$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json) Hash identifier: q7WlCocNAaqRIuMtVzNES4vrFmPaflWeyMLo83Wck3U= Subject key identifier: 52:22:DC:F5:AD:18:29:F5:E2:D4:F7:66:74:55:8F:98:66:66:43:D4 Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: 3FD46328EBE95AC22EBB53891BCAA99AEC33DB93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft Manifest number: 03A2 Signing time: Mon 27 Oct 2025 01:39:14 +0000 Manifest this update: Mon 27 Oct 2025 01:34:14 +0000 Manifest next update: Tue 28 Oct 2025 02:44:14 +0000 Files and hashes: 1: 3135392e3235332e322e302f32342d3234203d3e20323134313433.roa (hash: qmuf0vkLJtyYNBk6lONse3deUisFPtDCWrL9dDMaewk=) 2: 3135392e3235332e312e302f32342d3234203d3e2039333034.roa (hash: dcYXeL7R4SgGVjoaZN9OWp91BkdwHsg557vymFY3FPQ=) 3: 3135392e3235332e332e302f32342d3234203d3e203533333536.roa (hash: uV5gP669aq0NtuCXuZBm6wWsNYwP/024H/522nPjCx8=) 4: 3138352e31332e3232362e302f32342d3234203d3e20313532313739.roa (hash: kbUfx2g7/W6xr6BcRBqigrahrWSKqlZaZ80tT5+SQUk=) 5: 3135392e3235332e352e302f32342d3234203d3e203533333536.roa (hash: 9QDAlicDZU2dKA/slyHao02LhaPY7/2iCnESN6BbiqA=) 6: 3138352e31332e3232342e302f32342d3234203d3e20313335333931.roa (hash: Y4VGjNKxdM1kt8f9/kG9Dub6HzXbG7OXpVqySki/RW4=) 7: 3135392e3235332e342e302f32342d3234203d3e20323134313433.roa (hash: JO9eMRAwPS+hZf1UF8eYFlm1nYrsRkC7Oj1Lhed/bAU=) 8: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: O52Y9AD+7xNC8r8/IfFT5ZJDd+av6QdU1QaXi0YTVJ8=) 9: 3135392e3235332e372e302f32342d3234203d3e20323134313433.roa (hash: 8/3XzRXXjmYpSthB/PqRmvioB+R4a98BuFhtWRNYmtk=) 10: 3138352e31332e3232352e302f32342d3234203d3e203631333137.roa (hash: 8TzKoFnFzYaSWN5mBXGHVTu7YevWpqGi2XUkHCPKssM=) 11: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: cKnNLC66X19KWTLeS9BLlyG6jkzxqkdJwZjUWCrZPHc=) 12: 3135392e3235332e362e302f32342d3234203d3e20323134313433.roa (hash: ium02BtB+GfbIHn2YGUt7i7of/NJnXnez2EEtYL+duE=) 13: 3138352e31332e3232372e302f32342d3234203d3e2039333034.roa (hash: K2jdp87W7OWk11i68RJYc6WUM+0fdCVTP9+PN22bU6U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:d4:63:28:eb:e9:5a:c2:2e:bb:53:89:1b:ca:a9:9a:ec:33:db:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: Oct 27 01:34:14 2025 GMT Not After : Oct 28 02:44:14 2025 GMT Subject: CN=5222DCF5AD1829F5E2D4F76674558F98666643D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1d:56:19:34:75:61:b2:f6:e3:ee:43:b9:2e: 2f:3a:8d:22:93:22:eb:9e:e9:4f:00:cc:e0:93:5b: 0d:3e:60:68:43:34:c5:ca:20:ae:b1:08:3f:59:27: 66:77:a5:ce:44:24:8f:98:c3:f5:43:41:e0:c6:0a: 3a:e3:d8:f2:d1:ab:f2:e8:9e:27:25:14:fa:83:88: 91:bd:fd:39:31:e9:9b:ff:24:6b:0b:0d:29:f8:eb: 