$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft File: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json) Hash identifier: FfQAlx9QcVcB/mEiyKqzAieTtlMJKvERzO1c+8cHhsk= Subject key identifier: EF:40:80:D7:D2:5D:7E:91:F9:49:A8:66:5B:79:72:A6:71:83:CD:94 Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Certificate serial: 3709128701C532BF6C2E320E20005DFCE3F3475E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft Manifest number: 04A1 Signing time: Tue 21 Oct 2025 11:32:30 +0000 Manifest this update: Tue 21 Oct 2025 11:27:30 +0000 Manifest next update: Wed 22 Oct 2025 13:41:30 +0000 Files and hashes: 1: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (hash: dPumV3w+l5K00Z5figZidyPpD2Xj/WObq95u77jhIK4=) 2: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: qxlkfW/nLMV9I5WoI6HQ89q00naILT20Rguml63Zf0A=) 3: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: qGNft1uCzkGwuPJH7iDQ4xUhWrhNnduWexIhT+DgvI8=) 4: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: oQj2no095+LyjZGzWOfw+sSJOW/7fRxpgUOPswu5nqM=) 5: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: OKc3uZvr3kmY38TGv/j5cCd/d8TD6IBU2hGWJY9u+K0=) 6: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: GCjCQc0vdu8E+NZi5emgx2vW0PKbTzGL5UYc+2R4voE=) 7: 3138352e322e3136322e302f32332d3234203d3e20323135323639.roa (hash: sEO5Q+LtE+juFIMx1yqrmSkIjuvpVFxY8R1aiQqtGzs=) 8: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: W95e9h2ypKBcN51G9gRI82wozQL8rXCLvGb2mHpv6bk=) 9: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: sEO4nB5O0/Mm45JtB8pWj2tZyvlYOZxo5yAO+Zq5pm8=) 10: 3138352e322e3136302e302f32332d3234203d3e2039333034.roa (hash: vl2Nht2rNjTXwCm1D2P9y8kdqhZOwgeZgf4gpkMvcp8=) 11: 36322e3131322e3134342e302f32302d3230203d3e203539363432.roa (hash: hNXCqst3dZC+Dp3skkO26cOwh1zWEwx2n+JeuoU1IgU=) 12: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: DuCHe81tO8TVOKBTNFQCS5fRuYDjbGZfxshPpJZXNzc=) 13: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: X+PLwzsRRQMgaM/TWKrSkseThdECGWKV7QbjrMlPn80=) 14: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: hY/iIpaGanxmxatebFYi3ijTkZjHjUc/Iwjsijc0S+E=) 15: 36322e3131322e3134342e302f32302d3234203d3e203230333236.roa (hash: PvFG9BZ+YdbKPRfUC/0dM3w7V209DRWmI/bk8VoBnFU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 13:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:09:12:87:01:c5:32:bf:6c:2e:32:0e:20:00:5d:fc:e3:f3:47:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Validity Not Before: Oct 21 11:27:30 2025 GMT Not After : Oct 22 13:41:30 2025 GMT Subject: CN=EF4080D7D25D7E91F949A8665B7972A67183CD94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:80:20:ee:36:2f:0e:9b:1b:37:84:c0:49:3b: 87:5d:0e:a6:7a:f9:a7:c1:fa:77:3c:81:34:a6:92: 69:0a:b7:36:2b:35:c8:ca:f9:d5:f7:43:fb:48:3f: 4b:db:aa:ea:ac:bc:04:29:ae:35:a2:89:e4:ec:82: 63:d4:72:17:f4:15:0d:d7:da:fc:42:23:b7:10:41: a4:38:4e:30:f8:8e:05:f4:a3:5e:66:e6:0f:5e:5a: b4:76:73:e3:93:89:e4:97:8e:12:e6:ca:4d:5d:e6: 