$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft File: B172548FA3C460E26CB519EE524361BCA6C7132E.mft (raw, json) Hash identifier: Fh+TDr2DERs3HbRyVJVTaRBgiRgvuSZwKGfyom3G77E= Subject key identifier: EB:E3:16:67:7C:F6:7E:92:FA:2D:A3:98:0E:68:14:68:0E:DF:B3:C4 Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e Certificate serial: 432C579FCBBBEC15ABB75AA867D71169D5928246 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft Manifest number: 03F6 Signing time: Sat 25 Oct 2025 22:49:09 +0000 Manifest this update: Sat 25 Oct 2025 22:44:09 +0000 Manifest next update: Mon 27 Oct 2025 02:35:09 +0000 Files and hashes: 1: 39332e39352e3131332e302f32342d3234203d3e203136323736.roa (hash: cS6LWz+NEHJoa0EQVb5z92UR8C9jaztUFOxHHwpRPsY=) 2: 39332e39352e3131322e302f32342d3234203d3e2039333034.roa (hash: ogcbgRhECNKG4+F/6zpdBOh/u0edVYhkw7e/c907t3Y=) 3: 39332e39352e3131392e302f32342d3234203d3e20323135343337.roa (hash: iuam+Y72SFbVuzZ6DMbPvd9+i2O4uNgJ9aW8l1vNV9U=) 4: 39332e39352e3131362e302f32342d3234203d3e203630373831.roa (hash: wiR4lXrHDBacVR9rhY/OZ5EVnNOlMyR8f6ZVRqs7p88=) 5: 39332e39352e3131352e302f32342d3234203d3e20313938353834.roa (hash: FutqYRyHBMmN+0PD6TfHd0Z48pzfzxz1hCrgLY7AwAA=) 6: B172548FA3C460E26CB519EE524361BCA6C7132E.crl (hash: ZLBPvp4irMzTZXc94VyMQw0FKJGyH6kLWlTt08vH7a0=) 7: 39332e39352e3131382e302f32342d3234203d3e20313336353537.roa (hash: qqVPSWZLREddEW4nL5NY3Bls+ZrG5ASHmT6xiutXttk=) 8: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (hash: fGOsLQpuq7w+Mlth5Jlzw6zSul9g+K81meekR3kD4oA=) 9: 39332e39352e3131342e302f32342d3234203d3e2039333034.roa (hash: AmPh9mqd0gwKu0juVvtCR9BPch+T6TfO2inFFXmyRM4=) 10: 39332e39352e3131372e302f32342d3234203d3e203231383539.roa (hash: Un+iljfa6BQzZnEghHopYhiwkN2j6KkmFMitjF4eFLQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 20:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:2c:57:9f:cb:bb:ec:15:ab:b7:5a:a8:67:d7:11:69:d5:92:82:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e Validity Not Before: Oct 25 22:44:09 2025 GMT Not After : Oct 27 02:35:09 2025 GMT Subject: CN=EBE316677CF67E92FA2DA3980E6814680EDFB3C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3f:db:cb:95:d3:4a:09:ba:a5:a4:1b:1e:61: 3a:52:c6:c3:54:a0:a0:bb:68:a7:d0:ae:ef:83:ff: 98:11:d2:0f:19:fb:80:33:f9:5b:4f:49:65:c6:2f: e9:0a:d1:c0:82:59:56:59:cb:3e:0f:f7:8e:8f:5d: c5:9f:12:ba:a9:4f:3c:62:e9:b4:16:64:13:45:44: 6c:65:bf:fa:d5:fd:31:44:64:ba:c1:ae:6a:dd:76: 1d:40:1e:e8:09:4e:ee:ae:69:e2:f1:c6:2a:5b:0c: 4e:d9:97:e7:5a:49:7c:f5:0b:59:7e:0c:28:e7:6a: 2b:aa:24:33:2b:ba:ed:dc:c3:d8:b4:10:5a:48:4c: 82:49:bf:09:10:97:8b:bd:2a:49:49:70:9e:57:1e: 53:7c:0b:93:26:f3:93:ab:8f:b7:9e:51:c3:3d:36: 2d:a7:89:23:88:8e:8f:0f:7b:da:6f:55:e5:67:76: 