$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft File: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft (raw, json) Hash identifier: qsMg4sZsgK2PO//WqaZH+04F3BSeArvnzFCRQctu9Vs= Subject key identifier: 85:45:1B:4B:AD:EE:4F:CB:13:CB:5B:D0:E5:D0:DD:22:4F:9C:2A:EC Authority key identifier: 20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 Certificate issuer: /CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Certificate serial: 5D52BE8C4BEAA8ADB7EA91F791FD25173916563C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft Manifest number: 50 Signing time: Sat 25 Oct 2025 12:52:34 +0000 Manifest this update: Sat 25 Oct 2025 12:47:34 +0000 Manifest next update: Sun 26 Oct 2025 15:16:34 +0000 Files and hashes: 1: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl (hash: AGRMArF46eltaNq0kOSaYCtqDXHi7RYCQAAljOLSlBo=) 2: 326131343a373538313a333030303a3a2f34302d3438203d3e20323037353239.roa (hash: 49tQr1GLN9QvPACiaQcXfaSDsuhRZJax3rEAyqF9fvs=) 3: 326131343a373538313a333062353a3a2f34382d3438203d3e20323131373239.roa (hash: tFUXq6i30FxB1SNNhCRKk78oQl/FXFjJBGghOw722to=) 4: 326131343a373538303a666666353a3a2f34382d3438203d3e20323037353239.roa (hash: 8GEpSwKR5aAKrW7JpZcQNrVUIUKVu8YVCYytf208qTw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 15:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:52:be:8c:4b:ea:a8:ad:b7:ea:91:f7:91:fd:25:17:39:16:56:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Validity Not Before: Oct 25 12:47:34 2025 GMT Not After : Oct 26 15:16:34 2025 GMT Subject: CN=85451B4BADEE4FCB13CB5BD0E5D0DD224F9C2AEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:94:03:c8:66:73:9b:7a:27:4b:49:46:94:de: 9a:85:bb:7d:21:69:c3:7f:f1:74:55:c9:c7:34:73: 94:03:b5:0b:87:d5:bb:91:e7:6c:46:63:28:d4:62: 42:72:dd:73:0a:6c:14:a1:d1:19:dd:a0:e0:31:08: a7:55:13:a5:cd:6b:42:6d:82:fe:da:7f:a0:06:79: d2:60:67:d1:f3:e2:30:45:70:8e:c0:0a:44:6a:5c: af:bf:83:a2:3c:0f:32:4b:f3:46:43:a0:44:2a:20: c5:4e:57:cc:69:d7:b4:25:c2:75:02:ac:2e:c0:df: 69:20:ed:dd:db:44:3d:b8:b4:87:da:a7:e4:df:43: a7:0f:5e:15:dd:41:cc:a7:a2:22:a3:3b:b6:92:7a: 67:f3:b7:41:13:18:ba:c4:82:b8:51:f3:a9:cc:8c: 67:ef:9f:a0:49:d7:85:01:c2:bc:d2:47:7a:28:39: b2:97:7e:8b:48:a8:a0:30:33:a0:c5:55:f5:31:49: b6:4e:3a:6d:d9:a0:62:e6:a9:b5:4d:96:05:d8:03: 48:ca:0e:b8:05:28:e7:9b:6a:9c:01:28:09:15:72: d7:7c:80:a9:5d:00:8c:c8:bd:ab:53:0c:79:9f:89: 7f:55:9a:47:ef:62:68:30:d5:67:f7:4b:e0:2b:99: c0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:45:1B:4B:AD:EE:4F:CB:13:CB:5B:D0:E5:D0:DD:22:4F:9C:2A:EC X509v3 Authority Key Identifier: keyid:20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:f4:8f:e0:7a:34:35:04:b7:c5:89:38:17:2c:02:b9:24:b5: f9:e2:ac:cb:e1:a5:68:d8:8e:a1:0e:dd:2c:10:e9:72:4d:ab: 88:c7:d5:53:4d:fe:ca:a5:a8:24:7f:8b:7f:03:28:fe:8a:fd: 42:90:84:4b:03:58:46:8a:4a:3c:8d:1a:10:32:5e:83:d7:c5: 39:bc:4d:10:cb:ee:85:18:e6:40:73:a9:bb:e5:39:80:6c:52: c5:0f:00:ae:34:ab:e2:4a:15:01:b6:ca:21:b7:f1:99:bb:dc: fe:ac:09:d1:1d:db:33:5a:8b:7d:6d:53:35:d6:ba:8d:df:53: 33:ac:dc:55:26:b6:30:30:85:de:9e:f4:d6:5b:f6:c7:1f:d0: 39:cf:15:22:84:a3:92:2a:c7:3e:1b:fc:c4:86:31:05:7d:63: ef:3c:ad:9f:fc:9b:7c:f5:ea:39:3b:16:e2:cd:7f:1e:3b:7c: 8f:27:e7:67:9e:be:40:f0:44:0e:a4:71:15:9f:68:47:76:bc: 1e:9b:fc:00:dc:6d:e0:6e:f2:f5:79:f7:e4:d9:ae:ee:12:2a: 5f:62:ab:62:d7:56:75:4a:8d:fd:0d:6d:f6:e4:08:c1:23:52: e3:90:9a:4c:cf:f0:99:3c:b4:2e:7a:9a:27:fa:20:7a:9a:ed: ea:4e:77:f9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXVK+jEvqqK236pH3kf0lFzkWVjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZD ODg5MjNGMDAeFw0yNTEwMjUxMjQ3MzRaFw0yNTEwMjYxNTE2MzRaMDMxMTAvBgNV BAMTKDg1NDUxQjRCQURFRTRGQ0IxM0NCNUJEMEU1RDBERDIyNEY5QzJBRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCglAPIZnObeidLSUaU3pqFu30h acN/8XRVycc0c5QDtQuH1buR52xGYyjUYkJy3XMKbBSh0RndoOAxCKdVE6XNa0Jt gv7af6AGedJgZ9Hz4jBFcI7ACkRqXK+/g6I8DzJL80ZDoEQqIMVOV8xp17QlwnUC rC7A32kg7d3bRD24tIfap+TfQ6cPXhXdQcynoiKjO7aSemfzt0ETGLrEgrhR86nM jGfvn6BJ14UBwrzSR3ooObKXfotIqKAwM6DFVfUxSbZOOm3ZoGLmqbVNlgXYA0jK DrgFKOebapwBKAkVctd8gKldAIzIvatTDHmfiX9VmkfvYmgw1Wf3S+ArmcDVAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUhUUbS63uT8sTy1vQ5dDdIk+cKuwwHwYDVR0j BBgwFoAUICqC2m5zzkJi4Yuu1go/psiJI/AwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDliZDM4ODgtOTMwMi00YjZmLWEwMTctMmI0YmJhNWU1 N2JiLzEvMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZDODg5MjNGMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDJBODJEQTZFNzNDRTQyNjJFMThCQUVE NjBBM0ZBNkM4ODkyM0YwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q5YmQzODg4LTkzMDItNGI2Zi1hMDE3LTJiNGJiYTVlNTdiYi8xLzIwMkE4MkRB NkU3M0NFNDI2MkUxOEJBRUQ2MEEzRkE2Qzg4OTIzRjAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBv9I/g ejQ1BLfFiTgXLAK5JLX54qzL4aVo2I6hDt0sEOlyTauIx9VTTf7Kpagkf4t/Ayj+ iv1CkIRLA1hGiko8jRoQMl6D18U5vE0Qy+6FGOZAc6m75TmAbFLFDwCuNKviShUB tsoht/GZu9z+rAnRHdszWot9bVM11rqN31MzrNxVJrYwMIXenvTWW/bHH9A5zxUi hKOSKsc+G/zEhjEFfWPvPK2f/Jt89eo5OxbizX8eO3yPJ+dnnr5A8EQOpHEVn2hH drwem/wA3G3gbvL1effk2a7uEipfYqti11Z1So39DW325AjBI1LjkJpMz/CZPLQu epon+iB6mu3qTnf5 -----END CERTIFICATE-----Generated at Sat Oct 25 22:05:16 2025 by rpki-client