$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft File: 1498141819112B8446C2D4A3111F53038F05DBE9.mft (raw, json) Hash identifier: +fnGbjrRxsm48ZmNTXBIyPYhUs2aK/xa46PG8uN58Ik= Subject key identifier: 44:0E:67:01:14:BE:3D:79:65:1C:99:CC:3D:67:E0:61:25:06:2F:77 Authority key identifier: 14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 Certificate issuer: /CN=1498141819112b8446c2d4a3111f53038f05dbe9 Certificate serial: 5CF7A37BD0DD3D8BF15D518BBAB2C816AD9A8BFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft Manifest number: C9 Signing time: Sun 19 Oct 2025 20:06:39 +0000 Manifest this update: Sun 19 Oct 2025 20:01:39 +0000 Manifest next update: Mon 20 Oct 2025 21:28:39 +0000 Files and hashes: 1: 3138352e39312e3131332e302f32342d3234203d3e20323134323038.roa (hash: qSSu/jTa9CtmAhgZlrJ1s4QldXeKp0EqfLu29FuP5Zs=) 2: 3138352e39312e3131322e302f32342d3234203d3e20323035383836.roa (hash: O1n5JnY1D7Gybc6bse2IOISd30uajo4rcLgj2Y43/4k=) 3: 3138352e39312e3131352e302f32342d3234203d3e2034363337.roa (hash: ck91ILJJRhGrU5dcx7s2t1suhnGyLbRTekoZlADPXPE=) 4: 3138352e39312e3131342e302f32342d3234203d3e20323132323338.roa (hash: O3+fkuGYHEGuJgzobwksf3BrAnxvmElLOiQKqynfHQQ=) 5: 1498141819112B8446C2D4A3111F53038F05DBE9.crl (hash: 6HWjKYLtGd/8gRrl3PjJAD1EbKPw6eodJHNohP42QBM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 21:28:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:f7:a3:7b:d0:dd:3d:8b:f1:5d:51:8b:ba:b2:c8:16:ad:9a:8b:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1498141819112b8446c2d4a3111f53038f05dbe9 Validity Not Before: Oct 19 20:01:39 2025 GMT Not After : Oct 20 21:28:39 2025 GMT Subject: CN=440E670114BE3D79651C99CC3D67E06125062F77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c0:f3:5d:40:da:c1:c2:74:d3:2c:d2:b7:61: cd:5d:95:33:8e:f7:37:ac:03:7f:23:79:36:f8:ce: 48:fb:cd:8c:ed:df:f4:af:04:75:10:05:c8:8a:23: 91:28:95:4d:4a:41:87:3a:fa:91:c0:7d:c0:ec:3c: 65:de:93:76:21:18:c5:df:7f:7f:af:fc:56:77:2e: df:08:5f:6b:9c:64:e0:0b:4b:3c:b7:56:f1:99:75: 8d:e3:cd:5a:26:37:98:d2:f6:91:69:85:3c:36:d3: 92:50:9a:44:7b:bb:e3:a9:47:46:fa:d0:fd:b8:7e: c7:38:24:e6:5b:29:f1:35:55:1c:d3:c5:63:11:80: 8a:26:04:0a:d1:ca:44:28:36:82:4c:ec:6a:41:04: 27:df:e6:01:e5:7c:c1:bd:96:72:b3:9f:fe:ad:9a: 6f:c9:1a:bb:0a:18:07:ad:20:13:d3:0e:3b:e7:a6: 72:97:a0:e2:ce:8e:b0:96:2a:56:9f:42:69:4e:b6: 44:6f:22:c9:f7:9e:35:ce:a7:b0:13:79:1e:3b:24: 19:f7:28:c9:68:ea:50:c5:bb:b3:8b:03:c7:8c:61: b4:a0:5e:70:ca:12:ad:74:3f:1e:e9:6c:86:86:87: b0:57:0a:2b:bf:fb:63:a4:84:96:d8:3d:c6:08:63: d1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:0E:67:01:14:BE:3D:79:65:1C:99:CC:3D:67:E0:61:25:06:2F:77 