6c:a1:fe:e2:b5:c6:99:60:11:c8:ae:1b:df:4a:a8: 55:b8:32:91:64:1b:c9:1d:df:70:40:a6:b0:ad:11: 91:f7:d1:8c:ad:e6:27:4e:ca:a1:40:a3:dc:7d:eb: d7:78:92:7c:38:d6:c5:41:e8:ac:f3:ac:5b:30:6c: 86:b0:1b:df:a0:15:8c:ee:16:a6:ed:f2:a8:6c:8a: c7:82:3a:fd:a6:50:ab:61:b0:9e:7b:6c:d0:7a:d5: 41:cb:a1:84:1c:8b:08:c1:da:6c:0d:6b:e6:19:11: f6:f4:e8:ec:46:90:10:2b:9b:06:d3:a8:fb:03:0b: cc:6e:96:a0:38:0c:2b:88:08:1b:c5:f9:93:65:e6: ce:15:e6:21:de:57:94:2a:47:48:b6:89:32:fb:c0: 6d:d3:55:23:93:41:5b:10:4b:b5:c2:2e:67:ec:90: 5a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:22:DC:F5:AD:18:29:F5:E2:D4:F7:66:74:55:8F:98:66:66:43:D4 X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:65:10:b0:c4:b6:02:9b:47:ee:2e:b8:e8:ee:ff:9a:49:7e: f1:fb:ae:be:53:f2:e3:c5:38:fb:4b:be:73:8d:87:d2:db:25: cd:b0:7c:ab:91:bf:f5:df:4e:5d:d0:82:70:26:92:49:8e:ad: 51:66:e5:55:ef:8c:27:36:d5:02:10:44:23:68:d8:47:14:1f: 87:aa:68:f7:0e:88:a6:ac:ac:aa:f2:52:ba:5c:c2:2a:15:28: aa:3b:d2:b5:07:f1:51:80:47:2c:cc:9a:45:91:ca:64:95:6e: 98:ce:c4:4d:94:42:93:8f:ed:ac:33:f0:c2:43:f1:f7:07:25: 79:fb:a3:88:9b:9e:73:7f:56:4f:77:85:45:dd:18:5f:ea:c5: cf:6c:70:f9:38:04:9f:2e:ea:20:50:cd:d4:5c:17:76:20:28: 4e:f6:fe:c1:cc:d9:6a:b5:08:1e:82:c1:9c:7c:eb:75:88:fa: 47:e1:84:c7:41:88:e2:d9:ee:b0:67:94:3e:6b:03:5b:09:a9: 95:22:42:df:95:5a:f9:ef:4a:48:17:ac:db:38:c3:82:a9:e8: 43:66:f1:c9:f1:fa:2d:58:13:c9:87:be:42:39:52:5d:67:80: e0:8a:cb:75:cf:2f:c4:59:a0:96:3b:80:1a:09:cb:c7:c6:60: 36:12:af:76 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUP9RjKOvpWsIuu1OJG8qpmuwz25MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNTEwMjcwMTM0MTRaFw0yNTEwMjgwMjQ0MTRaMDMxMTAvBgNV BAMTKDUyMjJEQ0Y1QUQxODI5RjVFMkQ0Rjc2Njc0NTU4Rjk4NjY2NjQzRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIHVYZNHVhsvbj7kO5Li86jSKT Iuue6U8AzOCTWw0+YGhDNMXKIK6xCD9ZJ2Z3pc5EJI+Yw/VDQeDGCjrj2PLRq/Lo niclFPqDiJG9/Tkx6Zv/JGsLDSn462yh/uK1xplgEciuG99KqFW4MpFkG8kd33BA prCtEZH30Yyt5idOyqFAo9x969d4knw41sVB6KzzrFswbIawG9+gFYzuFqbt8qhs iseCOv2mUKthsJ57bNB61UHLoYQciwjB2mwNa+YZEfb06OxGkBArmwbTqPsDC8xu lqA4DCuICBvF+ZNl5s4V5iHeV5QqR0i2iTL7wG3TVSOTQVsQS7XCLmfskFoBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUUiLc9a0YKfXi1PdmdFWPmGZmQ9QwHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI2UQsMS2AptH7i646O7/ mkl+8fuuvlPy48U4+0u+c42H0tslzbB8q5G/9d9OXdCCcCaSSY6tUWblVe+MJzbV AhBEI2jYRxQfh6po9w6IpqysqvJSulzCKhUoqjvStQfxUYBHLMyaRZHKZJVumM7E TZRCk4/trDPwwkPx9wclefujiJuec39WT3eFRd0YX+rFz2xw+TgEny7qIFDN1FwX diAoTvb+wczZarUIHoLBnHzrdYj6R+GEx0GI4tnusGeUPmsDWwmplSJC35Va+e9K SBes2zjDgqnoQ2bxyfH6LVgTyYe+QjlSXWeA4IrLdc8vxFmgljuAGgnLx8ZgNhKv dg== -----END CERTIFICATE-----Generated at Mon Oct 27 07:06:02 2025 by rpki-client