$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft File: 8184669B0189B7FABE05E700325A0D74957BEB27.mft (raw, json) Hash identifier: xUFu0v75lJ8K6tUc7PruKpL1utGfh9ahYFDWtC0zfhM= Subject key identifier: 6F:88:65:DA:7C:95:6E:67:7A:75:7F:4E:06:11:BF:B2:06:C9:35:39 Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27 Certificate serial: 6AB51F8BDC0DECFBA7B8192AE20C3AF6A7781413 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft Manifest number: 011E Signing time: Tue 28 Oct 2025 02:19:28 +0000 Manifest this update: Tue 28 Oct 2025 02:14:28 +0000 Manifest next update: Wed 29 Oct 2025 02:47:28 +0000 Files and hashes: 1: 3231332e3135372e3131322e302f32322d3232203d3e203230353130.roa (hash: oXC9Asr9SJ7DSslxSZaWUX9xWnSBbY5iUxbxwvvcFUI=) 2: 3231332e3135372e3130372e302f32342d3234203d3e203530323631.roa (hash: fkThFrWbc2SNg5nWL/DjCmp7efO9LKVSLfyHO63Odeo=) 3: 3231332e3135372e3132312e302f32342d3234203d3e2039333034.roa (hash: ZHfI2bxkV7hnGY31X0QEko4MmgUYJCvh7a/XuZiRsPg=) 4: 3231332e3135372e3132322e302f32342d3234203d3e2039333034.roa (hash: aUvc4UTsIU7R0m9dsnmxWesOTPr9WQo6/RshJ5X0hb4=) 5: 3231332e3135372e3131362e302f32332d3233203d3e203230353130.roa (hash: u6D0nQIamyf1rwT6EphlkmgpGmdsHhrROhbEzSFSSxQ=) 6: 3231332e3135372e39362e302f32302d3230203d3e203230353130.roa (hash: cK22q6rO6KtktflqsQYlSr1z73xEpoVM/WNGnd6YIEI=) 7: 3231332e3135372e3132302e302f32342d3234203d3e203432383331.roa (hash: obPbW0ZKO9rq4yp7c5UqzqijavPW0CV78gaYhHaBReI=) 8: 8184669B0189B7FABE05E700325A0D74957BEB27.crl (hash: tfhFmX+sGrNLOp/8RA5ubyybETBZZ42/gR4SrlqyJQU=) 9: 3231332e3135372e3132332e302f32342d3234203d3e2039333034.roa (hash: vxjXWaCdelX3l/Dq0oCF9svJSK3Gm/FVltSuWwTdg0M=) 10: 3231332e3135372e3131382e302f32332d3233203d3e203230353130.roa (hash: U2rsj2GmpPBYV9RPLITNHzbaDI2Gxelnlov5msxX9eI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Oct 2025 02:47:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:b5:1f:8b:dc:0d:ec:fb:a7:b8:19:2a:e2:0c:3a:f6:a7:78:14:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27 Validity Not Before: Oct 28 02:14:28 2025 GMT Not After : Oct 29 02:47:28 2025 GMT Subject: CN=6F8865DA7C956E677A757F4E0611BFB206C93539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:30:f5:34:f0:a2:e9:36:67:79:0c:46:43:3f: 14:d1:13:9f:d9:03:f4:8f:5a:26:bb:d1:f3:02:f5: 06:c6:eb:e7:63:05:ed:ef:0c:ca:85:be:d2:f5:91: 63:85:a0:c1:67:09:00:1a:44:3e:83:fe:26:0e:c9: a1:f0:e1:96:d3:29:9f:6e:55:88:ec:eb:32:f9:c8: 8c:d2:bc:d8:62:2c:df:38:2e:bf:2a:7a:66:d0:e7: 5c:2e:3f:c9:96:4f:fb:90:c4:dd:dc:47:1f:b2:19: 03:35:b6:34:30:2d:b6:1b:9e:f0:a0:e1:2c:fd:76: cc:19:ac:49:38:f8:49:57:2a:47:27:94:d0:75:c6: 05:e4:90:f9:9f:95:cd:48:0e:72:3b:59:be:0e:77: f9:68:5c:fb:27:68:2e:52:c9:0f:27:06:0c:7d:e8: 06:fe:3f:4c:4d:96:46:e3:81:ea:cd:bf:56:5a:b3: d6:0d:d7:3d:29:3a:e6:be:e4:cc:db:cd:86:79:4d: 1d:de:4e:ec:c0:e2:1c:61:43:0d:c8:7c:50:12:3c: 