$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/0/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.mft File: B11D50A5D47F732F3F808FEAE6A3906CC4509C44.mft (raw, json) Hash identifier: 3q4rdhAK0lq7+QL4exuD1mK5QfNW3UFlPexUmr6Iicw= Subject key identifier: C2:1D:BA:B8:EC:1F:7E:39:D0:0C:A6:EA:7B:2E:A4:DC:7E:EB:4F:85 Authority key identifier: B1:1D:50:A5:D4:7F:73:2F:3F:80:8F:EA:E6:A3:90:6C:C4:50:9C:44 Certificate issuer: /CN=B11D50A5D47F732F3F808FEAE6A3906CC4509C44 Certificate serial: 11A55A9F673ACDFF3D354859A0858B6FF7E2D260 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/0/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.mft Manifest number: 33 Signing time: Fri 24 Oct 2025 19:44:31 +0000 Manifest this update: Fri 24 Oct 2025 19:39:31 +0000 Manifest next update: Sat 25 Oct 2025 23:31:31 +0000 Files and hashes: 1: 326131343a373538333a663430303a3a2f34342d3438203d3e20323130333532.roa (hash: vvwHl6BLBwWiKAXvEKkLi0Wv5qZBfvWXONHc86WQ1Rk=) 2: B11D50A5D47F732F3F808FEAE6A3906CC4509C44.crl (hash: pdGWAteWEGK45ll2OlepJeafz5sXbF11GI8mH2EhpE0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/0/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.crl rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/0/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.mft rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.cer rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Oct 2025 15:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:a5:5a:9f:67:3a:cd:ff:3d:35:48:59:a0:85:8b:6f:f7:e2:d2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B11D50A5D47F732F3F808FEAE6A3906CC4509C44 Validity Not Before: Oct 24 19:39:31 2025 GMT Not After : Oct 25 23:31:31 2025 GMT Subject: CN=C21DBAB8EC1F7E39D00CA6EA7B2EA4DC7EEB4F85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f6:66:a2:14:3b:97:1b:b2:d8:8a:19:8f:69: b3:f4:86:58:c7:b3:22:56:07:79:37:56:04:d8:9a: b1:47:56:70:01:f7:46:be:68:15:ba:10:9e:df:f4: 8c:06:2f:87:14:a2:cb:06:ff:f5:24:af:7b:f2:9a: 12:22:e9:4c:34:76:54:39:f5:b6:05:a7:ba:ac:d0: b0:28:d3:c9:0f:a8:08:4b:62:d6:c4:2b:ea:e8:e4: 9d:27:00:be:3a:1e:77:06:96:e5:9a:c0:6c:38:2c: fe:88:bf:96:50:ee:48:c1:bc:d8:25:c3:19:18:9a: 47:07:1a:71:fa:fa:38:36:59:37:66:3b:83:4c:a6: 0d:b8:6c:88:da:5d:0d:57:c5:13:0b:cb:30:63:73: a0:e9:d3:8a:8d:0b:64:8f:e4:a7:7b:c7:cd:f9:76: c3:53:e5:40:2f:ad:3b:c9:99:a0:b5:74:94:ec:00: 05:f8:6a:14:74:c7:58:b9:73:a9:65:2e:9b:5b:a9: bc:3e:3b:e7:db:38:7f:1c:58:1f:aa:92:44:5d:bd: a7:c3:93:3a:1d:32:74:40:e6:e3:0d:21:93:ae:d6: 8b:d4:b1:a0:b0:b8:2e:a9:4c:75:c5:6a:f6:54:a3: 50:2c:09:32:91:89:a3:b1:73:92:73:9f:90:d0:b2: 6d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:1D:BA:B8:EC:1F:7E:39:D0:0C:A6:EA:7B:2E:A4:DC:7E:EB:4F:85 X509v3 Authority Key Identifier: