$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft File: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft (raw, json) Hash identifier: JtxuMk6W3tej0ORbvLwSshkY9h5Bs2jtao1ydVRY0w4= Subject key identifier: B7:E6:D7:ED:6B:37:85:BF:6D:08:84:7B:44:9D:9F:DA:4E:43:F9:99 Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Certificate serial: 44E238DDCCB794C1FD2325C8AB02BADE526B9B59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft Manifest number: 04E3 Signing time: Tue 11 Nov 2025 11:34:50 +0000 Manifest this update: Tue 11 Nov 2025 11:29:50 +0000 Manifest next update: Wed 12 Nov 2025 12:23:50 +0000 Files and hashes: 1: 3138382e3136342e3135332e302f32342d3234203d3e203631333137.roa (hash: pkJz5L9iLZRF+OIvLDh3t2xUInq31L6An4us+3j1eD0=) 2: 3138382e3136342e3135352e302f32342d3234203d3e203631333137.roa (hash: W1I8woHaqJ6kU4xjFwKm1g6uV7UZ51m6Dv8R/7Dp0Oc=) 3: 3138382e3136342e3135342e302f32342d3234203d3e2039333034.roa (hash: Xrl4k2Y1ZQnjBYts0VWEIYeb2G4oTSJ6MhQs1UM8vvM=) 4: 3138382e3136342e3135322e302f32342d3234203d3e203631333137.roa (hash: PjHq1CK+fSk+5WuONiKJilG5oXTFh0dZnkKMEZVNP8E=) 5: 3138382e3136342e3135362e302f32342d3234203d3e20383334.roa (hash: sY/xAuh6Mg68YWt7c8TloEoU7TIBsTXsCx6tRGi7xp4=) 6: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl (hash: XtM3B/96Z4ATGXsrvWNqMMtQ1M+c+glK3TKvXtVhauY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 12 Nov 2025 09:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:e2:38:dd:cc:b7:94:c1:fd:23:25:c8:ab:02:ba:de:52:6b:9b:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Validity Not Before: Nov 11 11:29:50 2025 GMT Not After : Nov 12 12:23:50 2025 GMT Subject: CN=B7E6D7ED6B3785BF6D08847B449D9FDA4E43F999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:67:ed:d2:3b:9d:31:b5:df:d2:10:45:43:95: 8b:8a:3b:e0:c6:b8:3f:2b:c6:6b:b2:4e:27:28:59: 94:db:9f:4b:79:ce:1e:26:a8:11:70:c0:06:06:a5: 2f:4a:14:a5:e4:62:9a:f8:0b:e1:86:49:06:0d:a4: f1:ec:74:36:64:83:45:0a:3f:9d:5a:84:14:fa:8e: 79:60:40:c5:73:a2:b1:c0:08:93:f3:f2:40:39:af: e2:2d:29:62:f3:9b:9e:08:a2:6e:5e:9c:68:d9:12: 5e:04:f7:46:ac:f9:de:a7:3c:f2:1f:da:8f:24:d0: 49:8e:59:09:23:29:98:af:97:46:a7:7a:76:dd:36: 68:0b:59:df:4c:26:4c:4a:ba:bb:28:e7:2e:74:f6: 3a:08:24:86:3f:f3:33:2a:8d:59:da:7b:41:9f:b9: 38:d1:c8:5b:79:aa:de:7f:f3:f4:f1:23:61:b5:9a: 46:2a:fd:17:8b:90:1d:7c:cc:45:80:7f:d6:eb:90: 36:43:e2:e6:66:5a:3b:ad:56:38:51:cc:34:9b:c6: 8f:74:38:df:e8:c2:38:ac:fe:cb:ca:db:db:cf:57: 4a:a9:24:97:86:72:45:a2:a6:6f:90:ec:7f:17:d2: 00:e8:0d:94:b4:a2:44:13:ec:69:57:e7:c6:cb:54: fd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E6:D7:ED:6B:37:85:BF:6D:08:84:7B:44:9D:9F:DA:4E:43:F9:99 