$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft File: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft (raw, json) Hash identifier: 1q2UoOAR9xAjFeM5yEfGyNtMDABXVJvEB0Uznc69DO4= Subject key identifier: 3B:64:BB:97:C0:B4:B5:60:FB:51:98:A4:94:04:4C:B0:2C:E9:50:C9 Authority key identifier: 0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 Certificate issuer: /CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Certificate serial: 6FCF0165505576788559A388A1B5058D4B295D1F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft Manifest number: 024D Signing time: Sun 19 Oct 2025 14:38:15 +0000 Manifest this update: Sun 19 Oct 2025 14:33:15 +0000 Manifest next update: Mon 20 Oct 2025 14:50:15 +0000 Files and hashes: 1: 326131343a373538313a6430303a3a2f34342d3438203d3e203331383938.roa (hash: OYFGGb9dMqAtV18cBeD3NbZ0TuwCvJXmn37LZwaW7zg=) 2: 326131343a373538343a373030303a3a2f33362d3434203d3e20323136343532.roa (hash: bjWKUcdJK3JxiL+GqIgQQNiLJnq1CfKPBgs/UuOHrJA=) 3: 326131343a373538313a6430303a3a2f34302d3438203d3e20323136343532.roa (hash: jAqeRW+G0tj75/HjlTu9upVrXQ/2AvwaP0ubMorKA1Q=) 4: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl (hash: nngwsUzjcCgp7J67u6IbTWkj93PgduGkKeTBT7xmA9Q=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:cf:01:65:50:55:76:78:85:59:a3:88:a1:b5:05:8d:4b:29:5d:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Validity Not Before: Oct 19 14:33:15 2025 GMT Not After : Oct 20 14:50:15 2025 GMT Subject: CN=3B64BB97C0B4B560FB5198A494044CB02CE950C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:be:62:79:f0:21:1d:a5:3a:17:34:87:7a:c5: cf:29:d7:94:c1:e8:f8:0f:59:ba:7b:48:e0:0d:17: cf:f4:6a:fd:49:1d:1a:cc:4a:67:f8:a9:e6:4e:3d: 47:ac:43:d4:dc:ad:b0:0d:65:de:8b:eb:08:45:01: 9f:00:43:53:8f:99:95:23:60:1f:bf:4a:14:62:fe: 85:aa:fa:8f:8c:a8:95:83:d7:16:5b:5d:9e:b6:ee: 80:9e:14:98:b8:a8:3b:c0:81:34:25:92:5b:cb:7a: ef:87:00:a4:b7:d6:1d:5f:35:2f:5e:78:86:55:79: 7c:1a:8a:ef:25:ef:ea:e9:e5:3c:2c:77:cc:64:61: 30:d9:ad:2f:cd:11:dd:56:90:eb:d7:b1:20:f5:4d: 06:62:51:bf:e3:78:87:9d:7e:c6:7e:96:c3:ea:ca: fd:49:e2:3f:a7:da:78:ad:00:a3:21:de:34:6c:b4: d3:bd:7a:81:c7:8b:41:e8:e4:2f:ae:95:a1:dd:f5: 97:93:7b:b2:c8:57:a8:e4:33:74:57:ba:e6:7b:3f: 9f:ec:c3:87:7c:01:a2:22:e1:0c:47:16:1a:e2:ca: f1:dc:e7:22:d3:d5:da:0e:7d:8e:5a:71:22:d0:2d: 20:5d:fa:87:68:10:8a:8a:34:e2:7f:a5:42:0e:2d: 2b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:64:BB:97:C0:B4:B5:60:FB:51:98:A4:94:04:4C:B0:2C:E9:50:C9 X509v3 Authority Key Identifier: keyid:0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:74:38:3c:11:69:5f:02:be:cb:20:58:64:84:1b:cd:b9:16: 67:aa:f9:af:38:19:1f:20:ce:8b:c5:69:7b:8c:51:2d:79:ed: 4a:86:ae:7b:4f:6e:50:0d:03:f6:6e:de:af:3c:fc:2b:16:51: 93:0e:ed:c3:94:f2:b1:a4:4b:39:42:d1:39:62:53:73:4f:09: 05:d5:03:8e:bc:51:77:f5:22:0b:c9:7c:9c:fd:63:ab:fa:64: 4f:6f:ff:ac:4e:c8:7c:3e:20:60:3f:b7:47:ea:fc:b2:0b:e2: db:b9:42:4b:a9:d2:ea:e8:10:0a:71:9e:35:1b:ce:0c:bc:6c: f4:de:12:b0:96:63:93:86:46:be:4e:6e:c2:d2:ab:ef:c4:9b: fc:43:69:10:d8:e2:66:85:76:fa:03:d4:99:79:18:09:5a:5c: 9f:a1:b0:c1:ee:31:5a:0d:f5:3f:c2:0b:4a:63:e9:16:22:a7: 44:b4:3a:8d:39:5f:fb:29:0a:52:1e:95:c9:2b:00:c5:76:9b: b7:a9:90:69:fd:38:79:fb:7a:08:06:da:f1:50:38:51:19:e5: 94:15:3c:d4:64:4a:3d:e8:c7:e2:c5:1c:c4:27:91:a1:8a:fc: be:fc:b5:21:2d:81:da:d6:59:87:4a:80:50:bb:af:62:cb:b8: d4:13:b0:fb -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUb88BZVBVdniFWaOIobUFjUspXR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZG QjgyM0U0NTAeFw0yNTEwMTkxNDMzMTVaFw0yNTEwMjAxNDUwMTVaMDMxMTAvBgNV BAMTKDNCNjRCQjk3QzBCNEI1NjBGQjUxOThBNDk0MDQ0Q0IwMkNFOTUwQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkvmJ58CEdpToXNId6xc8p15TB 6PgPWbp7SOANF8/0av1JHRrMSmf4qeZOPUesQ9TcrbANZd6L6whFAZ8AQ1OPmZUj YB+/ShRi/oWq+o+MqJWD1xZbXZ627oCeFJi4qDvAgTQlklvLeu+HAKS31h1fNS9e eIZVeXwaiu8l7+rp5Twsd8xkYTDZrS/NEd1WkOvXsSD1TQZiUb/jeIedfsZ+lsPq yv1J4j+n2nitAKMh3jRstNO9eoHHi0Ho5C+ulaHd9ZeTe7LIV6jkM3RXuuZ7P5/s w4d8AaIi4QxHFhriyvHc5yLT1doOfY5acSLQLSBd+odoEIqKNOJ/pUIOLStdAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUO2S7l8C0tWD7UZiklARMsCzpUMkwHwYDVR0j BBgwFoAUCothqETWwsevOO3L0WXQ7/uCPkUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzEvMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZGQjgyM0U0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wQThCNjFBODQ0RDZDMkM3QUYzOEVEQ0JE MTY1RDBFRkZCODIzRTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcyYzQwNWYxLWMzMmQtNDdjZS04OTQzLTA3NTJlZDEzZDhlZi8xLzBBOEI2MUE4 NDRENkMyQzdBRjM4RURDQkQxNjVEMEVGRkI4MjNFNDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAedDg8 EWlfAr7LIFhkhBvNuRZnqvmvOBkfIM6LxWl7jFEtee1Khq57T25QDQP2bt6vPPwr FlGTDu3DlPKxpEs5QtE5YlNzTwkF1QOOvFF39SILyXyc/WOr+mRPb/+sTsh8PiBg P7dH6vyyC+LbuUJLqdLq6BAKcZ41G84MvGz03hKwlmOThka+Tm7C0qvvxJv8Q2kQ 2OJmhXb6A9SZeRgJWlyfobDB7jFaDfU/wgtKY+kWIqdEtDqNOV/7KQpSHpXJKwDF dpu3qZBp/Th5+3oIBtrxUDhRGeWUFTzUZEo96MfixRzEJ5Ghivy+/LUhLYHa1lmH SoBQu69iy7jUE7D7 -----END CERTIFICATE-----Generated at Mon Oct 20 06:20:26 2025 by rpki-client