$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft File: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft (raw, json) Hash identifier: e8FaI0e6r77RCQ/qi+eMYzROoPIG8epOrnDnsrLCJuU= Subject key identifier: 28:A5:AC:F0:6B:B1:26:B5:DD:81:13:F3:D3:88:B5:8B:46:E9:14:E7 Authority key identifier: 20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 Certificate issuer: /CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Certificate serial: 0ED94444A8599294269CDC724D1DE43C5769B9D5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft Manifest number: 48 Signing time: Sun 19 Oct 2025 14:57:34 +0000 Manifest this update: Sun 19 Oct 2025 14:52:34 +0000 Manifest next update: Mon 20 Oct 2025 16:13:34 +0000 Files and hashes: 1: 326131343a373538313a333030303a3a2f34302d3438203d3e20323037353239.roa (hash: 49tQr1GLN9QvPACiaQcXfaSDsuhRZJax3rEAyqF9fvs=) 2: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl (hash: cMvEJHdDw/hVdiECCV7dJB+Ua7/8SC/cFCVPmWo8+iM=) 3: 326131343a373538303a666666353a3a2f34382d3438203d3e20323037353239.roa (hash: 8GEpSwKR5aAKrW7JpZcQNrVUIUKVu8YVCYytf208qTw=) 4: 326131343a373538313a333062353a3a2f34382d3438203d3e20323131373239.roa (hash: tFUXq6i30FxB1SNNhCRKk78oQl/FXFjJBGghOw722to=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 16:13:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:d9:44:44:a8:59:92:94:26:9c:dc:72:4d:1d:e4:3c:57:69:b9:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Validity Not Before: Oct 19 14:52:34 2025 GMT Not After : Oct 20 16:13:34 2025 GMT Subject: CN=28A5ACF06BB126B5DD8113F3D388B58B46E914E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5e:1d:fe:97:d1:a7:1e:f7:bb:60:8d:34:b2: 6c:a3:58:7f:b1:e6:6d:fa:4f:7d:cf:64:c1:bb:05: 7c:70:ea:03:63:81:bc:e0:47:cf:f1:bc:ea:36:ec: 43:dd:5c:56:d6:5a:12:3b:9e:11:e5:2d:1e:f0:3e: 88:02:bf:3e:63:71:11:67:f9:32:59:a2:30:1e:ad: 92:8f:b1:02:79:f2:b8:ac:ee:7f:b7:9e:e7:8a:57: 4d:ee:0d:f2:6e:f1:1a:9a:db:0c:ae:52:e2:96:f4: 58:64:22:fa:1b:86:8f:10:51:12:31:2b:4b:22:cf: 2d:83:87:bc:d1:d4:76:21:25:9c:c4:0a:65:cb:c7: 70:83:ff:08:ce:d4:8b:e6:48:74:2e:d9:d3:ff:2b: b4:8c:02:e2:75:61:ea:28:42:a4:77:dd:cc:2c:fa: 93:52:cc:10:b3:d0:4c:38:1a:26:8b:4b:31:d8:bd: 25:3f:cf:c6:81:cf:5d:c2:f3:7e:d7:bd:2d:ff:01: d3:6a:77:bc:08:63:46:fb:cb:c9:c6:0d:c4:62:d0: ec:b5:7c:69:d8:b1:69:60:6b:dd:bc:8e:fa:9f:fe: fe:d3:9c:5e:0a:1b:98:6a:2d:4b:0c:7c:c8:d4:5a: 6d:0b:45:5f:9f:13:40:c4:02:ee:45:4c:fb:85:cd: a9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A5:AC:F0:6B:B1:26:B5:DD:81:13:F3:D3:88:B5:8B:46:E9:14:E7 X509v3 Authority Key Identifier: keyid:20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b5:b6:f8:eb:10:1c:ce:bb:4d:86:e5:0c:93:d4:b3:d8:ba: 33:16:59:a5:9c:92:c1:31:ea:67:c4:75:a6:36:a4:fe:7c:0e: 9a:d4:e4:c1:f9:f0:7b:d6:c7:49:2b:34:9a:e1:39:9a:ec:e2: 67:03:8a:c5:82:8d:44:91:92:e8:77:ba:14:35:47:c7:8b:de: 20:30:08:b8:db:84:16:28:21:2e:e6:b4:78:d0:0d:dd:8d:91: 91:64:6b:a8:1e:a5:3e:75:65:62:02:52:42:e9:98:55:b5:f3: 44:b0:f3:2d:d8:69:38:41:81:54:4a:6b:a5:6c:37:56:d5:7c: d5:13:47:b1:31:99:7e:80:e5:e4:83:43:13:65:e7:b2:49:65: 71:dd:bf:a0:34:0c:c9:dd:58:90:41:fd:bc:e3:68:cf:ad:ed: 2b:2f:fc:0d:32:22:c8:bb:2d:c1:d4:eb:3f:a5:fd:bc:f6:f2: 11:63:4f:6b:4e:3e:b9:4d:93:e5:d5:c0:3f:49:79:ee:38:7f: 5c:d4:16:4f:8a:fa:fd:a5:bd:3f:b9:c9:68:f1:3e:65:3b:13: 8a:00:36:35:13:3c:4b:ad:4f:bd:c2:1f:19:ca:c5:7e:08:4a: 11:34:81:46:e3:ed:81:f1:5b:da:4e:8c:be:d3:51:f9:6c:96: fe:51:bf:a0 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUDtlERKhZkpQmnNxyTR3kPFdpudUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZD ODg5MjNGMDAeFw0yNTEwMTkxNDUyMzRaFw0yNTEwMjAxNjEzMzRaMDMxMTAvBgNV BAMTKDI4QTVBQ0YwNkJCMTI2QjVERDgxMTNGM0QzODhCNThCNDZFOTE0RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrXh3+l9GnHve7YI00smyjWH+x 5m36T33PZMG7BXxw6gNjgbzgR8/xvOo27EPdXFbWWhI7nhHlLR7wPogCvz5jcRFn +TJZojAerZKPsQJ58ris7n+3nueKV03uDfJu8Rqa2wyuUuKW9FhkIvobho8QURIx K0sizy2Dh7zR1HYhJZzECmXLx3CD/wjO1IvmSHQu2dP/K7SMAuJ1YeooQqR33cws +pNSzBCz0Ew4GiaLSzHYvSU/z8aBz13C837XvS3/AdNqd7wIY0b7y8nGDcRi0Oy1 fGnYsWlga928jvqf/v7TnF4KG5hqLUsMfMjUWm0LRV+fE0DEAu5FTPuFzanLAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUKKWs8GuxJrXdgRPz04i1i0bpFOcwHwYDVR0j BBgwFoAUICqC2m5zzkJi4Yuu1go/psiJI/AwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDliZDM4ODgtOTMwMi00YjZmLWEwMTctMmI0YmJhNWU1 N2JiLzEvMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZDODg5MjNGMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDJBODJEQTZFNzNDRTQyNjJFMThCQUVE NjBBM0ZBNkM4ODkyM0YwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q5YmQzODg4LTkzMDItNGI2Zi1hMDE3LTJiNGJiYTVlNTdiYi8xLzIwMkE4MkRB NkU3M0NFNDI2MkUxOEJBRUQ2MEEzRkE2Qzg4OTIzRjAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA7tbb4 6xAczrtNhuUMk9Sz2LozFlmlnJLBMepnxHWmNqT+fA6a1OTB+fB71sdJKzSa4Tma 7OJnA4rFgo1EkZLod7oUNUfHi94gMAi424QWKCEu5rR40A3djZGRZGuoHqU+dWVi AlJC6ZhVtfNEsPMt2Gk4QYFUSmulbDdW1XzVE0exMZl+gOXkg0MTZeeySWVx3b+g NAzJ3ViQQf2842jPre0rL/wNMiLIuy3B1Os/pf289vIRY09rTj65TZPl1cA/SXnu OH9c1BZPivr9pb0/uclo8T5lOxOKADY1EzxLrU+9wh8ZysV+CEoRNIFG4+2B8Vva Toy+01H5bJb+Ub+g -----END CERTIFICATE-----Generated at Mon Oct 20 03:42:52 2025 by rpki-client