$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft File: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft (raw, json) Hash identifier: OWFvTSmyNgoC7AubHl78sjzk3qf+Jy/SDhixXGhHyCs= Subject key identifier: C5:AE:59:A3:02:20:67:A2:F4:51:82:FC:B8:1D:5A:20:D8:AB:0B:88 Authority key identifier: 0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 Certificate issuer: /CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Certificate serial: 26D77915581826041EABDCDBA756579270861746 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft Manifest number: 0252 Signing time: Thu 23 Oct 2025 04:08:15 +0000 Manifest this update: Thu 23 Oct 2025 04:03:15 +0000 Manifest next update: Fri 24 Oct 2025 06:32:15 +0000 Files and hashes: 1: 326131343a373538313a6430303a3a2f34302d3438203d3e20323136343532.roa (hash: jAqeRW+G0tj75/HjlTu9upVrXQ/2AvwaP0ubMorKA1Q=) 2: 326131343a373538313a6430303a3a2f34342d3438203d3e203331383938.roa (hash: OYFGGb9dMqAtV18cBeD3NbZ0TuwCvJXmn37LZwaW7zg=) 3: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl (hash: XW0X/pJhdUItJ4nd9mfrL5NTu7f+PXMJzoOMHZi7/h4=) 4: 326131343a373538343a373030303a3a2f33362d3434203d3e20323136343532.roa (hash: bjWKUcdJK3JxiL+GqIgQQNiLJnq1CfKPBgs/UuOHrJA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 02:37:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:d7:79:15:58:18:26:04:1e:ab:dc:db:a7:56:57:92:70:86:17:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Validity Not Before: Oct 23 04:03:15 2025 GMT Not After : Oct 24 06:32:15 2025 GMT Subject: CN=C5AE59A3022067A2F45182FCB81D5A20D8AB0B88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d3:7b:d0:4c:49:b6:12:ca:e1:77:63:bb:77: 90:8f:9a:2c:5a:ab:b0:3d:21:55:e1:a9:41:49:66: 9f:c0:fb:82:77:49:bf:f6:a6:fe:e6:07:43:ef:07: 12:d0:50:7c:70:f4:f9:6f:99:c5:88:fa:ef:c7:e0: ea:16:74:b7:cd:18:49:ce:04:87:bf:df:7a:ba:a7: 64:cd:11:02:27:48:e7:dc:2a:1f:01:22:c0:e4:70: c3:61:27:72:38:45:d3:a5:f1:2e:aa:25:e2:e9:c4: 00:6f:0e:dd:a6:fa:ec:af:9b:8f:a9:6d:e6:43:d5: e6:d6:9e:a0:b6:57:d9:cb:d5:f6:0a:b2:d7:11:8e: de:de:53:96:a4:13:12:2c:0f:f5:44:39:c4:47:69: a2:15:27:1e:42:9e:d4:05:bf:c1:7b:43:b0:3b:69: c2:6d:af:8f:ff:62:bc:7b:da:8f:55:3a:47:7f:bb: e8:0b:d5:06:4e:89:9e:d2:b2:87:47:bc:d2:e4:d0: 12:bf:4e:f3:83:79:35:e3:86:34:cf:95:59:d2:c7: 40:c8:10:0a:a1:58:1b:be:a8:f4:83:be:c4:df:18: 45:a5:15:1d:ee:59:71:a4:cf:3d:d9:d3:2d:21:b7: 10:bd:75:14:a7:23:4b:1c:6c:2d:fc:0f:ca:a2:f9: ff:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AE:59:A3:02:20:67:A2:F4:51:82:FC:B8:1D:5A:20:D8:AB:0B:88 