$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft File: 8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft (raw, json) Hash identifier: qjgILqSko1LNEpT9/dvjYiQuJFncXWzS2l2Qq82aVJk= Subject key identifier: 1C:C5:E2:AB:9A:90:03:5F:3B:CB:33:9A:4E:31:7F:1C:C1:54:5F:F4 Authority key identifier: 8B:D4:F7:EB:FF:97:63:C0:61:D5:37:B8:A1:D0:87:2D:70:69:76:32 Certificate issuer: /CN=8BD4F7EBFF9763C061D537B8A1D0872D70697632 Certificate serial: 612F1797A58B2C13928A062B422D362F1D24D785 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8BD4F7EBFF9763C061D537B8A1D0872D70697632.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft Manifest number: 4A Signing time: Fri 24 Oct 2025 01:56:47 +0000 Manifest this update: Fri 24 Oct 2025 01:51:47 +0000 Manifest next update: Sat 25 Oct 2025 04:05:47 +0000 Files and hashes: 1: 326131343a373538333a663566303a3a2f34342d3438203d3e20323135373532.roa (hash: CQeQBv1si6HjY/pqPKCiw+E43BXtrCR5FS8uJNoFCsQ=) 2: 8BD4F7EBFF9763C061D537B8A1D0872D70697632.crl (hash: WqP5fonShxT2FmG0+NNOLzdqmIOGD5eUBpLqxZHhAPE=) 3: 326131343a373538333a663532613a3a2f34382d3438203d3e20323133363035.roa (hash: aV7gG9d5Jm1xL7quU3kvraReedZSPl0atIf2oiaL4bI=) 4: 326131343a373538333a663530303a3a2f34382d3438203d3e20323133363035.roa (hash: 9/oPKwR86cNPm2ExAL4kDJvYHegTDwwsjfTcMTofdOY=) 5: 326131343a373538333a663532613a3a2f34382d3438203d3e20323130343430.roa (hash: ZdNC5XbbwwexZ9fJQgyFujAFE+pNtA0LnoesNkwLRvA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.crl rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8BD4F7EBFF9763C061D537B8A1D0872D70697632.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 21:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:2f:17:97:a5:8b:2c:13:92:8a:06:2b:42:2d:36:2f:1d:24:d7:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BD4F7EBFF9763C061D537B8A1D0872D70697632 Validity Not Before: Oct 24 01:51:47 2025 GMT Not After : Oct 25 04:05:47 2025 GMT Subject: CN=1CC5E2AB9A90035F3BCB339A4E317F1CC1545FF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:25:da:60:06:58:11:36:b7:22:c5:f2:22:19: dd:f5:7c:0a:da:e1:97:03:d1:8d:ab:96:2c:b1:ac: ca:a5:10:83:d2:5a:c0:96:40:d4:17:86:87:8f:ae: da:cd:ee:d3:cf:60:d2:3f:94:dc:35:d1:e8:6e:7a: 54:60:f2:82:92:e3:fe:c0:0f:0e:c9:8b:19:ad:1b: bb:3b:9f:fa:45:5f:21:eb:84:a2:27:fc:43:aa:3f: 61:52:8d:ba:3f:63:0d:e3:4e:8f:50:ae:82:b7:96: 1a:dc:20:8b:f5:04:c3:d9:e4:12:22:e3:3e:85:4c: 5a:97:3a:ee:6e:8c:aa:8f:26:40:e9:51:55:80:7f: 94:a1:a3:d5:09:53:40:44:60:f6:0a:ed:9a:46:15: 38:a7:26:df:91:60:b3:60:c2:6b:76:36:f7:83:0b: 08:f4:d7:c8:ac:de:95:98:cf:bf:ad:c1:ce:56:33: 64:6d:b3:c4:32:8f:f5:9f:f5:1e:d8:3e:eb:c7:1a: 8c:1b:09:fd:74:67:6a:8c:16:f2:34:c6:a7:20:77: e6:0e:2e:40:ca:05:c8:04:a2:ff:59:48:fc:b2:94: 83:fd:00:0e:31:35:4d:78:04:1a:5d:84:a3:dd:6f: 0f:09:de:72:59:fe:e3:e9:1e:c6:b4:3d:08:19:7d: b6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C5:E2:AB:9A:90:03:5F:3B:CB:33:9A:4E:31:7F:1C:C1:54:5F:F4 X509v3 Authority Key Identifier: keyid:8B:D4:F7:EB:FF:97:63:C0:61:D5:37:B8:A1:D0:87:2D:70:69:76:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8BD4F7EBFF9763C061D537B8A1D0872D70697632.