X509v3 Authority Key Identifier: keyid:14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:af:61:c7:cc:0b:ac:0c:d5:fd:05:c0:1b:02:6d:c7:4f:27: 9e:7a:33:da:a9:46:9e:84:69:13:c7:61:a7:39:38:92:c5:82: 33:b5:76:f6:32:f8:1c:e3:fb:56:e8:a8:8f:23:fe:a7:9c:bb: b9:6c:45:7a:00:8f:28:6d:cd:7a:59:af:76:11:e4:f4:87:02: a2:1e:dd:81:aa:a5:8c:94:f0:2f:46:da:d4:c6:8f:fe:71:24: b0:cc:d6:4d:78:b0:cf:48:b1:77:bf:93:2f:de:6e:72:8c:a5: 55:1a:c1:ea:2e:49:19:85:d3:53:ab:c5:02:9d:54:50:5c:ab: d7:79:22:a3:b0:fd:e3:39:0b:ab:b6:15:c6:59:1d:57:d0:21: 5e:c0:92:d0:22:7b:68:e7:ae:f1:08:57:96:5e:85:b5:12:13: f4:33:f6:d2:63:ce:26:bb:0e:15:9a:74:39:76:10:ee:1f:76: bd:a1:a1:61:6d:7a:e4:9e:85:8d:1f:2b:d7:ca:e7:f2:a9:b6: a2:43:a9:5d:d4:57:ea:84:cf:d0:22:c7:05:1a:dd:83:40:0a: 51:14:00:29:36:5a:bb:6b:75:0f:1b:63:f8:d1:bd:7b:22:e2: cb:c1:75:d9:31:5b:39:3e:2d:14:ca:75:54:40:fd:ec:a0:21: cc:df:23:76 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXPeje9DdPYvxXVGLurLIFq2ai/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5ODE0MTgxOTExMmI4NDQ2YzJkNGEzMTExZjUzMDM4 ZjA1ZGJlOTAeFw0yNTEwMTkyMDAxMzlaFw0yNTEwMjAyMTI4MzlaMDMxMTAvBgNV BAMTKDQ0MEU2NzAxMTRCRTNENzk2NTFDOTlDQzNENjdFMDYxMjUwNjJGNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDewPNdQNrBwnTTLNK3Yc1dlTOO 9zesA38jeTb4zkj7zYzt3/SvBHUQBciKI5EolU1KQYc6+pHAfcDsPGXek3YhGMXf f3+v/FZ3Lt8IX2ucZOALSzy3VvGZdY3jzVomN5jS9pFphTw205JQmkR7u+OpR0b6 0P24fsc4JOZbKfE1VRzTxWMRgIomBArRykQoNoJM7GpBBCff5gHlfMG9lnKzn/6t mm/JGrsKGAetIBPTDjvnpnKXoOLOjrCWKlafQmlOtkRvIsn3njXOp7ATeR47JBn3 KMlo6lDFu7OLA8eMYbSgXnDKEq10Px7pbIaGh7BXCiu/+2OkhJbYPcYIY9ErAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQURA5nARS+PXllHJnMPWfgYSUGL3cwHwYDVR0j BBgwFoAUFJgUGBkRK4RGwtSjER9TA48F2+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjkwNjZmNWQtZWNjMS00OTI3LTk1YzEtZTFhOGRmOGY5 ODk3LzAvMTQ5ODE0MTgxOTExMkI4NDQ2QzJENEEzMTExRjUzMDM4RjA1REJFOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ZKZ1VHQmtSSzRSR3d0U2pFUjlUQTQ4 RjItay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOTA2NmY1ZC1l Y2MxLTQ5MjctOTVjMS1lMWE4ZGY4Zjk4OTcvMC8xNDk4MTQxODE5MTEyQjg0NDZD MkQ0QTMxMTFGNTMwMzhGMDVEQkU5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANa9hx8wLrAzV/QXAGwJt x08nnnoz2qlGnoRpE8dhpzk4ksWCM7V29jL4HOP7VuiojyP+p5y7uWxFegCPKG3N elmvdhHk9IcCoh7dgaqljJTwL0ba1MaP/nEksMzWTXiwz0ixd7+TL95ucoylVRrB 6i5JGYXTU6vFAp1UUFyr13kio7D94zkLq7YVxlkdV9AhXsCS0CJ7aOeu8QhXll6F tRIT9DP20mPOJrsOFZp0OXYQ7h92vaGhYW165J6FjR8r18rn8qm2okOpXdRX6oTP 0CLHBRrdg0AKURQAKTZau2t1Dxtj+NG9eyLiy8F12TFbOT4tFMp1VED97KAhzN8j dg== -----END CERTIFICATE-----Generated at Mon Oct 20 08:48:02 2025 by rpki-client