$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.mft File: 9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.mft (raw, json) Hash identifier: bPaFjAtZ5R8Ybk852KgQK61gbIMHAdq2f5/X5XQIQ4A= Subject key identifier: 66:B0:57:1C:04:27:AD:29:01:48:8C:33:97:50:D0:E2:3F:C6:EC:B4 Authority key identifier: 9F:70:42:C3:B3:8A:2A:4D:AB:75:63:37:12:2A:D2:B9:27:DD:6D:E0 Certificate issuer: /CN=9F7042C3B38A2A4DAB756337122AD2B927DD6DE0 Certificate serial: 3282D5E1E7A504297000A35ABD817EB95FAA3864 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.mft Manifest number: 0B Signing time: Wed 05 Nov 2025 02:10:42 +0000 Manifest this update: Wed 05 Nov 2025 02:05:42 +0000 Manifest next update: Thu 06 Nov 2025 02:40:42 +0000 Files and hashes: 1: 326130663a316363363a623130303a3a2f34382d3438203d3e20323034323131.roa (hash: kcBH+Ogl01nsOgG3HryBqdbGSLDfahkEBR0qTx6CAUE=) 2: 9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.crl (hash: JuXtIKkOgpVl6BeudUSIpqAbfXDOMbz/B5uymYWrz/w=) 3: 326130663a316363363a623130313a3a2f34382d3438203d3e20323034323131.roa (hash: yR4jIuH1uOto53/FVJqoU4dWw+RXmC+xa4CHfSkTFrE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.mft rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.crl rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.mft rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.cer rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 02:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:82:d5:e1:e7:a5:04:29:70:00:a3:5a:bd:81:7e:b9:5f:aa:38:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F7042C3B38A2A4DAB756337122AD2B927DD6DE0 Validity Not Before: Nov 5 02:05:42 2025 GMT Not After : Nov 6 02:40:42 2025 GMT Subject: CN=66B0571C0427AD2901488C339750D0E23FC6ECB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:91:23:f0:9b:e6:a4:3b:43:cc:70:dd:86:76: db:b9:82:95:e9:78:b3:c3:c7:23:0f:7d:e5:fa:47: 8c:b2:8e:f4:d0:1c:3f:a9:d1:ee:c8:a8:97:e9:7c: 9d:5b:51:11:c6:2e:d4:a6:81:fb:5e:38:a4:a9:d4: 1f:e5:1f:0c:fc:1b:9d:5b:4d:04:9f:24:54:5d:28: c3:c5:41:5c:3f:12:47:8b:7d:a7:69:8e:22:3f:c5: 6c:84:4f:22:e0:6e:99:0a:79:d8:4c:05:2a:f0:11: 69:d1:88:16:50:08:6f:bd:4a:54:65:42:3c:b9:a6: 4b:16:4f:65:1d:c2:33:74:5a:50:4a:64:7c:40:f1: a9:6a:14:10:3f:b8:4f:0d:02:93:bb:d7:06:97:01: 99:d9:1d:99:1c:37:6e:08:ff:3f:ad:38:92:fd:f9: 82:f6:51:83:1a:f0:0f:14:c4:11:a0:75:3b:d2:f2: c1:b9:74:e9:64:85:45:75:0f:24:a8:32:f7:05:e7: 7c:67:4c:cc:d6:77:3a:45:be:c2:79:0e:07:17:bd: 8f:f7:83:48:5b:73:de:d6:16:96:51:1f:18:da:56: 4f:92:bc:5d:18:95:c4:78:c3:1f:eb:1e:06:86:fd: ef:d1:25:97:f7:66:8a:d3:bb:be:27:0b:49:60:90: 64:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B0:57:1C:04:27:AD:29:01:48:8C:33:97:50:D0:E2:3F:C6:EC:B4 