$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft File: 1498141819112B8446C2D4A3111F53038F05DBE9.mft (raw, json) Hash identifier: PWoLkqyNXnwlT0am76kbrigUnRiBEfcNlpmtRwscJJA= Subject key identifier: B1:75:50:B9:9E:0C:6B:94:9F:EB:1B:0D:4B:48:AF:12:F4:50:77:1E Authority key identifier: 14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 Certificate issuer: /CN=1498141819112b8446c2d4a3111f53038f05dbe9 Certificate serial: 1431F56CE6B606A83A2EB1D038DD8B7E039741C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft Manifest number: CE Signing time: Thu 23 Oct 2025 15:48:09 +0000 Manifest this update: Thu 23 Oct 2025 15:43:09 +0000 Manifest next update: Fri 24 Oct 2025 17:57:09 +0000 Files and hashes: 1: 3138352e39312e3131342e302f32342d3234203d3e20323132323338.roa (hash: O3+fkuGYHEGuJgzobwksf3BrAnxvmElLOiQKqynfHQQ=) 2: 3138352e39312e3131322e302f32342d3234203d3e20323035383836.roa (hash: O1n5JnY1D7Gybc6bse2IOISd30uajo4rcLgj2Y43/4k=) 3: 1498141819112B8446C2D4A3111F53038F05DBE9.crl (hash: ZLuqoXKt8I612VLo5nz+tWm/AhyRKEl36MrxMzF52zc=) 4: 3138352e39312e3131332e302f32342d3234203d3e20323134323038.roa (hash: qSSu/jTa9CtmAhgZlrJ1s4QldXeKp0EqfLu29FuP5Zs=) 5: 3138352e39312e3131352e302f32342d3234203d3e2034363337.roa (hash: ck91ILJJRhGrU5dcx7s2t1suhnGyLbRTekoZlADPXPE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 17:57:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:31:f5:6c:e6:b6:06:a8:3a:2e:b1:d0:38:dd:8b:7e:03:97:41:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1498141819112b8446c2d4a3111f53038f05dbe9 Validity Not Before: Oct 23 15:43:09 2025 GMT Not After : Oct 24 17:57:09 2025 GMT Subject: CN=B17550B99E0C6B949FEB1B0D4B48AF12F450771E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:8d:02:a4:4e:08:02:de:1e:03:8a:61:8c:54: 48:43:c2:f1:cb:da:a6:b3:3e:03:09:91:2d:c7:e3: e3:67:6c:6f:91:fd:de:03:5d:91:e9:1e:b9:51:93: 1a:b9:f9:35:0a:73:8f:43:be:d7:4b:53:4f:a9:7d: e8:12:c9:4b:c3:35:be:5f:bb:43:c9:41:18:ef:fe: b5:38:8e:00:74:75:dc:be:55:fd:39:a0:e7:57:b7: 10:d7:ae:8d:e1:7a:e4:cd:a8:15:59:dd:4d:c2:ba: 0a:dd:c0:7b:c0:07:74:40:bd:5b:cd:8f:79:ac:ce: d0:4c:dc:8a:d9:f8:63:8d:b9:97:a8:50:95:d2:62: b9:ea:ea:7d:a7:56:b1:58:7c:e8:66:49:fb:77:84: e9:2f:8e:25:a8:e2:38:52:a6:3d:18:1a:ad:15:c0: 0e:d0:b6:0a:3e:a9:b9:4b:b0:e4:b1:4a:09:e0:7a: bc:fd:22:5e:82:7b:85:11:3e:ee:a8:80:f7:aa:38: f6:f2:f6:1c:9e:25:a3:8d:b8:00:8a:bd:5e:f9:fa: 3d:03:47:7f:37:29:dd:ed:1d:20:e7:26:44:0c:7b: 58:59:c2:b1:4e:67:16:96:47:98:5c:03:0e:15:61: 58:de:ff:cf:90:34:fc:d7:07:65:bf:83:0e:5b:97: 96:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:75:50:B9:9E:0C:6B:94:9F:EB:1B:0D:4B:48:AF:12:F4:50:77:1E