$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft File: B149F23A3E99C4760297DD7104B400C835D86D19.mft (raw, json) Hash identifier: 04gA+RK0kwY8Vcyf3plOOgfeH3MHbvaXpmosHtV2B80= Subject key identifier: 97:0D:DD:28:A1:B7:78:0E:0A:BA:D5:B0:8F:B7:83:13:06:27:8F:F9 Authority key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 Certificate issuer: /CN=B149F23A3E99C4760297DD7104B400C835D86D19 Certificate serial: 40833D3EED99AFE874B1D1D730F3E3E30DAA9558 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft Manifest number: 57 Signing time: Thu 23 Oct 2025 10:18:09 +0000 Manifest this update: Thu 23 Oct 2025 10:13:09 +0000 Manifest next update: Fri 24 Oct 2025 11:13:09 +0000 Files and hashes: 1: E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer (hash: ttIHeVow2IErbUXmp4n67KjX2H68UmfVMTfPkOmulDw=) 2: B11D50A5D47F732F3F808FEAE6A3906CC4509C44.cer (hash: fOEqRqKlaLKUtKYMsGd37ZJXvbw9QPqtaVQY5rFpBpQ=) 3: B149F23A3E99C4760297DD7104B400C835D86D19.crl (hash: +QTRLBXFqNGSFIaJpPbY060gNLqfq3bB5L+uL5LKMXs=) 4: 326131343a373538333a663436303a3a2f34342d3438203d3e20323131353735.roa (hash: LMFmuLJ4IgxIQCv2slhgNeKFDMCx6rSWhmkOn3RblbI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 11:13:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:83:3d:3e:ed:99:af:e8:74:b1:d1:d7:30:f3:e3:e3:0d:aa:95:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B149F23A3E99C4760297DD7104B400C835D86D19 Validity Not Before: Oct 23 10:13:09 2025 GMT Not After : Oct 24 11:13:09 2025 GMT Subject: CN=970DDD28A1B7780E0ABAD5B08FB7831306278FF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2b:b0:06:b0:18:64:b2:e5:b0:37:fa:97:e2: 2d:4b:af:d8:a0:5d:c2:b1:d8:2b:82:5f:8a:88:ab: 1e:54:8d:ed:87:fd:a8:0b:3f:82:e9:30:1c:7c:3c: 26:0b:de:68:ed:21:2a:f0:f6:f3:54:97:26:b6:2c: 86:a4:a6:f4:b9:61:0e:78:c1:64:e9:15:2f:bc:76: 12:c4:6f:c9:84:5b:de:08:74:f2:27:98:ec:4f:48: d0:61:1d:b9:08:49:40:d6:5c:da:32:e9:e3:cf:08: 86:2f:19:31:b9:aa:88:1a:d2:1f:14:1f:4a:7d:28: 2e:0c:b0:a9:fd:21:49:42:a2:17:b9:ac:61:c7:4d: d8:b7:31:43:1f:e8:b7:6e:ea:11:01:63:ec:8d:11: 06:72:de:7b:86:46:a1:0a:0b:1a:33:2d:b9:d0:33: b3:f9:ad:79:2c:19:86:17:a9:87:96:05:85:e8:1f: 87:1f:0a:0a:03:c8:62:48:3c:79:a8:72:56:38:63: b3:b0:20:c2:59:98:ad:69:3a:a1:79:7c:82:94:00: f9:51:fb:a9:56:db:17:14:13:f9:41:1c:94:95:2a: 46:02:20:52:5b:f2:52:af:e4:97:f3:6d:87:dc:d9: 33:e0:32:47:eb:da:e7:c9:d2:b3:7e:ad:e6:cd:de: 9c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0D:DD:28:A1:B7:78:0E:0A:BA:D5:B0:8F:B7:83:13:06:27:8F:F9 X509v3 Authority Key