$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft File: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json) Hash identifier: dM6PShBcRPTvjrt2YwjBpE7IUMI0uCOYIXwuwnuEVS0= Subject key identifier: 8D:CE:F3:D2:B0:8D:A1:88:D6:95:6D:E2:58:7A:8A:E7:EF:13:D9:A5 Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Certificate serial: 77290A53A6A3BE989E93A2D65318A77B2462480D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft Manifest number: 049E Signing time: Sun 19 Oct 2025 05:51:35 +0000 Manifest this update: Sun 19 Oct 2025 05:46:35 +0000 Manifest next update: Mon 20 Oct 2025 07:45:35 +0000 Files and hashes: 1: 36322e3131322e3134342e302f32302d3234203d3e203230333236.roa (hash: PvFG9BZ+YdbKPRfUC/0dM3w7V209DRWmI/bk8VoBnFU=) 2: 36322e3131322e3134342e302f32302d3230203d3e203539363432.roa (hash: hNXCqst3dZC+Dp3skkO26cOwh1zWEwx2n+JeuoU1IgU=) 3: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: DuCHe81tO8TVOKBTNFQCS5fRuYDjbGZfxshPpJZXNzc=) 4: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: OKc3uZvr3kmY38TGv/j5cCd/d8TD6IBU2hGWJY9u+K0=) 5: 3138352e322e3136322e302f32332d3234203d3e20323135323639.roa (hash: sEO5Q+LtE+juFIMx1yqrmSkIjuvpVFxY8R1aiQqtGzs=) 6: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: qGNft1uCzkGwuPJH7iDQ4xUhWrhNnduWexIhT+DgvI8=) 7: 3138352e322e3136302e302f32332d3234203d3e2039333034.roa (hash: vl2Nht2rNjTXwCm1D2P9y8kdqhZOwgeZgf4gpkMvcp8=) 8: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: hY/iIpaGanxmxatebFYi3ijTkZjHjUc/Iwjsijc0S+E=) 9: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: W95e9h2ypKBcN51G9gRI82wozQL8rXCLvGb2mHpv6bk=) 10: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: qxlkfW/nLMV9I5WoI6HQ89q00naILT20Rguml63Zf0A=) 11: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: oQj2no095+LyjZGzWOfw+sSJOW/7fRxpgUOPswu5nqM=) 12: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (hash: dPumV3w+l5K00Z5figZidyPpD2Xj/WObq95u77jhIK4=) 13: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: 0g5fdA4i6rYlqCuO4pt040lHmF/eErF425W5N4xq6J0=) 14: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: X+PLwzsRRQMgaM/TWKrSkseThdECGWKV7QbjrMlPn80=) 15: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: GCjCQc0vdu8E+NZi5emgx2vW0PKbTzGL5UYc+2R4voE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:29:0a:53:a6:a3:be:98:9e:93:a2:d6:53:18:a7:7b:24:62:48:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Validity Not Before: Oct 19 05:46:35 2025 GMT Not After : Oct 20 07:45:35 2025 GMT Subject: CN=8DCEF3D2B08DA188D6956DE2587A8AE7EF13D9A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:08:48:f0:70:6c:3e:2a:71:73:50:71:8e:ef: d2:79:48:1d:c5:01:b2:bd:a4:d7:3d:f8:ea:e3:11: e1:22:e1:6f:e2:c0:54:6e:d3:88:fb:a6:09:34:7a: 88:8d:25:69:11:02:59:a3:18:8f:cf:80:9f:55:d0: ad:0a:88:d1:b5:55:a7:1a:6a:38:31:12:09:af:09: 90:19:df:86:65:06:d7:5e:b5:d4:96:3f:13:0e:e3: 9d:bc:e5:2a:b1:4d:3a:9f:ce:3a:d4:8c:3b:45:a3: 1c:6f:2a:b9:39:a1:fd:73:bb:ff:9b:f4:63:62:e6: d7:de:b8:80:74:c3:9b:4a:2e:25:c4:18:12:fb:c2: 08:8d:5d:98:f0:da:ae:dc:1a:a7:10:64:42:9c:c2: 20:8a:7f:9a:f4:dd:81:96:4b:c5:f0:5b:60:a4:af: 10:b7:a3:2e:51:b9:10:8c:c7:2b:a7:49:34:c2:2b: 36:76:90:03:cc:31:92:ec:ab:4b:16:be:ad:18:2b: d0:82:b7:67:d9:10:d1:c9:c8:00:1d:c7:46:6c:ea: 30:62:25:ea:d4:a8:15:11:20:96:21:5b:65:35:78: f8:fc:80:14:81:e5:9f:fa:f2:cf:42:3e:37:d5:49: f5:54:c1:27:7a:8d:d6:0e:20:a4:9f:5f:6d:df:8e: d7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:CE:F3:D2:B0:8D:A1:88:D6:95:6D:E2:58:7A:8A:E7:EF:13:D9:A5 X509v3 Authority Key Identifier: keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:b4:06:ed:5a:74:6e:f7:a3:8a:a6:3c:56:09:15:40:a0:f2: 1e:d1:d0:1f:bd:f3:cc:80:87:df:6a:aa:0d:4a:73:9c:c5:81: 03:b5:4b:0e:de:40:c8:f5:d5:25:67:32:fb:87:82:77:63:a8: 33:77:1f:a8:10:43:2d:a3:85:19:89:ed:54:f9:5a:0c:f6:3f: 53:ac:94:e5:a2:84:70:0a:9f:c2:24:50:6b:ac:15:f1:85:7d: 21:ae:5d:a0:be:13:e2:48:35:ad:c1:19:b3:fb:78:bc:de:d0: 10:20:d9:a4:dd:05:d6:6c:f6:15:28:c7:59:76:a3:b0:fd:17: 40:6f:a4:52:2f:a6:2c:cc:4a:80:ad:32:07:69:37:7b:29:2c: 4a:c2:7e:54:e4:c1:ff:11:aa:a0:ca:21:df:0c:10:53:47:47: 5d:62:5c:ee:2b:52:1a:16:27:d7:eb:d0:93:a7:48:15:6f:1f: d5:77:3a:d3:f5:07:d3:bb:4f:c5:18:f9:eb:a2:d4:e0:00:69: 8c:39:1e:8d:07:52:49:91:43:26:2b:b1:71:3c:d5:56:7f:8b: 8b:db:2a:99:1c:37:e0:b7:02:9f:f6:26:02:8c:77:42:8a:a0: b3:88:35:d8:43:2b:83:8a:f0:a6:4e:1e:68:4c:72:bc:55:bf: d6:40:bf:e9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdykKU6ajvpiek6LWUxineyRiSA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3 MDgzZWQ0ZDAeFw0yNTEwMTkwNTQ2MzVaFw0yNTEwMjAwNzQ1MzVaMDMxMTAvBgNV BAMTKDhEQ0VGM0QyQjA4REExODhENjk1NkRFMjU4N0E4QUU3RUYxM0Q5QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiCEjwcGw+KnFzUHGO79J5SB3F AbK9pNc9+OrjEeEi4W/iwFRu04j7pgk0eoiNJWkRAlmjGI/PgJ9V0K0KiNG1Vaca ajgxEgmvCZAZ34ZlBtdetdSWPxMO45285SqxTTqfzjrUjDtFoxxvKrk5of1zu/+b 9GNi5tfeuIB0w5tKLiXEGBL7wgiNXZjw2q7cGqcQZEKcwiCKf5r03YGWS8XwW2Ck rxC3oy5RuRCMxyunSTTCKzZ2kAPMMZLsq0sWvq0YK9CCt2fZENHJyAAdx0Zs6jBi JerUqBURIJYhW2U1ePj8gBSB5Z/68s9CPjfVSfVUwSd6jdYOIKSfX23fjtd9AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUjc7z0rCNoYjWlW3iWHqK5+8T2aUwHwYDVR0j BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3 ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD RDdVMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjMxNzY4ZC00 MmIxLTRlOTItYjgzZi1iZWY3ZWUwMTc4MTMvMC85RjBEMjRDODU1RUVFMDBGRTRB QkYzOTAzQzZFOEZDQzcwODNFRDRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM7QG7Vp0bvejiqY8VgkV QKDyHtHQH73zzICH32qqDUpznMWBA7VLDt5AyPXVJWcy+4eCd2OoM3cfqBBDLaOF GYntVPlaDPY/U6yU5aKEcAqfwiRQa6wV8YV9Ia5doL4T4kg1rcEZs/t4vN7QECDZ pN0F1mz2FSjHWXajsP0XQG+kUi+mLMxKgK0yB2k3eyksSsJ+VOTB/xGqoMoh3wwQ U0dHXWJc7itSGhYn1+vQk6dIFW8f1Xc60/UH07tPxRj566LU4ABpjDkejQdSSZFD JiuxcTzVVn+Li9sqmRw34LcCn/YmAox3Qoqgs4g12EMrg4rwpk4eaExyvFW/1kC/ 6Q== -----END CERTIFICATE-----Generated at Sun Oct 19 13:07:32 2025 by rpki-client