$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft File: 020F7ED217FC36532E6B045CFBCCDA68A6604620.mft (raw, json) Hash identifier: U8ddNLR60e3GCEvrtEaGuaw/Iw+QFPZg1OnhWC0K/L0= Subject key identifier: B2:6A:15:B7:CC:2F:D4:0C:93:47:0C:48:C1:F0:1F:2F:22:F4:8D:9A Authority key identifier: 02:0F:7E:D2:17:FC:36:53:2E:6B:04:5C:FB:CC:DA:68:A6:60:46:20 Certificate issuer: /CN=020F7ED217FC36532E6B045CFBCCDA68A6604620 Certificate serial: 081E5E5F7E0D2FC5BDF3A216AABB989D8CCC6ABC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft Manifest number: 51 Signing time: Sat 25 Oct 2025 11:15:44 +0000 Manifest this update: Sat 25 Oct 2025 11:10:44 +0000 Manifest next update: Sun 26 Oct 2025 11:54:44 +0000 Files and hashes: 1: 326131343a373538313a366663303a3a2f34342d3438203d3e20323037333839.roa (hash: k0slLXQGak8JfXgcycld4UCv11bkqqJyVwy8WgUs0W4=) 2: 326131343a373538313a366665303a3a2f34342d3438203d3e20323134383431.roa (hash: eJoFXZz3vH/PzqNzkkd4bWX4CpO0e/s0UWWhyH7ohGo=) 3: 326131343a373538313a366662303a3a2f34342d3438203d3e20323136343332.roa (hash: cip9cJqKeyNrJhvNYpxl3IQ3uuVk6x6ccrH22pN5xrA=) 4: 020F7ED217FC36532E6B045CFBCCDA68A6604620.crl (hash: pX1Sp4LyAQALB4kID3Dyk+DwXuVHSnK1mokTqtCWXzo=) 5: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: 9WwOZQ+czh53N90Wic7WKUZpN9yKrnRBc/mSIwdZviM=) 6: 326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa (hash: xTMyG8vk7HfhKOphzDUHjsL1N+HXzTu0fnBjhyB6AKQ=) 7: 326131343a373538313a366330303a3a2f34302d3438203d3e20313938393534.roa (hash: fPBlj/OX226nVSvX0NnbhELuUhpZ2u/Ytd/uYZbhMTA=) 8: 326131343a373538313a366430303a3a2f34302d3438203d3e20323035333239.roa (hash: UAf2blctTo7ZlN86/McI15QZsGre1E35LEt/FhIBXBM=) 9: 326131343a373538313a366664303a3a2f34342d3438203d3e20323135393334.roa (hash: BfxFUd5DTechXRUy4Ex3ytqAtMEr8QPJBcDEM0dDVlg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.crl rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 08:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:1e:5e:5f:7e:0d:2f:c5:bd:f3:a2:16:aa:bb:98:9d:8c:cc:6a:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020F7ED217FC36532E6B045CFBCCDA68A6604620 Validity Not Before: Oct 25 11:10:44 2025 GMT Not After : Oct 26 11:54:44 2025 GMT Subject: CN=B26A15B7CC2FD40C93470C48C1F01F2F22F48D9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0d:ea:7e:fa:9c:32:97:82:60:af:8a:f5:70: b5:5b:43:5a:8d:dd:78:79:6d:67:e9:e0:2a:47:3e: a7:3c:50:6f:0b:05:4b:60:37:52:29:9a:c1:96:ea: 9c:05:fe:a5:34:48:51:55:ff:14:74:24:b0:51:9c: b8:91:3e:ac:73:4d:64:1c:c1:c7:a8:5f:0e:5b:66: 66:59:f1:15:31:3c:9e:9e:d7:27:b8:fb:34:9e:2e: db:f0:41:cb:7a:b8:57:a9:63:43:df:af:ec:c9:5f: ff:cb:14:42:74:6e:86:e3:74:f5:16:f1:fc:c2:6e: ad:23:3b:18:93:5a:ff:e3:10:59:43:23:d5:26:b8: 27:24:9b:44:14:24:52:aa:6e:16:01:0d:1b:1b:ae: 98:35:36:b4:a8:a2:8f:c1:13:0e:03:43:a2:a6:b1: 35:36:dd:56:4a:9e:aa:84:e1:31:9e:b3:e1:d3:de: 2a:c5:4f:7f:c5:61:e6:93:07:c5:a5:e9:73:5e:f7: b2:8a:26:fd:d6:7f:9b:17:9e:ab:55:b4:94:59:04: 