$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft File: 5ECB4CADBBADD500F49CA697D566A2761E017608.mft (raw, json) Hash identifier: WtlVRMUMoCdWrewa6A3cjp20gdQ0+C0mnwWItu0Q9PA= Subject key identifier: 9A:26:BF:8D:B0:C8:88:6C:4B:F1:49:D8:FE:2D:8D:9F:FA:10:F1:28 Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Certificate serial: 35A2274497F46256C7353D7600806976FCA7CC17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft Manifest number: 01D2 Signing time: Sun 19 Oct 2025 21:06:39 +0000 Manifest this update: Sun 19 Oct 2025 21:01:39 +0000 Manifest next update: Mon 20 Oct 2025 23:16:39 +0000 Files and hashes: 1: 3137302e36322e3139302e302f32342d3234203d3e203438393235.roa (hash: TDSLNd9plHJwOulPeBHo1vNBDKxJTlWmh9i0dzSd4do=) 2: 5ECB4CADBBADD500F49CA697D566A2761E017608.crl (hash: Ywn0AHIibZYaO3L7OQ46jodsjGxTmMdNvWJUxKl0d6k=) 3: 3231332e3235342e3137302e302f32342d3234203d3e20323038343833.roa (hash: gjwDheXZBS8eOtwo7Ja5xPFcujfV7TC07EH1z972oQ4=) 4: 3134312e3139332e3232382e302f32342d3234203d3e20323134323038.roa (hash: p1kuPenqcy6Et0XPjwxcCLB+vpEy3ekHhe4EodnqolI=) 5: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (hash: Q4yUdFFGtrq1xUVDtHn0DoNWjht0ICRHxiUX7p+xRAQ=) 6: 3231332e3235342e3137302e302f32342d3234203d3e203438363738.roa (hash: ttSPLNkVmnmfbB1Jg0U4OFMRv4cZWxzTg6oBluFltrk=) 7: 38362e35342e3137322e302f32342d3234203d3e20323134343332.roa (hash: WVXkrZeMKS19WGWwMJQfqNOjJpC3bIU6zT5pImMreVs=) 8: 3231332e3235342e3137302e302f32342d3234203d3e20323134393431.roa (hash: WuIyFXGDgkt2cltxoxT/RYao20HHu+r0Sn5rfpjFnHA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:a2:27:44:97:f4:62:56:c7:35:3d:76:00:80:69:76:fc:a7:cc:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Validity Not Before: Oct 19 21:01:39 2025 GMT Not After : Oct 20 23:16:39 2025 GMT Subject: CN=9A26BF8DB0C8886C4BF149D8FE2D8D9FFA10F128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cd:4f:e5:8c:ee:15:b4:99:b8:38:da:a3:20: 9a:38:6e:33:cb:44:46:8e:e7:fa:de:f6:2e:61:ee: 9c:a9:c1:7e:9e:8e:0f:ae:ec:cf:fa:54:32:39:4d: 8c:b8:37:c7:72:2d:44:a3:71:cb:dd:3e:94:9b:e4: c5:8d:1a:c9:b5:5e:f6:67:e1:75:ef:43:40:d7:36: 97:7c:d8:c4:80:b7:71:01:a1:23:11:3a:b9:e9:bf: 9c:70:a6:42:9a:92:b5:e9:f9:44:3f:14:64:c1:4f: 36:d3:86:03:6b:4d:63:c0:80:f0:61:c1:32:25:af: 76:31:f6:b2:30:28:d3:08:3a:24:2c:80:31:20:a8: 28:d2:c0:59:6f:7e:6b:16:66:af:58:e0:10:15:c4: c4:35:b8:b2:1d:72:f2:0e:f8:cf:a0:d7:fa:53:eb: be:3f:40:17:23:67:7a:fd:8c:65:84:b7:0a:dc:0e: a3:df:da:ca:49:ab:6f:43:2c:c9:a3:c8:d9:bc:36: 8f:31:9f:a8:0d:87:4d:92:05:dc:21:8d:6e:ae:2e: