$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft File: 47E9555355C6B007AACD5D45BF41E3383E991641.mft (raw, json) Hash identifier: SI1eN0q6yKfb5MdoNntgQQt2yuV/R7Qamg/whzctO84= Subject key identifier: C0:A9:1E:82:85:0C:83:94:6D:B8:F6:64:D0:2A:93:07:D0:89:23:6F Authority key identifier: 47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41 Certificate issuer: /CN=47E9555355C6B007AACD5D45BF41E3383E991641 Certificate serial: 1EBD75EC330F72F2FC6FCC7A18C5D0C6BBDB9142 Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft Manifest number: 0490 Signing time: Tue 28 Oct 2025 17:37:25 +0000 Manifest this update: Tue 28 Oct 2025 17:32:25 +0000 Manifest next update: Wed 29 Oct 2025 20:08:25 +0000 Files and hashes: 1: 3139382e3138302e3135312e302f32342d3234203d3e20313939353138.roa (hash: 3ipGYMDZ54FZdaI4eg46OMa/ZV0a0Q3rHUY9RUekrv8=) 2: 47E9555355C6B007AACD5D45BF41E3383E991641.crl (hash: Zs09Rljti3++nhfDyWqWbNl9E7mJ6D5P86KEGmJMqFo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Oct 2025 11:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:bd:75:ec:33:0f:72:f2:fc:6f:cc:7a:18:c5:d0:c6:bb:db:91:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47E9555355C6B007AACD5D45BF41E3383E991641 Validity Not Before: Oct 28 17:32:25 2025 GMT Not After : Oct 29 20:08:25 2025 GMT Subject: CN=C0A91E82850C83946DB8F664D02A9307D089236F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8c:2c:ef:cd:45:e3:a9:38:f4:0b:9c:8e:4e: 0e:52:1c:8a:a8:26:b0:4d:dd:35:16:ae:9e:e1:9a: 63:ec:40:37:65:4e:2e:2a:94:7e:5d:57:ec:9e:ba: 70:fd:2c:ea:74:d4:ab:e7:03:3a:0a:94:f0:48:dc: 71:cc:9d:0c:f7:73:23:90:e4:f6:f0:aa:9b:dd:39: 53:36:89:cc:eb:f6:d1:f1:50:dd:c2:97:98:b7:3a: 15:8e:d6:f8:45:af:fb:43:ed:ad:e8:fe:7a:36:6f: c2:f5:4f:bf:f8:b7:c5:2d:97:86:53:80:ab:c5:3c: fa:6e:88:3f:ce:fb:9f:4b:1b:b5:22:7d:29:7d:5d: 03:01:2e:c0:36:b5:12:96:db:1d:d9:61:f4:3a:cf: a2:40:f9:c6:f2:7c:3a:43:bf:ff:06:21:02:df:af: a4:85:b5:9c:f2:4f:fe:1c:b5:00:85:24:e2:c8:6e: 3f:e4:24:fa:1c:f8:f9:5e:e7:c0:76:23:23:20:97: 02:f0:f4:a2:2d:88:9b:14:a9:f4:7b:a6:ee:d4:b9: 3f:0d:e0:bd:20:e7:21:f9:a1:80:2f:35:97:4f:31: 54:26:28:92:3a:94:72:7e:93:7b:2a:8f:75:6c:40: e3:dc:02:b2:65:1a:e8:b5:35:b5:e9:2a:7b:56:1c: e4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A9:1E:82:85:0C:83:94:6D:B8:F6:64:D0:2A:93:07:D0:89:23:6F X509v3 Authority Key Identifier: keyid:47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:0e:74:4b:c4:65:21:34:57:de:7b:b8:cb:f0:da:2a:e0:25: 66:92:4a:9e:cd:89:2a:5c:2f:4a:01:16:59:e7:d0:9e:81:a1: 