$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft File: C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft (raw, json) Hash identifier: vACc6hgE2Ui/eqmrYtp2WD8CIvrCEjVq7JRm+8yb70Y= Subject key identifier: BB:07:F5:D9:46:CC:04:91:8A:C7:FB:8D:52:0B:A6:0B:A9:13:24:D8 Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf Certificate serial: 47678C6B492D4F5B78BD6B7C04B6982D5ED5EBE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft Manifest number: 0547 Signing time: Tue 21 Oct 2025 06:37:17 +0000 Manifest this update: Tue 21 Oct 2025 06:32:17 +0000 Manifest next update: Wed 22 Oct 2025 08:15:17 +0000 Files and hashes: 1: 3139332e3234362e3130332e302f32342d3234203d3e20323032373336.roa (hash: 25OCay2OV/7fsFzlQCaWuZFV/8gtz5r77rm0KuzYhQc=) 2: 3139332e3234362e3130322e302f32342d3234203d3e203630373831.roa (hash: 9YIjshhRHJCTBV0dIP18GlVU8/qr9siO7bVSgJFYoAw=) 3: 3139332e3234362e352e302f32342d3234203d3e20313939343135.roa (hash: lvghBplCcmXtQEEJ3nC5HmHIcxgk88drnBMjhNzmX2g=) 4: 3139332e3234362e3130332e302f32342d3234203d3e20323136313338.roa (hash: fdALPGopwtGvbJEhx+/96pp78JBOCpIXPSPl4+ufmoE=) 5: 3231372e3139382e3138372e302f32342d3234203d3e20323132363039.roa (hash: DHsuIdClDCk2AbtF+6NodfNI3JEU6gbRKvoUSbt4bMQ=) 6: 3231372e3139382e3138372e302f32342d3234203d3e20323131343135.roa (hash: C9UN/z7rRSIBHXCw3Mn5S1vnSskjCCo5azhWVB5o2V8=) 7: 3231372e3139382e3138372e302f32342d3234203d3e20323131343430.roa (hash: hv8+1ab3SlqVr0lUzuXGkIAi200jEC6ydrdZg2cy0KU=) 8: 3139332e3234362e342e302f32342d3234203d3e20313335343032.roa (hash: x5G3aikxww4wLRaoWnz2KkIIppe2I2SZAi3PiElvQpI=) 9: C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl (hash: K9BsD9Zgv/NR/7cngRh3FzZxZTocFn/BReVdmIq92Xo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 08:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:67:8c:6b:49:2d:4f:5b:78:bd:6b:7c:04:b6:98:2d:5e:d5:eb:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf Validity Not Before: Oct 21 06:32:17 2025 GMT Not After : Oct 22 08:15:17 2025 GMT Subject: CN=BB07F5D946CC04918AC7FB8D520BA60BA91324D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3a:a2:07:2c:27:5f:e7:ce:8d:64:77:da:3e: 8f:f3:f7:94:d0:4c:f7:d8:19:d6:e6:2c:6a:18:d3: 11:45:ed:3c:a7:00:82:dc:4e:2d:4c:e4:77:67:72: 65:c1:96:af:b4:e6:22:50:1f:3c:49:0a:29:b3:32: 04:84:e1:d2:98:75:12:8e:0d:f1:47:07:1c:5c:a6: b4:89:dc:02:13:1c:5c:43:82:ec:7a:a9:02:90:0d: 0d:c9:82:b5:9e:e3:8f:8c:0c:c7:6b:ad:69:51:69: 95:62:88:bb:fc:05:b3:f2:34:64:ba:ce:bd:9e:70: f4:6e:1f:31:b4:d7:d7:26:43:72:ac:57:55:b5:0a: 01:a5:88:9d:a8:71:6b:ad:6b:9d:2d:2e:1b:52:05: 3f:91:ec:49:f3:7e:a5:20:2c:43:26:a2:be:a8:f7: e8:dd:c1:f3:9c:9b:7b:9c:4f:0c:8f:d0:6e:7f:74: cb:bd:6b:76:17:80:21:9a:6d:fa:17:ca:9f:1e:6c: e7:cf:36:62:61:ce:f7:2d:b3:6d:67:a9:3c:f0:6e: d9:b7:db:7f:ca:6c:71:04:e9:82:fe:14:1c:2a:e4: