$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft File: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft (raw, json) Hash identifier: 7sEl+fk5d0RESIg4dOGaKDvIH2FcoTrAvpKJF4JbasI= Subject key identifier: 2A:7A:45:44:10:CD:67:90:20:61:AE:81:A7:39:D2:F2:C2:C0:67:C4 Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 2F6F45E2F3F6127E497A74BB0E9AA1DCB751003E Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft Manifest number: 014A Signing time: Mon 20 Oct 2025 12:48:51 +0000 Manifest this update: Mon 20 Oct 2025 12:43:51 +0000 Manifest next update: Wed 22 Oct 2025 04:24:51 +0000 Files and hashes: 1: 326130623a346530373a363030303a3a2f34302d3438203d3e20323134373031.roa (hash: mhaYla+UsHdOX7ijGa8kmFH/Ey3jwcszbuWBzNvxxRw=) 2: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl (hash: /91XSxMXNk78oTGA3rODBcJFqE/lmi9LOsNZHq68Hy0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 07:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:6f:45:e2:f3:f6:12:7e:49:7a:74:bb:0e:9a:a1:dc:b7:51:00:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: Oct 20 12:43:51 2025 GMT Not After : Oct 22 04:24:51 2025 GMT Subject: CN=2A7A454410CD67902061AE81A739D2F2C2C067C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:19:81:08:c8:f7:74:0a:a8:09:b0:b1:f9:46: 76:5b:ab:df:6e:da:5c:14:95:46:2b:fc:76:02:e0: 6f:c7:5d:59:30:8f:86:10:26:44:67:3c:77:e5:74: 69:62:1b:ea:71:c8:31:44:1c:bc:49:c6:1c:43:8e: f6:f6:e2:d4:41:b9:29:c2:dd:9a:33:bd:63:54:82: 43:3a:f9:9e:ab:ac:a8:a4:c7:7d:5f:23:b4:14:0d: 33:64:a3:f4:bd:2b:04:fa:09:ab:c1:65:8e:10:58: a8:af:59:ee:a7:37:61:36:63:2a:2d:09:75:b7:bb: 50:e2:a7:68:ff:a9:4e:a1:78:fb:f9:12:a0:af:39: 02:c7:c5:b2:67:bb:21:bb:65:4d:5a:85:ba:73:71: 03:de:f6:22:79:46:69:3f:08:3d:96:25:07:f3:5e: 9b:50:86:3c:0e:16:cd:45:f7:73:5d:77:83:1c:d5: c6:6a:38:69:4f:3e:71:d3:6f:4f:f3:31:9b:75:59: 83:88:3b:cc:aa:8e:5d:c5:cf:0e:a3:49:f0:89:ec: 76:8f:57:9b:f3:18:a5:80:d2:cc:a1:45:39:2d:e3: 3c:53:db:25:d6:76:c0:2d:91:71:49:57:be:d0:84: 0c:43:c3:5e:bf:9a:75:10:1a:d9:8b:a8:ee:37:dc: db:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:7A:45:44:10:CD:67:90:20:61:AE:81:A7:39:D2:F2:C2:C0:67:C4 X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:c5:06:09:87:5a:58:97:5e:59:fc:a9:17:be:41:86:54:90: 4d:4f:3e:78:bf:c9:82:a7:17:00:b9:11:4f:99:49:fa:56:7e: 4d:49:9c:7a:6b:ff:4b:0a:d5:c2:16:a1:3b:9a:8c:4f:30:98: 60:cf:50:2b:05:a5:46:8e:4d:f5:f0:75:3c:7a:3e:d2:3b:e1: 4e:50:41:47:7b:f6:47:d5:e2:3e:8a:ee:f9:3f:76:08:75:10: b3:07:9b:75:24:be:69:2c:74:fd:18:bd:17:51:aa:a9:07:ab: fb:4a:bb:64:9f:a1:c8:58:76:02:c7:62:af:75:10:56:ef:9d: 2f:52:5c:d0:93:1f:91:ad:95:e5:fe:50:d7:54:f2:4f:64:a8: 13:83:07:ea:c9:d0:06:27:e5:8c:0b:58:24:0b:1e:33:ab:4c: f8:e6:75:2c:04:bb:cc:73:f7:93:44:a2:cc:36:07:74:e7:d4: 84:d3:30:3d:75:6d:66:fe:b1:9a:37:70:24:20:7b:23:2a:57: f5:a6:28:40:4f:95:9b:b3:e7:75:7f:33:aa:01:05:5e:49:e1: c4:f7:04:63:44:bb:f4:c3:91:10:de:b3:ce:e6:6f:64:f6:f2: 5b:21:ab:0e:d7:03:74:9a:e9:3c:da:70:d6:b6:ef:4e:b3:e0: 8b:40:4b:b7 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUL29F4vP2En5JenS7Dpqh3LdRAD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNTEwMjAxMjQzNTFaFw0yNTEwMjIwNDI0NTFaMDMxMTAvBgNV BAMTKDJBN0E0NTQ0MTBDRDY3OTAyMDYxQUU4MUE3MzlEMkYyQzJDMDY3QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQGYEIyPd0CqgJsLH5RnZbq99u 2lwUlUYr/HYC4G/HXVkwj4YQJkRnPHfldGliG+pxyDFEHLxJxhxDjvb24tRBuSnC 3ZozvWNUgkM6+Z6rrKikx31fI7QUDTNko/S9KwT6CavBZY4QWKivWe6nN2E2Yyot CXW3u1Dip2j/qU6hePv5EqCvOQLHxbJnuyG7ZU1ahbpzcQPe9iJ5Rmk/CD2WJQfz XptQhjwOFs1F93Ndd4Mc1cZqOGlPPnHTb0/zMZt1WYOIO8yqjl3Fzw6jSfCJ7HaP V5vzGKWA0syhRTkt4zxT2yXWdsAtkXFJV77QhAxDw16/mnUQGtmLqO433Nu3AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUKnpFRBDNZ5AgYa6BpznS8sLAZ8QwHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMy9EREMyNUFEMkYxQTQ4OTI0Nzcx M0VFMzlCMUMwM0VBMkZEREE0MTE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApsUGCYdaWJdeWfypF75B hlSQTU8+eL/JgqcXALkRT5lJ+lZ+TUmcemv/SwrVwhahO5qMTzCYYM9QKwWlRo5N 9fB1PHo+0jvhTlBBR3v2R9XiPoru+T92CHUQswebdSS+aSx0/Ri9F1GqqQer+0q7 ZJ+hyFh2Asdir3UQVu+dL1Jc0JMfka2V5f5Q11TyT2SoE4MH6snQBifljAtYJAse M6tM+OZ1LAS7zHP3k0SizDYHdOfUhNMwPXVtZv6xmjdwJCB7IypX9aYoQE+Vm7Pn dX8zqgEFXknhxPcEY0S79MOREN6zzuZvZPbyWyGrDtcDdJrpPNpw1rbvTrPgi0BL tw== -----END CERTIFICATE-----Generated at Tue Oct 21 00:14:18 2025 by rpki-client