$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft File: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft (raw, json) Hash identifier: 6tKSdAIIsEqXjf9lvFp6TRGfKf52R+7GGaa7D71q5Pk= Subject key identifier: 80:09:FF:B7:5D:BA:BD:37:67:C0:9A:5E:D4:A9:59:7E:20:43:7D:9A Authority key identifier: 0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30 Certificate issuer: /CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30 Certificate serial: 4B26295A1D4F0C8810268AAA11F76300E128EC69 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft Manifest number: 04B5 Signing time: Wed 29 Oct 2025 12:43:15 +0000 Manifest this update: Wed 29 Oct 2025 12:38:15 +0000 Manifest next update: Thu 30 Oct 2025 16:00:15 +0000 Files and hashes: 1: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl (hash: zYk89l1V8fEva0NveoFEJviNCscr+vwQ5YWYeUHt4O4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Oct 2025 23:56:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:26:29:5a:1d:4f:0c:88:10:26:8a:aa:11:f7:63:00:e1:28:ec:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30 Validity Not Before: Oct 29 12:38:15 2025 GMT Not After : Oct 30 16:00:15 2025 GMT Subject: CN=8009FFB75DBABD3767C09A5ED4A9597E20437D9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:de:13:5e:60:e9:aa:c4:1c:68:2b:31:03:28: 58:58:62:5d:f5:71:0b:36:9e:f3:6d:f4:5c:ed:c9: 1c:41:3b:5c:2d:d3:9b:8e:2f:09:c7:16:4f:b5:3e: a5:02:d1:e3:18:5e:36:ae:a5:8b:fb:4b:21:4e:db: b7:54:9d:8d:45:d6:52:ae:3f:1d:c2:8b:c1:22:47: 90:b8:9e:ca:3a:d2:bf:14:42:cd:22:2c:76:f6:eb: 36:39:30:76:61:ff:7f:b3:dc:33:5c:f2:1f:76:16: 29:6f:35:26:a2:a9:81:a2:d0:38:2b:e4:d2:2d:ab: 8c:d4:24:99:14:a5:2b:c7:fa:fe:54:b0:91:93:31: dc:86:8d:2b:c5:eb:e0:f8:1d:1d:e5:9a:a6:66:bb: 6e:ad:3a:73:32:c1:f9:de:72:e4:19:a0:27:17:02: 93:35:f3:5e:29:7c:17:dd:ee:b4:a1:33:9b:65:77: 34:d8:56:05:16:f7:e6:25:b9:1b:11:e4:06:1d:ea: c8:94:1c:31:91:55:cc:0a:c6:fb:82:c6:cd:37:76: 31:b8:74:3f:8c:17:a0:ca:00:26:aa:3a:3b:c5:b0: 67:d3:8a:54:94:ed:67:4e:ed:3d:04:93:d1:b3:9f: fb:59:dc:9d:59:15:a1:07:b9:fa:0e:fa:3c:65:e9: 74:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:09:FF:B7:5D:BA:BD:37:67:C0:9A:5E:D4:A9:59:7E:20:43:7D:9A X509v3 Authority Key Identifier: keyid:0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:57:9e:14:80:c0:b7:81:f3:4e:30:34:15:75:94:8a:7e:b2: f9:c1:9e:21:76:94:91:b7:64:90:69:e9:b1:c8:37:43:a6:ed: a2:6c:cc:86:24:3e:d4:11:6c:ba:a9:a7:a5:7d:b8:8e:1a:68: e5:1c:ca:ae:fa:ba:24:2c:8e:c0:33:a4:e5:20:5b:c7:0a:5b: ea:8c:d8:87:81:57:50:25:94:a0:22:67:af:39:20:7c:17:ab: 83:c7:39:44:db:e1:98:43:2e:e2:cc:b2:27:44:23:ac:6e:96: e5:74:8e:e7:d1:dc:b7:a2:41:e2:27:1d:9e:51:39:ee:57:92: eb:0b:aa:9a:36:13:f8:4c:39:24:a7:5f:58:fc:dc:9d:01:e8: 55:2a:a2:b4:2b:fc:fe:32:64:07:4b:42:af:6e:cf:95:66:b4: 0b:f6:cd:16:e4:22:47:b7:4d:2b:e2:45:a4:7c:00:01:96:a6: b7:73:9c:4c:ce:cc:a9:94:02:f4:e8:75:c2:ae:04:a9:68:8e: 52:fe:37:7d:c8:5b:10:07:04:40:69:64:1f:33:ff:63:34:0a: 96:50:e9:a5:06:c1:3e:a0:13:45:6b:bb:7f:70:34:6d:5a:3c: 37:9b:7b:1b:88:cc:22:62:0c:65:57:63:1d:0b:62:31:ba:3e: 8f:ad:9f:41 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSyYpWh1PDIgQJoqqEfdjAOEo7GkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUx RDA0MEEzMDAeFw0yNTEwMjkxMjM4MTVaFw0yNTEwMzAxNjAwMTVaMDMxMTAvBgNV BAMTKDgwMDlGRkI3NURCQUJEMzc2N0MwOUE1RUQ0QTk1OTdFMjA0MzdEOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS3hNeYOmqxBxoKzEDKFhYYl31 cQs2nvNt9FztyRxBO1wt05uOLwnHFk+1PqUC0eMYXjaupYv7SyFO27dUnY1F1lKu Px3Ci8EiR5C4nso60r8UQs0iLHb26zY5MHZh/3+z3DNc8h92FilvNSaiqYGi0Dgr 5NItq4zUJJkUpSvH+v5UsJGTMdyGjSvF6+D4HR3lmqZmu26tOnMywfnecuQZoCcX ApM1814pfBfd7rShM5tldzTYVgUW9+YluRsR5AYd6siUHDGRVcwKxvuCxs03djG4 dD+MF6DKACaqOjvFsGfTilSU7WdO7T0Ek9Gzn/tZ3J1ZFaEHufoO+jxl6XTBAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUgAn/t126vTdnwJpe1KlZfiBDfZowHwYDVR0j BBgwFoAUDk68Qx41E/w/ZB24gOKy/h0ECjAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm YmY1LzEvMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUxRDA0MEEzMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00YjFhLTQ2 ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC8wRTRFQkM0MzFFMzUxM0ZDM0Y2NDFEQjg4 MEUyQjJGRTFEMDQwQTMwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzgxMTE1YmM2LTEwZjYtNGFmMy1iYTA5LThiNjg3YTU2ZmJmNS8xLzBFNEVCQzQz MUUzNTEzRkMzRjY0MURCODgwRTJCMkZFMUQwNDBBMzAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA1V54U gMC3gfNOMDQVdZSKfrL5wZ4hdpSRt2SQaemxyDdDpu2ibMyGJD7UEWy6qaelfbiO GmjlHMqu+rokLI7AM6TlIFvHClvqjNiHgVdQJZSgImevOSB8F6uDxzlE2+GYQy7i zLInRCOsbpbldI7n0dy3okHiJx2eUTnuV5LrC6qaNhP4TDkkp19Y/NydAehVKqK0 K/z+MmQHS0Kvbs+VZrQL9s0W5CJHt00r4kWkfAABlqa3c5xMzsyplAL06HXCrgSp aI5S/jd9yFsQBwRAaWQfM/9jNAqWUOmlBsE+oBNFa7t/cDRtWjw3m3sbiMwiYgxl V2MdC2Ixuj6PrZ9B -----END CERTIFICATE-----Generated at Wed Oct 29 16:14:15 2025 by rpki-client