$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft File: 92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft (raw, json) Hash identifier: SK3fkPd6/Ur6spZ0t7hqfNmji3eevYkFFX6Pn4E+Fk8= Subject key identifier: 05:57:CA:74:31:93:95:55:C4:46:76:7F:CD:05:74:51:45:C4:1E:D4 Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94 Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94 Certificate serial: 3FEFA869D753745B86D8A65328EACE189FE4F9E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft Manifest number: FD Signing time: Sun 19 Oct 2025 09:36:37 +0000 Manifest this update: Sun 19 Oct 2025 09:31:37 +0000 Manifest next update: Mon 20 Oct 2025 11:39:37 +0000 Files and hashes: 1: 39352e3231342e3138332e302f32342d3234203d3e20323039313831.roa (hash: lTsB3YA1lHFbSl1Cmaufvak87ZyxIaRmoFdP+J/wwxc=) 2: 39352e3231342e3138322e302f32342d3234203d3e20323131343135.roa (hash: 7RDjli52ea3Y5rIxOBi7CoAOYzObgN76cF1oNhGaH/0=) 3: 39352e3231342e3138322e302f32342d3234203d3e20323132333834.roa (hash: ahvCpQCYKDC5UmCWINUE1+9+R3CEuxDs9xpt+/mHGMc=) 4: 92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl (hash: SarCGj5rPKyFuTPEv1Z6Fos39/10kRP06LyKgfCVxT8=) 5: 39352e3231342e3138302e302f32342d3234203d3e20323033373538.roa (hash: yeHT2siMw+46e40lrxlb+yyyQe2+Rk/4CH0GwC6laEg=) 6: 39352e3231342e3137332e302f32342d3234203d3e20323035383836.roa (hash: hlOWlwYDh27EwXxqncP4qruI2Plo8gnGCk/gZpUDCgY=) 7: 34352e3135362e35322e302f32322d3232203d3e2039303039.roa (hash: eK18gsMy8+wzgYZmaz7TkcO08JcfPTkHAWlv0aJXuz0=) 8: 34352e3133392e3139382e302f32342d3234203d3e20323134343636.roa (hash: 9KX5zC7UuI47N7heL//vNyLO3x7YEi1CucEhFX8SUR0=) 9: 39352e3231342e3137342e302f32342d3234203d3e20323134343636.roa (hash: EnyfxlxrEZoOAQu439Mhaj0MSgN4o3Cr584mhVLUCgw=) 10: 34352e3135362e35322e302f32342d3234203d3e2039303039.roa (hash: TVTxbW5Hn/uwBDAOJAxsysgEid6g/rYwKpFkj0KhHLI=) 11: 34352e3135362e35322e302f32322d3234203d3e2039303039.roa (hash: Bs9P6MukVIk3Mqg2bASja42eYp9YV11upUqwTKj8Pqc=) 12: 39352e3231342e3137322e302f32342d3234203d3e20313937343737.roa (hash: y8hcJrulcRceTx871qhtDNBcbMxDEQZoJON7Dc+UpGA=) 13: 34352e3133392e3139392e302f32342d3234203d3e20323134343636.roa (hash: JaeJstE2poR1Rlm8a7RHcBFfHeeu7vNkxKzYr0p4Jc8=) 14: 3138352e3131352e3230372e302f32342d3234203d3e20323132333336.roa (hash: yFl38PxDDUPllDewnZ7MEFH9Z5qJaOTL0zY/pvxRoUY=) 15: 39352e3231342e3137352e302f32342d3234203d3e20313335333931.roa (hash: dZLABnxKpTxFiKmt1/yK20i3zGqpWgZ6NnQoPD/883U=) 16: 39352e3231342e3138312e302f32342d3234203d3e20323132323338.roa (hash: P3AXSCPo5qCcqJ/tF9UnDRiSqmNKJoNVWYccPe9dv1w=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ef:a8:69:d7:53:74:5b:86:d8:a6:53:28:ea:ce:18:9f:e4:f9:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94 Validity Not Before: Oct 19 09:31:37 2025 GMT Not After : Oct 20 11:39:37 2025 GMT Subject: CN=0557CA7431939555C446767FCD05745145C41ED4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ea:2a:70:d6:39:61:35:10:c5:51:92:f6:52: 0f:e7:d5:d2:94:db:3e:d1:20:07:37:14:97:b5:48: f7:7d:ef:40:8e:55:93:26:14:26:dc:ed:5b:e5:c6: a0:0a:ee:9f:f9:c2:d2:ed:42:7c:67:4a:33:4c:4e: a3:c1:86:b3:a0:89:fe:88:1c:c8:56:f8:3a:98:b1: c8:98:78:b5:e0:1a:db:1e:01:ec:91:0d:ca:f2:79: 