$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft File: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft (raw, json) Hash identifier: U9ExfKfyOEQz9cLIC9bHvZnPQvxbvZdxaM+x/FEEbLI= Subject key identifier: 16:6D:82:92:E9:B0:D5:4C:3E:1F:64:1D:38:43:FC:1D:97:11:35:BC Authority key identifier: 5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F Certificate issuer: /CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Certificate serial: 515A2AA068DDDC2B580EBC4854F93009463A2288 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft Manifest number: 94 Signing time: Mon 20 Oct 2025 05:57:49 +0000 Manifest this update: Mon 20 Oct 2025 05:52:49 +0000 Manifest next update: Tue 21 Oct 2025 06:28:49 +0000 Files and hashes: 1: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl (hash: rHlTK1S25fPq5Bb2oCY5rCJUlTftwtQx5FC/cO5arMU=) 2: 326130363a396634313a3130303a3a2f34302d3430203d3e20323134373233.roa (hash: sTs8O8KBp3/QEgTlhnDJhb+nhykdynr848iPv4Z/TIo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 06:28:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:5a:2a:a0:68:dd:dc:2b:58:0e:bc:48:54:f9:30:09:46:3a:22:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Validity Not Before: Oct 20 05:52:49 2025 GMT Not After : Oct 21 06:28:49 2025 GMT Subject: CN=166D8292E9B0D54C3E1F641D3843FC1D971135BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f5:5b:f1:70:17:ba:a3:49:a4:3d:a2:26:7d: d0:9d:8b:27:15:e6:a1:5f:3b:ef:80:43:87:1a:bc: 91:c8:8e:1f:9c:b5:74:d7:c6:0a:ab:84:91:a8:6c: 38:f9:27:7c:65:c3:39:f8:4c:ef:b5:c7:67:9c:61: e7:6f:77:52:12:0c:c6:10:fd:43:7e:99:f8:27:81: 07:09:79:82:9c:47:ec:2c:fc:28:01:c4:09:06:f1: 52:85:d4:21:b7:91:74:4a:40:c6:29:68:38:bf:47: fa:5e:25:b4:54:84:ab:77:ac:3d:a5:e2:5e:a8:ca: 5b:dc:e6:2a:d5:a7:e2:cd:06:e0:ec:f5:bb:41:e8: d5:88:6f:2c:f2:3e:4a:ba:c4:63:84:0d:94:da:80: 6e:1e:e8:39:0d:e9:b6:e9:04:a4:64:a3:fe:7f:f8: c2:65:5c:cd:ad:fd:8e:d3:00:ae:0b:c8:22:86:a1: f3:d0:21:b8:1a:cd:ad:a3:23:ab:ac:d7:81:3e:b8: 27:6d:bb:d0:e4:c9:d5:cd:26:a5:99:f8:21:62:24: 6e:76:98:de:22:19:32:26:48:92:5f:79:ec:2b:af: 1d:b6:37:34:38:ea:b8:cb:71:a2:ff:e8:3b:d1:1b: 0f:33:a9:03:b1:1e:d5:de:60:12:8c:38:41:3b:98: 7d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:6D:82:92:E9:B0:D5:4C:3E:1F:64:1D:38:43:FC:1D:97:11:35:BC X509v3 Authority Key Identifier: keyid:5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:81:50:ba:cd:b4:ac:53:4d:3d:4c:09:00:90:e4:56:52:ff: c0:35:2d:13:92:3d:2a:5c:3f:5a:9f:bf:a9:b9:1d:58:95:d2: d1:1a:cf:3f:7c:cc:1a:6a:1a:c4:fa:82:27:01:87:73:43:79: 33:06:71:60:1e:90:04:e5:68:84:97:7a:53:aa:3b:69:96:b3: 22:bf:c3:f8:37:f8:1b:34:90:59:a8:a7:19:b2:31:a3:f9:56: 53:72:3c:73:6c:43:62:7b:ae:81:69:38:59:c0:31:ac:fc:f6: 63:e0:9d:b0:4f:4d:ec:eb:b8:8c:57:95:99:ca:22:82:5f:18: 6b:a1:35:96:1f:8c:4c:d0:2a:c4:88:3b:ac:8b:bd:0e:2c:16: 9a:23:7d:02:d9:5e:a4:d6:58:a2:21:6a:c6:36:f9:73:4e:d5: f6:a1:3f:0e:49:88:6f:b4:e5:6d:f9:e8:ea:60:6a:ea:27:62: a5:e0:f1:a7:eb:e4:08:29:33:d7:5e:5f:27:bd:95:db:7e:74: dd:da:d1:b6:33:fe:f2:9a:a5:5a:43:09:1f:b6:be:48:af:22: c3:e7:4c:93:2d:78:f3:ea:a3:d2:6a:f9:bf:56:61:76:2a:8c: 8d:64:0d:31:ab:44:60:ed:08:95:6c:fa:64:ac:33:8c:76:72: 0d:1e:08:ca -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUUVoqoGjd3CtYDrxIVPkwCUY6IogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQw QkY1OTE1RjAeFw0yNTEwMjAwNTUyNDlaFw0yNTEwMjEwNjI4NDlaMDMxMTAvBgNV BAMTKDE2NkQ4MjkyRTlCMEQ1NEMzRTFGNjQxRDM4NDNGQzFEOTcxMTM1QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv9VvxcBe6o0mkPaImfdCdiycV 5qFfO++AQ4cavJHIjh+ctXTXxgqrhJGobDj5J3xlwzn4TO+1x2ecYedvd1ISDMYQ /UN+mfgngQcJeYKcR+ws/CgBxAkG8VKF1CG3kXRKQMYpaDi/R/peJbRUhKt3rD2l 4l6oylvc5irVp+LNBuDs9btB6NWIbyzyPkq6xGOEDZTagG4e6DkN6bbpBKRko/5/ +MJlXM2t/Y7TAK4LyCKGofPQIbgaza2jI6us14E+uCdtu9DkydXNJqWZ+CFiJG52 mN4iGTImSJJfeewrrx22NzQ46rjLcaL/6DvRGw8zqQOxHtXeYBKMOEE7mH2DAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUFm2Ckumw1Uw+H2QdOEP8HZcRNbwwHwYDVR0j BBgwFoAUWj94GTU84P0TuP/Ny4g37Qv1kV8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzUvNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQwQkY1OTE1Ri5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03ZWIzLTRm NjMtYTE1OS1jZmYwMmMwMjZhYmYvMi81QTNGNzgxOTM1M0NFMEZEMTNCOEZGQ0RD Qjg4MzdFRDBCRjU5MTVGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy81LzVBM0Y3ODE5 MzUzQ0UwRkQxM0I4RkZDRENCODgzN0VEMEJGNTkxNUYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAVgVC6 zbSsU009TAkAkORWUv/ANS0Tkj0qXD9an7+puR1YldLRGs8/fMwaahrE+oInAYdz Q3kzBnFgHpAE5WiEl3pTqjtplrMiv8P4N/gbNJBZqKcZsjGj+VZTcjxzbENie66B aThZwDGs/PZj4J2wT03s67iMV5WZyiKCXxhroTWWH4xM0CrEiDusi70OLBaaI30C 2V6k1liiIWrGNvlzTtX2oT8OSYhvtOVt+ejqYGrqJ2Kl4PGn6+QIKTPXXl8nvZXb fnTd2tG2M/7ymqVaQwkftr5IryLD50yTLXjz6qPSavm/VmF2KoyNZA0xq0Rg7QiV bPpkrDOMdnINHgjK -----END CERTIFICATE-----Generated at Mon Oct 20 20:34:53 2025 by rpki-client