$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft File: 87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft (raw, json) Hash identifier: RxnQND+KZ1jAbPqlEse8yrm1dSE/bBQQBqJJXi8disk= Subject key identifier: 03:5F:8B:C3:C4:93:CF:E9:9D:19:81:BD:7E:78:32:6F:25:41:89:82 Authority key identifier: 87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 Certificate issuer: /CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Certificate serial: 7587E33C2608C4951BF260B4B1AF35CA55D8157A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft Manifest number: F4 Signing time: Sun 19 Oct 2025 02:32:14 +0000 Manifest this update: Sun 19 Oct 2025 02:27:14 +0000 Manifest next update: Mon 20 Oct 2025 06:29:14 +0000 Files and hashes: 1: 326131343a373538313a393966323a3a2f34382d3438203d3e20323134333434.roa (hash: GgRgpO0cir6J2JIvLpFaBWDg0/fcSkJg//f6BlSBDCY=) 2: 326131343a373538313a393930343a3a2f34382d3438203d3e20323134333434.roa (hash: Kr++/O1eWk2rhooTEwkNaOpIKHaAHhcWSp5UY9Du6eM=) 3: 326131343a373538303a666634333a3a2f34382d3438203d3e20323134333434.roa (hash: apRB5OfhlgNP9CjlOyLXHwJtDJcG7Ul2o20dXFYOVFQ=) 4: 326131343a373538303a666634353a3a2f34382d3438203d3e20323134333434.roa (hash: 5PYc1rYfh5soL/5eOkdLi7LFwnLpj6iEncugTNMnU6k=) 5: 87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl (hash: 2dCGRdUeadqbmW5Yk3EJQzpifFbt8cvX3rBhFbi0ZTE=) 6: 326131343a373538303a666634303a3a2f34382d3438203d3e20323134333434.roa (hash: dPCGiKkWz0E9rMprVOstBFLQuVK9OG6CBSKX+fk7UXw=) 7: 326131343a373538313a393966313a3a2f34382d3438203d3e20323134333434.roa (hash: eBRv+uDGLUqSp7a6GG/a9BPTN3/sPy8oPhg1ivi/5ik=) 8: 326131343a373538313a393965653a3a2f34382d3438203d3e20323134333434.roa (hash: 3oBSnEnPYocyloNNfV7eH1ZnHXiKOV8dASwMij3b8+0=) 9: 326131343a373538313a393930353a3a2f34382d3438203d3e20323134333434.roa (hash: 0tk68iktR4A+Tmx1ow+QCPfURRQdgNg7+hqUgrcV4SU=) 10: 326131343a373538303a666634313a3a2f34382d3438203d3e20323134333434.roa (hash: pdCqfiQKAk5mpE38Sur9HB4NVG9NXvRtOzzMMORY0Ss=) 11: 326131343a373538303a666634323a3a2f34382d3438203d3e20323134333434.roa (hash: 9k9VorkprwzOj4hWnDvwpKS020LK9HlBFwzRrzgLjKw=) 12: 326131343a373538313a393930313a3a2f34382d3438203d3e20323134333434.roa (hash: i94AFUzw6e810fYgj7x6pZ8Yx8k5H6Glrkwkeys08UU=) 13: 326131343a373538313a393966333a3a2f34382d3438203d3e20323134333434.roa (hash: CfKfKnWr6AMoLiLfBVlrhneodY9KAu+Y1wDjsvoRWPk=) 14: 326131343a373538303a666634343a3a2f34382d3438203d3e20323134333434.roa (hash: wAwmvjP2Xs/JgKfPKl1DdsDpWK9Z2qkOeMDP05em2JQ=) 15: 326131343a373538313a393930323a3a2f34382d3438203d3e20323134333434.roa (hash: 3uRQGY7O+ZvtbHNtgC5MF4VJ4PR1W0vGtZuXeGQdfrI=) 16: 326131343a373538303a666634363a3a2f34382d3438203d3e20323134333434.roa (hash: INfgk/A/FB6y22LomhkCbMfma8QUd57K4w9Tk5H86CM=) 17: 326131343a373538313a393966343a3a2f34382d3438203d3e20323134333434.roa (hash: aT8cghtaGkqPEEByCDT3I1TbWDM5+v3iYF7i8PWrF94=) 18: 326131343a373538313a393939393a3a2f34382d3438203d3e20323134333434.roa (hash: gWNOGizaCWeT+eChfA6O1CcYgC4CppF3JVd8ZgY0qsY=) 19: 326131343a373538313a393930333a3a2f34382d3438203d3e20323134333434.roa (hash: /zrjZ0ZqEzRDQ5mOWK+S06L45z9UxNhwijRkpqGoHX0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:29:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:87:e3:3c:26:08:c4:95:1b:f2:60:b4:b1:af:35:ca:55:d8:15:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Validity Not Before: Oct 19 02:27:14 2025 GMT Not After : Oct 20 06:29:14 2025 GMT Subject: CN=035F8BC3C493CFE99D1981BD7E78326F25418982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e9:65:3f:7b:a2:02:b3:41:f7:ad:3d:55:a6: 73:6d:c7:e3:97:34:41:fd:47:d9:41:fe:14:46:54: 1f:2b:97:92:fb:01:9d:67:51:71:66:11:a3:74:16: bd:d7:7d:06:16:89:0a:c1:2f:50:54:ac:e5:1c:66: 66:e4:75:6c:06:7f:17:01:db:a3:30:e1:cf:a3:78: 2e:02:02:d7:b1:50:17:83:62:c3:a3:a0:f1:ef:66: c8:88:92:a5:e8:67:77:86:23:cd:36:76:51:73:e3: 4e:61:d5:9a:5a:53:ff:c1:90:97:f0:fc:d2:7e:1f: 5e:ce:49:08:a2:5a:a1:e7:a6:17:53:fd:ee:1b:36: 1c:3d:b0:73:05:4c:d3:01:3d:b9:87:5c:9b:0c:79: 70:8d:10:e9:87:4f:1c:fe:5b:99:c2:91:1a:61:02: aa:3a:29:f9:c7:81:e8:43:f0:b3:f3:a9:7c:d7:9b: f4:42:5a:94:2f:fd:af:c8:5f:2e:c5:e2:b6:1b:8f: f6:05:c5:f3:2c:7d:25:6d:ed:0a:68:d5:dc:3e:86: bd:90:fc:96:30:d6:0b:8f:0e:9f:d4:5d:33:0b:c4: 89:4c:63:de:94:cd:1e:18:25:f1:db:a0:83:e6:3b: 5a:89:75:a2:2f:60:e7:ce:db:03:74:8d:44:83:2a: f6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5F:8B:C3:C4:93:CF:E9:9D:19:81:BD:7E:78:32:6F:25:41:89:82 X509v3 Authority Key Identifier: keyid:87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f2:d0:6f:7a:e6:be:75:99:e2:0a:9b:d3:fd:83:a8:13:a4: 2a:55:58:91:6c:39:49:96:4b:36:5e:d2:95:4d:d9:49:8d:54: 2c:f1:30:06:3e:77:66:ba:49:26:33:40:23:4d:f2:d2:e3:7d: 