$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft File: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft (raw, json) Hash identifier: UiIzbd59hNzmaBoYZXwSg6MxrCZ72Uy2pdyYy/fLvNg= Subject key identifier: 1B:58:96:45:2F:19:F0:12:6D:FC:62:BF:53:CA:42:DE:47:CE:9F:D9 Authority key identifier: 0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 Certificate issuer: /CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Certificate serial: 5A145A49DB8E75B2F5C4B0E0D588BAEE6CF5E44B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft Manifest number: 90 Signing time: Mon 20 Oct 2025 05:19:45 +0000 Manifest this update: Mon 20 Oct 2025 05:14:45 +0000 Manifest next update: Tue 21 Oct 2025 07:37:45 +0000 Files and hashes: 1: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl (hash: BcLalhkvXdQzaNI4ZQiVpQegRlg2HkpbhzYFH7YlVk0=) 2: 326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (hash: PoxwFIHy8kdey2mlHnL1hmx4hhF1/GhCPxY1mv6kDWE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 07:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:14:5a:49:db:8e:75:b2:f5:c4:b0:e0:d5:88:ba:ee:6c:f5:e4:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Validity Not Before: Oct 20 05:14:45 2025 GMT Not After : Oct 21 07:37:45 2025 GMT Subject: CN=1B5896452F19F0126DFC62BF53CA42DE47CE9FD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b9:e6:f6:e4:34:d5:31:d4:00:18:33:c0:ff: 34:28:bf:2c:e8:62:18:ca:83:6b:ff:ba:f0:5b:20: 02:e2:53:80:a1:1c:31:6f:a6:61:3f:a4:39:3d:33: 41:b6:7e:92:04:6f:c2:0b:50:5c:30:10:1c:06:95: d4:ec:bc:ad:bc:77:e7:d5:6b:3f:fc:2b:dc:34:6f: cc:e5:44:67:8e:ce:1d:e0:85:48:15:9a:af:52:aa: 90:06:bf:aa:9b:15:2d:0c:e2:9a:e4:1b:5c:1b:57: 2c:3d:d1:e8:7b:66:b3:6e:5f:ff:68:86:cd:12:2b: 6b:b9:b1:3f:13:9f:4b:c1:83:f6:48:8f:16:d3:90: e9:87:47:8e:71:e3:b0:4d:bd:35:1f:51:7b:9c:72: ad:6d:5d:c5:b7:77:92:6d:25:aa:3e:ce:63:a1:11: a0:49:13:3e:ac:21:95:27:e8:72:00:81:62:22:9d: 42:4e:a7:06:11:af:19:55:b0:e7:cf:69:96:bb:74: 09:c8:35:13:89:58:97:f4:ad:21:23:d2:64:b4:94: 48:26:64:3a:0e:a9:55:d9:dd:43:d1:2c:b4:f1:7a: 18:d0:4a:bc:eb:ec:fc:5b:ad:5e:46:99:9a:15:69: 58:a7:ea:7f:95:91:92:2b:ad:4b:da:9c:39:a6:5a: 0b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:58:96:45:2F:19:F0:12:6D:FC:62:BF:53:CA:42:DE:47:CE:9F:D9 X509v3 Authority Key Identifier: keyid:0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:91:23:f1:8c:eb:91:98:9d:b5:37:1d:87:cb:36:d9:68:64: cd:e0:e4:a6:23:90:7d:1d:bf:55:db:f2:e0:15:5e:6c:58:4a: c0:f7:c0:ae:8c:5b:76:01:41:78:e0:e3:6f:73:e7:74:f8:2f: b4:f4:01:67:cb:23:ac:8b:46:aa:37:f8:cc:18:84:6f:58:60: a3:b0:62:b1:79:fe:72:00:9a:4b:0e:45:a8:3a:66:9e:6f:da: 78:ac:59:24:e0:d0:2b:45:0f:da:fe:08:5d:4d:d4:9f:09:65: d2:48:af:07:8d:19:a9:c4:84:14:b9:c6:fe:28:ef:15:0e:3e: 5a:3c:ff:b8:c5:30:44:5a:11:f5:81:08:0e:c6:41:0c:ef:d5: 76:76:20:f6:1c:ac:d8:96:e9:40:f7:66:5a:4a:09:8a:ea:64: 9a:16:0a:e9:f1:97:6e:f1:6c:c8:2d:a2:ed:5c:85:ef:62:8b: 94:73:23:91:32:26:3b:02:55:21:21:c0:43:e2:b9:b4:e7:93: 68:e5:87:3a:a3:dd:7f:91:82:de:d4:3f:59:c8:49:56:6b:ef: fb:5c:ca:38:27:6e:2d:f0:f8:34:9e:1c:d2:d9:3c:02:27:f1: a6:fa:11:57:d7:69:c4:48:8f:97:93:01:ff:a1:ca:f4:9f:11: 24:da:9e:5d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUWhRaSduOdbL1xLDg1Yi67mz15EswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1 RjRCMDlCOTAeFw0yNTEwMjAwNTE0NDVaFw0yNTEwMjEwNzM3NDVaMDMxMTAvBgNV BAMTKDFCNTg5NjQ1MkYxOUYwMTI2REZDNjJCRjUzQ0E0MkRFNDdDRTlGRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfueb25DTVMdQAGDPA/zQovyzo YhjKg2v/uvBbIALiU4ChHDFvpmE/pDk9M0G2fpIEb8ILUFwwEBwGldTsvK28d+fV az/8K9w0b8zlRGeOzh3ghUgVmq9SqpAGv6qbFS0M4prkG1wbVyw90eh7ZrNuX/9o hs0SK2u5sT8Tn0vBg/ZIjxbTkOmHR45x47BNvTUfUXuccq1tXcW3d5JtJao+zmOh EaBJEz6sIZUn6HIAgWIinUJOpwYRrxlVsOfPaZa7dAnINROJWJf0rSEj0mS0lEgm ZDoOqVXZ3UPRLLTxehjQSrzr7PxbrV5GmZoVaVin6n+VkZIrrUvanDmmWguJAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUG1iWRS8Z8BJt/GK/U8pC3kfOn9kwHwYDVR0j BBgwFoAUCv23IiueujOmXim74/KdfF9LCbkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzMvMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1RjRCMDlCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC8wQUZEQjcyMjJCOUVCQTMzQTY1RTI5QkJF M0YyOUQ3QzVGNEIwOUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8zLzBBRkRCNzIy MkI5RUJBMzNBNjVFMjlCQkUzRjI5RDdDNUY0QjA5QjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBZkSPx jOuRmJ21Nx2HyzbZaGTN4OSmI5B9Hb9V2/LgFV5sWErA98CujFt2AUF44ONvc+d0 +C+09AFnyyOsi0aqN/jMGIRvWGCjsGKxef5yAJpLDkWoOmaeb9p4rFkk4NArRQ/a /ghdTdSfCWXSSK8HjRmpxIQUucb+KO8VDj5aPP+4xTBEWhH1gQgOxkEM79V2diD2 HKzYlulA92ZaSgmK6mSaFgrp8Zdu8WzILaLtXIXvYouUcyORMiY7AlUhIcBD4rm0 55No5Yc6o91/kYLe1D9ZyElWa+/7XMo4J24t8Pg0nhzS2TwCJ/Gm+hFX12nESI+X kwH/ocr0nxEk2p5d -----END CERTIFICATE-----Generated at Tue Oct 21 00:12:35 2025 by rpki-client