$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: nUMX0qsgo+U9zrzXSCVfTom8qghlI3d17fWLSMX5sCs= Subject key identifier: AF:3D:C9:5D:09:17:7B:40:AD:C4:2B:C6:F4:CB:23:9B:4F:0A:8E:DD Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 577BCFBE9CA0F3F4FF30800839320BCAA4380084 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 03C5 Signing time: Sun 19 Oct 2025 03:26:42 +0000 Manifest this update: Sun 19 Oct 2025 03:21:42 +0000 Manifest next update: Mon 20 Oct 2025 05:31:42 +0000 Files and hashes: 1: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 2: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 3: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 4: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 6: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 7: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 8: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: nlhe38fQVe/3gqco4Tnf1Zz2M7C0cbjYw2Lj7r9kr2I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 05:31:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:7b:cf:be:9c:a0:f3:f4:ff:30:80:08:39:32:0b:ca:a4:38:00:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Oct 19 03:21:42 2025 GMT Not After : Oct 20 05:31:42 2025 GMT Subject: CN=AF3DC95D09177B40ADC42BC6F4CB239B4F0A8EDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f3:ea:2d:33:0e:c1:b1:32:0e:d9:bc:15:bc: ca:45:19:70:df:51:d7:1b:de:0b:09:f9:e7:f5:93: 43:08:be:c9:2a:eb:ad:b8:44:60:35:28:53:0d:5a: be:30:87:6d:e3:69:1a:22:94:91:1c:d2:3c:46:f6: 5f:99:ac:47:29:a1:cc:99:84:bb:09:3c:dc:12:a9: 62:c9:3b:1d:57:b6:b6:38:9b:1d:8a:a6:87:fe:cf: 5c:6a:57:de:0f:53:d5:2a:0d:90:5f:66:5a:c4:2f: bc:eb:c3:54:8e:21:48:b2:ff:72:b3:3e:b5:d7:76: 97:41:80:ab:07:e3:57:1b:39:76:ce:bf:93:9f:02: 18:29:a1:0a:f0:88:07:78:d3:2e:10:87:93:d4:0b: e3:0a:cf:db:1a:27:62:d2:47:32:9b:96:d4:0d:b3: 9b:5d:4f:05:70:90:26:f9:dc:0a:7a:f3:c5:16:f4: 8d:67:4f:c5:f1:1b:77:04:66:cf:ec:d5:2f:eb:45: 25:85:69:75:bf:7d:90:68:b0:c9:ad:1a:d8:50:a4: 9d:47:9c:fb:07:24:54:03:8d:ef:77:db:0d:25:06: 92:01:a9:36:d6:b6:4d:27:0e:c8:81:9c:a1:14:8c: 03:5d:04:65:28:d4:3d:ca:40:5a:fc:04:a4:d2:20: 35:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3D:C9:5D:09:17:7B:40:AD:C4:2B:C6:F4:CB:23:9B:4F:0A:8E:DD X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:bf:2c:f5:af:a9:70:a4:d1:9e:78:49:e5:e0:d1:70:87:4a: 38:91:6e:67:c6:96:5d:75:e0:04:77:c6:86:1a:b9:49:84:46: c5:cc:c4:e0:27:d2:ec:3b:c0:ee:f8:b9:68:3d:08:7d:4f:52: 4c:28:1d:ce:fa:8b:0a:b7:d4:7c:58:e4:d1:74:f8:72:74:ff: ab:ba:b4:ac:80:18:b3:ed:89:64:4d:37:40:8f:99:d7:78:f2: 76:eb:9d:24:e4:79:86:ed:e3:ca:71:b0:1e:5e:1f:7a:be:39: a1:d5:f3:82:09:12:0c:96:a3:b5:77:7b:9d:42:01:d2:7e:fd: 02:ff:3e:85:00:ea:49:5b:0c:58:67:7d:60:63:ca:61:37:ad: b6:01:78:bf:44:8a:06:6f:70:c9:18:1c:ff:6e:12:e5:ce:5c: 37:99:e8:04:9e:c9:10:a9:4f:44:a2:60:00:e9:19:19:71:94: 4f:4b:a5:06:65:67:11:26:03:b4:59:fd:a4:29:94:2a:e7:2a: 45:a1:d2:47:ba:28:fc:f4:10:b6:a1:32:e9:5c:ea:28:f1:81: 28:c5:11:3f:19:15:d2:cc:a1:d7:27:ba:3e:f8:44:51:a7:c5: 6c:3f:d8:c7:63:05:93:23:ce:b7:3b:45:cb:fb:9c:67:16:6e: b6:c9:99:8b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUV3vPvpyg8/T/MIAIOTILyqQ4AIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTEwMTkwMzIxNDJaFw0yNTEwMjAwNTMxNDJaMDMxMTAvBgNV BAMTKEFGM0RDOTVEMDkxNzdCNDBBREM0MkJDNkY0Q0IyMzlCNEYwQThFREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/8+otMw7BsTIO2bwVvMpFGXDf Udcb3gsJ+ef1k0MIvskq6624RGA1KFMNWr4wh23jaRoilJEc0jxG9l+ZrEcpocyZ hLsJPNwSqWLJOx1XtrY4mx2Kpof+z1xqV94PU9UqDZBfZlrEL7zrw1SOIUiy/3Kz PrXXdpdBgKsH41cbOXbOv5OfAhgpoQrwiAd40y4Qh5PUC+MKz9saJ2LSRzKbltQN s5tdTwVwkCb53Ap688UW9I1nT8XxG3cEZs/s1S/rRSWFaXW/fZBosMmtGthQpJ1H nPsHJFQDje932w0lBpIBqTbWtk0nDsiBnKEUjANdBGUo1D3KQFr8BKTSIDWFAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUrz3JXQkXe0CtxCvG9Msjm08Kjt0wHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFb8s9a+pcKTRnnhJ5eDR cIdKOJFuZ8aWXXXgBHfGhhq5SYRGxczE4CfS7DvA7vi5aD0IfU9STCgdzvqLCrfU fFjk0XT4cnT/q7q0rIAYs+2JZE03QI+Z13jyduudJOR5hu3jynGwHl4fer45odXz ggkSDJajtXd7nUIB0n79Av8+hQDqSVsMWGd9YGPKYTettgF4v0SKBm9wyRgc/24S 5c5cN5noBJ7JEKlPRKJgAOkZGXGUT0ulBmVnESYDtFn9pCmUKucqRaHSR7oo/PQQ tqEy6VzqKPGBKMURPxkV0syh1ye6PvhEUafFbD/Yx2MFkyPOtztFy/ucZxZutsmZ iw== -----END CERTIFICATE-----Generated at Sun Oct 19 17:45:25 2025 by rpki-client