$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft File: 38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json) Hash identifier: YP37QNk3IPJ+0uDU5bWnvMXMeyZIYPiNnvGyCBmHI2E= Subject key identifier: 52:F3:30:F7:43:59:CF:84:77:9D:5D:03:E2:99:15:84:D8:08:26:17 Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8 Certificate serial: 4AE907439B93A16DDD19AF51FAFE80E40B0AF4C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft Manifest number: 015E Signing time: Sat 23 Aug 2025 06:37:33 +0000 Manifest this update: Sat 23 Aug 2025 06:32:33 +0000 Manifest next update: Sun 24 Aug 2025 07:15:33 +0000 Files and hashes: 1: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: DOt+xOMDogaXujbawrGL0U15zCSEQeK/RAeOdZ56ezk=) 2: 33312e3138352e3130372e302f32342d3234203d3e20323134323038.roa (hash: iqiKl6+YIrHEBq6ZgXjEwpHNvYPhUvsfMc60LM1HGfk=) 3: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: Zxw7HANZ4fSS/h6IwZB62HG+NMCfSONfC+RPVG/FTSE=) 4: 3138352e35382e3135372e302f32342d3234203d3e2039333034.roa (hash: ecPrVI69N/vnSd3FE9LMlI9j3yoUAyDEH+/p4MpTJaY=) 5: 326130323a323937303a3a2f32392d3438203d3e203433383437.roa (hash: Kp3fSAxGQhZt59WSUhuk3xyV289hXnpQJ6XN2ox7Plw=) 6: 33312e3138352e3130352e302f32342d3234203d3e20313335333931.roa (hash: UHjaYZdaJB6lUIpYnqhxUJeEQvDh7dO7siLVcmgE1HM=) 7: 3138352e35382e3135372e302f32342d3234203d3e2032393134.roa (hash: lpWXt6uFvU2PZ1sNhgr10rMfQuglN6ZjbNveDXRK2tg=) 8: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: jK9tTJ3HWkDECaNJJZCeSwWGUPLGyK3Y5TeyBPZZ8ds=) 9: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: mN3Qu59H2oC79ZObPpdN6ubuCwdpq+KwMSfQr8+kwt4=) 10: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: 2aiAtkkpFlb5J4UKg3KwRnaG7ituhGEa6s/dcTUAgJQ=) 11: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: YFUHOvZUTuDXo1v/ldHHqjI9VjtTCBbJBPcqOziNAKY=) 12: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: 01LOWf7MxhRX+2Op4rDN5W7ucn6FteIUTuCGEpIiXqg=) 13: 34362e3138322e31362e302f32332d3234203d3e203433383437.roa (hash: vT5tduJXQWPYe55NqnUZ1/bCxXQ97h9LLqUTKt2qn1I=) 14: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: /UuXq/SkWF47gXFnW/T4vEllXZulBrt5hUqt6XmiJns=) 15: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: jGy7NRXxpQ8Adk8KlwvLUXW9fgmGYykhrzR6k8tJHIg=) 16: 34362e3138322e31382e302f32332d3234203d3e203433383437.roa (hash: Da5w/Bxnka7S5rOrrg5UFoYVO7GdFYJVnpZd9dGl78w=) 17: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: bxI8j0Q43fNYwFfEpnx3zZA+WfxxHOFpyLP15cwiRJc=) 18: 3138352e35382e3135382e302f32342d3234203d3e203537303433.roa (hash: 2rLX+VLjC2xO1KxOS+n2CnvGjfDyy5LLRhtxUy0z5HI=) 19: 33312e3138352e3130342e302f32342d3234203d3e203433383437.roa (hash: ooBmQ0XsExl9P6cs22gk7QC3kfjfWk/6TOw3sS2GKWM=) 20: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: XietcH3yoA6OzRqd/+gvFO78WYLumUDAz7+LHPRgDV0=) 21: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: tjhKwoa/z/ms3eL96lf+MyeXfH8SFjq92hWldF9BNCA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:e9:07:43:9b:93:a1:6d:dd:19:af:51:fa:fe:80:e4:0b:0a:f4:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8 Validity Not Before: Aug 23 06:32:33 2025 GMT Not After : Aug 24 07:15:33 2025 GMT Subject: CN=52F330F74359CF84779D5D03E2991584D8082617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:75:f9:7b:26:3e:9d:93:a1:1d:ca:8c:50:7c: 7a:f5:09:9a:f1:f7:87:e1:b9:13:d0:e5:f1:a9:a1: f0:1d:97:37:59:74:ac:53:00:e0:cb:d0:b7:b0:8e: 