$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft File: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft (raw, json) Hash identifier: zcD4Q9poxwd8n5bdPEj72aslHA72LHq4pGpiEvBUzuA= Subject key identifier: 5D:C8:92:13:7A:16:BF:26:99:82:85:29:9D:54:B2:DD:52:7E:EA:29 Authority key identifier: 40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 Certificate issuer: /CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Certificate serial: 7C8CE1B81DEB48CB1AE06F8F74EA1AE6305BC3FC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft Manifest number: 01BB Signing time: Thu 23 Oct 2025 23:41:25 +0000 Manifest this update: Thu 23 Oct 2025 23:36:25 +0000 Manifest next update: Sat 25 Oct 2025 03:22:25 +0000 Files and hashes: 1: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl (hash: gBfG8SY6RyocYw+skWRlpt9DxMsgHwRG7PeqDsSSKJY=) 2: 326131343a373538313a396632303a3a2f34342d3434203d3e20323135323838.roa (hash: liZtkDCXL4DmjNQ78r1O/4djDEbWR26m7nKfEkWRmh4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 21:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:8c:e1:b8:1d:eb:48:cb:1a:e0:6f:8f:74:ea:1a:e6:30:5b:c3:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Validity Not Before: Oct 23 23:36:25 2025 GMT Not After : Oct 25 03:22:25 2025 GMT Subject: CN=5DC892137A16BF26998285299D54B2DD527EEA29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cb:98:e3:e7:8b:60:25:eb:70:d4:4b:5b:ff: 9e:80:5b:88:c4:14:dc:6d:97:95:b0:58:2e:0d:6c: cc:10:bb:9b:7c:26:99:da:16:42:ee:87:84:69:30: 79:df:56:f4:dc:5c:df:8f:fd:7d:37:c1:a0:af:6c: e0:aa:48:8e:ad:23:53:80:e7:6d:56:0d:d7:a3:f8: f9:e5:68:b4:b2:a8:41:f3:6f:7e:b4:64:36:e2:d5: 65:76:38:cc:63:97:cf:70:64:17:17:74:32:f1:db: fb:f7:fb:c8:c5:ab:c2:0b:64:58:62:04:92:09:b3: 1f:79:1e:78:10:07:32:c0:6c:22:29:ed:30:9a:41: b3:69:3b:88:2a:2c:58:11:1e:96:e9:b4:57:57:9b: 28:28:fa:bd:ae:78:aa:96:f2:58:dd:14:c8:f6:30: 2c:fb:4c:79:33:91:1d:b4:6e:c9:2c:d7:f8:88:34: 75:9d:fd:5f:ec:8a:16:84:90:14:a6:49:6b:40:5b: b0:30:37:b3:1b:d3:08:35:75:4d:a4:a5:02:b4:6f: 6e:80:22:ad:b5:ac:2e:51:e5:e5:5b:70:1d:1d:89: 2f:1d:f9:dc:75:a5:34:87:0e:54:ad:a0:ef:5f:4f: fd:1a:6b:a6:d2:de:a5:8d:4a:d7:ef:b1:17:b2:27: db:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C8:92:13:7A:16:BF:26:99:82:85:29:9D:54:B2:DD:52:7E:EA:29 X509v3 Authority Key Identifier: keyid:40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:7e:03:52:a7:a5:ae:d0:a9:c7:f0:8c:b0:d9:6e:4c:fb:b0: 