5a:70:ed:47:55:c5:81:bf:8c:ed:7c:be:d8:91:8d: 47:a2:82:3c:83:ea:12:0d:8c:d5:b8:13:4d:2a:f7: 29:52:e6:24:c1:c9:9d:01:da:fe:87:97:35:3d:73: bc:ff:c9:7e:96:c0:8f:dd:77:46:b3:2f:60:26:67: 34:84:3b:39:83:45:5e:14:29:c4:8c:25:bc:7f:70: 12:1f:17:1b:18:e5:6e:29:c0:6f:20:86:60:06:26: 2b:df:45:c9:b7:bb:34:5e:fd:17:d5:26:d0:e1:c9: 8f:60:6e:cc:58:e0:a0:0d:d5:e1:07:54:16:42:4e: 95:95:42:a6:a0:38:20:0f:7d:81:01:19:88:93:93: d4:6b:77:10:f8:a6:0c:76:bf:e0:63:fc:20:a8:7c: 55:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:40:80:D7:D2:5D:7E:91:F9:49:A8:66:5B:79:72:A6:71:83:CD:94 X509v3 Authority Key Identifier: keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:ee:75:25:25:ce:f3:60:83:ed:35:77:27:59:bc:fb:15:7c: 16:86:f6:20:2d:93:c0:4d:60:02:3e:60:da:7b:56:73:6c:cf: 8a:6b:98:67:2a:f6:66:3b:0c:e9:bf:ea:f9:18:00:9b:b5:c3: 49:59:8b:a2:1d:af:46:3b:7c:8d:95:8e:50:b7:82:9c:be:68: 91:16:bd:30:5a:1d:0a:21:5b:08:a2:bc:d1:f4:90:79:01:8c: f1:26:d7:c8:71:30:89:d8:2f:6a:a0:a6:aa:77:96:a0:83:9e: 53:f9:ed:2c:7d:78:1e:f2:2a:17:94:1c:1c:1f:29:bb:a8:b4: 80:36:07:df:40:f6:cc:08:ff:4d:02:27:4c:ce:bc:a8:f4:b7: 0b:b9:f5:c6:1c:7d:76:50:1c:59:a9:4e:42:2b:ac:9d:71:71: 03:27:33:94:81:04:99:3e:cc:f9:fd:19:e3:29:f3:77:2b:f1: b7:7a:fc:a1:78:a4:6f:08:23:80:1c:65:18:67:20:44:c4:82: 43:9c:33:e9:24:52:6d:15:4b:71:18:fc:58:ef:c4:16:8e:3c: 47:7d:1f:ae:a5:31:66:dd:a9:58:06:31:97:21:a2:67:8d:43: e3:9b:fb:e5:ec:e6:f9:bc:23:11:c8:75:1e:bf:d0:60:20:55: 20:1c:f2:e3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNwkShwHFMr9sLjIOIABd/OPzR14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3 MDgzZWQ0ZDAeFw0yNTEwMjExMTI3MzBaFw0yNTEwMjIxMzQxMzBaMDMxMTAvBgNV BAMTKEVGNDA4MEQ3RDI1RDdFOTFGOTQ5QTg2NjVCNzk3MkE2NzE4M0NEOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDigCDuNi8Omxs3hMBJO4ddDqZ6 +afB+nc8gTSmkmkKtzYrNcjK+dX3Q/tIP0vbquqsvAQprjWiieTsgmPUchf0FQ3X 2vxCI7cQQaQ4TjD4jgX0o15m5g9eWrR2c+OTieSXjhLmyk1d5lpw7UdVxYG/jO18 vtiRjUeigjyD6hINjNW4E00q9ylS5iTByZ0B2v6HlzU9c7z/yX6WwI/dd0azL2Am ZzSEOzmDRV4UKcSMJbx/cBIfFxsY5W4pwG8ghmAGJivfRcm3uzRe/RfVJtDhyY9g bsxY4KAN1eEHVBZCTpWVQqagOCAPfYEBGYiTk9RrdxD4pgx2v+Bj/CCofFWXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU70CA19JdfpH5SahmW3lypnGDzZQwHwYDVR0j BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3 ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD RDdVMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjMxNzY4ZC00 MmIxLTRlOTItYjgzZi1iZWY3ZWUwMTc4MTMvMC85RjBEMjRDODU1RUVFMDBGRTRB QkYzOTAzQzZFOEZDQzcwODNFRDRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHO51JSXO82CD7TV3J1m8 +xV8Fob2IC2TwE1gAj5g2ntWc2zPimuYZyr2ZjsM6b/q+RgAm7XDSVmLoh2vRjt8 jZWOULeCnL5okRa9MFodCiFbCKK80fSQeQGM8SbXyHEwidgvaqCmqneWoIOeU/nt LH14HvIqF5QcHB8pu6i0gDYH30D2zAj/TQInTM68qPS3C7n1xhx9dlAcWalOQius nXFxAyczlIEEmT7M+f0Z4ynzdyvxt3r8oXikbwgjgBxlGGcgRMSCQ5wz6SRSbRVL cRj8WO/EFo48R30frqUxZt2pWAYxlyGiZ41D45v75ezm+bwjEch1Hr/QYCBVIBzy 4w== -----END CERTIFICATE-----Generated at Tue Oct 21 22:50:12 2025 by rpki-client