$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft File: D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft (raw, json) Hash identifier: RCToNG8cBWBKG/gqtti6xsCAdJAJEAl3DKK213JS1ZM= Subject key identifier: AC:37:2F:7E:05:5C:D7:61:88:BB:18:5D:5F:F2:EF:FC:F5:51:9A:03 Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44 Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444 Certificate serial: 635D52E510237EF53B107353A76E5EA030A7B467 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft Manifest number: 04F7 Signing time: Sun 19 Oct 2025 16:36:39 +0000 Manifest this update: Sun 19 Oct 2025 16:31:39 +0000 Manifest next update: Mon 20 Oct 2025 17:31:39 +0000 Files and hashes: 1: 39332e39322e32312e302f32342d3234203d3e203631333137.roa (hash: fW+zXQmtdqPL01ivRHM0ry5dwDotUJmdzQHE3ZemyUE=) 2: 39332e39322e31392e302f32342d3234203d3e203631333137.roa (hash: bCly8plczaq5qd0H9MlQ1Z8xZKSunOI/jFWKgR1UqBg=) 3: 39332e39322e32322e302f32332d3234203d3e20343031383338.roa (hash: ZR3NimLfDuSVrHX3TIHZtfUL9Oft/y6YDT0lI8Ay4iU=) 4: 39332e39322e32322e302f32332d3234203d3e203534333339.roa (hash: 88A6WN8qi/A8Ut9i/zPgFdBiGIl+iAKvU5wxlPcUnB8=) 5: 37382e32342e3132332e302f32342d3234203d3e2037303138.roa (hash: yLm71OTqDFRdyl2jt+hmsZQmui0MjgACYd0QbV3wZ9U=) 6: 37382e32342e3132312e302f32342d3234203d3e203631333137.roa (hash: PNy4BBOReJ4B4LRwKHBjnzscIyK0n1F3JT7zrSI8uHw=) 7: 37382e32342e3132332e302f32342d3234203d3e20343031383338.roa (hash: XbX1Gid500oTFj6vAef29FZUEz5FTkMATGNQOQiD6pY=) 8: D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl (hash: XS/c3cGmKxjk985FhNSATIxgjPSar8RiU85o4ySS2mw=) 9: 37382e32342e3132362e302f32332d3234203d3e203131343236.roa (hash: daBRkHJPjnP4DyHn4IivnK1qaHgtIwZJtESS0iOn6Xk=) 10: 34352e38362e39342e302f32342d3234203d3e2039303039.roa (hash: gq03q2PZTenb5MfLZJOhv7nheUzD9xSGdvhncjMBFfc=) 11: 37382e32342e3132352e302f32342d3234203d3e203534333339.roa (hash: 8J7vWDZA6CwD0N0heCZfxarZkaHc987rZNDTEoRqJuw=) 12: 37382e32342e3132322e302f32342d3234203d3e20343031383338.roa (hash: QSDJ1+8SgpwSggscxtnEW0fE8nG/Mt5ZyXJ/C5BJhqQ=) 13: 37382e32342e3132322e302f32342d3234203d3e2037303138.roa (hash: RiGLyTpjx/lhYnZMR/g3INSwpo5JHGzbqqOnRRhQZa8=) 14: 37382e32342e3132342e302f32342d3234203d3e20343031383338.roa (hash: VrnH5tIT+SOLQ0xUmgz8lDea4v1K04gWY5bP4L4H/fY=) 15: 37382e32342e3132352e302f32342d3234203d3e20343031383338.roa (hash: qgaqtIbvWlmZK0f99yeifoHSkIPhxGYhski+5gJ4Rv4=) 16: 34352e38362e39322e302f32342d3234203d3e20323039313831.roa (hash: gFPXsCrn7VghMZpPQmlNius+Qe9koRj6iqpgIDQpOY8=) 17: 39332e39322e31382e302f32342d3234203d3e203534333339.roa (hash: WMxtcl2Ju6TLrgTtLUBAyAfGF8Gn9pZV9umXAbbzoJo=) 18: 39332e39322e32302e302f32342d3234203d3e2035353131.roa (hash: 7VcdQni9NXqci+IjZbxirF6Td9GD5nyYwAr4qpAAeg4=) 19: 39332e39322e31382e302f32342d3234203d3e20343031383338.roa (hash: UH0UP25o3U70TKOGCO5ZzwtVViIjPRoBTmf/0ZejDTc=) 20: 37382e32342e3132342e302f32342d3234203d3e203534333339.roa (hash: Jmas5KP8U8YtPnq0n93kzfbv6wwue5du0IC/hUNUQy4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 17:31:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:5d:52:e5:10:23:7e:f5:3b:10:73:53:a7:6e:5e:a0:30:a7:b4:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444 Validity Not Before: Oct 19 16:31:39 2025 GMT Not After : Oct 20 17:31:39 2025 GMT Subject: CN=AC372F7E055CD76188BB185D5FF2EFFCF5519A03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:52:31:8e:cc:4d:f7:a5:16:6b:7f:4a:31:be: 