$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft File: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json) Hash identifier: Gpg+KRHTwVEFUygi9+fVViTjRXwO9dc6e6P58D1PlvA= Subject key identifier: 41:1A:F8:33:19:B6:31:D3:E2:4D:66:D5:3E:4B:27:C9:96:41:61:EF Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Certificate serial: 7EFDD7F434F40FE29E6DE6C9080CEBF77FA5620B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft Manifest number: 025F Signing time: Tue 28 Oct 2025 14:43:54 +0000 Manifest this update: Tue 28 Oct 2025 14:38:54 +0000 Manifest next update: Wed 29 Oct 2025 17:16:54 +0000 Files and hashes: 1: 326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa (hash: U8fXRRyT8emRE+fVUuy2ekIUYzd/0os3T2/COS8ejYg=) 2: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: NDSS2hHdj8htIMoCQNzuGfJRE+FjfS7resxOlAoGNDM=) 3: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: BpFWMguhqO1fiLjHuoEEdZKdmcd0N4GkvUmoVsxndqw=) 4: 326131343a316563313a376231303a3a2f34342d3438203d3e20323135363636.roa (hash: pZyYX9vqAixKUDIqsxujnSVA6UfFKeJc5iZ4yNtLX48=) 5: 326131343a316563373a633031303a3a2f34342d3434203d3e2030.roa (hash: SsdW0YpcJfef7CtWvRhhfCUEgjAhSHqFG1h0ACBR214=) 6: 326131343a316563303a3a2f33312d3438203d3e203438373030.roa (hash: NfdCiPZo2V7z2IR8DOEcP9s1WlT0wPdEK10WCc6hh18=) 7: 326131343a316563313a3a2f33322d3332203d3e20323037323532.roa (hash: ZnCFtDlyKKIKHxL+mnWSwMiKEny7fbonjbSjngpcz7c=) 8: 326131343a316563313a376232303a3a2f34342d3438203d3e20323135303933.roa (hash: dVnYLOP17LHBFloAhm1YIONwpYCVs6bwv8Qels/37Kg=) 9: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: rD1drMlhgCHEm0vlVi8DONqmz75yH/sypTpIzdkNP6c=) 10: 326131343a316563303a3a2f33312d3438203d3e203136353039.roa (hash: DO5U+zbxAW9dCHHkG8v0O5pLZTi9rHV+80EYsqI00GY=) 11: 326131343a316563303a3a2f33312d3438203d3e203134363138.roa (hash: TNC4zrNVSYq6rg1HfzOLsFNL5cW5pcjjIopBseDA51Y=) 12: 326131343a316563373a633430303a3a2f34302d3438203d3e203438373030.roa (hash: LZc2AksEahD5rzoxMFxve6nJwmwqwYYZ+BLhaadaDDA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Oct 2025 16:03:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:fd:d7:f4:34:f4:0f:e2:9e:6d:e6:c9:08:0c:eb:f7:7f:a5:62:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Validity Not Before: Oct 28 14:38:54 2025 GMT Not After : Oct 29 17:16:54 2025 GMT Subject: CN=411AF83319B631D3E24D66D53E4B27C9964161EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1f:2f:c6:09:fd:db:74:f2:e1:19:f9:0a:cc: 97:c3:c4:ff:54:91:27:2a:8c:a2:ac:14:96:66:16: ef:7d:17:8c:4e:50:2b:68:a6:41:d5:df:20:7a:b4: ed:19:a4:bb:71:d0:95:75:1c:3c:08:c4:5a:9f:65: d9:dd:7a:da:43:59:a8:07:04:92:d5:8d:ff:2a:05: 18:06:4a:34:f3:d0:33:2e:63:b3:d6:89:f2:e8:c4: d1:2b:64:8b:8f:c9:d4:53:55:7d:11:9c:0f:ed:78: 2a:16:31:46:59:00:af:e9:9c:e2:eb:1e:1c:6d:ac: c4:44:96:b2:cf:6d:19:83:b1:f2:0b:37:c7:ee:22: 