$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft File: 21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft (raw, json) Hash identifier: SiUkQO2pAg81+OTJiSztR2khuIfz2yuQp06dUVcBJTA= Subject key identifier: E7:F9:60:AE:25:B3:61:AF:98:E7:17:39:1D:70:08:94:9E:0C:5F:60 Authority key identifier: 21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48 Certificate issuer: /CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48 Certificate serial: 683C47601300D35037078B0F6729B6D86B0B783D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft Manifest number: 67 Signing time: Sun 19 Oct 2025 12:25:41 +0000 Manifest this update: Sun 19 Oct 2025 12:20:41 +0000 Manifest next update: Mon 20 Oct 2025 14:30:41 +0000 Files and hashes: 1: 326131343a373538303a6130313a3a2f34382d3438203d3e20323135353433.roa (hash: 9e2yjigX5+cNnGpC5dYpYp4x5beQHVuns4hEprR01WE=) 2: 21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl (hash: +6o0wTXxCb4eyKRN3ArCDR8SZhoZqyJSPydjjqbjaP0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 14:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:3c:47:60:13:00:d3:50:37:07:8b:0f:67:29:b6:d8:6b:0b:78:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48 Validity Not Before: Oct 19 12:20:41 2025 GMT Not After : Oct 20 14:30:41 2025 GMT Subject: CN=E7F960AE25B361AF98E717391D7008949E0C5F60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ab:23:20:ee:a2:15:ad:d3:0d:4d:42:93:cc: c1:30:af:a7:1b:ae:37:7c:43:c4:9b:96:5d:65:0c: d1:6c:ee:34:2e:fc:5f:e3:55:a4:d9:46:60:5f:22: 4e:de:1a:87:f3:dd:92:f6:2d:1a:b0:77:c8:fa:88: 5f:e2:a4:ca:8c:1f:09:46:11:13:52:47:2d:fe:15: 4b:0b:2b:76:31:88:c3:b6:19:f4:6a:a1:41:81:c3: b2:92:57:fc:da:08:da:68:dc:91:32:21:fa:57:eb: a8:1b:cc:18:c2:4b:49:63:7a:43:e8:93:ca:ba:27: 2b:f6:78:d4:14:5e:00:2b:78:38:7d:3a:90:b0:10: a4:a3:0d:c6:24:87:69:93:8a:92:fe:bb:e3:cd:a6: 95:63:85:4b:f0:dd:c1:b8:a6:15:79:96:cd:25:be: 4a:3d:1b:a6:c6:76:52:bb:92:3b:0e:b7:18:9d:b3: e8:09:c5:11:18:c2:46:57:e6:08:46:fc:95:69:82: cb:e2:4f:9e:05:6c:75:36:8a:e3:56:bf:be:73:90: 5e:1c:8f:7b:a0:9e:d0:e1:c1:09:39:8a:90:f7:4f: c9:1e:01:06:b0:93:6f:ff:37:07:c0:fb:c5:de:b6: ba:7e:43:db:d2:42:6b:55:30:85:4d:b9:a6:2d:2d: 7c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F9:60:AE:25:B3:61:AF:98:E7:17:39:1D:70:08:94:9E:0C:5F:60 X509v3 Authority Key Identifier: keyid:21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:e4:0d:96:a6:49:de:b6:89:42:a4:5d:63:c9:2a:d7:55:0f: 