90:e5:64:aa:b7:50:c6:12:f1:95:0b:54:13:bf:17:44:76:f1: f5:5c:9a:fa:6d:9d:c2:56:0e:11:2c:ee:bf:07:1b:4a:1b:af: 9f:d9:5a:02:1c:29:a5:af:76:f2:25:f9:de:7a:f6:5a:36:53: 1a:b0:27:e1:b6:6c:f8:8b:ba:26:23:eb:02:31:31:db:7c:22: 2f:ff:0b:f7:23:6f:92:59:14:32:a1:c5:0c:64:98:a9:24:a3: 40:3c:0a:ba:9a:48:d7:02:81:ea:02:e6:d3:7f:62:d4:89:c2: d0:28:ff:8f:44:de:04:07:ce:6c:34:d9:f2:c0:20:bc:cc:44: 1f:33:2d:fb:ea:29:e8:9c:30:dc:96:03:43:ad:9a:9d:1a:35: e9:b5:57:8e:9e:67:e1:dd:e7:ca:c2:8d:1b:39:68:52:45:56: 59:56:2d:38:50:13:ef:38:16:7d:dc:d4:30:d7:2e:48:d4:39: ef:54:f8:22:8e:52:f0:23:2d:8c:19:49:2e:21:c6:6c:78:5a: cc:81:35:84:67:a5:cc:15:92:fa:66:8e:a1:82:00:73:53:96: a5:cb:30:96:2a:92:79:76:97:19:e7:d2:67:67:d7:f3:01:ef: 95:25:da:46 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfIzhuB3rSMsa4G+PdOoa5jBbw/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBG RTIyMkJENjAeFw0yNTEwMjMyMzM2MjVaFw0yNTEwMjUwMzIyMjVaMDMxMTAvBgNV BAMTKDVEQzg5MjEzN0ExNkJGMjY5OTgyODUyOTlENTRCMkRENTI3RUVBMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBy5jj54tgJetw1Etb/56AW4jE FNxtl5WwWC4NbMwQu5t8JpnaFkLuh4RpMHnfVvTcXN+P/X03waCvbOCqSI6tI1OA 521WDdej+PnlaLSyqEHzb360ZDbi1WV2OMxjl89wZBcXdDLx2/v3+8jFq8ILZFhi BJIJsx95HngQBzLAbCIp7TCaQbNpO4gqLFgRHpbptFdXmygo+r2ueKqW8ljdFMj2 MCz7THkzkR20bsks1/iINHWd/V/sihaEkBSmSWtAW7AwN7Mb0wg1dU2kpQK0b26A Iq21rC5R5eVbcB0diS8d+dx1pTSHDlStoO9fT/0aa6bS3qWNStfvsReyJ9trAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUXciSE3oWvyaZgoUpnVSy3VJ+6ikwHwYDVR0j BBgwFoAUQFChe64cXzdj1Fo43P6s4P4iK9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzg2YjY1YjEtNDVlOS00ZmIyLWFkYzUtODdiYTcxMWUy MWI3LzEvNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBGRTIyMkJENi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC80MDUwQTE3QkFFMUM1RjM3NjNENDVBMzhE Q0ZFQUNFMEZFMjIyQkQ2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M4NmI2NWIxLTQ1ZTktNGZiMi1hZGM1LTg3YmE3MTFlMjFiNy8xLzQwNTBBMTdC QUUxQzVGMzc2M0Q0NUEzOERDRkVBQ0UwRkUyMjJCRDYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA1fgNS p6Wu0KnH8Iyw2W5M+7CQ5WSqt1DGEvGVC1QTvxdEdvH1XJr6bZ3CVg4RLO6/BxtK G6+f2VoCHCmlr3byJfneevZaNlMasCfhtmz4i7omI+sCMTHbfCIv/wv3I2+SWRQy ocUMZJipJKNAPAq6mkjXAoHqAubTf2LUicLQKP+PRN4EB85sNNnywCC8zEQfMy37 6inonDDclgNDrZqdGjXptVeOnmfh3efKwo0bOWhSRVZZVi04UBPvOBZ93NQw1y5I 1DnvVPgijlLwIy2MGUkuIcZseFrMgTWEZ6XMFZL6Zo6hggBzU5alyzCWKpJ5dpcZ 59JnZ9fzAe+VJdpG -----END CERTIFICATE-----Generated at Fri Oct 24 04:27:45 2025 by rpki-client