$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft File: B3F1737E90F240D7ABB33C72F84D71482FE62679.mft (raw, json) Hash identifier: uAQW3Z1Ks8N8lDz4zDy5XPPHiSxGeg+VKjQYCqS4HYI= Subject key identifier: 24:F5:81:6B:10:75:28:5E:16:FA:8D:2D:AC:E8:DA:3C:CB:25:B5:3E Authority key identifier: B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79 Certificate issuer: /CN=B3F1737E90F240D7ABB33C72F84D71482FE62679 Certificate serial: 6D1EEE03ECB2F50575B72C7E4B532A677AB01D63 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft Manifest number: 95 Signing time: Sun 19 Oct 2025 20:48:06 +0000 Manifest this update: Sun 19 Oct 2025 20:43:06 +0000 Manifest next update: Mon 20 Oct 2025 23:27:06 +0000 Files and hashes: 1: B3F1737E90F240D7ABB33C72F84D71482FE62679.crl (hash: C05FrhTYMQtAV6YvAT/S48HBy0ro8KdNs/B6NbsjvXU=) 2: 326130373a353463373a353939393a3a2f34382d3438203d3e20323136343535.roa (hash: SvnI/kKkXn3yiVhNqVKN9Taah5WCLs8Rw+D4PBjSrbo=) 3: 326130373a353463373a356666653a3a2f34382d3438203d3e20323135353737.roa (hash: FG+PaaelFQQTh0Pl3BlClI1RFrk+FdkeBozLHlfkasU=) 4: 326130373a353463373a356630303a3a2f34342d3434203d3e20323135353737.roa (hash: x50UL+Ve3n2XGikbTbQdFLaQIWslIjcJnasiyHq58lM=) 5: 326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa (hash: dERySCDhc3+rlKwMAYMhD9XvddhhgSjXbVZeRoj98gc=) 6: 326130373a353463373a356631303a3a2f34382d3438203d3e20323135353737.roa (hash: 7mCuwzfIey+Hcqy/Vhuj4zUx9bQcgkzpUeh+UNvlKO4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 13:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:1e:ee:03:ec:b2:f5:05:75:b7:2c:7e:4b:53:2a:67:7a:b0:1d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F1737E90F240D7ABB33C72F84D71482FE62679 Validity Not Before: Oct 19 20:43:06 2025 GMT Not After : Oct 20 23:27:06 2025 GMT Subject: CN=24F5816B1075285E16FA8D2DACE8DA3CCB25B53E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b7:7a:e4:6d:7b:8d:ba:a5:37:df:05:58:b0: 3c:b8:38:03:5f:d4:89:d4:ca:32:12:61:66:d7:d7: d3:1d:22:c6:05:4d:49:51:b3:2b:ee:48:94:c8:1b: 25:45:3d:22:4e:22:1d:44:49:37:b0:b0:33:83:91: 72:22:27:5c:05:6c:34:c8:af:8a:77:79:ed:4b:0c: 61:6a:54:ea:ce:96:40:40:e3:f7:ea:bd:f4:f8:00: 9b:d3:3b:3f:a6:73:ba:89:31:10:4d:de:dc:fd:31: 72:3a:ba:5f:5d:d8:6d:24:61:f8:be:73:83:ec:c6: a4:7a:b2:da:c6:4e:0c:42:e8:29:b8:48:f4:53:ea: 5c:84:ae:05:ef:60:17:de:a6:5c:64:bf:35:10:4c: 84:aa:88:28:9d:4c:41:b7:a9:05:8c:3e:63:26:5a: 80:10:5d:4f:90:a3:c4:1f:bc:ed:d9:b4:44:59:1d: 01:bd:46:1e:61:8b:82:ee:c9:3e:f9:e0:d2:ed:84: 67:79:fe:3e:8d:f0:e6:92:a3:16:a5:25:e3:62:0f: e6:93:16:18:53:96:b8:60:c5:81:64:11:76:48:3f: bb:53:0c:56:c6:6a:d4:28:25:4f:51:c5:61:ae:5c: 25:91:5f:c5:6f:a0:12:05:de:86:66:76:3b:dd:6c: 