ef:c6:f4:1e:ce:a6:f1:f2:ac:e9:1e:1a:19:27:51: 59:de:c7:94:aa:c1:2c:a0:54:df:14:e0:4b:a2:e9: 90:00:eb:47:b9:83:4b:40:c7:29:cb:4e:d3:ef:a8: 60:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:26:BF:8D:B0:C8:88:6C:4B:F1:49:D8:FE:2D:8D:9F:FA:10:F1:28 X509v3 Authority Key Identifier: keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:e0:13:91:e6:8a:7a:c5:75:51:f0:70:66:3a:6c:bf:00:e4: 6e:bd:90:04:bb:5c:26:67:0c:94:26:4e:0d:fe:5c:26:ec:8d: 19:f1:cc:3d:7f:10:c3:7d:81:77:17:14:da:e8:0b:1e:1c:e2: 1f:5a:5e:e2:bd:c1:6f:55:69:23:0e:0f:91:2a:86:a5:78:47: 11:57:20:02:23:7f:fb:8f:01:fb:13:a1:0b:89:32:ea:bd:c2: e5:9e:1f:17:d4:9b:c4:4d:5d:f2:80:00:d0:6e:45:6c:ac:41: 28:7d:41:1f:5b:2f:78:dc:5c:49:c6:2e:ed:d6:d2:09:3e:80: 91:a9:fd:20:42:43:6d:b5:11:f2:93:68:d4:5d:59:5c:74:80: 6a:be:d9:51:e7:2c:b2:c9:c5:24:f4:15:95:21:7d:8f:46:ce: ac:9e:7b:ae:f1:ce:b9:cb:d2:41:31:d3:81:4d:57:d6:cf:3a: b0:47:6a:af:cc:03:df:22:3e:89:49:05:6f:19:61:b0:91:27: 87:25:5c:e2:cd:e5:1d:b7:e2:b8:72:e8:4b:e0:54:ff:5b:d4: 81:47:89:fa:ff:2b:8d:44:21:d2:49:bb:be:65:50:c0:84:a6: 0d:9c:d1:0b:9f:c1:ef:c4:c6:aa:26:df:f9:8e:dc:63:dd:99: 54:da:d5:70 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNaInRJf0YlbHNT12AIBpdvynzBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx ZTAxNzYwODAeFw0yNTEwMTkyMTAxMzlaFw0yNTEwMjAyMzE2MzlaMDMxMTAvBgNV BAMTKDlBMjZCRjhEQjBDODg4NkM0QkYxNDlEOEZFMkQ4RDlGRkExMEYxMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyzU/ljO4VtJm4ONqjIJo4bjPL REaO5/re9i5h7pypwX6ejg+u7M/6VDI5TYy4N8dyLUSjccvdPpSb5MWNGsm1XvZn 4XXvQ0DXNpd82MSAt3EBoSMROrnpv5xwpkKakrXp+UQ/FGTBTzbThgNrTWPAgPBh wTIlr3Yx9rIwKNMIOiQsgDEgqCjSwFlvfmsWZq9Y4BAVxMQ1uLIdcvIO+M+g1/pT 674/QBcjZ3r9jGWEtwrcDqPf2spJq29DLMmjyNm8No8xn6gNh02SBdwhjW6uLu/G 9B7OpvHyrOkeGhknUVnex5SqwSygVN8U4Eui6ZAA60e5g0tAxynLTtPvqGC/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUmia/jbDIiGxL8UnY/i2Nn/oQ8SgwHwYDVR0j BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0 QmRnZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzBlMTNkOC1i ZmUwLTQyMzUtYWZiNC1kNTNlZGZiYWNkZDIvMC81RUNCNENBREJCQURENTAwRjQ5 Q0E2OTdENTY2QTI3NjFFMDE3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAleATkeaKesV1UfBwZjps vwDkbr2QBLtcJmcMlCZODf5cJuyNGfHMPX8Qw32BdxcU2ugLHhziH1pe4r3Bb1Vp Iw4PkSqGpXhHEVcgAiN/+48B+xOhC4ky6r3C5Z4fF9SbxE1d8oAA0G5FbKxBKH1B H1sveNxcScYu7dbSCT6Akan9IEJDbbUR8pNo1F1ZXHSAar7ZUecsssnFJPQVlSF9 j0bOrJ57rvHOucvSQTHTgU1X1s86sEdqr8wD3yI+iUkFbxlhsJEnhyVc4s3lHbfi uHLoS+BU/1vUgUeJ+v8rjUQh0km7vmVQwISmDZzRC5/B78TGqibf+Y7cY92ZVNrV cA== -----END CERTIFICATE-----Generated at Sun Oct 19 23:02:17 2025 by rpki-client