$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft File: 307456E03A11DBB48443E93538958B15B4E9E0F0.mft (raw, json) Hash identifier: VGzvDdlWCCg5c3pjxISbrxFp00SQ7JjnehaVX19i8qM= Subject key identifier: F1:CD:78:F5:5B:7D:44:99:C0:68:F6:D2:5A:31:0F:3E:D4:D9:42:22 Authority key identifier: 30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0 Certificate issuer: /CN=307456E03A11DBB48443E93538958B15B4E9E0F0 Certificate serial: 57504C1723D915B0068C013F89FE5A4497A485B2 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft Manifest number: 7B Signing time: Sun 19 Oct 2025 19:28:18 +0000 Manifest this update: Sun 19 Oct 2025 19:23:18 +0000 Manifest next update: Mon 20 Oct 2025 20:32:18 +0000 Files and hashes: 1: 307456E03A11DBB48443E93538958B15B4E9E0F0.crl (hash: aJ+6QjENAIN6NSxiUNYbfZFGvhPcT49qVXqcG3t6SCw=) 2: 3130332e3133392e38382e302f32342d3234203d3e20323134383039.roa (hash: aBp6U2aVMH3hSM5eeFVi+p63pJd0WYDoQYC72uEJ/w8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 13:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:50:4c:17:23:d9:15:b0:06:8c:01:3f:89:fe:5a:44:97:a4:85:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307456E03A11DBB48443E93538958B15B4E9E0F0 Validity Not Before: Oct 19 19:23:18 2025 GMT Not After : Oct 20 20:32:18 2025 GMT Subject: CN=F1CD78F55B7D4499C068F6D25A310F3ED4D94222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:34:b0:df:7e:ce:65:18:7e:1d:0b:f1:85:7e: 3e:f1:ff:87:7c:8c:6d:ce:1d:3a:66:4e:62:12:55: e2:49:bc:54:0e:c4:c4:f2:84:55:f1:f1:c2:aa:ee: 59:3f:84:83:61:7e:53:c0:b4:5f:93:99:b5:6c:aa: 29:30:b2:68:b1:b4:5b:f2:cf:0a:5d:34:7f:cb:5f: a1:4b:01:34:07:76:ac:69:cd:08:f2:32:70:b5:a3: 6b:99:dd:9e:54:24:d4:09:7b:23:21:b7:20:f9:22: 01:67:f4:e5:52:44:35:64:1f:1a:4a:f2:fd:fe:19: a0:1e:3f:48:09:02:60:ec:fb:09:c1:f3:b3:cd:53: 3c:1e:0e:dc:5e:f8:ee:4b:c1:a3:8d:82:e8:5a:49: c5:fc:21:d6:9a:c4:21:48:a8:f5:50:ff:4b:85:23: 43:d7:9e:6a:d1:be:84:44:cd:1f:25:58:28:3d:6c: 87:3d:d0:86:ac:11:56:24:f3:ee:86:7d:e6:84:14: cd:62:ce:8b:d3:e2:b3:fd:3f:4c:2e:eb:69:2a:0e: 19:8a:15:d7:3e:26:61:b5:36:18:f4:3e:a6:9e:99: f3:31:b9:f8:41:71:bf:e6:e3:42:fd:0b:c7:4f:e1: 2f:76:58:22:e2:40:e2:53:82:1d:5b:eb:b2:bf:c8: a2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:CD:78:F5:5B:7D:44:99:C0:68:F6:D2:5A:31:0F:3E:D4:D9:42:22 X509v3 Authority Key Identifier: keyid:30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:5e:c0:46:c0:db:ba:a7:a1:46:ba:37:58:97:7b:66:9f:68: 