$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft File: 38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json) Hash identifier: GGpqeL+Ml4QmJ7QbcjZHdUZnqI+zCPbDQXiGYD4GcvM= Subject key identifier: 52:44:2E:54:68:A1:AE:61:E5:F3:53:FC:A4:C2:C4:37:56:C4:EB:D3 Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8 Certificate serial: 62ABD64C2B3A4810BC099475B8BC0CED8FA6D386 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft Manifest number: 01AB Signing time: Sun 19 Oct 2025 02:26:35 +0000 Manifest this update: Sun 19 Oct 2025 02:21:35 +0000 Manifest next update: Mon 20 Oct 2025 05:29:35 +0000 Files and hashes: 1: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: /UuXq/SkWF47gXFnW/T4vEllXZulBrt5hUqt6XmiJns=) 2: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: YFUHOvZUTuDXo1v/ldHHqjI9VjtTCBbJBPcqOziNAKY=) 3: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: Zxw7HANZ4fSS/h6IwZB62HG+NMCfSONfC+RPVG/FTSE=) 4: 33312e3138352e3130352e302f32342d3234203d3e203439353932.roa (hash: JlMtTfTfP9mAdMBrmYW2itCr9phEwZpX3sQKtokqaZw=) 5: 34362e3138322e31382e302f32332d3234203d3e203433383437.roa (hash: Da5w/Bxnka7S5rOrrg5UFoYVO7GdFYJVnpZd9dGl78w=) 6: 326130323a323937303a3a2f32392d3438203d3e203433383437.roa (hash: Kp3fSAxGQhZt59WSUhuk3xyV289hXnpQJ6XN2ox7Plw=) 7: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: bxI8j0Q43fNYwFfEpnx3zZA+WfxxHOFpyLP15cwiRJc=) 8: 34362e3138322e31362e302f32332d3234203d3e203433383437.roa (hash: vT5tduJXQWPYe55NqnUZ1/bCxXQ97h9LLqUTKt2qn1I=) 9: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: 01LOWf7MxhRX+2Op4rDN5W7ucn6FteIUTuCGEpIiXqg=) 10: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: 2aiAtkkpFlb5J4UKg3KwRnaG7ituhGEa6s/dcTUAgJQ=) 11: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: IZvZ+VfTyAt33E3s9zHXKOh5faYLCmkSoGto59/2NSw=) 12: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: tjhKwoa/z/ms3eL96lf+MyeXfH8SFjq92hWldF9BNCA=) 13: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: jK9tTJ3HWkDECaNJJZCeSwWGUPLGyK3Y5TeyBPZZ8ds=) 14: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: mN3Qu59H2oC79ZObPpdN6ubuCwdpq+KwMSfQr8+kwt4=) 15: 3138352e35382e3135372e302f32342d3234203d3e2032393134.roa (hash: lpWXt6uFvU2PZ1sNhgr10rMfQuglN6ZjbNveDXRK2tg=) 16: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: DOt+xOMDogaXujbawrGL0U15zCSEQeK/RAeOdZ56ezk=) 17: 33312e3138352e3130372e302f32342d3234203d3e20323134323038.roa (hash: iqiKl6+YIrHEBq6ZgXjEwpHNvYPhUvsfMc60LM1HGfk=) 18: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: jGy7NRXxpQ8Adk8KlwvLUXW9fgmGYykhrzR6k8tJHIg=) 19: 3138352e35382e3135372e302f32342d3234203d3e2039333034.roa (hash: ecPrVI69N/vnSd3FE9LMlI9j3yoUAyDEH+/p4MpTJaY=) 20: 3138352e35382e3135382e302f32342d3234203d3e203537303433.roa (hash: 2rLX+VLjC2xO1KxOS+n2CnvGjfDyy5LLRhtxUy0z5HI=) 21: 33312e3138352e3130342e302f32342d3234203d3e203433383437.roa (hash: ooBmQ0XsExl9P6cs22gk7QC3kfjfWk/6TOw3sS2GKWM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 05:29:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:ab:d6:4c:2b:3a:48:10:bc:09:94:75:b8:bc:0c:ed:8f:a6:d3:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8 Validity Not Before: Oct 19 02:21:35 2025 GMT Not After : Oct 20 05:29:35 2025 GMT Subject: CN=52442E5468A1AE61E5F353FCA4C2C43756C4EBD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9a:58:8c:e7:ec:1d:cd:ca:02:67:ba:5d:4a: a7:1a:69:8d:26:ca:c9:3e:4c:97:33:aa:0d:9f:9b: 