$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft File: E19302BE91C9D4211CDF4AFF091055A173B3593B.mft (raw, json) Hash identifier: LEoUBPY3C4g41Byb+1d0vgpcxFOZyoaN++gy1jnrvtM= Subject key identifier: 5C:99:E7:0E:02:11:AA:54:61:94:E0:9B:94:E4:2A:15:61:99:9F:C6 Authority key identifier: E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B Certificate issuer: /CN=E19302BE91C9D4211CDF4AFF091055A173B3593B Certificate serial: 7C219589594F740D06321796B66B3C14F651FC06 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft Manifest number: 97 Signing time: Wed 22 Oct 2025 22:31:46 +0000 Manifest this update: Wed 22 Oct 2025 22:26:46 +0000 Manifest next update: Fri 24 Oct 2025 02:26:46 +0000 Files and hashes: 1: 326130373a353463313a343230303a3a2f34302d3430203d3e20313939353138.roa (hash: p0V0EhuR94jsdFZ1UsjzKoR4Va7GATjKkx+PVQ3cRs4=) 2: E19302BE91C9D4211CDF4AFF091055A173B3593B.crl (hash: yGXIzx0Z06gREf27duuc4JhG+Az7bL6Hlywgc/irfSU=) 3: 326130373a353463313a343234323a3a2f34382d3438203d3e20313939353138.roa (hash: BOG3fQtugkiXpKS/p2fTg16ei6qBO6dg8xuWYfodSgU=) 4: 326130373a353463313a343236313a3a2f34382d3438203d3e203436373636.roa (hash: 7m4uBl7pjkxamzWCFShzOT8dP3zXIx3Ew/sIEJmrOk4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 00:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:21:95:89:59:4f:74:0d:06:32:17:96:b6:6b:3c:14:f6:51:fc:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E19302BE91C9D4211CDF4AFF091055A173B3593B Validity Not Before: Oct 22 22:26:46 2025 GMT Not After : Oct 24 02:26:46 2025 GMT Subject: CN=5C99E70E0211AA546194E09B94E42A1561999FC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d1:02:d6:80:bc:2f:36:b8:39:0e:4f:18:66: 2b:60:b1:01:e2:de:5c:f6:f0:81:cc:2a:22:9f:34: 15:0d:1f:48:5a:66:d4:ae:ce:26:cb:2c:6b:87:ee: 33:51:30:6c:01:79:05:64:83:bb:7c:7e:89:88:61: 2a:5c:18:4c:df:95:75:71:2c:e4:ab:52:a2:d8:5e: a3:9b:cc:ab:75:89:5f:28:bb:77:c6:02:be:03:b4: 1b:a1:90:5d:6d:5d:f4:7a:d0:f7:c6:78:99:f6:31: f1:1f:91:49:67:c6:09:3f:71:dc:28:07:c0:65:6d: e2:f7:0d:2d:d4:ff:3c:13:c9:4b:85:49:d7:b5:54: d0:b0:67:fb:8a:78:6a:5c:6b:0d:e5:0e:9b:63:87: c4:01:87:46:87:f0:4c:7e:55:d4:62:1b:69:12:bc: 0a:4d:87:07:11:e6:a3:43:20:63:f6:b5:19:90:a0: fa:d2:c5:c2:b5:c3:d3:76:3f:65:42:41:73:f0:a8: bc:37:a5:d3:35:68:90:f7:c4:ef:0a:38:7a:aa:9d: f7:35:95:42:a9:d0:df:99:33:31:11:9a:a0:f6:6f: a4:53:43:05:2e:cc:34:51:c4:06:12:f7:99:2f:7e: 7a:8c:4d:15:ae:d1:32:12:36:94:37:dd:61:99:cf: 4c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:99:E7:0E:02:11:AA:54:61:94:E0:9B:94:E4:2A:15:61:99:9F:C6 X509v3 Authority Key Identifier: keyid:E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d5:27:60:8f:8f:dd:98:c4:3b:9c:13:92:19:56:ce:c7:6c: 0c:83:75:dd:82:08:05:ca:8f:3b:95:9e:65:08:ca:3f:0f:8f: 79:4f:57:19:5a:32:4c:3a:eb:dd:62:0c:ea:8e:eb:f4:08:9d: 43:be:5d:3a:c6:c7:98:f5:f8:08:33:cc:d1:72:82:33:c1:0e: 45:04:9c:37:83:c3:1d:66:20:39:89:95:26:ba:95:f5:68:77: d8:24:bc:dd:77:1d:41:17:51:78:a2:76:76:09:36:b9:b2:19: 3a:bd:9c:71:0b:a7:86:89:f9:28:44:d5:da:e3:6d:ed:e6:a2: fb:d6:a0:48:93:51:4a:86:c7:3e:8e:00:47:00:08:14:3f:08: 85:21:7b:f4:05:93:0a:9d:6c:ca:da:fc:58:29:2e:ee:49:9f: c5:ef:d5:a1:a1:a0:20:e1:49:dc:1e:41:52:ef:a3:a2:a8:d7: 22:29:d3:d3:1f:1a:05:fb:1d:80:51:8e:9d:6a:92:20:e8:dd: 3f:f0:39:59:03:a1:24:00:d8:c3:9f:27:59:47:f7:19:c9:33: b4:e2:dd:d8:c3:6f:6a:c1:45:67:7e:31:a9:c4:8e:44:b3:99: 2c:82:1e:6d:e9:f3:b3:f8:f5:2d:d2:62:9e:e0:40:60:91:15: f1:6f:95:8f -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIUfCGViVlPdA0GMheWtms8FPZR/AYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE5MzAyQkU5MUM5RDQyMTFDREY0QUZGMDkxMDU1QTE3 M0IzNTkzQjAeFw0yNTEwMjIyMjI2NDZaFw0yNTEwMjQwMjI2NDZaMDMxMTAvBgNV BAMTKDVDOTlFNzBFMDIxMUFBNTQ2MTk0RTA5Qjk0RTQyQTE1NjE5OTlGQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW0QLWgLwvNrg5Dk8YZitgsQHi 3lz28IHMKiKfNBUNH0haZtSuzibLLGuH7jNRMGwBeQVkg7t8fomIYSpcGEzflXVx LOSrUqLYXqObzKt1iV8ou3fGAr4DtBuhkF1tXfR60PfGeJn2MfEfkUlnxgk/cdwo B8BlbeL3DS3U/zwTyUuFSde1VNCwZ/uKeGpcaw3lDptjh8QBh0aH8Ex+VdRiG2kS vApNhwcR5qNDIGP2tRmQoPrSxcK1w9N2P2VCQXPwqLw3pdM1aJD3xO8KOHqqnfc1 lUKp0N+ZMzERmqD2b6RTQwUuzDRRxAYS95kvfnqMTRWu0TISNpQ33WGZz0w1AgMB AAGjggKGMIICgjAdBgNVHQ4EFgQUXJnnDgIRqlRhlOCblOQqFWGZn8YwHwYDVR0j BBgwFoAU4ZMCvpHJ1CEc30r/CRBVoXOzWTswDgYDVR0PAQH/BAQDAgeAMIGXBgNV HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNm NTBlOC8xMC9FMTkzMDJCRTkxQzlENDIxMUNERjRBRkYwOTEwNTVBMTczQjM1OTNC LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0UxOTMwMkJFOTFDOUQ0MjExQ0RGNEFG RjA5MTA1NUExNzNCMzU5M0IuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYB BQUHMAuGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC8xMC9FMTkz MDJCRTkxQzlENDIxMUNERjRBRkYwOTEwNTVBMTczQjM1OTNCLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA itUnYI+P3ZjEO5wTkhlWzsdsDIN13YIIBcqPO5WeZQjKPw+PeU9XGVoyTDrr3WIM 6o7r9AidQ75dOsbHmPX4CDPM0XKCM8EORQScN4PDHWYgOYmVJrqV9Wh32CS83Xcd QRdReKJ2dgk2ubIZOr2ccQunhon5KETV2uNt7eai+9agSJNRSobHPo4ARwAIFD8I hSF79AWTCp1sytr8WCku7kmfxe/VoaGgIOFJ3B5BUu+joqjXIinT0x8aBfsdgFGO nWqSIOjdP/A5WQOhJADYw58nWUf3GckztOLd2MNvasFFZ34xqcSORLOZLIIebenz s/j1LdJinuBAYJEV8W+Vjw== -----END CERTIFICATE-----Generated at Thu Oct 23 12:59:58 2025 by rpki-client