38:95:b5:d8:21:63:fc:91:8b:87:07:9c:bf:f4:dd:f7:b0:03: 28:b7:c1:6a:95:d3:45:cf:14:97:35:a8:c1:06:62:5b:96:61: 87:09:41:0f:0d:5e:24:df:cf:58:1b:66:47:e7:33:e1:3d:14: 36:67:93:e4:39:c0:5f:03:8d:1c:ee:53:a0:ab:25:13:06:c9: d4:7c:b6:07:9c:33:2e:0d:40:91:24:06:b3:01:4a:c2:b4:79: 11:19:51:66:ba:57:75:e4:31:c0:bd:68:40:e0:d7:70:ae:e4: 0c:da:68:97:43:5c:cb:21:68:28:af:ee:95:4a:30:15:66:1b: 85:ba:cb:6d:c1:8b:8c:e8:f5:5f:f2:48:51:d2:92:c9:ff:fd: 33:09:27:3e:a6:a5:b1:dc:35:21:4e:42:f0:2f:e1:e1:3a:b7: b3:d9:af:2f:9b:ad:d6:a0:62:33:1e:a9:b3:61:37:41:4b:bb: ed:bb:3b:d6:ac:ad:90:42:d3:e9:c3:fd:ed:ee:00:de:9e:7f: ea:78:b7:1a:71:2b:2f:4a:86:d1:57:aa:dd:1b:56:24:e4:b5: 56:71:a5:1f:8e:20:66:da:11:7d:0b:ad:f0:5a:eb:3a:f3:3d: 58:c0:cb:f1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUaDxHYBMA01A3B4sPZym22GsLeD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCNUNCMEJGQjU0MTgzQTYzMzQ4MjBENzA0RURCRjc5 QjA0Q0I0ODAeFw0yNTEwMTkxMjIwNDFaFw0yNTEwMjAxNDMwNDFaMDMxMTAvBgNV BAMTKEU3Rjk2MEFFMjVCMzYxQUY5OEU3MTczOTFENzAwODk0OUUwQzVGNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVqyMg7qIVrdMNTUKTzMEwr6cb rjd8Q8Sbll1lDNFs7jQu/F/jVaTZRmBfIk7eGofz3ZL2LRqwd8j6iF/ipMqMHwlG ERNSRy3+FUsLK3YxiMO2GfRqoUGBw7KSV/zaCNpo3JEyIfpX66gbzBjCS0ljekPo k8q6Jyv2eNQUXgAreDh9OpCwEKSjDcYkh2mTipL+u+PNppVjhUvw3cG4phV5ls0l vko9G6bGdlK7kjsOtxids+gJxREYwkZX5ghG/JVpgsviT54FbHU2iuNWv75zkF4c j3ugntDhwQk5ipD3T8keAQawk2//NwfA+8Xetrp+Q9vSQmtVMIVNuaYtLXzBAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU5/lgriWzYa+Y5xc5HXAIlJ4MX2AwHwYDVR0j BBgwFoAUIbXLC/tUGDpjNIINcE7b95sEy0gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDBjYTI2NmEtZGY4My00YmIyLTgwMDctNGY4NWI4OTNk YzcwLzAvMjFCNUNCMEJGQjU0MTgzQTYzMzQ4MjBENzA0RURCRjc5QjA0Q0I0OC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMUI1Q0IwQkZCNTQxODNBNjMzNDgyMEQ3 MDRFREJGNzlCMDRDQjQ4LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQwY2EyNjZhLWRmODMtNGJiMi04MDA3LTRmODViODkzZGM3MC8wLzIxQjVDQjBC RkI1NDE4M0E2MzM0ODIwRDcwNEVEQkY3OUIwNENCNDgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCs5A2W pknetolCpF1jySrXVQ84lbXYIWP8kYuHB5y/9N33sAMot8FqldNFzxSXNajBBmJb lmGHCUEPDV4k389YG2ZH5zPhPRQ2Z5PkOcBfA40c7lOgqyUTBsnUfLYHnDMuDUCR JAazAUrCtHkRGVFmuld15DHAvWhA4NdwruQM2miXQ1zLIWgor+6VSjAVZhuFustt wYuM6PVf8khR0pLJ//0zCSc+pqWx3DUhTkLwL+HhOrez2a8vm63WoGIzHqmzYTdB S7vtuzvWrK2QQtPpw/3t7gDenn/qeLcacSsvSobRV6rdG1Yk5LVWcaUfjiBm2hF9 C63wWus68z1YwMvx -----END CERTIFICATE-----Generated at Sun Oct 19 23:42:29 2025 by rpki-client