dd:50:50:60:ac:f3:2d:7a:ba:6d:58:c7:bb:90:91: 38:6d:81:32:e8:1d:23:f6:f8:8c:46:0a:d6:02:00: 5e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:07:F5:D9:46:CC:04:91:8A:C7:FB:8D:52:0B:A6:0B:A9:13:24:D8 X509v3 Authority Key Identifier: keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:3b:9e:43:03:19:cf:83:1d:5c:8f:98:b6:25:33:82:f0:5a: 3f:c1:4f:14:82:ef:43:2b:94:9e:03:c0:63:07:ef:ee:2f:c9: 3a:a6:f1:af:3f:cf:e4:e7:4a:df:be:c5:22:bd:0d:ff:46:0c: 47:40:4e:f8:04:b4:99:7f:b1:34:a3:8e:92:a0:f5:79:3b:cf: 25:34:97:09:71:82:bc:49:b0:dd:25:b3:68:65:d1:94:be:49: ab:53:8b:c5:a5:5a:bb:9f:a1:75:53:79:83:5b:2d:93:1e:ae: 8d:d6:95:76:34:23:2a:23:18:65:a1:d6:d1:f7:7d:7f:21:f0: 8a:dc:0b:bc:99:c9:5a:e2:d2:5d:fe:b6:86:76:2a:8e:21:f8: cf:58:af:20:d5:96:0e:f2:e6:ab:f0:ea:8e:da:47:8e:23:a4: e9:1d:16:11:ae:9e:3a:05:51:c4:20:dd:07:df:03:90:b1:0f: 9b:11:1c:bf:f0:94:74:2f:44:c1:25:cb:75:34:37:bf:8f:04: 1b:c6:e8:d8:a6:19:8e:e6:ef:6e:c0:d0:df:ae:da:21:7b:e1: 82:fa:24:c5:a4:92:9c:1c:da:16:4e:de:d4:88:dd:e6:ab:d6: aa:86:ed:df:74:a8:16:df:d3:28:67:fe:19:02:af:c6:ab:88: 45:09:ad:74 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUR2eMa0ktT1t4vWt8BLaYLV7V6+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc5ZDAyYzYxODg2MWFkNDViYWY3OGNlMzkwMjNjYmNi NDk0YTdiZjAeFw0yNTEwMjEwNjMyMTdaFw0yNTEwMjIwODE1MTdaMDMxMTAvBgNV BAMTKEJCMDdGNUQ5NDZDQzA0OTE4QUM3RkI4RDUyMEJBNjBCQTkxMzI0RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8OqIHLCdf586NZHfaPo/z95TQ TPfYGdbmLGoY0xFF7TynAILcTi1M5HdncmXBlq+05iJQHzxJCimzMgSE4dKYdRKO DfFHBxxcprSJ3AITHFxDgux6qQKQDQ3JgrWe44+MDMdrrWlRaZViiLv8BbPyNGS6 zr2ecPRuHzG019cmQ3KsV1W1CgGliJ2ocWuta50tLhtSBT+R7EnzfqUgLEMmor6o 9+jdwfOcm3ucTwyP0G5/dMu9a3YXgCGabfoXyp8ebOfPNmJhzvcts21nqTzwbtm3 23/KbHEE6YL+FBwq5N1QUGCs8y16um1Yx7uQkThtgTLoHSP2+IxGCtYCAF59AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUuwf12UbMBJGKx/uNUgumC6kTJNgwHwYDVR0j BBgwFoAUx50CxhiGGtRbr3jOOQI8vLSUp78wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDkwYTkzNWEtYTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0 ZjI4LzAvQzc5RDAyQzYxODg2MUFENDVCQUY3OENFMzkwMjNDQkNCNDk0QTdCRi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3g1MEN4aGlHR3RSYnIzak9PUUk4dkxT VXA3OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOTBhOTM1YS1h NzRkLTRiOTgtOTQzMC1iYzdhZTVjMjRmMjgvMC9DNzlEMDJDNjE4ODYxQUQ0NUJB Rjc4Q0UzOTAyM0NCQ0I0OTRBN0JGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFDueQwMZz4MdXI+YtiUz gvBaP8FPFILvQyuUngPAYwfv7i/JOqbxrz/P5OdK377FIr0N/0YMR0BO+AS0mX+x NKOOkqD1eTvPJTSXCXGCvEmw3SWzaGXRlL5Jq1OLxaVau5+hdVN5g1stkx6ujdaV djQjKiMYZaHW0fd9fyHwitwLvJnJWuLSXf62hnYqjiH4z1ivINWWDvLmq/DqjtpH jiOk6R0WEa6eOgVRxCDdB98DkLEPmxEcv/CUdC9EwSXLdTQ3v48EG8bo2KYZjubv bsDQ367aIXvhgvokxaSSnBzaFk7e1Ijd5qvWqobt33SoFt/TKGf+GQKvxquIRQmt dA== -----END CERTIFICATE-----Generated at Tue Oct 21 22:24:43 2025 by rpki-client