X509v3 Authority Key Identifier: keyid:0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:66:cb:ba:82:88:4b:03:57:3c:9a:57:0e:cd:b6:b2:e5:d1: 19:30:c0:06:72:58:d1:b3:ef:cf:87:16:fb:3b:15:37:3a:73: 87:37:c5:4b:b4:6a:0b:32:3f:db:7b:f4:c4:a5:ce:aa:49:00: 10:e5:c8:82:5e:f5:01:14:ac:34:09:68:ad:b3:fb:38:53:b2: ea:e1:c9:16:ca:ac:87:81:26:4a:ca:de:f0:8c:b6:c4:7f:f9: 6d:52:ea:46:ea:1c:12:55:00:4a:78:bf:10:db:41:77:26:0e: 8b:66:6b:eb:66:94:b4:29:f6:c1:e1:07:73:92:9f:53:2a:4a: 26:b7:17:fa:76:0f:14:b7:bf:76:a3:66:24:44:e6:58:d3:bb: ff:8f:35:8a:b9:a6:11:80:00:a9:be:0b:3f:3b:34:be:67:d7: 5a:01:79:e0:70:47:7b:ae:9d:56:7b:36:12:86:5d:42:e0:ba: d0:05:c0:71:3a:60:c9:25:f1:a3:73:d1:c3:d4:b0:d9:8b:2f: 24:22:b9:28:42:d2:51:1c:b3:87:92:b1:fb:ae:0c:61:d7:62: 23:84:a2:dc:a9:f4:f5:c6:6c:31:3f:03:6b:a0:2b:8f:0a:9c: 3e:09:73:18:e1:e7:00:b2:e3:53:bf:d7:30:eb:b6:db:cd:5d: 8b:33:00:44 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUJtd5FVgYJgQeq9zbp1ZXknCGF0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZG QjgyM0U0NTAeFw0yNTEwMjMwNDAzMTVaFw0yNTEwMjQwNjMyMTVaMDMxMTAvBgNV BAMTKEM1QUU1OUEzMDIyMDY3QTJGNDUxODJGQ0I4MUQ1QTIwRDhBQjBCODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo03vQTEm2Esrhd2O7d5CPmixa q7A9IVXhqUFJZp/A+4J3Sb/2pv7mB0PvBxLQUHxw9PlvmcWI+u/H4OoWdLfNGEnO BIe/33q6p2TNEQInSOfcKh8BIsDkcMNhJ3I4RdOl8S6qJeLpxABvDt2m+uyvm4+p beZD1ebWnqC2V9nL1fYKstcRjt7eU5akExIsD/VEOcRHaaIVJx5CntQFv8F7Q7A7 acJtr4//Yrx72o9VOkd/u+gL1QZOiZ7SsodHvNLk0BK/TvODeTXjhjTPlVnSx0DI EAqhWBu+qPSDvsTfGEWlFR3uWXGkzz3Z0y0htxC9dRSnI0scbC38D8qi+f8xAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUxa5ZowIgZ6L0UYL8uB1aINirC4gwHwYDVR0j BBgwFoAUCothqETWwsevOO3L0WXQ7/uCPkUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzEvMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZGQjgyM0U0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wQThCNjFBODQ0RDZDMkM3QUYzOEVEQ0JE MTY1RDBFRkZCODIzRTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcyYzQwNWYxLWMzMmQtNDdjZS04OTQzLTA3NTJlZDEzZDhlZi8xLzBBOEI2MUE4 NDRENkMyQzdBRjM4RURDQkQxNjVEMEVGRkI4MjNFNDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA/Zsu6 gohLA1c8mlcOzbay5dEZMMAGcljRs+/Phxb7OxU3OnOHN8VLtGoLMj/be/TEpc6q SQAQ5ciCXvUBFKw0CWits/s4U7Lq4ckWyqyHgSZKyt7wjLbEf/ltUupG6hwSVQBK eL8Q20F3Jg6LZmvrZpS0KfbB4Qdzkp9TKkomtxf6dg8Ut792o2YkROZY07v/jzWK uaYRgACpvgs/OzS+Z9daAXngcEd7rp1WezYShl1C4LrQBcBxOmDJJfGjc9HD1LDZ iy8kIrkoQtJRHLOHkrH7rgxh12IjhKLcqfT1xmwxPwNroCuPCpw+CXMY4ecAsuNT v9cw67bbzV2LMwBE -----END CERTIFICATE-----Generated at Thu Oct 23 10:24:33 2025 by rpki-client