$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft File: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft (raw, json) Hash identifier: enDeml27psDnKSLYksduqYCUMCZ7fyljODTVZLxMPWc= Subject key identifier: 15:B9:78:FB:84:E8:2E:F1:7F:B1:ED:EA:FE:8C:64:67:B6:F9:3F:5D Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Certificate serial: 1F5EFA9D370E4AAE3327A7FE3198E516D45A1A34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft Manifest number: 04C5 Signing time: Sun 19 Oct 2025 21:11:39 +0000 Manifest this update: Sun 19 Oct 2025 21:06:39 +0000 Manifest next update: Mon 20 Oct 2025 21:50:39 +0000 Files and hashes: 1: 3138382e3136342e3135332e302f32342d3234203d3e203631333137.roa (hash: pkJz5L9iLZRF+OIvLDh3t2xUInq31L6An4us+3j1eD0=) 2: 3138382e3136342e3135362e302f32342d3234203d3e20383334.roa (hash: sY/xAuh6Mg68YWt7c8TloEoU7TIBsTXsCx6tRGi7xp4=) 3: 3138382e3136342e3135352e302f32342d3234203d3e203631333137.roa (hash: W1I8woHaqJ6kU4xjFwKm1g6uV7UZ51m6Dv8R/7Dp0Oc=) 4: 3138382e3136342e3135322e302f32342d3234203d3e203631333137.roa (hash: PjHq1CK+fSk+5WuONiKJilG5oXTFh0dZnkKMEZVNP8E=) 5: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl (hash: KieSYHbTWgpC40Q3qSfHpGmFKeSv3ewNY6beobhAx+k=) 6: 3138382e3136342e3135342e302f32342d3234203d3e2039333034.roa (hash: Xrl4k2Y1ZQnjBYts0VWEIYeb2G4oTSJ6MhQs1UM8vvM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 21:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:5e:fa:9d:37:0e:4a:ae:33:27:a7:fe:31:98:e5:16:d4:5a:1a:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Validity Not Before: Oct 19 21:06:39 2025 GMT Not After : Oct 20 21:50:39 2025 GMT Subject: CN=15B978FB84E82EF17FB1EDEAFE8C6467B6F93F5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2f:a3:a1:18:7e:0a:8b:3a:11:eb:c2:b0:cf: f7:ba:28:b9:8b:84:81:63:c5:2e:92:6e:74:14:59: 66:84:25:ae:3c:23:99:ad:6e:1f:ec:3e:8d:f3:ca: 6c:c4:e0:25:f5:59:e3:77:af:cf:3f:46:73:51:1b: 34:22:9c:fa:74:f4:48:61:17:9a:ad:6e:df:3c:2f: 5f:b8:59:7f:8e:b8:f9:9f:48:dc:43:d7:38:9b:95: 15:2e:8d:e1:3b:42:eb:e1:76:68:92:56:86:1c:5f: 68:9c:a2:57:7b:dd:1c:a8:b0:26:b6:9d:5e:12:7d: 8f:81:15:35:be:ea:9e:10:1b:ad:26:2f:56:57:d4: 44:28:70:0c:18:51:b5:21:49:01:56:e7:20:c1:8e: 5a:92:2d:16:8b:ee:a2:28:46:50:7c:7b:2c:91:f5: a0:ba:36:e5:db:37:8b:a8:d8:9e:be:0f:99:89:21: 87:c6:71:cc:1e:b5:93:56:78:c8:b3:10:64:c8:32: 6a:25:9e:f8:23:c7:96:e9:2b:42:13:e5:ec:23:a8: 1d:c9:ae:99:f6:8d:5e:69:b9:f9:7f:23:2e:f4:3a: 6f:0e:24:dd:e8:c0:1c:51:6f:90:89:b3:bb:d7:f4: 9a:fb:b2:dd:b0:cc:9a:0f:2a:af:26:55:24:8d:63: 09:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B9:78:FB:84:E8:2E:F1:7F:B1:ED:EA:FE:8C:64:67:B6:F9:3F:5D