$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft File: F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft (raw, json) Hash identifier: y5DsPyMNX7QEUDB8rS3nFdjmQPyWfCmA18yhyxaKmek= Subject key identifier: 9F:E4:FF:B8:5F:3A:5D:8A:28:58:AB:7D:10:36:E0:22:F8:A0:D2:3A Authority key identifier: F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4 Certificate issuer: /CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4 Certificate serial: 5EEF0D767051B19CDA13902C6F3EDC53A7EBA50F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft Manifest number: 017E Signing time: Fri 24 Oct 2025 10:16:23 +0000 Manifest this update: Fri 24 Oct 2025 10:11:23 +0000 Manifest next update: Sat 25 Oct 2025 13:27:23 +0000 Files and hashes: 1: 326131343a373538303a663334303a3a2f34342d3438203d3e20323133343238.roa (hash: Z7InVHvKI4/fqGkdwdL0zl1WS4Iyc09xlEsVxaD8p5A=) 2: 326131343a373538303a663335303a3a2f34342d3438203d3e20323135343730.roa (hash: QilIoQFDy86/kZThJ8L3yMVtIo9IuLOdGRNLTOrhh2s=) 3: 326131343a373538303a343030303a3a2f33362d3336203d3e20323133343238.roa (hash: f38GGJwA8aLs49rknYyp3/ozCmX5eTGnavOZGUBAqUw=) 4: 326131343a373538303a663331303a3a2f34342d3438203d3e20323134303834.roa (hash: CM6yYKZbtILEkjFEjxVgY2XszlZITvyYfxEqji4AD0c=) 5: 326131343a373538303a663330303a3a2f34302d3430203d3e20323135343730.roa (hash: NYjufeU5nji5tNLR9669xX3/zAC6IxnZWFE8KHjLm6Y=) 6: F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl (hash: anmzf9LlVF6+8rmzfGn2tbt9SiJ2S3LB8BK7ILx6suU=) 7: 326131343a373538303a663330313a3a2f34382d3438203d3e20323135343730.roa (hash: AE4p/Aixbf8sW/I3bLOtRbnycH5RSiNSfyRxjv0S1Bw=) 8: 326131343a373538303a383030303a3a2f33362d3438203d3e20323135343730.roa (hash: eW78302x42s0yWxTWFOWa+EI8gsEah6kU2PGz4oxB3o=) 9: 326131343a373538303a663333303a3a2f34342d3438203d3e20323134303330.roa (hash: xT802+pU8TCiwwtqUkMgmyrnKplgnOIvmjCKunR0EEU=) 10: 326131343a373538303a363030303a3a2f33362d3438203d3e20323039353534.roa (hash: 7bwiHUB+0vEKFxOfRTRz/zFRAxgK1WxBsECd2SJxocI=) 11: 326131343a373538303a663332303a3a2f34342d3434203d3e20323135343730.roa (hash: XgYHMfBb1tBckmqvYy7acYD3hSj36S+vN34vUn5oaD4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Oct 2025 13:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:ef:0d:76:70:51:b1:9c:da:13:90:2c:6f:3e:dc:53:a7:eb:a5:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4 Validity Not Before: Oct 24 10:11:23 2025 GMT Not After : Oct 25 13:27:23 2025 GMT Subject: CN=9FE4FFB85F3A5D8A2858AB7D1036E022F8A0D23A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c7:d1:8e:90:39:ba:85:1a:c8:cb:5e:80:b4: 9d:c1:12:c8:a9:d5:ad:25:66:78:84:4c:45:44:f9: df:47:b7:3f:29:9f:09:53:e2:d5:d4:4d:e6:eb:5a: f9:9d:89:6b:cd:d1:44:1d:c4:fb:a2:62:1e:80:e8: 3a:e9:43:1c:48:77:11:50:cb:fd:65:3f:9a:bf:a2: 21:2a:0d:e7:ba:7b:89:72:cd:4d:ff:31:55:a4:9d: 66:60:f7:1d:22:b9:15:a3:a6:50:67:01:d1:77:77: e6:c1:f4:cf:be:c3:f3:45:00:61:57:a9:b6:3b:1b: d1:a7:45:a6:bc:13:a6:1e:64:88:2a:39:a6:45:80: eb:e1:83:21:19:12:da:26:8b:22:4d:3c:05:d6:74: 