$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft File: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft (raw, json) Hash identifier: YR9MhggGjtHI2c3AmOPwSjlEot+YjXh2xXXjH1Ez7ZU= Subject key identifier: 73:37:5D:24:3D:30:1D:27:DB:30:4B:91:89:6D:17:48:58:5A:28:D8 Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 23FF02B3F2674B53032A2E7370891853A8E3F2C3 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft Manifest number: 03C5 Signing time: Sat 24 Oct 2026 10:58:28 +0000 Manifest this update: Sat 24 Oct 2026 10:53:28 +0000 Manifest next update: Mon 26 Oct 2026 01:41:28 +0000 Files and hashes: 1: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl (hash: VdBGeDB2ZFNUXilq5u4L/rS6jC/HovcwToIb3iba05I=) 2: 326130623a346530373a363031313a3a2f34382d3438203d3e20323134373031.roa (hash: V0fyeoZDncMW2eQzGPlyWD7Ns6F5V5KNaswuepRtGFo=) 3: 326130623a346530373a363066663a3a2f34382d3438203d3e20323134373031.roa (hash: XOFCxuQN+vhzQVb5Y0uC3xuX3xbxagWcYKQkNlr04J8=) 4: 326130623a346530373a363066653a3a2f34382d3438203d3e20323134373031.roa (hash: ZjAy3ueqwfxe+TIw9tRv0Ih89d9rnBxrCaEKYAUyhLY=) 5: 326130623a346530373a363031323a3a2f34382d3438203d3e20323134373031.roa (hash: qYmLIOuq4MSZIAPCZzhamdrYsk7jK51Ss8GhdRr+NDQ=) 6: 326130623a346530373a363030303a3a2f34312d3431203d3e20323134373031.roa (hash: vN6rKIfkljSAHrRu8/1nJyMDGglyFOpzorhaf/f1lec=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 14:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ff:02:b3:f2:67:4b:53:03:2a:2e:73:70:89:18:53:a8:e3:f2:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: Oct 24 10:53:28 2026 GMT Not After : Oct 26 01:41:28 2026 GMT Subject: CN=73375D243D301D27DB304B91896D1748585A28D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:91:c2:78:f5:a7:a8:3e:59:ed:b9:2e:9a:5f: c7:9f:c8:f8:bb:85:06:5e:e0:61:c4:ec:a4:94:b9: cf:68:4d:e3:8f:74:b3:90:c5:7c:29:05:f4:0c:b7: 8c:b5:b2:5c:93:4b:14:67:d2:b0:0b:81:17:41:1e: 45:6a:9c:19:4e:fa:b5:1d:bc:75:6e:30:12:2f:2c: 59:c8:f0:ff:7a:34:c4:f9:49:a8:12:39:29:f0:3a: fc:8d:35:cc:c7:ce:00:ed:39:ec:91:6d:b5:7a:1f: eb:db:14:c7:81:92:25:66:f9:cc:79:39:01:c7:86: f8:37:36:83:f2:f7:01:ab:99:d2:dc:ba:27:42:07: d9:52:53:67:f2:b6:dc:59:c7:42:65:08:08:a9:41: fb:bb:c0:5b:a0:95:19:35:0d:59:b3:cb:3e:46:37: 8f:ab:e9:a8:f0:7d:fb:28:ca:47:d9:1d:ee:6d:87: f2:25:a8:d0:28:74:a7:59:e8:4c:d4:b1:46:b8:10: da:4e:17:13:1a:3a:d7:4a:89:bb:1d:f5:7a:ae:c1: 