b:3b: 5c:cc:f3:d4:12:09:3e:36:fc:e6:d5:df:08:c5:a5: 19:4f:7b:09:9d:66:ed:55:2b:b2:2c:5b:4d:b1:0e: 20:f3:d6:31:e4:25:aa:28:2a:7a:dd:49:02:73:d0: 3c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3D:36:6F:B0:53:E7:C9:97:08:58:23:19:2A:83:C6:76:F5:27:BF X509v3 Authority Key Identifier: keyid:57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:f6:5c:c2:aa:ca:60:5c:bb:a6:36:03:b8:9e:72:42:3d:bf: 9d:9d:49:c1:7e:be:b5:3b:2a:30:65:ab:a9:fb:b4:7f:0e:7e: 5a:4a:8a:60:16:a2:b2:e0:a3:0c:cd:62:1d:0a:c5:73:41:5a: ed:25:89:52:8b:5c:e4:e8:b1:6a:b1:86:4d:36:5e:90:62:cd: 66:ea:c9:70:6d:d2:ab:28:c3:e2:cf:9c:1d:91:04:7d:30:bb: 3c:e6:e3:d8:bd:29:b2:ee:eb:53:9c:f9:69:80:66:5f:f8:dd: 17:58:37:91:75:b0:22:86:55:11:62:7d:0a:74:d1:7c:29:fe: de:07:88:18:f6:bd:24:33:f6:8d:60:70:ba:2f:08:fc:82:13: e6:ff:97:d1:2d:d6:e0:e1:b4:82:6f:b4:e8:c5:06:6a:77:f1: 97:e8:1c:22:77:8f:5b:d9:3c:f4:4e:8a:1a:9a:47:2e:17:39: 01:48:e9:3e:2f:30:97:89:1f:ac:e9:c7:52:12:15:b2:17:a3: 32:0c:28:d5:db:b0:a5:2c:2a:32:a6:89:f1:6e:6e:f6:f2:a0: 83:ff:d5:be:8f:95:72:f1:a9:f2:d1:4f:29:66:aa:33:db:e7: 2d:ab:84:a0:e6:6c:93:45:8d:07:94:1a:86:bc:a6:da:19:d4: 34:5f:af:c5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUSZmUXXNEWZPBjvpa7AW9TcKh19UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc4ZDdkYzk3NzliMjc4MTVlYmI1YzNmNWZjZjA3Y2M1 ODM3MDhiMzAeFw0yNTExMDUwNTMxMjZaFw0yNTExMDYwNjE1MjZaMDMxMTAvBgNV BAMTKEExM0QzNjZGQjA1M0U3Qzk5NzA4NTgyMzE5MkE4M0M2NzZGNTI3QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3N+MWD117nhpdNsqN5NYlUULl tx6id+71RrQ5LNV+7zVOF/EJcTTpivwjZb1CvTeleN799En/TwYG/lP/c7DFcjqJ cIcA644+sWVpyb4JBqnc4WJVFgme4nfNJm6n7DBPznoWT94M8itrTJ7Qg9Fb2JMe fkdJRRDPVm/2NMnaf7pd6X9UyQ5kN2XmM1DTzgBrSog/scB73d0B50DsOhLsqnE5 wwxqpOeLjxoRV7N0ieKvD29ejSfFSkHxH0Qq5tTTn7A+A6kkU/ezefpMAXSLO1zM 89QSCT42/ObV3wjFpRlPewmdZu1VK7IsW02xDiDz1jHkJaooKnrdSQJz0Dy9AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUoT02b7BT58mXCFgjGSqDxnb1J78wHwYDVR0j BBgwFoAUV419yXebJ4Feu1w/X88HzFg3CLMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWNhMjUzNTAtOWUzZi00NmUxLWFlMmItMWM2MWI2ZWE1 YWUyLzAvNTc4RDdEQzk3NzlCMjc4MTVFQkI1QzNGNUZDRjA3Q0M1ODM3MDhCMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Y0MTl5WGViSjRGZXUxd19YODhIekZn M0NMTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lY2EyNTM1MC05 ZTNmLTQ2ZTEtYWUyYi0xYzYxYjZlYTVhZTIvMC81NzhEN0RDOTc3OUIyNzgxNUVC QjVDM0Y1RkNGMDdDQzU4MzcwOEIzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt/ZcwqrKYFy7pjYDuJ5y Qj2/nZ1JwX6+tTsqMGWrqfu0fw5+WkqKYBaisuCjDM1iHQrFc0Fa7SWJUotc5Oix arGGTTZekGLNZurJcG3SqyjD4s+cHZEEfTC7PObj2L0psu7rU5z5aYBmX/jdF1g3 kXWwIoZVEWJ9CnTRfCn+3geIGPa9JDP2jWBwui8I/IIT5v+X0S3W4OG0gm+06MUG anfxl+gcInePW9k89E6KGppHLhc5AUjpPi8wl4kfrOnHUhIVshejMgwo1duwpSwq MqaJ8W5u9vKgg//Vvo+VcvGp8tFPKWaqM9vnLauEoOZsk0WNB5Qahrym2hnUNF+v xQ== -----END CERTIFICATE-----Generated at Wed Nov 5 08:01:35 2025 by rpki-client