7f:81:2d:57:68:67:d7:1e:ff:36:c4:21:05:10:fa: 0f:5e:1a:da:33:ec:e5:99:97:87:84:f8:13:e4:ff: a9:d9:27:ca:1a:27:19:69:35:57:88:4d:a5:21:58: 6a:f6:d5:da:ab:9f:db:01:ef:f5:f7:3e:e4:38:96: 19:e7:91:ba:c5:78:6c:2a:80:68:2e:de:6b:1a:d3: c2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E3:16:67:7C:F6:7E:92:FA:2D:A3:98:0E:68:14:68:0E:DF:B3:C4 X509v3 Authority Key Identifier: keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:51:23:58:f6:fd:08:1a:11:8d:54:95:a5:16:80:d4:f7:94: 92:81:a1:f9:60:93:a8:25:df:c2:35:e3:be:72:9c:0b:62:d8: f5:31:08:5e:ef:15:ac:0e:51:8d:41:a5:a0:76:81:3c:e8:54: 58:d6:15:7f:2a:87:1e:47:92:4f:9d:69:1c:6d:f0:c4:44:ea: d2:4f:ae:fe:b8:19:52:f0:1b:70:27:96:26:aa:9f:a8:a5:0a: 34:fd:ca:e1:1f:43:1d:df:23:52:31:d8:6d:ba:67:63:94:07: db:2b:4f:99:73:30:fd:b9:2c:f1:4b:37:0d:23:f3:d5:49:08: 62:38:af:19:e2:b1:64:8e:4e:08:ae:dd:2c:e3:a5:6d:fd:9d: 68:d1:b0:6f:ae:7c:e9:9b:c3:af:28:5d:00:ef:3b:b1:a4:a7: d5:e4:54:69:a5:8c:75:7a:e6:7e:b6:28:00:d5:f5:b0:25:41: 66:5c:3a:e4:e8:40:23:03:5f:31:ee:9e:60:15:0e:d3:e2:fc: 09:6b:0c:1e:d2:9d:5d:5f:06:34:6c:45:7a:36:02:0c:6d:f4: 32:68:73:ba:4c:c2:3c:50:c3:5f:a5:b4:b2:4c:b0:25:55:74: 8a:6a:72:bb:85:04:83:d6:8e:0e:2c:6f:52:ec:d3:32:41:8b: dd:5a:54:fe -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQyxXn8u77BWrt1qoZ9cRadWSgkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh NmM3MTMyZTAeFw0yNTEwMjUyMjQ0MDlaFw0yNTEwMjcwMjM1MDlaMDMxMTAvBgNV BAMTKEVCRTMxNjY3N0NGNjdFOTJGQTJEQTM5ODBFNjgxNDY4MEVERkIzQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJP9vLldNKCbqlpBseYTpSxsNU oKC7aKfQru+D/5gR0g8Z+4Az+VtPSWXGL+kK0cCCWVZZyz4P946PXcWfErqpTzxi 6bQWZBNFRGxlv/rV/TFEZLrBrmrddh1AHugJTu6uaeLxxipbDE7Zl+daSXz1C1l+ DCjnaiuqJDMruu3cw9i0EFpITIJJvwkQl4u9KklJcJ5XHlN8C5Mm85Orj7eeUcM9 Ni2niSOIjo8Pe9pvVeVndn+BLVdoZ9ce/zbEIQUQ+g9eGtoz7OWZl4eE+BPk/6nZ J8oaJxlpNVeITaUhWGr21dqrn9sB7/X3PuQ4lhnnkbrFeGwqgGgu3msa08ILAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU6+MWZ3z2fpL6LaOYDmgUaA7fs8QwHwYDVR0j BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti SEV5NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85NjU3M2U4OC1k YWJhLTRhYzctYTJlZC0zMjFjODI3N2QyNWUvMC9CMTcyNTQ4RkEzQzQ2MEUyNkNC NTE5RUU1MjQzNjFCQ0E2QzcxMzJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsVEjWPb9CBoRjVSVpRaA 1PeUkoGh+WCTqCXfwjXjvnKcC2LY9TEIXu8VrA5RjUGloHaBPOhUWNYVfyqHHkeS T51pHG3wxETq0k+u/rgZUvAbcCeWJqqfqKUKNP3K4R9DHd8jUjHYbbpnY5QH2ytP mXMw/bks8Us3DSPz1UkIYjivGeKxZI5OCK7dLOOlbf2daNGwb6586ZvDryhdAO87 saSn1eRUaaWMdXrmfrYoANX1sCVBZlw65OhAIwNfMe6eYBUO0+L8CWsMHtKdXV8G NGxFejYCDG30MmhzukzCPFDDX6W0skywJVV0impyu4UEg9aODixvUuzTMkGL3VpU /g== -----END CERTIFICATE-----Generated at Sun Oct 26 06:12:04 2025 by rpki-client