$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft File: 5ECB4CADBBADD500F49CA697D566A2761E017608.mft (raw, json) Hash identifier: 2X124Dzdb+U1j698iCJ1+QF00LBCT5PWyg6+HUt0Gdo= Subject key identifier: 9D:CF:51:1B:B2:3A:7C:C1:58:FD:B5:40:7E:DA:79:0A:5C:6C:F2:86 Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Certificate serial: 5832AFEFD72C4C2D4BBFF807D39553BA8D85212D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft Manifest number: 01D4 Signing time: Tue 21 Oct 2025 10:22:24 +0000 Manifest this update: Tue 21 Oct 2025 10:17:24 +0000 Manifest next update: Wed 22 Oct 2025 12:20:24 +0000 Files and hashes: 1: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (hash: Q4yUdFFGtrq1xUVDtHn0DoNWjht0ICRHxiUX7p+xRAQ=) 2: 38362e35342e3137322e302f32342d3234203d3e20323134343332.roa (hash: WVXkrZeMKS19WGWwMJQfqNOjJpC3bIU6zT5pImMreVs=) 3: 3231332e3235342e3137302e302f32342d3234203d3e20323134393431.roa (hash: WuIyFXGDgkt2cltxoxT/RYao20HHu+r0Sn5rfpjFnHA=) 4: 3137302e36322e3139302e302f32342d3234203d3e203438393235.roa (hash: TDSLNd9plHJwOulPeBHo1vNBDKxJTlWmh9i0dzSd4do=) 5: 3231332e3235342e3137302e302f32342d3234203d3e20323038343833.roa (hash: gjwDheXZBS8eOtwo7Ja5xPFcujfV7TC07EH1z972oQ4=) 6: 3231332e3235342e3137302e302f32342d3234203d3e203438363738.roa (hash: ttSPLNkVmnmfbB1Jg0U4OFMRv4cZWxzTg6oBluFltrk=) 7: 5ECB4CADBBADD500F49CA697D566A2761E017608.crl (hash: 1RniNgdbGm9r0r0DSPxI44BfSSvOcvarpsolyH+QlsM=) 8: 3134312e3139332e3232382e302f32342d3234203d3e20323134323038.roa (hash: p1kuPenqcy6Et0XPjwxcCLB+vpEy3ekHhe4EodnqolI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 12:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:32:af:ef:d7:2c:4c:2d:4b:bf:f8:07:d3:95:53:ba:8d:85:21:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Validity Not Before: Oct 21 10:17:24 2025 GMT Not After : Oct 22 12:20:24 2025 GMT Subject: CN=9DCF511BB23A7CC158FDB5407EDA790A5C6CF286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d1:ed:87:7f:96:8e:f8:33:de:d0:1a:3c:da: 50:12:c5:a2:4d:6d:30:0d:80:24:7d:d6:d9:be:cf: 68:14:fc:9c:c4:13:b2:54:d9:8d:7f:a8:ac:c1:13: fa:80:81:28:b6:98:3b:ad:5c:7c:1b:56:f3:55:cf: b0:df:e4:02:61:1f:f6:3a:ae:f8:75:62:fb:19:b2: 8a:2d:cb:ff:bc:b2:18:6f:b2:70:a2:ce:89:98:61: e4:4c:e1:53:f7:4e:f8:5c:a6:53:ca:68:e9:49:80: 53:69:20:d8:9b:41:df:20:90:27:47:b8:76:51:47: 5f:16:fa:7d:79:99:81:5b:dc:93:9b:65:42:31:f4: 12:18:43:d3:48:4c:01:46:2d:30:80:3e:19:81:61: 43:24:d1:c2:d0:92:54:7c:5e:84:a4:24:7a:0f:ab: 48:a8:b4:60:07:cf:da:5c:c4:9f:55:ed:30:c2:58: 11:3e:f8:71:51:a3:43:5a:1c:ad:97:a6:0c:70:e2: a0:71:9f:4b:05:b0:88:2e:b6:35:f2:f7:47:53:ae: 