$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft File: 926CB33722A3493216283DC80CAE0EE9D58874F2.mft (raw, json) Hash identifier: lXPmE+ptd/ciaAxHaevfyKxAHapvLR/dbUSxMMRomaU= Subject key identifier: DE:27:08:6A:85:B2:5E:BB:03:A9:6B:08:59:53:BE:A5:B6:FC:BD:E7 Authority key identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2 Certificate issuer: /CN=926cb33722a3493216283dc80cae0ee9d58874f2 Certificate serial: 485D107C42FDB54DA41EEDF6E53AAC5C02120179 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft Manifest number: 0567 Signing time: Sat 18 Oct 2025 16:16:15 +0000 Manifest this update: Sat 18 Oct 2025 16:11:15 +0000 Manifest next update: Sun 19 Oct 2025 18:39:15 +0000 Files and hashes: 1: 323030313a3637633a313139303a626162653a3a2f36342d3634203d3e203537373832.roa (hash: Pxf4B7ZT6gV1TWVd3qoH34uVviW8HXPSyFTn+jTKS9w=) 2: 926CB33722A3493216283DC80CAE0EE9D58874F2.crl (hash: H76p/qHjGD6ND0gI9HwDMU2A7IjsJVfdLkcfuqy6mfg=) 3: FF0595CB477C33B6B94C7E477213C842A6067D6B.cer (hash: kkkt+CdVzC7OjY449gnOlMwgGCN8KNpK56RTONBzmFY=) 4: 323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa (hash: m4JDjuZJDmmChmmlFAMJ8Bw8b2ZsdAh0iDbkWo79PPM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 Oct 2025 12:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:5d:10:7c:42:fd:b5:4d:a4:1e:ed:f6:e5:3a:ac:5c:02:12:01:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=926cb33722a3493216283dc80cae0ee9d58874f2 Validity Not Before: Oct 18 16:11:15 2025 GMT Not After : Oct 19 18:39:15 2025 GMT Subject: CN=DE27086A85B25EBB03A96B085953BEA5B6FCBDE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0f:f0:09:90:5c:1d:19:95:e8:56:29:18:8b: 11:47:31:20:f2:ae:84:27:8d:55:03:7c:69:be:e5: e8:e8:33:a5:6d:59:9b:ab:5a:9c:9d:68:56:34:19: 49:01:f2:4d:3f:0c:4c:bd:92:ca:6f:87:d5:b3:1f: 64:6b:59:98:e0:72:d6:f2:9c:05:c6:9b:23:f7:0a: 69:c4:cb:d9:08:7b:19:69:44:bc:8d:94:d8:54:31: 13:77:ec:ac:4c:0b:f9:ff:52:5c:df:e1:9b:8e:4d: 31:96:0d:38:c6:f9:c8:a5:f9:8f:9e:0f:03:3c:a5: 55:4a:8e:37:9d:37:a4:7a:d4:0c:0b:5e:05:15:ba: 14:3e:19:40:2d:78:e5:b8:a6:eb:ee:20:bb:11:46: 2e:25:7a:2b:85:28:40:35:27:db:d1:4c:b5:a5:54: ae:27:a4:ca:11:d9:64:6f:23:66:c1:48:97:28:27: 91:f2:5a:bb:e2:c7:65:b5:85:05:1b:b5:59:04:05: f6:18:d9:3b:ae:b8:af:2b:fc:62:d0:5f:7a:ab:2a: 75:80:42:65:89:5a:29:df:1a:f8:66:83:6f:e5:c0: 7f:cf:41:62:7c:17:63:e1:22:73:d9:89:17:24:dd: 32:f8:e4:3d:8a:9b:d3:e0:ed:16:b1:15:2d:00:33: be:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:27:08:6A:85:B2:5E:BB:03:A9:6B:08:59:53:BE:A5:B6:FC:BD:E7 X509v3 Authority Key Identifier: