$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft File: C284E54726A876081FA2857EF4AF5B1A78D096B4.mft (raw, json) Hash identifier: b47XJExBrQCGX+WtyNtRLMjCkN2ohTsSmlRyH2cWmdI= Subject key identifier: 4B:33:91:6F:D0:49:18:8E:93:88:96:6B:0D:39:7E:84:0C:53:AA:4F Authority key identifier: C2:84:E5:47:26:A8:76:08:1F:A2:85:7E:F4:AF:5B:1A:78:D0:96:B4 Certificate issuer: /CN=C284E54726A876081FA2857EF4AF5B1A78D096B4 Certificate serial: 28C6858B65C8A1882A37DC44FD9789F597DCC7D3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/C284E54726A876081FA2857EF4AF5B1A78D096B4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft Manifest number: 94 Signing time: Mon 20 Oct 2025 05:57:35 +0000 Manifest this update: Mon 20 Oct 2025 05:52:35 +0000 Manifest next update: Tue 21 Oct 2025 08:26:35 +0000 Files and hashes: 1: C284E54726A876081FA2857EF4AF5B1A78D096B4.crl (hash: cMPeN40J3Fu+JWpW3fI6z+Pzs9uQiNyrjj2CSMWQH+8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/C284E54726A876081FA2857EF4AF5B1A78D096B4.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 08:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:c6:85:8b:65:c8:a1:88:2a:37:dc:44:fd:97:89:f5:97:dc:c7:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C284E54726A876081FA2857EF4AF5B1A78D096B4 Validity Not Before: Oct 20 05:52:35 2025 GMT Not After : Oct 21 08:26:35 2025 GMT Subject: CN=4B33916FD049188E9388966B0D397E840C53AA4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c1:3f:9c:c8:30:8a:57:5b:31:a4:35:41:8e: 19:59:42:57:9c:fa:3b:7c:c3:bc:9e:d5:c6:4f:a5: 9c:59:42:e5:1b:10:df:e6:07:0e:45:ee:a9:7e:4a: ef:24:74:96:f2:39:56:9f:59:11:15:8d:06:b0:89: a4:7f:28:56:6c:25:d4:d7:7b:1d:8e:81:87:54:65: d4:0a:62:b4:01:23:97:83:72:eb:4a:91:7f:c1:ec: b3:95:31:7a:73:90:22:12:d3:36:bf:50:0f:1b:65: 85:65:a0:5e:72:db:7d:29:07:c3:36:1a:f6:29:e4: 5c:4d:8c:00:3d:27:ae:12:bc:30:01:93:8a:31:95: 0a:17:10:bf:bd:a0:12:8a:84:b5:47:b6:ee:13:68: 6c:82:62:f7:4d:25:1d:3f:48:7c:3b:5e:00:18:90: 4e:4f:45:44:2a:4b:d7:a2:d1:dc:e7:4f:87:9a:5c: 5b:da:ec:d7:b2:35:94:6f:b4:8b:16:65:cb:e9:f7: b8:90:c9:60:5e:90:06:32:62:1c:db:19:6e:2d:45: 48:b0:e6:62:ab:65:3b:1b:ed:9e:63:a1:3f:11:b0: b8:3a:69:14:d8:62:75:04:fb:bf:75:80:d8:a4:00: e3:d4:63:8a:2d:33:73:2b:73:89:28:31:ec:66:b0: a1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:33:91:6F:D0:49:18:8E:93:88:96:6B:0D:39:7E:84:0C:53:AA:4F X509v3 Authority Key Identifier: keyid:C2:84:E5:47:26:A8:76:08:1F:A2:85:7E:F4:AF:5B:1A:78:D0:96:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/C284E54726A876081FA2857EF4AF5B1A78D096B4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:9c:dc:cd:3d:ab:e5:92:92:3d:db:b7:47:55:ae:99:2b:03: d8:11:04:f8:cc:a2:bb:ec:62:f9:f1:72:38:6b:20:25:2b:3e: aa:b3:2d:90:a1:3d:5e:d0:bb:23:72:e4:3a:a8:f8:eb:1a:41: 2e:3e:b1:7f:18:29:7c:b5:48:cb:6d:93:a9:3d:d2:4c:0b:04: 66:fc:b3:ce:4f:bb:89:ea:ed:a3:c4:a0:e0:4f:a7:83:0d:c4: 1d:52:90:bf:35:09:68:e3:d5:d4:d3:20:26:fc:8e:48:6a:9e: ec:35:98:10:0a:83:59:6f:1f:0f:67:2d:7d:93:99:0a:72:01: b5:7a:27:2f:3f:83:bf:3c:0a:11:47:5a:17:0a:56:e3:45:e9: 02:db:ac:83:a5:87:d9:6d:68:ce:c5:02:84:59:2a:6b:26:0c: ff:1b:e6:0b:31:6e:78:b7:e2:69:03:18:3c:6d:5c:77:b6:a6: 5b:39:5b:5b:e5:c8:b4:73:4b:75:99:c8:42:36:4d:61:14:67: 89:b0:51:a4:fe:9c:07:a0:83:10:ed:97:78:b5:15:42:8b:f9: e0:da:67:1c:fb:70:fa:aa:dc:e4:76:d9:57:55:49:01:28:09: 2b:74:2d:0c:ef:21:90:87:5e:3e:ca:ca:62:1f:35:82:f7:4f: f0:96:b7:f7 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUKMaFi2XIoYgqN9xE/ZeJ9Zfcx9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI4NEU1NDcyNkE4NzYwODFGQTI4NTdFRjRBRjVCMUE3 OEQwOTZCNDAeFw0yNTEwMjAwNTUyMzVaFw0yNTEwMjEwODI2MzVaMDMxMTAvBgNV BAMTKDRCMzM5MTZGRDA0OTE4OEU5Mzg4OTY2QjBEMzk3RTg0MEM1M0FBNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZwT+cyDCKV1sxpDVBjhlZQlec +jt8w7ye1cZPpZxZQuUbEN/mBw5F7ql+Su8kdJbyOVafWREVjQawiaR/KFZsJdTX ex2OgYdUZdQKYrQBI5eDcutKkX/B7LOVMXpzkCIS0za/UA8bZYVloF5y230pB8M2 GvYp5FxNjAA9J64SvDABk4oxlQoXEL+9oBKKhLVHtu4TaGyCYvdNJR0/SHw7XgAY kE5PRUQqS9ei0dznT4eaXFva7NeyNZRvtIsWZcvp97iQyWBekAYyYhzbGW4tRUiw 5mKrZTsb7Z5joT8RsLg6aRTYYnUE+791gNikAOPUY4otM3Mrc4koMexmsKEzAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUSzORb9BJGI6TiJZrDTl+hAxTqk8wHwYDVR0j BBgwFoAUwoTlRyaodggfooV+9K9bGnjQlrQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5 YjNkLzUvQzI4NEU1NDcyNkE4NzYwODFGQTI4NTdFRjRBRjVCMUE3OEQwOTZCNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC9DMjg0RTU0NzI2QTg3NjA4MUZBMjg1N0VG NEFGNUIxQTc4RDA5NkI0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzZmZjdhOTg5LWVjZGYtNDNkNi04NmUxLWY2YzM5MzViOWIzZC81L0MyODRFNTQ3 MjZBODc2MDgxRkEyODU3RUY0QUY1QjFBNzhEMDk2QjQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBJnNzN PavlkpI927dHVa6ZKwPYEQT4zKK77GL58XI4ayAlKz6qsy2QoT1e0LsjcuQ6qPjr GkEuPrF/GCl8tUjLbZOpPdJMCwRm/LPOT7uJ6u2jxKDgT6eDDcQdUpC/NQlo49XU 0yAm/I5Iap7sNZgQCoNZbx8PZy19k5kKcgG1eicvP4O/PAoRR1oXClbjRekC26yD pYfZbWjOxQKEWSprJgz/G+YLMW54t+JpAxg8bVx3tqZbOVtb5ci0c0t1mchCNk1h FGeJsFGk/pwHoIMQ7Zd4tRVCi/ng2mcc+3D6qtzkdtlXVUkBKAkrdC0M7yGQh14+ yspiHzWC90/wlrf3 -----END CERTIFICATE-----Generated at Mon Oct 20 23:32:08 2025 by rpki-client