$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft File: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft (raw, json) Hash identifier: 09LF/Um7voCC1q8AZ+/f+SoyB/pdM47DBTftjcJzoRc= Subject key identifier: 82:09:81:B2:D6:77:E9:B9:CB:C5:64:42:9E:C1:9F:05:8B:2D:10:D9 Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Certificate serial: 57C330C34ED0F2EF2BB75C67720C3FBCE7F846BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft Manifest number: 01BD Signing time: Sun 19 Oct 2025 13:01:39 +0000 Manifest this update: Sun 19 Oct 2025 12:56:39 +0000 Manifest next update: Mon 20 Oct 2025 14:17:39 +0000 Files and hashes: 1: 3139342e33342e3235352e302f32342d3234203d3e20383334.roa (hash: 9Nay8jCVOB7MKBbd6t/oX++dJQIYhzLuqo54ZgkMc3E=) 2: 3139342e33342e3235342e302f32342d3234203d3e20313532363732.roa (hash: hKPfS0qlA4vPTLhw9nwXVGJzFe2/vcx6+01rQ/Eesqo=) 3: 3138352e3231332e3235302e302f32342d3234203d3e20323132323338.roa (hash: ygSJr7gJnzCgddZdASy6lFYbTZobnImgktqUZvda03k=) 4: 38352e3131372e3233312e302f32342d3234203d3e20323133373234.roa (hash: ohyXGo6Fwg3029u2hdROae+jQf4VI2skgvLUXH3jI8w=) 5: 38352e3131372e3232392e302f32342d3234203d3e20323132323338.roa (hash: qWG9h0hKE/+rc67V6b0QtNqJKNBV/dmrN+3owun/5GY=) 6: 3138352e3231332e3235312e302f32342d3234203d3e20313337353537.roa (hash: eYILiT2JPXpEDLdM1mRS7Zrw3uThCrbSVHgyCN3lFo4=) 7: 38352e3131372e3233302e302f32342d3234203d3e2035303635.roa (hash: 8/mMTd8OI6hx+rEazKaA5i9flVTt9So8wwSfFF6xpVo=) 8: 3139342e33342e3235322e302f32342d3234203d3e20313335343032.roa (hash: PzY2ZjUPUkaqIDtZu9fHD0rPK6Exx+TMbdxcEJS1upA=) 9: 3138352e3231332e3234382e302f32342d3234203d3e20323035383836.roa (hash: ODfn5/rpX0/qAWjZsS/cv+gVh3kFgfI7CdBECTg9zww=) 10: 3138352e3231332e3235312e302f32342d3234203d3e20313338383838.roa (hash: u9k1CEDVyAGe8je2Y99pF+EO5LdgGSTfU7yFr7GEyGA=) 11: 3138352e3231332e3235312e302f32342d3234203d3e20313338313630.roa (hash: fygAQSb+QwiyUnesqK4IcvvWfRduHnIesYUaMnTC6go=) 12: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl (hash: xN+N8S3qPqJFknswxSL6+oohzOlI2TR+mgvHijezMwA=) 13: 3139342e33342e3235332e302f32342d3234203d3e2035303635.roa (hash: tD+eYvXQsGkCcpnz6s7EBRYpOf8Iu4vdb3Qy27wUI6g=) 14: 3138352e3231332e3235312e302f32342d3234203d3e20393834.roa (hash: +mGpTck72lzkh7Ood/3OgnV6lEE5Ty61FGiwl0p4XrE=) 15: 38352e3131372e3232382e302f32342d3234203d3e20323134343538.roa (hash: rcAG2FX2+ZD0Qb1+KeZK9os832Q7CwzkoxVHQi9yY7k=) 16: 3138352e3231332e3234392e302f32342d3234203d3e20343030393039.roa (hash: 4O3foUV7f18NUYJQaeBYgK+aW1lr+7o+ea8CcQjVzCw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 14:17:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:c3:30:c3:4e:d0:f2:ef:2b:b7:5c:67:72:0c:3f:bc:e7:f8:46:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Validity Not Before: Oct 19 12:56:39 2025 GMT Not After : Oct 20 14:17:39 2025 GMT Subject: CN=820981B2D677E9B9CBC564429EC19F058B2D10D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:34:ef:d9:6d:3c:f8:29:52:1e:f8:b2:03:ae: 47:22:2a:05:bb:8b:ab:c5:c9:53:5f:da:f4:23:96: 7d:8d:39:9c:7e:47:ca:79:51:72:d6:b2:c7:02:26: d7:8b:eb:0b:b9:cd:6c:51:8d:5d:f6:27:92:b1:cd: b2:23:3d:eb:de:79:04:03:5d:9c:ad:b3:8f:a4:a8: a9:9f:42:66:c7:98:92:ac:21:bc:a2:2a:c8:c5:62: f7:bc:d0:d7:77:1c:ff:13:34:3f:35:84:27:15:53: 63:81:fd:8b:ef:ce:6b:8e:b4:89:32:ae:bf:6d:6d: 95:de:70:5f:99:e5:3c:d2:09:dc:82:e3:5b:bc:52: 74:0d:d5:0e:4e:e9:af:ad:6d:b2:2a:d6:95:bc:69: 4a:88:d4:9d:0e:bb:dd:db:87:60:bf:51:9b:c6:4b: 25:4a:ec:9f:95:72:a0:b5:68:47:8b:8c:6d:88:49: 6c:58:b8:ef:99:20:9a:59:69:09:31:7e:a6:fa:5e: ca:8b:4b:9e:dd:a3:dc:48:59:10:b7:cf:09:48:b9: 1c:e2:e4:c3:20:34:9a:5d:3e:92:2b:86:9b:59:e1: 66:19:06:71:0b:e3:7e:87:32:63:a8:ff:c4:58:57: f1:51:06:42:4b:8b:d4:67:af:75:4d:35:62:56:83: cd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:09:81:B2:D6:77:E9:B9:CB:C5:64:42:9E:C1:9F:05:8B:2D:10:D9 X509v3 Authority Key Identifier: keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:21:dc:80:99:98:89:24:31:50:69:81:b6:f4:bc:63:33:38: ae:f3:84:bc:94:0d:28:f1:40:57:c2:f8:2f:a4:12:98:bf:7a: a9:7b:fc:d7:52:df:d2:13:42:eb:d4:b8:c7:62:e8:0b:78:76: 06:9a:08:15:9b:9d:90:8a:2c:8f:b8:5b:d7:14:e7:e4:38:fe: 8d:d4:59:31:46:1e:30:04:18:c0:fd:ba:f2:3b:3b:45:7a:7f: f3:a9:01:2a:1d:28:32:8e:a9:63:6f:ec:f3:df:9d:eb:b5:9c: f3:89:17:52:bc:a8:39:89:8a:0a:5b:a9:c1:3e:e4:0f:11:c8: de:c6:0e:d2:19:c9:d6:79:95:f1:e4:bd:cd:3e:88:a1:43:8d: 8f:00:d2:c8:a5:1a:33:64:d6:de:87:30:ff:71:e6:37:6d:73: ca:14:eb:f5:33:d0:7e:39:3e:f2:a2:e3:96:1d:db:9b:ee:c0: 51:e3:1e:f2:d1:eb:06:2b:68:ec:41:9a:80:f6:0e:87:f5:0f: dd:4a:fb:7e:ba:0f:c0:1f:99:38:c3:d4:94:6d:c0:18:50:1e: d8:26:ad:37:d1:cf:05:0c:d4:11:84:53:ef:1c:36:79:1c:22: 01:7d:21:79:19:20:e7:29:2f:28:08:36:72:65:c7:a8:36:b3: 62:cb:74:57 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUV8Mww07Q8u8rt1xncgw/vOf4Rr4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl ODQxYTRkMzAeFw0yNTEwMTkxMjU2MzlaFw0yNTEwMjAxNDE3MzlaMDMxMTAvBgNV BAMTKDgyMDk4MUIyRDY3N0U5QjlDQkM1NjQ0MjlFQzE5RjA1OEIyRDEwRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpNO/ZbTz4KVIe+LIDrkciKgW7 i6vFyVNf2vQjln2NOZx+R8p5UXLWsscCJteL6wu5zWxRjV32J5KxzbIjPeveeQQD XZyts4+kqKmfQmbHmJKsIbyiKsjFYve80Nd3HP8TND81hCcVU2OB/YvvzmuOtIky rr9tbZXecF+Z5TzSCdyC41u8UnQN1Q5O6a+tbbIq1pW8aUqI1J0Ou93bh2C/UZvG SyVK7J+VcqC1aEeLjG2ISWxYuO+ZIJpZaQkxfqb6XsqLS57do9xIWRC3zwlIuRzi 5MMgNJpdPpIrhptZ4WYZBnEL436HMmOo/8RYV/FRBkJLi9Rnr3VNNWJWg80XAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUggmBstZ36bnLxWRCnsGfBYstENkwHwYDVR0j BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4 Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o QnBOTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MTEzZGRhNi03 YWRlLTQ0NWQtOGM2ZS00NDhhNzhlNDhjYTEvMS8wRDdGRkFFMzAwREVGMDg3NkJG ODQ4OTBGQjZFQTE3QkU4NDFBNEQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARiHcgJmYiSQxUGmBtvS8 YzM4rvOEvJQNKPFAV8L4L6QSmL96qXv811Lf0hNC69S4x2LoC3h2BpoIFZudkIos j7hb1xTn5Dj+jdRZMUYeMAQYwP268js7RXp/86kBKh0oMo6pY2/s89+d67Wc84kX UryoOYmKClupwT7kDxHI3sYO0hnJ1nmV8eS9zT6IoUONjwDSyKUaM2TW3ocw/3Hm N21zyhTr9TPQfjk+8qLjlh3bm+7AUeMe8tHrBito7EGagPYOh/UP3Ur7froPwB+Z OMPUlG3AGFAe2CatN9HPBQzUEYRT7xw2eRwiAX0heRkg5ykvKAg2cmXHqDazYst0 Vw== -----END CERTIFICATE-----Generated at Sun Oct 19 22:27:06 2025 by rpki-client