X509v3 Authority Key Identifier: keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:37:45:0b:d6:01:5a:29:6c:2b:19:6c:c9:d2:0f:2b:9e:d1: 70:41:e0:27:cb:e4:f2:3b:16:9b:06:e4:ae:60:a1:87:0a:2e: c2:67:fd:9b:c4:94:81:0e:f6:8a:f5:14:91:ee:dc:e7:cd:73: 25:df:0b:e9:ea:1a:72:0f:05:20:df:d1:2b:85:5c:d1:56:93: b3:3c:ee:60:bd:f0:eb:93:ba:7d:78:f4:d5:40:be:c0:53:14: c4:46:ec:43:66:ed:6b:fc:d2:8a:b6:ea:47:a3:e6:8b:ff:f2: cd:e5:6c:84:83:45:0d:e3:de:36:e8:25:8c:be:c0:47:17:ba: 49:64:d2:20:8f:36:33:f9:27:f0:4d:fa:de:37:04:ee:08:4f: bd:4d:40:cb:5d:a9:26:5b:74:15:cd:3f:81:1e:7f:6c:af:ca: 31:67:c8:46:8c:43:98:fe:0d:80:d8:5a:b4:3d:85:6d:e9:0b: ac:1f:6a:59:7e:b8:c2:f3:5c:c7:aa:5d:5b:d7:39:65:82:d7: b4:25:cb:ec:39:33:0f:7c:c6:88:3c:38:7d:af:b0:de:41:10: 77:06:f5:45:de:84:d2:ed:dd:2c:85:30:b8:f0:19:25:ed:0b: 18:b6:48:a1:5c:3d:a4:9f:9d:30:21:d8:5b:01:7c:28:33:9b: 5a:a3:e7:03 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUROI43cy3lMH9IyXIqwK63lJrm1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI5YmE5YWRkZTk2MzU3NzdiZjU4NmZkNDkzZTE0Y2Qz MGY3YzRjYTAeFw0yNTExMTExMTI5NTBaFw0yNTExMTIxMjIzNTBaMDMxMTAvBgNV BAMTKEI3RTZEN0VENkIzNzg1QkY2RDA4ODQ3QjQ0OUQ5RkRBNEU0M0Y5OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFZ+3SO50xtd/SEEVDlYuKO+DG uD8rxmuyTicoWZTbn0t5zh4mqBFwwAYGpS9KFKXkYpr4C+GGSQYNpPHsdDZkg0UK P51ahBT6jnlgQMVzorHACJPz8kA5r+ItKWLzm54Iom5enGjZEl4E90as+d6nPPIf 2o8k0EmOWQkjKZivl0anenbdNmgLWd9MJkxKurso5y509joIJIY/8zMqjVnae0Gf uTjRyFt5qt5/8/TxI2G1mkYq/ReLkB18zEWAf9brkDZD4uZmWjutVjhRzDSbxo90 ON/owjis/svK29vPV0qpJJeGckWipm+Q7H8X0gDoDZS0okQT7GlX58bLVP2VAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUt+bX7Ws3hb9tCIR7RJ2f2k5D+ZkwHwYDVR0j BBgwFoAUi5uprd6WNXd79Yb9ST4UzTD3xMowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmMwMzA4OTAtZjZlMC00MTBjLWJjOTktYWYwOTIxZDFj M2E0LzAvOEI5QkE5QURERTk2MzU3NzdCRjU4NkZENDkzRTE0Q0QzMEY3QzRDQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2k1dXByZDZXTlhkNzlZYjlTVDRVelRE M3hNby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzAzMDg5MC1m NmUwLTQxMGMtYmM5OS1hZjA5MjFkMWMzYTQvMC84QjlCQTlBRERFOTYzNTc3N0JG NTg2RkQ0OTNFMTRDRDMwRjdDNENBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIzdFC9YBWilsKxlsydIP K57RcEHgJ8vk8jsWmwbkrmChhwouwmf9m8SUgQ72ivUUke7c581zJd8L6eoacg8F IN/RK4Vc0VaTszzuYL3w65O6fXj01UC+wFMUxEbsQ2bta/zSirbqR6Pmi//yzeVs hINFDePeNugljL7ARxe6SWTSII82M/kn8E363jcE7ghPvU1Ay12pJlt0Fc0/gR5/ bK/KMWfIRoxDmP4NgNhatD2FbekLrB9qWX64wvNcx6pdW9c5ZYLXtCXL7DkzD3zG iDw4fa+w3kEQdwb1Rd6E0u3dLIUwuPAZJe0LGLZIoVw9pJ+dMCHYWwF8KDObWqPn Aw== -----END CERTIFICATE-----Generated at Tue Nov 11 16:46:13 2025 by rpki-client