$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft File: A1EE5D09A0F5D0D87611013175C62E35777DA926.mft (raw, json) Hash identifier: TKdOaeIlYuaeppSzPYPqLWW99OuCu6PJM/LaTQGHBJs= Subject key identifier: 23:39:70:41:53:AE:79:6F:55:8A:49:1A:D8:D8:B9:46:AD:75:C3:7F Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 Certificate issuer: /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Certificate serial: 2DB0A966CA1274D53392711F99928783DA557171 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft Manifest number: 028B Signing time: Sun 19 Oct 2025 14:59:56 +0000 Manifest this update: Sun 19 Oct 2025 14:54:56 +0000 Manifest next update: Mon 20 Oct 2025 18:11:56 +0000 Files and hashes: 1: 326131343a373538313a393330303a3a2f34302d3438203d3e20323039313039.roa (hash: TWxboGw6/lxhoMiWiDnyOg4O9SxsEOXusyizWuah2wo=) 2: 326131343a373538313a393032303a3a2f34342d3438203d3e203339373533.roa (hash: 0nNVfH0UNkgevPAH9ITuwY5tE24LlYCDjFx46F3vtM0=) 3: 326131343a373538313a393065653a3a2f34382d3438203d3e20323135333634.roa (hash: 5IFSShC1J1DPKr9fgEjy0DHzTqmR8W17B+sGrWUb29Q=) 4: 326131343a373538313a393063303a3a2f34342d3438203d3e203134343437.roa (hash: 1KwjyQC5mQq96/1cZ1aeVWaWGIQIpF6Ei+ZSWIfd5WM=) 5: 326131343a373538313a393130613a3a2f34382d3438203d3e20323135313438.roa (hash: g9TWsQZsTWz7mSDp6Y61gNZDSwAn6dADsEyVm1AJtlU=) 6: A1EE5D09A0F5D0D87611013175C62E35777DA926.crl (hash: vk76XSxqzrMVWTwtFZaO83jbtqLgeBiAJ2StbigjMdk=) 7: 326131343a373538313a393030303a3a2f33382d3338203d3e20323135333634.roa (hash: coziJfcvV7NZzAVbts1JQ6BKxT5yxFwdbwzsra8WCDw=) 8: 326131343a373538313a393030303a3a2f34342d3438203d3e20323135333634.roa (hash: a41Xyu+1QM63sJBLjRXDXCMByy5FuK1D59e4kuksRCE=) 9: 326131343a373538313a393066653a3a2f34382d3438203d3e20323135333634.roa (hash: MyeYfbLc0//rjwnR8ZJ3TnxqQq4JflTHlrUTLQvk3gU=) 10: 326131343a373538313a393066663a3a2f34382d3438203d3e20323135363137.roa (hash: JYfFIGSSsdhSc4V2wOJu9QFkSSC76MmCAjKsdTBmtQA=) 11: 326131343a373538313a393165313a3a2f34382d3438203d3e20323135333634.roa (hash: F9b5BNgK8TO7NWcYalz+qyjvcxyYqlq+/TYg6mk1sTI=) 12: 326131343a373538313a393165303a3a2f34382d3438203d3e20323135333634.roa (hash: 2aDuD/D+lIpzPYcnGpfR3f4GvH7bzD6tXNlt4SzLv7s=) 13: 326131343a373538313a393031303a3a2f34342d3438203d3e20313430393135.roa (hash: 34CzDRdWck3x5QdKwY21JLn4ljy5X8PbpWV6VL1UPl8=) 14: 326131343a373538313a393061303a3a2f34332d3438203d3e203134343437.roa (hash: