$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft File: B3D0280F500695A43204251C9830454CA8A2E7AC.mft (raw, json) Hash identifier: MxZQ6ufPgZiBdD97V64ARHpX85B56U7L3rB3l48n0qU= Subject key identifier: E6:0E:4E:0D:D2:03:9E:89:19:81:92:8A:58:93:B9:DF:53:C3:89:D7 Authority key identifier: B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC Certificate issuer: /CN=b3d0280f500695a43204251c9830454ca8a2e7ac Certificate serial: 04CA6338511919EC9F60292AC981C85322443BCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft Manifest number: 02B3 Signing time: Wed 08 Oct 2025 18:05:55 +0000 Manifest this update: Wed 08 Oct 2025 18:00:55 +0000 Manifest next update: Thu 09 Oct 2025 18:05:55 +0000 Files and hashes: 1: B3D0280F500695A43204251C9830454CA8A2E7AC.crl (hash: tv+p+CCIo7sbtgWAllXVXGFZ1s81RRlg7TkrUbWc+Ag=) 2: 3138352e3138362e32362e302f32342d3234203d3e20323135373033.roa (hash: FBdBmLEGxXhvarnPJcmElFlCgeLSIQ6GXw75K+usirs=) 3: 3138352e3138362e32352e302f32342d3234203d3e203135343430.roa (hash: zbKaWYwmjPPC167P5YL6I94JcPZEWN0HKnmqpfcR9u4=) 4: 3138352e3138362e32372e302f32342d3234203d3e203631333137.roa (hash: jD3TEx8Q8JwdsmzwyDZ9zaukL1sMlGUp0uzFac23xJs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 09 Oct 2025 18:05:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ca:63:38:51:19:19:ec:9f:60:29:2a:c9:81:c8:53:22:44:3b:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d0280f500695a43204251c9830454ca8a2e7ac Validity Not Before: Oct 8 18:00:55 2025 GMT Not After : Oct 9 18:05:55 2025 GMT Subject: CN=E60E4E0DD2039E891981928A5893B9DF53C389D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:29:27:4c:a2:94:66:5f:ee:ac:3d:9e:c3:7b: bb:1b:a0:fe:9d:14:14:1a:d4:35:a9:7c:23:1a:b5: 99:bf:8f:ab:64:7a:ab:ae:fc:68:20:40:26:44:fe: 92:42:27:59:e7:3d:b5:e0:ae:7b:1f:84:6e:5d:d8: 49:f8:19:4d:64:e1:33:b9:8c:5b:b2:c9:0b:eb:0f: a8:a1:0d:2b:27:b2:b2:67:f4:f5:bf:c0:a8:11:83: 17:1d:97:77:71:ee:3c:b6:24:6c:a4:15:17:9b:37: 4a:11:a7:d7:07:35:56:56:2a:a8:b9:58:8d:1e:6c: ed:0f:91:fa:ab:4d:90:29:27:cc:9c:c0:fb:ec:28: b6:d9:92:ab:a8:63:24:90:e5:ad:63:6a:4b:25:dc: a1:0f:26:1d:3c:19:bb:9c:04:50:41:a6:69:0c:ff: ca:1b:f2:b2:79:d0:c2:3b:93:0b:35:79:96:b0:26: a3:ff:54:10:d3:dd:e0:72:eb:14:eb:a8:eb:19:13: 95:d3:a2:ea:0c:a9:1a:43:f4:96:e2:01:3e:d0:0c: 4e:62:91:e3:49:91:15:ed:33:1b:73:06:06:09:21: a7:7f:69:b2:96:75:40:82:7e:e0:ee:92:72:51:db: 9e:ae:5e:68:b6:92:69:98:e5:c5:6d:01:82:70:86: cf:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:0E:4E:0D:D2:03:9E:89:19:81:92:8A:58:93:B9:DF:53:C3:89:D7 X509v3 Authority Key Identifier: keyid:B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:de:02:e9:84:b7:11:d7:fc:0b:2a:b6:1c:a0:06:21:76:d4: ba:b6:bf:96:bc:18:70:b8:d0:da:f8:ce:31:47:34:69:fe:92: 6f:74:e8:fa:f2:43:21:8a:4b:37:dc:f6:c7:76:78:4b:b5:2f: 07:5f:99:10:56:35:cc:66:c2:c0:74:00:c3:05:da:5d:fa:5c: 51:fb:2f:b5:17:ff:09:2d:71:da:03:09:24:e1:3d:30:96:17: f8:1b:83:73:87:3e:4e:0b:b2:7e:45:b1:3b:45:b8:6e:de:df: 6c:f6:4f:29:3a:02:0e:40:70:22:0e:8b:6d:b7:fc:95:b9:e6: 13:7c:e4:b8:ae:fc:09:c7:34:dd:97:1e:43:6a:99:f9:3e:7d: 49:30:5e:88:bc:93:dd:5d:ac:d0:9d:c5:b1:7e:fb:20:6b:54: e8:9d:03:92:41:54:97:7e:6e:15:07:54:8a:82:a1:03:e2:30: 0f:dc:d4:d5:23:75:84:a7:d9:7a:bd:3e:09:d8:e6:90:d1:96: 8d:e6:32:33:8e:d4:63:de:5c:bc:f7:20:62:98:b8:35:8c:37: 75:4d:f2:8b:ef:b7:41:e8:5e:c1:bc:b2:f3:ae:87:76:0d:bc: 22:7d:0f:39:26:09:fe:6d:b4:ce:2a:7f:b3:d0:e6:b3:7a:56: f3:f7:19:49 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBMpjOFEZGeyfYCkqyYHIUyJEO88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjNkMDI4MGY1MDA2OTVhNDMyMDQyNTFjOTgzMDQ1NGNh OGEyZTdhYzAeFw0yNTEwMDgxODAwNTVaFw0yNTEwMDkxODA1NTVaMDMxMTAvBgNV BAMTKEU2MEU0RTBERDIwMzlFODkxOTgxOTI4QTU4OTNCOURGNTNDMzg5RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbKSdMopRmX+6sPZ7De7sboP6d FBQa1DWpfCMatZm/j6tkequu/GggQCZE/pJCJ1nnPbXgrnsfhG5d2En4GU1k4TO5 jFuyyQvrD6ihDSsnsrJn9PW/wKgRgxcdl3dx7jy2JGykFRebN0oRp9cHNVZWKqi5 WI0ebO0PkfqrTZApJ8ycwPvsKLbZkquoYySQ5a1jaksl3KEPJh08GbucBFBBpmkM /8ob8rJ50MI7kws1eZawJqP/VBDT3eBy6xTrqOsZE5XTouoMqRpD9JbiAT7QDE5i keNJkRXtMxtzBgYJIad/abKWdUCCfuDuknJR256uXmi2kmmY5cVtAYJwhs/vAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU5g5ODdIDnokZgZKKWJO531PDidcwHwYDVR0j BBgwFoAUs9AoD1AGlaQyBCUcmDBFTKii56wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODdhZTI1ZjMtNzA2Yi00N2VkLWJiNzQtNDY2ODRhZTBl ZjJiLzAvQjNEMDI4MEY1MDA2OTVBNDMyMDQyNTFDOTgzMDQ1NENBOEEyRTdBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3M5QW9EMUFHbGFReUJDVWNtREJGVEtp aTU2dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84N2FlMjVmMy03 MDZiLTQ3ZWQtYmI3NC00NjY4NGFlMGVmMmIvMC9CM0QwMjgwRjUwMDY5NUE0MzIw NDI1MUM5ODMwNDU0Q0E4QTJFN0FDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAat4C6YS3Edf8Cyq2HKAG IXbUura/lrwYcLjQ2vjOMUc0af6Sb3To+vJDIYpLN9z2x3Z4S7UvB1+ZEFY1zGbC wHQAwwXaXfpcUfsvtRf/CS1x2gMJJOE9MJYX+BuDc4c+TguyfkWxO0W4bt7fbPZP KToCDkBwIg6Lbbf8lbnmE3zkuK78Ccc03ZceQ2qZ+T59STBeiLyT3V2s0J3FsX77 IGtU6J0DkkFUl35uFQdUioKhA+IwD9zU1SN1hKfZer0+CdjmkNGWjeYyM47UY95c vPcgYpi4NYw3dU3yi++3Qehewbyy866Hdg28In0POSYJ/m20zip/s9Dms3pW8/cZ SQ== -----END CERTIFICATE-----Generated at Thu Oct 9 06:20:29 2025 by rpki-client