$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/0/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.mft File: B11D50A5D47F732F3F808FEAE6A3906CC4509C44.mft (raw, json) Hash identifier: 2I0XZ9E7uV2YPtZBil2PT9YlN3GBEhdvjRmsP1xc70Y= Subject key identifier: B2:5B:D3:E2:9C:83:D4:8D:1C:BC:DB:A8:3F:14:A4:F2:A4:02:E5:32 Authority key identifier: B1:1D:50:A5:D4:7F:73:2F:3F:80:8F:EA:E6:A3:90:6C:C4:50:9C:44 Certificate issuer: /CN=B11D50A5D47F732F3F808FEAE6A3906CC4509C44 Certificate serial: 6B92A6FF26A3F3216C95AFC5EA488A3A43F8ADE6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/0/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.mft Manifest number: 2D Signing time: Mon 20 Oct 2025 10:28:26 +0000 Manifest this update: Mon 20 Oct 2025 10:23:26 +0000 Manifest next update: Tue 21 Oct 2025 12:47:26 +0000 Files and hashes: 1: B11D50A5D47F732F3F808FEAE6A3906CC4509C44.crl (hash: xrsmBO8XiOECdJnxj9SGiH+0+Uheum7xcAGfeAhy4TM=) 2: 326131343a373538333a663430303a3a2f34342d3438203d3e20323130333532.roa (hash: vvwHl6BLBwWiKAXvEKkLi0Wv5qZBfvWXONHc86WQ1Rk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/0/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.crl rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/0/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.mft rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.cer rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 09:52:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:92:a6:ff:26:a3:f3:21:6c:95:af:c5:ea:48:8a:3a:43:f8:ad:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B11D50A5D47F732F3F808FEAE6A3906CC4509C44 Validity Not Before: Oct 20 10:23:26 2025 GMT Not After : Oct 21 12:47:26 2025 GMT Subject: CN=B25BD3E29C83D48D1CBCDBA83F14A4F2A402E532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:69:26:12:28:2b:2e:b5:aa:51:fe:84:23:66: d4:3e:b7:2b:20:b9:51:2f:6a:f2:1d:2a:fc:94:24: f4:71:08:cc:f3:ff:c5:b5:d1:27:c7:b0:f9:f6:74: 2e:fa:3f:dd:57:b5:c6:ad:78:9c:1a:e2:35:5b:a2: 5c:16:db:2f:c9:9d:49:b3:76:bf:ac:41:fa:4b:3d: 68:60:d0:7d:29:9c:0d:30:32:62:c3:74:0d:93:3f: 06:d6:52:9f:ec:3a:6f:6e:0d:42:55:f2:01:ae:6d: a8:39:cb:86:8c:63:e5:d6:06:fb:79:42:fa:48:1a: 85:7d:89:fd:da:3b:32:38:44:a0:1d:8d:7d:e9:38: 4e:a5:82:f4:20:46:df:f1:f7:d5:f2:4d:3b:20:59: a3:53:aa:26:bd:a3:c3:11:3d:ae:8c:16:83:2b:22: 68:72:01:09:89:04:0f:58:9f:d7:ec:5f:84:a9:8f: 92:10:2d:05:b6:ce:5f:0c:d4:86:62:c1:98:3f:95: c1:cf:30:60:7f:9b:21:f6:9a:fb:3b:47:3a:4a:66: 79:88:db:b2:f9:b3:75:5f:1a:40:d0:b4:cb:54:12: c4:51:20:09:34:26:31:11:80:a0:37:69:a7:d2:28: a3:43:7b:cf:31:fc:8e:81:f1:c9:f4:6f:9e:5e:ab: c1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:5B:D3:E2:9C:83:D4:8D:1C:BC:DB:A8:3F:14:A4:F2:A4:02:E5:32 X509v3 Authority Key Identifier: keyid:B1:1D:50:A5:D4:7F:73:2F:3F:80:8F:EA:E6:A3:90:6C:C4:50:9C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/0/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/0/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:bb:30:88:f5:d3:10:86:50:91:0f:71:97:ad:14:a4:26:9a: 6d:72:57:2e:f5:fa:d3:35:da:8c:c6:68:56:68:ff:7e:4d:26: cc:02:d6:66:a8:d8:3a:06:52:d4:19:70:6b:cd:15:2b:36:be: ab:b1:3e:be:ca:ff:12:fe:12:0f:f0:4d:2b:d7:c4:aa:c2:ed: 27:0c:7a:7a:98:cc:2b:23:b1:36:f8:c5:f6:fb:44:0f:1c:e3: 1e:36:c1:0d:bf:08:63:30:ad:4a:13:7b:40:cc:ec:31:03:c2: 34:31:be:aa:95:e1:95:92:db:84:88:60:35:fa:28:e2:1b:e1: 56:ed:82:a3:b5:ba:30:87:e7:07:a4:a1:6e:29:d1:9b:3e:d5: 97:ad:03:b4:1f:4a:c6:01:b5:29:4c:f4:8a:a0:c0:58:e0:5e: 4b:6e:7a:8d:4b:b1:9a:4c:e3:c7:c2:07:a6:53:46:c0:bb:20: 87:9e:90:da:c2:af:45:45:6c:00:5e:9b:26:ee:85:a6:4b:85: 89:01:9c:86:f7:f5:f4:64:4b:d0:b8:73:ee:27:39:63:1c:0c: 7f:a3:68:fd:f0:2d:1a:e4:46:5a:b5:36:20:34:4b:32:f3:b0: 5d:7d:27:9a:7d:f4:63:48:3e:c8:46:1b:b2:fd:26:72:a7:0c: d1:2a:2d:81 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUa5Km/yaj8yFsla/F6kiKOkP4reYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExRDUwQTVENDdGNzMyRjNGODA4RkVBRTZBMzkwNkND NDUwOUM0NDAeFw0yNTEwMjAxMDIzMjZaFw0yNTEwMjExMjQ3MjZaMDMxMTAvBgNV BAMTKEIyNUJEM0UyOUM4M0Q0OEQxQ0JDREJBODNGMTRBNEYyQTQwMkU1MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuaSYSKCsutapR/oQjZtQ+tysg uVEvavIdKvyUJPRxCMzz/8W10SfHsPn2dC76P91XtcateJwa4jVbolwW2y/JnUmz dr+sQfpLPWhg0H0pnA0wMmLDdA2TPwbWUp/sOm9uDUJV8gGubag5y4aMY+XWBvt5 QvpIGoV9if3aOzI4RKAdjX3pOE6lgvQgRt/x99XyTTsgWaNTqia9o8MRPa6MFoMr ImhyAQmJBA9Yn9fsX4Spj5IQLQW2zl8M1IZiwZg/lcHPMGB/myH2mvs7RzpKZnmI 27L5s3VfGkDQtMtUEsRRIAk0JjERgKA3aafSKKNDe88x/I6B8cn0b55eq8FFAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUslvT4pyD1I0cvNuoPxSk8qQC5TIwHwYDVR0j BBgwFoAUsR1QpdR/cy8/gI/q5qOQbMRQnEQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmMyNjc2M2UtYWRkZi00M2ZkLWJmMmUtN2M3ZTM4OTIz ZTdjLzAvQjExRDUwQTVENDdGNzMyRjNGODA4RkVBRTZBMzkwNkNDNDUwOUM0NC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODFmOTc4Mi04OThlLTRi ODMtOTVlNi00ZmY0YWI3NWM5ZGMvMi9CMTFENTBBNUQ0N0Y3MzJGM0Y4MDhGRUFF NkEzOTA2Q0M0NTA5QzQ0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJjMjY3NjNlLWFkZGYtNDNmZC1iZjJlLTdjN2UzODkyM2U3Yy8wL0IxMUQ1MEE1 RDQ3RjczMkYzRjgwOEZFQUU2QTM5MDZDQzQ1MDlDNDQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDIuzCI 9dMQhlCRD3GXrRSkJpptclcu9frTNdqMxmhWaP9+TSbMAtZmqNg6BlLUGXBrzRUr Nr6rsT6+yv8S/hIP8E0r18Sqwu0nDHp6mMwrI7E2+MX2+0QPHOMeNsENvwhjMK1K E3tAzOwxA8I0Mb6qleGVktuEiGA1+ijiG+FW7YKjtbowh+cHpKFuKdGbPtWXrQO0 H0rGAbUpTPSKoMBY4F5LbnqNS7GaTOPHwgemU0bAuyCHnpDawq9FRWwAXpsm7oWm S4WJAZyG9/X0ZEvQuHPuJzljHAx/o2j98C0a5EZatTYgNEsy87BdfSeaffRjSD7I Rhuy/SZypwzRKi2B -----END CERTIFICATE-----Generated at Mon Oct 20 19:15:52 2025 by rpki-client