$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft File: 47E9555355C6B007AACD5D45BF41E3383E991641.mft (raw, json) Hash identifier: RWQXzvvwSy7h5XCO+cteufJSyKXFbrDBjbqlwN4X6pM= Subject key identifier: E3:23:A9:B8:E0:D9:A9:23:E0:ED:9E:A5:47:D2:11:7B:DC:14:CE:A9 Authority key identifier: 47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41 Certificate issuer: /CN=47E9555355C6B007AACD5D45BF41E3383E991641 Certificate serial: 179F4219F8C5C172F2068C6FF0E7F47CBC434E08 Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft Manifest number: 0483 Signing time: Sun 19 Oct 2025 14:56:31 +0000 Manifest this update: Sun 19 Oct 2025 14:51:31 +0000 Manifest next update: Mon 20 Oct 2025 18:49:31 +0000 Files and hashes: 1: 3139382e3138302e3135312e302f32342d3234203d3e20313939353138.roa (hash: 3ipGYMDZ54FZdaI4eg46OMa/ZV0a0Q3rHUY9RUekrv8=) 2: 47E9555355C6B007AACD5D45BF41E3383E991641.crl (hash: UpPkQst5fJOgiqPKKz81es1ncVXYkgtHSyk2surJio0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 04:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:9f:42:19:f8:c5:c1:72:f2:06:8c:6f:f0:e7:f4:7c:bc:43:4e:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47E9555355C6B007AACD5D45BF41E3383E991641 Validity Not Before: Oct 19 14:51:31 2025 GMT Not After : Oct 20 18:49:31 2025 GMT Subject: CN=E323A9B8E0D9A923E0ED9EA547D2117BDC14CEA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1e:a8:4b:a8:65:68:e7:e6:27:0a:bf:65:52: bf:fe:e6:fc:35:f0:6f:9e:39:46:99:a6:8d:ad:21: 63:29:a2:d2:b6:9e:72:78:ea:e9:85:98:3e:a0:75: 04:11:50:6a:86:6a:b1:66:94:8e:96:26:e0:0f:92: 64:d5:cb:12:cf:0e:70:e3:88:9c:8f:15:d7:a2:f7: fd:98:76:fc:cb:0c:4f:e0:77:a0:82:74:63:c5:8f: 36:5d:7b:50:5f:78:48:7f:86:f3:39:a8:9f:4b:ea: 76:4d:21:27:9d:78:c7:b4:b3:00:d7:ad:a6:d6:58: 2a:5d:28:ff:80:83:c8:f8:31:0d:4f:54:51:97:54: 71:2a:17:53:80:1c:81:2a:8b:ef:eb:80:73:88:31: 80:b4:1c:2f:79:a6:69:06:b0:a5:52:f7:51:83:9c: e4:b7:96:9b:c0:d0:2a:85:bd:74:a0:42:85:65:ca: 87:22:9b:f0:5b:0f:ae:b8:8a:8d:b2:f7:ae:68:03: 53:2d:a3:72:4e:ab:42:73:7f:9b:1c:15:b4:b4:f9: 0f:c7:a5:dd:04:91:bf:c8:ad:8b:ba:64:9c:d4:17: 4c:1d:91:db:1d:a4:99:21:0f:25:57:5e:60:78:0e: 3d:f6:8a:bc:d7:2a:ad:3b:c7:86:fe:18:6f:00:0f: 87:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:23:A9:B8:E0:D9:A9:23:E0:ED:9E:A5:47:D2:11:7B:DC:14:CE:A9 X509v3 Authority Key Identifier: keyid:47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:8a:2e:82:c3:4e:1e:48:ae:db:04:d5:f1:f7:e9:00:ba:48: 75:4d:ab:fb:c6:59:47:16:fd:d8:d7:db:68:e5:be:f6:e6:b1: c0:36:f2:68:a6:8d:5f:4c:18:89:5c:60:0e:a7:0e:bf:18:a7: 9c:8f:eb:9a:11:fd:10:8d:22:59:f5:e0:ff:67:9f:6b:c1:0e: ca:51:40:02:0e:9a:24:6c:96:f0:2c:1b:12:be:e6:58:e5:f3: 50:b1:39:16:2e:6a:f0:83:b3:83:8b:99:a9:b1:23:8f:84:a3: 1a:1e:5f:70:5b:20:25:b4:22:cc:ca:fa:01:9a:81:e7:a6:90: 1b:8e:fd:8f:0d:f1:11:0c:b0:2b:cf:c3:c2:ea:5a:b2:9f:33: 5f:f4:91:88:00:4e:f7:a6:e6:a2:33:e8:f9:83:e2:25:93:b5: db:ba:9e:6f:2c:86:75:2c:21:12:68:b3:0d:d1:4e:64:ea:c5: 63:a6:89:14:80:80:12:ea:1e:38:63:65:0a:fd:8f:a0:85:76: b1:a6:37:9e:68:ac:9e:3a:42:8c:1e:80:94:b6:21:15:54:44: f5:0c:a9:e6:20:27:24:b4:83:c7:73:f7:96:58:39:66:7c:4a: cb:23:0d:98:5b:b5:e8:7e:c4:2f:08:3e:73:0d:1f:8b:31:18: f8:f4:6c:d7 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUF59CGfjFwXLyBoxv8Of0fLxDTggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdFOTU1NTM1NUM2QjAwN0FBQ0Q1RDQ1QkY0MUUzMzgz RTk5MTY0MTAeFw0yNTEwMTkxNDUxMzFaFw0yNTEwMjAxODQ5MzFaMDMxMTAvBgNV BAMTKEUzMjNBOUI4RTBEOUE5MjNFMEVEOUVBNTQ3RDIxMTdCREMxNENFQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqHqhLqGVo5+YnCr9lUr/+5vw1 8G+eOUaZpo2tIWMpotK2nnJ46umFmD6gdQQRUGqGarFmlI6WJuAPkmTVyxLPDnDj iJyPFdei9/2YdvzLDE/gd6CCdGPFjzZde1BfeEh/hvM5qJ9L6nZNISedeMe0swDX rabWWCpdKP+Ag8j4MQ1PVFGXVHEqF1OAHIEqi+/rgHOIMYC0HC95pmkGsKVS91GD nOS3lpvA0CqFvXSgQoVlyocim/BbD664io2y965oA1Mto3JOq0Jzf5scFbS0+Q/H pd0Ekb/IrYu6ZJzUF0wdkdsdpJkhDyVXXmB4Dj32irzXKq07x4b+GG8AD4dbAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQU4yOpuODZqSPg7Z6lR9IRe9wUzqkwHwYDVR0j BBgwFoAUR+lVU1XGsAeqzV1Fv0HjOD6ZFkEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzQvNDdFOTU1NTM1NUM2QjAwN0FBQ0Q1RDQ1QkY0MUUzMzgzRTk5MTY0MS5j cmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJnLm5l dC9ycGtpL1JHbmV0LU9VL1ItbFZVMVhHc0FlcXpWMUZ2MEhqT0Q2WkZrRS5jZXIw gZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9yc3luYy5w YWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZTdkNTVmNy1lZTYwLTQwMDUt YmFkNy1iNDI4MThjZjUwZTgvNC80N0U5NTU1MzU1QzZCMDA3QUFDRDVENDVCRjQx RTMzODNFOTkxNjQxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAE oAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO4ougsNOHkiu2wTV8ffpALpIdU2r+8ZZ Rxb92NfbaOW+9uaxwDbyaKaNX0wYiVxgDqcOvxinnI/rmhH9EI0iWfXg/2efa8EO ylFAAg6aJGyW8CwbEr7mWOXzULE5Fi5q8IOzg4uZqbEjj4SjGh5fcFsgJbQizMr6 AZqB56aQG479jw3xEQywK8/Dwupasp8zX/SRiABO96bmojPo+YPiJZO127qebyyG dSwhEmizDdFOZOrFY6aJFICAEuoeOGNlCv2PoIV2saY3nmisnjpCjB6AlLYhFVRE 9Qyp5iAnJLSDx3P3llg5ZnxKyyMNmFu16H7ELwg+cw0fizEY+PRs1w== -----END CERTIFICATE-----Generated at Sun Oct 19 23:24:54 2025 by rpki-client