56:c0:ba:cf:6f:e4:96:80:f6:12:02:a8:24:40:11: 07:03:08:fc:7f:ea:95:e6:4c:35:4d:cf:28:ad:09: de:04:d5:ff:1e:80:d7:83:31:72:b0:5a:b4:ec:09: 5b:e7:ae:bc:8d:e6:93:8d:38:0a:d6:f3:35:89:fa: 6a:ab:48:53:3a:8c:0e:13:54:4c:b0:52:9a:3b:eb: c2:f3:5a:66:10:57:95:e7:9e:ba:5c:d3:c3:9d:c6: a8:7c:b2:bf:8f:26:a2:fc:00:f8:78:8c:07:c8:39: dc:ae:0e:17:49:13:04:90:38:4c:68:2f:e9:4e:2d: ae:f7:e7:24:f5:0a:b1:28:e8:f3:d8:c9:eb:6b:64: 3f:75:a4:bd:56:eb:24:2e:ff:14:c7:71:98:a5:12: b7:8c:70:54:fc:2b:a1:dd:c4:1e:41:b6:0c:40:fa: 46:2c:e7:1a:a2:0c:31:46:9d:a6:40:1f:ed:12:93: 5d:a3:78:2b:b1:e2:b0:d0:8c:f5:ca:b4:09:3f:0c: 60:91:85:d8:d3:40:9f:99:d0:9b:32:fd:58:24:50: 7f:ff:fe:c0:a5:f0:dc:e2:2b:1f:2f:2b:75:12:74: b1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:44:2E:54:68:A1:AE:61:E5:F3:53:FC:A4:C2:C4:37:56:C4:EB:D3 X509v3 Authority Key Identifier: keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:00:d5:a6:32:9d:38:8d:9f:e7:5e:41:fe:78:ad:79:e5:ca: 8b:86:0a:21:91:7c:7c:68:84:45:b2:d3:81:b5:a6:0e:1b:dd: cb:61:d4:6a:86:7e:15:8e:5f:23:60:a0:3b:64:5b:f3:38:41: 3e:ad:ad:49:fb:0a:0e:f1:57:c1:5c:5b:a4:24:0c:95:4b:f7: d9:a8:83:25:d5:bc:cf:df:d5:fd:33:f1:30:7d:bd:8a:92:b4: cf:b3:0b:d8:07:30:41:2e:67:72:5f:97:fb:ca:7e:25:ae:04: 21:51:03:2c:89:bc:ea:64:3b:b3:5e:d4:ad:b1:6d:b2:31:db: 69:46:71:ab:5f:41:51:36:1f:d5:48:f1:f7:79:87:82:1f:57: 5f:d3:d5:2a:60:38:b9:21:fb:a8:d2:6f:c2:0e:07:d4:64:11: 07:7f:bc:ad:ca:d9:7f:8a:9b:f5:8c:c2:0d:1b:bc:a7:07:10: 2c:59:2b:70:a3:4c:4a:87:e4:01:4a:a7:f4:da:56:43:67:20: fa:99:ff:4d:05:87:f2:68:80:c0:b3:4e:44:56:39:b9:bc:f5: db:12:e7:03:10:3d:88:17:20:a5:4b:4c:90:d3:e3:86:13:e7: 91:47:f8:70:c4:80:f9:18:f6:13:6e:46:87:cc:7a:af:7a:ab: c5:c0:14:75 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYqvWTCs6SBC8CZR1uLwM7Y+m04YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhhOTNjODFlY2QzMDhlNmE3NjMyNzE3MDQ1YjNkMzUx NTAxMjBmODAeFw0yNTEwMTkwMjIxMzVaFw0yNTEwMjAwNTI5MzVaMDMxMTAvBgNV BAMTKDUyNDQyRTU0NjhBMUFFNjFFNUYzNTNGQ0E0QzJDNDM3NTZDNEVCRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYmliM5+wdzcoCZ7pdSqcaaY0m ysk+TJczqg2fm1bAus9v5JaA9hICqCRAEQcDCPx/6pXmTDVNzyitCd4E1f8egNeD MXKwWrTsCVvnrryN5pONOArW8zWJ+mqrSFM6jA4TVEywUpo768LzWmYQV5Xnnrpc 08Odxqh8sr+PJqL8APh4jAfIOdyuDhdJEwSQOExoL+lOLa735yT1CrEo6PPYyetr ZD91pL1W6yQu/xTHcZilEreMcFT8K6HdxB5BtgxA+kYs5xqiDDFGnaZAH+0Sk12j eCux4rDQjPXKtAk/DGCRhdjTQJ+Z0Jsy/VgkUH///sCl8NziKx8vK3USdLFHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUUkQuVGihrmHl81P8pMLEN1bE69MwHwYDVR0j BBgwFoAUOKk8gezTCOanYycXBFs9NRUBIPgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgyYzY1YjktNzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZm OWI4LzAvMzhBOTNDODFFQ0QzMDhFNkE3NjMyNzE3MDQ1QjNEMzUxNTAxMjBGOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09LazhnZXpUQ09hbll5Y1hCRnM5TlJV QklQZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODJjNjViOS03 MjVkLTRiYjAtYTIxNi04ZTc3MTkxZmY5YjgvMC8zOEE5M0M4MUVDRDMwOEU2QTc2 MzI3MTcwNDVCM0QzNTE1MDEyMEY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANADVpjKdOI2f515B/nit eeXKi4YKIZF8fGiERbLTgbWmDhvdy2HUaoZ+FY5fI2CgO2Rb8zhBPq2tSfsKDvFX wVxbpCQMlUv32aiDJdW8z9/V/TPxMH29ipK0z7ML2AcwQS5ncl+X+8p+Ja4EIVED LIm86mQ7s17UrbFtsjHbaUZxq19BUTYf1Ujx93mHgh9XX9PVKmA4uSH7qNJvwg4H 1GQRB3+8rcrZf4qb9YzCDRu8pwcQLFkrcKNMSofkAUqn9NpWQ2cg+pn/TQWH8miA wLNORFY5ubz12xLnAxA9iBcgpUtMkNPjhhPnkUf4cMSA+Rj2E25Gh8x6r3qrxcAU dQ== -----END CERTIFICATE-----Generated at Sun Oct 19 20:42:15 2025 by rpki-client