69:3c:f6:a8:5c:16:5f:72:3e:5d:25:f2:cf:10:10:82:34:73: 68:3d:6e:e0:51:16:95:cd:16:37:89:c0:50:56:23:a2:be:ac: 36:a7:69:1a:78:50:10:00:fe:37:6f:05:5f:d3:39:6b:23:72: 20:42:37:18:ed:f4:18:4b:01:84:14:07:f0:93:8c:83:74:29: 9a:ae:30:1f:fd:ec:c1:84:64:f2:b8:26:07:22:86:d7:aa:b0: c4:83:14:f6:49:71:a4:93:c3:a5:b9:c2:37:41:37:28:ba:d2: e9:02:9f:d2:30:6e:3d:f6:60:57:a4:7a:c7:3e:35:88:22:d5: e5:e5:47:04:00:5e:5e:fe:0b:cf:3a:e5:cc:ce:d2:b6:56:96: 24:5c:7e:04:0f:ed:8f:c6:1c:cd:32:9c:b7:cf:c1:0c:aa:b3: 91:ff:ee:ed:1f:b7:29:0a:b4:c0:00:72:2c:00:c5:87:a7:4b: a2:d3:a6:e9:90:fb:57:fd:67:16:68:24:59:ac:e5:20:67:93: 7a:91:51:c3:25:1e:86:78:b3:38:d8:c6:32:fd:0c:f0:4b:f7: 98:28:79:da:09:ef:67:a6:c2:eb:8b:9d:49:87:1f:ad:a8:82: 96:17:2a:cd -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUV1BMFyPZFbAGjAE/if5aRJekhbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVC NEU5RTBGMDAeFw0yNTEwMTkxOTIzMThaFw0yNTEwMjAyMDMyMThaMDMxMTAvBgNV BAMTKEYxQ0Q3OEY1NUI3RDQ0OTlDMDY4RjZEMjVBMzEwRjNFRDREOTQyMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfNLDffs5lGH4dC/GFfj7x/4d8 jG3OHTpmTmISVeJJvFQOxMTyhFXx8cKq7lk/hINhflPAtF+TmbVsqikwsmixtFvy zwpdNH/LX6FLATQHdqxpzQjyMnC1o2uZ3Z5UJNQJeyMhtyD5IgFn9OVSRDVkHxpK 8v3+GaAeP0gJAmDs+wnB87PNUzweDtxe+O5LwaONguhaScX8IdaaxCFIqPVQ/0uF I0PXnmrRvoREzR8lWCg9bIc90IasEVYk8+6GfeaEFM1izovT4rP9P0wu62kqDhmK Fdc+JmG1Nhj0PqaemfMxufhBcb/m40L9C8dP4S92WCLiQOJTgh1b67K/yKJJAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU8c149Vt9RJnAaPbSWjEPPtTZQiIwHwYDVR0j BBgwFoAUMHRW4DoR27SEQ+k1OJWLFbTp4PAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzEvMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVCNEU5RTBGMC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVCNEU5 RTBGMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTA5OGMyMy1h OTc3LTRmOWEtOTdjOS1jZDRlNzU5ZGVhMDkvMS8zMDc0NTZFMDNBMTFEQkI0ODQ0 M0U5MzUzODk1OEIxNUI0RTlFMEYwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeF7ARsDbuqehRro3WJd7 Zp9oaTz2qFwWX3I+XSXyzxAQgjRzaD1u4FEWlc0WN4nAUFYjor6sNqdpGnhQEAD+ N28FX9M5ayNyIEI3GO30GEsBhBQH8JOMg3Qpmq4wH/3swYRk8rgmByKG16qwxIMU 9klxpJPDpbnCN0E3KLrS6QKf0jBuPfZgV6R6xz41iCLV5eVHBABeXv4LzzrlzM7S tlaWJFx+BA/tj8YczTKct8/BDKqzkf/u7R+3KQq0wAByLADFh6dLotOm6ZD7V/1n FmgkWazlIGeTepFRwyUehnizONjGMv0M8Ev3mCh52gnvZ6bC64udSYcfraiClhcq zQ== -----END CERTIFICATE-----Generated at Mon Oct 20 01:42:30 2025 by rpki-client