9a:31:cd:21:29:09:7b:6f:c1:03:97:85:82:63:7d: 15:4b:dc:13:f1:4d:f2:61:b9:0f:05:49:e5:22:73: 18:1b:b1:e5:83:8c:8e:28:23:04:0b:42:08:23:d1: cf:d9:cd:ac:3d:84:9f:2e:86:07:0e:38:73:34:67: 0d:0e:61:41:ab:23:05:d4:d8:9e:0c:b3:fa:ea:32: 56:d4:ea:a9:5c:33:c8:38:a0:2a:a9:7d:48:71:3c: 83:f0:f6:74:06:fa:c2:d4:f7:49:58:72:00:8d:7a: 97:11:0c:cc:3e:60:89:02:3f:1e:88:f7:9e:49:e3: 90:fe:98:ce:f9:4e:9d:4d:ea:11:5b:24:0d:13:6c: 4d:33:87:b3:b8:da:c1:c1:13:42:6e:d9:52:61:49: 7f:91:64:54:76:71:d6:f7:38:6b:d1:f4:c1:df:6f: 53:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:57:CA:74:31:93:95:55:C4:46:76:7F:CD:05:74:51:45:C4:1E:D4 X509v3 Authority Key Identifier: keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:a5:57:61:67:8c:0a:bb:e1:b9:11:f7:cc:a8:fa:61:92:11: c0:f7:fb:ae:79:30:29:1e:b6:c0:33:7c:7e:c1:71:ca:69:af: 1d:ff:b0:2a:d2:02:1d:e6:ba:db:5d:f3:2b:85:78:7d:8e:44: 33:f9:70:f5:f1:65:9b:e6:fc:28:44:13:0c:17:e6:dd:88:ac: ed:c1:48:86:81:66:e3:72:da:55:70:1c:43:c3:54:43:8f:a1: e6:db:67:0a:d6:a0:d7:bf:89:61:82:7a:ad:a0:b3:77:a0:88: e1:c4:0a:d6:15:68:25:ac:ed:12:90:6a:62:bd:6d:bf:cf:80: ed:70:38:41:f9:b4:3f:00:7b:3e:5c:bb:06:97:3d:c4:eb:e0: 50:11:8a:c0:fb:04:8c:31:66:cd:d9:f2:7d:36:e2:31:01:f8: eb:ab:ec:ca:11:5d:76:ea:de:9e:5c:a6:f5:c7:da:58:3a:e5: b3:ef:a6:7d:b2:6b:5b:54:f3:82:e1:36:a1:de:08:c8:a6:01: d2:77:7f:8a:93:1d:57:d6:de:cf:85:03:ec:57:ef:91:f3:95: 77:d9:80:93:d2:70:fc:6d:bf:a0:52:d8:7a:9f:d4:00:8d:a3: f9:5c:07:02:2b:99:cc:10:aa:b0:50:9c:dd:8b:c3:26:9b:8c: 16:6c:b6:69 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUP++oaddTdFuG2KZTKOrOGJ/k+ekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJmNDlkZTg2ODRmMTI4N2Y0ZjZjYjE4NWQ1Y2Y3ZGU4 MGM5MGI5NDAeFw0yNTEwMTkwOTMxMzdaFw0yNTEwMjAxMTM5MzdaMDMxMTAvBgNV BAMTKDA1NTdDQTc0MzE5Mzk1NTVDNDQ2NzY3RkNEMDU3NDUxNDVDNDFFRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM6ipw1jlhNRDFUZL2Ug/n1dKU 2z7RIAc3FJe1SPd970COVZMmFCbc7VvlxqAK7p/5wtLtQnxnSjNMTqPBhrOgif6I HMhW+DqYsciYeLXgGtseAeyRDcryeZoxzSEpCXtvwQOXhYJjfRVL3BPxTfJhuQ8F SeUicxgbseWDjI4oIwQLQggj0c/Zzaw9hJ8uhgcOOHM0Zw0OYUGrIwXU2J4Ms/rq MlbU6qlcM8g4oCqpfUhxPIPw9nQG+sLU90lYcgCNepcRDMw+YIkCPx6I955J45D+ mM75Tp1N6hFbJA0TbE0zh7O42sHBE0Ju2VJhSX+RZFR2cdb3OGvR9MHfb1P5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUBVfKdDGTlVXERnZ/zQV0UUXEHtQwHwYDVR0j BBgwFoAUkvSd6GhPEof09ssYXVz33oDJC5QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjA5MjMzODktMmJkZS00M2UwLWIwZDUtZmMyNDRhNjMw M2QwLzAvOTJGNDlERTg2ODRGMTI4N0Y0RjZDQjE4NUQ1Q0Y3REU4MEM5MEI5NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2t2U2Q2R2hQRW9mMDlzc1lYVnozM29E SkM1US5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MDkyMzM4OS0y YmRlLTQzZTAtYjBkNS1mYzI0NGE2MzAzZDAvMC85MkY0OURFODY4NEYxMjg3RjRG NkNCMTg1RDVDRjdERTgwQzkwQjk0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg6VXYWeMCrvhuRH3zKj6 YZIRwPf7rnkwKR62wDN8fsFxymmvHf+wKtICHea6213zK4V4fY5EM/lw9fFlm+b8 KEQTDBfm3Yis7cFIhoFm43LaVXAcQ8NUQ4+h5ttnCtag17+JYYJ6raCzd6CI4cQK 1hVoJaztEpBqYr1tv8+A7XA4Qfm0PwB7Ply7Bpc9xOvgUBGKwPsEjDFmzdnyfTbi MQH466vsyhFddurenlym9cfaWDrls++mfbJrW1TzguE2od4IyKYB0nd/ipMdV9be z4UD7FfvkfOVd9mAk9Jw/G2/oFLYep/UAI2j+VwHAiuZzBCqsFCc3YvDJpuMFmy2 aQ== -----END CERTIFICATE-----Generated at Sun Oct 19 18:23:15 2025 by rpki-client