$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft File: B149F23A3E99C4760297DD7104B400C835D86D19.mft (raw, json) Hash identifier: 3VXrmsXL5wEtHqbMULQLC8nBuyQsWe1BL3tYviXE3Vk= Subject key identifier: 35:C7:9F:38:20:B6:D1:CA:44:81:CD:23:5D:DC:4A:C0:4E:81:E9:C3 Authority key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 Certificate issuer: /CN=B149F23A3E99C4760297DD7104B400C835D86D19 Certificate serial: 11C41BBCDAFC580133406CD98EEE4DA16988D333 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft Manifest number: 53 Signing time: Mon 20 Oct 2025 08:38:09 +0000 Manifest this update: Mon 20 Oct 2025 08:33:09 +0000 Manifest next update: Tue 21 Oct 2025 11:22:09 +0000 Files and hashes: 1: B11D50A5D47F732F3F808FEAE6A3906CC4509C44.cer (hash: fOEqRqKlaLKUtKYMsGd37ZJXvbw9QPqtaVQY5rFpBpQ=) 2: 326131343a373538333a663436303a3a2f34342d3438203d3e20323131353735.roa (hash: LMFmuLJ4IgxIQCv2slhgNeKFDMCx6rSWhmkOn3RblbI=) 3: B149F23A3E99C4760297DD7104B400C835D86D19.crl (hash: m+qxUxsL6KKeJoaW4s0ijeGHIjgY2AXN4+3fL++Pvps=) 4: E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer (hash: ttIHeVow2IErbUXmp4n67KjX2H68UmfVMTfPkOmulDw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 21:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:c4:1b:bc:da:fc:58:01:33:40:6c:d9:8e:ee:4d:a1:69:88:d3:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B149F23A3E99C4760297DD7104B400C835D86D19 Validity Not Before: Oct 20 08:33:09 2025 GMT Not After : Oct 21 11:22:09 2025 GMT Subject: CN=35C79F3820B6D1CA4481CD235DDC4AC04E81E9C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bb:5a:4f:e9:57:d1:44:c9:17:88:07:8e:ab: 9c:71:8a:42:38:6d:27:39:86:0f:d1:1d:08:36:6b: b5:03:88:70:0b:c4:ac:57:4e:b6:cb:da:a8:25:57: 3e:53:09:89:5b:1c:fb:08:83:d5:19:80:69:64:43: a3:57:9a:7f:aa:ba:c5:b3:fa:7a:0f:65:36:7a:ff: 6d:26:10:d2:40:a2:8a:a6:aa:56:8e:83:c5:02:19: 78:2c:24:63:68:bf:f6:e4:5f:fa:c7:9a:59:f4:de: 9d:05:7d:4e:1e:57:0c:0e:87:82:10:29:fc:54:62: 4e:ca:68:dd:4a:26:85:a0:10:ca:2a:99:85:c6:65: a2:77:e9:3e:7b:11:54:f4:76:eb:b8:14:fc:81:2e: af:b0:d6:34:0b:7a:fe:bf:17:52:e7:13:7e:93:8b: 01:fb:6b:bc:22:27:99:d6:4f:58:3c:67:3b:e4:b1: e3:98:fa:74:b3:8b:c2:6b:1a:cb:9d:d1:7e:b1:c5: c7:8f:37:e5:1b:65:26:79:eb:26:88:81:2c:49:31: 2a:1b:50:37:81:e8:58:a4:47:0b:84:52:7a:1c:d8: a9:25:24:c9:5f:99:d7:84:59:aa:86:8f:f3:ce:d7: c5:34:38:9e:d3:68:9c:24:7b:91:ed:de:14:d6:ae: 92:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C7:9F:38:20:B6:D1:CA:44:81:CD:23:5D:DC:4A:C0:4E:81:E9:C3 X509v3 Authority Key