$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft File: 72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft (raw, json) Hash identifier: crCIbGDaO6ibHG0Yz9IThgtBnYOXa63p0kkiZUzMBoI= Subject key identifier: AF:86:20:84:D9:6A:D1:C2:8D:BB:34:28:F2:F1:5F:DC:EA:72:A9:B5 Authority key identifier: 72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1 Certificate issuer: /CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1 Certificate serial: 7FDF4E911E044FB19DDA45775DA786CC3213D660 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft Manifest number: E9 Signing time: Sun 19 Oct 2025 04:23:53 +0000 Manifest this update: Sun 19 Oct 2025 04:18:53 +0000 Manifest next update: Mon 20 Oct 2025 07:19:53 +0000 Files and hashes: 1: 72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl (hash: 9XITaOPzJc86Xf6aCaXEO2+tkIJpb7+lCEvCmaUJ+l8=) 2: 326131333a363134303a3a2f32392d3332203d3e203331313834.roa (hash: HEAzsbwZSQMPtZWHDUG9J3+dKm/03SetBs7lrO1nkwI=) 3: 3139352e37342e34302e302f32322d3234203d3e203331313834.roa (hash: OWTrG12il6+R+m95Ctsd+LQNgEyVIDW3AMDlydaSO3g=) 4: 3139332e32322e3235332e302f32342d3234203d3e203331313834.roa (hash: WrMYNrMKiwcHb7Layep1L0ANnPM7z3AEErZKMOJmYxg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 07:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:df:4e:91:1e:04:4f:b1:9d:da:45:77:5d:a7:86:cc:32:13:d6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1 Validity Not Before: Oct 19 04:18:53 2025 GMT Not After : Oct 20 07:19:53 2025 GMT Subject: CN=AF862084D96AD1C28DBB3428F2F15FDCEA72A9B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:51:7c:f7:93:34:7b:84:98:71:bc:b9:23:6e: 75:b7:db:f4:15:bb:51:41:36:83:c5:cf:7f:54:88: 41:66:5a:1a:2f:0b:5d:ae:95:ff:76:01:e0:c7:dc: be:95:c2:89:79:bb:26:05:96:69:3a:c4:b3:56:6b: cc:30:92:b3:27:ea:24:90:cc:6e:af:2a:85:60:fa: cd:4f:81:1f:f9:9f:eb:9c:08:87:4f:6e:47:46:df: ef:4f:df:e6:db:38:f8:f0:cf:f6:4a:66:08:34:72: c4:7d:5c:21:ea:47:56:ab:42:58:26:91:07:c8:bb: 46:2a:17:eb:c9:84:2c:7e:8c:fb:7c:46:ed:f9:73: fe:b7:f8:0e:77:4a:c7:39:e3:b6:78:1e:aa:a4:24: 49:9a:54:51:b7:3c:0b:db:90:6a:db:8b:e0:16:df: 7f:df:ed:56:1a:10:19:d4:7d:bf:50:ff:3a:94:84: f6:2d:68:8d:2d:74:26:50:be:83:6d:84:72:f5:3b: e0:75:58:59:11:94:00:0d:e6:76:e0:01:b8:7d:ef: 02:90:4c:ea:ef:a5:54:f8:9d:0f:a8:ac:c3:8a:10: df:2e:a6:f9:5d:e2:12:2c:b2:84:e8:6f:08:33:37: 76:c9:12:59:a5:c0:12:37:9f:1e:34:49:3e:92:43: 52:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:86:20:84:D9:6A:D1:C2:8D:BB:34:28:F2:F1:5F:DC:EA:72:A9:B5 X509v3 Authority Key Identifier: