$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft File: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft (raw, json) Hash identifier: LxGYcaX/1q5oULdg6bO9xKorihNQdP3n63OQ6Leb5KQ= Subject key identifier: CC:F0:19:83:CF:39:9C:41:54:F3:85:C9:5A:34:C3:2C:B6:24:DA:F5 Authority key identifier: 1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 Certificate issuer: /CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Certificate serial: 0975D70513C5455914E20E8A610136BFB2ACDBFE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft Manifest number: 0301 Signing time: Tue 21 Oct 2025 21:39:45 +0000 Manifest this update: Tue 21 Oct 2025 21:34:45 +0000 Manifest next update: Thu 23 Oct 2025 00:20:45 +0000 Files and hashes: 1: 326131343a316563373a663030303a3a2f34302d3430203d3e20323038343533.roa (hash: kUd+OV7q9DAowS2L3/fdq/oS4HUMTFtScny+gWU7CG0=) 2: 326131343a316563373a663030653a3a2f34382d3438203d3e203336383332.roa (hash: 0dTOq5r3nzcU4nhnM0SPSmfHWBkaaGJU3KJhAxTcvLU=) 3: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl (hash: 4letJHq4NKFK3+3O9wK/1DfIBM7w1pIREoq37ZaP17M=) 4: 326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa (hash: ZBQrTYQq6EzEXXQqVVLmnECxmx5vDStz1fI8gjrWa9o=) 5: 326131343a316563373a663030643a3a2f34382d3438203d3e20323136313133.roa (hash: RA+L2a9rUnQEkE0h3dE9SdgUVHKokLJZl3eEmnwupDU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 23 Oct 2025 00:20:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:75:d7:05:13:c5:45:59:14:e2:0e:8a:61:01:36:bf:b2:ac:db:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Validity Not Before: Oct 21 21:34:45 2025 GMT Not After : Oct 23 00:20:45 2025 GMT Subject: CN=CCF01983CF399C4154F385C95A34C32CB624DAF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:83:5c:c1:96:a4:95:27:8d:c8:e2:3c:08:86: 85:58:b1:b3:98:da:01:d1:99:ef:89:78:7b:52:a3: a9:49:93:24:4a:08:c5:29:47:e7:f6:6e:81:17:d3: 4c:3f:ce:e2:59:69:12:97:6d:a4:0f:c5:30:67:de: f2:9b:af:4a:07:7c:ce:23:d3:ff:aa:59:71:0f:ae: 12:3c:56:0c:95:d2:3f:c0:10:fc:07:dc:5e:71:99: 97:ba:1f:c3:25:2c:cb:e3:d2:21:c2:ff:b9:ad:f1: 7d:58:62:44:bc:1e:04:98:50:77:57:2c:99:de:1b: 80:f1:03:cc:12:fc:4f:13:3c:cf:68:26:77:44:9b: dc:70:29:70:f9:9f:d6:f2:99:19:ee:ea:f8:f4:5f: 5c:60:66:8c:38:26:ce:53:48:6a:57:21:c4:99:5f: aa:58:d0:81:6e:d3:5f:63:6b:3c:4c:0c:00:72:45: b1:d1:66:ab:09:61:61:e7:7c:63:3e:b5:a2:ed:70: 4d:0e:4d:4c:34:79:01:fc:b9:a6:50:65:c5:52:13: b7:2d:20:a5:cf:7f:2f:87:84:2b:ff:33:ff:dc:ea: c8:65:45:56:36:23:1f:5f:b6:74:20:73:be:0f:80: 4c:2b:d6:21:36:3b:a4:57:c2:cd:ab:0c:7c:62:b2: 10:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F0:19:83:CF:39:9C:41:54:F3:85:C9:5A:34:C3:2C:B6:24:DA:F5 X509v3 Authority Key Identifier: keyid:1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:af:a0:60:58:89:24:a3:a8:29:00:6c:b9:ad:20:dd:a1:7b: 7d:9b:7d:af:23:11:0d:0c:fc:2f:d5:dd:c8:f6:e5:ab:14:57: e0:cb:76:6d:46:c6:80:e2:01:dc:8f:6a:3b:46:a0:fc:2e:99: 1a:fa:31:e9:6f:8f:3e:63:c2:c4:aa:72:7c:3e:c5:3e:21:bc: 5e:d7:c4:c8:86:ea:87:f2:b2:e9:26:51:38:ca:42:5b:e3:18: 04:09:82:ed:85:93:39:92:b2:1f:92:a1:4c:83:09:01:bb:93: cb:c5:28:d5:6f:a0:99:e6:a6:c7:9a:f3:95:29:ad:5a:df:ed: e5:6a:ba:78:cb:d5:1e:bf:52:87:08:31:ee:7a:f9:f6:b1:08: fb:cf:f1:08:32:c9:c2:81:7a:b8:55:05:58:dc:60:27:7f:55: c9:06:8b:dd:c2:dd:00:d8:ec:d7:46:46:ea:85:83:db:11:68: b0:6b:06:e1:30:f4:87:64:e8:18:c3:07:17:9d:d5:db:ef:bb: 0f:66:93:09:f4:ea:19:05:25:d7:00:c4:2b:02:81:d0:ae:46: 5f:e9:4b:5b:00:83:50:77:cd:9f:0c:f2:d1:32:d9:c8:4f:38: 4e:8a:7b:6a:18:02:11:9e:c7:7a:b9:95:98:bc:bb:66:64:81: 67:6c:0f:f6 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUCXXXBRPFRVkU4g6KYQE2v7Ks2/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVG ODNFMEU3MTAeFw0yNTEwMjEyMTM0NDVaFw0yNTEwMjMwMDIwNDVaMDMxMTAvBgNV BAMTKENDRjAxOTgzQ0YzOTlDNDE1NEYzODVDOTVBMzRDMzJDQjYyNERBRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4g1zBlqSVJ43I4jwIhoVYsbOY 2gHRme+JeHtSo6lJkyRKCMUpR+f2boEX00w/zuJZaRKXbaQPxTBn3vKbr0oHfM4j 0/+qWXEPrhI8VgyV0j/AEPwH3F5xmZe6H8MlLMvj0iHC/7mt8X1YYkS8HgSYUHdX LJneG4DxA8wS/E8TPM9oJndEm9xwKXD5n9bymRnu6vj0X1xgZow4Js5TSGpXIcSZ X6pY0IFu019jazxMDAByRbHRZqsJYWHnfGM+taLtcE0OTUw0eQH8uaZQZcVSE7ct IKXPfy+HhCv/M//c6shlRVY2Ix9ftnQgc74PgEwr1iE2O6RXws2rDHxishAfAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUzPAZg885nEFU84XJWjTDLLYk2vUwHwYDVR0j BBgwFoAUHb0dR/2ORXTIQhdDycxfDvg+DnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzIvMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVGODNFMEU3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8xREJEMUQ0N0ZEOEU0NTc0Qzg0MjE3NDND OUNDNUYwRUY4M0UwRTcxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8yLzFEQkQxRDQ3 RkQ4RTQ1NzRDODQyMTc0M0M5Q0M1RjBFRjgzRTBFNzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBPr6Bg WIkko6gpAGy5rSDdoXt9m32vIxENDPwv1d3I9uWrFFfgy3ZtRsaA4gHcj2o7RqD8 Lpka+jHpb48+Y8LEqnJ8PsU+Ibxe18TIhuqH8rLpJlE4ykJb4xgECYLthZM5krIf kqFMgwkBu5PLxSjVb6CZ5qbHmvOVKa1a3+3larp4y9Uev1KHCDHuevn2sQj7z/EI MsnCgXq4VQVY3GAnf1XJBovdwt0A2OzXRkbqhYPbEWiwawbhMPSHZOgYwwcXndXb 77sPZpMJ9OoZBSXXAMQrAoHQrkZf6UtbAINQd82fDPLRMtnITzhOintqGAIRnsd6 uZWYvLtmZIFnbA/2 -----END CERTIFICATE-----Generated at Wed Oct 22 10:28:07 2025 by rpki-client