$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft File: 87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft (raw, json) Hash identifier: 0vqmAeMriFY+oSDrWuQGfLdIYjD/F82OEgrJlC3A4LI= Subject key identifier: 5B:22:BB:9D:72:4D:BF:25:41:3E:16:72:1D:5F:1D:3B:F6:53:46:E9 Authority key identifier: 87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 Certificate issuer: /CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Certificate serial: 15020ADE435EC2D92EC1E82496838819086CC359 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft Manifest number: FA Signing time: Thu 23 Oct 2025 17:27:14 +0000 Manifest this update: Thu 23 Oct 2025 17:22:14 +0000 Manifest next update: Fri 24 Oct 2025 18:51:14 +0000 Files and hashes: 1: 326131343a373538313a393930343a3a2f34382d3438203d3e20323134333434.roa (hash: Kr++/O1eWk2rhooTEwkNaOpIKHaAHhcWSp5UY9Du6eM=) 2: 326131343a373538313a393930323a3a2f34382d3438203d3e20323134333434.roa (hash: 3uRQGY7O+ZvtbHNtgC5MF4VJ4PR1W0vGtZuXeGQdfrI=) 3: 326131343a373538313a393966333a3a2f34382d3438203d3e20323134333434.roa (hash: CfKfKnWr6AMoLiLfBVlrhneodY9KAu+Y1wDjsvoRWPk=) 4: 326131343a373538303a666634333a3a2f34382d3438203d3e20323134333434.roa (hash: apRB5OfhlgNP9CjlOyLXHwJtDJcG7Ul2o20dXFYOVFQ=) 5: 326131343a373538313a393966313a3a2f34382d3438203d3e20323134333434.roa (hash: eBRv+uDGLUqSp7a6GG/a9BPTN3/sPy8oPhg1ivi/5ik=) 6: 326131343a373538303a666634363a3a2f34382d3438203d3e20323134333434.roa (hash: INfgk/A/FB6y22LomhkCbMfma8QUd57K4w9Tk5H86CM=) 7: 326131343a373538303a666634353a3a2f34382d3438203d3e20323134333434.roa (hash: 5PYc1rYfh5soL/5eOkdLi7LFwnLpj6iEncugTNMnU6k=) 8: 326131343a373538313a393930333a3a2f34382d3438203d3e20323134333434.roa (hash: /zrjZ0ZqEzRDQ5mOWK+S06L45z9UxNhwijRkpqGoHX0=) 9: 326131343a373538303a666634343a3a2f34382d3438203d3e20323134333434.roa (hash: wAwmvjP2Xs/JgKfPKl1DdsDpWK9Z2qkOeMDP05em2JQ=) 10: 326131343a373538313a393966323a3a2f34382d3438203d3e20323134333434.roa (hash: GgRgpO0cir6J2JIvLpFaBWDg0/fcSkJg//f6BlSBDCY=) 11: 326131343a373538313a393966343a3a2f34382d3438203d3e20323134333434.roa (hash: aT8cghtaGkqPEEByCDT3I1TbWDM5+v3iYF7i8PWrF94=) 12: 326131343a373538303a666634303a3a2f34382d3438203d3e20323134333434.roa (hash: dPCGiKkWz0E9rMprVOstBFLQuVK9OG6CBSKX+fk7UXw=) 13: 326131343a373538303a666634313a3a2f34382d3438203d3e20323134333434.roa (hash: pdCqfiQKAk5mpE38Sur9HB4NVG9NXvRtOzzMMORY0Ss=) 14: 326131343a373538313a393939393a3a2f34382d3438203d3e20323134333434.roa (hash: gWNOGizaCWeT+eChfA6O1CcYgC4CppF3JVd8ZgY0qsY=) 15: 326131343a373538313a393965653a3a2f34382d3438203d3e20323134333434.roa (hash: 3oBSnEnPYocyloNNfV7eH1ZnHXiKOV8dASwMij3b8+0=) 16: 326131343a373538303a666634323a3a2f34382d3438203d3e20323134333434.roa (hash: 9k9VorkprwzOj4hWnDvwpKS020LK9HlBFwzRrzgLjKw=) 17: 326131343a373538313a393930313a3a2f34382d3438203d3e20323134333434.roa (hash: i94AFUzw6e810fYgj7x6pZ8Yx8k5H6Glrkwkeys08UU=) 18: 326131343a373538313a393930353a3a2f34382d3438203d3e20323134333434.roa (hash: 0tk68iktR4A+Tmx1ow+QCPfURRQdgNg7+hqUgrcV4SU=) 19: 87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl (hash: zDQmU43Vwz4YtqinO+VcmdupfKoc5yn6LhSHyT0MJUY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 18:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:02:0a:de:43:5e:c2:d9:2e:c1:e8:24:96:83:88:19:08:6c:c3:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Validity Not Before: Oct 23 17:22:14 2025 GMT Not After : Oct 24 18:51:14 2025 GMT Subject: CN=5B22BB9D724DBF25413E16721D5F1D3BF65346E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cf:83:37:45:6b:6b:73:3d:f8:c4:39:9f:93: 53:60:87:75:6e:41:c9:6b:d3:42:84:7a:5b:60:04: 70:84:a3:c2:a8:ae:f5:2d:c9:80:98:31:02:5d:29: 89:8a:cf:2f:2d:77:1d:a4:2e:ee:77:cf:13:97:15: 8b:aa:bf:80:c2:87:3f:92:6c:ac:6b:4d:21:ff:e3: 1f:c2:7a:04:f4:12:41:95:0e:b7:0e:6b:56:1c:03: 98:20:30:b8:1b:b8:00:8b:7e:86:56:cc:69:20:c3: 2e:ec:7e:a6:a4:03:f5:cc:20:2b:9c:a7:10:ab:86: b0:6a:04:4d:ef:f9:a5:05:92:d6:03:77:7a:80:dc: 73:e0:98:b1:79:05:fc:ee:05:f0:68:83:40:fa:ef: 70:43:f0:8f:cd:0e:14:67:94:05:97:39:45:14:3c: c4:e6:57:30:a6:c3:0f:d0:c7:33:9c:c1:35:fb:84: cf:33:e4:e2:4d:da:e9:b9:07:da:14:ef:45:83:08: c5:0f:37:71:cb:a6:6f:a4:60:f9:ee:80:78:b5:36: 53:72:24:55:dd:22:92:0e:ad:aa:1b:c7:1b:40:ff: ea:17:9d:e0:fe:28:cb:41:4c:1c:54:77:0a:e0:69: 83:8b:76:77:e7:36:2d:12:85:dc:32:96:a2:7e:00: 89:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:22:BB:9D:72:4D:BF:25:41:3E:16:72:1D:5F:1D:3B:F6:53:46:E9 X509v3 Authority Key Identifier: keyid:87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:f8:d8:31:53:68:e7:5d:5b:09:cd:a3:90:b8:28:86:a8:2e: 1e:b9:8b:c0:b0:03:c6:b8:fe:41:ae:b8:bb:c9:e3:04:a5:58: 0b:53:2c:2f:0d:96:68:fb:2b:a0:b3:fd:f4:8b:61:ae:6d:59: a6:b0:7e:4f:09:3f:cf:ea:04:a0:81:46:ad:32:2b:6e:93:53: 75:52:e4:cb:e5:ba:f5:47:19:be:9c:78:bd:c6:43:52:a5:f7: 24:24:3a:87:83:cb:5e:09:4b:26:75:3d:97:c3:69:cd:89:8b: d3:02:ee:1b:66:52:c5:0a:3f:f4:35:fd:77:8f:60:a0:b4:45: c4:e3:fb:4b:24:25:9b:1b:75:eb:7b:c3:2d:0a:e9:dd:22:dd: ef:29:fa:33:e9:d4:02:a4:e0:15:a1:d9:75:40:7d:5a:0d:93: b4:1b:4d:d0:bd:8c:ca:38:7b:5a:a8:a7:f9:e3:87:79:ac:a9: c9:ae:a1:c7:a0:b5:a2:0a:96:79:47:d3:83:43:c3:75:89:69: e8:17:c7:00:1b:2d:21:f7:63:ee:c5:76:5e:59:8a:a0:96:cc: 0d:d5:4c:62:51:0f:21:26:95:c3:86:20:0d:9b:a7:1f:d8:da: a3:6d:02:b9:7d:bc:9f:ff:7b:43:f2:ca:bf:70:59:63:f7:26: da:72:a2:4f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUFQIK3kNewtkuwegkloOIGQhsw1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdBNEM4NEQ0MzY2REJCMTVBOTA5MEE1NUFBMkRDRUJB ODcyMzk0NTAeFw0yNTEwMjMxNzIyMTRaFw0yNTEwMjQxODUxMTRaMDMxMTAvBgNV BAMTKDVCMjJCQjlENzI0REJGMjU0MTNFMTY3MjFENUYxRDNCRjY1MzQ2RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEz4M3RWtrcz34xDmfk1Ngh3Vu Qclr00KEeltgBHCEo8KorvUtyYCYMQJdKYmKzy8tdx2kLu53zxOXFYuqv4DChz+S bKxrTSH/4x/CegT0EkGVDrcOa1YcA5ggMLgbuACLfoZWzGkgwy7sfqakA/XMICuc pxCrhrBqBE3v+aUFktYDd3qA3HPgmLF5BfzuBfBog0D673BD8I/NDhRnlAWXOUUU PMTmVzCmww/QxzOcwTX7hM8z5OJN2um5B9oU70WDCMUPN3HLpm+kYPnugHi1NlNy JFXdIpIOraobxxtA/+oXneD+KMtBTBxUdwrgaYOLdnfnNi0ShdwylqJ+AIkrAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUWyK7nXJNvyVBPhZyHV8dO/ZTRukwHwYDVR0j BBgwFoAUh6TITUNm27FakJClWqLc66hyOUUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTVkNGMwMGItZDEwNS00OTA2LWI5ODEtMWQwMzQzZTMw MWRhLzEvODdBNEM4NEQ0MzY2REJCMTVBOTA5MEE1NUFBMkRDRUJBODcyMzk0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84N0E0Qzg0RDQzNjZEQkIxNUE5MDkwQTU1 QUEyRENFQkE4NzIzOTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2E1ZDRjMDBiLWQxMDUtNDkwNi1iOTgxLTFkMDM0M2UzMDFkYS8xLzg3QTRDODRE NDM2NkRCQjE1QTkwOTBBNTVBQTJEQ0VCQTg3MjM5NDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAT+Ngx U2jnXVsJzaOQuCiGqC4euYvAsAPGuP5Brri7yeMEpVgLUywvDZZo+yugs/30i2Gu bVmmsH5PCT/P6gSggUatMituk1N1UuTL5br1Rxm+nHi9xkNSpfckJDqHg8teCUsm dT2Xw2nNiYvTAu4bZlLFCj/0Nf13j2CgtEXE4/tLJCWbG3Xre8MtCundIt3vKfoz 6dQCpOAVodl1QH1aDZO0G03QvYzKOHtaqKf544d5rKnJrqHHoLWiCpZ5R9ODQ8N1 iWnoF8cAGy0h92PuxXZeWYqglswN1UxiUQ8hJpXDhiANm6cf2NqjbQK5fbyf/3tD 8sq/cFlj9ybacqJP -----END CERTIFICATE-----Generated at Fri Oct 24 04:27:45 2025 by rpki-client