$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.mft File: 21291D2963EE74682B10BECBA6060EF246C76881.mft (raw, json) Hash identifier: Xem2A/vf3IapNLgHdJTcBfJKOaeQnbi1VL81cxyPAeU= Subject key identifier: 11:53:F6:5F:1E:50:BB:6E:CE:07:FB:5B:72:D3:F4:8F:25:25:E1:81 Authority key identifier: 21:29:1D:29:63:EE:74:68:2B:10:BE:CB:A6:06:0E:F2:46:C7:68:81 Certificate issuer: /CN=21291D2963EE74682B10BECBA6060EF246C76881 Certificate serial: 0BAF64D6CC01AB3707F1A044910864B694279BEF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21291D2963EE74682B10BECBA6060EF246C76881.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.mft Manifest number: 55 Signing time: Sun 19 Oct 2025 20:34:27 +0000 Manifest this update: Sun 19 Oct 2025 20:29:27 +0000 Manifest next update: Mon 20 Oct 2025 21:44:27 +0000 Files and hashes: 1: 326131343a373538333a323030303a3a2f34312d313238203d3e20323133343133.roa (hash: qcv62vhft+CfRefcIljQMYwhTtHw5pqiJA6YzH0JoaE=) 2: 326131343a373538333a323038343a3a2f34362d313238203d3e20323035393431.roa (hash: PTSU8qGNCimGfVZLMLacuvM/VXxIUmWAazoLI57rq4o=) 3: 326131343a373538333a326230303a3a2f34322d313238203d3e20323134323035.roa (hash: VYyQ9HRup4ddqrcoUKfcEWZA3flgJAKyvMn8Qb2hQCc=) 4: 326131343a373538333a323038303a3a2f34362d313238203d3e20323035393431.roa (hash: kC7ihYm/R5OERXYsLtyhxzyEmlKI1XwHLSptM6n0vvg=) 5: 21291D2963EE74682B10BECBA6060EF246C76881.crl (hash: kmgGXf3Zl7TaxQBo23SBUTxlqPPNCTNxrCNhMu7Twjk=) 6: 326131343a373538333a323030303a3a2f33362d313238203d3e20323035393431.roa (hash: bttdf07pV56EPNWCClejJ5VLezHQTqirYk24CtzpecY=) 7: 326131343a373538303a666639303a3a2f34342d313238203d3e20323035393431.roa (hash: 5FD/Mehv7v0xNezRDRW9iBPyN5Dfwk8GJ9l323IIqtY=) 8: 326131343a373538333a326130303a3a2f34302d313238203d3e20323131323831.roa (hash: 7kcvc7XAv56qFVmafM/D1iw7yZ48tgW4TPaORt+OViQ=) 9: 326131343a373538333a323930303a3a2f34302d313238203d3e20323134363339.roa (hash: Ig0MdxpLUWBFH0/Ucxj7iGLUl0RuOHs0CxE43qARgYQ=) 10: 326131343a373538333a326663303a3a2f34322d313238203d3e20323035393431.roa (hash: QTSey6Hp5GxpO8W9pZDSl/g5MxHZNI9D5mYgXqg8BF0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21291D2963EE74682B10BECBA6060EF246C76881.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:af:64:d6:cc:01:ab:37:07:f1:a0:44:91:08:64:b6:94:27:9b:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21291D2963EE74682B10BECBA6060EF246C76881 Validity Not Before: Oct 19 20:29:27 2025 GMT Not After : Oct 20 21:44:27 2025 GMT Subject: CN=1153F65F1E50BB6ECE07FB5B72D3F48F2525E181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f4:61:02:1a:08:be:cc:48:f1:14:c1:28:c6: af:32:17:a3:b5:1e:0b:7a:63:00:a2:c1:42:42:ab: 53:c3:86:5f:d4:84:37:77:65:ba:4d:35:6b:4a:a1: 05:eb:27:48:36:74:6b:4f:b8:00:b8:3b:f9:cf:ad: 77:40:c2:60:35:8b:92:45:34:55:12:2e:94:d1:de: 22:85:72:d4:c3:5e:a8:f7:b1:ec:f1:ce:5a:64:13: bc:99:2f:8c:1b:8a:05:7d:43:83:a2:72:30:dc:b2: c9:aa:87:a4:86:f2:b1:80:39:8b:b9:c9:69:72:ce: 37:b0:1c:27:e7:99:1f:e1:39:63:58:5a:b3:3d:ee: 01:ed:16:79:14:72:eb:55:ca:27:b6:8a:c8:6f:c3: 8c:ca:ea:cd:02:b6:c3:86:6f:2e:ce:62:7a:65:1f: 