$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft File: 547BC28C92A229A5AC78C0DE287D89CE37726409.mft (raw, json) Hash identifier: VpZGEhcubSm2sSNhpWCg2fM0/gLJleyUFbwpHbk0XkA= Subject key identifier: 1F:F6:59:D7:C5:59:D8:A2:4C:CB:CD:7D:34:4F:72:82:15:B7:B1:EC Authority key identifier: 54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09 Certificate issuer: /CN=547bc28c92a229a5ac78c0de287d89ce37726409 Certificate serial: 03BA44DCCBA0B63ED853C1E261CD248953F45428 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft Manifest number: 0256 Signing time: Sat 01 Nov 2025 22:05:23 +0000 Manifest this update: Sat 01 Nov 2025 22:00:23 +0000 Manifest next update: Mon 03 Nov 2025 01:00:23 +0000 Files and hashes: 1: 323030313a3637383a6362303a3a2f34382d3438203d3e20323034393331.roa (hash: dHqMpXO8Fn1QmdwMgzIUNohViMqf6+wcagP7yILYRFI=) 2: 323030313a3637383a6362303a3a2f34382d3438203d3e203630343331.roa (hash: utwrqG/1k6qyhjzxqxfsIfDkj33KE0HmwhjLx5CU12Y=) 3: AS204931.asa (hash: zM51UdB/A/IZqHl1wn4NbUbXZwQrun9iugvDxBnKfTA=) 4: AS60431.asa (hash: W8B2btvY8654NatOoBPRRMV+PSLMlHitlzk3n1vMklQ=) 5: 547BC28C92A229A5AC78C0DE287D89CE37726409.crl (hash: hYb3pII4Q+Ojh8vCkrkPdGKNbOGGeULR+o1TJZMcIqg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 03 Nov 2025 01:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:ba:44:dc:cb:a0:b6:3e:d8:53:c1:e2:61:cd:24:89:53:f4:54:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=547bc28c92a229a5ac78c0de287d89ce37726409 Validity Not Before: Nov 1 22:00:23 2025 GMT Not After : Nov 3 01:00:23 2025 GMT Subject: CN=1FF659D7C559D8A24CCBCD7D344F728215B7B1EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:16:d0:dc:2b:04:dc:30:d3:e9:68:d9:08:05: 2c:10:03:58:20:18:d5:05:a0:08:61:67:84:c4:33: c5:28:48:f2:b5:9b:5f:b1:6c:56:49:fd:30:9e:5b: 88:46:e2:61:9a:fa:bb:cb:c0:ca:df:79:e9:c2:3e: 1b:1a:77:40:28:68:f0:4b:01:3f:2f:76:54:b2:4a: ef:42:95:19:80:3d:ad:4d:58:60:7c:a6:0e:1b:03: e7:72:f9:b0:6e:27:d6:9d:66:5e:4d:08:6c:b1:fe: 47:6e:a1:3c:6c:cc:53:77:db:4a:02:cb:90:ce:e2: 7b:a3:f9:cb:b0:9b:ea:f7:87:10:af:b2:e1:76:21: dd:3a:90:91:9d:31:9f:e4:1f:50:80:83:cd:1d:4f: 91:98:91:e1:9c:fd:03:91:45:71:de:40:a6:5a:e4: d2:fe:9f:f9:af:19:de:cb:6d:9e:63:ff:42:5e:57: f5:c0:30:ee:b0:01:30:4c:2d:25:08:4a:f1:9d:1a: 2c:aa:39:8f:26:90:7a:de:e5:c7:98:4e:95:8b:0a: 1d:d6:05:b4:55:60:89:f4:96:ae:51:68:aa:81:e4: f3:d9:c8:8d:9d:6a:d2:45:5d:65:64:cc:10:6e:8a: 9d:40:fe:59:97:a2:27:27:9b:33:c4:30:87:38:66: 92:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F6:59:D7:C5:59:D8:A2:4C:CB:CD:7D:34:4F:72:82:15:B7:B1:EC X509v3 Authority Key