$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: Obwgqdl/UPQZmuZcIQo+2S5XOaKQSDP7FrlwZuvXQDQ= Subject key identifier: 04:38:25:FC:4B:D7:1A:F2:AF:23:95:00:20:87:89:40:85:CE:74:EC Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 068B1DA546D0C5194885DD74887E52C1622B3966 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 03EC Signing time: Mon 17 Nov 2025 07:46:26 +0000 Manifest this update: Mon 17 Nov 2025 07:41:26 +0000 Manifest next update: Tue 18 Nov 2025 10:28:26 +0000 Files and hashes: 1: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 4: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: pl9ftg+skDaRbhyS0SpPI2e95BPjstILCD0e6JQt4ow=) 5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 6: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 7: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 8: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 18 Nov 2025 09:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:8b:1d:a5:46:d0:c5:19:48:85:dd:74:88:7e:52:c1:62:2b:39:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Nov 17 07:41:26 2025 GMT Not After : Nov 18 10:28:26 2025 GMT Subject: CN=043825FC4BD71AF2AF2395002087894085CE74EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:bb:bc:1e:38:c7:38:0c:0b:be:fd:34:68:d3: 8f:e3:1e:30:01:bf:71:86:f5:2d:b3:ca:8b:83:46: 69:39:ad:b5:fc:f2:38:9c:2e:8a:53:1c:fc:5c:d3: 39:cd:19:ce:9e:aa:77:bb:3a:e5:ce:0d:99:d4:0c: d1:b2:dc:87:d7:fa:7d:35:f8:a5:e5:51:16:c2:56: 9c:79:76:14:15:17:fe:d3:83:d9:a8:21:61:ef:ec: 16:d0:f6:4d:92:ab:63:07:49:9e:96:c7:79:e3:d5: c9:4e:3d:c5:ee:d2:00:33:d5:8f:4c:33:d5:49:d8: a1:97:ec:6d:32:6d:18:a3:df:ff:c1:a8:87:bf:3d: 8c:e8:94:b1:85:32:49:b3:61:8d:5f:ee:35:e0:41: bd:2d:bb:a5:6a:43:74:1a:63:2f:f0:80:91:cb:fb: a0:40:38:3d:a8:a0:05:f6:b5:30:52:17:3b:19:0f: 42:d9:91:17:2e:82:35:47:b8:d5:a1:07:15:2a:e9: 58:9b:09:6d:19:8a:02:4e:94:f2:c3:8f:c2:59:8b: 21:41:a3:f4:1d:05:b8:53:86:49:78:5b:64:81:7f: e8:f3:e0:b1:1b:0d:a0:4f:80:63:5c:23:db:8e:21: 86:a9:83:b6:ea:58:de:37:2f:6e:04:17:c4:27:ab: 77:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:38:25:FC:4B:D7:1A:F2:AF:23:95:00:20:87:89:40:85:CE:74:EC X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:df:0e:f9:45:25:2b:44:5a:23:61:71:75:05:ea:0a:73:be: 8a:c7:af:3f:d5:e5:34:8d:48:e1:22:ad:a6:e1:51:c2:8a:03: 79:e7:e5:e9:00:dd:9a:a7:5a:1c:af:ba:3c:1d:dd:67:f9:b5: 54:e6:4f:9b:36:fb:6e:ab:18:d2:80:23:42:42:3b:02:06:41: 48:82:c4:26:34:14:ef:45:f8:50:dc:c5:4b:03:ca:d6:82:b4: 9c:fb:77:2f:fe:3f:01:8d:0c:9f:b4:9a:06:96:5e:31:e7:d5: a1:ea:a1:6f:86:fe:fa:ec:57:13:fc:5e:11:62:e5:06:76:b7: f2:ee:37:6b:c7:32:66:37:e2:2c:c1:f6:dc:6e:db:4f:f6:1e: 14:c1:d7:d5:09:9d:b4:4b:77:3d:89:02:44:6d:ef:d4:c4:48: 5b:4b:9b:f4:d3:33:b9:42:d2:0d:16:43:2b:d0:60:ba:31:0e: 0c:44:5d:8f:97:82:a1:85:60:ac:4e:ae:c5:b0:20:ed:45:f6: 44:f4:c3:87:34:bb:78:89:ba:8e:6d:a1:a7:c6:9e:5d:24:74: c7:e5:58:ee:1e:e2:9d:07:c9:4a:ca:a6:60:15:75:3a:47:62: 1a:78:c2:77:6b:95:56:92:9b:42:cc:5f:24:44:2a:91:0b:c3: da:ed:69:7b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBosdpUbQxRlIhd10iH5SwWIrOWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTExMTcwNzQxMjZaFw0yNTExMTgxMDI4MjZaMDMxMTAvBgNV BAMTKDA0MzgyNUZDNEJENzFBRjJBRjIzOTUwMDIwODc4OTQwODVDRTc0RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1u7weOMc4DAu+/TRo04/jHjAB v3GG9S2zyouDRmk5rbX88jicLopTHPxc0znNGc6eqne7OuXODZnUDNGy3IfX+n01 +KXlURbCVpx5dhQVF/7Tg9moIWHv7BbQ9k2Sq2MHSZ6Wx3nj1clOPcXu0gAz1Y9M M9VJ2KGX7G0ybRij3//BqIe/PYzolLGFMkmzYY1f7jXgQb0tu6VqQ3QaYy/wgJHL +6BAOD2ooAX2tTBSFzsZD0LZkRcugjVHuNWhBxUq6VibCW0ZigJOlPLDj8JZiyFB o/QdBbhThkl4W2SBf+jz4LEbDaBPgGNcI9uOIYapg7bqWN43L24EF8Qnq3dJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUBDgl/EvXGvKvI5UAIIeJQIXOdOwwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaN8O+UUlK0RaI2FxdQXq CnO+isevP9XlNI1I4SKtpuFRwooDeefl6QDdmqdaHK+6PB3dZ/m1VOZPmzb7bqsY 0oAjQkI7AgZBSILEJjQU70X4UNzFSwPK1oK0nPt3L/4/AY0Mn7SaBpZeMefVoeqh b4b++uxXE/xeEWLlBna38u43a8cyZjfiLMH23G7bT/YeFMHX1QmdtEt3PYkCRG3v 1MRIW0ub9NMzuULSDRZDK9BgujEODERdj5eCoYVgrE6uxbAg7UX2RPTDhzS7eIm6 jm2hp8aeXSR0x+VY7h7inQfJSsqmYBV1OkdiGnjCd2uVVpKbQsxfJEQqkQvD2u1p ew== -----END CERTIFICATE-----Generated at Mon Nov 17 11:33:31 2025 by rpki-client