$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft File: 926CB33722A3493216283DC80CAE0EE9D58874F2.mft (raw, json) Hash identifier: piyj4dKpZMhAiJdueaqQ56Bsj8Ye53Psl9GcGVpVRKo= Subject key identifier: 9A:F2:5C:A6:E6:67:62:0F:D0:CD:28:4C:E6:5E:49:24:CA:CA:98:BD Authority key identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2 Certificate issuer: /CN=926cb33722a3493216283dc80cae0ee9d58874f2 Certificate serial: 47B9AD6555F0DBC7859E1C93D36BE9106289F1AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft Manifest number: 0568 Signing time: Sun 19 Oct 2025 10:39:55 +0000 Manifest this update: Sun 19 Oct 2025 10:34:55 +0000 Manifest next update: Mon 20 Oct 2025 13:09:55 +0000 Files and hashes: 1: 323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa (hash: m4JDjuZJDmmChmmlFAMJ8Bw8b2ZsdAh0iDbkWo79PPM=) 2: 323030313a3637633a313139303a626162653a3a2f36342d3634203d3e203537373832.roa (hash: Pxf4B7ZT6gV1TWVd3qoH34uVviW8HXPSyFTn+jTKS9w=) 3: 926CB33722A3493216283DC80CAE0EE9D58874F2.crl (hash: awSeuvRGWeVG35Ovqb1vCliKpEA4+AM0D6HEcltqnMI=) 4: FF0595CB477C33B6B94C7E477213C842A6067D6B.cer (hash: kkkt+CdVzC7OjY449gnOlMwgGCN8KNpK56RTONBzmFY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 13:09:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:b9:ad:65:55:f0:db:c7:85:9e:1c:93:d3:6b:e9:10:62:89:f1:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=926cb33722a3493216283dc80cae0ee9d58874f2 Validity Not Before: Oct 19 10:34:55 2025 GMT Not After : Oct 20 13:09:55 2025 GMT Subject: CN=9AF25CA6E667620FD0CD284CE65E4924CACA98BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a1:8e:83:95:d2:9d:8e:2f:b4:25:a6:93:6f: c4:8a:f4:21:e7:b8:f1:24:e0:03:a2:a4:33:6a:ab: dc:64:37:1f:83:42:e3:0d:32:8f:93:3e:87:f1:27: 20:be:c7:7d:57:56:9c:36:8d:9c:5d:45:98:3b:25: 38:92:d4:55:80:58:50:97:a3:e7:43:d5:49:75:ca: 59:a6:38:b1:5f:22:ca:3b:e3:0b:6f:23:91:57:ed: 29:18:27:20:9a:79:36:35:6e:7f:3e:2b:12:2c:2a: 10:7a:46:54:53:91:47:77:97:a0:f8:1d:ea:8c:f2: af:71:79:62:2b:f9:62:7f:9d:03:09:41:cf:0a:b5: 74:c7:ad:4b:33:0d:58:48:04:a9:a4:19:4c:04:c5: 36:d0:bf:7f:74:b3:37:ef:45:b8:76:69:1b:d8:4a: 1a:60:03:e5:2d:57:e5:16:3f:80:6a:57:16:08:6a: dc:9c:08:21:15:2d:a2:b0:df:46:04:00:e3:ff:b6: b3:44:48:d7:ec:30:52:21:9c:bc:d2:04:d7:ae:ba: c7:4f:8e:69:a4:63:06:a1:79:4c:fa:97:ac:b6:8c: 18:65:a5:dd:d5:ae:c4:70:41:7d:1e:86:8a:de:27: 25:34:9a:71:bc:b5:83:b8:d7:69:7d:4d:b2:03:2b: a9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F2:5C:A6:E6:67:62:0F:D0:CD:28:4C:E6:5E:49:24:CA:CA:98:BD X509v3 Authority Key Identifier: keyid:92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:12:4b:5b:a6:58:ba:c6:57:70:11:07:2e:e6:33:1b:d3:49: 2e:f0:df:bc:9a:8b:30:fb:f0:b0:70:1f:c9:48:88:b8:44:13: 40:59:ec:15:ef:f2:54:ba:7f:fe:71:97:c9:3f:cc:c2:ec:50: f4:95:cf:56:60:b2:ff:b3:2c:e7:23:f5:46:65:e9:83:1c:32: a9:2a:0a:fc:2d:f6:88:42:bc:ba:76:7b:34:25:9f:d9:e2:6a: 37:73:cf:bd:75:ff:6f:75:54:56:74:ba:fc:d0:ac:96:bf:97: cf:e9:b7:e4:da:dd:eb:d7:fa:d9:ff:17:25:76:47:76:4a:cf: 6c:fd:f6:b2:d2:a4:1a:8f:65:b5:02:44:ce:ca:e8:b8:75:68: 8a:5b:b9:48:ff:e5:cb:0b:4b:1f:60:b1:8f:cb:6e:56:b1:88: a6:18:b1:91:b1:d5:76:5d:33:30:60:28:5a:8c:78:b5:c9:e2: b0:24:db:cb:a7:5b:47:44:0d:72:2f:47:5d:8b:ef:6e:c0:fb: 61:d8:4c:db:ec:94:6f:b8:e3:a6:94:79:61:c5:6f:11:af:35: f4:26:37:83:5b:b9:7b:76:49:90:2c:f0:ec:c7:8c:82:22:ee: 2a:05:17:47:54:50:2d:98:0e:c1:c8:22:6f:ba:4c:fc:41:83: 59:c1:40:b4 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUR7mtZVXw28eFnhyT02vpEGKJ8aswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI2Y2IzMzcyMmEzNDkzMjE2MjgzZGM4MGNhZTBlZTlk NTg4NzRmMjAeFw0yNTEwMTkxMDM0NTVaFw0yNTEwMjAxMzA5NTVaMDMxMTAvBgNV BAMTKDlBRjI1Q0E2RTY2NzYyMEZEMENEMjg0Q0U2NUU0OTI0Q0FDQTk4QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6oY6DldKdji+0JaaTb8SK9CHn uPEk4AOipDNqq9xkNx+DQuMNMo+TPofxJyC+x31XVpw2jZxdRZg7JTiS1FWAWFCX o+dD1Ul1ylmmOLFfIso74wtvI5FX7SkYJyCaeTY1bn8+KxIsKhB6RlRTkUd3l6D4 HeqM8q9xeWIr+WJ/nQMJQc8KtXTHrUszDVhIBKmkGUwExTbQv390szfvRbh2aRvY ShpgA+UtV+UWP4BqVxYIatycCCEVLaKw30YEAOP/trNESNfsMFIhnLzSBNeuusdP jmmkYwaheUz6l6y2jBhlpd3VrsRwQX0ehoreJyU0mnG8tYO412l9TbIDK6mVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUmvJcpuZnYg/QzShM5l5JJMrKmL0wHwYDVR0j BBgwFoAUkmyzNyKjSTIWKD3IDK4O6dWIdPIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NlMDBjZjktMDRhNS00M2QxLThiODktZWRmYTYwY2Q4 ZDRhLzIvOTI2Q0IzMzcyMkEzNDkzMjE2MjgzREM4MENBRTBFRTlENTg4NzRGMi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2tteXpOeUtqU1RJV0tEM0lESzRPNmRX SWRQSS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jY2UwMGNmOS0w NGE1LTQzZDEtOGI4OS1lZGZhNjBjZDhkNGEvMi85MjZDQjMzNzIyQTM0OTMyMTYy ODNEQzgwQ0FFMEVFOUQ1ODg3NEYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJBJLW6ZYusZXcBEHLuYz G9NJLvDfvJqLMPvwsHAfyUiIuEQTQFnsFe/yVLp//nGXyT/MwuxQ9JXPVmCy/7Ms 5yP1RmXpgxwyqSoK/C32iEK8unZ7NCWf2eJqN3PPvXX/b3VUVnS6/NCslr+Xz+m3 5Nrd69f62f8XJXZHdkrPbP32stKkGo9ltQJEzsrouHVoilu5SP/lywtLH2Cxj8tu VrGIphixkbHVdl0zMGAoWox4tcnisCTby6dbR0QNci9HXYvvbsD7YdhM2+yUb7jj ppR5YcVvEa819CY3g1u5e3ZJkCzw7MeMgiLuKgUXR1RQLZgOwcgib7pM/EGDWcFA tA== -----END CERTIFICATE-----Generated at Mon Oct 20 01:23:50 2025 by rpki-client