$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.mft File: AFF4C2C7543A73C42DFA94F9950C37BDC859D280.mft (raw, json) Hash identifier: 5OAYjQ+7Ah2eSgbANMMaotVO+9JH7pbQOMitWbYypkE= Subject key identifier: 59:6E:19:24:13:20:F8:7D:22:4C:38:51:5E:3C:3C:93:DF:4D:57:E3 Authority key identifier: AF:F4:C2:C7:54:3A:73:C4:2D:FA:94:F9:95:0C:37:BD:C8:59:D2:80 Certificate issuer: /CN=AFF4C2C7543A73C42DFA94F9950C37BDC859D280 Certificate serial: 4BDE080A9387521126BA945ED08F25B605BF01CE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.mft Manifest number: 06 Signing time: Tue 28 Oct 2025 02:51:47 +0000 Manifest this update: Tue 28 Oct 2025 02:46:47 +0000 Manifest next update: Wed 29 Oct 2025 05:30:47 +0000 Files and hashes: 1: AFF4C2C7543A73C42DFA94F9950C37BDC859D280.crl (hash: f9719kVwoydz6DVqe9IBS586J4N8i74vaGSTafXP7kA=) 2: 326130663a316363363a626162303a3a2f34342d3438203d3e20323034353335.roa (hash: 1+IhrNjfDlSrKMldoQWSJhujOmN03JwrltC4p7zGNeE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.crl rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.mft rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.cer rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Oct 2025 00:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:de:08:0a:93:87:52:11:26:ba:94:5e:d0:8f:25:b6:05:bf:01:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFF4C2C7543A73C42DFA94F9950C37BDC859D280 Validity Not Before: Oct 28 02:46:47 2025 GMT Not After : Oct 29 05:30:47 2025 GMT Subject: CN=596E19241320F87D224C38515E3C3C93DF4D57E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2b:9c:f4:b4:f6:c1:85:74:66:70:e0:42:65: f9:a7:e7:d8:6b:50:94:f5:f8:67:18:3f:cc:6d:f3: 69:d6:61:2f:73:ce:2d:82:05:70:d0:1e:96:36:41: d0:40:ab:62:dc:17:90:a5:6b:0d:92:83:52:f8:e4: 6c:7b:2e:6f:50:b4:8d:5f:76:79:b9:5c:ec:ad:15: a5:f2:51:3d:21:ad:04:a0:16:16:c8:f3:47:5b:8d: 1b:83:66:fc:19:db:a2:b8:1c:9d:3c:32:f6:c7:5a: c8:01:f7:03:43:86:b5:0b:a8:49:8a:5a:45:38:a1: 0f:c1:12:2d:f4:59:35:17:f2:9a:af:dd:b3:d5:18: 6d:3e:9a:2b:e7:68:c8:3c:d2:50:59:b9:8d:39:63: 54:19:07:6e:48:c5:41:63:1f:7b:a9:06:b7:f3:90: 34:62:40:67:e0:14:e4:c7:3b:83:69:f3:a4:d9:c2: 11:3d:8b:66:4e:23:20:d3:d7:53:61:85:cf:ab:48: bb:8d:2c:54:1d:0e:d3:f1:aa:ff:db:af:fc:e2:7a: 42:2a:1a:bd:99:a9:20:c5:12:a4:3b:cd:0e:b3:98: b2:b4:14:ed:d1:14:61:e6:27:d4:ff:1f:ac:f0:5a: e6:d0:51:75:b2:e6:37:fc:26:20:f9:51:34:c4:c6: 3c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:6E:19:24:13:20:F8:7D:22:4C:38:51:5E:3C:3C:93:DF:4D:57:E3 X509v3 Authority Key Identifier: keyid:AF:F4:C2:C7:54:3A:73:C4:2D:FA:94:F9:95:0C:37:BD:C8:59:D2:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e3:55:29:b4:90:6d:99:37:ec:02:8b:0f:71:2c:5d:bd:b5:06: 