$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft File: B683F2EB50C5999A77456E8826831609D48C7D3E.mft (raw, json) Hash identifier: mdxp8Jwyujl/cc8kCSQwfwspWP0+PUMohdYzW5Ki0iM= Subject key identifier: 2C:1B:F6:C3:4A:C2:C6:D4:3C:7D:2A:7B:47:7A:4C:71:5A:1A:4F:03 Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e Certificate serial: 10D916F103726B1013687C675C0A703FF5535414 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft Manifest number: 0619 Signing time: Mon 20 Oct 2025 07:01:44 +0000 Manifest this update: Mon 20 Oct 2025 06:56:44 +0000 Manifest next update: Tue 21 Oct 2025 09:34:44 +0000 Files and hashes: 1: 3231332e3133392e37392e302f32342d3234203d3e2033333230.roa (hash: PtRMyKTdbfZGfPE5XdhdhFh3qhxKx8+kxVjMWXNcsWU=) 2: 3231332e3133392e39332e302f32342d3234203d3e2039303039.roa (hash: 9cktvEdh4jpik+wY0YHKxFgG9OCHki2tIjn/mKo9IKg=) 3: 3231332e3133392e37332e302f32342d3234203d3e20323132323338.roa (hash: Dtv0Rk3S6CYGgeyc9Utp8OCStFSnf/fyoGbb6uGogTI=) 4: 3231332e3133392e39302e302f32342d3234203d3e2039303039.roa (hash: 4HobDf2IR5LvPu11gvXGRRjA/4KYDCBMeX1L5falDQI=) 5: 3231332e3133392e37372e302f32342d3234203d3e20333938323536.roa (hash: AAU8mMA/8qMP5OVFvU4ND40XGDRIHcFw5zTvG37HSds=) 6: 3231332e3133392e38322e302f32342d3234203d3e2039303039.roa (hash: zOTGboIZBsrY2C4wOPiGbp4YdGPWL/CIf9OR+DPh8lw=) 7: 3231332e3133392e36342e302f32342d3234203d3e2039303039.roa (hash: r1pjD687zCx4FmCuXlGB5h73ScKoFYopGKhXlE6KUfY=) 8: 3231332e3133392e36372e302f32342d3234203d3e2039333034.roa (hash: 18Z/kr0BOMbrD7s6WTSNdpCR4gQ+ao7oXZdueQ4RROc=) 9: 3231332e3133392e37352e302f32342d3234203d3e20323731393837.roa (hash: qsm72iRYseRLkO/eaTDbU1ka1enp1cU6d6BLc+o+lFc=) 10: 3231332e3133392e37302e302f32342d3234203d3e203631333137.roa (hash: vs2b7sm3b3a6ih0FOLh30+kJAWgxfwtdRLZicKgW2iY=) 11: 3231332e3133392e39312e302f32342d3234203d3e2039303039.roa (hash: iHrVGYqO0jEnmhXvt0u+E3Fi7EyKrYFB7bEQzlX2suw=) 12: 3231332e3133392e36362e302f32342d3234203d3e203136353039.roa (hash: 1hlK3K+inj21DftfAPCqNx9Ur756v/RvYDQKchDD0RY=) 13: 3231332e3133392e36362e302f32342d3234203d3e203134363138.roa (hash: KfrtJjSrdaJP5uvqRj2CQapVnmUpyN82iN3vrd+6yjk=) 14: 3231332e3133392e38382e302f32342d3234203d3e2039303039.roa (hash: FBtJ+MNYwdWO4In9hmlePFb198UWpspP65HhFA9Ht28=) 15: 3231332e3133392e37382e302f32342d3234203d3e20323036343436.roa (hash: LCM/dunTFfsiENo1u3oy0PNFVtxRWwm9bEHFaBempdc=) 16: 3231332e3133392e38392e302f32342d3234203d3e2039303039.roa (hash: pjnqIb4dxS7ohemcNICs3/5MSebDeHfZm+o3ScY7Wbs=) 17: 3231332e3133392e36392e302f32342d3234203d3e20313337353137.roa (hash: HH3jqYI0MpU2yLi9Hw8yJjtic3EBakXCP+g63lrfqjg=) 18: 3231332e3133392e39322e302f32342d3234203d3e20383334.roa (hash: v0tNFH1u/s9uww1+x0zLopoqAlrYrdWeRhsSzqaLV6I=) 19: 