Identifier: keyid:B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e7:4d:44:23:01:51:4c:ca:97:50:49:4a:0e:7a:83:77:7e: da:ab:3a:e0:67:23:85:37:e4:dc:8e:87:5c:91:85:24:27:f4: 4b:32:b7:fe:90:f0:83:5e:ce:e6:22:2e:e2:f4:5c:8c:43:5e: ef:35:4b:96:91:73:55:22:e1:f7:c8:c2:77:8d:dd:d1:7c:78: db:e1:67:35:0a:59:49:63:a0:98:c4:b4:af:da:2d:70:f5:fe: 51:b4:f0:63:94:17:32:4b:82:34:29:b0:51:12:26:2b:74:66: 3b:04:65:bb:c3:28:31:45:60:50:e0:8e:7e:f9:54:eb:1e:bd: 55:e2:d6:7a:0e:5d:64:5e:3c:04:d3:99:bf:6f:be:93:43:11: c0:d2:5c:54:fc:3d:27:ca:1f:5d:92:38:d0:6d:d8:d1:72:a8: 5d:d4:1c:8a:0c:2c:d2:ea:e5:3b:47:58:23:ff:d6:f4:d5:d4: 67:df:bf:4b:6f:59:eb:4f:2c:43:e0:fa:07:40:db:e7:f1:c7: f1:f8:7d:d9:ce:c6:40:db:ab:60:45:14:6c:94:48:05:93:bd: 53:c0:60:ea:9f:d6:24:fa:27:cf:f3:85:b4:14:9f:98:49:bb: d5:5f:6e:41:47:78:34:60:6f:68:66:ad:fe:bc:da:d1:c0:e0: ea:fd:a1:2c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUEcQbvNr8WAEzQGzZju5NoWmI0zMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgz NUQ4NkQxOTAeFw0yNTEwMjAwODMzMDlaFw0yNTEwMjExMTIyMDlaMDMxMTAvBgNV BAMTKDM1Qzc5RjM4MjBCNkQxQ0E0NDgxQ0QyMzVEREM0QUMwNEU4MUU5QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCou1pP6VfRRMkXiAeOq5xxikI4 bSc5hg/RHQg2a7UDiHALxKxXTrbL2qglVz5TCYlbHPsIg9UZgGlkQ6NXmn+qusWz +noPZTZ6/20mENJAooqmqlaOg8UCGXgsJGNov/bkX/rHmln03p0FfU4eVwwOh4IQ KfxUYk7KaN1KJoWgEMoqmYXGZaJ36T57EVT0duu4FPyBLq+w1jQLev6/F1LnE36T iwH7a7wiJ5nWT1g8ZzvkseOY+nSzi8JrGsud0X6xxcePN+UbZSZ56yaIgSxJMSob UDeB6FikRwuEUnoc2KklJMlfmdeEWaqGj/PO18U0OJ7TaJwke5Ht3hTWrpKNAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUNcefOCC20cpEgc0jXdxKwE6B6cMwHwYDVR0j BBgwFoAUsUnyOj6ZxHYCl91xBLQAyDXYbRkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVj OWRjLzIvQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgzNUQ4NkQxOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CMTQ5RjIzQTNFOTlDNDc2MDI5N0RENzEw NEI0MDBDODM1RDg2RDE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzk4MWY5NzgyLTg5OGUtNGI4My05NWU2LTRmZjRhYjc1YzlkYy8yL0IxNDlGMjNB M0U5OUM0NzYwMjk3REQ3MTA0QjQwMEM4MzVEODZEMTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCK501E IwFRTMqXUElKDnqDd37aqzrgZyOFN+TcjodckYUkJ/RLMrf+kPCDXs7mIi7i9FyM Q17vNUuWkXNVIuH3yMJ3jd3RfHjb4Wc1CllJY6CYxLSv2i1w9f5RtPBjlBcyS4I0 KbBREiYrdGY7BGW7wygxRWBQ4I5++VTrHr1V4tZ6Dl1kXjwE05m/b76TQxHA0lxU /D0nyh9dkjjQbdjRcqhd1ByKDCzS6uU7R1gj/9b01dRn379Lb1nrTyxD4PoHQNvn 8cfx+H3ZzsZA26tgRRRslEgFk71TwGDqn9Yk+ifP84W0FJ+YSbvVX25BR3g0YG9o Zq3+vNrRwODq/aEs -----END CERTIFICATE-----Generated at Mon Oct 20 10:01:06 2025 by rpki-client