6b:14:62:ed:6c:e2:ea:59:8d:5a:53:78:df:65:ae: 37:04:db:10:9f:cc:18:ce:10:f6:41:b7:6b:ab:3f: 28:4c:fc:a8:70:15:91:3e:79:24:46:11:65:c8:22: 87:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:CF:51:1B:B2:3A:7C:C1:58:FD:B5:40:7E:DA:79:0A:5C:6C:F2:86 X509v3 Authority Key Identifier: keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:ba:f3:cf:67:fd:29:14:6c:cd:4e:50:9d:42:cc:fe:06:55: 3b:b5:a5:a2:c8:df:11:db:4d:a5:bd:2d:c6:f4:8a:db:c6:e7: 20:38:21:66:79:e9:86:a9:2b:6f:35:5b:99:b4:6e:0f:38:51: 0f:dd:11:b0:3c:fd:5b:91:fc:ed:c8:a8:d6:5f:8c:43:0a:ce: 0f:77:15:9f:7f:37:fc:24:33:38:10:7c:50:e9:fa:32:2e:0a: 92:b6:25:27:2f:2a:43:26:f4:55:69:4c:91:70:17:91:7a:fd: 54:78:52:54:3f:30:9e:49:a6:81:d9:fc:d8:6e:a8:9d:24:04: 01:a8:d4:98:43:c7:38:1e:a1:c1:9e:44:52:87:2f:27:d2:73: 38:49:84:c2:c5:6b:b6:e0:6b:84:2d:cd:cd:61:c3:49:64:1c: 7a:d9:8e:d9:5a:75:38:a9:bd:02:28:66:44:84:50:96:d0:9c: 4a:85:54:6f:98:06:2c:04:77:96:d4:8e:c4:76:5a:f4:17:a1: b6:af:bd:32:6f:57:18:7c:96:b8:e3:23:c4:80:c6:f3:1d:34: 00:5a:01:44:81:53:6e:d2:73:b2:1f:3e:4d:b3:a8:17:d3:33: bc:18:31:e1:83:78:35:43:cf:73:ab:ab:e0:f6:d5:b0:46:48: 7d:de:d0:3d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWDKv79csTC1Lv/gH05VTuo2FIS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx ZTAxNzYwODAeFw0yNTEwMjExMDE3MjRaFw0yNTEwMjIxMjIwMjRaMDMxMTAvBgNV BAMTKDlEQ0Y1MTFCQjIzQTdDQzE1OEZEQjU0MDdFREE3OTBBNUM2Q0YyODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe0e2Hf5aO+DPe0Bo82lASxaJN bTANgCR91tm+z2gU/JzEE7JU2Y1/qKzBE/qAgSi2mDutXHwbVvNVz7Df5AJhH/Y6 rvh1YvsZsooty/+8shhvsnCizomYYeRM4VP3TvhcplPKaOlJgFNpINibQd8gkCdH uHZRR18W+n15mYFb3JObZUIx9BIYQ9NITAFGLTCAPhmBYUMk0cLQklR8XoSkJHoP q0iotGAHz9pcxJ9V7TDCWBE++HFRo0NaHK2Xpgxw4qBxn0sFsIgutjXy90dTrmsU Yu1s4upZjVpTeN9lrjcE2xCfzBjOEPZBt2urPyhM/KhwFZE+eSRGEWXIIodrAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUnc9RG7I6fMFY/bVAftp5Clxs8oYwHwYDVR0j BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0 QmRnZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzBlMTNkOC1i ZmUwLTQyMzUtYWZiNC1kNTNlZGZiYWNkZDIvMC81RUNCNENBREJCQURENTAwRjQ5 Q0E2OTdENTY2QTI3NjFFMDE3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdbrzz2f9KRRszU5QnULM /gZVO7WlosjfEdtNpb0txvSK28bnIDghZnnphqkrbzVbmbRuDzhRD90RsDz9W5H8 7cio1l+MQwrOD3cVn383/CQzOBB8UOn6Mi4KkrYlJy8qQyb0VWlMkXAXkXr9VHhS VD8wnkmmgdn82G6onSQEAajUmEPHOB6hwZ5EUocvJ9JzOEmEwsVrtuBrhC3NzWHD SWQcetmO2Vp1OKm9AihmRIRQltCcSoVUb5gGLAR3ltSOxHZa9Behtq+9Mm9XGHyW uOMjxIDG8x00AFoBRIFTbtJzsh8+TbOoF9MzvBgx4YN4NUPPc6ur4PbVsEZIfd7Q PQ== -----END CERTIFICATE-----Generated at Tue Oct 21 17:17:32 2025 by rpki-client