$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft File: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft (raw, json) Hash identifier: 3sgDMvCqKcxCPPENzL5HshB9yA+ocEYx2ais3yVAp/E= Subject key identifier: BB:CC:87:E5:01:11:E2:DB:46:3B:24:25:5C:40:43:A5:3A:65:02:67 Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 504F1EB4A3D5E9A5DA0D3C6971501ACCF08A4B3A Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft Manifest number: 03A2 Signing time: Sat 03 Oct 2026 13:58:36 +0000 Manifest this update: Sat 03 Oct 2026 13:53:36 +0000 Manifest next update: Mon 05 Oct 2026 04:05:36 +0000 Files and hashes: 1: 326130623a346530373a363030303a3a2f34312d3431203d3e20323134373031.roa (hash: vN6rKIfkljSAHrRu8/1nJyMDGglyFOpzorhaf/f1lec=) 2: 326130623a346530373a363031313a3a2f34382d3438203d3e20323134373031.roa (hash: V0fyeoZDncMW2eQzGPlyWD7Ns6F5V5KNaswuepRtGFo=) 3: 326130623a346530373a363031323a3a2f34382d3438203d3e20323134373031.roa (hash: qYmLIOuq4MSZIAPCZzhamdrYsk7jK51Ss8GhdRr+NDQ=) 4: 326130623a346530373a363066663a3a2f34382d3438203d3e20323134373031.roa (hash: XOFCxuQN+vhzQVb5Y0uC3xuX3xbxagWcYKQkNlr04J8=) 5: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl (hash: 1uddDkOfyKzw5WPDPeGhJ2BHNOpECwI/KXEFlSDKwco=) 6: 326130623a346530373a363066653a3a2f34382d3438203d3e20323134373031.roa (hash: ZjAy3ueqwfxe+TIw9tRv0Ih89d9rnBxrCaEKYAUyhLY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Oct 2026 07:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:4f:1e:b4:a3:d5:e9:a5:da:0d:3c:69:71:50:1a:cc:f0:8a:4b:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: Oct 3 13:53:36 2026 GMT Not After : Oct 5 04:05:36 2026 GMT Subject: CN=BBCC87E50111E2DB463B24255C4043A53A650267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:29:fd:57:24:c9:ad:ca:9d:d6:2a:e6:8d:e3: 58:1f:9e:9d:a1:1c:fe:07:6e:5c:57:f0:10:24:c9: 40:8f:82:f8:d2:73:0f:b2:81:5d:f1:e9:36:f9:36: 0a:54:d9:0e:02:83:0c:bb:9e:58:17:a4:0d:60:cd: 0b:1c:1c:b1:2a:34:46:93:72:ef:45:25:85:1b:c7: 26:70:02:06:51:1a:bb:ac:3f:50:c7:bb:d0:ae:c1: 21:9c:f1:82:39:e8:24:3f:60:81:db:c6:21:db:e1: bf:6c:63:d2:7e:9c:e8:87:c3:f0:ab:1a:14:2c:61: 0c:df:37:9c:bd:95:d9:f7:4b:ed:f3:17:01:a8:bf: ae:2c:ad:57:42:4a:15:a4:e2:ca:21:a5:a7:a7:17: b6:68:dd:20:aa:c9:8e:06:aa:c7:7d:93:76:4d:90: d7:00:4a:ba:e5:a1:16:58:3f:a6:78:f0:5c:0a:d0: 15:7a:4d:47:ce:3d:0f:82:c4:c5:e1:91:45:d5:15: 68:ea:66:9e:ef:36:89:82:d2:85:ac:56:28:f0:9a: 