$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/1/1F65F1D375662B71E99A607509E1EE167C6058E9.mft File: 1F65F1D375662B71E99A607509E1EE167C6058E9.mft (raw, json) Hash identifier: /+xOrFdDHGzGsgLJzJRyKynxXH+XSqXqxv1G0C5UWJQ= Subject key identifier: 72:98:1D:A1:ED:43:41:EF:80:83:97:7A:1D:39:9B:F9:85:5E:A4:4D Authority key identifier: 1F:65:F1:D3:75:66:2B:71:E9:9A:60:75:09:E1:EE:16:7C:60:58:E9 Certificate issuer: /CN=1F65F1D375662B71E99A607509E1EE167C6058E9 Certificate serial: 51C507A929DD03D0A2B2E2026D0F8DC00C48EA2C Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/1F65F1D375662B71E99A607509E1EE167C6058E9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/1/1F65F1D375662B71E99A607509E1EE167C6058E9.mft Manifest number: 3F Signing time: Mon 20 Oct 2025 06:34:59 +0000 Manifest this update: Mon 20 Oct 2025 06:29:59 +0000 Manifest next update: Tue 21 Oct 2025 07:15:59 +0000 Files and hashes: 1: 326130623a346530373a6132303a3a2f34382d3438203d3e20323036363034.roa (hash: fAVGGvo5eHWXK3AVuspQpE/puwyP/UfOh1Bo/8nqzkc=) 2: 326130623a346530373a6138323a3a2f34382d3438203d3e20323133343133.roa (hash: T7lQYnTYs/DFRCwO/qyDeZsM0TJp9z7Gl/W0fx19d6k=) 3: 1F65F1D375662B71E99A607509E1EE167C6058E9.crl (hash: yIIfJtUg3DjXYaQwaiBVmQTryurJSmIGBvALKHzogwM=) 4: 326130623a346530373a6165303a3a2f34342d3438203d3e20323037353637.roa (hash: tCxR0HM6B91ZeEQP8X07ciSs82f3QdQW1fL5NCNzZ4Y=) 5: 326130623a346530373a6130303a3a2f34302d3438203d3e20323036363034.roa (hash: 4jU7nkyEYMs7J2TXcZX9KeA/iJZf4UqQuFvWyMWdlDs=) 6: 326130623a346530373a6138303a3a2f34382d3438203d3e20323133343133.roa (hash: HTS/ralW17W7pd9ogD55n1iySkhik1sPp/mEd7cNjPA=) 7: 326130623a346530373a6166303a3a2f34342d3438203d3e20323035393431.roa (hash: gAvnfENqTOZFeuxWI4M0Ew85ko6QLJBDxbZGFA8uVI0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/1/1F65F1D375662B71E99A607509E1EE167C6058E9.crl rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/1/1F65F1D375662B71E99A607509E1EE167C6058E9.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/1F65F1D375662B71E99A607509E1EE167C6058E9.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 07:15:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:c5:07:a9:29:dd:03:d0:a2:b2:e2:02:6d:0f:8d:c0:0c:48:ea:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F65F1D375662B71E99A607509E1EE167C6058E9 Validity Not Before: Oct 20 06:29:59 2025 GMT Not After : Oct 21 07:15:59 2025 GMT Subject: CN=72981DA1ED4341EF8083977A1D399BF9855EA44D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a3:97:fb:9b:4b:d0:c6:fa:b0:aa:50:2a:a6: 57:ea:f0:9e:2a:ae:a8:e6:aa:21:9f:c5:7b:41:7a: 0e:01:48:67:f0:41:7d:76:c3:61:54:19:38:39:0d: 8c:da:22:a0:8b:33:cd:93:ad:15:3d:15:fb:8a:08: b4:de:56:94:aa:34:84:81:a9:7b:58:a9:49:c9:f2: c2:dd:e0:dc:87:76:f5:89:07:60:ee:8f:38:ec:47: 16:ad:1c:9f:8a:45:d2:31:5d:65:a0:5c:c9:b9:d6: ca:b3:e4:06:d5:70:d4:53:f9:66:73:b7:2d:e0:83: 68:17:01:ec:0b:14:2e:21:93:bc:5c:47:c9:6f:b8: 4f:e1:40:1e:bc:b3:3d:40:39:5c:b0:f0:c0:0a:56: 31:b9:1c:46:ae:30:cf:a5:3c:ab:fe:a0:d7:1d:03: f8:a9:7d:4e:ea:3b:69:c6:7f:2f:96:a0:85:e0:33: 8c:a4:94:9e:7c:a5:fb:47:cf:fd:9a:e4:6b:24:ed: 52:bd:17:44:ac:50:79:1a:5c:ff:82:14:78:fe:51: 4f:9c:73:0b:cb:2a:9b:2c:94:99:15:a4:5d:b2:a4: 