Identifier: keyid:B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:24:df:52:e3:0e:82:f0:9c:18:fd:1c:8f:c7:6f:ba:95:0e: b1:f3:66:eb:4c:8b:94:90:83:e2:30:77:b9:d3:d1:82:d7:5b: ec:fe:ef:2a:0e:03:21:35:91:84:51:9c:fb:9f:2f:d9:0f:4e: 5b:f9:9f:cf:d7:8f:73:10:c8:06:8e:1e:eb:9f:d3:76:82:22: 9f:f8:1f:80:fa:8d:d7:da:52:f1:f9:e2:f0:cb:ed:47:b6:b7: 00:3f:89:75:38:6c:86:5b:d2:3c:37:d6:18:e7:ca:c0:35:6d: ff:94:9f:73:d2:93:ac:61:f6:81:2e:f9:b9:1a:e2:4a:ec:b1: b8:3d:46:fb:8f:46:a8:55:af:3c:c8:a8:2f:93:a4:63:19:d0: b0:98:48:3f:a0:90:b6:17:bc:18:62:e7:0e:45:95:ff:84:b4: ac:76:6f:d2:d4:d4:68:c1:bd:f4:d9:f7:79:3f:a3:f2:43:82: 6b:06:61:e1:9d:e6:1b:48:09:5d:df:bc:68:a9:f4:dc:a3:e4: 5f:6c:e8:da:ee:8f:41:b8:79:6e:17:e8:20:f8:3e:69:ec:f8: e1:b0:d3:3d:de:27:ec:71:d8:e5:de:db:2c:8a:95:67:e5:6c: cc:72:21:93:40:4f:ee:c6:6b:ff:d3:95:7b:3a:31:f5:78:24: 93:7e:53:56 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUQIM9Pu2Zr+h0sdHXMPPj4w2qlVgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgz NUQ4NkQxOTAeFw0yNTEwMjMxMDEzMDlaFw0yNTEwMjQxMTEzMDlaMDMxMTAvBgNV BAMTKDk3MERERDI4QTFCNzc4MEUwQUJBRDVCMDhGQjc4MzEzMDYyNzhGRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzK7AGsBhksuWwN/qX4i1Lr9ig XcKx2CuCX4qIqx5Uje2H/agLP4LpMBx8PCYL3mjtISrw9vNUlya2LIakpvS5YQ54 wWTpFS+8dhLEb8mEW94IdPInmOxPSNBhHbkISUDWXNoy6ePPCIYvGTG5qoga0h8U H0p9KC4MsKn9IUlCohe5rGHHTdi3MUMf6Ldu6hEBY+yNEQZy3nuGRqEKCxozLbnQ M7P5rXksGYYXqYeWBYXoH4cfCgoDyGJIPHmoclY4Y7OwIMJZmK1pOqF5fIKUAPlR +6lW2xcUE/lBHJSVKkYCIFJb8lKv5JfzbYfc2TPgMkfr2ufJ0rN+rebN3pxrAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUlw3dKKG3eA4KutWwj7eDEwYnj/kwHwYDVR0j BBgwFoAUsUnyOj6ZxHYCl91xBLQAyDXYbRkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVj OWRjLzIvQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgzNUQ4NkQxOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CMTQ5RjIzQTNFOTlDNDc2MDI5N0RENzEw NEI0MDBDODM1RDg2RDE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzk4MWY5NzgyLTg5OGUtNGI4My05NWU2LTRmZjRhYjc1YzlkYy8yL0IxNDlGMjNB M0U5OUM0NzYwMjk3REQ3MTA0QjQwMEM4MzVEODZEMTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBXJN9S 4w6C8JwY/RyPx2+6lQ6x82brTIuUkIPiMHe509GC11vs/u8qDgMhNZGEUZz7ny/Z D05b+Z/P149zEMgGjh7rn9N2giKf+B+A+o3X2lLx+eLwy+1HtrcAP4l1OGyGW9I8 N9YY58rANW3/lJ9z0pOsYfaBLvm5GuJK7LG4PUb7j0aoVa88yKgvk6RjGdCwmEg/ oJC2F7wYYucORZX/hLSsdm/S1NRowb302fd5P6PyQ4JrBmHhneYbSAld37xoqfTc o+RfbOja7o9BuHluF+gg+D5p7PjhsNM93ifscdjl3tssipVn5WzMciGTQE/uxmv/ 05V7OjH1eCSTflNW -----END CERTIFICATE-----Generated at Fri Oct 24 04:31:03 2025 by rpki-client