$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft File: C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft (raw, json) Hash identifier: qTUQ5MFccgoQoGpcGsXzGJGS41o2eUsQpA2yv9iLVJI= Subject key identifier: 60:26:DC:4C:4A:95:AB:A4:AC:77:CF:CD:FF:C9:0F:04:CA:B7:80:8D Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf Certificate serial: 79135C95058950F2F3C2B40E6FA6AFD20DA06BC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft Manifest number: 0544 Signing time: Sun 19 Oct 2025 00:16:33 +0000 Manifest this update: Sun 19 Oct 2025 00:11:33 +0000 Manifest next update: Mon 20 Oct 2025 01:49:33 +0000 Files and hashes: 1: 3139332e3234362e3130332e302f32342d3234203d3e20323032373336.roa (hash: 25OCay2OV/7fsFzlQCaWuZFV/8gtz5r77rm0KuzYhQc=) 2: 3231372e3139382e3138372e302f32342d3234203d3e20323131343430.roa (hash: hv8+1ab3SlqVr0lUzuXGkIAi200jEC6ydrdZg2cy0KU=) 3: C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl (hash: /alw1VcsYcOsm0453PsUNzjrEkMluHEbdrR+s6xw+co=) 4: 3231372e3139382e3138372e302f32342d3234203d3e20323131343135.roa (hash: C9UN/z7rRSIBHXCw3Mn5S1vnSskjCCo5azhWVB5o2V8=) 5: 3139332e3234362e3130322e302f32342d3234203d3e203630373831.roa (hash: 9YIjshhRHJCTBV0dIP18GlVU8/qr9siO7bVSgJFYoAw=) 6: 3139332e3234362e342e302f32342d3234203d3e20313335343032.roa (hash: x5G3aikxww4wLRaoWnz2KkIIppe2I2SZAi3PiElvQpI=) 7: 3231372e3139382e3138372e302f32342d3234203d3e20323132363039.roa (hash: DHsuIdClDCk2AbtF+6NodfNI3JEU6gbRKvoUSbt4bMQ=) 8: 3139332e3234362e3130332e302f32342d3234203d3e20323136313338.roa (hash: fdALPGopwtGvbJEhx+/96pp78JBOCpIXPSPl4+ufmoE=) 9: 3139332e3234362e352e302f32342d3234203d3e20313939343135.roa (hash: lvghBplCcmXtQEEJ3nC5HmHIcxgk88drnBMjhNzmX2g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 01:49:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:13:5c:95:05:89:50:f2:f3:c2:b4:0e:6f:a6:af:d2:0d:a0:6b:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf Validity Not Before: Oct 19 00:11:33 2025 GMT Not After : Oct 20 01:49:33 2025 GMT Subject: CN=6026DC4C4A95ABA4AC77CFCDFFC90F04CAB7808D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6a:cb:d2:ed:8d:28:39:22:0b:f9:95:78:03: df:c6:fd:b9:69:14:5f:3b:7c:86:3d:9f:94:ab:ed: 1c:71:07:bb:da:c7:60:cb:b7:32:47:31:82:9f:48: 3b:c2:5a:48:e8:f6:34:ac:1f:4e:af:51:02:73:1e: 9b:b6:00:66:fe:79:e8:26:7d:2b:62:9b:ba:09:4d: bf:20:df:76:58:2c:e0:53:f3:4e:f6:34:43:4f:6e: a8:01:89:c8:b3:d4:6f:0c:4f:96:3f:5c:ef:11:15: 0b:45:13:20:57:d2:73:52:0a:96:f9:d5:df:3d:e6: b4:a8:db:7d:35:78:b5:c8:78:9a:70:fa:25:54:5d: 58:50:8c:fb:a3:0d:5d:0d:a9:b9:cc:d1:33:10:08: c6:8e:00:32:74:b8:ed:11:1d:01:6c:e3:32:74:7c: e8:2e:a7:7d:dc:98:43:0c:c4:d8:a8:2c:53:99:4e: c5:7a:f2:20:1b:48:0e:17:ca:5c:73:41:d1:bb:7a: ef:8f:b0:c4:2b:0b:2e:bb:50:79:b1:b8:fd:97:d8: 15:c7:64:7e:56:27:43:dc:22:e1:ee:94:f8:38:90: 