$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft File: 7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft (raw, json) Hash identifier: SUVNPQayxEij18M0FSehNas3Dc/ICrFCjLIllXbsAK4= Subject key identifier: D4:15:CC:19:55:DC:34:45:85:EE:68:FA:89:12:5E:0F:D3:1E:EB:41 Authority key identifier: 7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85 Certificate issuer: /CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985 Certificate serial: 3907FB3B1509A35C985BE3D2CFDA751E2B0BE91A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft Manifest number: 0133 Signing time: Sun 19 Oct 2025 09:01:59 +0000 Manifest this update: Sun 19 Oct 2025 08:56:59 +0000 Manifest next update: Mon 20 Oct 2025 11:56:59 +0000 Files and hashes: 1: 326130653a666434353a353030303a3a2f34302d3438203d3e20323034383330.roa (hash: 9ztDCaU6aAMVKVrLFNLTSsl1A84X7CinJDw99b10Wgk=) 2: 326130653a666434353a326630303a3a2f34382d3438203d3e20323132393636.roa (hash: fCahoT0DASmE4L0CnNku4FHnUTfBEMsJKaoRBnEvKJY=) 3: 326130653a666434353a326366303a3a2f34382d3438203d3e20323032383535.roa (hash: lpEMU1X1JLSHAOWUFG4frUPhBZsu7LhlBnijuGC43xs=) 4: 326130653a666434353a326633303a3a2f34382d3438203d3e20323039333130.roa (hash: Ah9wB6P+J6/u6bq6IHZMWUCN9kLwcy3+ovMQjaM+Mjs=) 5: 326130393a626534303a323830303a3a2f34302d3438203d3e20313939393530.roa (hash: AiP13DNBwIkSFzdQdSir0FYGd4okcKOcyfxhs/nt0mM=) 6: 7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl (hash: 3/wqcKqLERiOMaobiAZXfyvmivBSxZpO8z2GflVPbg0=) 7: 326130653a666434353a326538303a3a2f34382d3438203d3e20323134373233.roa (hash: OBdYMpDCrnydUqYR/9aR6OWDxV3xrASuK04QdHbbnp4=) 8: 326130393a626534303a323830303a3a2f34302d3438203d3e20323133313730.roa (hash: bGsR+5RlWB67shIeVpz1QNwpCAPKyIXgoOV7T0RQXx8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:07:fb:3b:15:09:a3:5c:98:5b:e3:d2:cf:da:75:1e:2b:0b:e9:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985 Validity Not Before: Oct 19 08:56:59 2025 GMT Not After : Oct 20 11:56:59 2025 GMT Subject: CN=D415CC1955DC344585EE68FA89125E0FD31EEB41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:33:0a:6e:57:46:65:b5:5d:67:f6:ae:b9:44: bc:3d:f2:d8:e1:4d:be:3c:fa:00:e4:04:18:cc:52: 3e:60:5c:b9:20:3e:3d:b7:10:16:ae:df:6d:74:71: ee:c0:1e:94:c2:42:3d:84:01:2e:ed:0c:c8:34:9c: 5b:73:b5:d0:16:b5:50:b3:87:28:f4:c6:dd:69:34: 96:3a:7c:bb:ab:92:22:88:10:ac:07:52:8f:d6:dd: 9a:9e:0b:42:79:62:48:c7:a6:35:64:04:48:b4:57: 83:8e:64:f7:9d:be:b4:09:89:af:55:86:96:51:8b: 43:f2:b7:16:22:85:09:d5:21:f9:f8:0a:c0:37:00: 04:d7:26:87:d8:33:7c:b9:55:dc:28:90:60:6e:4a: 0c:51:f5:5c:88:87:77:b8:0c:0f:7f:0e:8e:c9:62: 3d:c2:4b:d4:ee:f3:3b:10:64:57:df:99:6b:07:0c: e8:72:a7:cd:78:5b:71:c4:1c:5c:48:3d:f5:03:ea: e0:c9:c4:3e:1c:23:75:e2:ac:b6:3c:d6:c2:35:20: 10:b2:d5:de:af:db:3c:6c:62:02:4f:e0:67:4f:ed: 