$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft File: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft (raw, json) Hash identifier: siU6Fq44hQb3xw+p9xGBjljhPzngFhd56U3ZYqjTmmI= Subject key identifier: 27:C2:11:07:59:8B:39:5F:4C:97:4E:45:F3:6B:38:BC:BB:69:B1:78 Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 38331DD25512F2A1B24264876159EFA54C7476E2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft Manifest number: 0300 Signing time: Sun 19 Oct 2025 17:35:21 +0000 Manifest this update: Sun 19 Oct 2025 17:30:21 +0000 Manifest next update: Mon 20 Oct 2025 19:54:21 +0000 Files and hashes: 1: 326131343a373538313a6634303a3a2f34342d3438203d3e20323134363433.roa (hash: jjg3HPw+XVWQVO0XHgF/TKZW97oaDPDZVvcbfhgJX94=) 2: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl (hash: rODNPh83r2ASFmkOCUqyjkj0GUSipjg/v3i7AJqHKuw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:33:1d:d2:55:12:f2:a1:b2:42:64:87:61:59:ef:a5:4c:74:76:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Oct 19 17:30:21 2025 GMT Not After : Oct 20 19:54:21 2025 GMT Subject: CN=27C21107598B395F4C974E45F36B38BCBB69B178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a0:87:3b:60:8a:6b:5f:81:cc:9e:41:a3:a3: a3:10:8c:27:e2:ec:59:09:bd:f3:6b:65:fd:ea:fa: 8c:5e:5b:c3:c1:c7:ab:7c:a1:42:a1:71:7f:0b:0f: e7:81:cb:3a:00:b7:6d:99:5b:44:71:07:5c:54:3f: 18:d0:01:2e:5d:73:7d:97:fd:e3:f1:61:3b:fd:0d: 43:4b:cf:a0:72:a9:98:89:84:64:c8:cc:20:e5:05: a0:7d:c5:de:70:0b:90:5c:88:5e:04:8c:ed:31:96: 28:6e:5a:82:7b:5c:2f:e6:f5:a8:32:47:57:df:e9: e7:13:26:8f:e7:61:00:a1:c1:06:f1:9e:23:c0:b0: 95:aa:60:56:be:0b:93:e6:ea:bb:3d:54:14:ad:5a: b1:c1:af:a9:90:9f:96:3a:67:0d:6e:16:5e:b6:d4: 80:78:8d:71:4e:e6:e2:41:20:ce:c4:60:8a:c1:e3: df:22:b4:bd:23:41:0c:5a:57:5e:cd:67:7f:d1:80: 32:71:39:77:a0:97:51:a6:06:e7:45:c5:c0:97:66: 37:75:65:83:cf:54:84:91:4c:8d:22:19:60:bb:6f: 4c:2f:3f:1c:e4:d7:c9:44:76:4e:ca:1e:61:36:77: 1c:61:61:d4:6f:7e:2a:bb:be:14:ed:10:c4:21:6f: 31:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C2:11:07:59:8B:39:5F:4C:97:4E:45:F3:6B:38:BC:BB:69:B1:78 X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:8b:5e:64:30:b0:a2:7e:10:f5:a3:78:82:22:89:11:f0:90: 7f:d6:eb:3d:ba:2b:b6:c3:1f:ee:b2:a7:46:62:49:29:9a:30: 9b:86:2a:27:4a:4a:66:ac:82:84:9d:a9:5f:b2:af:af:82:18: 86:73:d9:a8:7f:45:cd:e6:c0:2d:b6:f2:eb:3e:5d:5b:8e:7b: ee:3b:7d:cc:ec:89:b2:97:2c:cc:04:83:51:fd:71:72:7f:85: 1f:87:ca:44:be:83:99:62:96:21:10:ab:0b:71:bf:db:8c:55: e5:86:85:71:eb:56:55:5a:86:a3:5a:ad:66:bf:bf:68:4f:2a: 7e:60:62:d1:fe:cd:23:95:83:9c:e6:61:cc:34:32:54:d5:88: 36:68:37:ba:6b:70:d4:ba:06:00:f3:dc:c6:02:5b:41:4a:80: 3f:b3:6f:51:59:be:00:b1:a4:68:d3:b1:04:a5:8d:7f:5f:71: 3f:28:31:6f:36:4f:dc:38:d0:31:0b:3c:95:89:37:9c:ab:e7: ac:1a:f5:03:a6:e8:9c:e7:04:c3:64:6d:6f:8d:28:2e:9f:f7: ec:ef:1d:e4:40:90:ba:87:7a:81:4e:ec:71:b4:4e:0a:27:62: bd:6c:bb:f8:b4:b7:57:0a:3d:2e:2f:b8:22:f8:ed:a6:8b:57: c2:68:b6:7b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUODMd0lUS8qGyQmSHYVnvpUx0duIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNTEwMTkxNzMwMjFaFw0yNTEwMjAxOTU0MjFaMDMxMTAvBgNV BAMTKDI3QzIxMTA3NTk4QjM5NUY0Qzk3NEU0NUYzNkIzOEJDQkI2OUIxNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9oIc7YIprX4HMnkGjo6MQjCfi 7FkJvfNrZf3q+oxeW8PBx6t8oUKhcX8LD+eByzoAt22ZW0RxB1xUPxjQAS5dc32X /ePxYTv9DUNLz6ByqZiJhGTIzCDlBaB9xd5wC5BciF4EjO0xlihuWoJ7XC/m9agy R1ff6ecTJo/nYQChwQbxniPAsJWqYFa+C5Pm6rs9VBStWrHBr6mQn5Y6Zw1uFl62 1IB4jXFO5uJBIM7EYIrB498itL0jQQxaV17NZ3/RgDJxOXegl1GmBudFxcCXZjd1 ZYPPVISRTI0iGWC7b0wvPxzk18lEdk7KHmE2dxxhYdRvfiq7vhTtEMQhbzEfAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUJ8IRB1mLOV9Ml05F82s4vLtpsXgwHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RiOGQ4YjdkLWM0ODYtNDIzOS05ZDlmLThmOGY1ZGNlZDhkMC8xL0Y5RjdBMjg4 NUNGMzAxMkZBMTM5MEQzQjMyNTlGQzc4QUVGN0FEMUEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBFi15k MLCifhD1o3iCIokR8JB/1us9uiu2wx/usqdGYkkpmjCbhionSkpmrIKEnalfsq+v ghiGc9mof0XN5sAttvLrPl1bjnvuO33M7ImylyzMBINR/XFyf4Ufh8pEvoOZYpYh EKsLcb/bjFXlhoVx61ZVWoajWq1mv79oTyp+YGLR/s0jlYOc5mHMNDJU1Yg2aDe6 a3DUugYA89zGAltBSoA/s29RWb4AsaRo07EEpY1/X3E/KDFvNk/cONAxCzyViTec q+esGvUDpuic5wTDZG1vjSgun/fs7x3kQJC6h3qBTuxxtE4KJ2K9bLv4tLdXCj0u L7gi+O2mi1fCaLZ7 -----END CERTIFICATE-----Generated at Sun Oct 19 23:45:40 2025 by rpki-client