jsviVwthOZBlV5+oRRFYDUvQF+OHc4iDYR8PVPHLwkA=) 15: 326131343a373538313a393062303a3a2f34342d3438203d3e203134343437.roa (hash: 0s1d24KMFu1kYJPCMrebtn4XcHECqVsweN9wGCszluU=) 16: 326131343a373538313a393230303a3a2f34302d3438203d3e20323039313039.roa (hash: pMn1lmNiSpZ9TgFB+IRiwlTd7+lbxKBF0vBWWTkkXYs=) 17: 326131343a373538313a393230303a3a2f34302d3438203d3e203134343437.roa (hash: kZ5VHXe1kAhX5tvSZsX77jhReBFDdvoZNrdYu896udw=) 18: 326131343a373538313a393230303a3a2f34302d3430203d3e203134343437.roa (hash: wCZcPZ1Lk7X2Qee1qTSfN0RGP0Z21kPGqT0D7sgtD64=) 19: 326131343a373538313a393130303a3a2f34382d3438203d3e20323134383431.roa (hash: TejNBoLvDqd6zzS1lptpFez+EdbwzXYJ6yM06vDQ9j0=) 20: 326131343a373538313a6666303a3a2f34382d3438203d3e20323135333634.roa (hash: nCwmmbP9gIjoEy95/v504iaQnyadcB1V8SB+J8/exJE=) 21: 326131343a373538313a393061303a3a2f34332d3438203d3e20323135333634.roa (hash: imEjvtvCCz1eqwuI8/eFHCFB+WwTlJEDfPXRombfVNU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 18:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:b0:a9:66:ca:12:74:d5:33:92:71:1f:99:92:87:83:da:55:71:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Validity Not Before: Oct 19 14:54:56 2025 GMT Not After : Oct 20 18:11:56 2025 GMT Subject: CN=2339704153AE796F558A491AD8D8B946AD75C37F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:eb:77:dd:4a:ad:65:c5:34:de:da:75:49:4b: 2d:c6:61:19:b7:f9:e5:f9:d8:89:5f:25:69:ed:c4: af:86:32:b7:17:e2:c3:e1:4b:92:7e:28:f3:5c:40: 19:ea:c9:75:a4:50:de:f0:41:af:f7:2e:71:d3:50: 07:dd:11:91:50:a9:2b:c9:6d:3d:33:01:9c:5f:0d: 0c:6b:be:ba:d4:2f:59:b4:ff:de:1a:db:b3:23:99: 11:d0:50:24:1d:0f:47:71:ed:cb:59:b8:c7:c5:9e: df:e5:db:ca:db:4b:8e:4d:80:96:36:4a:7e:3a:23: 73:f2:8c:f1:8a:bb:aa:7b:15:a8:ae:6e:40:74:96: ef:c0:8c:f1:eb:23:19:15:a8:f8:ab:53:2c:34:a5: f7:16:bb:98:9e:ab:71:2e:e8:da:d4:94:88:f0:6a: 90:6d:30:b5:ae:a5:cb:19:f4:82:61:ee:78:53:ab: 68:7d:54:76:45:a5:80:50:5d:35:97:51:34:79:f6: 4f:a4:fa:f4:05:a0:8f:d4:c8:65:03:d5:4a:d7:d8: ef:89:4d:5c:0e:15:e9:e3:0a:f8:4d:11:4d:9b:af: 27:fa:8a:83:c2:98:4e:3b:8f:5f:bd:19:df:29:73: 3d:d0:74:f2:6c:65:7f:86:16:ff:31:96:c4:d4:7d: 8d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:39:70:41:53:AE:79:6F:55:8A:49:1A:D8:D8:B9:46:AD:75:C3:7F X509v3 Authority Key Identifier: keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:c1:5b:32:08:ba:49:0a:80:e8:92:d1:e2:0f:ff:8d:09:ae: 0f:e0:a2:23:ef:7e:95:72:91:d3:d7:6d:c6:b6:d2:2d:e1:ad: 