0f:0b:54:d4:30:dd:69:6b:36:07:1a:35:3d:70:36: 71:ad:a1:ff:1f:20:d8:f8:09:72:1c:81:b9:39:9b: 49:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:15:CC:19:55:DC:34:45:85:EE:68:FA:89:12:5E:0F:D3:1E:EB:41 X509v3 Authority Key Identifier: keyid:7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:32:c8:48:90:bf:f3:d0:43:40:88:76:b6:03:15:67:83:15: 14:f0:93:b4:13:6c:10:07:f6:4e:98:ec:23:ae:7d:f9:9e:c3: 5e:10:c5:3c:fc:c3:9e:4a:a8:3a:b3:7e:ea:37:3d:95:00:f7: d6:21:e9:52:f4:ee:55:6a:5f:7d:db:a7:78:0c:d5:a0:a3:77: 1d:0c:77:71:36:f0:fe:4c:ef:40:cf:73:4d:21:c4:f2:e5:cb: ef:be:8c:6f:a8:27:cd:15:4d:93:72:0b:96:41:de:64:2f:13: b4:80:ce:05:10:ad:78:66:75:50:03:ab:af:fe:46:5e:3b:47: e5:c3:0b:e4:19:6f:4e:5b:db:64:b6:49:cd:d8:56:db:68:fe: 9a:48:8a:f6:27:12:71:f4:0a:ef:49:07:79:b4:38:2f:b7:ab: 5b:24:a3:97:45:64:0f:6f:4a:27:73:e9:92:fc:0f:56:3e:b8: a3:6a:84:23:6d:4f:27:d9:58:57:b5:2b:55:d7:55:88:d2:1c: 92:cf:2b:3a:12:19:1a:26:24:86:c8:64:2a:ae:cd:b1:43:cb: 74:42:fa:a2:1d:54:60:b6:25:bd:3f:b6:91:55:68:59:cf:3c: 69:d2:7a:e0:26:64:8d:48:d4:9b:7e:21:91:04:23:78:58:bb: 71:e7:70:61 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOQf7OxUJo1yYW+PSz9p1HisL6RowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2YyMTZmNDlhM2I5YTg0YTBlODVlODBhMmM0Mjg3NGYw OWVhMzk4NTAeFw0yNTEwMTkwODU2NTlaFw0yNTEwMjAxMTU2NTlaMDMxMTAvBgNV BAMTKEQ0MTVDQzE5NTVEQzM0NDU4NUVFNjhGQTg5MTI1RTBGRDMxRUVCNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeMwpuV0ZltV1n9q65RLw98tjh Tb48+gDkBBjMUj5gXLkgPj23EBau3210ce7AHpTCQj2EAS7tDMg0nFtztdAWtVCz hyj0xt1pNJY6fLurkiKIEKwHUo/W3ZqeC0J5YkjHpjVkBEi0V4OOZPedvrQJia9V hpZRi0PytxYihQnVIfn4CsA3AATXJofYM3y5VdwokGBuSgxR9VyIh3e4DA9/Do7J Yj3CS9Tu8zsQZFffmWsHDOhyp814W3HEHFxIPfUD6uDJxD4cI3XirLY81sI1IBCy 1d6v2zxsYgJP4GdP7Q8LVNQw3WlrNgcaNT1wNnGtof8fINj4CXIcgbk5m0kdAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU1BXMGVXcNEWF7mj6iRJeD9Me60EwHwYDVR0j BBgwFoAUfyFvSaO5qEoOhegKLEKHTwnqOYUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmRmYjMwY2EtZTFjMi00OTIxLWIwNTQtZDRhZjA5MTY1 YWYxLzAvN0YyMTZGNDlBM0I5QTg0QTBFODVFODBBMkM0Mjg3NEYwOUVBMzk4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Z5RnZTYU81cUVvT2hlZ0tMRUtIVHdu cU9ZVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yZGZiMzBjYS1l MWMyLTQ5MjEtYjA1NC1kNGFmMDkxNjVhZjEvMC83RjIxNkY0OUEzQjlBODRBMEU4 NUU4MEEyQzQyODc0RjA5RUEzOTg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkzLISJC/89BDQIh2tgMV Z4MVFPCTtBNsEAf2TpjsI659+Z7DXhDFPPzDnkqoOrN+6jc9lQD31iHpUvTuVWpf fduneAzVoKN3HQx3cTbw/kzvQM9zTSHE8uXL776Mb6gnzRVNk3ILlkHeZC8TtIDO BRCteGZ1UAOrr/5GXjtH5cML5BlvTlvbZLZJzdhW22j+mkiK9icScfQK70kHebQ4 L7erWySjl0VkD29KJ3PpkvwPVj64o2qEI21PJ9lYV7UrVddViNIcks8rOhIZGiYk hshkKq7NsUPLdEL6oh1UYLYlvT+2kVVoWc88adJ64CZkjUjUm34hkQQjeFi7cedw YQ== -----END CERTIFICATE-----Generated at Mon Oct 20 03:58:55 2025 by rpki-client