$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft File: A4A082EAE8EF48C7B407C40E742479EADD862089.mft (raw, json) Hash identifier: b342z6aBhq4vUVAkb0yfo8ahGcnXyGwkbxhWBvPrIus= Subject key identifier: 78:00:19:6F:FC:E5:D3:DC:8F:8D:AD:FA:57:81:25:84:13:E3:DF:B3 Authority key identifier: A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 Certificate issuer: /CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Certificate serial: 7A140FEB293135FFEABA267FC861D54F063AA8BD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft Manifest number: 0158 Signing time: Sun 19 Oct 2025 14:48:41 +0000 Manifest this update: Sun 19 Oct 2025 14:43:41 +0000 Manifest next update: Mon 20 Oct 2025 17:48:41 +0000 Files and hashes: 1: 326130663a383563313a3339303a3a2f34382d3438203d3e20323135343730.roa (hash: /ul2/wI6OjmF90yvjh37x7TtdkRoh3MUQv78SD8t7W0=) 2: 326130663a383563313a6234643a3a2f34382d3438203d3e20323133343238.roa (hash: MorJ8/zqWP+ENMZ78Dfg8lahRlU/VfcwHwmQyMuE7hc=) 3: A4A082EAE8EF48C7B407C40E742479EADD862089.crl (hash: bgNzyq/anl/1YMZL9cSYc1MxoagM5kcYh0Kn0hONKtY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 17:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:14:0f:eb:29:31:35:ff:ea:ba:26:7f:c8:61:d5:4f:06:3a:a8:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Validity Not Before: Oct 19 14:43:41 2025 GMT Not After : Oct 20 17:48:41 2025 GMT Subject: CN=7800196FFCE5D3DC8F8DADFA5781258413E3DFB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:68:f4:0d:c7:28:d4:eb:16:64:df:88:f5:92: ac:25:cc:17:0f:b0:d5:5b:67:87:77:c9:39:4a:12: 95:69:17:fe:9b:63:89:0f:ac:92:fa:53:35:82:de: 5d:85:66:04:7f:28:33:32:b7:a7:35:a3:c2:e0:4e: 3d:a8:f6:77:00:d0:c1:63:84:5d:9e:ca:be:d5:e1: 46:80:74:59:44:59:78:cc:42:39:3d:88:2e:69:74: c4:c9:d5:2c:b9:40:88:1f:5b:64:ea:17:50:e4:9c: e9:e8:a8:16:3f:f2:ae:98:2f:b4:4a:4c:23:27:2a: 08:52:8c:a7:2d:3f:69:6b:e8:a9:68:36:7e:37:40: 55:f3:05:32:6d:d4:f0:6a:c7:4f:a9:37:21:4b:fc: e6:cb:96:7d:8f:43:d3:30:99:0e:11:ac:16:e6:76: 43:15:7f:ea:9c:1a:05:31:69:61:9b:56:a9:41:28: ff:97:f1:d5:ab:71:0d:fe:08:19:da:85:db:b5:ee: e0:56:6e:aa:0f:1f:19:c2:0f:d8:98:ea:70:4e:e7: 45:17:ed:53:8d:95:af:c5:97:df:e8:98:61:d7:e9: ec:92:1e:f0:93:87:4c:42:4c:46:46:7c:a2:d3:f2: f4:a6:30:bf:da:4b:78:79:14:01:9a:c5:43:24:e8: f8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:00:19:6F:FC:E5:D3:DC:8F:8D:AD:FA:57:81:25:84:13:E3:DF:B3 X509v3 Authority Key Identifier: keyid:A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:28:1b:50:85:29:4a:65:2a:21:34:da:7f:c7:2f:36:f1:7b: a2:0f:fa:55:96:04:00:ae:7c:e1:eb:9e:18:7a:8a:ce:b3:b1: 39:a5:d8:f6:72:59:83:7c:e1:61:98:47:31:67:57:69:01:8d: d5:76:f3:1a:45:e0:99:c7:29:10:f6:aa:38:c2:06:04:eb:c0: 90:2d:8b:21:27:98:0a:c4:54:e8:9e:33:b5:0c:1c:ee:29:e8: 47:fc:71:16:d5:74:74:f9:f3:0c:70:89:34:ed:12:e8:a0:67: 3d:0e:b3:0c:f6:e9:5f:cd:b3:de:03:9d:18:9b:1e:52:eb:b6: 5f:a2:e2:3b:ab:41:8f:30:2e:22:1d:a2:47:d3:d7:94:1c:d6: d7:49:36:f6:46:10:5f:0c:05:cd:5d:97:bb:7c:5b:1c:35:eb: af:39:13:de:03:77:6a:14:3c:47:2f:31:f0:29:15:15:58:75: 1d:c1:71:88:76:c6:3a:2f:b7:94:ee:59:2b:c2:f6:89:c8:f7: 67:87:ba:3a:42:0d:5e:cc:cf:a3:5a:f4:39:de:dc:35:e8:90: e3:42:50:ea:af:71:8c:bf:65:6e:f5:dd:a4:49:b6:ac:4b:0b: e4:a0:e4:ee:85:23:66:c5:7e:c8:65:f7:be:4d:03:a9:c0:85: c7:53:74:e1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUehQP6ykxNf/quiZ/yGHVTwY6qL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFE RDg2MjA4OTAeFw0yNTEwMTkxNDQzNDFaFw0yNTEwMjAxNzQ4NDFaMDMxMTAvBgNV BAMTKDc4MDAxOTZGRkNFNUQzREM4RjhEQURGQTU3ODEyNTg0MTNFM0RGQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAaPQNxyjU6xZk34j1kqwlzBcP sNVbZ4d3yTlKEpVpF/6bY4kPrJL6UzWC3l2FZgR/KDMyt6c1o8LgTj2o9ncA0MFj hF2eyr7V4UaAdFlEWXjMQjk9iC5pdMTJ1Sy5QIgfW2TqF1DknOnoqBY/8q6YL7RK TCMnKghSjKctP2lr6KloNn43QFXzBTJt1PBqx0+pNyFL/ObLln2PQ9MwmQ4RrBbm dkMVf+qcGgUxaWGbVqlBKP+X8dWrcQ3+CBnahdu17uBWbqoPHxnCD9iY6nBO50UX 7VONla/Fl9/omGHX6eySHvCTh0xCTEZGfKLT8vSmML/aS3h5FAGaxUMk6PgxAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUeAAZb/zl09yPja36V4ElhBPj37MwHwYDVR0j BBgwFoAUpKCC6ujvSMe0B8QOdCR56t2GIIkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzEvQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFERDg2MjA4OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9BNEEwODJFQUU4RUY0OEM3QjQwN0M0MEU3 NDI0NzlFQUREODYyMDg5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE5YWE5ZGE3LWYxZTQtNGQ5OC1iZjk1LTlmZGZjZjQ0OGY3Ny8xL0E0QTA4MkVB RThFRjQ4QzdCNDA3QzQwRTc0MjQ3OUVBREQ4NjIwODkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAdKBtQ hSlKZSohNNp/xy828XuiD/pVlgQArnzh654YeorOs7E5pdj2clmDfOFhmEcxZ1dp AY3VdvMaReCZxykQ9qo4wgYE68CQLYshJ5gKxFTonjO1DBzuKehH/HEW1XR0+fMM cIk07RLooGc9DrMM9ulfzbPeA50Ymx5S67ZfouI7q0GPMC4iHaJH09eUHNbXSTb2 RhBfDAXNXZe7fFscNeuvORPeA3dqFDxHLzHwKRUVWHUdwXGIdsY6L7eU7lkrwvaJ yPdnh7o6Qg1ezM+jWvQ53tw16JDjQlDqr3GMv2Vu9d2kSbasSwvkoOTuhSNmxX7I Zfe+TQOpwIXHU3Th -----END CERTIFICATE-----Generated at Mon Oct 20 07:51:53 2025 by rpki-client