$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft File: 2E2674263AECD572673F87614919CA492C79FAEA.mft (raw, json) Hash identifier: yeKIy+HWFDmn4aCYm3bUoHvtjpkJYZDM+2a5GrT8aKE= Subject key identifier: 9A:C1:B9:61:2F:E4:D7:3E:7F:29:E1:F0:D9:C8:C5:28:0A:C2:6A:C9 Authority key identifier: 2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA Certificate issuer: /CN=2e2674263aecd572673f87614919ca492c79faea Certificate serial: 3A09FCADC46F35CD158E0874D27B46B901A0128F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft Manifest number: 0167 Signing time: Mon 20 Oct 2025 05:16:42 +0000 Manifest this update: Mon 20 Oct 2025 05:11:42 +0000 Manifest next update: Tue 21 Oct 2025 05:40:42 +0000 Files and hashes: 1: 34352e36362e36332e302f32342d3234203d3e20323134343332.roa (hash: bZNP+wA40wAyACtbN5qUmpIVm/KoebsR0HiX5BeNfUM=) 2: 34352e36362e36312e302f32342d3234203d3e20323733323432.roa (hash: tU7tyCca1tIOx1hnSKjuKCDiTN546CQQQvHB6q/i7qk=) 3: 34352e36362e36322e302f32342d3234203d3e20323131323237.roa (hash: imRIoujslgfIw1o5CZvn1r7w9Uct08AIqiMVjfiL8o4=) 4: 2E2674263AECD572673F87614919CA492C79FAEA.crl (hash: 3ium935FBlw9HOT3iN7rm5k+szTiQP4Jx3yKL4sEEVk=) 5: 34352e36362e36302e302f32342d3234203d3e203534323532.roa (hash: 07DX+W8TeroyGa5hcwYk2V3rpVrx11S+EMaM/klvGiM=) 6: 34352e36362e36302e302f32342d3234203d3e20333937363330.roa (hash: m0lx7gp/PL+dNLZxtVb3q5bMr/J2JBCQr1yWWiLZaNg=) 7: 34352e36362e36302e302f32342d3234203d3e203634323637.roa (hash: ZF32PAG53xWynbk01utLLBmDRxOU851zkR0rreW86uY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:09:fc:ad:c4:6f:35:cd:15:8e:08:74:d2:7b:46:b9:01:a0:12:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e2674263aecd572673f87614919ca492c79faea Validity Not Before: Oct 20 05:11:42 2025 GMT Not After : Oct 21 05:40:42 2025 GMT Subject: CN=9AC1B9612FE4D73E7F29E1F0D9C8C5280AC26AC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:64:af:1e:7c:90:5e:89:b7:57:38:db:2d:99: 6c:bb:d0:86:24:27:b3:2b:d8:85:77:52:b7:31:33: 00:6a:49:11:ce:f3:a3:48:3d:c9:08:c0:2c:d7:1c: 0a:ff:fc:67:75:a4:3d:20:eb:df:01:46:27:12:86: 5f:ef:ca:bd:37:14:b0:fd:9d:94:bd:94:38:d3:4b: 24:e1:2c:ad:85:5b:24:82:61:e5:af:1b:3e:ec:6a: 11:f7:3b:82:65:b7:30:5c:47:7c:a2:89:b2:bb:58: 6f:7e:e5:03:43:65:15:52:71:ea:5a:24:d6:f0:2e: 0b:62:98:6b:fb:71:16:83:9c:0e:61:3c:f8:05:39: 55:6a:84:3d:af:f9:95:5c:b7:7f:ec:73:94:17:b9: 2a:08:98:9a:5f:6c:6d:e6:71:4e:09:25:49:00:c7: 6e:fc:9d:75:f6:96:8d:27:13:52:d4:a4:35:1c:23: 30:c9:22:1a:2d:c9:83:ef:94:2c:1a:85:47:ae:c3: c6:33:6d:f4:37:ce:95:59:b3:b6:d3:d6:09:5a:1d: eb:98:b1:d9:7b:12:33:47:44:d8:7d:2d:cc:b0:58: 29:38:92:44:7b:bd:df:3e:4f:2a:1b:00:1e:12:53: dc:cb:41:98:30:c0:cb:59:3c:aa:13:6a:b9:42:3f: cf:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C1:B9:61:2F:E4:D7:3E:7F:29:E1:F0:D9:C8:C5:28:0A:C2:6A:C9 X509v3 Authority Key Identifier: keyid:2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:53:f2:5c:12:5d:dd:36:6e:0e:93:1a:4f:98:e3:61:a0:60: 16:34:70:70:09:39:09:64:f4:90:71:0b:b7:2f:1a:72:a5:a3: f4:be:d6:47:69:ea:bf:cc:0b:ed:07:6d:40:54:ae:79:e4:a0: bb:a0:6b:83:9c:77:1f:33:6b:fc:61:8f:35:28:34:1b:96:5a: b2:8f:de:a6:94:0d:56:27:3a:5b:eb:08:9d:cb:bf:d9:28:37: 02:c7:51:ab:98:e2:ba:d6:59:aa:5f:bc:7e:3b:1f:95:bb:bd: ef:3e:a1:a8:51:a4:3f:6e:92:ba:11:8f:f3:5a:b4:04:52:19: e6:c3:65:21:08:7f:b4:6d:00:13:be:06:f0:b5:eb:62:65:3b: 11:9a:e4:8e:41:64:e3:d2:a2:e0:0d:40:bb:28:0b:a7:9c:e2: d1:1b:67:ca:df:2c:08:35:4d:e6:da:1f:a1:6a:2b:f2:db:8c: 5b:a6:cc:20:67:5c:b9:6f:79:bb:7a:bd:72:07:56:08:54:4b: 92:7f:3d:fe:36:f7:c3:20:8f:cd:fd:38:50:76:b7:01:cc:a0: 72:a5:32:44:3a:ab:2a:f6:6c:da:d6:c1:02:89:f7:d3:15:a1: be:5a:51:27:a1:ab:90:21:16:97:c6:50:6a:b5:2e:77:4f:d4: f0:65:fc:60 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOgn8rcRvNc0Vjgh00ntGuQGgEo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMmUyNjc0MjYzYWVjZDU3MjY3M2Y4NzYxNDkxOWNhNDky Yzc5ZmFlYTAeFw0yNTEwMjAwNTExNDJaFw0yNTEwMjEwNTQwNDJaMDMxMTAvBgNV BAMTKDlBQzFCOTYxMkZFNEQ3M0U3RjI5RTFGMEQ5QzhDNTI4MEFDMjZBQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgZK8efJBeibdXONstmWy70IYk J7Mr2IV3UrcxMwBqSRHO86NIPckIwCzXHAr//Gd1pD0g698BRicShl/vyr03FLD9 nZS9lDjTSyThLK2FWySCYeWvGz7sahH3O4JltzBcR3yiibK7WG9+5QNDZRVScepa JNbwLgtimGv7cRaDnA5hPPgFOVVqhD2v+ZVct3/sc5QXuSoImJpfbG3mcU4JJUkA x278nXX2lo0nE1LUpDUcIzDJIhotyYPvlCwahUeuw8YzbfQ3zpVZs7bT1glaHeuY sdl7EjNHRNh9LcywWCk4kkR7vd8+TyobAB4SU9zLQZgwwMtZPKoTarlCP8/JAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUmsG5YS/k1z5/KeHw2cjFKArCaskwHwYDVR0j BBgwFoAULiZ0Jjrs1XJnP4dhSRnKSSx5+uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmQ3YzIzMWUtYTMzYy00NTU1LWI0MmUtZDAyMDkzODQ5 Mjk5LzAvMkUyNjc0MjYzQUVDRDU3MjY3M0Y4NzYxNDkxOUNBNDkyQzc5RkFFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0xpWjBKanJzMVhKblA0ZGhTUm5LU1N4 NS11by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZDdjMjMxZS1h MzNjLTQ1NTUtYjQyZS1kMDIwOTM4NDkyOTkvMC8yRTI2NzQyNjNBRUNENTcyNjcz Rjg3NjE0OTE5Q0E0OTJDNzlGQUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApVPyXBJd3TZuDpMaT5jj YaBgFjRwcAk5CWT0kHELty8acqWj9L7WR2nqv8wL7QdtQFSueeSgu6Brg5x3HzNr /GGPNSg0G5Zaso/eppQNVic6W+sIncu/2Sg3AsdRq5jiutZZql+8fjsflbu97z6h qFGkP26SuhGP81q0BFIZ5sNlIQh/tG0AE74G8LXrYmU7EZrkjkFk49Ki4A1AuygL p5zi0Rtnyt8sCDVN5tofoWor8tuMW6bMIGdcuW95u3q9cgdWCFRLkn89/jb3wyCP zf04UHa3AcygcqUyRDqrKvZs2tbBAon30xWhvlpRJ6GrkCEWl8ZQarUud0/U8GX8 YA== -----END CERTIFICATE-----Generated at Mon Oct 20 08:48:06 2025 by rpki-client