86:0c:56:92:4f:bc:e1:22:cb:cb:14:f7:98:bd:c5: 5c:4b:ae:f1:97:0f:64:59:65:0b:ff:fa:89:a3:93: ac:43:ee:58:85:ca:28:bc:61:ee:50:d2:e2:27:02: 07:0d:c4:45:47:80:99:83:69:68:1d:85:e5:e4:3e: 0a:9f:d4:67:6a:ec:93:4f:4d:d2:93:77:c0:d5:24: 24:57:b9:ef:bc:c3:72:e6:fa:ac:3d:86:70:4c:d6: 54:dc:ad:d8:8b:0d:b3:89:a7:1a:ed:dc:df:68:32: f9:ea:fc:d2:a4:58:f9:85:44:94:25:c6:3f:33:95: 14:d0:0d:91:91:68:d8:bc:90:d4:d3:23:01:a3:ae: df:35:1c:1f:35:32:d9:34:0e:b9:5d:17:db:ea:03: fb:85:8e:27:bc:85:c0:ce:41:b6:4c:5f:99:37:0c: d0:a4:64:49:8f:ac:da:24:d8:69:22:04:ab:95:60: fb:cf:fc:ad:ce:7c:56:74:9c:ea:ed:8c:8f:6c:cd: e7:5e:1f:cb:20:b9:e9:5f:3d:9a:64:0a:44:7f:0b: 99:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F3:30:F7:43:59:CF:84:77:9D:5D:03:E2:99:15:84:D8:08:26:17 X509v3 Authority Key Identifier: keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:59:c5:49:32:12:02:e9:f0:e2:93:04:02:b9:05:49:3e:3e: 41:a5:76:be:e6:25:8c:86:81:60:72:4e:ac:ee:2f:ce:7d:48: 84:3e:94:d0:e0:be:3c:a4:2b:1c:da:e7:4d:56:f1:d8:cf:f4: fb:e7:c2:9b:e0:7a:c6:43:ee:f2:9e:b8:75:22:27:81:84:85: 4b:44:c9:d5:8c:cb:a5:21:8a:00:47:30:d3:17:16:c0:8d:3c: 1b:8c:30:5d:d4:2f:e4:98:59:7c:cb:1c:eb:17:9b:67:b7:90: 4b:10:e0:b3:1d:15:96:83:46:37:b2:f2:6b:f5:a9:ad:80:27: 22:86:6c:4c:18:79:b8:16:7b:d4:40:1c:43:69:aa:53:17:ca: 2f:9e:9d:6f:47:ac:f6:2e:c7:09:68:91:16:a2:3b:ec:52:b3: bc:70:a3:68:4d:1d:a4:d3:ea:29:1a:a1:89:94:9f:7b:80:a2: 7f:92:ce:d6:0c:5e:ad:13:3c:07:4d:c6:7f:ad:eb:c4:d5:bc: 24:1f:9d:be:1b:3c:9a:d3:39:2c:80:2a:bc:41:0a:e2:47:10: 8d:7f:60:0f:9d:ed:5d:66:82:47:a5:9b:e3:4c:46:7b:4f:60: df:cf:b6:76:d5:a3:83:1f:4d:8e:e3:7e:3b:ec:03:24:80:9c: af:32:ac:27 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUSukHQ5uToW3dGa9R+v6A5AsK9MYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhhOTNjODFlY2QzMDhlNmE3NjMyNzE3MDQ1YjNkMzUx NTAxMjBmODAeFw0yNTA4MjMwNjMyMzNaFw0yNTA4MjQwNzE1MzNaMDMxMTAvBgNV BAMTKDUyRjMzMEY3NDM1OUNGODQ3NzlENUQwM0UyOTkxNTg0RDgwODI2MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXdfl7Jj6dk6EdyoxQfHr1CZrx 94fhuRPQ5fGpofAdlzdZdKxTAODL0LewjoYMVpJPvOEiy8sU95i9xVxLrvGXD2RZ ZQv/+omjk6xD7liFyii8Ye5Q0uInAgcNxEVHgJmDaWgdheXkPgqf1Gdq7JNPTdKT d8DVJCRXue+8w3Lm+qw9hnBM1lTcrdiLDbOJpxrt3N9oMvnq/NKkWPmFRJQlxj8z lRTQDZGRaNi8kNTTIwGjrt81HB81Mtk0DrldF9vqA/uFjie8hcDOQbZMX5k3DNCk ZEmPrNok2GkiBKuVYPvP/K3OfFZ0nOrtjI9szedeH8sguelfPZpkCkR/C5l5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUUvMw90NZz4R3nV0D4pkVhNgIJhcwHwYDVR0j BBgwFoAUOKk8gezTCOanYycXBFs9NRUBIPgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgyYzY1YjktNzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZm OWI4LzAvMzhBOTNDODFFQ0QzMDhFNkE3NjMyNzE3MDQ1QjNEMzUxNTAxMjBGOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09LazhnZXpUQ09hbll5Y1hCRnM5TlJV QklQZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODJjNjViOS03 MjVkLTRiYjAtYTIxNi04ZTc3MTkxZmY5YjgvMC8zOEE5M0M4MUVDRDMwOEU2QTc2 MzI3MTcwNDVCM0QzNTE1MDEyMEY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVnFSTISAunw4pMEArkF ST4+QaV2vuYljIaBYHJOrO4vzn1IhD6U0OC+PKQrHNrnTVbx2M/0++fCm+B6xkPu 8p64dSIngYSFS0TJ1YzLpSGKAEcw0xcWwI08G4wwXdQv5JhZfMsc6xebZ7eQSxDg sx0VloNGN7Lya/WprYAnIoZsTBh5uBZ71EAcQ2mqUxfKL56db0es9i7HCWiRFqI7 7FKzvHCjaE0dpNPqKRqhiZSfe4Cif5LO1gxerRM8B03Gf63rxNW8JB+dvhs8mtM5 LIAqvEEK4kcQjX9gD53tXWaCR6Wb40xGe09g38+2dtWjgx9NjuN+O+wDJICcrzKs Jw== -----END CERTIFICATE-----Generated at Sat Aug 23 10:29:58 2025 by rpki-client