keyid:72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:62:fc:dc:f4:21:5c:b3:d1:f8:78:62:64:17:ca:e6:b8:57: 61:70:e6:a0:ec:e8:52:34:89:99:4f:e0:58:d9:15:8f:e2:ee: 26:c7:1a:4f:ed:6a:d8:c7:5a:48:11:8e:52:e0:e0:42:77:75: e1:c1:9c:af:68:66:3b:8d:16:27:b4:c4:47:dd:af:8d:9d:c4: 1d:09:2d:f0:16:99:3d:eb:d5:95:69:2e:3d:1c:cc:16:04:8b: 3a:ac:c6:c2:f6:ac:c7:7d:71:d0:7e:df:78:2d:d2:34:63:ac: 02:79:cc:e7:64:fd:b8:8f:4e:6e:44:b1:38:9f:41:3d:66:96: 5c:b1:46:4d:75:c7:38:93:1e:18:97:64:d3:18:9e:a3:22:f9: 6c:c5:db:09:ee:6c:4c:d9:1a:59:ff:64:cb:d7:be:c0:27:8b: 60:f5:08:ce:00:26:59:70:43:7d:fe:b1:c0:11:51:4a:f3:e8: fd:2b:2d:f8:37:4b:c6:d3:46:72:d2:20:35:b2:ef:aa:8c:c9: 19:7c:7b:f4:49:c7:98:61:fc:38:18:14:00:fc:d8:d0:06:47: 0d:4c:e6:ec:01:f8:3e:30:c3:63:9b:d3:32:64:92:c9:af:88: 90:e9:fe:6e:ce:cf:da:4c:98:d3:9a:7b:cb:be:99:91:f7:5d: 4e:12:47:1b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUf99OkR4ET7Gd2kV3XaeGzDIT1mAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJmM2VlMTY5ZjliZDcxZjc4YTQyZDFhNzJmZTBmMmE4 MjQ4MjJkMTAeFw0yNTEwMTkwNDE4NTNaFw0yNTEwMjAwNzE5NTNaMDMxMTAvBgNV BAMTKEFGODYyMDg0RDk2QUQxQzI4REJCMzQyOEYyRjE1RkRDRUE3MkE5QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwUXz3kzR7hJhxvLkjbnW32/QV u1FBNoPFz39UiEFmWhovC12ulf92AeDH3L6Vwol5uyYFlmk6xLNWa8wwkrMn6iSQ zG6vKoVg+s1PgR/5n+ucCIdPbkdG3+9P3+bbOPjwz/ZKZgg0csR9XCHqR1arQlgm kQfIu0YqF+vJhCx+jPt8Ru35c/63+A53Ssc547Z4HqqkJEmaVFG3PAvbkGrbi+AW 33/f7VYaEBnUfb9Q/zqUhPYtaI0tdCZQvoNthHL1O+B1WFkRlAAN5nbgAbh97wKQ TOrvpVT4nQ+orMOKEN8upvld4hIssoTobwgzN3bJElmlwBI3nx40ST6SQ1I1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUr4YghNlq0cKNuzQo8vFf3OpyqbUwHwYDVR0j BBgwFoAUcvPuFp+b1x94pC0acv4PKoJIItEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjgyYjVlMDAtMmFjMy00OWYxLWEyOWItMjZhNWZkZjBm YTQxLzAvNzJGM0VFMTY5RjlCRDcxRjc4QTQyRDFBNzJGRTBGMkE4MjQ4MjJEMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2N2UHVGcC1iMXg5NHBDMGFjdjRQS29K SUl0RS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yODJiNWUwMC0y YWMzLTQ5ZjEtYTI5Yi0yNmE1ZmRmMGZhNDEvMC83MkYzRUUxNjlGOUJENzFGNzhB NDJEMUE3MkZFMEYyQTgyNDgyMkQxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2L83PQhXLPR+HhiZBfK 5rhXYXDmoOzoUjSJmU/gWNkVj+LuJscaT+1q2MdaSBGOUuDgQnd14cGcr2hmO40W J7TER92vjZ3EHQkt8BaZPevVlWkuPRzMFgSLOqzGwvasx31x0H7feC3SNGOsAnnM 52T9uI9ObkSxOJ9BPWaWXLFGTXXHOJMeGJdk0xieoyL5bMXbCe5sTNkaWf9ky9e+ wCeLYPUIzgAmWXBDff6xwBFRSvPo/Sst+DdLxtNGctIgNbLvqozJGXx79EnHmGH8 OBgUAPzY0AZHDUzm7AH4PjDDY5vTMmSSya+IkOn+bs7P2kyY05p7y76ZkfddThJH Gw== -----END CERTIFICATE-----Generated at Sun Oct 19 17:30:39 2025 by rpki-client