$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: WeyAGtwgPJiWLShvr+DxuTA+2kTS4d9WVeVO/k095Lg= Subject key identifier: 0E:FB:7C:13:39:47:F9:BD:A7:07:67:77:96:A9:D4:F2:70:DB:8B:C6 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 4CA00A7AC3EB0F9BCEBA6FA38F09B766AD4D4F42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 03DE Signing time: Thu 06 Nov 2025 17:15:40 +0000 Manifest this update: Thu 06 Nov 2025 17:10:40 +0000 Manifest next update: Fri 07 Nov 2025 17:48:40 +0000 Files and hashes: 1: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 2: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 3: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 5: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: Eb6dGRIBMm9/T0qVjCYnGF3vP/kmgsZVLj4Z0m6NgwY=) 6: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 7: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 07 Nov 2025 17:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:a0:0a:7a:c3:eb:0f:9b:ce:ba:6f:a3:8f:09:b7:66:ad:4d:4f:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Nov 6 17:10:40 2025 GMT Not After : Nov 7 17:48:40 2025 GMT Subject: CN=0EFB7C133947F9BDA707677796A9D4F270DB8BC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:47:4e:71:c9:64:44:04:85:4e:a7:01:18:42: d8:66:dc:84:48:f2:1c:08:b4:64:7a:bd:e0:a3:1c: 30:7d:f6:b3:11:8f:ff:09:9f:73:d5:ca:5f:26:9c: 96:c6:67:1a:07:a8:a1:4d:d6:73:e0:6c:bc:19:44: 20:ee:15:6a:75:fe:fa:db:51:9e:71:ad:4e:b5:bb: d1:6e:77:6c:4a:db:92:1c:7c:42:4e:11:59:32:4b: 1d:44:78:a4:93:6f:a6:18:d1:e6:32:41:e2:2e:68: ca:49:5c:71:aa:3a:49:1c:e1:17:a6:b7:b4:f4:d0: 93:85:3e:16:e9:63:90:6e:20:91:03:d5:77:b8:b1: f8:69:ef:01:ce:b2:dc:2e:96:b9:9d:07:be:42:bf: d0:fa:4b:f5:4f:03:00:cb:c6:fc:b0:29:6e:50:5c: 52:d8:47:d7:9e:2e:af:e1:67:34:db:a3:95:9d:ef: 9e:b3:68:6a:f9:51:a2:06:2d:7b:19:64:05:c5:08: 74:d5:79:3c:62:db:e4:db:39:4f:fe:06:0f:9b:64: 4f:f4:54:19:a0:02:b0:64:fe:6a:7c:21:f6:52:79: 6f:34:63:e4:62:8f:ae:6b:26:66:07:16:ac:bd:af: 16:2d:8e:ed:67:66:62:ad:c4:df:dc:e5:35:a9:80: 55:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:FB:7C:13:39:47:F9:BD:A7:07:67:77:96:A9:D4:F2:70:DB:8B:C6 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:a6:03:4c:9b:b7:4e:72:ea:d0:6d:a8:6f:d7:c8:c3:20:9d: 26:01:09:4a:19:39:7e:a8:78:8a:04:8b:d7:35:aa:12:07:40: e5:5c:2d:cf:72:20:dd:37:f2:6c:84:31:36:a9:cd:2a:b0:ab: 54:95:30:d4:71:9d:83:d6:c0:8e:65:a9:59:05:91:ba:64:90: 1f:a5:58:64:cb:ab:91:c1:62:78:34:c3:64:01:29:69:20:f9: f1:9b:32:6e:34:21:a3:b1:f0:6e:d6:e3:ad:00:2d:aa:4d:6d: 4d:7e:b4:f1:7e:5e:36:18:e3:a2:a0:cf:b1:44:8b:a6:b0:4f: c9:05:d9:71:32:63:3e:5c:de:9f:b3:39:7d:3f:d0:37:44:75: 80:e1:d1:8f:16:9f:3b:b4:20:36:a2:99:1b:f4:ec:b6:47:cc: 64:a6:f0:96:af:f9:68:f5:42:2e:b8:94:c1:fe:c3:92:35:bb: f4:78:8d:f3:d4:2d:72:ec:da:1b:c9:3d:9d:af:fc:24:69:62: 29:8b:46:6d:ff:b6:bd:5f:42:4d:09:c8:2b:b9:9c:0a:58:e8: 64:07:07:30:3a:46:89:bb:42:7c:0f:97:1a:0a:2d:fd:4a:10: c2:8b:53:24:e2:6a:06:5b:a3:38:50:be:d6:b9:4a:f4:66:37: 15:d0:d8:2f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTKAKesPrD5vOum+jjwm3Zq1NT0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTExMDYxNzEwNDBaFw0yNTExMDcxNzQ4NDBaMDMxMTAvBgNV BAMTKDBFRkI3QzEzMzk0N0Y5QkRBNzA3Njc3Nzk2QTlENEYyNzBEQjhCQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClR05xyWREBIVOpwEYQthm3IRI 8hwItGR6veCjHDB99rMRj/8Jn3PVyl8mnJbGZxoHqKFN1nPgbLwZRCDuFWp1/vrb UZ5xrU61u9Fud2xK25IcfEJOEVkySx1EeKSTb6YY0eYyQeIuaMpJXHGqOkkc4Rem t7T00JOFPhbpY5BuIJED1Xe4sfhp7wHOstwulrmdB75Cv9D6S/VPAwDLxvywKW5Q XFLYR9eeLq/hZzTbo5Wd756zaGr5UaIGLXsZZAXFCHTVeTxi2+TbOU/+Bg+bZE/0 VBmgArBk/mp8IfZSeW80Y+Rij65rJmYHFqy9rxYtju1nZmKtxN/c5TWpgFWzAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUDvt8EzlH+b2nB2d3lqnU8nDbi8YwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKaYDTJu3TnLq0G2ob9fI wyCdJgEJShk5fqh4igSL1zWqEgdA5Vwtz3Ig3TfybIQxNqnNKrCrVJUw1HGdg9bA jmWpWQWRumSQH6VYZMurkcFieDTDZAEpaSD58ZsybjQho7HwbtbjrQAtqk1tTX60 8X5eNhjjoqDPsUSLprBPyQXZcTJjPlzen7M5fT/QN0R1gOHRjxafO7QgNqKZG/Ts tkfMZKbwlq/5aPVCLriUwf7DkjW79HiN89QtcuzaG8k9na/8JGliKYtGbf+2vV9C TQnIK7mcCljoZAcHMDpGibtCfA+XGgot/UoQwotTJOJqBlujOFC+1rlK9GY3FdDY Lw== -----END CERTIFICATE-----Generated at Fri Nov 7 08:58:07 2025 by rpki-client