keyid:92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:43:59:d0:8b:29:8c:4c:b5:a7:82:a8:80:85:2f:39:57:e2: 0f:64:e4:ac:ac:a6:f8:5f:88:4e:ae:b0:ad:c3:a0:8c:e0:83: f4:5a:64:81:b2:9d:f4:f2:60:bf:8f:b2:38:55:48:ed:84:08: 04:96:7d:1f:bb:2b:57:7d:e6:ac:f9:ca:82:09:80:bb:3d:fa: 99:7d:cd:a7:02:4d:8e:5b:7e:42:53:34:d3:61:04:26:48:6a: d4:53:2a:1b:2e:90:e1:67:05:27:4a:48:f9:b8:e4:fd:17:fa: 89:d9:90:64:5c:50:d4:d5:cd:29:03:25:f1:37:ee:88:b2:a4: 7d:04:a0:03:8e:d8:74:d8:d3:4c:49:21:7a:fd:21:b0:f6:ee: 76:15:88:16:96:47:af:b1:d4:f6:97:4f:c7:74:fd:0a:60:75: 14:1f:28:79:80:57:ce:0c:96:b5:3f:d2:53:60:29:53:86:75: 2e:6e:68:9f:e9:b5:2c:33:0e:7f:08:68:0f:22:4d:d1:49:21: b5:0e:1a:86:91:00:cd:55:bb:27:6b:fe:96:f8:79:c0:b4:a7: e9:5b:e8:d0:84:ac:d6:5f:6f:8a:d5:d5:73:47:89:c1:10:5f: 0e:5d:7e:a6:15:fb:14:65:76:d9:22:8b:bd:df:9e:f8:ef:8a: 16:89:7f:4f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUSF0QfEL9tU2kHu325TqsXAISAXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI2Y2IzMzcyMmEzNDkzMjE2MjgzZGM4MGNhZTBlZTlk NTg4NzRmMjAeFw0yNTEwMTgxNjExMTVaFw0yNTEwMTkxODM5MTVaMDMxMTAvBgNV BAMTKERFMjcwODZBODVCMjVFQkIwM0E5NkIwODU5NTNCRUE1QjZGQ0JERTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6D/AJkFwdGZXoVikYixFHMSDy roQnjVUDfGm+5ejoM6VtWZurWpydaFY0GUkB8k0/DEy9kspvh9WzH2RrWZjgctby nAXGmyP3CmnEy9kIexlpRLyNlNhUMRN37KxMC/n/Ulzf4ZuOTTGWDTjG+cil+Y+e DwM8pVVKjjedN6R61AwLXgUVuhQ+GUAteOW4puvuILsRRi4leiuFKEA1J9vRTLWl VK4npMoR2WRvI2bBSJcoJ5HyWrvix2W1hQUbtVkEBfYY2TuuuK8r/GLQX3qrKnWA QmWJWinfGvhmg2/lwH/PQWJ8F2PhInPZiRck3TL45D2Km9Pg7RaxFS0AM74XAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU3icIaoWyXrsDqWsIWVO+pbb8vecwHwYDVR0j BBgwFoAUkmyzNyKjSTIWKD3IDK4O6dWIdPIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NlMDBjZjktMDRhNS00M2QxLThiODktZWRmYTYwY2Q4 ZDRhLzIvOTI2Q0IzMzcyMkEzNDkzMjE2MjgzREM4MENBRTBFRTlENTg4NzRGMi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2tteXpOeUtqU1RJV0tEM0lESzRPNmRX SWRQSS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jY2UwMGNmOS0w NGE1LTQzZDEtOGI4OS1lZGZhNjBjZDhkNGEvMi85MjZDQjMzNzIyQTM0OTMyMTYy ODNEQzgwQ0FFMEVFOUQ1ODg3NEYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0NZ0IspjEy1p4KogIUv OVfiD2TkrKym+F+ITq6wrcOgjOCD9FpkgbKd9PJgv4+yOFVI7YQIBJZ9H7srV33m rPnKggmAuz36mX3NpwJNjlt+QlM002EEJkhq1FMqGy6Q4WcFJ0pI+bjk/Rf6idmQ ZFxQ1NXNKQMl8TfuiLKkfQSgA47YdNjTTEkhev0hsPbudhWIFpZHr7HU9pdPx3T9 CmB1FB8oeYBXzgyWtT/SU2ApU4Z1Lm5on+m1LDMOfwhoDyJN0UkhtQ4ahpEAzVW7 J2v+lvh5wLSn6Vvo0ISs1l9vitXVc0eJwRBfDl1+phX7FGV22SKLvd+e+O+KFol/ Tw== -----END CERTIFICATE-----Generated at Sat Oct 18 22:18:08 2025 by rpki-client