82:aa:c9:61:11:fc:ae:45:b7:14:3a:4f:07:25:10: 6d:3e:28:96:07:f2:bb:bb:c4:1a:96:43:f6:58:c2: 1f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:98:1D:A1:ED:43:41:EF:80:83:97:7A:1D:39:9B:F9:85:5E:A4:4D X509v3 Authority Key Identifier: keyid:1F:65:F1:D3:75:66:2B:71:E9:9A:60:75:09:E1:EE:16:7C:60:58:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/1/1F65F1D375662B71E99A607509E1EE167C6058E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/1F65F1D375662B71E99A607509E1EE167C6058E9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/1/1F65F1D375662B71E99A607509E1EE167C6058E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:93:53:d3:e6:53:14:5e:e8:17:5a:7b:e0:ae:f1:4e:78:d2: 8c:52:40:bc:0f:33:cb:de:bf:c9:b7:4d:78:24:d7:15:49:f3: 14:8a:90:28:af:b0:bf:5a:79:aa:d8:1b:34:91:33:6e:41:28: a1:51:e9:a4:eb:f0:d8:b2:3a:1b:75:fd:06:5c:64:97:0b:24: 0a:df:6c:1e:22:36:3e:0d:78:7b:50:55:45:84:5b:46:23:a7: e3:f0:9a:2f:64:c2:33:38:fb:fc:a3:0d:b3:f8:eb:e2:d8:a4: 49:fb:80:07:76:63:bf:fa:73:66:ef:73:3b:26:02:90:9c:2d: eb:a2:8e:9d:09:fd:75:f1:ff:b2:f3:85:e7:f2:e0:fd:66:00: f4:49:66:ef:6f:f4:6b:58:c5:7d:6e:a8:b6:8b:30:cc:d6:5f: d5:6c:29:58:85:00:72:1f:2e:28:ce:19:12:e4:f9:6b:3c:4f: ba:21:cd:e2:e7:65:00:26:09:b4:22:1f:d6:05:b8:f6:14:b7: 87:25:2c:ee:46:39:0e:3d:26:35:17:41:a6:13:d3:d4:c2:bf: 62:7f:dc:5f:49:a5:58:02:fe:79:4f:9e:ee:06:94:ca:fe:2e: 64:71:1f:62:eb:f4:e1:9f:01:d0:86:9b:da:c6:4b:aa:58:d7: 64:03:78:29 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUUcUHqSndA9CisuICbQ+NwAxI6iwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY2NUYxRDM3NTY2MkI3MUU5OUE2MDc1MDlFMUVFMTY3 QzYwNThFOTAeFw0yNTEwMjAwNjI5NTlaFw0yNTEwMjEwNzE1NTlaMDMxMTAvBgNV BAMTKDcyOTgxREExRUQ0MzQxRUY4MDgzOTc3QTFEMzk5QkY5ODU1RUE0NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHo5f7m0vQxvqwqlAqplfq8J4q rqjmqiGfxXtBeg4BSGfwQX12w2FUGTg5DYzaIqCLM82TrRU9FfuKCLTeVpSqNISB qXtYqUnJ8sLd4NyHdvWJB2DujzjsRxatHJ+KRdIxXWWgXMm51sqz5AbVcNRT+WZz ty3gg2gXAewLFC4hk7xcR8lvuE/hQB68sz1AOVyw8MAKVjG5HEauMM+lPKv+oNcd A/ipfU7qO2nGfy+WoIXgM4yklJ58pftHz/2a5Gsk7VK9F0SsUHkaXP+CFHj+UU+c cwvLKpsslJkVpF2ypIKqyWER/K5FtxQ6TwclEG0+KJYH8ru7xBqWQ/ZYwh+5AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUcpgdoe1DQe+Ag5d6HTmb+YVepE0wHwYDVR0j BBgwFoAUH2Xx03VmK3HpmmB1CeHuFnxgWOkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDBkNjZkNGQtNWNkNC00MzM3LTg2MTUtNWIyNzdmNDFk ODhmLzEvMUY2NUYxRDM3NTY2MkI3MUU5OUE2MDc1MDlFMUVFMTY3QzYwNThFOS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMUY2NUYxRDM3NTY2MkI3MUU5OUE2MDc1MDlFMUVFMTY3QzYw NThFOS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80MGQ2NmQ0ZC01 Y2Q0LTQzMzctODYxNS01YjI3N2Y0MWQ4OGYvMS8xRjY1RjFEMzc1NjYyQjcxRTk5 QTYwNzUwOUUxRUUxNjdDNjA1OEU5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJNT0+ZTFF7oF1p74K7x TnjSjFJAvA8zy96/ybdNeCTXFUnzFIqQKK+wv1p5qtgbNJEzbkEooVHppOvw2LI6 G3X9BlxklwskCt9sHiI2Pg14e1BVRYRbRiOn4/CaL2TCMzj7/KMNs/jr4tikSfuA B3Zjv/pzZu9zOyYCkJwt66KOnQn9dfH/svOF5/Lg/WYA9Elm72/0a1jFfW6otosw zNZf1WwpWIUAch8uKM4ZEuT5azxPuiHN4udlACYJtCIf1gW49hS3hyUs7kY5Dj0m NRdBphPT1MK/Yn/cX0mlWAL+eU+e7gaUyv4uZHEfYuv04Z8B0Iab2sZLqljXZAN4 KQ== -----END CERTIFICATE-----Generated at Mon Oct 20 23:42:29 2025 by rpki-client