93:36:aa:67:9b:dc:32:c5:cd:3b:d9:d5:16:be:63: 56:73:ea:12:1f:d9:53:96:ee:6b:8a:08:9e:38:d9: f0:65:2d:eb:e8:be:2b:12:8d:22:52:51:bf:e7:fb: f9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CC:87:E5:01:11:E2:DB:46:3B:24:25:5C:40:43:A5:3A:65:02:67 X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:65:14:53:a4:15:55:11:01:b5:8d:15:92:3c:d9:6f:d7:17: 73:a5:d1:35:8d:21:e6:fd:f3:87:d4:85:bf:46:6d:8f:56:a0: 4a:82:d5:9f:93:a5:d4:a7:52:63:92:8f:f3:c8:64:d4:28:df: cd:0e:f6:62:65:54:84:33:ca:5c:89:88:f5:86:38:92:97:da: f3:0c:00:e3:08:ed:04:96:8d:29:b7:a5:32:a9:6c:67:a3:c4: b7:8e:38:1d:e9:8b:04:e7:c5:1a:c1:fb:31:fa:31:8d:e7:99: 64:6e:da:7a:a2:e1:ba:07:ef:4f:5e:1b:fe:52:e2:17:e3:06: e9:ef:8c:80:41:e5:a7:a4:9b:9e:9e:05:61:29:88:1f:c4:a5: c2:57:9f:f8:15:42:b6:14:24:cd:7b:34:1b:b3:2f:ee:06:00: ec:a9:e8:d0:68:25:fe:44:a8:20:8b:e6:64:4b:a4:87:9f:08: 6e:6c:da:c1:de:5d:ff:d0:cb:5b:c4:35:c7:7d:a9:e2:32:11: 73:10:ee:04:eb:42:1b:d7:7a:1c:8d:54:02:e0:48:f4:1c:a1: 99:02:ed:9c:5c:a7:4d:ba:5b:aa:59:09:fc:a5:98:52:f3:96: d0:bd:67:51:c5:83:d2:de:71:47:12:f2:14:ca:09:73:11:90: 13:1b:86:20 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUUE8etKPV6aXaDTxpcVAazPCKSzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNjEwMDMxMzUzMzZaFw0yNjEwMDUwNDA1MzZaMDMxMTAvBgNV BAMTKEJCQ0M4N0U1MDExMUUyREI0NjNCMjQyNTVDNDA0M0E1M0E2NTAyNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgKf1XJMmtyp3WKuaN41gfnp2h HP4HblxX8BAkyUCPgvjScw+ygV3x6Tb5NgpU2Q4Cgwy7nlgXpA1gzQscHLEqNEaT cu9FJYUbxyZwAgZRGrusP1DHu9CuwSGc8YI56CQ/YIHbxiHb4b9sY9J+nOiHw/Cr GhQsYQzfN5y9ldn3S+3zFwGov64srVdCShWk4sohpaenF7Zo3SCqyY4Gqsd9k3ZN kNcASrrloRZYP6Z48FwK0BV6TUfOPQ+CxMXhkUXVFWjqZp7vNomC0oWsVijwmpM2 qmeb3DLFzTvZ1Ra+Y1Zz6hIf2VOW7muKCJ442fBlLevovisSjSJSUb/n+/lDAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUu8yH5QER4ttGOyQlXEBDpTplAmcwHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMy9EREMyNUFEMkYxQTQ4OTI0Nzcx M0VFMzlCMUMwM0VBMkZEREE0MTE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmWUUU6QVVREBtY0VkjzZ b9cXc6XRNY0h5v3zh9SFv0Ztj1agSoLVn5Ol1KdSY5KP88hk1CjfzQ72YmVUhDPK XImI9YY4kpfa8wwA4wjtBJaNKbelMqlsZ6PEt444HemLBOfFGsH7MfoxjeeZZG7a eqLhugfvT14b/lLiF+MG6e+MgEHlp6Sbnp4FYSmIH8Slwlef+BVCthQkzXs0G7Mv 7gYA7Kno0Ggl/kSoIIvmZEukh58Ibmzawd5d/9DLW8Q1x32p4jIRcxDuBOtCG9d6 HI1UAuBI9ByhmQLtnFynTbpbqlkJ/KWYUvOW0L1nUcWD0t5xRxLyFMoJcxGQExuG IA== -----END CERTIFICATE-----Generated at Sun Oct 4 00:23:07 2026 by rpki-client