$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft File: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft (raw, json) Hash identifier: hMfAH7s1HCz5C6DWDTKxObj13a44u8JD0ea/Hh6OcEo= Subject key identifier: 36:DB:E7:69:E9:DB:BD:CF:60:1D:CF:3A:88:54:CD:6C:34:CE:1D:70 Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Certificate serial: 7AB8C9E52399423410DB9E0C32E862B36EF722F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft Manifest number: 045D Signing time: Sun 19 Oct 2025 05:12:00 +0000 Manifest this update: Sun 19 Oct 2025 05:07:00 +0000 Manifest next update: Mon 20 Oct 2025 07:07:00 +0000 Files and hashes: 1: 38322e3134302e3138392e302f32342d3234203d3e203135343139.roa (hash: q/tmnbq1kdd2hUMwbcuSKcZt7pux1EaGGpLbn7IfofI=) 2: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl (hash: MtHXfNHmAqewEqfHS4c+qi3NGh+WqcnCN5JEPaEsK8w=) 3: 38392e3131362e312e302f32342d3234203d3e203135343139.roa (hash: QlNtxapPtCDVmKsd/rR7Y2Bq1QIkmg64gwg6mpWc9ZY=) 4: 38362e33382e332e302f32342d3234203d3e203135343139.roa (hash: 1jWpw+W9zeIRwNdxwEeWvA1uKZ5XVqeLW/yed0hU+d4=) 5: 3138352e3134392e3135332e302f32342d3234203d3e203434373731.roa (hash: 3LQCLtbZ2cAzmsqD8inTKmHS0+b4RIJVefCUUonuvB0=) 6: 38322e3134302e3137382e302f32342d3234203d3e203135343139.roa (hash: kVZlSJSrWOIFgbVyyqSUiD6jECTpvfhx5mx8hRL1cGE=) 7: D34606949D385DB42714FE71274FAC9948EF279C.cer (hash: TQCZQkzK1CqgemnKR/erluvTKMYq58W//DcXZ16FiAE=) 8: 38322e3134302e3133312e302f32342d3234203d3e203135343139.roa (hash: YcmyLeFBQ+WK9MxW4qT13yT/CsdMqFWcCNcHges7cNY=) 9: 326130323a323633303a3a2f32392d3239203d3e203135343139.roa (hash: 8htEN27nXC1XFUYvScmaKLGazPRUUosEipnSlN6XgBk=) 10: 38392e3131362e31392e302f32342d3234203d3e203135343139.roa (hash: 4JL3Gtu7UsX3IaHs3LaQwmdxUfCfFV6YWJerzJoc+wE=) 11: 3138352e3134392e3135332e302f32342d3234203d3e203135343430.roa (hash: ld9bmw/lU5ViE7fFfnUAARe92vzpSXeZ47xTrIGHE2Y=) 12: 3138352e3134392e3135332e302f32342d3234203d3e203133313934.roa (hash: DudKC7EbN/x1z3E3UcohZZDxNJCJJwujdDPss+8DrkI=) 13: 38362e33382e382e302f32312d3231203d3e203135343139.roa (hash: uWYPVYjRnhouz2kB1gip220mm9ixJ1+yxtSXIITlxEw=) 14: 38392e3131362e31322e302f32332d3233203d3e203135343139.roa (hash: vCrLMX0eSFK/WsSjH4NPI6BnYmwIN7ZEFJbozFxO6uE=) 15: 3231372e392e3234312e302f32342d3234203d3e203135343139.roa (hash: hFAW06mmhAPSV/HJ4B8aC2PvIR5CrcKx3FcqsTikSiM=) 16: 38392e3131362e322e302f32332d3233203d3e203135343139.roa (hash: twheygdBU9M/hWK8PwEKS7vel1IBGYLsGKuF6NDPdmA=) 17: 38392e3131362e31362e302f32332d3233203d3e203135343139.roa (hash: 7gdiZpTYF4VKwdmEsTHKuwi6oAiZC6mVLx4cpcdl/GE=) 18: 