$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft File: E7585B5CD477D90075CDB63109F57279766C2976.mft (raw, json) Hash identifier: z+VCeE/3S99Sl0Y5w4RC0AhLhfGpLfnebe9F/EnvY1Q= Subject key identifier: 91:35:2C:FC:72:64:A6:0B:CF:54:48:40:80:40:16:4F:36:26:6A:44 Authority key identifier: E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76 Certificate issuer: /CN=e7585b5cd477d90075cdb63109f57279766c2976 Certificate serial: 191A304E086B7D4835E3357B736D18D365F9FB09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft Manifest number: 2F Signing time: Tue 11 Nov 2025 04:27:50 +0000 Manifest this update: Tue 11 Nov 2025 04:22:50 +0000 Manifest next update: Wed 12 Nov 2025 08:22:50 +0000 Files and hashes: 1: 323030313a3766383a38393a3a2f34382d3634203d3e203438323830.roa (hash: toWECki1z50+cTDXuuD0ix4TCBXmtlZ4RV70JAsHdxg=) 2: 3139342e3135332e3135382e302f32362d3236203d3e203438323830.roa (hash: vANCAIBQUmiZCdG8mosZNJVFV3jH6SOLvVTY393OKek=) 3: E7585B5CD477D90075CDB63109F57279766C2976.crl (hash: /luu9LKX63TZ56spIiVwbYKg79du5cZOAbGTBtXD5CQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 12 Nov 2025 08:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:1a:30:4e:08:6b:7d:48:35:e3:35:7b:73:6d:18:d3:65:f9:fb:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7585b5cd477d90075cdb63109f57279766c2976 Validity Not Before: Nov 11 04:22:50 2025 GMT Not After : Nov 12 08:22:50 2025 GMT Subject: CN=91352CFC7264A60BCF5448408040164F36266A44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:60:bd:fe:3a:15:b7:26:4f:2f:4c:3a:d3:5c: 26:70:58:b0:4f:85:9f:9b:f3:32:17:a8:94:1b:4b: 5c:8e:a3:ab:76:b0:04:18:f4:5d:96:ff:45:43:0c: 64:dc:62:05:d6:ec:2c:71:ae:ef:e7:77:ed:c5:e9: a1:39:98:15:a6:70:29:bc:68:20:10:ea:64:b4:ab: 45:63:a2:ce:ee:ea:1a:f4:d9:cf:e3:41:a2:77:f5: 49:68:aa:b9:32:57:8b:5a:77:54:ce:1f:72:48:08: 5c:91:58:c9:8e:a9:96:cc:28:01:61:09:c7:d2:fa: ea:f0:d9:00:b1:ca:26:f7:40:36:f2:3d:7e:6b:e6: b8:a0:49:57:28:d2:45:86:eb:90:59:d5:13:d2:5f: a0:af:f5:17:08:c1:f1:b6:a0:67:db:82:e7:65:50: 9e:11:ac:af:0e:36:5f:a9:e5:43:2d:0e:c9:1d:67: f3:f6:87:a8:e8:eb:3e:fa:4d:b8:26:e2:47:61:72: c7:46:f6:cb:06:5b:7c:f1:0c:92:a8:97:8d:bd:fa: c2:65:40:a2:d6:2b:a1:85:cb:e3:3a:52:08:41:00: a5:2c:cf:56:cc:02:75:f0:dd:2e:f0:95:64:74:d5: bf:2c:7c:69:9a:37:02:e2:99:1a:38:41:a4:37:86: 43:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:35:2C:FC:72:64:A6:0B:CF:54:48:40:80:40:16:4F:36:26:6A:44 X509v3 Authority Key Identifier: keyid:E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:40:8e:b3:a2:dc:7d:aa:ab:ab:2b:cd:49:f9:da:24:c2:35: 