36:7f:96:24:5f:29:14:1d:e4:ea:1a:d7:b1:10:45: b4:08:e4:0e:51:6b:12:99:dc:60:0f:10:eb:84:1f: 10:5d:b0:09:e2:d1:bd:da:2a:e4:d5:3d:77:cf:5e: eb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:6A:15:B7:CC:2F:D4:0C:93:47:0C:48:C1:F0:1F:2F:22:F4:8D:9A X509v3 Authority Key Identifier: keyid:02:0F:7E:D2:17:FC:36:53:2E:6B:04:5C:FB:CC:DA:68:A6:60:46:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:d8:dd:83:81:17:f7:f1:c5:37:73:23:93:1f:67:88:ec:d4: 08:03:b0:ee:0d:5e:b5:67:3a:01:ee:2b:b6:81:f0:46:8e:60: 9b:f1:a2:b0:d0:ee:71:1a:f8:e8:58:80:de:ca:04:55:e5:a8: 68:27:c3:a5:48:76:d8:d4:04:63:b4:6c:ad:8c:70:1a:c8:c1: 12:f8:3f:97:fb:c9:0d:e8:a4:14:14:c5:54:77:0c:be:0b:b6: a2:c5:8a:c2:9c:d4:9b:4b:9c:b2:46:35:82:62:74:0e:33:84: fd:80:ba:02:92:cc:b0:42:1f:39:74:2f:a4:ff:97:76:ac:fb: 10:12:50:15:fd:6f:6b:64:ec:35:a8:83:25:82:57:2a:15:c8: c1:a7:c4:d1:d4:00:67:02:28:12:c4:bf:c8:97:80:05:30:dc: d0:46:eb:04:ac:39:f2:ce:69:7d:b6:22:5c:c4:20:50:e2:f4: 68:8b:ec:11:e0:af:d8:07:ea:7d:17:18:21:5a:b3:1e:d6:9a: 2e:ad:cb:28:b0:db:f9:52:b5:00:fe:ff:fa:78:1b:f0:75:2d: cf:16:0a:5d:a7:3c:f8:4e:60:7d:47:e4:ed:79:a1:47:0c:a8: 80:e9:5c:b3:eb:0c:1c:d7:2b:9d:9a:7f:5a:e4:7d:71:2e:3f: c9:62:99:48 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUCB5eX34NL8W986IWqruYnYzMarwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwRjdFRDIxN0ZDMzY1MzJFNkIwNDVDRkJDQ0RBNjhB NjYwNDYyMDAeFw0yNTEwMjUxMTEwNDRaFw0yNTEwMjYxMTU0NDRaMDMxMTAvBgNV BAMTKEIyNkExNUI3Q0MyRkQ0MEM5MzQ3MEM0OEMxRjAxRjJGMjJGNDhEOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDODep++pwyl4Jgr4r1cLVbQ1qN 3Xh5bWfp4CpHPqc8UG8LBUtgN1IpmsGW6pwF/qU0SFFV/xR0JLBRnLiRPqxzTWQc wceoXw5bZmZZ8RUxPJ6e1ye4+zSeLtvwQct6uFepY0Pfr+zJX//LFEJ0bobjdPUW 8fzCbq0jOxiTWv/jEFlDI9UmuCckm0QUJFKqbhYBDRsbrpg1NrSooo/BEw4DQ6Km sTU23VZKnqqE4TGes+HT3irFT3/FYeaTB8Wl6XNe97KKJv3Wf5sXnqtVtJRZBDZ/ liRfKRQd5Ooa17EQRbQI5A5RaxKZ3GAPEOuEHxBdsAni0b3aKuTVPXfPXus1AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUsmoVt8wv1AyTRwxIwfAfLyL0jZowHwYDVR0j BBgwFoAUAg9+0hf8NlMuawRc+8zaaKZgRiAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWE3Yzk1NmMtMjJlYi00YmI4LWEzMjctYWQ5NzE2MTI5 NWJjLzAvMDIwRjdFRDIxN0ZDMzY1MzJFNkIwNDVDRkJDQ0RBNjhBNjYwNDYyMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wMjBGN0VEMjE3RkMzNjUzMkU2QjA0NUNG QkNDREE2OEE2NjA0NjIwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzVhN2M5NTZjLTIyZWItNGJiOC1hMzI3LWFkOTcxNjEyOTViYy8wLzAyMEY3RUQy MTdGQzM2NTMyRTZCMDQ1Q0ZCQ0NEQTY4QTY2MDQ2MjAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC22N2D gRf38cU3cyOTH2eI7NQIA7DuDV61ZzoB7iu2gfBGjmCb8aKw0O5xGvjoWIDeygRV 5ahoJ8OlSHbY1ARjtGytjHAayMES+D+X+8kN6KQUFMVUdwy+C7aixYrCnNSbS5yy RjWCYnQOM4T9gLoCksywQh85dC+k/5d2rPsQElAV/W9rZOw1qIMlglcqFcjBp8TR 1ABnAigSxL/Il4AFMNzQRusErDnyzml9tiJcxCBQ4vRoi+wR4K/YB+p9FxghWrMe 1pourcsosNv5UrUA/v/6eBvwdS3PFgpdpzz4TmB9R+TteaFHDKiA6Vyz6wwc1yud mn9a5H1xLj/JYplI -----END CERTIFICATE-----Generated at Sat Oct 25 17:35:28 2025 by rpki-client