4f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F5:81:6B:10:75:28:5E:16:FA:8D:2D:AC:E8:DA:3C:CB:25:B5:3E X509v3 Authority Key Identifier: keyid:B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:4f:88:c8:89:6d:ff:4d:e6:37:8f:9b:9e:e5:32:88:f9:02: c1:c8:2d:cb:9a:08:02:10:89:d0:a9:58:b2:b8:2d:95:a1:67: 42:2e:a4:23:a7:2c:dd:3c:64:ec:eb:3d:07:2e:f3:63:3c:9d: e7:53:1e:c5:16:68:45:c1:15:41:1e:b0:20:ed:fa:c2:f7:31: 9e:3d:29:25:43:42:48:d0:00:dc:0d:aa:75:ff:18:31:06:f5: da:cf:15:5d:f3:f3:a0:76:8e:28:2a:f8:4a:0f:24:79:cf:04: c3:04:49:9d:c8:e0:a7:0b:ed:40:07:0a:98:e8:ea:50:88:2f: 7e:98:0a:4b:54:94:68:33:fb:26:e9:68:b7:77:3f:f7:61:db: 64:1f:06:cc:c0:61:88:e0:d0:24:dd:a7:02:f9:5f:41:f9:e1: ca:1f:79:d0:30:e7:a4:b4:eb:77:a5:c8:62:f4:7f:90:67:8b: 4a:57:34:7f:7b:c8:87:4c:67:4e:93:bf:24:c3:50:78:c6:01: 90:96:88:8e:04:02:39:2a:09:38:f2:7d:bd:17:69:46:98:73: 62:16:44:ad:c3:61:b5:e0:91:46:29:c8:f0:c9:4c:e1:5d:3d: c6:b2:78:48:6a:db:b6:d4:8f:0e:8d:58:48:e4:66:95:83:30: 70:61:17:b0 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUbR7uA+yy9QV1tyx+S1MqZ3qwHWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgy RkU2MjY3OTAeFw0yNTEwMTkyMDQzMDZaFw0yNTEwMjAyMzI3MDZaMDMxMTAvBgNV BAMTKDI0RjU4MTZCMTA3NTI4NUUxNkZBOEQyREFDRThEQTNDQ0IyNUI1M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4t3rkbXuNuqU33wVYsDy4OANf 1InUyjISYWbX19MdIsYFTUlRsyvuSJTIGyVFPSJOIh1ESTewsDODkXIiJ1wFbDTI r4p3ee1LDGFqVOrOlkBA4/fqvfT4AJvTOz+mc7qJMRBN3tz9MXI6ul9d2G0kYfi+ c4PsxqR6strGTgxC6Cm4SPRT6lyErgXvYBfeplxkvzUQTISqiCidTEG3qQWMPmMm WoAQXU+Qo8QfvO3ZtERZHQG9Rh5hi4LuyT754NLthGd5/j6N8OaSoxalJeNiD+aT FhhTlrhgxYFkEXZIP7tTDFbGatQoJU9RxWGuXCWRX8VvoBIF3oZmdjvdbE/zAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUJPWBaxB1KF4W+o0trOjaPMsltT4wHwYDVR0j BBgwFoAUs/FzfpDyQNerszxy+E1xSC/mJnkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzIvQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgyRkU2MjY3OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC9CM0YxNzM3RTkwRjI0MEQ3QUJCMzNDNzJG ODRENzE0ODJGRTYyNjc5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzU4MjFjNDdlLWU4MTUtNDJkZS1iZDZiLTE5YTJlMWFlNTY0YS8yL0IzRjE3MzdF OTBGMjQwRDdBQkIzM0M3MkY4NEQ3MTQ4MkZFNjI2NzkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCHT4jI iW3/TeY3j5ue5TKI+QLByC3LmggCEInQqViyuC2VoWdCLqQjpyzdPGTs6z0HLvNj PJ3nUx7FFmhFwRVBHrAg7frC9zGePSklQ0JI0ADcDap1/xgxBvXazxVd8/Ogdo4o KvhKDyR5zwTDBEmdyOCnC+1ABwqY6OpQiC9+mApLVJRoM/sm6Wi3dz/3YdtkHwbM wGGI4NAk3acC+V9B+eHKH3nQMOektOt3pchi9H+QZ4tKVzR/e8iHTGdOk78kw1B4 xgGQloiOBAI5Kgk48n29F2lGmHNiFkStw2G14JFGKcjwyUzhXT3GsnhIatu21I8O jVhI5GaVgzBwYRew -----END CERTIFICATE-----Generated at Mon Oct 20 06:30:43 2025 by rpki-client