38392e3131362e342e302f32322d3232203d3e203135343139.roa (hash: S7PYQmgyaS+nUukOrNi+7gU0SVsm2vupfOTXwPtPOXM=) 19: 38392e3131362e31352e302f32342d3234203d3e203135343139.roa (hash: /LejqbWiFUxs1DgkjzVItnmcQXCtVjOkQxj/fIk9rAQ=) 20: 3138352e3134392e3135352e302f32342d3234203d3e203434373731.roa (hash: W9T8aPnkMAlNbGOA+isd3U8U+YdKRxlDW0/+vHw4iGg=) 21: 3231372e392e3235342e302f32332d3233203d3e203135343139.roa (hash: iksl6QO5bGAwqBp6Vth9mckUoVZxpFnDxq6gmgw5QDs=) 22: 38392e3131362e34312e302f32342d3234203d3e203135343139.roa (hash: nrTdofG3QiyT59ifvXqBtX8pF4lYbmqFJc6mO1yyOW0=) 23: 326130323a323633303a3a2f33322d3332203d3e203135343139.roa (hash: qWp9paAJXWyG6T4NlWTD/O+mrcUKf+wb2OOSJ/RUTQM=) 24: 38392e3131362e34322e302f32332d3233203d3e203135343139.roa (hash: dqiC7sfkexEdY4bNAfWo7TkIe5GTWHX5uIAGfupS9Ro=) 25: 3138352e3134392e3135322e302f32322d3232203d3e203135343139.roa (hash: yiPh36TU1+o+jLX45pyYr1yhJEOI86BPrMUwrS94mMI=) 26: 3138352e3134392e3135342e302f32342d3234203d3e203434373731.roa (hash: Pgs5ueHQXHOzRUAnFpUKAel9Ig4WE+HMpXX4wHeR3SY=) 27: 38392e3131362e3131362e302f32322d3232203d3e203135343139.roa (hash: +6pKiWIr1xfpXpXCXiVMVMi0tFetJIO1JWmpuLH4c10=) 28: 3231372e392e3234322e302f32342d3234203d3e203135343139.roa (hash: mOAttZBNx/CTeO/Z3xtwFj9TNAzOHD7wWSzttDopHBY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 07:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:b8:c9:e5:23:99:42:34:10:db:9e:0c:32:e8:62:b3:6e:f7:22:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Validity Not Before: Oct 19 05:07:00 2025 GMT Not After : Oct 20 07:07:00 2025 GMT Subject: CN=36DBE769E9DBBDCF601DCF3A8854CD6C34CE1D70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:db:49:74:e2:59:3a:70:d0:66:98:fa:3a:15: df:31:7a:80:72:9d:8e:fc:ee:af:57:51:23:dd:b7: 30:27:cb:f8:3d:43:24:5a:02:9c:71:7f:5d:58:da: 4d:6f:ec:31:2f:cd:75:2d:49:3a:b3:1f:34:00:d0: bb:42:a7:94:30:03:f2:55:9b:63:d3:39:b4:3e:75: 47:62:13:ed:75:19:6d:6b:78:43:7e:fb:fd:ca:b1: 19:25:c7:dd:28:c6:96:a5:95:12:8b:1b:03:d5:bd: 3a:54:9c:cb:d8:bf:44:2f:61:f9:68:15:8f:0f:d3: 04:09:d4:c3:47:ae:aa:fd:56:3c:6a:39:7a:c3:35: f1:24:2d:90:68:69:0e:21:43:3a:c7:52:80:10:98: 6a:10:96:2c:dd:55:83:9a:a6:05:68:fe:3e:46:50: 05:ae:7c:be:38:d5:f1:34:a1:9d:bf:e7:b2:a6:ac: fe:4d:bf:c1:55:58:f2:e0:4e:05:f4:9b:0e:17:f3: 17:64:a2:f0:e0:80:66:33:db:07:20:22:68:61:bb: 29:b5:f4:1a:73:ad:5f:c7:5b:05:6d:5b:76:a3:de: 5b:af:8a:dc:1c:04:f4:10:7b:80:e9:03:42:e2:21: 4d:ae:4d:7f:83:85:02:39:98:2c:ba:63:8d:af:ad: 0c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:DB:E7:69:E9:DB:BD:CF:60:1D:CF:3A:88:54:CD:6C:34:CE:1D:70 X509v3 Authority