$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft File: 8184669B0189B7FABE05E700325A0D74957BEB27.mft (raw, json) Hash identifier: oCNn8dTJsTMzZgy7zcxjuFodqGHzGWG2ZtjeGRVEjX0= Subject key identifier: C1:A9:C9:2C:FA:BF:43:38:60:0D:B0:00:A4:4D:6B:FA:FF:2C:AF:36 Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27 Certificate serial: 79583F8AD79F3E244A17185E244BEB852D5BFCC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft Manifest number: 0112 Signing time: Sun 19 Oct 2025 08:26:37 +0000 Manifest this update: Sun 19 Oct 2025 08:21:37 +0000 Manifest next update: Mon 20 Oct 2025 08:44:37 +0000 Files and hashes: 1: 8184669B0189B7FABE05E700325A0D74957BEB27.crl (hash: /hfsEXrqxuLFSSL5htz76vMop4nZLL/xphCrv3GVDns=) 2: 3231332e3135372e3131322e302f32322d3232203d3e203230353130.roa (hash: oXC9Asr9SJ7DSslxSZaWUX9xWnSBbY5iUxbxwvvcFUI=) 3: 3231332e3135372e39362e302f32302d3230203d3e203230353130.roa (hash: cK22q6rO6KtktflqsQYlSr1z73xEpoVM/WNGnd6YIEI=) 4: 3231332e3135372e3132302e302f32342d3234203d3e203432383331.roa (hash: obPbW0ZKO9rq4yp7c5UqzqijavPW0CV78gaYhHaBReI=) 5: 3231332e3135372e3132322e302f32342d3234203d3e2039333034.roa (hash: aUvc4UTsIU7R0m9dsnmxWesOTPr9WQo6/RshJ5X0hb4=) 6: 3231332e3135372e3132332e302f32342d3234203d3e2039333034.roa (hash: vxjXWaCdelX3l/Dq0oCF9svJSK3Gm/FVltSuWwTdg0M=) 7: 3231332e3135372e3130372e302f32342d3234203d3e203530323631.roa (hash: fkThFrWbc2SNg5nWL/DjCmp7efO9LKVSLfyHO63Odeo=) 8: 3231332e3135372e3131362e302f32332d3233203d3e203230353130.roa (hash: u6D0nQIamyf1rwT6EphlkmgpGmdsHhrROhbEzSFSSxQ=) 9: 3231332e3135372e3131382e302f32332d3233203d3e203230353130.roa (hash: U2rsj2GmpPBYV9RPLITNHzbaDI2Gxelnlov5msxX9eI=) 10: 3231332e3135372e3132312e302f32342d3234203d3e2039333034.roa (hash: ZHfI2bxkV7hnGY31X0QEko4MmgUYJCvh7a/XuZiRsPg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 08:44:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:58:3f:8a:d7:9f:3e:24:4a:17:18:5e:24:4b:eb:85:2d:5b:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27 Validity Not Before: Oct 19 08:21:37 2025 GMT Not After : Oct 20 08:44:37 2025 GMT Subject: CN=C1A9C92CFABF4338600DB000A44D6BFAFF2CAF36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:38:67:b7:ce:ea:49:7b:99:9e:6d:70:17:b1: e9:36:4b:2e:e8:65:36:0d:11:0f:9f:a5:cf:03:ad: 8c:05:55:f5:d4:4c:59:2b:32:d7:c8:8e:57:58:37: 15:1e:6f:b5:8f:d7:fc:11:a6:6e:19:f4:f6:fb:d1: 3c:e8:37:e8:91:75:27:17:b8:c0:fa:c6:2d:3d:72: 30:21:cd:52:e0:4c:da:26:92:88:a3:0a:87:11:7d: 44:03:d5:e5:2f:1b:24:dd:72:bb:82:b7:aa:51:66: e9:63:dd:de:03:d2:54:be:af:39:e4:fe:ab:47:49: 49:7a:57:58:0c:0e:17:9f:1f:eb:03:49:17:bd:58: 9c:ab:21:14:0c:76:6c:c3:fd:0a:71:88:04:06:45: af:ce:b4:cd:73:d9:c6:fb:ce:39:0a:3c:d0:91:cc: e6:5d:71:7f:de:09:d0:7e:3b:63:c8:3d:c4:5c:60: 76:3a:c4:0f:38:0e:c6:2c:9b:0c:c5:84:85:1d:c2: 87:2d:cb:86:45:8e:01:6f:8f:e5:fc:43:89:6f:01: 