$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft File: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft (raw, json) Hash identifier: ZPt8zjFnxk7Q6QIYCGNMaXRO3vjgtO/LxHQu82mI/Aw= Subject key identifier: E2:EA:14:77:33:AD:61:AB:35:1B:86:26:1A:E4:0C:E7:A7:25:7E:D2 Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Certificate serial: 147FC026D2440DB14DBDE1AA2C6A2A3E447D1108 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft Manifest number: 0592 Signing time: Sun 26 Oct 2025 13:44:12 +0000 Manifest this update: Sun 26 Oct 2025 13:39:12 +0000 Manifest next update: Mon 27 Oct 2025 17:26:12 +0000 Files and hashes: 1: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl (hash: sOWTfkN4TNwKqa9GOuIMCJcL/hUD3QmxoX/Zo2O1zHc=) 2: 326130303a386530303a313a3a2f34382d3438203d3e203230373132.roa (hash: 2qiBxfK+UGsXjYXrt6Cm3jSdVu6qoZhGBCRhmjYUhjg=) 3: 34362e3235302e3232342e302f32302d3234203d3e20313431393935.roa (hash: ht90MUomGkgWhJETWF0rvugOS8SI8qvW9OndsUlGu80=) 4: 34362e3235302e3234302e302f32302d3234203d3e20313431393935.roa (hash: 5zFYerIngzLwSwbeiiGPHVQadLBE1/J7oEEXeFR/OFM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 17:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:7f:c0:26:d2:44:0d:b1:4d:bd:e1:aa:2c:6a:2a:3e:44:7d:11:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Validity Not Before: Oct 26 13:39:12 2025 GMT Not After : Oct 27 17:26:12 2025 GMT Subject: CN=E2EA147733AD61AB351B86261AE40CE7A7257ED2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7d:6e:62:2e:12:06:3d:3c:c4:52:39:2b:e4: 75:e5:37:48:00:f0:32:0a:75:3a:84:83:11:19:13: 49:24:ad:16:40:4f:67:de:bc:8a:22:8f:d0:ae:d7: 4f:e2:f7:de:64:9b:da:03:2a:e7:83:7e:7e:8b:00: 67:61:56:6a:3f:f5:a7:26:26:8c:20:51:16:2d:db: 7f:d5:ea:fc:e7:86:51:7d:a0:81:21:2e:e1:ff:84: 6b:76:40:fe:22:fa:96:86:35:84:19:34:91:44:73: 38:ea:c8:5c:ed:71:2e:cc:33:40:4f:70:2c:28:ae: 67:51:89:68:0d:6f:e3:1f:fd:bf:c0:f8:4f:e6:a7: 26:52:19:15:79:74:49:be:e1:fc:33:d6:37:59:20: db:28:60:6b:c8:dc:af:59:26:3e:43:a0:dc:81:06: bd:e3:60:79:67:4f:f4:eb:2a:ed:6b:40:d6:69:48: 28:df:de:39:5d:cd:20:cc:a5:6c:11:91:fc:63:b8: 18:42:dd:de:5d:f7:47:c3:b1:f9:0f:bc:06:6b:4b: 87:73:bc:75:7e:bc:82:86:b8:ca:99:db:52:e4:d1: 5f:91:92:b0:73:17:3c:f0:e3:ea:de:43:1a:e8:c4: 8a:e4:0e:58:3f:fd:f5:96:fe:a0:24:7f:06:3d:a2: 21:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:EA:14:77:33:AD:61:AB:35:1B:86:26:1A:E4:0C:E7:A7:25:7E:D2 X509v3 Authority Key Identifier: keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:05:d2:e0:93:c0:21:bf:25:61:8f:8e:1b:52:01:12:dc:a3: cf:0c:fc:aa:26:6f:4f:d9:b1:73:8e:e7:f7:5b:e2:9a:c6:d6: 8f:c7:2f:77:d7:79:4f:33:01:f7:bf:79:ad:d5:53:cd:fa:4d: 87:6b:c2:ac:9b:54:aa:08:5a:87:d3:64:76:16:af:78:3f:05: 76:24:c9:52:01:7c:0b:29:42:a9:6a:26:78:5c:c5:85:73:95: 78:96:38:52:30:0b:c1:09:47:1a:4a:69:1c:0d:88:15:63:b0: cd:8f:a2:eb:69:f5:3e:c2:eb:08:00:27:e5:fb:f4:35:0f:e5: d6:68:fd:81:82:d0:da:26:74:ab:ca:5b:d2:2f:5c:91:2a:40: be:a1:87:ec:ff:71:1c:01:9e:10:7a:0f:ed:15:42:3a:07:e0: f8:d0:2c:84:d7:75:7e:78:41:f2:1f:67:e5:86:87:c4:e5:5b: eb:f2:64:d7:44:fb:5e:25:5d:48:ed:98:d8:60:8b:05:ed:d7: 80:a9:55:88:16:dc:a2:89:08:45:8f:49:a0:73:5b:59:2f:cc: ed:d2:ce:6a:d8:14:46:cd:cc:4a:f7:a9:88:a3:5c:53:eb:01: 5b:d6:f6:af:ab:1c:32:12:a1:b0:59:ec:44:04:54:7c:33:ff: f6:15:d9:6d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFH/AJtJEDbFNveGqLGoqPkR9EQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjI5ZmJhYjRkYjg2N2Y2YmQ5YTdlZmY2YWE1NWQ5OGMx NjJlMWFhZDAeFw0yNTEwMjYxMzM5MTJaFw0yNTEwMjcxNzI2MTJaMDMxMTAvBgNV BAMTKEUyRUExNDc3MzNBRDYxQUIzNTFCODYyNjFBRTQwQ0U3QTcyNTdFRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOfW5iLhIGPTzEUjkr5HXlN0gA 8DIKdTqEgxEZE0kkrRZAT2fevIoij9Cu10/i995km9oDKueDfn6LAGdhVmo/9acm JowgURYt23/V6vznhlF9oIEhLuH/hGt2QP4i+paGNYQZNJFEczjqyFztcS7MM0BP cCwormdRiWgNb+Mf/b/A+E/mpyZSGRV5dEm+4fwz1jdZINsoYGvI3K9ZJj5DoNyB Br3jYHlnT/TrKu1rQNZpSCjf3jldzSDMpWwRkfxjuBhC3d5d90fDsfkPvAZrS4dz vHV+vIKGuMqZ21Lk0V+RkrBzFzzw4+reQxroxIrkDlg//fWW/qAkfwY9oiEtAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU4uoUdzOtYas1G4YmGuQM56clftIwHwYDVR0j BBgwFoAU8p+6tNuGf2vZp+/2qlXZjBYuGq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmY1MmQ4MTQtM2QyZi00ZGY0LTgxNDAtZGZiNTMwZjc0 OTEyLzAvRjI5RkJBQjREQjg2N0Y2QkQ5QTdFRkY2QUE1NUQ5OEMxNjJFMUFBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhwLTZ0TnVHZjJ2WnAtXzJxbFhaakJZ dUdxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjUyZDgxNC0z ZDJmLTRkZjQtODE0MC1kZmI1MzBmNzQ5MTIvMC9GMjlGQkFCNERCODY3RjZCRDlB N0VGRjZBQTU1RDk4QzE2MkUxQUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsgXS4JPAIb8lYY+OG1IB Etyjzwz8qiZvT9mxc47n91vimsbWj8cvd9d5TzMB9795rdVTzfpNh2vCrJtUqgha h9NkdhaveD8FdiTJUgF8CylCqWomeFzFhXOVeJY4UjALwQlHGkppHA2IFWOwzY+i 62n1PsLrCAAn5fv0NQ/l1mj9gYLQ2iZ0q8pb0i9ckSpAvqGH7P9xHAGeEHoP7RVC Ogfg+NAshNd1fnhB8h9n5YaHxOVb6/Jk10T7XiVdSO2Y2GCLBe3XgKlViBbcookI RY9JoHNbWS/M7dLOatgURs3MSvepiKNcU+sBW9b2r6scMhKhsFnsRARUfDP/9hXZ bQ== -----END CERTIFICATE-----Generated at Mon Oct 27 01:41:40 2025 by rpki-client