X509v3 Authority Key Identifier: keyid:9F:70:42:C3:B3:8A:2A:4D:AB:75:63:37:12:2A:D2:B9:27:DD:6D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:1c:b8:aa:a8:55:be:22:6a:94:c0:6f:2d:09:80:02:be:7f: 8b:96:6c:bb:b0:e6:6d:9a:1f:37:55:97:cc:c2:39:d2:e9:c7: 0b:85:f8:6b:25:5a:6c:94:eb:f9:51:d9:31:69:4b:93:a1:a6: eb:65:3a:55:46:4a:27:39:4d:a4:16:b8:40:ff:31:fb:ed:2a: 07:4e:1a:90:64:6e:6e:b2:66:4c:c3:84:a2:a0:86:0e:01:8d: 8f:bb:13:86:97:68:41:26:fe:66:7d:88:2d:68:d4:a3:a6:4c: 50:45:dd:b9:bc:c6:a6:2b:6f:b7:32:74:d7:a6:26:2c:29:f8: fe:08:de:61:a3:19:22:94:f8:86:8d:03:c9:a3:69:1b:37:55: 62:3f:d0:be:b9:cb:97:eb:40:3d:8d:5b:18:d3:64:97:7e:80: 2c:23:10:71:4d:ce:ff:f9:18:ce:c5:93:3f:23:fc:e3:66:a1: ea:42:fe:85:fe:69:bd:55:44:90:b4:8c:d6:8c:28:62:40:73: 98:56:0d:a6:d4:b2:72:4c:59:39:eb:24:62:d5:14:da:6a:69: 3b:f5:70:b4:98:a0:8d:aa:7c:d7:fd:2c:b9:89:51:8a:e2:d5: d8:de:1a:14:f9:e7:17:4d:75:fd:ac:c1:b0:f4:f3:23:29:fa: e1:a7:f3:8f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUMoLV4eelBClwAKNavYF+uV+qOGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY3MDQyQzNCMzhBMkE0REFCNzU2MzM3MTIyQUQyQjky N0RENkRFMDAeFw0yNTExMDUwMjA1NDJaFw0yNTExMDYwMjQwNDJaMDMxMTAvBgNV BAMTKDY2QjA1NzFDMDQyN0FEMjkwMTQ4OEMzMzk3NTBEMEUyM0ZDNkVDQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCckSPwm+akO0PMcN2Gdtu5gpXp eLPDxyMPfeX6R4yyjvTQHD+p0e7IqJfpfJ1bURHGLtSmgfteOKSp1B/lHwz8G51b TQSfJFRdKMPFQVw/EkeLfadpjiI/xWyETyLgbpkKedhMBSrwEWnRiBZQCG+9SlRl Qjy5pksWT2UdwjN0WlBKZHxA8alqFBA/uE8NApO71waXAZnZHZkcN24I/z+tOJL9 +YL2UYMa8A8UxBGgdTvS8sG5dOlkhUV1DySoMvcF53xnTMzWdzpFvsJ5DgcXvY/3 g0hbc97WFpZRHxjaVk+SvF0YlcR4wx/rHgaG/e/RJZf3ZorTu74nC0lgkGQDAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUZrBXHAQnrSkBSIwzl1DQ4j/G7LQwHwYDVR0j BBgwFoAUn3BCw7OKKk2rdWM3EirSuSfdbeAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzAvOUY3MDQyQzNCMzhBMkE0REFCNzU2MzM3MTIyQUQyQjkyN0RENkRFMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84N2Q4ZGI3MS1hNWJlLTQ2 NGMtYThiOS04YjdiMzc0YWUzZmEvMi85RjcwNDJDM0IzOEEyQTREQUI3NTYzMzcx MjJBRDJCOTI3REQ2REUwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y1MzJiOWViLTJmYWUtNDhhOC05NzkzLTMzZWVjMDY3Y2UzOS8wLzlGNzA0MkMz QjM4QTJBNERBQjc1NjMzNzEyMkFEMkI5MjdERDZERTAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCcHLiq qFW+ImqUwG8tCYACvn+Llmy7sOZtmh83VZfMwjnS6ccLhfhrJVpslOv5UdkxaUuT oabrZTpVRkonOU2kFrhA/zH77SoHThqQZG5usmZMw4SioIYOAY2PuxOGl2hBJv5m fYgtaNSjpkxQRd25vMamK2+3MnTXpiYsKfj+CN5hoxkilPiGjQPJo2kbN1ViP9C+ ucuX60A9jVsY02SXfoAsIxBxTc7/+RjOxZM/I/zjZqHqQv6F/mm9VUSQtIzWjChi QHOYVg2m1LJyTFk56yRi1RTaamk79XC0mKCNqnzX/Sy5iVGK4tXY3hoU+ecXTXX9 rMGw9PMjKfrhp/OP -----END CERTIFICATE-----Generated at Wed Nov 5 10:20:07 2025 by rpki-client