$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft File: 98A87CAD5B710890A9528F166F4202393824E6B8.mft (raw, json) Hash identifier: erlFd9hKTgHeZmAF78wqtv86j8N53pAqjkExS/eMJIw= Subject key identifier: 10:5B:74:55:CC:12:60:5F:BB:6B:7B:31:C4:C7:ED:A6:5D:57:2F:01 Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8 Certificate serial: 75CABCE81140A04348DC1FFD7D7CA27AC19B9D7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft Manifest number: 046F Signing time: Tue 28 Oct 2025 03:09:11 +0000 Manifest this update: Tue 28 Oct 2025 03:04:11 +0000 Manifest next update: Wed 29 Oct 2025 07:04:11 +0000 Files and hashes: 1: AS48070.asa (hash: 5MT6ORI/F8ffsUlifpuRiZkf4qUWanqmxrgKmyiz55A=) 2: 326131313a353730303a3a2f33322d3332203d3e203438303730.roa (hash: Fqs+xGh2wCPoRebx3WWGGz8gG+3wDYrzV+eGaABVra0=) 3: 39342e3132362e3233362e302f32342d3234203d3e203438303730.roa (hash: ma+wlMqMsb7J0TC2Gy822cEZS57hTDfS/GzCjZsgQ1k=) 4: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer (hash: Pc4F216M/oD/fxZDUk8HLynWg8D1IQ0ANHs5N2ZC0VQ=) 5: 39342e3132362e3233322e302f32342d3234203d3e203438303730.roa (hash: VIdYFIOIqW5zJ3T1LDGwWjmJ764XjM+ac+86S8Ja5hk=) 6: 326131313a353730373a3a2f33322d3332203d3e203438303730.roa (hash: 242POLRepYH713AUptOGvBkM/JpRNVCsIm5BodQGTyY=) 7: 39342e3132362e3233332e302f32342d3234203d3e203438303730.roa (hash: /8dVa93viKNoM1pCJooeH0rtbsVAVvDJFpjlC3WNZyI=) 8: 326131313a353730313a31303a3a2f34342d3434203d3e20323030313938.roa (hash: IiLsd5rWyRAEtPC2BRNztBwgXOWFkCLAq6FHsMnhQxg=) 9: 98A87CAD5B710890A9528F166F4202393824E6B8.crl (hash: 5u2oDqb6VYkzEv45y9Otg0VI8yFMj0ircpWyWzYv+uM=) 10: 326131313a353730373a61613a3a2f34382d3438203d3e203438303730.roa (hash: JswRhPyDtXHdt3LcnGr0rU+2WVgkSTrzy91w1+vHXG0=) 11: 39342e3132362e3233342e302f32342d3234203d3e203438303730.roa (hash: wQ/YXS5V0WqyAz3I38Grxwtf2vC7Tnq0YU0pMolmNpk=) 12: 39342e3132362e3233382e302f32342d3234203d3e203438303730.roa (hash: EEtfGKQPQ42nFzzdsRfixi4zKQ5tTYPEdAQ1iAcmdE4=) 13: 39342e3132362e3233392e302f32342d3234203d3e203438303730.roa (hash: NDHvIIcUiAk7uX5boyMA8yHxKUGe6BZWK+cptlXNnOA=) 14: 39342e3132362e3233352e302f32342d3234203d3e203438303730.roa (hash: S5WIAkzllTXfMiWpREUuucFgM0BSw7Pb5gT995rR5+k=) 15: 39342e3132362e3233372e302f32342d3234203d3e203438303730.roa (hash: SY6OvQv9R/Ut8R5yFxdy0RVK/9dKsg8ZwmC3iNS9Rpw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Oct 2025 07:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:ca:bc:e8:11:40:a0:43:48:dc:1f:fd:7d:7c:a2:7a:c1:9b:9d:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8 Validity Not Before: Oct 28 03:04:11 2025 GMT Not After : Oct 29 07:04:11 2025 GMT Subject: CN=105B7455CC12605FBB6B7B31C4C7EDA65D572F01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1a:26:a7:05:ac:75:f1:d0:6b:a8:84:b2:9a: bf:ec:6b:86:91:b0:e1:36:6e:0d:cc:4c:2c:d7:d1: 04:dc:ff:d3:0d:55:43:7d:6d:8f:69:ec:14:63:1d: ef:85:9e:43:12:b5:45:9c:2d:76:bf:01:11:db:ef: 49:f8:b6:18:ea:0b:62:6e:b1:67:90:c1:3c:f4:1d: 8f:35:99:70:cf:a5:ee:93:2c:fb:18:1c:e2:19:38: 87:ee:3b:b5:a2:05:e2:ca:1f:0a:63:c0:49:74:32: 75:42:7a:c8:82:54:a4:f3:82:6b:21:3e:f5:49:e8: 