40:cf:db:1a:5d:f0:37:b8:8d:09:0b:b6:e5:08:74: 96:71:7a:e3:f5:2c:74:72:f9:87:38:6d:97:15:0b: ab:b9:25:c1:4c:4a:62:f4:c6:67:3d:8e:d6:d5:3d: f6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:88:65:DA:7C:95:6E:67:7A:75:7F:4E:06:11:BF:B2:06:C9:35:39 X509v3 Authority Key Identifier: keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:e5:84:75:a0:f7:07:a3:fc:2d:d4:92:19:02:b7:b5:c5:60: f8:e6:70:f4:da:99:55:1c:88:3a:83:56:81:cb:a5:8d:3f:d6: 7f:b1:83:77:ff:ad:23:40:d2:c2:cd:34:2e:d1:4d:ad:1a:df: e4:9e:85:0f:35:c7:7e:cb:96:b1:d9:79:aa:25:ca:1c:f3:30: bc:53:df:e7:75:24:49:73:7c:72:6c:b4:e2:3b:0b:4a:98:f8: bf:d9:5a:99:09:93:fd:18:cd:8a:51:a2:27:63:80:0a:4e:b4: c9:39:06:6c:e1:14:d3:02:2c:63:a5:01:6e:b2:d8:87:3e:72: 16:72:88:7a:8d:7d:c8:7c:1f:52:1d:ce:9f:91:56:2d:95:4c: 8f:fc:f0:ce:30:6d:a3:ea:01:0b:c5:c8:83:e1:5f:42:45:23: 15:37:53:20:b0:93:26:63:b8:08:b2:6f:65:69:9c:78:71:11: 27:66:54:66:33:5f:aa:e2:7c:e5:97:8d:58:e6:9c:f9:ef:94: f9:9d:29:56:ad:35:8e:51:ee:ae:86:54:3b:a0:5e:b1:d1:a8: 54:5b:8e:31:b7:2d:6d:e7:e1:d1:91:35:c4:d9:c7:e4:f7:1e: 33:32:fc:bd:19:27:74:a3:71:10:0b:df:47:6d:75:ac:31:cf: a4:ac:fc:71 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUarUfi9wN7PunuBkq4gw69qd4FBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE4NDY2OWIwMTg5YjdmYWJlMDVlNzAwMzI1YTBkNzQ5 NTdiZWIyNzAeFw0yNTEwMjgwMjE0MjhaFw0yNTEwMjkwMjQ3MjhaMDMxMTAvBgNV BAMTKDZGODg2NURBN0M5NTZFNjc3QTc1N0Y0RTA2MTFCRkIyMDZDOTM1MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSMPU08KLpNmd5DEZDPxTRE5/Z A/SPWia70fMC9QbG6+djBe3vDMqFvtL1kWOFoMFnCQAaRD6D/iYOyaHw4ZbTKZ9u VYjs6zL5yIzSvNhiLN84Lr8qembQ51wuP8mWT/uQxN3cRx+yGQM1tjQwLbYbnvCg 4Sz9dswZrEk4+ElXKkcnlNB1xgXkkPmflc1IDnI7Wb4Od/loXPsnaC5SyQ8nBgx9 6Ab+P0xNlkbjgerNv1Zas9YN1z0pOua+5MzbzYZ5TR3eTuzA4hxhQw3IfFASPEDP 2xpd8De4jQkLtuUIdJZxeuP1LHRy+Yc4bZcVC6u5JcFMSmL0xmc9jtbVPfZTAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUb4hl2nyVbmd6dX9OBhG/sgbJNTkwHwYDVR0j BBgwFoAUgYRmmwGJt/q+BecAMloNdJV76ycwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUtMGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJi ZTI1LzAvODE4NDY2OUIwMTg5QjdGQUJFMDVFNzAwMzI1QTBENzQ5NTdCRUIyNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dZUm1td0dKdF9xLUJlY0FNbG9OZEpW NzZ5Yy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNDMxZTQyZS0w ZDdmLTQ0ZDAtODEzZi1iNWUzYTJhYmJlMjUvMC84MTg0NjY5QjAxODlCN0ZBQkUw NUU3MDAzMjVBMEQ3NDk1N0JFQjI3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAuWEdaD3B6P8LdSSGQK3 tcVg+OZw9NqZVRyIOoNWgculjT/Wf7GDd/+tI0DSws00LtFNrRrf5J6FDzXHfsuW sdl5qiXKHPMwvFPf53UkSXN8cmy04jsLSpj4v9lamQmT/RjNilGiJ2OACk60yTkG bOEU0wIsY6UBbrLYhz5yFnKIeo19yHwfUh3On5FWLZVMj/zwzjBto+oBC8XIg+Ff QkUjFTdTILCTJmO4CLJvZWmceHERJ2ZUZjNfquJ85ZeNWOac+e+U+Z0pVq01jlHu roZUO6BesdGoVFuOMbctbefh0ZE1xNnH5PceMzL8vRkndKNxEAvfR211rDHPpKz8 cQ== -----END CERTIFICATE-----Generated at Tue Oct 28 14:48:26 2025 by rpki-client