$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft File: 51917E722DB03952D9056BED2F6BD4BF98B78976.mft (raw, json) Hash identifier: nFOwqT0rcL8LsQ4q6+y1uLa9AV5YEKiE4AYr/vWddtE= Subject key identifier: 54:C5:DC:17:80:67:A9:CB:A8:9B:FB:38:74:01:85:26:51:64:72:6D Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 Certificate issuer: /CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Certificate serial: 107F6F87FB18F3AA513321036A90DBB4091ED613 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft Manifest number: DD Signing time: Thu 23 Oct 2025 16:13:45 +0000 Manifest this update: Thu 23 Oct 2025 16:08:45 +0000 Manifest next update: Fri 24 Oct 2025 19:47:45 +0000 Files and hashes: 1: 326131343a373538303a666635343a3a2f34382d3438203d3e20323039373130.roa (hash: i7VkbN6Rb5CnHlmR8BF2dlC+Uq3PFV4wJTcaolWAu+U=) 2: 51917E722DB03952D9056BED2F6BD4BF98B78976.crl (hash: TVI5Qarn+xr4xnx0HbHdq3gUL+JAi4aK2rC4wdEMu7I=) 3: 326131343a373538303a666635323a3a2f34382d3438203d3e20323039373130.roa (hash: vs66PWFM6L/hirNyhIXTRaz65c001j+IhkCdp8VdfS4=) 4: 326131343a373538303a3530303a3a2f34302d3430203d3e20323039373130.roa (hash: UtWLjV2JD6X8emwUC9bu8RyXGCD7bzymrTBVIEkaVv8=) 5: 326131343a373538303a666635313a3a2f34382d3438203d3e20323039373130.roa (hash: KcfiSDiqDvlLOqfaLqph9s6F4NvpySAcmNFiwDriyms=) 6: 326131343a373538303a666635303a3a2f34382d3438203d3e20323039373130.roa (hash: RhrZumuCHn+6y3yZr34sdgh4sb8kS47/Ka9E3B3UluQ=) 7: 326131343a373538303a3530303a3a2f34322d3432203d3e203331383938.roa (hash: 7z5RoyaJRkP9nx99eQ4HknE9KjY7eFLuMQrU4NhLP9s=) 8: 326131343a373538303a666635353a3a2f34382d3438203d3e20323039373130.roa (hash: 5weylF9E+kZUqdJn7nMGLccAIkWjUNuo5MqarqyfkO8=) 9: 326131343a373538303a666635333a3a2f34382d3438203d3e20323039373130.roa (hash: UpFVw7x1NBf/Uix4G0zJEj+QV4riL3tEIjso5GywhOU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 19:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:7f:6f:87:fb:18:f3:aa:51:33:21:03:6a:90:db:b4:09:1e:d6:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Validity Not Before: Oct 23 16:08:45 2025 GMT Not After : Oct 24 19:47:45 2025 GMT Subject: CN=54C5DC178067A9CBA89BFB38740185265164726D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3b:6d:2e:44:96:02:ea:f3:60:87:c0:d5:5d: 16:2c:ce:2b:ff:6c:c7:63:c0:df:4a:3b:fe:cf:d1: 99:9a:f6:ae:6b:8d:ca:5f:1d:8b:f7:cd:a0:22:3e: bc:9f:c7:43:eb:01:d8:28:29:60:ee:f3:16:ea:40: bd:4d:e7:a1:40:d9:7f:6e:d7:fa:35:23:70:21:3d: 0c:3f:28:73:eb:2e:a1:08:6d:03:c4:4c:89:c5:ab: 3b:aa:20:1e:07:09:fc:8e:b9:c0:cc:22:6c:3a:44: 15:99:55:30:cb:71:59:7e:17:89:0b:22:10:f9:0b: 37:0b:8d:68:26:03:a4:d5:84:99:16:d8:ed:82:ae: 48:b5:ea:79:43:7e:ac:9b:af:16:95:9e:5b:64:9c: e5:00:b2:c5:c8:63:38:63:40:cf:ab:58:b3:fc:50: 5f:f4:a6:c1:61:e3:40:34:4a:60:e6:e9:a5:be:43: 15:19:21:e3:eb:b0:71:23:8e:94:ad:6a:7a:25:b2: 23:70:16:22:d1:39:bd:2a:89:d6:4c:13:19:0b:db: 