$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft File: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft (raw, json) Hash identifier: l/ytvcIIi5WQJOhd8zoXJYBhPFpZeoL0io/Y+0CVaUo= Subject key identifier: F1:80:61:9E:63:96:A8:8A:C1:53:6F:E6:A3:57:0D:77:CA:85:EB:DF Authority key identifier: 40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 Certificate issuer: /CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Certificate serial: 17DA2D4D11CEE9F70A5ED148CF919830C560C94C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft Manifest number: 01B5 Signing time: Sun 19 Oct 2025 08:41:25 +0000 Manifest this update: Sun 19 Oct 2025 08:36:25 +0000 Manifest next update: Mon 20 Oct 2025 11:18:25 +0000 Files and hashes: 1: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl (hash: dCB2Z57sM9G2aAvX8hEfmRwS6+R4dn4he84t3fLvTUg=) 2: 326131343a373538313a396632303a3a2f34342d3434203d3e20323135323838.roa (hash: liZtkDCXL4DmjNQ78r1O/4djDEbWR26m7nKfEkWRmh4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:da:2d:4d:11:ce:e9:f7:0a:5e:d1:48:cf:91:98:30:c5:60:c9:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Validity Not Before: Oct 19 08:36:25 2025 GMT Not After : Oct 20 11:18:25 2025 GMT Subject: CN=F180619E6396A88AC1536FE6A3570D77CA85EBDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:01:2d:c8:a4:9b:3e:86:d4:80:ec:3a:aa:c8: 82:26:12:2d:2b:42:a5:14:49:6c:5a:41:19:2f:de: cd:85:0f:57:9e:e4:0b:20:05:b8:8f:f9:86:d0:02: 1f:fa:68:b0:93:26:06:a4:2f:0d:9a:a4:b9:05:13: 86:fd:a3:8e:05:f7:af:02:a6:82:05:63:0f:3d:67: 25:e6:8e:b0:1d:b1:a5:40:de:92:0b:85:b4:22:c9: 76:ca:43:94:fe:0a:47:64:dc:3a:1a:42:6a:de:71: 63:ad:7b:ea:f4:ed:06:2a:92:27:a2:13:43:ad:fe: 81:5d:94:26:63:4c:ad:51:3c:20:1f:35:fd:b9:c2: 9a:3e:6e:24:cd:8a:b3:bf:c7:97:d8:67:69:81:43: 5d:d3:2e:72:96:3f:8e:34:1c:78:45:22:1e:1b:ed: 60:6f:ba:fb:10:b2:f5:53:31:d7:db:96:39:57:44: 2a:c6:a8:b4:8a:1d:f7:39:2c:58:74:ed:ea:d1:b5: 13:16:bf:49:10:39:95:b2:f8:f1:14:ed:6a:5d:2d: bf:9f:69:c5:4c:60:f7:d5:57:75:2b:31:51:a8:a5: 59:6a:69:2c:c4:c5:dd:09:8f:34:d4:86:00:13:00: ba:9a:d9:82:69:2a:ca:ba:1d:70:85:9b:6f:61:c8: 56:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:80:61:9E:63:96:A8:8A:C1:53:6F:E6:A3:57:0D:77:CA:85:EB:DF X509v3 Authority Key Identifier: keyid:40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:0e:90:a7:9c:e3:34:71:20:fd:3d:62:39:d9:71:40:26:b0: 08:57:7e:15:9b:01:98:8a:44:1c:51:25:55:9a:96:c9:43:ab: d1:c6:eb:dd:ea:bd:76:ce:d2:07:54:67:e9:40:75:79:f6:0d: 14:61:57:a6:a2:73:28:6c:2f:35:9b:c7:ad:3f:e9:ea:d4:22: bd:27:aa:d3:28:95:d5:8d:7e:d2:be:13:fe:72:0e:47:0e:6f: 99:9b:3f:04:d8:92:ff:bd:0c:1b:7b:83:fd:80:e1:a6:19:69: fb:c1:67:4f:4b:20:eb:44:4d:02:54:b5:3a:e8:75:68:28:11: 9d:1b:f5:e2:b3:9b:41:f8:be:6d:92:44:f7:91:20:74:af:82: c0:17:ad:08:a5:b2:79:26:52:ba:1b:cd:7e:cf:3e:62:a5:a0: dc:cb:7d:9b:9f:16:2e:07:95:ed:85:da:e9:f1:92:00:af:69: 9e:dd:01:e8:cf:40:c1:49:9d:38:46:0a:12:6a:20:7a:cf:1a: 02:b6:9c:70:40:a8:2c:63:5b:5c:f2:6c:1c:4c:5e:c1:4d:ba: 8b:1b:3d:db:79:ac:79:c0:f3:1a:2b:23:0b:76:57:f7:0c:27: 90:02:d2:06:ac:c3:9f:1b:5c:17:39:ce:39:1c:de:04:d5:8c: 8e:3a:a0:58 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUF9otTRHO6fcKXtFIz5GYMMVgyUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBG RTIyMkJENjAeFw0yNTEwMTkwODM2MjVaFw0yNTEwMjAxMTE4MjVaMDMxMTAvBgNV BAMTKEYxODA2MTlFNjM5NkE4OEFDMTUzNkZFNkEzNTcwRDc3Q0E4NUVCREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZAS3IpJs+htSA7DqqyIImEi0r QqUUSWxaQRkv3s2FD1ee5AsgBbiP+YbQAh/6aLCTJgakLw2apLkFE4b9o44F968C poIFYw89ZyXmjrAdsaVA3pILhbQiyXbKQ5T+Ckdk3DoaQmrecWOte+r07QYqkiei E0Ot/oFdlCZjTK1RPCAfNf25wpo+biTNirO/x5fYZ2mBQ13TLnKWP440HHhFIh4b 7WBvuvsQsvVTMdfbljlXRCrGqLSKHfc5LFh07erRtRMWv0kQOZWy+PEU7WpdLb+f acVMYPfVV3UrMVGopVlqaSzExd0JjzTUhgATALqa2YJpKsq6HXCFm29hyFbNAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU8YBhnmOWqIrBU2/mo1cNd8qF698wHwYDVR0j BBgwFoAUQFChe64cXzdj1Fo43P6s4P4iK9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzg2YjY1YjEtNDVlOS00ZmIyLWFkYzUtODdiYTcxMWUy MWI3LzEvNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBGRTIyMkJENi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC80MDUwQTE3QkFFMUM1RjM3NjNENDVBMzhE Q0ZFQUNFMEZFMjIyQkQ2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M4NmI2NWIxLTQ1ZTktNGZiMi1hZGM1LTg3YmE3MTFlMjFiNy8xLzQwNTBBMTdC QUUxQzVGMzc2M0Q0NUEzOERDRkVBQ0UwRkUyMjJCRDYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCMDpCn nOM0cSD9PWI52XFAJrAIV34VmwGYikQcUSVVmpbJQ6vRxuvd6r12ztIHVGfpQHV5 9g0UYVemonMobC81m8etP+nq1CK9J6rTKJXVjX7SvhP+cg5HDm+Zmz8E2JL/vQwb e4P9gOGmGWn7wWdPSyDrRE0CVLU66HVoKBGdG/Xis5tB+L5tkkT3kSB0r4LAF60I pbJ5JlK6G81+zz5ipaDcy32bnxYuB5Xthdrp8ZIAr2me3QHoz0DBSZ04RgoSaiB6 zxoCtpxwQKgsY1tc8mwcTF7BTbqLGz3beax5wPMaKyMLdlf3DCeQAtIGrMOfG1wX Oc45HN4E1YyOOqBY -----END CERTIFICATE-----Generated at Sun Oct 19 23:35:05 2025 by rpki-client