Identifier: keyid:54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:59:f3:44:73:0a:19:f0:98:a7:05:4b:fc:e8:fe:02:1d:dd: 89:60:73:f4:fa:eb:2f:09:69:0d:58:05:77:7d:20:5d:4d:db: 16:ad:d9:b2:f4:fd:1b:3c:97:08:89:ff:3f:1c:56:fd:d0:4c: ee:e1:f4:a8:f3:0b:3e:fd:70:d4:4d:06:dd:dc:b8:d4:02:43: 3b:c7:6d:ca:a4:ce:3a:6a:08:2c:b2:16:b8:9f:20:38:e1:b4: b6:b6:2c:8e:fb:6d:73:11:65:10:f3:ee:ab:8b:99:8c:d5:4a: ef:69:35:95:bc:b4:66:85:4c:7a:32:4e:fa:88:6a:86:74:52: 7b:65:9a:ce:ff:e0:83:5a:03:4a:d0:15:77:a3:02:ae:aa:df: 1a:72:4a:85:23:ad:02:1e:f4:57:6f:11:32:6b:38:b7:20:7d: 97:ed:6a:c6:8b:1f:45:c8:1b:2e:43:89:c4:88:fc:1a:ee:3e: 5b:64:ac:49:f5:1d:1f:70:bd:bf:69:a1:24:94:8b:1d:0c:3d: bb:e2:8b:40:23:e5:b4:7e:65:36:36:5c:b8:95:55:61:7b:e0: cc:00:2f:84:ac:8b:8a:ed:72:5b:c8:54:a7:49:7d:53:4a:ef: 22:4c:22:eb:dd:2f:31:66:50:1b:40:6d:e6:54:b9:e9:77:b7: a4:03:54:db -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUA7pE3Mugtj7YU8HiYc0kiVP0VCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ3YmMyOGM5MmEyMjlhNWFjNzhjMGRlMjg3ZDg5Y2Uz NzcyNjQwOTAeFw0yNTExMDEyMjAwMjNaFw0yNTExMDMwMTAwMjNaMDMxMTAvBgNV BAMTKDFGRjY1OUQ3QzU1OUQ4QTI0Q0NCQ0Q3RDM0NEY3MjgyMTVCN0IxRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwFtDcKwTcMNPpaNkIBSwQA1gg GNUFoAhhZ4TEM8UoSPK1m1+xbFZJ/TCeW4hG4mGa+rvLwMrfeenCPhsad0AoaPBL AT8vdlSySu9ClRmAPa1NWGB8pg4bA+dy+bBuJ9adZl5NCGyx/kduoTxszFN320oC y5DO4nuj+cuwm+r3hxCvsuF2Id06kJGdMZ/kH1CAg80dT5GYkeGc/QORRXHeQKZa 5NL+n/mvGd7LbZ5j/0JeV/XAMO6wATBMLSUISvGdGiyqOY8mkHre5ceYTpWLCh3W BbRVYIn0lq5RaKqB5PPZyI2datJFXWVkzBBuip1A/lmXoicnmzPEMIc4ZpLzAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUH/ZZ18VZ2KJMy819NE9yghW3sewwHwYDVR0j BBgwFoAUVHvCjJKiKaWseMDeKH2JzjdyZAkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGY0OWQ3ZjctYmIzZi00MTg3LWJlMjktNTllZjJkODkw MzlhLzAvNTQ3QkMyOEM5MkEyMjlBNUFDNzhDMERFMjg3RDg5Q0UzNzcyNjQwOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1ZIdkNqSktpS2FXc2VNRGVLSDJKempk eVpBay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZjQ5ZDdmNy1i YjNmLTQxODctYmUyOS01OWVmMmQ4OTAzOWEvMC81NDdCQzI4QzkyQTIyOUE1QUM3 OEMwREUyODdEODlDRTM3NzI2NDA5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhlnzRHMKGfCYpwVL/Oj+ Ah3diWBz9PrrLwlpDVgFd30gXU3bFq3ZsvT9GzyXCIn/PxxW/dBM7uH0qPMLPv1w 1E0G3dy41AJDO8dtyqTOOmoILLIWuJ8gOOG0trYsjvttcxFlEPPuq4uZjNVK72k1 lby0ZoVMejJO+ohqhnRSe2Wazv/gg1oDStAVd6MCrqrfGnJKhSOtAh70V28RMms4 tyB9l+1qxosfRcgbLkOJxIj8Gu4+W2SsSfUdH3C9v2mhJJSLHQw9u+KLQCPltH5l NjZcuJVVYXvgzAAvhKyLiu1yW8hUp0l9U0rvIkwi690vMWZQG0Bt5lS56Xe3pANU 2w== -----END CERTIFICATE-----Generated at Sun Nov 2 12:55:41 2025 by rpki-client