$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft File: 75A838E02C61800F73D3019DE0A51F567B64BC0E.mft (raw, json) Hash identifier: toW9AM6Icit7FCGGH88CbDbOwD66UaoaDTFBVNLrgkM= Subject key identifier: 81:B6:EB:45:A2:2E:37:AD:42:0E:1B:8E:23:84:EA:07:06:B0:36:C9 Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E Certificate issuer: /CN=75a838e02c61800f73d3019de0a51f567b64bc0e Certificate serial: 53F43AE6A8832C962D30D8F95C8C5BD30219C4A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft Manifest number: 28 Signing time: Sat 25 Oct 2025 19:00:02 +0000 Manifest this update: Sat 25 Oct 2025 18:55:02 +0000 Manifest next update: Sun 26 Oct 2025 19:41:02 +0000 Files and hashes: 1: AS44324.asa (hash: G7vPN3CliC53tqiTYNunmYCXaPCEPgIMK6mKAwpMfm8=) 2: 326130663a316363353a31303a3a2f34342d3438203d3e20313533333736.roa (hash: nbwRx9WqOhyBtRMERDbvSdUK0ttelKjtK9W21b7svLM=) 3: AS214720.asa (hash: hnP8GbqTWKybeF2t8CLvmja+ltaRCzJDrYHHLB8PYL8=) 4: 75A838E02C61800F73D3019DE0A51F567B64BC0E.crl (hash: TFGuHwW05ghvNeA1vp+0iPyzf+ggtVEwpEy6QdTcjoU=) 5: 326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa (hash: iQmIjSS34MBH0s/+nSwsAMtLHiibwoN+yHne70yG4xY=) 6: AFF4C2C7543A73C42DFA94F9950C37BDC859D280.cer (hash: E3ySvizPdaZ0ur8D42buEVT82HdPc6JhqaWOeLvQtOI=) 7: 326130663a316363353a6530303a3a2f34302d3438203d3e20323034353339.roa (hash: egFgP8yYaSjaS5VDE5+uLtoXIKDL2ma41MOdLca3pro=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 19:41:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:f4:3a:e6:a8:83:2c:96:2d:30:d8:f9:5c:8c:5b:d3:02:19:c4:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e Validity Not Before: Oct 25 18:55:02 2025 GMT Not After : Oct 26 19:41:02 2025 GMT Subject: CN=81B6EB45A22E37AD420E1B8E2384EA0706B036C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:14:f2:3f:65:70:53:c0:d8:05:b0:fd:39:43: 9d:19:3f:1e:43:92:c3:38:67:4d:6e:b8:40:00:20: 32:84:e0:ef:fa:df:3e:f3:2f:dc:f5:5a:f5:8a:e6: 6c:b1:82:d1:56:f4:b6:d7:62:62:71:39:df:a1:d3: df:82:a6:1f:a9:63:48:18:e9:f6:54:7d:1f:f6:43: ce:1c:4d:61:a2:b4:27:e4:74:d8:36:d4:d4:9e:5b: 60:31:f5:03:9b:f5:e9:19:d4:ea:ec:83:4e:4f:8d: c4:45:f6:6e:96:1e:f8:6e:14:df:68:ea:9c:b7:17: c8:c4:2e:58:57:22:4a:16:27:60:53:f9:4f:2f:39: 00:18:ab:9a:d9:02:d3:83:20:03:84:05:67:7c:b5: 0a:9c:f1:27:64:d2:28:f9:cb:0d:b4:b4:c1:a5:5b: 54:8c:65:c6:5c:b8:b6:27:4e:a0:08:d7:5b:64:dd: 75:dc:ef:6e:46:1a:6b:ce:88:dc:f1:aa:ef:30:ae: e3:1d:cf:b3:37:6c:10:24:f9:0d:4c:74:68:d4:83: ed:f0:b4:57:8f:05:7e:00:f3:40:27:9e:db:c9:e9: 00:60:83:46:07:15:7b:be:df:3c:df:d8:53:3f:ea: d1:4a:2c:e4:1d:70:5c:fc:98:ef:e0:bf:8d:a8:35: ce:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B6:EB:45:A2:2E:37:AD:42:0E:1B:8E:23:84:EA:07:06:B0:36:C9 