5b:9d:ae:a8:41:fc:a1:0b:64:26:0e:43:ed:1b:02: 36:75:1f:92:cf:77:aa:10:bc:56:67:9d:c5:15:18: 71:41:2a:6e:cc:56:37:40:16:53:b6:c3:1c:98:4e: 93:8f:1a:14:43:a0:a7:e9:d7:55:b0:25:ec:be:2c: 01:5a:fd:be:d4:63:23:93:54:e5:f9:5c:1c:a8:dd: 19:fe:e5:af:0d:9a:18:8d:3d:ca:a6:c1:37:f1:3d: 15:ec:6b:e5:15:df:f3:c9:28:ac:02:f5:b9:fc:79: 28:27:bb:52:92:6d:7f:a4:6b:d5:e6:6e:75:e1:c2: 49:52:9e:f5:ba:cc:2b:8c:ca:71:46:9a:76:60:3f: 90:68:cc:c4:92:57:21:2e:b1:5d:7a:b0:bd:68:5e: 58:8b:3d:2e:ec:0d:52:14:24:83:f7:71:33:00:e8: c6:09:f6:22:e4:65:5c:1f:75:a2:0a:ed:7a:a8:a4: ea:aa:27:88:19:00:fa:aa:b6:14:31:39:32:c8:17: 3b:79:ed:d5:24:e6:2d:b3:a3:b8:82:e2:b4:4a:22: 50:b9:ed:d5:df:d2:d7:6c:a9:eb:82:f2:ac:5a:86: ea:99:9f:d0:82:f9:07:c8:23:2c:1b:d6:6d:53:c6: 17:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:37:2F:7E:05:5C:D7:61:88:BB:18:5D:5F:F2:EF:FC:F5:51:9A:03 X509v3 Authority Key Identifier: keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:c3:10:d6:3d:91:ef:35:8a:08:02:33:dd:15:31:45:fe:50: 08:22:ae:71:27:02:d7:16:b9:e6:24:4c:06:05:4a:ec:a0:9d: 5e:a0:65:20:6b:a2:ce:3f:9c:7c:30:30:4f:1c:c1:19:1d:56: 44:86:f8:9e:26:d8:18:1b:92:53:dd:85:92:25:df:02:f5:da: 0f:56:64:bf:1d:8b:4b:56:25:45:40:fa:49:14:cd:aa:f4:b7: 10:bc:a7:e9:ed:b2:0a:c4:33:4c:dd:88:96:04:7b:3d:57:17: b6:2b:8a:f9:97:8b:52:ae:75:a5:72:51:4b:f4:d8:64:53:3d: 8b:6c:20:5b:0a:56:35:41:c8:96:74:49:45:e8:52:53:f3:78: 0f:66:b9:13:84:29:7e:e3:10:8f:91:75:9b:04:da:ba:0d:66: 94:e3:67:57:16:ec:69:de:5b:73:a6:b0:60:ed:1a:1a:c2:b2: 5b:fd:60:00:d3:e9:0a:d5:f6:ac:69:2a:7a:2e:90:b0:71:08: 67:8f:4a:12:6a:f8:ac:1c:1b:30:7d:87:a9:60:14:04:76:50: db:d2:e4:f7:fd:82:7c:f2:17:cc:eb:11:20:ff:1c:7b:4e:b9: d4:b6:b8:c9:77:3c:c7:f1:6c:12:0b:11:84:3b:03:4c:b9:fe: 95:57:7a:7b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUY11S5RAjfvU7EHNTp25eoDCntGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDAxYmEwMTNiYzFlNmQ4NmYwZDZkNThlYWZhNTRlMjdm YWRhMzQ0NDAeFw0yNTEwMTkxNjMxMzlaFw0yNTEwMjAxNzMxMzlaMDMxMTAvBgNV BAMTKEFDMzcyRjdFMDU1Q0Q3NjE4OEJCMTg1RDVGRjJFRkZDRjU1MTlBMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJUjGOzE33pRZrf0oxvludrqhB /KELZCYOQ+0bAjZ1H5LPd6oQvFZnncUVGHFBKm7MVjdAFlO2wxyYTpOPGhRDoKfp 11WwJey+LAFa/b7UYyOTVOX5XByo3Rn+5a8NmhiNPcqmwTfxPRXsa+UV3/PJKKwC 9bn8eSgnu1KSbX+ka9XmbnXhwklSnvW6zCuMynFGmnZgP5BozMSSVyEusV16sL1o XliLPS7sDVIUJIP3cTMA6MYJ9iLkZVwfdaIK7XqopOqqJ4gZAPqqthQxOTLIFzt5 7dUk5i2zo7iC4rRKIlC57dXf0tdsqeuC8qxahuqZn9CC+QfIIywb1m1TxhcFAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUrDcvfgVc12GIuxhdX/Lv/PVRmgMwHwYDVR0j BBgwFoAU0BugE7webYbw1tWOr6VOJ/raNEQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTUyMmE1MmYtNjUzNC00MTY1LWE2YTctZWY5Zjc0ZWY5 NDMxLzEvRDAxQkEwMTNCQzFFNkQ4NkYwRDZENThFQUZBNTRFMjdGQURBMzQ0NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBCdWdFN3dlYllidzF0V09yNlZPSl9y YU5FUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNTIyYTUyZi02 NTM0LTQxNjUtYTZhNy1lZjlmNzRlZjk0MzEvMS9EMDFCQTAxM0JDMUU2RDg2RjBE NkQ1OEVBRkE1NEUyN0ZBREEzNDQ0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWsMQ1j2R7zWKCAIz3RUx Rf5QCCKucScC1xa55iRMBgVK7KCdXqBlIGuizj+cfDAwTxzBGR1WRIb4nibYGBuS U92FkiXfAvXaD1Zkvx2LS1YlRUD6SRTNqvS3ELyn6e2yCsQzTN2IlgR7PVcXtiuK +ZeLUq51pXJRS/TYZFM9i2wgWwpWNUHIlnRJRehSU/N4D2a5E4QpfuMQj5F1mwTa ug1mlONnVxbsad5bc6awYO0aGsKyW/1gANPpCtX2rGkqei6QsHEIZ49KEmr4rBwb MH2HqWAUBHZQ29Lk9/2CfPIXzOsRIP8ce0651La4yXc8x/FsEgsRhDsDTLn+lVd6 ew== -----END CERTIFICATE-----Generated at Mon Oct 20 05:25:22 2025 by rpki-client