X509v3 Authority Key Identifier: keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:08:1c:26:23:01:30:67:1c:bb:b2:e1:7b:c5:8a:9c:d6:08: af:f4:e4:40:d7:19:f9:bd:c7:c3:66:8a:14:bf:3c:81:5a:1c: 8c:b8:a0:aa:c2:ac:d0:24:ba:c4:7b:dd:ae:35:20:6d:ea:4e: 88:81:f7:9d:92:ec:2d:fd:54:ad:3f:4b:ec:14:7c:c2:cd:b9: ae:54:41:53:d6:3e:33:d0:1b:39:ca:48:c2:2d:90:b4:a6:6c: f2:fb:ae:17:82:84:e0:2f:92:0b:13:d3:8e:ac:3e:52:45:ed: 37:65:c1:dc:a5:91:6d:2d:da:5d:19:91:f9:08:23:84:0b:10: d4:23:a0:24:9d:83:7a:61:d2:96:2c:e7:d3:ab:dc:df:29:38: d3:a5:c0:a7:c3:f9:4d:ff:b9:30:a7:dd:bd:ca:46:fa:66:b3: 5c:63:e7:f4:15:2a:44:68:4a:43:48:67:da:ba:7f:d8:d8:0b: 94:2f:b4:b5:55:dd:b1:8d:a1:05:3d:84:9e:2f:8c:b0:6c:97: 5d:e9:92:1a:72:50:92:d0:ff:d8:8c:9c:e0:41:b1:ef:b7:72: 02:44:ca:cf:f1:3b:58:7b:ff:e4:45:d4:50:dc:8c:83:d4:f0: a9:1a:36:9d:58:9e:78:be:8e:f1:f4:64:33:9c:9e:18:7a:92: be:48:93:73 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUH176nTcOSq4zJ6f+MZjlFtRaGjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI5YmE5YWRkZTk2MzU3NzdiZjU4NmZkNDkzZTE0Y2Qz MGY3YzRjYTAeFw0yNTEwMTkyMTA2MzlaFw0yNTEwMjAyMTUwMzlaMDMxMTAvBgNV BAMTKDE1Qjk3OEZCODRFODJFRjE3RkIxRURFQUZFOEM2NDY3QjZGOTNGNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbL6OhGH4KizoR68Kwz/e6KLmL hIFjxS6SbnQUWWaEJa48I5mtbh/sPo3zymzE4CX1WeN3r88/RnNRGzQinPp09Ehh F5qtbt88L1+4WX+OuPmfSNxD1ziblRUujeE7QuvhdmiSVoYcX2icold73RyosCa2 nV4SfY+BFTW+6p4QG60mL1ZX1EQocAwYUbUhSQFW5yDBjlqSLRaL7qIoRlB8eyyR 9aC6NuXbN4uo2J6+D5mJIYfGccwetZNWeMizEGTIMmolnvgjx5bpK0IT5ewjqB3J rpn2jV5pufl/Iy70Om8OJN3owBxRb5CJs7vX9Jr7st2wzJoPKq8mVSSNYwnBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUFbl4+4ToLvF/se3q/oxkZ7b5P10wHwYDVR0j BBgwFoAUi5uprd6WNXd79Yb9ST4UzTD3xMowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmMwMzA4OTAtZjZlMC00MTBjLWJjOTktYWYwOTIxZDFj M2E0LzAvOEI5QkE5QURERTk2MzU3NzdCRjU4NkZENDkzRTE0Q0QzMEY3QzRDQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2k1dXByZDZXTlhkNzlZYjlTVDRVelRE M3hNby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzAzMDg5MC1m NmUwLTQxMGMtYmM5OS1hZjA5MjFkMWMzYTQvMC84QjlCQTlBRERFOTYzNTc3N0JG NTg2RkQ0OTNFMTRDRDMwRjdDNENBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoggcJiMBMGccu7Lhe8WK nNYIr/TkQNcZ+b3Hw2aKFL88gVocjLigqsKs0CS6xHvdrjUgbepOiIH3nZLsLf1U rT9L7BR8ws25rlRBU9Y+M9AbOcpIwi2QtKZs8vuuF4KE4C+SCxPTjqw+UkXtN2XB 3KWRbS3aXRmR+QgjhAsQ1COgJJ2DemHSlizn06vc3yk406XAp8P5Tf+5MKfdvcpG +mazXGPn9BUqRGhKQ0hn2rp/2NgLlC+0tVXdsY2hBT2Eni+MsGyXXemSGnJQktD/ 2Iyc4EGx77dyAkTKz/E7WHv/5EXUUNyMg9TwqRo2nVieeL6O8fRkM5yeGHqSvkiT cw== -----END CERTIFICATE-----Generated at Mon Oct 20 08:47:14 2025 by rpki-client