74:a5:4e:bb:b6:73:af:1a:3c:bf:cf:61:b7:d4:fd: 2f:a6:47:93:54:2d:57:86:3a:d1:f0:31:b1:95:27: fa:94:66:ec:47:7b:d2:f9:af:05:59:25:34:e4:1b: 28:c1:ab:6e:9b:0e:80:34:23:bc:bd:3d:a6:d1:81: e8:60:b9:04:0f:62:04:b2:b7:bc:85:2b:1d:74:a3: 5d:bc:5e:cc:4e:62:15:01:58:cd:9f:08:93:2b:ae: a2:f9:10:19:40:91:95:db:ab:73:02:70:cd:f0:bb: 65:4a:ca:eb:6a:3c:5c:61:b8:5a:6c:63:27:d0:e7: 5c:f6:7f:e8:40:9e:cf:0f:4e:cb:4e:71:33:fa:f0: 72:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5B:74:55:CC:12:60:5F:BB:6B:7B:31:C4:C7:ED:A6:5D:57:2F:01 X509v3 Authority Key Identifier: keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:2b:bf:19:c7:20:0e:3f:29:f6:98:7f:2d:1a:6e:e2:40:a6: fe:94:eb:9e:4d:77:11:af:65:fb:4c:fd:d8:4e:7c:55:3c:11: 72:8e:0b:aa:c7:77:8b:3a:f5:34:54:60:64:c8:59:9c:0b:ab: b5:37:e0:d2:ff:b2:0b:a2:88:af:12:8c:ab:30:f7:f3:df:5b: 9b:12:da:d3:ad:b9:e3:1e:fa:de:e0:d6:4a:fb:51:5f:38:fc: 2f:2b:f5:f2:d5:ae:ba:d3:d4:c9:b2:9d:90:fa:3e:7b:3d:3c: a6:fd:4c:47:1b:e0:05:da:b4:41:d2:3d:a9:9e:00:38:36:18: 59:d4:55:2c:91:af:ae:30:d9:45:b8:eb:8a:fc:e2:bc:ca:f4: e6:7d:56:e5:ce:34:1f:04:99:fc:3f:51:82:11:70:d2:38:b8: c8:30:96:9f:15:e1:bf:6d:be:f0:7d:a6:48:56:c6:5c:c7:81: fb:72:ed:5d:2a:c9:7b:02:65:29:cb:57:33:1a:2b:5f:00:1a: 92:3c:3c:68:bd:f4:92:1b:82:1c:f6:a9:79:1c:b7:42:b6:c0: fe:0b:25:fe:bc:19:6f:5d:eb:47:a2:a8:dd:d8:95:dd:98:65: a7:00:e2:9f:bd:20:f8:f7:94:10:f5:f4:ef:b0:1b:3f:d7:07: fe:45:8d:52 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdcq86BFAoENI3B/9fXyiesGbnX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThhODdjYWQ1YjcxMDg5MGE5NTI4ZjE2NmY0MjAyMzkz ODI0ZTZiODAeFw0yNTEwMjgwMzA0MTFaFw0yNTEwMjkwNzA0MTFaMDMxMTAvBgNV BAMTKDEwNUI3NDU1Q0MxMjYwNUZCQjZCN0IzMUM0QzdFREE2NUQ1NzJGMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdGianBax18dBrqISymr/sa4aR sOE2bg3MTCzX0QTc/9MNVUN9bY9p7BRjHe+FnkMStUWcLXa/ARHb70n4thjqC2Ju sWeQwTz0HY81mXDPpe6TLPsYHOIZOIfuO7WiBeLKHwpjwEl0MnVCesiCVKTzgmsh PvVJ6HSlTru2c68aPL/PYbfU/S+mR5NULVeGOtHwMbGVJ/qUZuxHe9L5rwVZJTTk GyjBq26bDoA0I7y9PabRgehguQQPYgSyt7yFKx10o128XsxOYhUBWM2fCJMrrqL5 EBlAkZXbq3MCcM3wu2VKyutqPFxhuFpsYyfQ51z2f+hAns8PTstOcTP68HKZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUEFt0VcwSYF+7a3sxxMftpl1XLwEwHwYDVR0j BBgwFoAUmKh8rVtxCJCpUo8Wb0ICOTgk5rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUtNGIxYS00NmVhLTljOTUtNGFmMTI5NjRh NDlkLzAvOThBODdDQUQ1QjcxMDg5MEE5NTI4RjE2NkY0MjAyMzkzODI0RTZCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL21LaDhyVnR4Q0pDcFVvOFdiMElDT1Rn azVyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00 YjFhLTQ2ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC85OEE4N0NBRDVCNzEwODkwQTk1 MjhGMTY2RjQyMDIzOTM4MjRFNkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeiu/GccgDj8p9ph/LRpu 4kCm/pTrnk13Ea9l+0z92E58VTwRco4Lqsd3izr1NFRgZMhZnAurtTfg0v+yC6KI rxKMqzD3899bmxLa06254x763uDWSvtRXzj8Lyv18tWuutPUybKdkPo+ez08pv1M RxvgBdq0QdI9qZ4AODYYWdRVLJGvrjDZRbjrivzivMr05n1W5c40HwSZ/D9RghFw 0ji4yDCWnxXhv22+8H2mSFbGXMeB+3LtXSrJewJlKctXMxorXwAakjw8aL30khuC HPapeRy3QrbA/gsl/rwZb13rR6Ko3diV3ZhlpwDin70g+PeUEPX077AbP9cH/kWN Ug== -----END CERTIFICATE-----Generated at Tue Oct 28 11:42:05 2025 by rpki-client