4f:49:57:47:19:bb:45:f7:37:f6:a2:80:5d:e3:95:e8:c0:53: f9:73:e9:bf:b9:78:9e:87:ee:03:81:29:3e:27:c6:8d:8a:cd: b2:b4:cb:cc:30:df:4d:76:9c:f6:6b:6e:5c:dc:f0:0d:64:6f: 1a:6b:b2:1c:ce:3e:0c:cd:e5:75:ea:fa:e6:e2:b2:52:12:9e: 06:d3:f6:f4:b7:be:90:d2:a3:71:df:ef:97:d5:b7:c2:97:b2: ca:f8:e0:bf:5e:db:0f:f4:c1:fb:62:0e:b3:be:db:21:21:54: c9:1c:be:f8:f3:e2:ae:7b:6a:6d:83:50:de:e2:a5:ce:3d:43: 58:6a:3c:c0:e5:91:4b:82:5a:81:06:a2:f8:af:ad:3a:53:c5: 6b:f1:2a:dd:d2:69:bb:c4:fa:74:1c:d5:3c:ec:8e:2c:95:99: f1:2a:12:ba:13:92:5d:3d:82:3f:88:e6:f1:c4:c9:1a:66:54: 69:a3:de:f9:af:c6:3c:01:ab:84:ac:f0:ab:4d:d5:ef:ea:5e: 3b:74:bc:2f:7e:8a:05:45:ff:4a:80:a1:82:d7:ab:43:71:d1: bf:24:d8:88 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULbCpZsoSdNUzknEfmZKHg9pVcXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3 NzdEQTkyNjAeFw0yNTEwMTkxNDU0NTZaFw0yNTEwMjAxODExNTZaMDMxMTAvBgNV BAMTKDIzMzk3MDQxNTNBRTc5NkY1NThBNDkxQUQ4RDhCOTQ2QUQ3NUMzN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw63fdSq1lxTTe2nVJSy3GYRm3 +eX52IlfJWntxK+GMrcX4sPhS5J+KPNcQBnqyXWkUN7wQa/3LnHTUAfdEZFQqSvJ bT0zAZxfDQxrvrrUL1m0/94a27MjmRHQUCQdD0dx7ctZuMfFnt/l28rbS45NgJY2 Sn46I3PyjPGKu6p7FaiubkB0lu/AjPHrIxkVqPirUyw0pfcWu5ieq3Eu6NrUlIjw apBtMLWupcsZ9IJh7nhTq2h9VHZFpYBQXTWXUTR59k+k+vQFoI/UyGUD1UrX2O+J TVwOFenjCvhNEU2bryf6ioPCmE47j1+9Gd8pcz3QdPJsZX+GFv8xlsTUfY1dAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUIzlwQVOueW9Vikka2Ni5Rq11w38wHwYDVR0j BBgwFoAUoe5dCaD10Nh2EQExdcYuNXd9qSYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODU1YzdkNWEtMTVjNC00NTg5LTg1ZmEtYjQ5MWEwNzEw NDhjLzAvQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3NzdEQTkyNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BMUVFNUQwOUEwRjVEMEQ4NzYxMTAxMzE3 NUM2MkUzNTc3N0RBOTI2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg1NWM3ZDVhLTE1YzQtNDU4OS04NWZhLWI0OTFhMDcxMDQ4Yy8wL0ExRUU1RDA5 QTBGNUQwRDg3NjExMDEzMTc1QzYyRTM1Nzc3REE5MjYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBqwVsy CLpJCoDoktHiD/+NCa4P4KIj736VcpHT123GttIt4a1PSVdHGbtF9zf2ooBd45Xo wFP5c+m/uXieh+4DgSk+J8aNis2ytMvMMN9Ndpz2a25c3PANZG8aa7Iczj4MzeV1 6vrm4rJSEp4G0/b0t76Q0qNx3++X1bfCl7LK+OC/XtsP9MH7Yg6zvtshIVTJHL74 8+Kue2ptg1De4qXOPUNYajzA5ZFLglqBBqL4r606U8Vr8Srd0mm7xPp0HNU87I4s lZnxKhK6E5JdPYI/iObxxMkaZlRpo975r8Y8AauErPCrTdXv6l47dLwvfooFRf9K gKGC16tDcdG/JNiI -----END CERTIFICATE-----Generated at Mon Oct 20 04:57:28 2025 by rpki-client