
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft
File: E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft (raw, json)
Hash identifier: CDub2bmcSJ5xbcnICqXW91OQpikv+NKFT/VHsacxUzA=
Subject key identifier: C3:6C:6E:72:D7:C4:6A:72:4F:AE:1A:30:52:2B:83:A2:16:C7:99:E1
Authority key identifier: E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C
Certificate issuer: /CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C
Certificate serial: 29E5899716F4581DED3EABFFC186266A1C96526A
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft
Manifest number: 77
Signing time: Thu 23 Oct 2025 10:46:27 +0000
Manifest this update: Thu 23 Oct 2025 10:41:27 +0000
Manifest next update: Fri 24 Oct 2025 14:12:27 +0000
Files and hashes: 1: 326131343a373538313a333937373a3a2f34382d3634203d3e20313939373633.roa (hash: 6W8xvuJxWbwP3DdLZ6e8Sa+pGsBO2lzU710UJC28MHg=)
2: 326131343a373538313a333936313a3a2f34382d3634203d3e20313939373633.roa (hash: V25LiWzxXAuXeQVJTbroIsiNYHCj/akr9IIXebvCE7Q=)
3: 326131343a373538313a333936363a3a2f34382d3634203d3e20313939373633.roa (hash: +BDNAKrmKMibTT2xQwMz+K+qOmE3P6UuU3BvjMVQ0iI=)
4: 326131343a373538313a333936323a3a2f34382d3634203d3e20313939373633.roa (hash: oCjl7TQd0xhHJ9B8MSi48PHfMmMZri62JgNd0y5lz+I=)
5: 326131343a373538313a333966663a3a2f34382d3634203d3e20313939373633.roa (hash: aCq/jKA1GGay4DL6ZU284taMNq3/9u17cmIYZEHZP9Y=)
6: E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl (hash: n6/7G700pUfy7yfqAQ9USFYQw2ZrV7hsDMB6nDuUR+w=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 14:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:e5:89:97:16:f4:58:1d:ed:3e:ab:ff:c1:86:26:6a:1c:96:52:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C
Validity
Not Before: Oct 23 10:41:27 2025 GMT
Not After : Oct 24 14:12:27 2025 GMT
Subject: CN=C36C6E72D7C46A724FAE1A30522B83A216C799E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:41:43:41:d3:c0:33:a7:42:ab:39:21:9d:74:
83:b3:ef:7c:73:61:9b:84:11:6e:94:a5:b4:a1:72:
e5:32:ac:51:ef:23:04:bf:6d:eb:08:55:4b:2d:d2:
7a:7e:50:71:ac:24:76:72:89:77:7b:af:8f:df:89:
a8:c1:20:47:21:37:e1:98:df:a5:6e:2d:69:66:35:
81:5e:94:0f:a6:c6:2b:cf:12:74:82:60:b9:d9:ff:
3f:32:a4:03:37:b8:17:a9:80:96:da:b3:e0:2c:87:
26:18:e4:e3:bc:3c:6f:c7:12:7b:d1:23:db:77:be:
7b:1f:6b:cd:fe:09:9c:e0:e2:e6:21:19:c7:22:18:
ae:4e:5a:56:28:a1:31:7b:2d:3c:16:2b:19:9c:57:
fa:1c:56:68:0a:33:ca:0a:c0:ef:d5:d6:a1:aa:4c:
09:ff:83:62:95:e6:ed:58:bb:8c:7a:71:2f:61:a9:
f2:60:22:ff:c1:e7:2e:ec:07:55:4f:62:b3:b5:3e:
e0:e4:4e:a4:57:3a:79:48:ce:ab:aa:2f:ec:73:ee:
86:cd:61:86:c3:4f:81:68:c0:aa:8f:11:79:35:3a:
49:b5:9d:bc:d4:f4:f1:a7:bf:3a:9a:0a:64:7b:33:
38:9c:ef:32:05:44:83:5b:a6:32:ff:f4:43:2a:0e:
2b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:6C:6E:72:D7:C4:6A:72:4F:AE:1A:30:52:2B:83:A2:16:C7:99:E1
X509v3 Authority Key Identifier:
keyid:E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e8:5b:3b:12:60:03:a7:b9:b2:1d:02:85:3d:28:c4:d9:b9:
8e:c0:e0:1e:f9:f9:9a:8a:4a:61:51:68:b5:02:98:1a:33:a0:
a3:28:67:a9:20:a2:88:ec:66:e8:6e:e6:35:7a:7f:e3:45:4a:
3d:3d:ee:0d:df:c5:bb:0c:e7:54:bb:9e:73:88:89:07:a9:26:
1b:6b:9b:f2:c2:10:a1:c2:9a:4a:6a:be:83:31:c0:14:82:38:
79:da:79:3d:09:ad:40:34:2f:64:75:7a:a6:1b:38:b5:e9:ca:
e0:6d:a0:97:31:55:31:81:35:61:bf:1c:45:27:10:db:90:c0:
e1:36:d0:f9:2b:42:90:da:c2:80:cf:96:10:af:3a:41:38:8c:
89:23:f6:d2:09:70:af:8f:90:62:63:46:10:b0:c6:62:a8:91:
a1:43:c8:d6:d0:a0:03:01:69:88:5a:1c:ae:ca:b2:4e:c5:b9:
1f:a5:47:92:53:3f:3c:c7:ed:45:26:c8:dc:60:16:72:47:c3:
e6:e2:31:88:76:b0:db:e9:e0:29:77:06:89:b5:f6:33:f0:49:
88:33:42:49:49:5a:59:79:2e:65:58:26:4e:70:07:e7:32:07:
93:bb:b5:57:02:50:63:c8:f3:0e:d4:b7:d5:2c:2b:36:98:5c:
25:17:85:aa
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUKeWJlxb0WB3tPqv/wYYmahyWUmowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg5RjkxNUQ4NkJCOUYxM0QwRjIyOUNBNzhDRDZEOUYz
RUFCQ0Y3QzAeFw0yNTEwMjMxMDQxMjdaFw0yNTEwMjQxNDEyMjdaMDMxMTAvBgNV
BAMTKEMzNkM2RTcyRDdDNDZBNzI0RkFFMUEzMDUyMkI4M0EyMTZDNzk5RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7QUNB08Azp0KrOSGddIOz73xz
YZuEEW6UpbShcuUyrFHvIwS/besIVUst0np+UHGsJHZyiXd7r4/fiajBIEchN+GY
36VuLWlmNYFelA+mxivPEnSCYLnZ/z8ypAM3uBepgJbas+AshyYY5OO8PG/HEnvR
I9t3vnsfa83+CZzg4uYhGcciGK5OWlYooTF7LTwWKxmcV/ocVmgKM8oKwO/V1qGq
TAn/g2KV5u1Yu4x6cS9hqfJgIv/B5y7sB1VPYrO1PuDkTqRXOnlIzquqL+xz7obN
YYbDT4FowKqPEXk1Okm1nbzU9PGnvzqaCmR7Mzic7zIFRINbpjL/9EMqDivvAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUw2xuctfEanJPrhowUiuDohbHmeEwHwYDVR0j
BBgwFoAU6J+RXYa7nxPQ8inKeM1tnz6rz3wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzU4MzZlNjAtNmE5Mi00N2VmLTliOWItOTJhODRkNmQz
NWJhLzEvRTg5RjkxNUQ4NkJCOUYxM0QwRjIyOUNBNzhDRDZEOUYzRUFCQ0Y3Qy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9FODlGOTE1RDg2QkI5RjEzRDBGMjI5Q0E3
OENENkQ5RjNFQUJDRjdDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2M1ODM2ZTYwLTZhOTItNDdlZi05YjliLTkyYTg0ZDZkMzViYS8xL0U4OUY5MTVE
ODZCQjlGMTNEMEYyMjlDQTc4Q0Q2RDlGM0VBQkNGN0MubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAm6Fs7
EmADp7myHQKFPSjE2bmOwOAe+fmaikphUWi1ApgaM6CjKGepIKKI7GbobuY1en/j
RUo9Pe4N38W7DOdUu55ziIkHqSYba5vywhChwppKar6DMcAUgjh52nk9Ca1ANC9k
dXqmGzi16crgbaCXMVUxgTVhvxxFJxDbkMDhNtD5K0KQ2sKAz5YQrzpBOIyJI/bS
CXCvj5BiY0YQsMZiqJGhQ8jW0KADAWmIWhyuyrJOxbkfpUeSUz88x+1FJsjcYBZy
R8Pm4jGIdrDb6eApdwaJtfYz8EmIM0JJSVpZeS5lWCZOcAfnMgeTu7VXAlBjyPMO
1LfVLCs2mFwlF4Wq
-----END CERTIFICATE-----
Generated at Fri Oct 24 04:27:46 2025 by rpki-client