$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft File: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft (raw, json) Hash identifier: L7RUQjvdqDR89AyQJEylKgUu9hlLpzqNnrrQkDjbRNI= Subject key identifier: 43:20:F4:DF:E0:54:7A:CD:A1:FB:A6:4B:0E:AB:BE:DF:50:4C:8F:FA Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB Certificate issuer: /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Certificate serial: 7C7D0D25DCD9CCF5BB399852BB902C6AED555B68 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft Manifest number: 0298 Signing time: Sun 19 Oct 2025 12:31:41 +0000 Manifest this update: Sun 19 Oct 2025 12:26:41 +0000 Manifest next update: Mon 20 Oct 2025 13:00:41 +0000 Files and hashes: 1: 326131343a373538313a643130303a3a2f34302d3438203d3e203533363637.roa (hash: e+p8+Sw9X8S3Ty3gF9pg+LdvDbV5qMXAYBBthQD4LPE=) 2: 326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa (hash: BL4+PYIdcLs3fiOkkamkg94lgyO9kcRHp6ACoQUQ5y8=) 3: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl (hash: 3XwlZEDtrLIZMUDFigTzyzPJvoW09r9bBMcIn9gXnIM=) 4: 326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa (hash: R4oy1L8+rEt1QdmoGVV7PiYt423B/xK5i6kPhc7W9aI=) 5: 326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa (hash: OTYsTfrglFs/JKFj7RJtAXdrMe1OUcjbc3WSXqeD0dk=) 6: 326131343a373538313a643130303a3a2f34302d3430203d3e203533363637.roa (hash: M0+yHEN3VX8K+aVDmpusml/7Hx8dbBnadNDMaFbGOzQ=) 7: 326131343a373538313a643330303a3a2f34302d3430203d3e2037353435.roa (hash: 9phDdz/jhh9vxdEc5WXHXIl+cdnJzAyh/6SdvyVejiI=) 8: 326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa (hash: DvQHKT6M+fkiG6o9KW4wBm0yNbqCXWjg78L/cu4BiJ0=) 9: 326131343a373538313a643230303a3a2f34302d3430203d3e203533363637.roa (hash: KPVNDBydB4lEOCddQAWiNda/rm6IVb4G2i+sUeOhrYg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 13:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:7d:0d:25:dc:d9:cc:f5:bb:39:98:52:bb:90:2c:6a:ed:55:5b:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Validity Not Before: Oct 19 12:26:41 2025 GMT Not After : Oct 20 13:00:41 2025 GMT Subject: CN=4320F4DFE0547ACDA1FBA64B0EABBEDF504C8FFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bf:bf:9e:99:f4:9c:27:58:fb:d7:ae:c8:75: e6:91:b2:51:6c:f9:b8:15:ec:0f:08:f4:85:be:5e: 15:dc:a4:ba:6e:57:3e:5c:4c:ac:9b:56:56:1a:d6: b5:7b:c4:1d:36:3b:59:0d:a0:6d:40:9b:ef:6f:61: ef:d0:71:14:d5:10:22:fb:34:a2:c9:a9:b1:4f:6f: a6:92:0f:4b:6d:c4:50:b9:c5:2c:b8:44:0c:5f:73: 89:dc:d2:12:61:f6:b1:54:30:aa:f7:00:a2:98:d5: 03:56:28:00:2e:b8:21:39:c4:fa:ea:24:c0:03:a3: 71:52:96:b3:06:0f:43:40:24:6f:e8:f8:35:1c:f8: 41:51:7c:25:59:53:d0:36:2c:5b:39:25:73:91:79: 96:73:47:e1:b7:8d:ee:83:13:a1:4c:62:b7:55:51: 06:43:03:15:e2:29:a2:b9:48:52:53:b7:d6:9d:87: 6f:90:c9:20:40:fc:2a:3e:d0:8a:3f:52:17:9e:d7: cf:29:41:b4:45:c1:f7:a4:9f:b3:b2:a2:c5:f0:49: 