keyid:B1:1D:50:A5:D4:7F:73:2F:3F:80:8F:EA:E6:A3:90:6C:C4:50:9C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/0/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/0/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:48:bc:3b:af:f7:a4:af:a9:6b:0a:bc:ef:0a:b1:65:69:e1: d0:36:d8:c5:89:e6:f2:71:1f:bf:77:97:ad:bb:29:08:ba:b1: 27:eb:92:20:cc:b8:bd:57:e5:e9:35:38:dc:9e:2c:d5:61:e1: bc:91:76:8f:c3:8b:8e:81:d7:38:28:80:09:65:fa:db:dc:95: 72:9a:27:2b:fd:8a:b4:ec:c6:8f:a7:cd:e6:65:26:09:e6:88: 5e:7c:f5:bf:ba:4e:dc:27:82:58:13:43:94:7c:20:11:4b:91: c2:a5:31:d6:c2:46:32:69:8b:1f:13:c4:df:d9:9e:1d:a8:db: 31:f8:a1:fb:db:4f:1a:93:db:b4:ed:5e:9c:f1:fa:7c:65:43: 1e:f8:eb:68:64:94:4b:a8:45:ae:66:b3:0a:da:f0:22:0e:33: ba:8f:85:a3:e5:ea:84:32:5b:18:73:42:65:af:3d:7a:3f:cc: 45:84:53:e9:30:de:08:41:f8:cc:4c:c7:af:e1:ed:16:fc:c3: 77:cd:93:c4:92:74:5b:8f:85:11:c8:c9:12:d1:cb:69:51:6f: d3:66:e5:42:7a:9d:35:07:41:6a:ff:45:8c:37:76:35:76:bf: c8:c9:2d:ff:3c:d4:f1:8f:91:fa:26:92:0c:ff:97:2b:ba:2f: 00:0c:55:22 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUEaVan2c6zf89NUhZoIWLb/fi0mAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExRDUwQTVENDdGNzMyRjNGODA4RkVBRTZBMzkwNkND NDUwOUM0NDAeFw0yNTEwMjQxOTM5MzFaFw0yNTEwMjUyMzMxMzFaMDMxMTAvBgNV BAMTKEMyMURCQUI4RUMxRjdFMzlEMDBDQTZFQTdCMkVBNERDN0VFQjRGODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc9maiFDuXG7LYihmPabP0hljH syJWB3k3VgTYmrFHVnAB90a+aBW6EJ7f9IwGL4cUossG//Ukr3vymhIi6Uw0dlQ5 9bYFp7qs0LAo08kPqAhLYtbEK+ro5J0nAL46HncGluWawGw4LP6Iv5ZQ7kjBvNgl wxkYmkcHGnH6+jg2WTdmO4NMpg24bIjaXQ1XxRMLyzBjc6Dp04qNC2SP5Kd7x835 dsNT5UAvrTvJmaC1dJTsAAX4ahR0x1i5c6llLptbqbw+O+fbOH8cWB+qkkRdvafD kzodMnRA5uMNIZOu1ovUsaCwuC6pTHXFavZUo1AsCTKRiaOxc5Jzn5DQsm1DAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUwh26uOwffjnQDKbqey6k3H7rT4UwHwYDVR0j BBgwFoAUsR1QpdR/cy8/gI/q5qOQbMRQnEQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmMyNjc2M2UtYWRkZi00M2ZkLWJmMmUtN2M3ZTM4OTIz ZTdjLzAvQjExRDUwQTVENDdGNzMyRjNGODA4RkVBRTZBMzkwNkNDNDUwOUM0NC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODFmOTc4Mi04OThlLTRi ODMtOTVlNi00ZmY0YWI3NWM5ZGMvMi9CMTFENTBBNUQ0N0Y3MzJGM0Y4MDhGRUFF NkEzOTA2Q0M0NTA5QzQ0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJjMjY3NjNlLWFkZGYtNDNmZC1iZjJlLTdjN2UzODkyM2U3Yy8wL0IxMUQ1MEE1 RDQ3RjczMkYzRjgwOEZFQUU2QTM5MDZDQzQ1MDlDNDQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCLSLw7 r/ekr6lrCrzvCrFlaeHQNtjFiebycR+/d5etuykIurEn65IgzLi9V+XpNTjcnizV YeG8kXaPw4uOgdc4KIAJZfrb3JVymicr/Yq07MaPp83mZSYJ5ohefPW/uk7cJ4JY E0OUfCARS5HCpTHWwkYyaYsfE8Tf2Z4dqNsx+KH7208ak9u07V6c8fp8ZUMe+Oto ZJRLqEWuZrMK2vAiDjO6j4Wj5eqEMlsYc0Jlrz16P8xFhFPpMN4IQfjMTMev4e0W /MN3zZPEknRbj4URyMkS0ctpUW/TZuVCep01B0Fq/0WMN3Y1dr/IyS3/PNTxj5H6 JpIM/5crui8ADFUi -----END CERTIFICATE-----Generated at Sat Oct 25 04:17:45 2025 by rpki-client