$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft File: 307456E03A11DBB48443E93538958B15B4E9E0F0.mft (raw, json) Hash identifier: EMy9jvwdptH3+DrEvRjiszqIFGBR/eYYI+ZbujMa+x8= Subject key identifier: 0B:CD:AC:26:77:35:2E:DA:1D:76:ED:AB:F9:51:F8:85:5A:B2:CE:AE Authority key identifier: 30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0 Certificate issuer: /CN=307456E03A11DBB48443E93538958B15B4E9E0F0 Certificate serial: 52990A4EB9E4225BFA573A52333031DD988E874A Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft Manifest number: 6D Signing time: Wed 08 Oct 2025 23:23:08 +0000 Manifest this update: Wed 08 Oct 2025 23:18:08 +0000 Manifest next update: Fri 10 Oct 2025 01:15:08 +0000 Files and hashes: 1: 3130332e3133392e38382e302f32342d3234203d3e20323134383039.roa (hash: aBp6U2aVMH3hSM5eeFVi+p63pJd0WYDoQYC72uEJ/w8=) 2: 307456E03A11DBB48443E93538958B15B4E9E0F0.crl (hash: XcC3wyEK4U7ej/HewOhPtG3/RyN1BIH3QhbqU7T6uM4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 10 Oct 2025 01:15:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:99:0a:4e:b9:e4:22:5b:fa:57:3a:52:33:30:31:dd:98:8e:87:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307456E03A11DBB48443E93538958B15B4E9E0F0 Validity Not Before: Oct 8 23:18:08 2025 GMT Not After : Oct 10 01:15:08 2025 GMT Subject: CN=0BCDAC2677352EDA1D76EDABF951F8855AB2CEAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b2:77:58:a7:90:ad:a0:ec:bb:0b:f7:71:a6: 75:fe:3e:32:d7:d8:38:a1:e7:f0:1e:1e:b7:da:df: 87:5f:a5:66:12:6d:2c:bf:2d:08:83:4f:61:88:05: 64:40:53:f0:69:17:81:10:4c:8b:15:74:b6:03:45: 66:c3:c0:7d:53:c5:c3:c9:68:62:c4:0a:0c:cd:98: 98:46:e4:44:40:17:b9:54:20:79:12:a6:6d:83:ba: 84:79:3e:76:06:5b:93:48:ac:cf:d4:6c:7c:35:37: 9d:c0:35:4a:9d:44:46:f0:f1:4b:2c:11:80:32:85: 36:42:87:06:07:10:dd:19:45:c1:45:a2:02:85:f5: f8:a6:e6:6a:af:16:bc:f5:c5:9b:aa:33:46:f8:57: 5d:d7:0e:b1:c4:4e:33:c1:bd:74:4f:b4:e6:f9:f5: f2:84:7f:aa:d1:1e:0b:c5:10:a6:60:77:0b:3b:44: 34:62:17:30:b4:1e:11:d3:02:8c:ad:78:dd:6d:9a: 51:bb:c3:6c:68:aa:3c:77:62:ea:14:04:25:07:bf: fe:54:82:62:e5:f2:b7:84:f4:60:45:54:aa:98:89: 44:52:e0:bd:d4:57:df:e2:a0:38:0b:bd:5a:f4:88: fa:96:94:f9:85:bd:72:a2:e9:69:a8:fb:a0:47:07: c1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:CD:AC:26:77:35:2E:DA:1D:76:ED:AB:F9:51:F8:85:5A:B2:CE:AE X509v3 Authority Key Identifier: keyid:30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:d8:48:26:c2:06:f9:84:78:9d:1b:f7:6d:24:57:df:4a:18: 