$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft File: A4A082EAE8EF48C7B407C40E742479EADD862089.mft (raw, json) Hash identifier: wHtuxH0RT4b79p1DqRk1fMUs1vQGJfvtKb8oxR8kUcM= Subject key identifier: 08:E5:80:41:A9:28:C1:E2:5D:E1:00:87:0C:18:53:4F:9A:63:2D:D7 Authority key identifier: A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 Certificate issuer: /CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Certificate serial: 5FBAFE757141D92545B7F24E597380E4FFC09594 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft Manifest number: 015F Signing time: Fri 24 Oct 2025 22:16:23 +0000 Manifest this update: Fri 24 Oct 2025 22:11:23 +0000 Manifest next update: Sat 25 Oct 2025 23:35:23 +0000 Files and hashes: 1: A4A082EAE8EF48C7B407C40E742479EADD862089.crl (hash: rw3Vxz6AyMo4URoof4pySw8hpeIU9JP5OJ+zL2tdA+I=) 2: 326130663a383563313a3339303a3a2f34382d3438203d3e20323135343730.roa (hash: /ul2/wI6OjmF90yvjh37x7TtdkRoh3MUQv78SD8t7W0=) 3: 326130663a383563313a6234643a3a2f34382d3438203d3e20323133343238.roa (hash: MorJ8/zqWP+ENMZ78Dfg8lahRlU/VfcwHwmQyMuE7hc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Oct 2025 23:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:ba:fe:75:71:41:d9:25:45:b7:f2:4e:59:73:80:e4:ff:c0:95:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Validity Not Before: Oct 24 22:11:23 2025 GMT Not After : Oct 25 23:35:23 2025 GMT Subject: CN=08E58041A928C1E25DE100870C18534F9A632DD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8e:ed:ed:97:1f:c3:a5:e4:6b:44:bb:bf:37: c5:b5:60:77:ab:32:e0:a7:c3:ae:b9:1e:2c:26:47: f8:99:7d:bb:88:62:e7:17:80:06:9e:2e:fa:04:0f: 0a:55:b4:3f:fd:e9:af:45:94:36:c8:fc:ac:97:ab: 44:b0:8b:71:48:1d:0e:83:35:d2:01:2a:69:74:28: 57:eb:8d:1e:a4:d9:16:92:33:60:24:c8:91:be:65: b7:bf:ed:22:2f:cf:4c:0d:94:52:78:fa:6b:de:a2: e1:7a:f3:6f:e3:da:79:94:61:e7:e6:ea:6d:8c:48: 18:92:97:66:de:31:d4:f0:3c:7b:76:0a:92:d2:02: 25:d3:b8:24:44:5b:39:32:1d:5a:90:90:4a:02:e9: 07:c0:79:b5:2c:4e:db:44:da:46:fb:6b:50:02:fa: b2:fa:e2:b1:2c:ba:1c:c3:5d:91:cb:be:c1:26:15: ea:8a:96:99:9f:15:8e:eb:64:85:e8:22:51:12:5e: 8b:30:35:22:3d:b3:f0:ab:c2:39:3f:d1:1c:a8:6a: 30:2b:54:61:8b:0e:64:94:cc:3a:45:46:92:72:c6: fd:f3:31:ae:b0:e4:92:93:9f:2b:8b:4c:ef:df:6f: ad:d3:20:11:ad:f8:34:43:19:63:34:6f:fe:6f:02: 78:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E5:80:41:A9:28:C1:E2:5D:E1:00:87:0C:18:53:4F:9A:63:2D:D7 X509v3 Authority Key Identifier: keyid:A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:87:69:31:d6:e4:02:b8:52:f8:3f:37:f7:45:b2:60:af:b3: 27:18:5d:25:c2:7b:08:1c:c1:55:71:d4:ba:e1:3d:b8:e5:39: fc:a6:39:a6:d9:96:29:ba:6c:c6:d6:81:1b:bd:4c:f2:ff:c3: 85:50:85:07:66:28:4d:2c:ff:b9:30:02:b1:d8:a6:79:46:4b: 29:31:70:f0:d4:ae:17:15:55:39:d3:26:65:19:33:04:b2:be: 0a:0a:39:a5:ae:7a:3d:20:8f:03:33:57:b5:35:6d:34:30:0e: 96:2a:aa:c8:e9:cd:ad:b3:3d:93:15:d9:96:fe:9b:f8:ea:9b: da:b0:cf:06:db:b4:50:e7:47:80:b0:47:f8:e9:da:f7:d1:ec: eb:86:24:bd:0d:9b:14:6a:d8:e8:f4:a5:1a:3c:88:d7:d4:16: d2:8b:84:39:85:fb:27:d2:69:be:e6:d5:5b:4d:21:97:5d:a0: 89:ac:61:14:49:a0:2f:09:73:c1:28:d5:a2:99:a8:79:d8:71: 5c:1f:41:65:0f:b0:1f:d5:ea:9b:42:ea:88:7b:8e:28:39:75: 80:cd:87:7c:cd:d7:7f:f5:0c:39:1d:59:d8:1b:4d:ad:a4:5a: c9:4a:50:7e:ba:5a:0b:7f:b5:9a:c9:83:f9:ec:bb:f9:34:6e: bd:0e:d0:84 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUX7r+dXFB2SVFt/JOWXOA5P/AlZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFE RDg2MjA4OTAeFw0yNTEwMjQyMjExMjNaFw0yNTEwMjUyMzM1MjNaMDMxMTAvBgNV BAMTKDA4RTU4MDQxQTkyOEMxRTI1REUxMDA4NzBDMTg1MzRGOUE2MzJERDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfju3tlx/DpeRrRLu/N8W1YHer MuCnw665HiwmR/iZfbuIYucXgAaeLvoEDwpVtD/96a9FlDbI/KyXq0Swi3FIHQ6D NdIBKml0KFfrjR6k2RaSM2AkyJG+Zbe/7SIvz0wNlFJ4+mveouF682/j2nmUYefm 6m2MSBiSl2beMdTwPHt2CpLSAiXTuCREWzkyHVqQkEoC6QfAebUsTttE2kb7a1AC +rL64rEsuhzDXZHLvsEmFeqKlpmfFY7rZIXoIlESXoswNSI9s/Crwjk/0RyoajAr VGGLDmSUzDpFRpJyxv3zMa6w5JKTnyuLTO/fb63TIBGt+DRDGWM0b/5vAnh9AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUCOWAQakoweJd4QCHDBhTT5pjLdcwHwYDVR0j BBgwFoAUpKCC6ujvSMe0B8QOdCR56t2GIIkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzEvQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFERDg2MjA4OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9BNEEwODJFQUU4RUY0OEM3QjQwN0M0MEU3 NDI0NzlFQUREODYyMDg5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE5YWE5ZGE3LWYxZTQtNGQ5OC1iZjk1LTlmZGZjZjQ0OGY3Ny8xL0E0QTA4MkVB RThFRjQ4QzdCNDA3QzQwRTc0MjQ3OUVBREQ4NjIwODkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCYh2kx 1uQCuFL4Pzf3RbJgr7MnGF0lwnsIHMFVcdS64T245Tn8pjmm2ZYpumzG1oEbvUzy /8OFUIUHZihNLP+5MAKx2KZ5RkspMXDw1K4XFVU50yZlGTMEsr4KCjmlrno9II8D M1e1NW00MA6WKqrI6c2tsz2TFdmW/pv46pvasM8G27RQ50eAsEf46dr30ezrhiS9 DZsUatjo9KUaPIjX1BbSi4Q5hfsn0mm+5tVbTSGXXaCJrGEUSaAvCXPBKNWimah5 2HFcH0FlD7Af1eqbQuqIe44oOXWAzYd8zdd/9Qw5HVnYG02tpFrJSlB+uloLf7Wa yYP57Lv5NG69DtCE -----END CERTIFICATE-----Generated at Sat Oct 25 04:36:33 2025 by rpki-client