X509v3 Authority Key Identifier: keyid:14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:b7:b1:63:93:d8:cd:a0:de:d9:6b:15:08:2a:a2:0f:ea:d1: 15:a8:7c:02:89:35:73:25:7b:e7:db:a3:5b:be:e8:fe:33:17: 82:55:dc:75:12:7b:a5:45:ae:2b:52:31:8e:c3:59:18:58:2a: a7:33:85:d2:92:4b:f6:5f:51:cc:93:19:a4:bd:68:64:d8:c5: d4:bf:a1:e3:d0:4f:21:ac:90:85:21:9f:98:40:3c:eb:6a:fa: 54:32:89:86:13:d2:e0:c7:60:e7:e5:39:0f:7a:50:aa:85:7c: 6b:6a:1f:78:6f:0a:5b:3d:e5:f7:20:5f:4b:17:18:b5:af:67: ff:c1:5a:a1:94:f4:b2:0e:2c:3b:ff:9d:79:b9:0b:5f:8d:5a: 07:ca:c9:21:0e:ef:28:fa:e3:a1:af:ad:e9:40:a5:4e:67:bd: 32:16:f4:c3:07:fc:81:f6:f1:e6:07:65:f3:8f:29:8d:25:3f: 8a:3a:18:39:df:d3:1d:d6:d8:cb:2c:dd:8d:cf:03:4c:7d:f7: 60:90:0c:e6:7e:1f:3e:51:af:c2:41:9f:7f:1d:e9:db:e7:67: 41:b5:74:05:b5:f9:0a:50:38:04:c5:a9:ea:d0:7c:94:92:5f: e5:b5:a4:76:82:3d:63:c2:45:87:98:11:5a:ca:f7:42:a0:fb: f9:a4:53:b2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFDH1bOa2Bqg6LrHQON2LfgOXQcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5ODE0MTgxOTExMmI4NDQ2YzJkNGEzMTExZjUzMDM4 ZjA1ZGJlOTAeFw0yNTEwMjMxNTQzMDlaFw0yNTEwMjQxNzU3MDlaMDMxMTAvBgNV BAMTKEIxNzU1MEI5OUUwQzZCOTQ5RkVCMUIwRDRCNDhBRjEyRjQ1MDc3MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5jQKkTggC3h4DimGMVEhDwvHL 2qazPgMJkS3H4+NnbG+R/d4DXZHpHrlRkxq5+TUKc49DvtdLU0+pfegSyUvDNb5f u0PJQRjv/rU4jgB0ddy+Vf05oOdXtxDXro3heuTNqBVZ3U3CugrdwHvAB3RAvVvN j3msztBM3IrZ+GONuZeoUJXSYrnq6n2nVrFYfOhmSft3hOkvjiWo4jhSpj0YGq0V wA7Qtgo+qblLsOSxSgngerz9Il6Ce4URPu6ogPeqOPby9hyeJaONuACKvV75+j0D R383Kd3tHSDnJkQMe1hZwrFOZxaWR5hcAw4VYVje/8+QNPzXB2W/gw5bl5ZTAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUsXVQuZ4Ma5Sf6xsNS0ivEvRQdx4wHwYDVR0j BBgwFoAUFJgUGBkRK4RGwtSjER9TA48F2+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjkwNjZmNWQtZWNjMS00OTI3LTk1YzEtZTFhOGRmOGY5 ODk3LzAvMTQ5ODE0MTgxOTExMkI4NDQ2QzJENEEzMTExRjUzMDM4RjA1REJFOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ZKZ1VHQmtSSzRSR3d0U2pFUjlUQTQ4 RjItay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOTA2NmY1ZC1l Y2MxLTQ5MjctOTVjMS1lMWE4ZGY4Zjk4OTcvMC8xNDk4MTQxODE5MTEyQjg0NDZD MkQ0QTMxMTFGNTMwMzhGMDVEQkU5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACbexY5PYzaDe2WsVCCqi D+rRFah8Aok1cyV759ujW77o/jMXglXcdRJ7pUWuK1IxjsNZGFgqpzOF0pJL9l9R zJMZpL1oZNjF1L+h49BPIayQhSGfmEA862r6VDKJhhPS4Mdg5+U5D3pQqoV8a2of eG8KWz3l9yBfSxcYta9n/8FaoZT0sg4sO/+debkLX41aB8rJIQ7vKPrjoa+t6UCl Tme9Mhb0wwf8gfbx5gdl848pjSU/ijoYOd/THdbYyyzdjc8DTH33YJAM5n4fPlGv wkGffx3p2+dnQbV0BbX5ClA4BMWp6tB8lJJf5bWkdoI9Y8JFh5gRWsr3QqD7+aRT sg== -----END CERTIFICATE-----Generated at Fri Oct 24 09:14:35 2025 by rpki-client