X509v3 Authority Key Identifier: keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:41:b2:4c:b2:88:db:85:dd:9f:a5:69:8e:ee:a5:09:de:0b: ca:e6:99:a9:04:41:5c:45:07:ad:eb:55:a0:4f:fb:e0:6b:74: 93:e1:62:80:23:8d:cf:48:16:1d:76:94:3f:38:ca:7d:63:06: ab:06:27:28:5a:57:ce:60:80:65:c1:26:5f:c9:cf:8e:69:b2: 80:0b:be:6c:89:ce:0a:b9:f4:3e:60:81:f0:5d:7f:63:28:76: 7e:4b:45:d7:9c:e7:3c:c6:fb:f6:4a:05:76:ee:bf:5f:35:72: 98:0c:21:16:88:b3:cd:85:c0:78:5d:39:09:e4:a4:8a:85:b5: 6d:02:9f:11:b3:6e:af:1b:17:b3:75:db:b2:9a:b1:dd:9f:fb: e4:14:ff:a0:60:e6:4e:5b:33:31:f1:d3:e5:69:81:46:ba:cb: 8a:59:6d:e2:f7:2c:f0:89:ee:7a:93:66:c8:24:25:f8:f9:f2: 7b:67:07:d6:23:54:36:d0:08:8e:9f:ea:cf:67:06:07:58:06: f4:d6:f1:aa:e9:5e:9c:f9:d6:df:d8:b1:b6:98:e0:be:77:f9: 64:39:fc:7f:0c:62:8b:81:1e:b8:e5:d4:a1:cb:b9:ca:f1:49: 03:52:ab:55:f8:60:5d:ca:0f:d8:e9:8c:d0:cc:88:3f:c4:29: f5:0d:e2:61 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUU/Q65qiDLJYtMNj5XIxb0wIZxKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVhODM4ZTAyYzYxODAwZjczZDMwMTlkZTBhNTFmNTY3 YjY0YmMwZTAeFw0yNTEwMjUxODU1MDJaFw0yNTEwMjYxOTQxMDJaMDMxMTAvBgNV BAMTKDgxQjZFQjQ1QTIyRTM3QUQ0MjBFMUI4RTIzODRFQTA3MDZCMDM2QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+FPI/ZXBTwNgFsP05Q50ZPx5D ksM4Z01uuEAAIDKE4O/63z7zL9z1WvWK5myxgtFW9LbXYmJxOd+h09+Cph+pY0gY 6fZUfR/2Q84cTWGitCfkdNg21NSeW2Ax9QOb9ekZ1Orsg05PjcRF9m6WHvhuFN9o 6py3F8jELlhXIkoWJ2BT+U8vOQAYq5rZAtODIAOEBWd8tQqc8Sdk0ij5yw20tMGl W1SMZcZcuLYnTqAI11tk3XXc725GGmvOiNzxqu8wruMdz7M3bBAk+Q1MdGjUg+3w tFePBX4A80AnntvJ6QBgg0YHFXu+3zzf2FM/6tFKLOQdcFz8mO/gv42oNc7NAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUgbbrRaIuN61CDhuOI4TqBwawNskwHwYDVR0j BBgwFoAUdag44CxhgA9z0wGd4KUfVntkvA4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYtNGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJj MjVkLzAvNzVBODM4RTAyQzYxODAwRjczRDMwMTlERTBBNTFGNTY3QjY0QkMwRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhZzQ0Q3hoZ0E5ejB3R2Q0S1VmVm50 a3ZBNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMjZlYjEzNi00 ZmU1LTRlNjEtYTRkOC1mMzQ1ZjUyYmMyNWQvMC83NUE4MzhFMDJDNjE4MDBGNzNE MzAxOURFMEE1MUY1NjdCNjRCQzBFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlkGyTLKI24Xdn6Vpju6l Cd4LyuaZqQRBXEUHretVoE/74Gt0k+FigCONz0gWHXaUPzjKfWMGqwYnKFpXzmCA ZcEmX8nPjmmygAu+bInOCrn0PmCB8F1/Yyh2fktF15znPMb79koFdu6/XzVymAwh FoizzYXAeF05CeSkioW1bQKfEbNurxsXs3Xbspqx3Z/75BT/oGDmTlszMfHT5WmB RrrLillt4vcs8InuepNmyCQl+Pnye2cH1iNUNtAIjp/qz2cGB1gG9NbxqulenPnW 39ixtpjgvnf5ZDn8fwxii4EeuOXUocu5yvFJA1KrVfhgXcoP2OmM0MyIP8Qp9Q3i YQ== -----END CERTIFICATE-----Generated at Sat Oct 25 22:14:41 2025 by rpki-client