$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft File: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft (raw, json) Hash identifier: /4oCrN3KjGRJIdHJpx40F0bU4guT2Z1eWIkUXH/8J84= Subject key identifier: E3:EF:E4:B9:7F:8A:71:92:B2:F3:FC:C0:E0:A8:CB:61:92:AD:AB:3B Authority key identifier: 0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 Certificate issuer: /CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Certificate serial: 651AF81CDBE2CE8F73BDA4AD8E2C33FD39B8FA10 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft Manifest number: 9B Signing time: Tue 28 Oct 2025 11:56:35 +0000 Manifest this update: Tue 28 Oct 2025 11:51:35 +0000 Manifest next update: Wed 29 Oct 2025 15:00:35 +0000 Files and hashes: 1: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl (hash: 6E1ZEvX/Z0D/KiKueplARWWYzLA76uUUc4YwBNEla9k=) 2: 326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (hash: PoxwFIHy8kdey2mlHnL1hmx4hhF1/GhCPxY1mv6kDWE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Oct 2025 12:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:1a:f8:1c:db:e2:ce:8f:73:bd:a4:ad:8e:2c:33:fd:39:b8:fa:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Validity Not Before: Oct 28 11:51:35 2025 GMT Not After : Oct 29 15:00:35 2025 GMT Subject: CN=E3EFE4B97F8A7192B2F3FCC0E0A8CB6192ADAB3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:42:e8:50:04:af:33:71:d6:b1:00:e2:e6:e7: 87:fd:61:aa:21:10:3e:ac:f9:2c:0c:10:c9:fd:5d: e7:33:2e:90:b0:f6:4f:23:f0:67:9d:73:ff:47:2c: 6f:71:c0:9e:d9:a7:f0:4f:84:ff:87:90:e5:52:35: f2:82:8f:13:c2:c5:8c:49:6f:54:da:5e:72:5d:84: 27:a4:38:8e:c2:be:ba:2d:e1:62:62:42:0f:b1:c9: 82:43:99:4e:ff:c6:9b:07:de:a2:8b:e9:46:ce:12: 21:db:cb:ca:b4:24:be:fc:f8:96:1a:b5:d0:59:3c: a8:fb:77:0d:eb:e8:cd:8b:c2:7f:bd:e2:55:71:43: 3f:42:e4:5e:7f:c5:63:df:cd:fe:42:0d:5d:ec:c6: c4:b5:33:d9:88:99:fc:b4:4f:f1:67:78:6a:8c:a0: 78:62:07:9e:ef:6c:6e:54:74:e1:e3:c4:bb:a7:70: 77:b2:f4:d8:c6:f2:fd:23:bc:64:3b:28:b9:02:62: 51:84:d8:76:73:73:75:01:78:2f:cb:06:16:16:70: a0:51:b4:2d:e8:ea:e6:78:48:40:e4:c0:39:a1:f1: 15:12:03:f4:33:b4:42:bb:71:3e:58:8c:0c:f9:63: 91:c9:2a:80:17:34:ef:34:57:49:02:ee:69:7c:44: 57:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:EF:E4:B9:7F:8A:71:92:B2:F3:FC:C0:E0:A8:CB:61:92:AD:AB:3B X509v3 Authority Key Identifier: keyid:0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:71:54:05:b8:9a:10:bc:55:8b:e4:ea:59:7a:8f:29:90:1e: cc:2e:a7:1e:6e:7a:2f:ef:18:f6:e4:2d:a7:5b:68:c2:a0:43: db:81:08:6b:95:dc:ae:1a:7a:61:49:e8:7e:a0:f5:45:a1:68: 52:a5:e4:c6:e4:d7:b4:d9:52:13:e6:d5:d9:c4:c8:56:c8:f8: 7f:ee:d8:39:e4:4d:f0:fc:83:fe:6a:3e:81:25:d5:4e:e9:04: a9:80:89:30:cc:31:68:d7:1b:a6:bb:56:ec:75:df:80:e2:56: 92:91:1e:07:80:90:f9:91:a2:5c:67:8d:29:42:38:a6:6b:12: 83:0f:77:88:a8:99:20:5a:9c:2d:6b:2f:b2:b0:52:dd:29:c4: ec:31:a4:53:7c:05:6b:5f:56:72:0c:15:ab:7a:f6:75:9e:bc: 66:08:55:99:f9:25:45:ff:50:ee:fb:58:da:95:28:0b:43:ca: 4b:16:a9:32:67:72:2f:b1:f5:30:89:33:ce:06:ae:da:74:da: b4:ca:3d:0d:20:de:9b:ea:ca:4d:38:65:65:27:a7:1c:e2:4b: e9:83:6d:b6:86:6f:7c:6b:9c:9f:5c:33:0f:06:ac:e3:ff:16: 22:34:de:4e:9c:88:70:32:d3:8c:52:55:d2:5f:c3:3a:2a:15: da:81:4c:0a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUZRr4HNvizo9zvaStjiwz/Tm4+hAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1 RjRCMDlCOTAeFw0yNTEwMjgxMTUxMzVaFw0yNTEwMjkxNTAwMzVaMDMxMTAvBgNV BAMTKEUzRUZFNEI5N0Y4QTcxOTJCMkYzRkNDMEUwQThDQjYxOTJBREFCM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsQuhQBK8zcdaxAOLm54f9Yaoh ED6s+SwMEMn9XeczLpCw9k8j8Gedc/9HLG9xwJ7Zp/BPhP+HkOVSNfKCjxPCxYxJ b1TaXnJdhCekOI7Cvrot4WJiQg+xyYJDmU7/xpsH3qKL6UbOEiHby8q0JL78+JYa tdBZPKj7dw3r6M2Lwn+94lVxQz9C5F5/xWPfzf5CDV3sxsS1M9mImfy0T/FneGqM oHhiB57vbG5UdOHjxLuncHey9NjG8v0jvGQ7KLkCYlGE2HZzc3UBeC/LBhYWcKBR tC3o6uZ4SEDkwDmh8RUSA/QztEK7cT5YjAz5Y5HJKoAXNO80V0kC7ml8RFdfAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU4+/kuX+KcZKy8/zA4KjLYZKtqzswHwYDVR0j BBgwFoAUCv23IiueujOmXim74/KdfF9LCbkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzMvMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1RjRCMDlCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC8wQUZEQjcyMjJCOUVCQTMzQTY1RTI5QkJF M0YyOUQ3QzVGNEIwOUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8zLzBBRkRCNzIy MkI5RUJBMzNBNjVFMjlCQkUzRjI5RDdDNUY0QjA5QjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCqcVQF uJoQvFWL5OpZeo8pkB7MLqcebnov7xj25C2nW2jCoEPbgQhrldyuGnphSeh+oPVF oWhSpeTG5Ne02VIT5tXZxMhWyPh/7tg55E3w/IP+aj6BJdVO6QSpgIkwzDFo1xum u1bsdd+A4laSkR4HgJD5kaJcZ40pQjimaxKDD3eIqJkgWpwtay+ysFLdKcTsMaRT fAVrX1ZyDBWrevZ1nrxmCFWZ+SVF/1Du+1jalSgLQ8pLFqkyZ3IvsfUwiTPOBq7a dNq0yj0NIN6b6spNOGVlJ6cc4kvpg222hm98a5yfXDMPBqzj/xYiNN5OnIhwMtOM UlXSX8M6KhXagUwK -----END CERTIFICATE-----Generated at Wed Oct 29 05:52:39 2025 by rpki-client