$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft File: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft (raw, json) Hash identifier: pjMvSqEZJtWlrXAh8/LcSdDLe6Z+xdhXtajiSrhhZFE= Subject key identifier: AA:0D:44:0D:3A:99:48:D2:62:F2:0A:59:FA:6B:4E:FB:20:8C:E7:65 Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 4E8C1F58E75A62F1B7FEB505B5694C3180C0D736 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft Manifest number: 0305 Signing time: Thu 23 Oct 2025 12:55:29 +0000 Manifest this update: Thu 23 Oct 2025 12:50:29 +0000 Manifest next update: Fri 24 Oct 2025 16:06:29 +0000 Files and hashes: 1: 326131343a373538313a6634303a3a2f34342d3438203d3e20323134363433.roa (hash: jjg3HPw+XVWQVO0XHgF/TKZW97oaDPDZVvcbfhgJX94=) 2: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl (hash: gPKgMjDAlUfWS4m85UxTiwSEWtE7ewNTvtNth7Pi+g0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 16:06:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:8c:1f:58:e7:5a:62:f1:b7:fe:b5:05:b5:69:4c:31:80:c0:d7:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Oct 23 12:50:29 2025 GMT Not After : Oct 24 16:06:29 2025 GMT Subject: CN=AA0D440D3A9948D262F20A59FA6B4EFB208CE765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:99:f9:f3:a8:d7:c0:8b:20:67:96:ea:85:67: 5f:7f:82:a0:cc:e6:b9:65:17:8f:ba:e5:1f:24:59: e0:f1:a4:99:cd:4f:ee:21:3c:43:9a:71:8f:61:d9: ef:0a:ee:ea:8c:ba:52:65:a0:8e:df:77:dc:b8:cb: de:80:27:cb:26:5a:a2:ec:39:a2:e9:78:8c:f3:d2: 8f:cf:bc:5a:d4:4b:36:2d:bd:3b:3b:45:ef:34:ed: c4:67:96:e1:8b:31:30:db:7f:08:59:94:67:b2:1f: 8f:11:41:09:f1:8e:9e:6b:45:10:d1:3b:a2:cf:50: 54:22:e5:5d:85:02:03:f2:e2:1d:af:47:5b:50:a5: 47:2f:48:80:dc:9f:ff:00:14:6b:c4:7b:ce:64:dc: 77:ba:e1:8c:ea:7d:80:98:b2:b7:ea:8c:fc:cb:3e: 65:39:68:df:ff:af:72:11:76:a9:8b:f3:0f:38:14: a5:53:da:cf:b8:9a:08:42:f4:c4:f1:fa:f2:91:b9: 06:b2:20:57:99:57:13:c0:2e:33:82:10:72:23:e2: 45:b0:2c:06:d3:60:c7:71:c0:f8:f3:0f:76:85:bb: 17:b8:fc:35:df:b5:d4:93:92:88:c4:b2:88:5f:70: fe:e5:0f:02:31:08:9b:76:18:d8:7a:b1:90:b1:c0: f1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:0D:44:0D:3A:99:48:D2:62:F2:0A:59:FA:6B:4E:FB:20:8C:E7:65 X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:ed:06:8c:14:75:6f:a1:eb:0c:4e:3f:de:76:5f:77:71:83: 7b:7a:24:38:06:7f:c2:b0:a4:b8:c3:c4:9d:f0:7f:1a:ce:4f: 95:c7:09:26:f8:59:24:eb:df:f0:fa:38:78:aa:92:c8:61:68: 08:6b:4c:31:f2:1f:91:87:92:1b:b7:e1:14:f6:1d:d0:f3:77: f0:be:af:be:98:80:82:05:e1:04:db:4a:29:ef:17:a2:99:12: e0:60:43:3f:ab:a1:85:91:45:91:d2:f6:26:ae:5a:e9:d5:19: ee:0b:08:a0:dd:1a:37:79:87:04:47:44:1c:18:ea:f2:f6:33: 81:ce:2c:21:30:60:57:15:d9:97:d5:d5:6b:c5:b9:c7:0b:bd: af:d2:35:b3:46:2f:ed:f5:28:70:30:fb:4b:43:99:d7:53:f0: 2d:48:21:fd:56:ed:f8:cc:ce:df:8d:7c:f8:2a:2d:b2:19:70: d3:ad:d9:c1:12:aa:b2:b8:43:79:23:61:32:37:94:ad:30:e5: 01:61:9c:9f:70:1f:37:a0:17:af:79:cd:4b:d5:18:17:72:1c: db:71:67:43:b1:c5:d1:17:93:67:cf:51:ad:a4:ad:df:67:ef: 53:6a:0b:40:33:17:29:52:b7:c8:dd:38:a4:e5:fb:2b:c9:2b: 4a:a6:ca:e8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUTowfWOdaYvG3/rUFtWlMMYDA1zYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNTEwMjMxMjUwMjlaFw0yNTEwMjQxNjA2MjlaMDMxMTAvBgNV BAMTKEFBMEQ0NDBEM0E5OTQ4RDI2MkYyMEE1OUZBNkI0RUZCMjA4Q0U3NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1mfnzqNfAiyBnluqFZ19/gqDM 5rllF4+65R8kWeDxpJnNT+4hPEOacY9h2e8K7uqMulJloI7fd9y4y96AJ8smWqLs OaLpeIzz0o/PvFrUSzYtvTs7Re807cRnluGLMTDbfwhZlGeyH48RQQnxjp5rRRDR O6LPUFQi5V2FAgPy4h2vR1tQpUcvSIDcn/8AFGvEe85k3He64YzqfYCYsrfqjPzL PmU5aN//r3IRdqmL8w84FKVT2s+4mghC9MTx+vKRuQayIFeZVxPALjOCEHIj4kWw LAbTYMdxwPjzD3aFuxe4/DXftdSTkojEsohfcP7lDwIxCJt2GNh6sZCxwPElAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUqg1EDTqZSNJi8gpZ+mtO+yCM52UwHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RiOGQ4YjdkLWM0ODYtNDIzOS05ZDlmLThmOGY1ZGNlZDhkMC8xL0Y5RjdBMjg4 NUNGMzAxMkZBMTM5MEQzQjMyNTlGQzc4QUVGN0FEMUEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAy7QaM FHVvoesMTj/edl93cYN7eiQ4Bn/CsKS4w8Sd8H8azk+Vxwkm+Fkk69/w+jh4qpLI YWgIa0wx8h+Rh5Ibt+EU9h3Q83fwvq++mICCBeEE20op7xeimRLgYEM/q6GFkUWR 0vYmrlrp1RnuCwig3Ro3eYcER0QcGOry9jOBziwhMGBXFdmX1dVrxbnHC72v0jWz Ri/t9ShwMPtLQ5nXU/AtSCH9Vu34zM7fjXz4Ki2yGXDTrdnBEqqyuEN5I2EyN5St MOUBYZyfcB83oBevec1L1RgXchzbcWdDscXRF5Nnz1GtpK3fZ+9TagtAMxcpUrfI 3Tik5fsryStKpsro -----END CERTIFICATE-----Generated at Fri Oct 24 04:33:56 2025 by rpki-client