22:fb:03:15:a1:08:10:79:92:92:d8:63:eb:f2:cd: 99:83:61:fe:0c:3d:dc:a3:20:a1:e2:9c:2f:15:8e: a6:93:24:4b:df:cc:8f:65:3f:c6:ca:ed:11:9b:a8: 77:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:37:5D:24:3D:30:1D:27:DB:30:4B:91:89:6D:17:48:58:5A:28:D8 X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:99:f6:99:be:b2:2d:94:cc:28:9c:02:a5:fa:0e:fd:04:21: 5e:e6:38:a9:ea:1d:56:29:09:d7:fc:41:d1:de:d5:c7:53:88: 08:7b:ca:72:b9:22:e8:85:62:a9:d5:45:e0:9e:6a:fc:85:8a: c2:53:dc:89:9a:fa:68:7b:cb:7d:d7:ed:c5:c1:0d:44:b8:6a: 14:da:5c:df:df:6a:89:5d:ec:44:dd:a6:15:6c:2e:2e:b1:1c: d3:5e:2a:f1:ba:ee:6f:53:ac:b2:66:81:5f:ef:04:52:f1:9f: d5:66:8d:80:b4:8b:53:16:ad:5a:9c:36:d7:67:bd:68:28:93: d5:d9:07:7f:45:fa:90:3b:e9:5a:38:a2:00:86:01:97:0f:46: 88:66:40:78:05:9c:bc:01:5b:7f:15:a9:44:b7:9f:4f:80:0b: 4b:bf:b2:c1:22:16:d7:95:b6:08:a2:c6:41:a7:bc:2f:3b:0c: 28:af:66:fa:cb:f9:bc:63:74:80:b1:e1:f7:2b:a0:17:68:55: fa:84:97:58:6d:83:4d:eb:ff:c4:ea:e9:1a:e3:a4:cf:e1:23: 2e:96:0f:1d:f8:d3:b6:33:68:76:97:86:4f:41:8e:ea:a0:bc: 00:43:c7:87:63:19:17:c1:11:fa:62:cd:23:52:ec:ee:5c:c4: 03:64:55:75 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUI/8Cs/JnS1MDKi5zcIkYU6jj8sMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNjEwMjQxMDUzMjhaFw0yNjEwMjYwMTQxMjhaMDMxMTAvBgNV BAMTKDczMzc1RDI0M0QzMDFEMjdEQjMwNEI5MTg5NkQxNzQ4NTg1QTI4RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCskcJ49aeoPlntuS6aX8efyPi7 hQZe4GHE7KSUuc9oTeOPdLOQxXwpBfQMt4y1slyTSxRn0rALgRdBHkVqnBlO+rUd vHVuMBIvLFnI8P96NMT5SagSOSnwOvyNNczHzgDtOeyRbbV6H+vbFMeBkiVm+cx5 OQHHhvg3NoPy9wGrmdLcuidCB9lSU2fyttxZx0JlCAipQfu7wFuglRk1DVmzyz5G N4+r6ajwffsoykfZHe5th/IlqNAodKdZ6EzUsUa4ENpOFxMaOtdKibsd9XquwSL7 AxWhCBB5kpLYY+vyzZmDYf4MPdyjIKHinC8VjqaTJEvfzI9lP8bK7RGbqHfxAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUczddJD0wHSfbMEuRiW0XSFhaKNgwHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMy9EREMyNUFEMkYxQTQ4OTI0Nzcx M0VFMzlCMUMwM0VBMkZEREE0MTE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmJn2mb6yLZTMKJwCpfoO /QQhXuY4qeodVikJ1/xB0d7Vx1OICHvKcrki6IViqdVF4J5q/IWKwlPciZr6aHvL fdftxcENRLhqFNpc399qiV3sRN2mFWwuLrEc014q8brub1OssmaBX+8EUvGf1WaN gLSLUxatWpw212e9aCiT1dkHf0X6kDvpWjiiAIYBlw9GiGZAeAWcvAFbfxWpRLef T4ALS7+ywSIW15W2CKLGQae8LzsMKK9m+sv5vGN0gLHh9yugF2hV+oSXWG2DTev/ xOrpGuOkz+EjLpYPHfjTtjNodpeGT0GO6qC8AEPHh2MZF8ER+mLNI1Ls7lzEA2RV dQ== -----END CERTIFICATE-----Generated at Sat Oct 24 20:35:50 2026 by rpki-client