$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft File: 8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft (raw, json) Hash identifier: DtiDHpUL/YoXmoDqoJCEpzrrfPzhNgMp/GxvmEq9JIw= Subject key identifier: 5B:1E:A6:AC:7D:CC:0A:3F:00:10:80:CA:5C:12:73:44:74:E3:B8:5D Authority key identifier: 8B:D4:F7:EB:FF:97:63:C0:61:D5:37:B8:A1:D0:87:2D:70:69:76:32 Certificate issuer: /CN=8BD4F7EBFF9763C061D537B8A1D0872D70697632 Certificate serial: 09672D13E643BC0546BFEBCFF1C74F5B78FB76A0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8BD4F7EBFF9763C061D537B8A1D0872D70697632.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft Manifest number: 44 Signing time: Sun 19 Oct 2025 15:46:46 +0000 Manifest this update: Sun 19 Oct 2025 15:41:46 +0000 Manifest next update: Mon 20 Oct 2025 18:52:46 +0000 Files and hashes: 1: 326131343a373538333a663566303a3a2f34342d3438203d3e20323135373532.roa (hash: CQeQBv1si6HjY/pqPKCiw+E43BXtrCR5FS8uJNoFCsQ=) 2: 8BD4F7EBFF9763C061D537B8A1D0872D70697632.crl (hash: FQMo2orEyrkg+7gJgqaFkGBWq77m1j7d65orn0naUkw=) 3: 326131343a373538333a663532613a3a2f34382d3438203d3e20323133363035.roa (hash: aV7gG9d5Jm1xL7quU3kvraReedZSPl0atIf2oiaL4bI=) 4: 326131343a373538333a663532613a3a2f34382d3438203d3e20323130343430.roa (hash: ZdNC5XbbwwexZ9fJQgyFujAFE+pNtA0LnoesNkwLRvA=) 5: 326131343a373538333a663530303a3a2f34382d3438203d3e20323133363035.roa (hash: 9/oPKwR86cNPm2ExAL4kDJvYHegTDwwsjfTcMTofdOY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.crl rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8BD4F7EBFF9763C061D537B8A1D0872D70697632.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 18:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:67:2d:13:e6:43:bc:05:46:bf:eb:cf:f1:c7:4f:5b:78:fb:76:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BD4F7EBFF9763C061D537B8A1D0872D70697632 Validity Not Before: Oct 19 15:41:46 2025 GMT Not After : Oct 20 18:52:46 2025 GMT Subject: CN=5B1EA6AC7DCC0A3F001080CA5C12734474E3B85D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e3:ac:df:44:0b:44:44:dd:a9:2b:4e:3d:0d: dd:0f:df:2b:23:a0:6b:e7:00:8c:1a:9d:1c:06:ce: dc:04:6a:2c:fd:64:db:e0:66:2f:33:f3:d8:18:1b: 66:ed:08:0d:2b:83:7d:07:62:a6:04:23:49:8f:1e: 6e:2b:03:cd:d9:3e:51:21:b1:97:bb:85:bc:ee:fe: d8:50:25:dd:16:78:42:57:51:c4:2d:6f:a6:07:5b: 7a:6e:cd:3b:e5:98:b0:99:a2:54:41:ef:f4:43:fc: 77:48:0d:94:7b:7b:e3:95:4c:74:15:f8:17:51:46: c1:c2:81:15:06:e3:18:67:14:00:3d:21:5f:93:b4: 44:d6:e7:29:da:a0:e4:9f:71:9d:37:01:ea:5a:50: 6f:1f:de:c4:69:4d:32:91:a9:4e:d2:75:0b:85:57: a5:51:6a:91:99:95:85:c9:f2:dc:35:2b:f8:ae:7d: 72:9b:57:70:8f:be:eb:91:bc:0f:0f:e0:33:52:da: a6:30:48:c7:05:c4:f9:e1:7f:6f:c5:6d:d9:56:60: 9b:7c:f7:36:56:56:a0:ce:75:23:e7:5b:92:28:d2: 6e:03:8c:48:e1:d6:c7:6d:b2:4b:24:1c:45:e4:19: da:c8:2d:f5:7d:fe:23:c4:ba:cc:e3:0a:96:32:fa: a4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:1E:A6:AC:7D:CC:0A:3F:00:10:80:CA:5C:12:73:44:74:E3:B8:5D X509v3 Authority Key Identifier: keyid:8B:D4:F7:EB:FF:97:63:C0:61:D5:37:B8:A1:D0:87:2D:70:69:76:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8BD4F7EBFF9763C061D537B8A1D0872D70697632.