$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft File: B3D0280F500695A43204251C9830454CA8A2E7AC.mft (raw, json) Hash identifier: XDYeEa07teL2dzwQXI3MqG1VFV/t6wr3bPBKunzGl/g= Subject key identifier: 5D:73:A6:55:02:2F:F5:DF:93:5A:53:17:21:02:7E:78:10:07:1B:DD Authority key identifier: B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC Certificate issuer: /CN=b3d0280f500695a43204251c9830454ca8a2e7ac Certificate serial: 7AE16C164D49AF9188B485CD4484FF703DCED956 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft Manifest number: 02C1 Signing time: Sun 19 Oct 2025 09:46:37 +0000 Manifest this update: Sun 19 Oct 2025 09:41:37 +0000 Manifest next update: Mon 20 Oct 2025 11:39:37 +0000 Files and hashes: 1: 3138352e3138362e32372e302f32342d3234203d3e203631333137.roa (hash: jD3TEx8Q8JwdsmzwyDZ9zaukL1sMlGUp0uzFac23xJs=) 2: B3D0280F500695A43204251C9830454CA8A2E7AC.crl (hash: vWoqHneGfUQ8I0DhrRDpNqzI5rdUq77c/exMSXhNw5Q=) 3: 3138352e3138362e32362e302f32342d3234203d3e20323135373033.roa (hash: FBdBmLEGxXhvarnPJcmElFlCgeLSIQ6GXw75K+usirs=) 4: 3138352e3138362e32352e302f32342d3234203d3e203135343430.roa (hash: zbKaWYwmjPPC167P5YL6I94JcPZEWN0HKnmqpfcR9u4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:e1:6c:16:4d:49:af:91:88:b4:85:cd:44:84:ff:70:3d:ce:d9:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d0280f500695a43204251c9830454ca8a2e7ac Validity Not Before: Oct 19 09:41:37 2025 GMT Not After : Oct 20 11:39:37 2025 GMT Subject: CN=5D73A655022FF5DF935A531721027E7810071BDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:37:bb:9a:5b:f1:00:98:2b:df:72:da:6b:7c: e1:94:55:85:39:8a:46:50:49:d8:81:09:ac:dc:b8: 3d:58:4f:8e:c9:df:13:74:99:67:16:01:37:1d:79: f8:40:a8:ed:c0:19:26:50:ef:e6:8f:7b:78:ff:7d: 76:28:a5:97:2e:6c:a8:5c:de:f5:f5:93:e6:18:e5: 43:ea:7e:fc:1e:6e:72:04:da:cc:10:5a:54:29:76: 99:4d:2c:f9:f0:6d:40:32:93:f8:5d:b1:f5:a9:17: 58:ab:6f:7c:28:49:4f:cc:a4:f0:3b:b8:2e:1b:14: 96:2a:7c:0d:27:28:71:7d:4e:be:dc:d0:9c:8c:63: dd:84:c9:ea:cc:4a:a6:43:27:09:f4:19:4f:ae:d1: d6:81:30:6a:ea:38:7c:7b:ed:9f:a6:67:57:11:85: 5d:e5:29:ed:cf:9b:d0:f3:01:9e:5e:5e:0e:89:54: c3:dc:92:34:8f:bc:b7:b0:52:97:e6:2e:ba:89:c3: b3:0f:95:35:9f:b3:52:46:8f:8a:24:fe:41:06:c8: d4:0a:e5:e6:c6:3b:ec:4e:78:37:40:26:ec:28:12: c6:60:fe:97:32:74:b0:8c:d1:14:d1:66:b6:8a:00: 48:cd:6c:d5:6d:7c:43:c9:1f:eb:b6:57:9a:57:f0: 1f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:73:A6:55:02:2F:F5:DF:93:5A:53:17:21:02:7E:78:10:07:1B:DD X509v3 Authority Key Identifier: keyid:B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:14:be:97:3b:d7:3e:14:ee:a9:1b:f5:11:2c:ca:ed:ca:e9: 67:f5:a3:a0:5c:e8:07:af:29:ee:a9:e3:3f:45:ff:b7:16:cb: 39:c9:3d:ff:c4:eb:46:eb:4f:aa:7c:b5:c5:fa:ff:01:40:04: 05:f1:ae:72:d6:f2:65:0e:28:ab:6a:ec:2f:28:0d:fb:e4:95: d5:71:b3:3b:1f:fa:05:14:4a:20:c8:18:e1:44:ca:49:cb:ab: 2c:cd:28:67:a5:e0:c2:b2:20:69:4f:9d:20:0f:a8:b3:d0:22: 31:bf:f3:24:95:17:3b:ae:44:b3:20:5b:b7:83:c8:bc:2b:7a: aa:f5:fe:e4:39:87:42:d7:35:4a:26:fb:ea:f3:0e:c4:cb:d8: 62:36:71:99:85:86:ee:04:55:79:47:7b:0d:90:e5:a2:fa:ec: 97:fd:b3:ad:43:5a:da:0c:89:4c:29:b0:18:49:60:cb:9f:a0: 2c:d3:14:81:76:35:5e:a6:83:99:51:6c:dd:7d:95:b3:fe:90: 7d:4a:bd:2c:45:98:cf:4a:d5:43:e4:45:d0:4a:41:35:a2:a9: c2:85:ac:af:61:0e:06:d1:84:e6:22:0c:7e:d6:14:67:51:d0: 5e:ab:04:04:fb:c7:e0:c5:76:44:10:c9:0e:e4:de:ca:85:4e: 5d:a9:3e:60 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUeuFsFk1Jr5GItIXNRIT/cD3O2VYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjNkMDI4MGY1MDA2OTVhNDMyMDQyNTFjOTgzMDQ1NGNh OGEyZTdhYzAeFw0yNTEwMTkwOTQxMzdaFw0yNTEwMjAxMTM5MzdaMDMxMTAvBgNV BAMTKDVENzNBNjU1MDIyRkY1REY5MzVBNTMxNzIxMDI3RTc4MTAwNzFCREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDON7uaW/EAmCvfctprfOGUVYU5 ikZQSdiBCazcuD1YT47J3xN0mWcWATcdefhAqO3AGSZQ7+aPe3j/fXYopZcubKhc 3vX1k+YY5UPqfvwebnIE2swQWlQpdplNLPnwbUAyk/hdsfWpF1irb3woSU/MpPA7 uC4bFJYqfA0nKHF9Tr7c0JyMY92EyerMSqZDJwn0GU+u0daBMGrqOHx77Z+mZ1cR hV3lKe3Pm9DzAZ5eXg6JVMPckjSPvLewUpfmLrqJw7MPlTWfs1JGj4ok/kEGyNQK 5ebGO+xOeDdAJuwoEsZg/pcydLCM0RTRZraKAEjNbNVtfEPJH+u2V5pX8B8rAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUXXOmVQIv9d+TWlMXIQJ+eBAHG90wHwYDVR0j BBgwFoAUs9AoD1AGlaQyBCUcmDBFTKii56wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODdhZTI1ZjMtNzA2Yi00N2VkLWJiNzQtNDY2ODRhZTBl ZjJiLzAvQjNEMDI4MEY1MDA2OTVBNDMyMDQyNTFDOTgzMDQ1NENBOEEyRTdBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3M5QW9EMUFHbGFReUJDVWNtREJGVEtp aTU2dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84N2FlMjVmMy03 MDZiLTQ3ZWQtYmI3NC00NjY4NGFlMGVmMmIvMC9CM0QwMjgwRjUwMDY5NUE0MzIw NDI1MUM5ODMwNDU0Q0E4QTJFN0FDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuhS+lzvXPhTuqRv1ESzK 7crpZ/WjoFzoB68p7qnjP0X/txbLOck9/8TrRutPqny1xfr/AUAEBfGuctbyZQ4o q2rsLygN++SV1XGzOx/6BRRKIMgY4UTKScurLM0oZ6XgwrIgaU+dIA+os9AiMb/z JJUXO65EsyBbt4PIvCt6qvX+5DmHQtc1Sib76vMOxMvYYjZxmYWG7gRVeUd7DZDl ovrsl/2zrUNa2gyJTCmwGElgy5+gLNMUgXY1XqaDmVFs3X2Vs/6QfUq9LEWYz0rV Q+RF0EpBNaKpwoWsr2EOBtGE5iIMftYUZ1HQXqsEBPvH4MV2RBDJDuTeyoVOXak+ YA== -----END CERTIFICATE-----Generated at Sun Oct 19 18:03:09 2025 by rpki-client