1f:7c:29:d6:2d:82:e1:67:19:ec:00:14:f5:55:c7:e0:1a:ba: a2:92:d7:c1:db:22:44:0e:fa:d9:d6:67:c1:87:d1:31:c6:77: e7:08:51:f3:78:61:95:51:47:32:a3:f1:84:4f:54:c1:e7:2c: 6f:62:46:f3:bc:33:ed:0e:40:05:b9:aa:fa:e0:73:eb:0c:d2: ad:a4:45:d1:e4:89:fb:b8:2c:0f:61:7b:49:86:fe:5e:a8:49: 5c:12:d7:79:f7:b9:fd:44:25:61:86:ba:ce:c0:6c:5b:d2:0d: a7:2a:ac:62:35:0d:b5:b3:76:d0:b6:4e:26:d2:e9:e5:1e:21: 1d:fb:d7:b0:42:eb:93:66:70:b5:1e:51:d9:72:bf:83:b5:49: 3d:2a:37:7d:ec:6f:1b:4c:eb:15:cb:f7:e1:63:73:7b:c7:a9: 32:9d:51:a4:62:6c:66:38:07:87:a7:50:21:3d:2e:f7:29:ad: 37:2c:25:5e:53:e3:16:29:05:e4:e0:f6:59:59:70:82:ac:7f: 4c:19:8a:7e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUdYfjPCYIxJUb8mC0sa81ylXYFXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdBNEM4NEQ0MzY2REJCMTVBOTA5MEE1NUFBMkRDRUJB ODcyMzk0NTAeFw0yNTEwMTkwMjI3MTRaFw0yNTEwMjAwNjI5MTRaMDMxMTAvBgNV BAMTKDAzNUY4QkMzQzQ5M0NGRTk5RDE5ODFCRDdFNzgzMjZGMjU0MTg5ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ6WU/e6ICs0H3rT1VpnNtx+OX NEH9R9lB/hRGVB8rl5L7AZ1nUXFmEaN0Fr3XfQYWiQrBL1BUrOUcZmbkdWwGfxcB 26Mw4c+jeC4CAtexUBeDYsOjoPHvZsiIkqXoZ3eGI802dlFz405h1ZpaU//BkJfw /NJ+H17OSQiiWqHnphdT/e4bNhw9sHMFTNMBPbmHXJsMeXCNEOmHTxz+W5nCkRph Aqo6KfnHgehD8LPzqXzXm/RCWpQv/a/IXy7F4rYbj/YFxfMsfSVt7Qpo1dw+hr2Q /JYw1guPDp/UXTMLxIlMY96UzR4YJfHboIPmO1qJdaIvYOfO2wN0jUSDKvaLAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUA1+Lw8STz+mdGYG9fngybyVBiYIwHwYDVR0j BBgwFoAUh6TITUNm27FakJClWqLc66hyOUUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTVkNGMwMGItZDEwNS00OTA2LWI5ODEtMWQwMzQzZTMw MWRhLzEvODdBNEM4NEQ0MzY2REJCMTVBOTA5MEE1NUFBMkRDRUJBODcyMzk0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84N0E0Qzg0RDQzNjZEQkIxNUE5MDkwQTU1 QUEyRENFQkE4NzIzOTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2E1ZDRjMDBiLWQxMDUtNDkwNi1iOTgxLTFkMDM0M2UzMDFkYS8xLzg3QTRDODRE NDM2NkRCQjE1QTkwOTBBNTVBQTJEQ0VCQTg3MjM5NDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAs8tBv eua+dZniCpvT/YOoE6QqVViRbDlJlks2XtKVTdlJjVQs8TAGPndmukkmM0AjTfLS 430ffCnWLYLhZxnsABT1VcfgGrqiktfB2yJEDvrZ1mfBh9ExxnfnCFHzeGGVUUcy o/GET1TB5yxvYkbzvDPtDkAFuar64HPrDNKtpEXR5In7uCwPYXtJhv5eqElcEtd5 97n9RCVhhrrOwGxb0g2nKqxiNQ21s3bQtk4m0unlHiEd+9ewQuuTZnC1HlHZcr+D tUk9Kjd97G8bTOsVy/fhY3N7x6kynVGkYmxmOAeHp1AhPS73Ka03LCVeU+MWKQXk 4PZZWXCCrH9MGYp+ -----END CERTIFICATE-----Generated at Sun Oct 19 23:49:39 2025 by rpki-client