2c:9f:8f:c0:70:bc:20:0b:9a:be:d2:be:19:d7:e0: 87:0f:0f:94:41:02:33:9d:19:72:12:7b:d6:f3:c2: b7:33:ef:1d:fe:0e:ee:1c:9e:fa:6d:3b:1c:41:31: 79:b5:97:da:7d:4d:32:27:8c:d9:91:50:79:ab:62: ca:ec:9e:b7:83:24:95:5b:da:c1:f3:19:d6:32:4f: 24:76:6a:4e:9f:c8:19:13:c3:02:d7:54:ee:62:be: 24:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:53:F6:5F:1E:50:BB:6E:CE:07:FB:5B:72:D3:F4:8F:25:25:E1:81 X509v3 Authority Key Identifier: keyid:21:29:1D:29:63:EE:74:68:2B:10:BE:CB:A6:06:0E:F2:46:C7:68:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21291D2963EE74682B10BECBA6060EF246C76881.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:2a:09:dc:a0:09:18:8e:70:39:f5:65:9e:d2:67:77:9a:69: fe:7d:6c:91:ea:e0:98:5f:26:5e:38:ad:69:84:b0:86:bd:56: 34:46:b8:f9:ba:1a:62:70:79:8f:22:72:06:ed:70:27:f8:b5: d7:7c:3c:67:98:fe:fb:b8:8c:d4:a3:ff:c5:6d:e1:12:27:69: 14:ba:09:29:f1:07:15:4b:ba:0a:3d:0c:0e:17:5b:cb:e7:05: 3c:de:10:a4:ed:a7:57:48:b7:b4:b4:87:24:f7:88:da:6f:f7: 46:13:cb:26:74:63:cc:e8:fa:33:22:25:89:2c:bf:12:6d:4b: 9b:06:fb:f6:6c:a3:3c:e9:a4:3a:c5:90:1e:19:62:a6:c4:1c: dc:e0:7a:66:84:14:39:76:b6:0a:cf:c4:0b:ab:a7:21:37:72: ac:83:bb:79:8d:f5:ea:fe:c5:b1:37:50:1c:9b:99:e6:9b:7d: 5d:74:95:42:f3:d6:80:72:fa:e7:e7:d2:35:d1:2b:24:f4:8c: 55:6e:6a:6f:72:1e:4c:8d:98:9b:bd:3c:c5:75:b8:c2:f3:e2: 43:fd:41:42:0f:11:b5:87:04:94:5c:ca:63:ea:90:07:46:78: 51:a0:40:d4:da:a1:00:ea:17:13:48:0b:25:b1:23:a9:40:1e: 11:df:f0:73 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUC69k1swBqzcH8aBEkQhktpQnm+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEyOTFEMjk2M0VFNzQ2ODJCMTBCRUNCQTYwNjBFRjI0 NkM3Njg4MTAeFw0yNTEwMTkyMDI5MjdaFw0yNTEwMjAyMTQ0MjdaMDMxMTAvBgNV BAMTKDExNTNGNjVGMUU1MEJCNkVDRTA3RkI1QjcyRDNGNDhGMjUyNUUxODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV9GECGgi+zEjxFMEoxq8yF6O1 Hgt6YwCiwUJCq1PDhl/UhDd3ZbpNNWtKoQXrJ0g2dGtPuAC4O/nPrXdAwmA1i5JF NFUSLpTR3iKFctTDXqj3sezxzlpkE7yZL4wbigV9Q4OicjDcssmqh6SG8rGAOYu5 yWlyzjewHCfnmR/hOWNYWrM97gHtFnkUcutVyie2ishvw4zK6s0CtsOGby7OYnpl Hyyfj8BwvCALmr7SvhnX4IcPD5RBAjOdGXISe9bzwrcz7x3+Du4cnvptOxxBMXm1 l9p9TTInjNmRUHmrYsrsnreDJJVb2sHzGdYyTyR2ak6fyBkTwwLXVO5iviT/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUEVP2Xx5Qu27OB/tbctP0jyUl4YEwHwYDVR0j BBgwFoAUISkdKWPudGgrEL7LpgYO8kbHaIEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzgvMjEyOTFEMjk2M0VFNzQ2ODJCMTBCRUNCQTYwNjBFRjI0NkM3Njg4MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMTI5MUQyOTYzRUU3NDY4MkIxMEJFQ0JB NjA2MEVGMjQ2Qzc2ODgxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY4YWJhYmJiLWYwNDgtNGRlMS05MjA2LThkNDBmMDcxODA4Yi84LzIxMjkxRDI5 NjNFRTc0NjgyQjEwQkVDQkE2MDYwRUYyNDZDNzY4ODEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAdKgnc oAkYjnA59WWe0md3mmn+fWyR6uCYXyZeOK1phLCGvVY0Rrj5uhpicHmPInIG7XAn +LXXfDxnmP77uIzUo//FbeESJ2kUugkp8QcVS7oKPQwOF1vL5wU83hCk7adXSLe0 tIck94jab/dGE8smdGPM6PozIiWJLL8SbUubBvv2bKM86aQ6xZAeGWKmxBzc4Hpm hBQ5drYKz8QLq6chN3Ksg7t5jfXq/sWxN1Acm5nmm31ddJVC89aAcvrn59I10Ssk 9IxVbmpvch5MjZibvTzFdbjC8+JD/UFCDxG1hwSUXMpj6pAHRnhRoEDU2qEA6hcT SAslsSOpQB4R3/Bz -----END CERTIFICATE-----Generated at Mon Oct 20 04:27:02 2025 by rpki-client