6c:fa:2f:e8:51:9d:d8:f5:de:f7:e2:93:5c:08:20:bf:a8:33: b0:27:1d:c1:a3:83:fa:88:ca:ac:e4:04:f2:83:53:3f:98:46: 6a:e0:46:5b:0d:d2:c9:14:1d:89:ba:cd:23:50:eb:51:ac:49: 22:e2:15:72:3b:0e:2d:97:bf:9c:5b:b4:a9:25:8a:be:46:b1: 90:e4:90:44:62:a5:11:19:71:2d:fc:ff:89:fa:e3:73:8d:a1: 98:b6:6b:36:e2:83:b1:d4:c1:8f:a4:e7:9b:9f:ef:a0:9e:12: b2:86:52:72:6f:22:6b:57:67:d1:e3:71:ec:1d:ca:95:a7:64: 65:18:a6:7f:b4:f4:7f:88:62:68:3c:ad:66:21:9e:6c:b8:93: 7f:24:65:3d:1e:40:8c:dc:48:a0:18:3e:18:44:7f:4a:33:6e: eb:09:e1:6c:86:8b:ef:26:54:1e:ce:b2:c9:0f:83:52:bf:17: 3e:91:71:87:d3:31:2a:8a:7c:81:45:a7:80:7f:02:ce:cc:01: 56:7c:70:9a:9b:7e:59:15:de:b5:b6:3d:bc:b8:6e:ab:73:cc: ae:6d:08:fd:67:0d:dc:52:3d:f6:4b:d1:12:26:b9:6a:4d:7f: dd:8b:f0:56 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUUpkKTrnkIlv6VzpSMzAx3ZiOh0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVC NEU5RTBGMDAeFw0yNTEwMDgyMzE4MDhaFw0yNTEwMTAwMTE1MDhaMDMxMTAvBgNV BAMTKDBCQ0RBQzI2NzczNTJFREExRDc2RURBQkY5NTFGODg1NUFCMkNFQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqsndYp5CtoOy7C/dxpnX+PjLX 2Dih5/AeHrfa34dfpWYSbSy/LQiDT2GIBWRAU/BpF4EQTIsVdLYDRWbDwH1TxcPJ aGLECgzNmJhG5ERAF7lUIHkSpm2DuoR5PnYGW5NIrM/UbHw1N53ANUqdREbw8Uss EYAyhTZChwYHEN0ZRcFFogKF9fim5mqvFrz1xZuqM0b4V13XDrHETjPBvXRPtOb5 9fKEf6rRHgvFEKZgdws7RDRiFzC0HhHTAoyteN1tmlG7w2xoqjx3YuoUBCUHv/5U gmLl8reE9GBFVKqYiURS4L3UV9/ioDgLvVr0iPqWlPmFvXKi6Wmo+6BHB8FxAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUC82sJnc1Ltoddu2r+VH4hVqyzq4wHwYDVR0j BBgwFoAUMHRW4DoR27SEQ+k1OJWLFbTp4PAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzEvMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVCNEU5RTBGMC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVCNEU5 RTBGMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTA5OGMyMy1h OTc3LTRmOWEtOTdjOS1jZDRlNzU5ZGVhMDkvMS8zMDc0NTZFMDNBMTFEQkI0ODQ0 M0U5MzUzODk1OEIxNUI0RTlFMEYwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQthIJsIG+YR4nRv3bSRX 30oYbPov6FGd2PXe9+KTXAggv6gzsCcdwaOD+ojKrOQE8oNTP5hGauBGWw3SyRQd ibrNI1DrUaxJIuIVcjsOLZe/nFu0qSWKvkaxkOSQRGKlERlxLfz/ifrjc42hmLZr NuKDsdTBj6Tnm5/voJ4SsoZScm8ia1dn0eNx7B3KladkZRimf7T0f4hiaDytZiGe bLiTfyRlPR5AjNxIoBg+GER/SjNu6wnhbIaL7yZUHs6yyQ+DUr8XPpFxh9MxKop8 gUWngH8CzswBVnxwmpt+WRXetbY9vLhuq3PMrm0I/WcN3FI99kvREia5ak1/3Yvw Vg== -----END CERTIFICATE-----Generated at Thu Oct 9 07:53:41 2025 by rpki-client