03:36:cb:cd:44:03:74:7a:27:0c:c4:2a:a4:af:2d:7e:5b:46: 9d:cd:35:54:0a:80:97:3b:28:b7:b7:38:fa:b7:50:52:d6:fb: c3:ca:5c:7b:82:16:80:06:7b:c0:cb:40:03:00:6d:44:57:73: 1a:54:e2:a4:51:3d:ed:67:84:9a:22:3a:c0:95:c3:df:85:cf: 7e:b4:43:53:f3:60:bb:81:51:37:78:a8:af:24:c8:5d:47:b6: 79:9b:d8:c2:54:d6:8d:50:0d:ed:78:04:85:77:5b:2d:46:cb: 8a:02:c3:49:31:fc:f4:a7:ee:b3:c9:37:e1:91:8d:6b:72:d8: 00:cf:bf:a9:ad:04:bd:90:91:5d:88:3c:18:7f:f3:17:aa:b2: 29:6d:e0:3b:a8:87:48:50:49:a9:4d:06:df:ab:cc:eb:82:7c: 2e:4e:c4:d1:a7:4e:d6:d0:9b:99:ce:1b:94:8c:d7:15:24:77: 01:10:41:62:6a:a3:f1:b8:ae:99:e4:b6:74:01:65:a6:98:79: ba:b5:47:02:bd:77:61:28:5a:88:c9:53:0d:62:cb:a1:09:48: ef:3d:c0:b2:7a:ce:b8:8f:a8:a0:f0:85:78:56:23:03:1c:54: 71:4f:ef:45 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUS94ICpOHUhEmupRe0I8ltgW/Ac4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGNEMyQzc1NDNBNzNDNDJERkE5NEY5OTUwQzM3QkRD ODU5RDI4MDAeFw0yNTEwMjgwMjQ2NDdaFw0yNTEwMjkwNTMwNDdaMDMxMTAvBgNV BAMTKDU5NkUxOTI0MTMyMEY4N0QyMjRDMzg1MTVFM0MzQzkzREY0RDU3RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbK5z0tPbBhXRmcOBCZfmn59hr UJT1+GcYP8xt82nWYS9zzi2CBXDQHpY2QdBAq2LcF5Claw2Sg1L45Gx7Lm9QtI1f dnm5XOytFaXyUT0hrQSgFhbI80dbjRuDZvwZ26K4HJ08MvbHWsgB9wNDhrULqEmK WkU4oQ/BEi30WTUX8pqv3bPVGG0+mivnaMg80lBZuY05Y1QZB25IxUFjH3upBrfz kDRiQGfgFOTHO4Np86TZwhE9i2ZOIyDT11Nhhc+rSLuNLFQdDtPxqv/br/ziekIq Gr2ZqSDFEqQ7zQ6zmLK0FO3RFGHmJ9T/H6zwWubQUXWy5jf8JiD5UTTExjxNAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUWW4ZJBMg+H0iTDhRXjw8k99NV+MwHwYDVR0j BBgwFoAUr/TCx1Q6c8Qt+pT5lQw3vchZ0oAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODdkOGRiNzEtYTViZS00NjRjLWE4YjktOGI3YjM3NGFl M2ZhLzIvQUZGNEMyQzc1NDNBNzNDNDJERkE5NEY5OTUwQzM3QkRDODU5RDI4MC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMjZlYjEzNi00ZmU1LTRl NjEtYTRkOC1mMzQ1ZjUyYmMyNWQvMC9BRkY0QzJDNzU0M0E3M0M0MkRGQTk0Rjk5 NTBDMzdCREM4NTlEMjgwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg3ZDhkYjcxLWE1YmUtNDY0Yy1hOGI5LThiN2IzNzRhZTNmYS8yL0FGRjRDMkM3 NTQzQTczQzQyREZBOTRGOTk1MEMzN0JEQzg1OUQyODAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDjVSm0 kG2ZN+wCiw9xLF29tQYDNsvNRAN0eicMxCqkry1+W0adzTVUCoCXOyi3tzj6t1BS 1vvDylx7ghaABnvAy0ADAG1EV3MaVOKkUT3tZ4SaIjrAlcPfhc9+tENT82C7gVE3 eKivJMhdR7Z5m9jCVNaNUA3teASFd1stRsuKAsNJMfz0p+6zyTfhkY1rctgAz7+p rQS9kJFdiDwYf/MXqrIpbeA7qIdIUEmpTQbfq8zrgnwuTsTRp07W0JuZzhuUjNcV JHcBEEFiaqPxuK6Z5LZ0AWWmmHm6tUcCvXdhKFqIyVMNYsuhCUjvPcCyes64j6ig 8IV4ViMDHFRxT+9F -----END CERTIFICATE-----Generated at Tue Oct 28 10:38:43 2025 by rpki-client