8f:0d:d8:e7:1c:1d:f6:69:d9:27:c7:30:59:f4:ea:ae:75:7b: c3:e9:9e:18:2b:4c:f9:aa:07:bd:30:3c:c6:78:19:c4:c2:af: 17:f6:ab:50:9e:f8:58:94:1d:a5:3a:05:ba:57:d2:2a:e8:ad: 23:b1:69:e1:22:89:f4:49:65:d1:5f:7c:b6:bb:01:2e:e4:8c: 57:ec:76:0c:b2:55:0e:2a:c2:1e:f0:ce:68:5b:b8:1a:34:68: 60:b1:38:ed:6f:a7:9c:b8:a1:97:7e:cc:77:b7:2c:75:c2:15: cc:bf:70:6e:a7:6d:5f:22:72:7b:fd:0d:63:80:bf:18:19:f8: 11:39:16:a1:c5:87:60:b4:a8:ec:76:16:86:86:6a:20:08:33: 14:dd:a3:c0:77:d5:d0:b0:2d:82:15:8a:5c:c5:08:93:98:67: 56:44:8a:5a:c4:8f:1d:26:89:6d:b8:10:be:e6:e3:5b:7e:ea: 91:32:4c:b4:ea:e9:62:27:0b:2c:7c:b1:bd:8c:f9:6d:66:02: 33:c9:ba:e5:2d:06:7f:e0:74:cd:e0:c5:b8:72:d5:02:f4:87: 67:a8:3a:59 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUHr117DMPcvL8b8x6GMXQxrvbkUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdFOTU1NTM1NUM2QjAwN0FBQ0Q1RDQ1QkY0MUUzMzgz RTk5MTY0MTAeFw0yNTEwMjgxNzMyMjVaFw0yNTEwMjkyMDA4MjVaMDMxMTAvBgNV BAMTKEMwQTkxRTgyODUwQzgzOTQ2REI4RjY2NEQwMkE5MzA3RDA4OTIzNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/jCzvzUXjqTj0C5yOTg5SHIqo JrBN3TUWrp7hmmPsQDdlTi4qlH5dV+yeunD9LOp01KvnAzoKlPBI3HHMnQz3cyOQ 5PbwqpvdOVM2iczr9tHxUN3Cl5i3OhWO1vhFr/tD7a3o/no2b8L1T7/4t8Utl4ZT gKvFPPpuiD/O+59LG7UifSl9XQMBLsA2tRKW2x3ZYfQ6z6JA+cbyfDpDv/8GIQLf r6SFtZzyT/4ctQCFJOLIbj/kJPoc+Ple58B2IyMglwLw9KItiJsUqfR7pu7UuT8N 4L0g5yH5oYAvNZdPMVQmKJI6lHJ+k3sqj3VsQOPcArJlGui1NbXpKntWHOQlAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUwKkegoUMg5RtuPZk0CqTB9CJI28wHwYDVR0j BBgwFoAUR+lVU1XGsAeqzV1Fv0HjOD6ZFkEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzQvNDdFOTU1NTM1NUM2QjAwN0FBQ0Q1RDQ1QkY0MUUzMzgzRTk5MTY0MS5j cmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJnLm5l dC9ycGtpL1JHbmV0LU9VL1ItbFZVMVhHc0FlcXpWMUZ2MEhqT0Q2WkZrRS5jZXIw gZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9yc3luYy5w YWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZTdkNTVmNy1lZTYwLTQwMDUt YmFkNy1iNDI4MThjZjUwZTgvNC80N0U5NTU1MzU1QzZCMDA3QUFDRDVENDVCRjQx RTMzODNFOTkxNjQxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAE oAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQ50S8RlITRX3nu4y/DaKuAlZpJKns2J KlwvSgEWWefQnoGhjw3Y5xwd9mnZJ8cwWfTqrnV7w+meGCtM+aoHvTA8xngZxMKv F/arUJ74WJQdpToFulfSKuitI7Fp4SKJ9Ell0V98trsBLuSMV+x2DLJVDirCHvDO aFu4GjRoYLE47W+nnLihl37Md7csdcIVzL9wbqdtXyJye/0NY4C/GBn4ETkWocWH YLSo7HYWhoZqIAgzFN2jwHfV0LAtghWKXMUIk5hnVkSKWsSPHSaJbbgQvubjW37q kTJMtOrpYicLLHyxvYz5bWYCM8m65S0Gf+B0zeDFuHLVAvSHZ6g6WQ== -----END CERTIFICATE-----Generated at Wed Oct 29 07:08:21 2025 by rpki-client