$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft File: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft (raw, json) Hash identifier: Zl/2eZbGkkd/2UaRLqc2EoR3+G3kliaRWA+0bqu196s= Subject key identifier: 48:BC:08:DE:F6:D7:7C:EF:A5:F1:AE:A1:3B:0E:D6:47:B2:36:83:95 Authority key identifier: 5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F Certificate issuer: /CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Certificate serial: 503549ADC0959F47CD1E16B440E94950C219B2E4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft Manifest number: 85 Signing time: Thu 09 Oct 2025 00:27:45 +0000 Manifest this update: Thu 09 Oct 2025 00:22:45 +0000 Manifest next update: Fri 10 Oct 2025 01:07:45 +0000 Files and hashes: 1: 326130363a396634313a3130303a3a2f34302d3430203d3e20323134373233.roa (hash: sTs8O8KBp3/QEgTlhnDJhb+nhykdynr848iPv4Z/TIo=) 2: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl (hash: FlVB63yvCqpaGHo04uLYd9iaV8v79KAL/cWOTkIF7tQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 09 Oct 2025 11:24:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:35:49:ad:c0:95:9f:47:cd:1e:16:b4:40:e9:49:50:c2:19:b2:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Validity Not Before: Oct 9 00:22:45 2025 GMT Not After : Oct 10 01:07:45 2025 GMT Subject: CN=48BC08DEF6D77CEFA5F1AEA13B0ED647B2368395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f8:25:25:a7:0d:17:6d:66:51:ee:07:ee:aa: 80:5d:00:d0:cb:d8:51:63:38:c1:ab:ce:93:ba:b2: 30:0d:ff:d2:6c:5f:ec:4b:c8:5d:3c:ba:f7:56:4d: ef:db:fd:8b:ee:08:e7:08:d8:18:1f:e5:d7:9d:e4: e9:1b:6a:b0:62:10:cb:40:c4:9d:cf:5b:18:c5:90: fe:96:84:98:1e:46:b5:51:ad:0c:51:05:d7:72:60: f3:d6:fb:1f:c1:3e:20:41:7c:d0:f8:97:2e:79:05: 35:26:e4:46:93:37:d5:fa:ab:dc:2f:a5:3c:1b:19: 86:8c:55:b9:f1:1f:39:4a:62:12:bd:00:52:57:c0: ec:90:b9:29:2c:e2:7b:5e:17:7a:59:17:ef:19:c4: 9e:7a:18:e8:e0:9b:4e:34:53:38:3d:11:9b:04:7d: dd:a8:40:a2:0f:67:3c:e2:4e:1e:91:8b:c8:44:e5: 18:cc:09:20:8c:f9:7f:65:02:f4:1c:6c:08:fc:17: 3a:6e:55:ef:f5:21:d0:59:e5:af:8a:ad:71:d7:52: c6:9d:94:be:36:08:79:50:d2:05:84:68:c2:7d:f0: 2e:36:03:1a:17:5d:fb:62:7d:77:41:78:fa:90:00: b4:4b:93:53:63:b4:63:7d:c6:a7:c9:04:7f:02:81: 29:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BC:08:DE:F6:D7:7C:EF:A5:F1:AE:A1:3B:0E:D6:47:B2:36:83:95 X509v3 Authority Key Identifier: keyid:5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:e3:80:33:70:43:41:24:1f:77:fa:1a:c9:94:ed:e1:72:3b: 06:c4:38:fd:b0:f3:73:72:7b:9b:0b:86:e1:7b:54:d5:4a:01: d3:01:d0:40:a1:75:b3:f7:38:1c:3f:a8:18:75:e6:13:b5:47: 78:a9:81:22:39:1a:e0:77:6b:e2:ec:7f:98:e3:dc:a5:fe:7b: 54:9b:bb:a5:9f:39:e9:a7:35:14:58:9c:01:a3:98:73:0d:dc: 85:97:19:38:ce:b2:be:27:68:01:18:e6:26:e9:9a:5a:59:89: e8:0c:28:ce:64:09:41:87:9f:6a:bb:ce:5b:3b:a8:d0:1a:e4: 28:4b:7e:04:4d:3c:ae:6e:c6:d9:7e:10:be:15:01:03:6e:e0: a5:e6:3e:75:a7:41:08:53:08:e9:ff:12:c5:e9:32:a5:6c:18: 29:82:42:94:55:40:b4:ae:46:81:98:ed:63:db:31:ee:70:72: f3:ed:6e:db:57:11:d6:1b:eb:62:b2:be:4d:25:03:4d:0d:2a: 77:ca:cf:05:bb:be:73:38:05:52:0e:e2:f1:25:f4:62:2d:c7: 0e:fb:33:9c:25:3c:d1:c5:e8:c2:a5:1d:e0:e7:32:fc:b4:0d: 10:88:1c:77:00:f2:8f:74:13:48:09:06:1e:b5:11:e2:54:52: 31:27:a3:78 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUUDVJrcCVn0fNHha0QOlJUMIZsuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQw QkY1OTE1RjAeFw0yNTEwMDkwMDIyNDVaFw0yNTEwMTAwMTA3NDVaMDMxMTAvBgNV BAMTKDQ4QkMwOERFRjZENzdDRUZBNUYxQUVBMTNCMEVENjQ3QjIzNjgzOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg+CUlpw0XbWZR7gfuqoBdANDL 2FFjOMGrzpO6sjAN/9JsX+xLyF08uvdWTe/b/YvuCOcI2Bgf5ded5OkbarBiEMtA xJ3PWxjFkP6WhJgeRrVRrQxRBddyYPPW+x/BPiBBfND4ly55BTUm5EaTN9X6q9wv pTwbGYaMVbnxHzlKYhK9AFJXwOyQuSks4nteF3pZF+8ZxJ56GOjgm040Uzg9EZsE fd2oQKIPZzziTh6Ri8hE5RjMCSCM+X9lAvQcbAj8FzpuVe/1IdBZ5a+KrXHXUsad lL42CHlQ0gWEaMJ98C42AxoXXftifXdBePqQALRLk1NjtGN9xqfJBH8CgSllAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUSLwI3vbXfO+l8a6hOw7WR7I2g5UwHwYDVR0j BBgwFoAUWj94GTU84P0TuP/Ny4g37Qv1kV8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzUvNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQwQkY1OTE1Ri5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03ZWIzLTRm NjMtYTE1OS1jZmYwMmMwMjZhYmYvMi81QTNGNzgxOTM1M0NFMEZEMTNCOEZGQ0RD Qjg4MzdFRDBCRjU5MTVGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy81LzVBM0Y3ODE5 MzUzQ0UwRkQxM0I4RkZDRENCODgzN0VEMEJGNTkxNUYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAb44Az cENBJB93+hrJlO3hcjsGxDj9sPNzcnubC4bhe1TVSgHTAdBAoXWz9zgcP6gYdeYT tUd4qYEiORrgd2vi7H+Y49yl/ntUm7ulnznppzUUWJwBo5hzDdyFlxk4zrK+J2gB GOYm6ZpaWYnoDCjOZAlBh59qu85bO6jQGuQoS34ETTyubsbZfhC+FQEDbuCl5j51 p0EIUwjp/xLF6TKlbBgpgkKUVUC0rkaBmO1j2zHucHLz7W7bVxHWG+tisr5NJQNN DSp3ys8Fu75zOAVSDuLxJfRiLccO+zOcJTzRxejCpR3g5zL8tA0QiBx3APKPdBNI CQYetRHiVFIxJ6N4 -----END CERTIFICATE-----Generated at Thu Oct 9 03:48:52 2025 by rpki-client