25:66:4f:9c:dc:e7:23:d0:7f:02:14:d0:ed:ea:07: 9f:a2:0a:d9:d8:bd:ba:77:00:4f:98:53:12:15:b8: 25:c8:fb:c6:98:90:4a:a8:47:93:a1:81:31:5b:b7: cd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C5:DC:17:80:67:A9:CB:A8:9B:FB:38:74:01:85:26:51:64:72:6D X509v3 Authority Key Identifier: keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:3d:4b:fb:cd:9a:db:d4:93:3b:1c:a3:be:43:6d:f5:3e:29: 29:cc:65:38:b1:e3:ac:e1:fc:8e:1e:f1:52:4b:cf:4e:f1:67: b7:7c:d8:b0:f4:a9:ec:34:c8:fa:0b:74:64:98:76:9f:2e:f4: a2:e3:5a:33:0c:37:20:0c:d8:ac:c2:36:99:d9:a4:99:47:96: 59:c2:cc:0c:29:00:e9:41:be:eb:1e:90:53:8a:7c:03:43:73: e4:10:cf:b0:cb:19:18:67:c8:56:55:2a:91:be:f0:33:c8:a7: e0:86:ce:1d:26:0b:0d:03:ec:46:29:d4:49:be:60:a4:f5:0f: a6:90:0b:fe:c7:9e:2b:a7:b4:5e:6f:8c:e3:92:b2:66:9d:03: b0:66:3a:fa:72:26:5e:73:9f:e6:77:c6:ee:38:0e:3a:8e:39: 2b:44:5e:d9:fb:79:41:46:f5:01:0c:30:73:93:76:b6:6f:17: 09:a6:53:55:bd:85:41:0f:53:e1:2b:63:e9:33:f5:04:a0:45: 03:37:b3:d4:b3:6c:fa:5f:e6:cc:9f:39:eb:41:55:f4:81:eb: c8:fb:ec:b3:e9:56:72:55:cc:22:42:8b:c2:e8:ab:7a:0e:e7: bc:02:14:f5:c9:64:ad:42:11:59:f0:e1:4e:34:6c:92:ef:90: 56:ad:85:39 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUEH9vh/sY86pRMyEDapDbtAke1hMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5 OEI3ODk3NjAeFw0yNTEwMjMxNjA4NDVaFw0yNTEwMjQxOTQ3NDVaMDMxMTAvBgNV BAMTKDU0QzVEQzE3ODA2N0E5Q0JBODlCRkIzODc0MDE4NTI2NTE2NDcyNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGO20uRJYC6vNgh8DVXRYsziv/ bMdjwN9KO/7P0Zma9q5rjcpfHYv3zaAiPryfx0PrAdgoKWDu8xbqQL1N56FA2X9u 1/o1I3AhPQw/KHPrLqEIbQPETInFqzuqIB4HCfyOucDMImw6RBWZVTDLcVl+F4kL IhD5CzcLjWgmA6TVhJkW2O2Crki16nlDfqybrxaVnltknOUAssXIYzhjQM+rWLP8 UF/0psFh40A0SmDm6aW+QxUZIePrsHEjjpStanolsiNwFiLROb0qidZMExkL2yVm T5zc5yPQfwIU0O3qB5+iCtnYvbp3AE+YUxIVuCXI+8aYkEqoR5OhgTFbt837AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUVMXcF4Bnqcuom/s4dAGFJlFkcm0wHwYDVR0j BBgwFoAUUZF+ci2wOVLZBWvtL2vUv5i3iXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWVjYWM0MTMtNGNkMi00NzJjLWIwMWUtNzQ0NThjZWEz ODZjLzAvNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5OEI3ODk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MTkxN0U3MjJEQjAzOTUyRDkwNTZCRUQy RjZCRDRCRjk4Qjc4OTc2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzllY2FjNDEzLTRjZDItNDcyYy1iMDFlLTc0NDU4Y2VhMzg2Yy8wLzUxOTE3RTcy MkRCMDM5NTJEOTA1NkJFRDJGNkJENEJGOThCNzg5NzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAFPUv7 zZrb1JM7HKO+Q231PikpzGU4seOs4fyOHvFSS89O8We3fNiw9KnsNMj6C3RkmHaf LvSi41ozDDcgDNiswjaZ2aSZR5ZZwswMKQDpQb7rHpBTinwDQ3PkEM+wyxkYZ8hW VSqRvvAzyKfghs4dJgsNA+xGKdRJvmCk9Q+mkAv+x54rp7Reb4zjkrJmnQOwZjr6 ciZec5/md8buOA46jjkrRF7Z+3lBRvUBDDBzk3a2bxcJplNVvYVBD1PhK2PpM/UE oEUDN7PUs2z6X+bMnznrQVX0gevI++yz6VZyVcwiQovC6Kt6Due8AhT1yWStQhFZ 8OFONGyS75BWrYU5 -----END CERTIFICATE-----Generated at Fri Oct 24 04:31:01 2025 by rpki-client