$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft File: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft (raw, json) Hash identifier: r8pJq1zKkyC7TMC6/fdi4bzoXjYz3CdcA5+SFmwvtxI= Subject key identifier: EB:88:1C:01:C5:D5:9A:A4:2A:2D:2C:BF:57:0D:85:2A:4D:3E:AF:23 Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 540AEF6D47FD13A5A0E7C57B356160C3F876ABED Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft Manifest number: 013F Signing time: Tue 14 Oct 2025 00:42:40 +0000 Manifest this update: Tue 14 Oct 2025 00:37:40 +0000 Manifest next update: Wed 15 Oct 2025 15:44:40 +0000 Files and hashes: 1: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl (hash: E7xZUw8GAIMTcW9jIcvea+hlgFaGfdG6UmwApGvlSDE=) 2: 326130623a346530373a363030303a3a2f34302d3438203d3e20323134373031.roa (hash: mhaYla+UsHdOX7ijGa8kmFH/Ey3jwcszbuWBzNvxxRw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 14 Oct 2025 20:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:0a:ef:6d:47:fd:13:a5:a0:e7:c5:7b:35:61:60:c3:f8:76:ab:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: Oct 14 00:37:40 2025 GMT Not After : Oct 15 15:44:40 2025 GMT Subject: CN=EB881C01C5D59AA42A2D2CBF570D852A4D3EAF23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:03:ac:5b:cd:60:fb:f0:82:c5:cc:a6:a0:58: 2e:17:d1:f1:a2:92:ef:a1:8f:78:e1:a3:db:6b:c1: 58:e3:49:08:b3:1a:3b:35:e9:31:65:92:c5:1d:ae: cd:d4:76:94:6c:30:04:d7:57:f8:63:77:31:51:39: a8:ac:c2:60:24:9c:fc:a6:3e:c8:72:79:ed:c7:55: 93:71:a3:75:76:41:6a:56:c1:f6:cc:86:13:31:c3: 24:74:fb:c2:f6:ba:dc:0a:7b:fa:d4:d0:7a:ca:a6: ba:b9:83:c0:b6:21:f5:4c:a9:61:16:c4:5d:b3:53: 70:29:59:d9:d6:20:cf:7e:09:6b:7f:94:f7:20:fa: 40:4e:38:bc:96:06:f5:69:31:99:b8:33:c6:44:e5: ed:74:56:97:23:62:f1:7e:da:87:8f:51:e6:6e:52: 99:44:f3:32:29:46:0a:f5:4d:1f:00:81:7e:78:a7: 7c:d7:86:ab:95:11:ca:d5:9d:ab:ba:c5:90:bc:3e: 1e:ef:a1:2d:37:54:c7:3a:28:e9:57:d6:02:80:bc: c3:c0:92:a4:2e:98:ee:37:e6:03:8c:f2:6f:9d:c5: 1d:2e:67:93:2f:8b:9c:23:d8:60:53:1e:a1:e1:9f: eb:c3:6c:ee:ad:4f:7c:1b:02:2d:3e:61:fa:12:cd: 97:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:88:1C:01:C5:D5:9A:A4:2A:2D:2C:BF:57:0D:85:2A:4D:3E:AF:23 X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:f6:ef:12:fb:1b:17:c8:10:37:0f:d3:a6:d8:09:2b:4b:73: b6:74:09:ec:7a:8f:5c:85:08:6c:f1:75:c7:f2:d9:bd:b4:35: c8:45:14:c9:20:9b:39:ac:05:ff:50:6b:22:63:61:30:32:18: 06:73:ea:14:90:74:29:bd:84:14:25:fe:66:4d:d3:c5:2c:db: da:c8:dd:60:39:b9:fb:7c:dc:16:da:0e:5b:55:18:cf:3e:c2: 5c:36:19:85:30:e9:60:92:ac:7d:b0:88:20:f7:3d:f6:61:e2: 3f:38:15:c7:0f:72:a1:95:c4:2c:6b:b2:1f:c0:8d:d6:7b:fa: 9a:3b:0a:5f:3a:46:a1:a1:d8:79:ee:7a:f9:ed:7a:ec:55:e4: 53:96:a9:8f:44:58:c6:ed:a0:69:4b:89:45:9a:b4:1f:4c:7b: db:f6:8b:fd:37:73:9e:ae:ca:aa:f1:d9:74:ba:7c:63:c4:4b: d7:3f:b6:de:48:a0:fd:f8:95:6b:9a:07:29:8a:27:a5:cd:a0: d1:3d:56:d4:43:68:4f:99:4e:4f:69:e7:d4:34:1f:d2:ca:b1: 90:8f:82:d5:63:ed:85:ab:49:29:f4:6e:db:56:05:16:d2:62: 72:6e:14:2c:c8:23:1e:68:3a:3e:d3:8d:9f:8c:0c:87:03:ec: f2:fb:eb:06 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUVArvbUf9E6Wg58V7NWFgw/h2q+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNTEwMTQwMDM3NDBaFw0yNTEwMTUxNTQ0NDBaMDMxMTAvBgNV BAMTKEVCODgxQzAxQzVENTlBQTQyQTJEMkNCRjU3MEQ4NTJBNEQzRUFGMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFA6xbzWD78ILFzKagWC4X0fGi ku+hj3jho9trwVjjSQizGjs16TFlksUdrs3UdpRsMATXV/hjdzFROaiswmAknPym Pshyee3HVZNxo3V2QWpWwfbMhhMxwyR0+8L2utwKe/rU0HrKprq5g8C2IfVMqWEW xF2zU3ApWdnWIM9+CWt/lPcg+kBOOLyWBvVpMZm4M8ZE5e10VpcjYvF+2oePUeZu UplE8zIpRgr1TR8AgX54p3zXhquVEcrVnau6xZC8Ph7voS03VMc6KOlX1gKAvMPA kqQumO435gOM8m+dxR0uZ5Mvi5wj2GBTHqHhn+vDbO6tT3wbAi0+YfoSzZcXAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU64gcAcXVmqQqLSy/Vw2FKk0+ryMwHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMy9EREMyNUFEMkYxQTQ4OTI0Nzcx M0VFMzlCMUMwM0VBMkZEREE0MTE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGPbvEvsbF8gQNw/TptgJ K0tztnQJ7HqPXIUIbPF1x/LZvbQ1yEUUySCbOawF/1BrImNhMDIYBnPqFJB0Kb2E FCX+Zk3TxSzb2sjdYDm5+3zcFtoOW1UYzz7CXDYZhTDpYJKsfbCIIPc99mHiPzgV xw9yoZXELGuyH8CN1nv6mjsKXzpGoaHYee56+e167FXkU5apj0RYxu2gaUuJRZq0 H0x72/aL/Tdznq7KqvHZdLp8Y8RL1z+23kig/fiVa5oHKYonpc2g0T1W1ENoT5lO T2nn1DQf0sqxkI+C1WPthatJKfRu21YFFtJicm4ULMgjHmg6PtONn4wMhwPs8vvr Bg== -----END CERTIFICATE-----Generated at Tue Oct 14 05:00:18 2025 by rpki-client