56:dc:72:c2:ef:3b:e4:c1:17:38:0c:ee:23:8e:3e:e9:81:3d: 5a:37:93:6b:c2:f6:43:59:4a:d2:99:6b:55:ce:f1:86:63:bb: 18:9f:21:d1:98:cc:55:e7:28:7d:16:17:07:28:2e:37:08:d9: b6:56:24:28:fe:5b:aa:0b:72:30:4a:d5:67:5c:59:a7:7d:77: 7c:1e:98:d6:70:79:43:ac:38:a2:45:fb:34:69:fc:d9:58:b3: 83:a6:11:11:a3:2f:ca:03:9c:0a:6e:89:cc:aa:01:90:d2:2e: 5c:8e:9b:dd:78:fa:75:0f:38:b6:2b:7f:fb:ba:84:ae:bd:cf: 38:be:a2:2b:0e:0e:6a:eb:7a:83:fe:1c:38:7c:cf:39:5b:96: 76:4b:1b:7f:47:28:d7:ea:68:9f:8e:d2:a8:55:f4:87:0a:30: 43:e3:2a:80:2d:05:93:1b:a7:a4:d8:dd:f7:4e:57:a1:7e:4f: 21:ca:54:ac:24:54:3c:63:c9:55:df:e5:94:e3:5c:bd:ec:fc: 76:53:2d:fb:e4:02:55:cc:58:39:46:d1:7a:af:01:1f:3c:b2: ef:46:02:06:e8:f1:3f:62:60:5e:fb:0b:b4:89:93:eb:0d:f6: 5e:ea:7e:0b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUGRowTghrfUg14zV7c20Y02X5+wkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTc1ODViNWNkNDc3ZDkwMDc1Y2RiNjMxMDlmNTcyNzk3 NjZjMjk3NjAeFw0yNTExMTEwNDIyNTBaFw0yNTExMTIwODIyNTBaMDMxMTAvBgNV BAMTKDkxMzUyQ0ZDNzI2NEE2MEJDRjU0NDg0MDgwNDAxNjRGMzYyNjZBNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkYL3+OhW3Jk8vTDrTXCZwWLBP hZ+b8zIXqJQbS1yOo6t2sAQY9F2W/0VDDGTcYgXW7Cxxru/nd+3F6aE5mBWmcCm8 aCAQ6mS0q0Vjos7u6hr02c/jQaJ39UloqrkyV4tad1TOH3JICFyRWMmOqZbMKAFh CcfS+urw2QCxyib3QDbyPX5r5rigSVco0kWG65BZ1RPSX6Cv9RcIwfG2oGfbgudl UJ4RrK8ONl+p5UMtDskdZ/P2h6jo6z76Tbgm4kdhcsdG9ssGW3zxDJKol429+sJl QKLWK6GFy+M6UghBAKUsz1bMAnXw3S7wlWR01b8sfGmaNwLimRo4QaQ3hkMXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUkTUs/HJkpgvPVEhAgEAWTzYmakQwHwYDVR0j BBgwFoAU51hbXNR32QB1zbYxCfVyeXZsKXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTMwZGU4NGItNDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1 YjQ5LzEvRTc1ODVCNUNENDc3RDkwMDc1Q0RCNjMxMDlGNTcyNzk3NjZDMjk3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxaGJYTlIzMlFCMXpiWXhDZlZ5ZVha c0tYWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00 MDBhLTRmZDEtYWI4YS1lNzYxNmUyNDViNDkvMS9FNzU4NUI1Q0Q0NzdEOTAwNzVD REI2MzEwOUY1NzI3OTc2NkMyOTc2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMkCOs6LcfaqrqyvNSfna JMI1Vtxywu875MEXOAzuI44+6YE9WjeTa8L2Q1lK0plrVc7xhmO7GJ8h0ZjMVeco fRYXByguNwjZtlYkKP5bqgtyMErVZ1xZp313fB6Y1nB5Q6w4okX7NGn82Vizg6YR EaMvygOcCm6JzKoBkNIuXI6b3Xj6dQ84tit/+7qErr3POL6iKw4Oaut6g/4cOHzP OVuWdksbf0co1+pon47SqFX0hwowQ+MqgC0FkxunpNjd905XoX5PIcpUrCRUPGPJ Vd/llONcvez8dlMt++QCVcxYOUbReq8BHzyy70YCBujxP2JgXvsLtImT6w32Xup+ Cw== -----END CERTIFICATE-----Generated at Tue Nov 11 12:37:38 2025 by rpki-client