92:71:a6:b7:75:66:71:02:4b:e3:02:8d:1b:6d:6b: f7:a1:08:2a:31:c5:29:7d:6f:c8:0a:81:34:cf:6e: 6a:78:99:80:69:e4:2b:a6:53:c5:34:2e:22:09:cd: 3d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A9:C9:2C:FA:BF:43:38:60:0D:B0:00:A4:4D:6B:FA:FF:2C:AF:36 X509v3 Authority Key Identifier: keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:9d:f0:6a:8b:07:e5:3f:37:8f:6a:86:43:68:4a:58:a3:79: 85:1f:ae:a2:55:06:fa:41:79:a5:a3:b2:56:63:25:a8:3c:f9: 43:ff:b2:17:2b:6f:cb:a9:2a:7a:4e:d0:39:7e:a0:81:c4:8c: 9e:d7:27:b0:b8:3b:05:ba:fc:26:24:17:53:c6:ee:65:b9:94: 53:8c:64:87:82:79:1d:5b:ab:9c:db:a2:5d:b8:00:76:9e:e4: 6f:8e:f2:32:9a:30:05:39:c0:ba:87:9e:f0:a9:ab:5a:a9:31: b1:7c:f8:10:f1:c8:02:b3:b2:15:85:7e:ae:34:b2:ca:c2:f2: c0:70:67:d4:43:15:e8:ac:4b:42:e4:9b:c5:ad:e8:d9:e6:b5: 85:85:16:90:70:83:5e:31:3b:6f:84:f5:bf:db:65:7e:83:76: 9a:fb:99:43:89:9f:e5:56:04:d7:f9:81:73:c2:f0:b7:e5:ae: 0c:91:69:6f:e9:f2:e1:84:65:36:24:39:7c:c9:1b:0c:3d:05: d3:33:30:21:58:1f:b8:1d:95:80:fb:e9:b5:e7:63:db:ac:e0: b9:6e:c7:e9:c6:50:05:a6:94:b9:fb:85:e7:35:21:d8:10:9d: 39:be:69:59:48:94:ca:e7:be:a2:48:5e:29:41:ab:60:24:bf: 91:50:d6:e7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUeVg/itefPiRKFxheJEvrhS1b/MAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE4NDY2OWIwMTg5YjdmYWJlMDVlNzAwMzI1YTBkNzQ5 NTdiZWIyNzAeFw0yNTEwMTkwODIxMzdaFw0yNTEwMjAwODQ0MzdaMDMxMTAvBgNV BAMTKEMxQTlDOTJDRkFCRjQzMzg2MDBEQjAwMEE0NEQ2QkZBRkYyQ0FGMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFOGe3zupJe5mebXAXsek2Sy7o ZTYNEQ+fpc8DrYwFVfXUTFkrMtfIjldYNxUeb7WP1/wRpm4Z9Pb70TzoN+iRdScX uMD6xi09cjAhzVLgTNomkoijCocRfUQD1eUvGyTdcruCt6pRZulj3d4D0lS+rznk /qtHSUl6V1gMDhefH+sDSRe9WJyrIRQMdmzD/QpxiAQGRa/OtM1z2cb7zjkKPNCR zOZdcX/eCdB+O2PIPcRcYHY6xA84DsYsmwzFhIUdwocty4ZFjgFvj+X8Q4lvAZJx prd1ZnECS+MCjRtta/ehCCoxxSl9b8gKgTTPbmp4mYBp5CumU8U0LiIJzT1bAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUwanJLPq/QzhgDbAApE1r+v8srzYwHwYDVR0j BBgwFoAUgYRmmwGJt/q+BecAMloNdJV76ycwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUtMGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJi ZTI1LzAvODE4NDY2OUIwMTg5QjdGQUJFMDVFNzAwMzI1QTBENzQ5NTdCRUIyNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dZUm1td0dKdF9xLUJlY0FNbG9OZEpW NzZ5Yy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNDMxZTQyZS0w ZDdmLTQ0ZDAtODEzZi1iNWUzYTJhYmJlMjUvMC84MTg0NjY5QjAxODlCN0ZBQkUw NUU3MDAzMjVBMEQ3NDk1N0JFQjI3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdp3waosH5T83j2qGQ2hK WKN5hR+uolUG+kF5paOyVmMlqDz5Q/+yFytvy6kqek7QOX6ggcSMntcnsLg7Bbr8 JiQXU8buZbmUU4xkh4J5HVurnNuiXbgAdp7kb47yMpowBTnAuoee8KmrWqkxsXz4 EPHIArOyFYV+rjSyysLywHBn1EMV6KxLQuSbxa3o2ea1hYUWkHCDXjE7b4T1v9tl foN2mvuZQ4mf5VYE1/mBc8Lwt+WuDJFpb+ny4YRlNiQ5fMkbDD0F0zMwIVgfuB2V gPvptedj26zguW7H6cZQBaaUufuF5zUh2BCdOb5pWUiUyue+okheKUGrYCS/kVDW 5w== -----END CERTIFICATE-----Generated at Sun Oct 19 22:27:52 2025 by rpki-client