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:af:b2:96:78:c1:2f:3e:21:c8:31:5c:98:f3:ec:80:1c:9d: 26:e4:10:4d:35:45:a4:15:ed:bb:0e:ef:c0:01:69:fb:82:46: a8:10:2d:98:59:48:06:cb:5f:d5:46:23:11:52:f3:fa:77:59: 17:98:dd:a3:43:73:3d:63:6a:3e:56:d6:b0:e3:19:ae:c0:5d: a2:cc:33:c5:e9:72:5c:56:9e:19:d9:cf:12:dc:91:07:02:dc: 4a:65:fd:7f:ae:28:43:7d:d7:a9:5d:59:d0:c6:a3:b5:c6:38: df:0c:87:50:32:8d:98:57:35:02:a7:e1:ee:32:87:c8:12:2f: 40:d9:85:67:e1:56:c5:f3:24:c7:d2:15:bf:8b:3d:38:b6:d6: bf:13:5e:79:b9:2c:29:31:cb:d9:3e:39:77:22:1a:96:ba:bd: 24:5a:92:26:e7:8d:6c:b2:ca:4b:d4:a9:b1:28:d6:0a:fa:38: c0:ec:8c:82:8a:d4:b5:2a:c5:16:a8:d2:28:5a:48:66:03:3e: b4:2f:b7:ad:f6:28:bf:f6:ff:65:e4:44:35:0e:db:5f:69:e7: 61:c7:c7:7b:a5:e9:1f:8a:64:d1:58:a5:e9:6e:bf:89:f6:41: 0a:fb:95:8f:74:62:25:38:e9:8f:63:17:73:cb:b5:6d:04:2d: 74:c6:41:31 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUCWctE+ZDvAVGv+vP8cdPW3j7dqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJENEY3RUJGRjk3NjNDMDYxRDUzN0I4QTFEMDg3MkQ3 MDY5NzYzMjAeFw0yNTEwMTkxNTQxNDZaFw0yNTEwMjAxODUyNDZaMDMxMTAvBgNV BAMTKDVCMUVBNkFDN0RDQzBBM0YwMDEwODBDQTVDMTI3MzQ0NzRFM0I4NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd46zfRAtERN2pK049Dd0P3ysj oGvnAIwanRwGztwEaiz9ZNvgZi8z89gYG2btCA0rg30HYqYEI0mPHm4rA83ZPlEh sZe7hbzu/thQJd0WeEJXUcQtb6YHW3puzTvlmLCZolRB7/RD/HdIDZR7e+OVTHQV +BdRRsHCgRUG4xhnFAA9IV+TtETW5ynaoOSfcZ03AepaUG8f3sRpTTKRqU7SdQuF V6VRapGZlYXJ8tw1K/iufXKbV3CPvuuRvA8P4DNS2qYwSMcFxPnhf2/FbdlWYJt8 9zZWVqDOdSPnW5Io0m4DjEjh1sdtskskHEXkGdrILfV9/iPEuszjCpYy+qQjAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUWx6mrH3MCj8AEIDKXBJzRHTjuF0wHwYDVR0j BBgwFoAUi9T36/+XY8Bh1Te4odCHLXBpdjIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODdkOGRiNzEtYTViZS00NjRjLWE4YjktOGI3YjM3NGFl M2ZhLzEvOEJENEY3RUJGRjk3NjNDMDYxRDUzN0I4QTFEMDg3MkQ3MDY5NzYzMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84QkQ0RjdFQkZGOTc2M0MwNjFENTM3QjhB MUQwODcyRDcwNjk3NjMyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg3ZDhkYjcxLWE1YmUtNDY0Yy1hOGI5LThiN2IzNzRhZTNmYS8xLzhCRDRGN0VC RkY5NzYzQzA2MUQ1MzdCOEExRDA4NzJENzA2OTc2MzIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA/r7KW eMEvPiHIMVyY8+yAHJ0m5BBNNUWkFe27Du/AAWn7gkaoEC2YWUgGy1/VRiMRUvP6 d1kXmN2jQ3M9Y2o+Vtaw4xmuwF2izDPF6XJcVp4Z2c8S3JEHAtxKZf1/rihDfdep XVnQxqO1xjjfDIdQMo2YVzUCp+HuMofIEi9A2YVn4VbF8yTH0hW/iz04tta/E155 uSwpMcvZPjl3IhqWur0kWpIm541ssspL1KmxKNYK+jjA7IyCitS1KsUWqNIoWkhm Az60L7et9ii/9v9l5EQ1Dttfaedhx8d7pekfimTRWKXpbr+J9kEK+5WPdGIlOOmP Yxdzy7VtBC10xkEx -----END CERTIFICATE-----Generated at Mon Oct 20 03:42:17 2025 by rpki-client