90:65:15:df:22:d8:3f:3e:4d:69:93:51:e6:e3:b5: 9d:1f:26:88:29:23:74:1f:b9:03:ed:61:91:a4:08: ec:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:26:DC:4C:4A:95:AB:A4:AC:77:CF:CD:FF:C9:0F:04:CA:B7:80:8D X509v3 Authority Key Identifier: keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e6:3f:f5:58:29:4f:e9:bd:d0:4a:e1:fd:15:61:b2:2c:85: c9:a7:46:5e:bc:04:2f:50:23:db:24:1a:e5:53:44:35:69:80: 25:fe:2a:3f:88:7b:f0:a8:ee:bf:c2:63:76:a8:50:33:5a:ba: ee:08:94:0a:d3:d6:db:ef:ec:a9:a3:65:4f:b0:7e:00:22:55: a5:1e:36:37:8d:11:8c:17:af:20:7a:43:2e:22:16:37:7f:80: 17:93:1b:fc:9b:8d:8b:86:ec:60:43:ec:c9:7c:e3:bf:dd:47: b4:8a:21:08:e6:b1:da:7a:cc:4a:9b:f8:bd:db:4b:a1:a6:59: 7a:53:30:a8:10:90:c3:f1:1f:29:3a:cc:c8:47:15:75:b5:06: 17:e6:00:fb:c4:0b:eb:d1:c0:d5:04:e4:1f:33:f6:0b:40:f8: 66:c4:71:8a:22:c1:53:ad:21:4f:09:76:51:92:7a:f1:3a:a2: 42:1b:45:4a:5b:12:c9:ef:61:f6:79:31:7b:de:b0:f8:50:41: 8e:3c:00:7e:a3:b8:93:2f:12:e9:4c:34:81:0f:25:7d:9a:b0: c6:57:0b:44:85:c3:37:e0:10:07:36:38:6a:33:18:74:12:b7: e4:18:4a:21:1a:45:f9:ac:a0:f3:8d:a0:3c:dd:85:50:17:ca: 96:bf:d4:54 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUeRNclQWJUPLzwrQOb6av0g2ga8cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc5ZDAyYzYxODg2MWFkNDViYWY3OGNlMzkwMjNjYmNi NDk0YTdiZjAeFw0yNTEwMTkwMDExMzNaFw0yNTEwMjAwMTQ5MzNaMDMxMTAvBgNV BAMTKDYwMjZEQzRDNEE5NUFCQTRBQzc3Q0ZDREZGQzkwRjA0Q0FCNzgwOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4asvS7Y0oOSIL+ZV4A9/G/blp FF87fIY9n5Sr7RxxB7vax2DLtzJHMYKfSDvCWkjo9jSsH06vUQJzHpu2AGb+eegm fStim7oJTb8g33ZYLOBT8072NENPbqgBiciz1G8MT5Y/XO8RFQtFEyBX0nNSCpb5 1d895rSo2301eLXIeJpw+iVUXVhQjPujDV0NqbnM0TMQCMaOADJ0uO0RHQFs4zJ0 fOgup33cmEMMxNioLFOZTsV68iAbSA4XylxzQdG7eu+PsMQrCy67UHmxuP2X2BXH ZH5WJ0PcIuHulPg4kJBlFd8i2D8+TWmTUebjtZ0fJogpI3QfuQPtYZGkCOw/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUYCbcTEqVq6Ssd8/N/8kPBMq3gI0wHwYDVR0j BBgwFoAUx50CxhiGGtRbr3jOOQI8vLSUp78wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDkwYTkzNWEtYTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0 ZjI4LzAvQzc5RDAyQzYxODg2MUFENDVCQUY3OENFMzkwMjNDQkNCNDk0QTdCRi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3g1MEN4aGlHR3RSYnIzak9PUUk4dkxT VXA3OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOTBhOTM1YS1h NzRkLTRiOTgtOTQzMC1iYzdhZTVjMjRmMjgvMC9DNzlEMDJDNjE4ODYxQUQ0NUJB Rjc4Q0UzOTAyM0NCQ0I0OTRBN0JGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHuY/9VgpT+m90Erh/RVh siyFyadGXrwEL1Aj2yQa5VNENWmAJf4qP4h78Kjuv8JjdqhQM1q67giUCtPW2+/s qaNlT7B+ACJVpR42N40RjBevIHpDLiIWN3+AF5Mb/JuNi4bsYEPsyXzjv91HtIoh COax2nrMSpv4vdtLoaZZelMwqBCQw/EfKTrMyEcVdbUGF+YA+8QL69HA1QTkHzP2 C0D4ZsRxiiLBU60hTwl2UZJ68TqiQhtFSlsSye9h9nkxe96w+FBBjjwAfqO4ky8S 6Uw0gQ8lfZqwxlcLRIXDN+AQBzY4ajMYdBK35BhKIRpF+ayg842gPN2FUBfKlr/U VA== -----END CERTIFICATE-----Generated at Sun Oct 19 13:07:40 2025 by rpki-client