6b:be:e4:c4:82:72:e1:00:08:28:5b:39:49:d9:ff: 5d:7f:b7:8b:0b:57:a8:5d:12:f3:7a:9c:47:90:5c: 14:33:5b:b1:0f:10:3f:1a:41:2c:cb:8c:7d:27:2f: a4:3c:34:0c:27:3a:fc:ac:1f:73:4a:66:99:d1:60: ca:30:18:51:50:30:b6:fd:20:c1:54:dc:8e:4b:b0: e4:1c:77:9c:60:c6:43:fa:7b:0b:fa:f5:f2:5c:ee: 80:06:00:a0:86:1d:e6:6b:7a:af:1c:d0:30:0e:bf: 9d:7b:c4:cb:d1:7d:fc:4c:11:d7:91:ce:3c:a8:4f: af:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:1A:F8:33:19:B6:31:D3:E2:4D:66:D5:3E:4B:27:C9:96:41:61:EF X509v3 Authority Key Identifier: keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:03:aa:06:a2:1e:68:6b:0d:3f:51:ee:66:e5:42:d4:38:c7: ef:00:0c:2b:dc:ad:e2:d3:7d:cc:3a:99:5c:4a:b3:83:9c:15: 0e:31:4e:c0:76:42:e9:b1:a7:e9:24:eb:5f:98:8c:7e:bc:5b: b2:54:d2:29:14:04:ef:c0:fa:6f:60:2a:91:31:81:95:c7:ec: e7:4c:2e:c1:d1:25:dc:ed:f5:40:cd:fa:37:47:e2:2f:67:3b: 7d:b2:ba:b0:84:7c:c0:1e:c2:c6:89:b5:77:d9:bc:f6:66:46: 31:e0:55:85:a2:aa:db:97:48:94:fe:5d:4d:80:87:94:0d:05: dd:d4:e4:b0:93:50:46:29:f4:8c:ab:3f:0f:3e:ba:31:49:4b: 4c:48:1c:9e:50:e3:c9:e6:63:20:b6:96:07:28:f5:af:5c:82: 53:b4:66:af:25:e3:01:cd:cd:06:ef:a8:46:62:f2:24:db:42: d5:97:b6:b2:42:8f:c9:27:1b:0e:a9:d1:a0:08:22:66:ef:02: 78:b6:2c:e3:e4:f5:06:84:60:a7:05:59:e7:20:3c:e0:ed:48: 2f:24:8a:de:0c:33:59:0f:af:5a:a9:f8:27:82:52:ab:dc:2d: bb:9f:73:19:1f:03:dc:4d:24:21:e0:4e:2d:e6:12:b0:d5:b4: 73:63:10:b4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfv3X9DT0D+KebebJCAzr93+lYgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG NEFCREVDNjAeFw0yNTEwMjgxNDM4NTRaFw0yNTEwMjkxNzE2NTRaMDMxMTAvBgNV BAMTKDQxMUFGODMzMTlCNjMxRDNFMjRENjZENTNFNEIyN0M5OTY0MTYxRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbHy/GCf3bdPLhGfkKzJfDxP9U kScqjKKsFJZmFu99F4xOUCtopkHV3yB6tO0ZpLtx0JV1HDwIxFqfZdndetpDWagH BJLVjf8qBRgGSjTz0DMuY7PWifLoxNErZIuPydRTVX0RnA/teCoWMUZZAK/pnOLr HhxtrMRElrLPbRmDsfILN8fuImu+5MSCcuEACChbOUnZ/11/t4sLV6hdEvN6nEeQ XBQzW7EPED8aQSzLjH0nL6Q8NAwnOvysH3NKZpnRYMowGFFQMLb9IMFU3I5LsOQc d5xgxkP6ewv69fJc7oAGAKCGHeZreq8c0DAOv517xMvRffxMEdeRzjyoT6+7AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUQRr4Mxm2MdPiTWbVPksnyZZBYe8wHwYDVR0j BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD QkIzOTg3NkY0QUJERUM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJhZjczYTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS8wLzIwRjY5QzRD MTQ2MTM4Q0IwMTIxQzRDNENCQjM5ODc2RjRBQkRFQzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBiA6oG oh5oaw0/Ue5m5ULUOMfvAAwr3K3i033MOplcSrODnBUOMU7AdkLpsafpJOtfmIx+ vFuyVNIpFATvwPpvYCqRMYGVx+znTC7B0SXc7fVAzfo3R+IvZzt9srqwhHzAHsLG ibV32bz2ZkYx4FWFoqrbl0iU/l1NgIeUDQXd1OSwk1BGKfSMqz8PProxSUtMSBye UOPJ5mMgtpYHKPWvXIJTtGavJeMBzc0G76hGYvIk20LVl7ayQo/JJxsOqdGgCCJm 7wJ4tizj5PUGhGCnBVnnIDzg7UgvJIreDDNZD69aqfgnglKr3C27n3MZHwPcTSQh 4E4t5hKw1bRzYxC0 -----END CERTIFICATE-----Generated at Wed Oct 29 00:54:24 2025 by rpki-client