$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft File: 21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft (raw, json) Hash identifier: z2N8UeGIGu7Vxab0ugNSFVrSX2+/Yme1WwpmiG4yEFU= Subject key identifier: 97:97:C1:8A:CE:DD:EA:F7:CA:21:43:62:A6:A6:DB:8A:17:A7:F6:1F Authority key identifier: 21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48 Certificate issuer: /CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48 Certificate serial: 49D23A1DC188988E627C1BBACFD71E7FF343EC27 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft Manifest number: 6D Signing time: Thu 23 Oct 2025 22:55:41 +0000 Manifest this update: Thu 23 Oct 2025 22:50:41 +0000 Manifest next update: Fri 24 Oct 2025 22:57:41 +0000 Files and hashes: 1: 326131343a373538303a6130313a3a2f34382d3438203d3e20323135353433.roa (hash: 9e2yjigX5+cNnGpC5dYpYp4x5beQHVuns4hEprR01WE=) 2: 21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl (hash: CT2ScwHZ6JqcrrTlawWTX6sscnSCSQmBp7GHrLPTGe4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 21:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:d2:3a:1d:c1:88:98:8e:62:7c:1b:ba:cf:d7:1e:7f:f3:43:ec:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48 Validity Not Before: Oct 23 22:50:41 2025 GMT Not After : Oct 24 22:57:41 2025 GMT Subject: CN=9797C18ACEDDEAF7CA214362A6A6DB8A17A7F61F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a1:c3:6e:a6:f8:db:dc:71:a7:c5:0d:f5:29: 70:f5:0e:4d:65:02:35:40:9e:1f:3a:9e:3b:e5:6e: e6:11:05:d8:79:6f:50:ee:f0:3c:22:9f:73:a7:55: 85:f1:69:16:1b:af:88:dd:e8:8a:f1:64:7a:68:93: d8:97:90:d5:2b:ca:26:9d:de:bf:d7:3c:19:d5:1d: 98:b5:66:d9:03:88:1b:6a:d2:22:49:ca:dd:7a:98: f2:26:ae:6a:91:ce:bd:6c:46:f8:9a:da:48:6d:fc: d2:47:b5:86:5b:fc:5c:72:38:fb:79:bc:14:42:78: ee:03:67:d4:3f:6a:10:75:60:80:10:a3:0a:87:2f: a7:94:56:57:33:18:c1:93:c4:37:66:60:6c:dd:ac: 1a:ea:c5:07:0a:79:31:56:38:0e:5e:4e:2a:84:10: 3a:92:87:c2:af:1b:5b:4f:87:d2:92:78:fb:0b:bd: 88:e7:3b:34:82:00:f7:e9:ef:e9:1c:de:ba:bc:4d: 7f:fd:80:35:d0:2c:a4:03:49:05:69:49:09:c0:43: b6:40:74:74:49:fe:98:88:dc:e4:2a:9d:94:be:74: 52:07:9e:3c:1c:a8:3e:1b:df:30:02:c7:d0:82:9c: ef:42:3b:b6:f6:f0:1a:a5:37:d3:03:49:07:1e:ff: ee:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:97:C1:8A:CE:DD:EA:F7:CA:21:43:62:A6:A6:DB:8A:17:A7:F6:1F X509v3 Authority Key Identifier: keyid:21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:82:60:81:61:f8:3e:e8:e6:15:3c:fb:7f:43:8d:2f:c0:e2: d7:22:15:fa:0b:02:0e:13:b3:46:12:70:56:3f:58:a0:d6:6b: 19:47:21:36:a5:d3:88:b3:96:45:80:4d:c3:58:b1:ba:89:df: 28:39:f0:88:45:9d:88:63:a8:56:ac:f6:94:b1:63:44:13:c6: 5f:d5:a8:45:f4:3f:f9:9c:4f:9a:71:80:21:a7:b0:a5:d8:a3: 9d:7f:bf:1d:a4:83:1e:cd:4c:d0:a3:f6:65:bc:90:02:62:b6: 20:de:8e:14:b0:78:e7:d1:3d:72:8c:57:a0:ba:3d:fd:2f:d6: a2:d1:ab:24:a2:0a:8a:b5:f2:92:a6:6f:29:a7:fb:ad:f3:8a: d8:32:f1:1e:18:a9:d6:59:a5:f7:b6:a4:0a:93:ba:fb:3d:d8: ff:aa:30:c7:cb:96:23:46:c3:af:e2:0c:e4:32:5a:9c:6c:1c: d9:52:e0:44:58:c1:9f:ac:09:a3:c5:e2:05:3e:fd:42:72:4f: 77:ce:72:fd:da:b6:b4:50:cd:7d:68:db:3d:04:55:0d:a2:04: 8b:8d:ac:4a:b3:d9:21:01:bc:d9:ba:9e:11:e6:07:92:33:4b: fc:bf:15:7e:dc:d7:83:4d:fc:63:00:d4:74:09:3f:f4:fd:99: 90:3d:b4:53 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSdI6HcGImI5ifBu6z9cef/ND7CcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCNUNCMEJGQjU0MTgzQTYzMzQ4MjBENzA0RURCRjc5 QjA0Q0I0ODAeFw0yNTEwMjMyMjUwNDFaFw0yNTEwMjQyMjU3NDFaMDMxMTAvBgNV BAMTKDk3OTdDMThBQ0VEREVBRjdDQTIxNDM2MkE2QTZEQjhBMTdBN0Y2MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsocNupvjb3HGnxQ31KXD1Dk1l AjVAnh86njvlbuYRBdh5b1Du8Dwin3OnVYXxaRYbr4jd6IrxZHpok9iXkNUryiad 3r/XPBnVHZi1ZtkDiBtq0iJJyt16mPImrmqRzr1sRvia2kht/NJHtYZb/FxyOPt5 vBRCeO4DZ9Q/ahB1YIAQowqHL6eUVlczGMGTxDdmYGzdrBrqxQcKeTFWOA5eTiqE EDqSh8KvG1tPh9KSePsLvYjnOzSCAPfp7+kc3rq8TX/9gDXQLKQDSQVpSQnAQ7ZA dHRJ/piI3OQqnZS+dFIHnjwcqD4b3zACx9CCnO9CO7b28BqlN9MDSQce/+4FAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUl5fBis7d6vfKIUNipqbbihen9h8wHwYDVR0j BBgwFoAUIbXLC/tUGDpjNIINcE7b95sEy0gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDBjYTI2NmEtZGY4My00YmIyLTgwMDctNGY4NWI4OTNk YzcwLzAvMjFCNUNCMEJGQjU0MTgzQTYzMzQ4MjBENzA0RURCRjc5QjA0Q0I0OC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMUI1Q0IwQkZCNTQxODNBNjMzNDgyMEQ3 MDRFREJGNzlCMDRDQjQ4LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQwY2EyNjZhLWRmODMtNGJiMi04MDA3LTRmODViODkzZGM3MC8wLzIxQjVDQjBC RkI1NDE4M0E2MzM0ODIwRDcwNEVEQkY3OUIwNENCNDgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAOgmCB Yfg+6OYVPPt/Q40vwOLXIhX6CwIOE7NGEnBWP1ig1msZRyE2pdOIs5ZFgE3DWLG6 id8oOfCIRZ2IY6hWrPaUsWNEE8Zf1ahF9D/5nE+acYAhp7Cl2KOdf78dpIMezUzQ o/ZlvJACYrYg3o4UsHjn0T1yjFeguj39L9ai0askogqKtfKSpm8pp/ut84rYMvEe GKnWWaX3tqQKk7r7Pdj/qjDHy5YjRsOv4gzkMlqcbBzZUuBEWMGfrAmjxeIFPv1C ck93znL92ra0UM19aNs9BFUNogSLjaxKs9khAbzZup4R5geSM0v8vxV+3NeDTfxj ANR0CT/0/ZmQPbRT -----END CERTIFICATE-----Generated at Fri Oct 24 04:31:02 2025 by rpki-client