$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft File: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft (raw, json) Hash identifier: bEVr046APkzzFXtnKzACMu7cf5Jh/DPn/hWMou9W5Qg= Subject key identifier: 35:C9:7E:FA:49:DD:FB:44:F5:73:88:19:E4:DF:69:2F:40:AC:C6:90 Authority key identifier: 13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB Certificate issuer: /CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB Certificate serial: 0C0D2377B3FCCCC1FF0A2785B6301663FEC4C5A4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft Manifest number: 0139 Signing time: Sun 19 Oct 2025 08:41:41 +0000 Manifest this update: Sun 19 Oct 2025 08:36:41 +0000 Manifest next update: Mon 20 Oct 2025 09:42:41 +0000 Files and hashes: 1: 326131343a373538303a6466303a3a2f34382d3438203d3e20323133373239.roa (hash: u/JR7/M6BcKICssdDR7j/sPwWvJTPX2G+FFLBgXrUyU=) 2: 326131343a373538303a6432303a3a2f34342d3438203d3e20313939333130.roa (hash: MgcoEmS08l4kBvePsItue5HuyPIuQGylETDDY3NTtWk=) 3: 326131343a373538303a6431303a3a2f34342d3434203d3e20313939333130.roa (hash: d85Du7DNvyLWzCRKR6UAK4BxtZR8aY0O/ltb7NM7kI0=) 4: 326131343a373538303a6430303a3a2f34342d3434203d3e20313939333130.roa (hash: aLNGjeKxhB+lb52UO94MmUGLP8+twH+NGpyj/wZMn3g=) 5: 326131343a373538303a6430303a3a2f34302d3438203d3e20313939333130.roa (hash: jIRO9mS3d6dPjcdQf+OkOGr/dNujGogdrEuPEpLgZJI=) 6: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl (hash: 7kEifULJG1lMq9KnMoFUBgL2TtzXMIucLTFPYVlQKPA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 09:42:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:0d:23:77:b3:fc:cc:c1:ff:0a:27:85:b6:30:16:63:fe:c4:c5:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB Validity Not Before: Oct 19 08:36:41 2025 GMT Not After : Oct 20 09:42:41 2025 GMT Subject: CN=35C97EFA49DDFB44F5738819E4DF692F40ACC690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a8:32:f1:c2:2c:6d:24:33:f0:b6:64:03:a9: 4f:a9:a9:b6:fd:8f:89:0c:0c:0c:66:ac:07:45:d0: df:60:ba:55:59:75:92:a7:b2:6a:20:12:81:ca:72: cf:a8:8f:4f:12:de:46:0f:5a:64:5f:ae:4e:57:88: 6d:34:f2:21:67:96:06:e4:43:e5:1d:41:4f:a5:8d: 45:a5:ef:29:f4:7f:8e:1f:c0:e3:78:10:d0:4f:54: 9a:5e:7b:b1:31:21:ca:b4:71:0d:72:1a:e0:84:0f: 42:27:2e:c9:cf:26:46:28:b6:62:4d:ad:08:2f:67: 63:4e:17:b1:86:37:76:08:4c:5c:0c:07:6d:fe:2a: d9:26:6c:e2:8b:81:e2:71:12:ac:42:d4:c7:3c:81: fb:52:f5:b2:4d:85:f1:b3:08:cc:88:00:c2:cd:7c: 67:ba:92:f3:22:e8:5d:fc:64:43:aa:e4:e9:36:7b: 08:5e:43:34:b5:03:9e:85:b4:79:39:ba:70:c1:51: 42:ca:06:68:70:62:83:39:fa:cb:66:4c:55:82:90: ca:c9:e3:1e:c5:ab:51:43:ae:97:47:26:be:75:bc: c8:b6:11:23:c2:17:c4:05:43:30:9c:cd:60:8c:24: 87:c5:ed:7b:1c:d9:e2:1d:72:7b:5c:b0:ca:4f:9a: