$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft File: 2E2674263AECD572673F87614919CA492C79FAEA.mft (raw, json) Hash identifier: pYUnSXSFXXLX1lzSoZX6lwsrUBlkHNiWXWf5apP6LMw= Subject key identifier: B0:1A:6C:FC:F1:B8:33:F3:D0:5E:64:CB:07:0F:5E:1B:03:CD:08:68 Authority key identifier: 2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA Certificate issuer: /CN=2e2674263aecd572673f87614919ca492c79faea Certificate serial: 0CE3BA2F9062C0C6E95648A1183E9D3745692330 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft Manifest number: 0184 Signing time: Tue 11 Nov 2025 00:54:03 +0000 Manifest this update: Tue 11 Nov 2025 00:49:03 +0000 Manifest next update: Wed 12 Nov 2025 01:14:03 +0000 Files and hashes: 1: 34352e36362e36312e302f32342d3234203d3e20323733323432.roa (hash: tU7tyCca1tIOx1hnSKjuKCDiTN546CQQQvHB6q/i7qk=) 2: 34352e36362e36302e302f32342d3234203d3e203634323637.roa (hash: ZF32PAG53xWynbk01utLLBmDRxOU851zkR0rreW86uY=) 3: 2E2674263AECD572673F87614919CA492C79FAEA.crl (hash: 87AJJBRdOgvagdw2ibhoFKh29vHepS38yUbZYREjj9c=) 4: 34352e36362e36332e302f32342d3234203d3e20323134343332.roa (hash: bZNP+wA40wAyACtbN5qUmpIVm/KoebsR0HiX5BeNfUM=) 5: 34352e36362e36302e302f32342d3234203d3e20333937363330.roa (hash: m0lx7gp/PL+dNLZxtVb3q5bMr/J2JBCQr1yWWiLZaNg=) 6: 34352e36362e36322e302f32342d3234203d3e20323131323237.roa (hash: imRIoujslgfIw1o5CZvn1r7w9Uct08AIqiMVjfiL8o4=) 7: 34352e36362e36302e302f32342d3234203d3e203534323532.roa (hash: 07DX+W8TeroyGa5hcwYk2V3rpVrx11S+EMaM/klvGiM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 12 Nov 2025 01:14:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:e3:ba:2f:90:62:c0:c6:e9:56:48:a1:18:3e:9d:37:45:69:23:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e2674263aecd572673f87614919ca492c79faea Validity Not Before: Nov 11 00:49:03 2025 GMT Not After : Nov 12 01:14:03 2025 GMT Subject: CN=B01A6CFCF1B833F3D05E64CB070F5E1B03CD0868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:93:4b:df:ed:4a:f9:98:93:d6:fc:75:35:5b: 42:fc:18:0e:41:6e:79:5e:77:2e:10:e2:37:81:25: e5:e5:8f:fc:33:a1:8e:2a:71:0e:30:c8:88:e3:ba: b2:df:74:60:1e:cf:e7:bc:f3:3d:05:67:22:0c:3a: db:87:31:93:3b:cc:2a:a5:fa:6d:24:c8:ec:05:30: 63:44:4a:77:23:0d:4c:e7:b4:0d:9d:4d:8b:72:59: 60:2b:89:58:0a:a6:5e:04:5f:cf:49:fd:9b:e6:41: 54:00:0a:5e:fc:78:56:cf:96:de:8a:a4:67:30:fa: 4f:b5:5e:95:03:65:33:6b:49:2e:a3:56:94:82:55: f7:ae:c6:2e:03:09:36:73:10:6a:50:e1:61:20:ba: f1:f2:bd:3c:0d:76:9d:be:8f:9c:b0:3a:53:19:51: 13:61:52:8b:e2:7f:a8:1d:01:75:ce:c5:30:be:59: ca:52:67:11:20:3b:74:24:bc:02:49:83:30:16:27: 70:38:bd:c3:0b:dc:27:1e:00:23:f8:a5:b2:ba:62: cb:1d:ec:10:17:7f:23:96:10:63:80:2d:d0:69:81: fa:83:e4:30:c6:0d:ae:86:d3:f5:e0:43:78:6d:3a: 29:44:df:24:d6:52:d0:32:f1:fd:8c:49:ce:21:27: 33:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:1A:6C:FC:F1:B8:33:F3:D0:5E:64:CB:07:0F:5E:1B:03:CD:08:68 X509v3 Authority Key Identifier: keyid:2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:f8:dc:37:65:5a:29:26:6b:3a:57:72:24:22:c5:99:8c:45: 55:1d:72:6e:18:bb:62:29:3e:3a:14:76:01:41:96:c9:ae:7d: 70:7b:40:1e:24:44:9d:3e:f0:c5:b5:43:ea:54:af:ed:73:3d: b7:c4:ed:34:36:82:71:fd:d2:2c:77:23:27:41:34:94:5b:0e: 0d:d6:c2:7e:55:63:16:86:06:ca:3c:70:fb:17:d7:65:b2:d2: 1b:eb:52:f6:ac:c1:3e:f4:b5:11:48:a7:b0:07:2e:fd:ee:bd: dc:63:ec:5f:76:46:ee:d9:a5:b3:08:ba:f9:d7:bf:17:76:fc: ba:aa:a1:96:6a:c1:8d:28:bf:5f:17:f6:dd:03:e2:32:c1:5e: 1f:56:05:0f:bd:be:59:3f:3d:a0:96:d9:d1:a2:61:e7:67:8c: 97:62:d5:2c:49:ee:d4:ed:fb:bc:f1:e5:24:2c:7a:bd:21:8f: 50:43:0d:be:c0:62:15:fc:d0:cb:e6:32:6c:13:37:37:5a:58: 2b:75:0c:60:0f:77:42:2c:ee:f6:8a:9d:23:b6:2e:12:d8:62: 4b:e5:ae:11:fa:f6:69:41:8a:91:e3:22:a7:db:44:3a:c8:62: 7a:ef:57:af:a8:93:51:1b:fa:d2:7e:9c:92:bb:55:66:83:d0: 83:f5:9c:ac -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDOO6L5BiwMbpVkihGD6dN0VpIzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMmUyNjc0MjYzYWVjZDU3MjY3M2Y4NzYxNDkxOWNhNDky Yzc5ZmFlYTAeFw0yNTExMTEwMDQ5MDNaFw0yNTExMTIwMTE0MDNaMDMxMTAvBgNV BAMTKEIwMUE2Q0ZDRjFCODMzRjNEMDVFNjRDQjA3MEY1RTFCMDNDRDA4NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJk0vf7Ur5mJPW/HU1W0L8GA5B bnledy4Q4jeBJeXlj/wzoY4qcQ4wyIjjurLfdGAez+e88z0FZyIMOtuHMZM7zCql +m0kyOwFMGNESncjDUzntA2dTYtyWWAriVgKpl4EX89J/ZvmQVQACl78eFbPlt6K pGcw+k+1XpUDZTNrSS6jVpSCVfeuxi4DCTZzEGpQ4WEguvHyvTwNdp2+j5ywOlMZ URNhUovif6gdAXXOxTC+WcpSZxEgO3QkvAJJgzAWJ3A4vcML3CceACP4pbK6Yssd 7BAXfyOWEGOALdBpgfqD5DDGDa6G0/XgQ3htOilE3yTWUtAy8f2MSc4hJzPtAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUsBps/PG4M/PQXmTLBw9eGwPNCGgwHwYDVR0j BBgwFoAULiZ0Jjrs1XJnP4dhSRnKSSx5+uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmQ3YzIzMWUtYTMzYy00NTU1LWI0MmUtZDAyMDkzODQ5 Mjk5LzAvMkUyNjc0MjYzQUVDRDU3MjY3M0Y4NzYxNDkxOUNBNDkyQzc5RkFFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0xpWjBKanJzMVhKblA0ZGhTUm5LU1N4 NS11by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZDdjMjMxZS1h MzNjLTQ1NTUtYjQyZS1kMDIwOTM4NDkyOTkvMC8yRTI2NzQyNjNBRUNENTcyNjcz Rjg3NjE0OTE5Q0E0OTJDNzlGQUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfjcN2VaKSZrOldyJCLF mYxFVR1ybhi7Yik+OhR2AUGWya59cHtAHiREnT7wxbVD6lSv7XM9t8TtNDaCcf3S LHcjJ0E0lFsODdbCflVjFoYGyjxw+xfXZbLSG+tS9qzBPvS1EUinsAcu/e693GPs X3ZG7tmlswi6+de/F3b8uqqhlmrBjSi/Xxf23QPiMsFeH1YFD72+WT89oJbZ0aJh 52eMl2LVLEnu1O37vPHlJCx6vSGPUEMNvsBiFfzQy+YybBM3N1pYK3UMYA93Qizu 9oqdI7YuEthiS+WuEfr2aUGKkeMip9tEOshieu9Xr6iTURv60n6ckrtVZoPQg/Wc rA== -----END CERTIFICATE-----Generated at Tue Nov 11 15:20:14 2025 by rpki-client