$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft File: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json) Hash identifier: 9l1FQoFaMsmsShfOzNml5fC0ycKeXuMyyeTK/JpEi2E= Subject key identifier: C7:24:61:C1:C9:AD:E8:CC:3B:DB:2B:F9:82:AB:F0:73:3A:4E:F8:5A Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Certificate serial: 283599B5B9B6D123376D606211630ED9BEBCD411 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft Manifest number: 0253 Signing time: Mon 20 Oct 2025 09:39:06 +0000 Manifest this update: Mon 20 Oct 2025 09:34:06 +0000 Manifest next update: Tue 21 Oct 2025 10:05:06 +0000 Files and hashes: 1: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: rD1drMlhgCHEm0vlVi8DONqmz75yH/sypTpIzdkNP6c=) 2: 326131343a316563313a3a2f33322d3332203d3e20323037323532.roa (hash: ZnCFtDlyKKIKHxL+mnWSwMiKEny7fbonjbSjngpcz7c=) 3: 326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa (hash: U8fXRRyT8emRE+fVUuy2ekIUYzd/0os3T2/COS8ejYg=) 4: 326131343a316563303a3a2f33312d3438203d3e203438373030.roa (hash: NfdCiPZo2V7z2IR8DOEcP9s1WlT0wPdEK10WCc6hh18=) 5: 326131343a316563303a3a2f33312d3438203d3e203134363138.roa (hash: TNC4zrNVSYq6rg1HfzOLsFNL5cW5pcjjIopBseDA51Y=) 6: 326131343a316563313a376231303a3a2f34342d3438203d3e20323135363636.roa (hash: pZyYX9vqAixKUDIqsxujnSVA6UfFKeJc5iZ4yNtLX48=) 7: 326131343a316563303a3a2f33312d3438203d3e203136353039.roa (hash: DO5U+zbxAW9dCHHkG8v0O5pLZTi9rHV+80EYsqI00GY=) 8: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: NDSS2hHdj8htIMoCQNzuGfJRE+FjfS7resxOlAoGNDM=) 9: 326131343a316563373a633031303a3a2f34342d3434203d3e2030.roa (hash: SsdW0YpcJfef7CtWvRhhfCUEgjAhSHqFG1h0ACBR214=) 10: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: UPawalo/x0sNgRnG7Z4A4eOkud2nzCOYmPZwk3e81uc=) 11: 326131343a316563373a633430303a3a2f34302d3438203d3e203438373030.roa (hash: LZc2AksEahD5rzoxMFxve6nJwmwqwYYZ+BLhaadaDDA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 10:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:35:99:b5:b9:b6:d1:23:37:6d:60:62:11:63:0e:d9:be:bc:d4:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Validity Not Before: Oct 20 09:34:06 2025 GMT Not After : Oct 21 10:05:06 2025 GMT Subject: CN=C72461C1C9ADE8CC3BDB2BF982ABF0733A4EF85A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8e:a3:6a:c7:07:aa:98:00:b4:98:e4:7f:6a: bb:65:80:25:5e:17:53:87:fb:87:67:52:87:dd:5f: 13:0d:67:9a:5c:65:1c:3f:59:6c:a6:15:0f:f8:58: 99:7a:6a:7d:8b:1f:51:23:ef:ba:c1:05:ce:e0:7a: 01:cc:a7:c0:44:79:cf:7a:c7:c9:bc:53:2a:53:c8: ef:75:69:dc:9d:b4:0b:83:35:c9:a0:f5:a5:b0:f0: 5d:95:86:00:57:34:50:9a:8e:35:4f:a7:d5:91:15: 57:1b:3a:7b:b3:e5:08:b5:6c:ed:af:f3:c5:80:12: a3:d3:ea:33:75:31:66:10:be:5e:cb:7c:f3:85:56: 50:43:4a:d4:4c:0b:e5:f5:eb:08:93:80:cf:fb:5a: ee:38:20:1d:22:c2:58:ca:6b:30:4d:cf:fb:29:ed: a4:c9:e2:d8:71:e7:e9:eb:83:a1:a7:51:01:90:39: f6:24:4d:e8:be:49:fd:39:bb:eb:21:d8:9b:3d:f7: f4:96:50:ec:28:ba:44:60:5f:19:9f:2a:09:3c:38: 80:c5:11:47:b8:a2:aa:b2:8b:9b:c3:3c:2f:6f:f1: 23:52:72:a1:08:6b:eb:87:2e:3b:0b:ae:92:c5:b2: 11:26:33:c0:ec:ec:33:13:fa:83:63:9b:f1:a4:56: 09:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:24:61:C1:C9:AD:E8:CC:3B:DB:2B:F9:82:AB:F0:73:3A:4E:F8:5A X509v3 Authority Key Identifier: keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:4d:fc:c1:06:cf:cc:4d:0e:a9:b5:fd:b1:5f:8d:30:b8:01: 18:18:c2:10:f4:14:f3:6d:76:6c:22:af:45:fc:51:89:22:62: e5:81:7d:be:b1:c9:ee:7d:f3:bd:2f:0e:aa:59:64:03:c1:6d: c9:cb:11:ae:4d:c0:fa:4f:a8:31:61:6a:19:56:91:75:81:19: a3:ef:3a:f6:aa:7d:e5:49:ce:67:fe:9a:38:b7:0e:82:99:b9: c5:b4:69:dc:06:70:cd:cd:c9:91:05:5e:e5:50:9b:ab:a6:5b: 82:62:78:b2:8d:05:27:02:71:1c:98:21:87:f4:f1:f0:0f:92: ae:fe:75:cc:44:f0:14:78:75:99:0a:02:d9:ae:24:b5:03:8f: 7e:04:15:d2:34:e0:d7:3f:a7:44:16:8e:03:7b:70:80:44:3f: e6:ad:d5:81:98:0f:51:09:3f:f3:f0:27:fd:f8:bc:61:d9:f1: e5:c6:3d:43:c1:1b:e1:c4:1d:b3:4a:3f:ce:8d:ea:9f:8f:42: 5c:3d:39:b5:62:bd:04:9e:ad:14:6b:5a:36:4d:67:d7:75:a4: f3:e9:25:66:1a:1f:e6:59:8a:de:5f:f1:2f:a5:c5:1a:a3:39: c3:f7:bb:b4:0e:08:9c:8d:06:66:e3:fa:a0:0e:4b:a1:c1:00: 48:a3:ad:e5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUKDWZtbm20SM3bWBiEWMO2b681BEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG NEFCREVDNjAeFw0yNTEwMjAwOTM0MDZaFw0yNTEwMjExMDA1MDZaMDMxMTAvBgNV BAMTKEM3MjQ2MUMxQzlBREU4Q0MzQkRCMkJGOTgyQUJGMDczM0E0RUY4NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2jqNqxweqmAC0mOR/artlgCVe F1OH+4dnUofdXxMNZ5pcZRw/WWymFQ/4WJl6an2LH1Ej77rBBc7gegHMp8BEec96 x8m8UypTyO91adydtAuDNcmg9aWw8F2VhgBXNFCajjVPp9WRFVcbOnuz5Qi1bO2v 88WAEqPT6jN1MWYQvl7LfPOFVlBDStRMC+X16wiTgM/7Wu44IB0iwljKazBNz/sp 7aTJ4thx5+nrg6GnUQGQOfYkTei+Sf05u+sh2Js99/SWUOwoukRgXxmfKgk8OIDF EUe4oqqyi5vDPC9v8SNScqEIa+uHLjsLrpLFshEmM8Ds7DMT+oNjm/GkVgnlAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUxyRhwcmt6Mw72yv5gqvwczpO+FowHwYDVR0j BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD QkIzOTg3NkY0QUJERUM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJhZjczYTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS8wLzIwRjY5QzRD MTQ2MTM4Q0IwMTIxQzRDNENCQjM5ODc2RjRBQkRFQzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB+TfzB Bs/MTQ6ptf2xX40wuAEYGMIQ9BTzbXZsIq9F/FGJImLlgX2+scnuffO9Lw6qWWQD wW3JyxGuTcD6T6gxYWoZVpF1gRmj7zr2qn3lSc5n/po4tw6CmbnFtGncBnDNzcmR BV7lUJurpluCYniyjQUnAnEcmCGH9PHwD5Ku/nXMRPAUeHWZCgLZriS1A49+BBXS NODXP6dEFo4De3CARD/mrdWBmA9RCT/z8Cf9+Lxh2fHlxj1DwRvhxB2zSj/Ojeqf j0JcPTm1Yr0Enq0Ua1o2TWfXdaTz6SVmGh/mWYreX/EvpcUaoznD97u0DgicjQZm 4/qgDkuhwQBIo63l -----END CERTIFICATE-----Generated at Mon Oct 20 18:18:46 2025 by rpki-client