Key Identifier: keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:ee:a9:55:f9:b0:ef:07:06:eb:59:b8:23:83:b2:c5:3b:45: da:fb:fd:6b:27:5e:79:3e:42:25:94:9b:b5:c9:f5:28:4a:86: 0d:e2:3b:d4:20:1c:f6:e0:10:58:35:5a:d3:29:1f:e2:15:da: 4b:56:06:9f:79:fb:95:19:24:b5:b0:0c:84:40:80:a4:d4:c9: 04:a2:8f:6b:ea:7b:2d:da:e6:18:18:d6:46:16:7b:be:be:97: f1:53:64:11:1c:cb:c6:21:bb:4c:02:4f:a8:57:62:d8:2c:1f: 89:2f:5c:34:2d:76:48:99:fc:bf:c2:ef:cd:d6:c3:27:ef:be: c2:53:5f:ba:75:e3:02:90:a9:71:72:9e:3c:c9:9c:15:10:3e: 24:d1:eb:1e:fd:30:5f:82:62:43:7a:2d:f4:85:78:c1:c8:b3: ef:f2:4a:c8:89:97:8d:28:3e:18:51:1b:75:80:37:57:4e:ad: aa:db:ff:f6:fa:db:af:dd:ea:ac:a9:13:9c:3e:bb:8b:87:52: fb:70:32:57:ca:d7:06:75:22:4e:9e:9b:1b:70:c7:b9:17:98: 7b:a3:65:09:e3:4e:12:8b:8b:2e:35:87:6c:05:02:18:8e:15: 1a:87:e4:1e:81:d7:2c:da:09:81:8e:1d:77:5e:50:b1:2f:b2: 33:30:a7:81 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUerjJ5SOZQjQQ254MMuhis273IvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmODU5OTdiMWI5YjM1OGUxYzQzZjM2NzY1YWEwYTRh MDIxNDRhZTAeFw0yNTEwMTkwNTA3MDBaFw0yNTEwMjAwNzA3MDBaMDMxMTAvBgNV BAMTKDM2REJFNzY5RTlEQkJEQ0Y2MDFEQ0YzQTg4NTRDRDZDMzRDRTFENzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR20l04lk6cNBmmPo6Fd8xeoBy nY787q9XUSPdtzAny/g9QyRaApxxf11Y2k1v7DEvzXUtSTqzHzQA0LtCp5QwA/JV m2PTObQ+dUdiE+11GW1reEN++/3KsRklx90oxpallRKLGwPVvTpUnMvYv0QvYflo FY8P0wQJ1MNHrqr9VjxqOXrDNfEkLZBoaQ4hQzrHUoAQmGoQlizdVYOapgVo/j5G UAWufL441fE0oZ2/57KmrP5Nv8FVWPLgTgX0mw4X8xdkovDggGYz2wcgImhhuym1 9BpzrV/HWwVtW3aj3luvitwcBPQQe4DpA0LiIU2uTX+DhQI5mCy6Y42vrQxvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUNtvnaenbvc9gHc86iFTNbDTOHXAwHwYDVR0j BBgwFoAUnfhZl7G5s1jhxD82dlqgpKAhRK4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDAyZTBiYTMtZmU2MC00NWIxLTkxNjAtODY4YTJmOGE0 M2IxLzMvOURGODU5OTdCMUI5QjM1OEUxQzQzRjM2NzY1QUEwQTRBMDIxNDRBRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25maFpsN0c1czFqaHhEODJkbHFncEtB aFJLNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJlMGJhMy1m ZTYwLTQ1YjEtOTE2MC04NjhhMmY4YTQzYjEvMy85REY4NTk5N0IxQjlCMzU4RTFD NDNGMzY3NjVBQTBBNEEwMjE0NEFFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASO6pVfmw7wcG61m4I4Oy xTtF2vv9aydeeT5CJZSbtcn1KEqGDeI71CAc9uAQWDVa0ykf4hXaS1YGn3n7lRkk tbAMhECApNTJBKKPa+p7LdrmGBjWRhZ7vr6X8VNkERzLxiG7TAJPqFdi2CwfiS9c NC12SJn8v8LvzdbDJ+++wlNfunXjApCpcXKePMmcFRA+JNHrHv0wX4JiQ3ot9IV4 wciz7/JKyImXjSg+GFEbdYA3V06tqtv/9vrbr93qrKkTnD67i4dS+3AyV8rXBnUi Tp6bG3DHuReYe6NlCeNOEouLLjWHbAUCGI4VGofkHoHXLNoJgY4dd15QsS+yMzCn gQ== -----END CERTIFICATE-----Generated at Sun Oct 19 17:31:18 2025 by rpki-client