$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft File: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft (raw, json) Hash identifier: itVVcj+3weP2E2xekk4NRcdB+LS3stADmOVI3M3iow4= Subject key identifier: 60:F0:B7:2C:EC:29:C0:9B:AC:B5:54:6D:86:8E:C2:AB:48:28:DD:8B Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE Certificate issuer: /CN=5da3215abfa4621d57709f838a92801f2e90ddfe Certificate serial: 2986AF119112BE134279ED4AD17EC434FD76A1FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft Manifest number: 051B Signing time: Mon 27 Oct 2025 11:24:19 +0000 Manifest this update: Mon 27 Oct 2025 11:19:19 +0000 Manifest next update: Tue 28 Oct 2025 13:14:19 +0000 Files and hashes: 1: 34352e38312e35372e302f32342d3234203d3e203631333137.roa (hash: Nt6v0on8wvNIRTqw0ZzJ5VjTWjEZFT63u0ZbVbhKyNc=) 2: 326130393a643634303a3a2f32392d3239203d3e20313938333435.roa (hash: LaBCcb8mjeERCC5tHKO7thlovLIwutTtPGiGYEZVPF8=) 3: 34352e38312e35382e302f32342d3234203d3e20323039323432.roa (hash: Cjq2FzLN5G1VEvkKyI6FB5noxcWUxvPOvV4W7hBfw5c=) 4: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl (hash: eR1L14g5YKEujwcDkRrleGKtP++NJxDCU4N+v6QjnRU=) 5: 34352e38312e35362e302f32342d3234203d3e203634323637.roa (hash: kGVNeEKX35ugOpsFmA5GwCl6f0GnZpLJS8pEn3cyWJI=) 6: 34352e38312e35392e302f32342d3234203d3e20323131343339.roa (hash: Y0ZApSmGCRch+djTYBN+U0p8LaOUa+NCEgyRR8hvTcU=) 7: 34352e38312e35392e302f32342d3234203d3e20323132333834.roa (hash: 7ySWNlqh8pfpYqSc3fbfv+VTSwiuDNFNlc7aZa5se9U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 13:14:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:86:af:11:91:12:be:13:42:79:ed:4a:d1:7e:c4:34:fd:76:a1:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe Validity Not Before: Oct 27 11:19:19 2025 GMT Not After : Oct 28 13:14:19 2025 GMT Subject: CN=60F0B72CEC29C09BACB5546D868EC2AB4828DD8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1b:aa:b5:92:b4:fa:c6:db:b9:18:b8:50:b6: b6:60:84:ef:5d:c0:c7:f6:c9:1e:92:6b:2c:35:d2: 3a:fc:3f:8c:e8:7e:59:10:00:1a:a8:50:ea:b7:04: ad:26:ac:e8:d7:af:50:97:b0:fe:94:10:0b:ad:d1: ab:5d:4c:c9:62:d3:ed:d8:d5:4c:43:9d:c9:19:3e: 7a:4d:da:5e:7f:6b:34:68:e1:6c:24:9a:30:b0:60: 4c:2a:5a:aa:e3:14:3c:db:d6:88:ef:12:16:6d:2e: 70:be:fc:3d:bc:b6:a1:5d:0b:d6:83:01:fb:a7:a5: 0e:0f:98:5b:80:56:33:4c:b4:11:fd:31:7d:56:40: ce:b1:ab:1b:7f:c5:81:b0:aa:f3:91:6b:ee:93:75: 61:16:7f:8e:e7:a8:9a:31:b7:60:d4:69:b4:f3:ee: 65:e7:0a:74:64:58:cf:7a:48:d6:45:a2:88:6c:3b: 62:4a:3d:e5:07:cd:9d:d9:67:03:b2:1f:f1:48:c6: fa:9d:7b:7e:c2:2b:13:aa:26:1b:e3:a0:d4:3f:4d: 5a:c2:5e:89:68:ab:8e:07:a7:10:11:43:28:9e:68: b1:b7:a7:79:8a:f2:01:41:07:ed:b2:1c:1e:83:4f: b6:0d:e9:b6:20:3e:55:4a:4f:92:9b:25:21:4a:74: 09:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F0:B7:2C:EC:29:C0:9B:AC:B5:54:6D:86:8E:C2:AB:48:28:DD:8B X509v3 Authority Key Identifier: keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:99:56:a6:15:78:39:b5:50:8c:35:65:d1:06:aa:6e:b2:e9: 4b:14:17:3e:f0:0a:7e:b6:67:57:2a:50:91:37:0c:03:ee:c8: f0:14:3b:3e:ea:6b:b8:12:e0:87:70:04:3f:79:7f:f5:85:16: f9:e6:6e:19:e8:51:c9:ba:11:d8:18:0a:d4:a4:7e:9b:d6:dc: b5:aa:13:1d:27:82:d3:68:ca:ff:88:2e:60:b5:f8:47:ce:76: 1b:8a:2d:ba:1c:7a:51:16:5a:f9:5c:13:7f:46:aa:62:6c:cd: f3:61:79:26:d3:f9:d9:a5:70:95:61:d6:b0:08:bd:fc:a2:ec: 23:c2:70:5e:e0:cb:bf:d4:27:0c:73:43:86:a7:74:1b:fa:cb: d2:96:b6:50:71:e9:72:d9:34:09:86:8d:d2:c9:77:77:fc:f1: dc:26:60:12:b9:c7:d9:b4:02:a8:e8:86:33:af:b1:96:2a:82: 9f:08:32:ca:34:0c:df:75:dc:80:ce:3d:ae:60:dc:83:3e:e5: bc:5a:b0:97:2c:96:c9:3e:a7:31:5f:ab:21:51:3b:a4:37:45: 0a:2e:1f:79:c0:07:f4:3c:45:77:03:5e:42:ab:8c:0a:af:8c: a5:1b:b6:5b:99:0b:a2:4a:2e:e0:da:20:ad:2c:2e:00:82:b2: 68:0b:52:4d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKYavEZESvhNCee1K0X7ENP12of8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRhMzIxNWFiZmE0NjIxZDU3NzA5ZjgzOGE5MjgwMWYy ZTkwZGRmZTAeFw0yNTEwMjcxMTE5MTlaFw0yNTEwMjgxMzE0MTlaMDMxMTAvBgNV BAMTKDYwRjBCNzJDRUMyOUMwOUJBQ0I1NTQ2RDg2OEVDMkFCNDgyOEREOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIG6q1krT6xtu5GLhQtrZghO9d wMf2yR6Sayw10jr8P4zoflkQABqoUOq3BK0mrOjXr1CXsP6UEAut0atdTMli0+3Y 1UxDnckZPnpN2l5/azRo4WwkmjCwYEwqWqrjFDzb1ojvEhZtLnC+/D28tqFdC9aD AfunpQ4PmFuAVjNMtBH9MX1WQM6xqxt/xYGwqvORa+6TdWEWf47nqJoxt2DUabTz 7mXnCnRkWM96SNZFoohsO2JKPeUHzZ3ZZwOyH/FIxvqde37CKxOqJhvjoNQ/TVrC Xoloq44HpxARQyieaLG3p3mK8gFBB+2yHB6DT7YN6bYgPlVKT5KbJSFKdAkXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUYPC3LOwpwJustVRtho7Cq0go3YswHwYDVR0j BBgwFoAUXaMhWr+kYh1XcJ+DipKAHy6Q3f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYyNDU2N2ItN2E3NC00YzFmLWFhODUtZGQyNGFmNzNj Y2JiLzAvNURBMzIxNUFCRkE0NjIxRDU3NzA5RjgzOEE5MjgwMUYyRTkwRERGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hhTWhXci1rWWgxWGNKLURpcEtBSHk2 UTNmNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjI0NTY3Yi03 YTc0LTRjMWYtYWE4NS1kZDI0YWY3M2NjYmIvMC81REEzMjE1QUJGQTQ2MjFENTc3 MDlGODM4QTkyODAxRjJFOTBEREZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg5lWphV4ObVQjDVl0Qaq brLpSxQXPvAKfrZnVypQkTcMA+7I8BQ7PupruBLgh3AEP3l/9YUW+eZuGehRyboR 2BgK1KR+m9bctaoTHSeC02jK/4guYLX4R852G4otuhx6URZa+VwTf0aqYmzN82F5 JtP52aVwlWHWsAi9/KLsI8JwXuDLv9QnDHNDhqd0G/rL0pa2UHHpctk0CYaN0sl3 d/zx3CZgErnH2bQCqOiGM6+xliqCnwgyyjQM33XcgM49rmDcgz7lvFqwlyyWyT6n MV+rIVE7pDdFCi4fecAH9DxFdwNeQquMCq+MpRu2W5kLokou4NogrSwuAIKyaAtS TQ== -----END CERTIFICATE-----Generated at Tue Oct 28 06:51:42 2025 by rpki-client