$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft File: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft (raw, json) Hash identifier: S7yFz5aJkAzYTTpy02j0sj1vuu7IvhstVhvTOwzUPNg= Subject key identifier: 56:4A:56:09:44:D7:B9:5C:B3:3D:CD:5B:43:1C:42:CD:0C:4C:96:56 Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Certificate serial: 5308FB2E117E80951F72BC90F529C625C247C279 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft Manifest number: 016C Signing time: Thu 23 Oct 2025 16:53:09 +0000 Manifest this update: Thu 23 Oct 2025 16:48:09 +0000 Manifest next update: Fri 24 Oct 2025 17:04:09 +0000 Files and hashes: 1: 3134312e39382e34332e302f32342d3234203d3e2039333138.roa (hash: vFBdBlnnWQnqw/EQOfV9mi7/0u42NWKBiZsEOC5m9Es=) 2: 3134312e39382e34312e302f32342d3234203d3e203330303538.roa (hash: 4au55wB65f+exj00ZmF8CDavdM91WWgRwv7GAFTVWFE=) 3: 3134312e39382e34302e302f32342d3234203d3e20313335333931.roa (hash: KIrJ+OxXjbpHnzzrfeXUxWbfPUX2jRDJASLLdltH2j8=) 4: 3134312e39382e34322e302f32342d3234203d3e203432383331.roa (hash: 6ZVZSqjoq8egcUsUMz7rnJfuPRuV1YHJP8qC/sHWbVE=) 5: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl (hash: 1FuEUme+7+0z6kjlC5m30iJikx+3r+BY/bOqVdVCj5k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 17:04:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:08:fb:2e:11:7e:80:95:1f:72:bc:90:f5:29:c6:25:c2:47:c2:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Validity Not Before: Oct 23 16:48:09 2025 GMT Not After : Oct 24 17:04:09 2025 GMT Subject: CN=564A560944D7B95CB33DCD5B431C42CD0C4C9656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:30:69:15:dc:e7:96:5f:97:58:27:bf:fd:73: 67:f7:5b:06:bb:05:ed:be:6d:ed:cb:f0:69:7e:a9: ba:4d:70:65:a0:3d:c3:07:23:6c:2c:94:e1:dd:07: 93:55:09:91:29:c6:60:fb:e7:06:62:2d:11:67:1a: dc:b7:41:9b:17:42:92:17:51:dd:ac:54:06:f6:99: 2e:82:66:f7:c8:11:62:2e:21:f8:86:91:7c:40:a2: 24:58:18:ee:b1:45:33:45:97:d1:91:be:b0:95:52: b6:64:f2:69:27:cc:be:07:04:83:3a:01:a5:51:18: 4c:37:9b:32:ee:76:55:20:c2:4a:cc:70:91:22:b1: 2b:47:26:18:87:70:38:ef:d0:b4:c8:bb:c2:7c:38: 93:12:b3:e6:92:c4:59:5f:9b:b4:b8:6c:42:76:56: 42:41:33:f9:97:3d:80:c1:72:a2:db:c1:d0:fb:cb: 06:ba:3b:4a:56:94:b8:a5:e7:88:b5:a5:d6:b3:ab: 41:ab:ce:31:67:03:2d:ee:0e:86:26:d2:43:fc:3a: a9:c3:3f:50:1d:71:65:bf:fc:c6:ea:6d:5d:7c:37: 57:ce:4c:66:12:8e:b2:6c:00:84:19:d1:47:a2:d7: 33:ec:0e:a3:aa:82:31:75:0b:66:a5:10:29:0a:07: 23:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:4A:56:09:44:D7:B9:5C:B3:3D:CD:5B:43:1C:42:CD:0C:4C:96:56 X509v3 Authority Key Identifier: keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ad:b8:7c:97:31:14:d5:0a:5c:e4:4b:a6:ac:25:3b:c0:ed: 5b:10:34:cd:39:af:46:59:56:e3:d1:b2:eb:e9:29:82:e5:b5: f1:cf:95:a4:80:67:85:f6:19:fb:d2:21:fa:dd:51:ba:df:cf: fa:a7:af:13:39:98:cf:e1:aa:2d:4a:4c:00:c6:72:8b:c7:e6: 5d:cd:a9:6b:d7:33:79:23:57:00:ca:93:f7:8e:c4:fc:82:af: 9e:11:0e:63:3c:7f:01:e7:ac:ee:3e:2d:85:d3:a8:2f:97:20: a9:a1:f3:99:f3:8b:c4:85:cc:c0:ae:ef:b6:9f:9f:a1:31:8b: 47:24:e0:87:b4:a5:8d:3f:42:a9:ce:c6:ce:05:47:93:63:38: 20:32:35:6e:53:11:37:2a:29:5a:af:a9:05:ae:5f:40:2d:22: f5:8f:58:1a:ee:a2:30:92:fa:d1:49:39:b2:87:37:aa:6f:a7: d1:19:c5:f4:8b:e7:af:b1:f7:c1:be:3d:a0:85:17:38:e5:c3: 10:9e:71:22:2d:52:ce:14:50:13:75:66:f9:d2:3e:02:3f:76: 6f:35:5b:5e:e8:0a:42:73:b0:60:fc:14:b3:b1:41:92:dd:de: 15:5c:14:60:dc:1f:60:ea:57:6b:9c:30:dd:07:27:b2:0f:12: 09:e7:05:78 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUwj7LhF+gJUfcryQ9SnGJcJHwnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2U1MWNhYzFjZTJhZmUxOTU4YjFmYjZhNjIzNzcxN2Iw YjVkNDgxMDAeFw0yNTEwMjMxNjQ4MDlaFw0yNTEwMjQxNzA0MDlaMDMxMTAvBgNV BAMTKDU2NEE1NjA5NDREN0I5NUNCMzNEQ0Q1QjQzMUM0MkNEMEM0Qzk2NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQMGkV3OeWX5dYJ7/9c2f3Wwa7 Be2+be3L8Gl+qbpNcGWgPcMHI2wslOHdB5NVCZEpxmD75wZiLRFnGty3QZsXQpIX Ud2sVAb2mS6CZvfIEWIuIfiGkXxAoiRYGO6xRTNFl9GRvrCVUrZk8mknzL4HBIM6 AaVRGEw3mzLudlUgwkrMcJEisStHJhiHcDjv0LTIu8J8OJMSs+aSxFlfm7S4bEJ2 VkJBM/mXPYDBcqLbwdD7ywa6O0pWlLil54i1pdazq0GrzjFnAy3uDoYm0kP8OqnD P1AdcWW//MbqbV18N1fOTGYSjrJsAIQZ0Uei1zPsDqOqgjF1C2alECkKByM5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUVkpWCUTXuVyzPc1bQxxCzQxMllYwHwYDVR0j BBgwFoAUflHKwc4q/hlYsftqYjdxewtdSBAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODgxYjdmMDgtZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJi ZDMyLzAvN0U1MUNBQzFDRTJBRkUxOTU4QjFGQjZBNjIzNzcxN0IwQjVENDgxMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZsSEt3YzRxX2hsWXNmdHFZamR4ZXd0 ZFNCQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ODFiN2YwOC1k ZDk0LTRjZDAtYWEzOC04NTEyZjE1MmJkMzIvMC83RTUxQ0FDMUNFMkFGRTE5NThC MUZCNkE2MjM3NzE3QjBCNUQ0ODEwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALq24fJcxFNUKXORLpqwl O8DtWxA0zTmvRllW49Gy6+kpguW18c+VpIBnhfYZ+9Ih+t1Rut/P+qevEzmYz+Gq LUpMAMZyi8fmXc2pa9czeSNXAMqT947E/IKvnhEOYzx/Aees7j4thdOoL5cgqaHz mfOLxIXMwK7vtp+foTGLRyTgh7SljT9Cqc7GzgVHk2M4IDI1blMRNyopWq+pBa5f QC0i9Y9YGu6iMJL60Uk5soc3qm+n0RnF9Ivnr7H3wb49oIUXOOXDEJ5xIi1SzhRQ E3Vm+dI+Aj92bzVbXugKQnOwYPwUs7FBkt3eFVwUYNwfYOpXa5ww3Qcnsg8SCecF eA== -----END CERTIFICATE-----Generated at Fri Oct 24 09:02:23 2025 by rpki-client