9a:0b:ff:90:f6:5f:70:55:bd:3a:c3:76:f4:66:89: 49:86:24:54:12:86:71:87:4e:3a:de:f1:bf:fa:4d: eb:33:a9:c4:29:b7:56:16:e7:83:94:ea:a9:7e:bf: a1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:20:F4:DF:E0:54:7A:CD:A1:FB:A6:4B:0E:AB:BE:DF:50:4C:8F:FA X509v3 Authority Key Identifier: keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:8a:5f:fa:db:9f:8b:d9:71:9f:bc:6c:a7:92:02:6e:2c:cc: c6:ab:42:d1:1f:1f:44:bb:a6:18:a4:3d:d4:bc:8d:ff:35:d8: ea:ee:64:9c:e9:8f:37:65:95:d6:0b:da:54:9d:f6:58:48:0d: ce:4b:fe:0f:a7:28:e8:69:09:87:ed:38:22:05:42:f6:6d:b2: 18:07:f3:49:af:e7:cd:29:63:83:d3:57:42:d0:0f:44:9d:02: 0b:a7:2f:b3:3b:b2:03:1c:71:e5:ac:28:ad:1d:21:f6:ad:9e: 27:29:68:2c:e9:0c:b5:fa:a9:7c:1b:83:70:30:f0:a6:ff:90: 48:60:33:07:d9:e8:00:b6:1c:67:7f:06:b4:69:20:45:5d:c0: 34:51:0d:0d:92:f5:a0:77:62:21:96:b3:4f:f0:e3:e8:1a:a3: 14:e6:40:63:14:06:10:a6:2c:e9:c9:6a:c8:fd:91:85:ba:f5: 7f:4f:fc:e6:5b:a3:96:f3:96:ef:af:6b:c7:41:0f:37:23:41: 7d:af:e3:29:ab:2e:cf:10:42:8a:ba:8a:6d:39:c6:0b:7d:b8: 50:1d:6a:00:2b:0c:35:2b:48:8d:47:18:16:67:2a:dd:9a:31: f1:38:96:d0:ca:12:c1:60:fc:1d:c5:f9:dd:75:1a:95:ee:3d: 70:3b:e2:3d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfH0NJdzZzPW7OZhSu5Asau1VW2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFC RUM4OTBCQjAeFw0yNTEwMTkxMjI2NDFaFw0yNTEwMjAxMzAwNDFaMDMxMTAvBgNV BAMTKDQzMjBGNERGRTA1NDdBQ0RBMUZCQTY0QjBFQUJCRURGNTA0QzhGRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqv7+emfScJ1j7167IdeaRslFs +bgV7A8I9IW+XhXcpLpuVz5cTKybVlYa1rV7xB02O1kNoG1Am+9vYe/QcRTVECL7 NKLJqbFPb6aSD0ttxFC5xSy4RAxfc4nc0hJh9rFUMKr3AKKY1QNWKAAuuCE5xPrq JMADo3FSlrMGD0NAJG/o+DUc+EFRfCVZU9A2LFs5JXOReZZzR+G3je6DE6FMYrdV UQZDAxXiKaK5SFJTt9adh2+QySBA/Co+0Io/Uhee188pQbRFwfekn7OyosXwSZoL /5D2X3BVvTrDdvRmiUmGJFQShnGHTjre8b/6TeszqcQpt1YW54OU6ql+v6FzAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUQyD03+BUes2h+6ZLDqu+31BMj/owHwYDVR0j BBgwFoAUH0yCgnaplmhlqytZUz0csb7IkLswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjU5YzEwNmMtNTNiNC00ZTkyLTlmYmEtZDYwODI3YjVi ZGI4LzAvMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFCRUM4OTBCQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xRjRDODI4Mjc2QTk5NjY4NjVBQjJCNTk1 MzNEMUNCMUJFQzg5MEJCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I1OWMxMDZjLTUzYjQtNGU5Mi05ZmJhLWQ2MDgyN2I1YmRiOC8wLzFGNEM4Mjgy NzZBOTk2Njg2NUFCMkI1OTUzM0QxQ0IxQkVDODkwQkIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCcil/6 25+L2XGfvGynkgJuLMzGq0LRHx9Eu6YYpD3UvI3/Ndjq7mSc6Y83ZZXWC9pUnfZY SA3OS/4PpyjoaQmH7TgiBUL2bbIYB/NJr+fNKWOD01dC0A9EnQILpy+zO7IDHHHl rCitHSH2rZ4nKWgs6Qy1+ql8G4NwMPCm/5BIYDMH2egAthxnfwa0aSBFXcA0UQ0N kvWgd2IhlrNP8OPoGqMU5kBjFAYQpizpyWrI/ZGFuvV/T/zmW6OW85bvr2vHQQ83 I0F9r+Mpqy7PEEKKuoptOcYLfbhQHWoAKww1K0iNRxgWZyrdmjHxOJbQyhLBYPwd xfnddRqV7j1wO+I9 -----END CERTIFICATE-----Generated at Sun Oct 19 23:45:26 2025 by rpki-client