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:56:31:bf:b2:15:b6:2f:70:53:85:55:45:e9:af:a2:a0:c0: 7d:fc:02:7f:71:84:8e:e6:eb:b0:52:41:d2:76:f2:dd:12:05: 86:78:b1:d0:05:7d:55:79:98:f1:22:91:0b:87:f1:42:1c:d2: 7d:21:d8:54:00:e7:18:89:a2:58:50:ae:77:39:c1:a5:8f:2e: 80:f7:25:12:a5:8e:e4:5a:7b:f7:d1:5f:53:d8:d1:39:72:90: 6c:d6:3a:c5:d4:05:f3:f1:04:96:ae:66:5f:bf:bb:b5:80:50: 16:1d:5e:01:67:86:a2:81:65:a1:a1:46:f2:94:0d:8b:99:08: 7e:5d:9d:e4:86:2a:f8:ab:6d:bb:d2:59:22:94:28:f6:16:dc: da:eb:02:a1:90:95:ac:ee:3a:18:b0:59:5a:c2:76:89:54:82: e0:e3:2d:49:f6:e7:8e:b3:28:94:8f:3e:b0:d6:34:eb:0d:1e: 55:87:c8:08:fd:09:43:d0:3d:87:39:fa:c1:41:95:f1:fd:25: 54:a4:82:2c:c4:7f:22:08:63:07:0c:ef:9f:0a:29:ce:4f:54: 67:32:aa:45:25:31:f6:70:01:a5:06:27:81:c6:67:30:9c:90: c3:77:99:ef:60:95:ee:53:8d:b0:ff:26:ad:0e:d2:cc:e0:96: c1:85:1e:58 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUYS8Xl6WLLBOSigYrQi02Lx0k14UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJENEY3RUJGRjk3NjNDMDYxRDUzN0I4QTFEMDg3MkQ3 MDY5NzYzMjAeFw0yNTEwMjQwMTUxNDdaFw0yNTEwMjUwNDA1NDdaMDMxMTAvBgNV BAMTKDFDQzVFMkFCOUE5MDAzNUYzQkNCMzM5QTRFMzE3RjFDQzE1NDVGRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsJdpgBlgRNrcixfIiGd31fAra 4ZcD0Y2rliyxrMqlEIPSWsCWQNQXhoePrtrN7tPPYNI/lNw10ehuelRg8oKS4/7A Dw7JixmtG7s7n/pFXyHrhKIn/EOqP2FSjbo/Yw3jTo9QroK3lhrcIIv1BMPZ5BIi 4z6FTFqXOu5ujKqPJkDpUVWAf5Sho9UJU0BEYPYK7ZpGFTinJt+RYLNgwmt2NveD Cwj018is3pWYz7+twc5WM2Rts8Qyj/Wf9R7YPuvHGowbCf10Z2qMFvI0xqcgd+YO LkDKBcgEov9ZSPyylIP9AA4xNU14BBpdhKPdbw8J3nJZ/uPpHsa0PQgZfbbVAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUHMXiq5qQA187yzOaTjF/HMFUX/QwHwYDVR0j BBgwFoAUi9T36/+XY8Bh1Te4odCHLXBpdjIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODdkOGRiNzEtYTViZS00NjRjLWE4YjktOGI3YjM3NGFl M2ZhLzEvOEJENEY3RUJGRjk3NjNDMDYxRDUzN0I4QTFEMDg3MkQ3MDY5NzYzMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84QkQ0RjdFQkZGOTc2M0MwNjFENTM3QjhB MUQwODcyRDcwNjk3NjMyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg3ZDhkYjcxLWE1YmUtNDY0Yy1hOGI5LThiN2IzNzRhZTNmYS8xLzhCRDRGN0VC RkY5NzYzQzA2MUQ1MzdCOEExRDA4NzJENzA2OTc2MzIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAdVjG/ shW2L3BThVVF6a+ioMB9/AJ/cYSO5uuwUkHSdvLdEgWGeLHQBX1VeZjxIpELh/FC HNJ9IdhUAOcYiaJYUK53OcGljy6A9yUSpY7kWnv30V9T2NE5cpBs1jrF1AXz8QSW rmZfv7u1gFAWHV4BZ4aigWWhoUbylA2LmQh+XZ3khir4q2270lkilCj2Ftza6wKh kJWs7joYsFlawnaJVILg4y1J9ueOsyiUjz6w1jTrDR5Vh8gI/QlD0D2HOfrBQZXx /SVUpIIsxH8iCGMHDO+fCinOT1RnMqpFJTH2cAGlBieBxmcwnJDDd5nvYJXuU42w /yatDtLM4JbBhR5Y -----END CERTIFICATE-----Generated at Fri Oct 24 04:30:03 2025 by rpki-client