13:e8:22:88:1d:6d:aa:3c:79:bd:e7:1b:05:53:91: 0b:ed:0d:ba:6c:e2:b8:c5:0c:6a:1f:3f:6d:2e:f2: c1:ef:02:52:c0:83:63:41:ab:c9:0d:9f:f9:54:79: 31:9c:12:61:03:95:96:3b:8b:82:aa:86:c2:3a:ce: 12:79:e9:74:fc:5c:64:6d:80:13:5a:2a:92:a8:84: 3d:05:09:4d:43:62:da:e7:78:71:6d:d6:fb:15:cc: f0:c8:a5:5e:41:80:65:0d:1f:03:8c:95:ea:2e:54: 77:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E4:FF:B8:5F:3A:5D:8A:28:58:AB:7D:10:36:E0:22:F8:A0:D2:3A X509v3 Authority Key Identifier: keyid:F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:a9:5b:2c:3c:33:ce:fe:13:8f:81:d5:49:88:b1:b3:26:9a: a7:9a:b8:73:77:9d:76:0f:4a:e4:3c:31:8e:66:3c:9d:84:47: 10:11:8c:de:ab:af:49:a7:d1:bf:13:d1:21:29:59:3e:2b:95: 19:46:5b:a5:bf:db:d4:23:74:1d:41:4c:e9:d2:96:e1:3c:94: 7d:47:21:3b:fd:2a:9c:bd:1a:4e:df:96:bd:7a:62:ab:b5:67: d3:10:07:e8:5d:a7:f5:f5:9f:c8:ce:3c:e0:45:83:87:33:7c: 6e:16:00:30:2f:57:8e:7f:53:c1:1f:c1:84:e0:24:aa:83:27: 4a:30:35:2b:61:ff:3a:77:74:96:d1:b3:27:db:c9:79:49:56: c0:28:eb:4c:70:aa:65:48:5b:0b:f2:9b:5c:b9:8a:5e:cd:86: d3:81:aa:d3:f1:a0:ab:1f:ab:62:20:8b:a7:7d:8c:96:1b:2b: cd:73:f5:e1:cc:45:5d:78:15:a2:f0:7e:05:4d:ce:90:b2:26: 0c:91:61:be:8a:4f:3e:fa:83:c1:b2:fe:eb:0d:43:af:13:73: db:8e:ca:69:eb:17:68:63:85:95:10:72:03:2a:b6:09:f7:cd: a1:57:8a:dd:85:9a:f4:17:5d:f2:51:aa:3a:69:f9:77:05:93: 6b:66:74:10 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXu8NdnBRsZzaE5Asbz7cU6frpQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQwMDcyRkZEQzBGMUIxNUE2OUU1QkM3OUEyRjU4OENG OTM5RjRGNDAeFw0yNTEwMjQxMDExMjNaFw0yNTEwMjUxMzI3MjNaMDMxMTAvBgNV BAMTKDlGRTRGRkI4NUYzQTVEOEEyODU4QUI3RDEwMzZFMDIyRjhBMEQyM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8x9GOkDm6hRrIy16AtJ3BEsip 1a0lZniETEVE+d9Htz8pnwlT4tXUTebrWvmdiWvN0UQdxPuiYh6A6DrpQxxIdxFQ y/1lP5q/oiEqDee6e4lyzU3/MVWknWZg9x0iuRWjplBnAdF3d+bB9M++w/NFAGFX qbY7G9GnRaa8E6YeZIgqOaZFgOvhgyEZEtomiyJNPAXWdBPoIogdbao8eb3nGwVT kQvtDbps4rjFDGofP20u8sHvAlLAg2NBq8kNn/lUeTGcEmEDlZY7i4KqhsI6zhJ5 6XT8XGRtgBNaKpKohD0FCU1DYtrneHFt1vsVzPDIpV5BgGUNHwOMleouVHdLAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUn+T/uF86XYooWKt9EDbgIvig0jowHwYDVR0j BBgwFoAU9ABy/9wPGxWmnlvHmi9YjPk59PQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzAvRjQwMDcyRkZEQzBGMUIxNUE2OUU1QkM3OUEyRjU4OENGOTM5RjRGNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNDAwNzJGRkRDMEYxQjE1QTY5RTVCQzc5 QTJGNTg4Q0Y5MzlGNEY0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE5YWE5ZGE3LWYxZTQtNGQ5OC1iZjk1LTlmZGZjZjQ0OGY3Ny8wL0Y0MDA3MkZG REMwRjFCMTVBNjlFNUJDNzlBMkY1ODhDRjkzOUY0RjQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA5qVss PDPO/hOPgdVJiLGzJpqnmrhzd512D0rkPDGOZjydhEcQEYzeq69Jp9G/E9EhKVk+ K5UZRlulv9vUI3QdQUzp0pbhPJR9RyE7/SqcvRpO35a9emKrtWfTEAfoXaf19Z/I zjzgRYOHM3xuFgAwL1eOf1PBH8GE4CSqgydKMDUrYf86d3SW0bMn28l5SVbAKOtM cKplSFsL8ptcuYpezYbTgarT8aCrH6tiIIunfYyWGyvNc/XhzEVdeBWi8H4FTc6Q siYMkWG+ik8++oPBsv7rDUOvE3Pbjspp6xdoY4WVEHIDKrYJ982hV4rdhZr0F13y Uao6afl3BZNrZnQQ -----END CERTIFICATE-----Generated at Sat Oct 25 04:36:33 2025 by rpki-client