c6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C9:7E:FA:49:DD:FB:44:F5:73:88:19:E4:DF:69:2F:40:AC:C6:90 X509v3 Authority Key Identifier: keyid:13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:bc:6a:01:86:62:56:6b:8e:7b:c8:5a:c2:33:0c:f0:e5:c4: ed:64:9a:91:c7:08:e4:aa:f6:4a:f9:09:f3:70:57:75:83:e5: 9e:f3:82:ac:2d:7a:f0:2b:4c:19:2c:29:b3:ab:e0:15:3f:85: 57:75:bf:fb:8e:6c:e8:e5:04:ab:09:f5:a2:01:aa:d2:f8:db: cd:42:82:13:36:5e:d5:de:03:ea:1e:b9:47:19:ec:b9:bf:ad: b3:72:a6:cb:1c:92:d7:a0:7e:9f:14:ab:c2:64:70:54:a6:c9: fc:a7:05:3c:68:5e:87:86:a4:35:b8:3b:5c:3c:a6:70:03:c8: 21:56:27:9b:27:34:d6:0a:97:80:77:69:05:bd:d9:e0:95:58: 17:96:2a:97:cd:82:bc:71:71:b0:af:8e:fd:aa:eb:62:cc:9c: 9b:09:1d:93:d7:0d:2b:a1:00:76:51:31:3c:7c:32:c2:b0:79: b5:3d:65:66:b7:43:e1:c7:c0:bf:2b:de:e5:17:ba:52:ac:54: b6:cd:1b:c7:5b:e0:09:ba:9b:33:32:2c:97:41:38:8e:5b:80: 8b:45:77:82:6f:78:e8:61:ac:46:de:a3:04:f0:ad:f1:71:9f: a4:8a:fa:cc:9a:7f:35:ec:cd:3f:77:26:75:e6:03:8e:d2:11: ea:6c:0f:ef -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUDA0jd7P8zMH/CieFtjAWY/7ExaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNFMUE5OThGNzdEN0MxRkYyOTU1QzBCNjg4RkVCRkUw RjgxOTZFQjAeFw0yNTEwMTkwODM2NDFaFw0yNTEwMjAwOTQyNDFaMDMxMTAvBgNV BAMTKDM1Qzk3RUZBNDlEREZCNDRGNTczODgxOUU0REY2OTJGNDBBQ0M2OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBqDLxwixtJDPwtmQDqU+pqbb9 j4kMDAxmrAdF0N9gulVZdZKnsmogEoHKcs+oj08S3kYPWmRfrk5XiG008iFnlgbk Q+UdQU+ljUWl7yn0f44fwON4ENBPVJpee7ExIcq0cQ1yGuCED0InLsnPJkYotmJN rQgvZ2NOF7GGN3YITFwMB23+KtkmbOKLgeJxEqxC1Mc8gftS9bJNhfGzCMyIAMLN fGe6kvMi6F38ZEOq5Ok2ewheQzS1A56FtHk5unDBUULKBmhwYoM5+stmTFWCkMrJ 4x7Fq1FDrpdHJr51vMi2ESPCF8QFQzCczWCMJIfF7Xsc2eIdcntcsMpPmsa/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUNcl++knd+0T1c4gZ5N9pL0CsxpAwHwYDVR0j BBgwFoAUE+GpmPd9fB/ylVwLaI/r/g+BluswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDE1NzY0N2MtOTFkNi00YTA0LThhOTEtZDE1Mzg1ZDFm YWIyLzEvMTNFMUE5OThGNzdEN0MxRkYyOTU1QzBCNjg4RkVCRkUwRjgxOTZFQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xM0UxQTk5OEY3N0Q3QzFGRjI5NTVDMEI2 ODhGRUJGRTBGODE5NkVCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzAxNTc2NDdjLTkxZDYtNGEwNC04YTkxLWQxNTM4NWQxZmFiMi8xLzEzRTFBOTk4 Rjc3RDdDMUZGMjk1NUMwQjY4OEZFQkZFMEY4MTk2RUIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQALvGoB hmJWa457yFrCMwzw5cTtZJqRxwjkqvZK+QnzcFd1g+We84KsLXrwK0wZLCmzq+AV P4VXdb/7jmzo5QSrCfWiAarS+NvNQoITNl7V3gPqHrlHGey5v62zcqbLHJLXoH6f FKvCZHBUpsn8pwU8aF6HhqQ1uDtcPKZwA8ghViebJzTWCpeAd2kFvdnglVgXliqX zYK8cXGwr479qutizJybCR2T1w0roQB2UTE8fDLCsHm1PWVmt0Phx8C/K97lF7pS rFS2zRvHW+AJupszMiyXQTiOW4CLRXeCb3joYaxG3qME8K3xcZ+kivrMmn817M0/ dyZ15gOO0hHqbA/v -----END CERTIFICATE-----Generated at Mon Oct 20 03:40:54 2025 by rpki-client