3231332e3133392e36352e302f32342d3234203d3e2039333034.roa (hash: IuHaapDzUgLoDmpk8BPvs+AnS5FkKTocszixLRbQ9pk=) 20: 3231332e3133392e37342e302f32342d3234203d3e203239383032.roa (hash: aplL4eWGO1854T22hYUsUkBTP8Rpw5inKqfwVoAi4uA=) 21: 3231332e3133392e38362e302f32342d3234203d3e2039303039.roa (hash: FfLZiCS8Nd3284OE5qfthGu+7ch+27qC/k5QS2NyeLA=) 22: 3231332e3133392e37392e302f32342d3234203d3e20323132313530.roa (hash: 0JPdHuSbHUk0VXaqk6MQ9H7eLXZuOQ1QZwBPgp3LcZ4=) 23: 3231332e3133392e37322e302f32342d3234203d3e203230383630.roa (hash: NjWmld7in/C2wyn6DXt7Xnv7mQPq1jiHpZcTZuGeBQ0=) 24: 3231332e3133392e39342e302f32342d3234203d3e2039303039.roa (hash: CZYh6lYb4N4Hi46B2oVp46GIE/gWlkXTwUlUU+TKpIw=) 25: 3231332e3133392e38302e302f32332d3234203d3e20383334.roa (hash: qiWvZJxXyA1T8nIVbLoZ99OExdcS5mc15RZxXCZOFJM=) 26: 3231332e3133392e37362e302f32342d3234203d3e20323132333834.roa (hash: M5KJEFx6ngzgWcWaswPQRo9lko/DzsisbWDI/JPapI0=) 27: 3231332e3133392e36382e302f32342d3234203d3e2039303039.roa (hash: 3sBgBPhXGekAATE8XJ410DzQWJqVxKjP0XKZZazqwjc=) 28: 3231332e3133392e38372e302f32342d3234203d3e2039303039.roa (hash: euqkb79t1OVkqJLV4h0sY2Fb9LyHpO6FssRdPdeta2o=) 29: B683F2EB50C5999A77456E8826831609D48C7D3E.crl (hash: RHuW3V2J2OWNLRVtd3IFUZX5pSm4cIh9/j8ZHAR7fwY=) 30: 3231332e3133392e37312e302f32342d3234203d3e203631333137.roa (hash: +A7YZkvAN81rPDpTJkId3sZMflwrFWtwJvc3yTwbIVs=) 31: 3231332e3133392e37392e302f32342d3234203d3e20323037333838.roa (hash: ++GZ339S0KrF867J3TV0tr4TdthWz9Doq5ZUIyvykVE=) 32: 3231332e3133392e38342e302f32342d3234203d3e2039303039.roa (hash: recgwGLHRmHMtvRRJVUhe6BWHyw6Djaciag4FXuYftw=) 33: 3231332e3133392e38332e302f32342d3234203d3e2039303039.roa (hash: IdSy9DI41okmJzC8kiYhvPIkxbhT29hGtDcstol94Gs=) 34: 3231332e3133392e39352e302f32342d3234203d3e2039303039.roa (hash: CLzyfVEPAwKX3mhx3cFkDV2A+7c3eW1iEPnVFN3/un0=) 35: 3231332e3133392e38352e302f32342d3234203d3e2039303039.roa (hash: m9VEyjC6AstkEvUHZu0nndWjDPejGmt2Un1d+bIvwNg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:d9:16:f1:03:72:6b:10:13:68:7c:67:5c:0a:70:3f:f5:53:54:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e Validity Not Before: Oct 20 06:56:44 2025 GMT Not After : Oct 21 09:34:44 2025 GMT Subject: CN=2C1BF6C34AC2C6D43C7D2A7B477A4C715A1A4F03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:78:7e:af:2e:07:de:c3:53:5e:9f:f1:8d:c6: 11:80:7a:82:e6:9d:cd:ec:f3:50:a0:1e:90:3b:14: 81:d1:f1:c8:8d:37:da:e6:6c:b0:ee:41:2d:c2:43: e1:2c:8c:ab:66:aa:5e:be:22:ba:e5:10:d1:5b:3a: 50:9e:ac:c4:57:9b:7c:6e:c4:e6:d8:f1:95:4a:14: 5e:19:99:cb:da:0a:98:28:50:42:04:9a:2c:61:27: f2:6b:a9:85:98:c3:a1:3a:b5:e1:e5:e5:ad:79:67: ef:d5:7c:ad:92:d5:7f:fb:53:48:78:5d:86:a7:4d: b5:bd:9f:06:66:48:9a:6d:55:6b:de:17:cb:5a:3a: 50:fd:28:59:7e:fb:75:bd:9d:1a:0b:bb:d2:8e:cd: d9:e0:16:59:0c:42:6c:bb:06:db:39:08:b8:76:c5: d6:c4:eb:7e:9a:ae:e8:df:37:e9:a0:62:c3:09:16: 08:17:0c:e3:e5:13:b3:15:51:72:a2:e5:67:5c:ac: fc:5c:50:7d:0f:e0:dc:5b:32:7b:a1:36:b4:f0:7c: 4f:41:d0:bb:7a:6e:bf:c1:66:90:33:ec:bc:4f:2b: e3:61:61:16:03:12:4e:cc:5b:33:f0:99:ee:c4:e7: 4e:c4:ce:25:f6:3a:69:25:a0:4c:ff:5c:9b:4f:12: b5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1B:F6:C3:4A:C2:C6:D4:3C:7D:2A:7B:47:7A:4C:71:5A:1A:4F:03 X509v3 Authority Key Identifier: keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:a6:f7:b0:b1:46:4b:40:33:a2:4d:90:1d:52:c8:10:81:c0: 2e:67:3f:ae:a7:6f:0e:59:0d:9a:72:21:da:2a:da:ac:e3:58: 2d:10:bd:42:cf:5f:71:30:c9:1a:02:6c:c0:19:00:72:30:c6: a4:e6:0b:10:37:4a:c2:e1:a2:b4:5a:a1:fb:a9:88:3f:e5:0a: d6:6a:d3:0f:c5:a0:c5:11:a5:26:f2:9b:71:ae:0f:67:74:c8: 2c:b7:ee:f5:8e:95:76:03:92:df:c0:62:84:29:60:18:d3:01: 20:5c:70:e5:1d:bc:cb:c8:39:98:8a:c6:61:4e:3c:db:0c:84: ba:94:25:17:bd:1d:61:fb:bb:61:63:6a:1f:fb:0d:ef:e1:82: 09:55:90:a3:5b:5a:a9:bc:53:c0:86:76:f3:b8:67:15:04:df: 77:b6:52:8d:15:ae:1d:1f:5c:26:ee:a0:29:c8:de:ba:23:dc: 02:ab:ee:a8:17:8a:bc:88:4b:b6:6b:b8:0e:78:53:0b:21:39: 63:41:ca:ec:86:f5:52:ad:60:36:32:1e:d6:b5:45:6b:22:f4: f2:3b:c1:9c:b1:20:05:7e:84:20:21:6f:cf:28:1e:4b:f9:84: 2c:5c:81:2b:e0:62:73:e6:2f:90:44:2b:e7:96:88:87:fa:b1: 09:76:34:9e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUENkW8QNyaxATaHxnXApwP/VTVBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk NDhjN2QzZTAeFw0yNTEwMjAwNjU2NDRaFw0yNTEwMjEwOTM0NDRaMDMxMTAvBgNV BAMTKDJDMUJGNkMzNEFDMkM2RDQzQzdEMkE3QjQ3N0E0QzcxNUExQTRGMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCieH6vLgfew1Nen/GNxhGAeoLm nc3s81CgHpA7FIHR8ciNN9rmbLDuQS3CQ+EsjKtmql6+IrrlENFbOlCerMRXm3xu xObY8ZVKFF4ZmcvaCpgoUEIEmixhJ/JrqYWYw6E6teHl5a15Z+/VfK2S1X/7U0h4 XYanTbW9nwZmSJptVWveF8taOlD9KFl++3W9nRoLu9KOzdngFlkMQmy7Bts5CLh2 xdbE636arujfN+mgYsMJFggXDOPlE7MVUXKi5WdcrPxcUH0P4NxbMnuhNrTwfE9B 0Lt6br/BZpAz7LxPK+NhYRYDEk7MWzPwme7E507EziX2OmkloEz/XJtPErXdAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQULBv2w0rCxtQ8fSp7R3pMcVoaTwMwHwYDVR0j BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT TWZUNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hMDFjMTRmYi1i NjYwLTQ4OWQtOWU5Zi05NDAyZTllMmMyZTIvMC9CNjgzRjJFQjUwQzU5OTlBNzc0 NTZFODgyNjgzMTYwOUQ0OEM3RDNFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY6b3sLFGS0Azok2QHVLI EIHALmc/rqdvDlkNmnIh2irarONYLRC9Qs9fcTDJGgJswBkAcjDGpOYLEDdKwuGi tFqh+6mIP+UK1mrTD8WgxRGlJvKbca4PZ3TILLfu9Y6VdgOS38BihClgGNMBIFxw 5R28y8g5mIrGYU482wyEupQlF70dYfu7YWNqH/sN7+GCCVWQo1taqbxTwIZ287hn FQTfd7ZSjRWuHR9cJu6gKcjeuiPcAqvuqBeKvIhLtmu4DnhTCyE5Y0HK7Ib1Uq1g NjIe1rVFayL08jvBnLEgBX6EICFvzygeS/mELFyBK+Bic+YvkEQr55aIh/qxCXY0 ng== -----END CERTIFICATE-----Generated at Mon Oct 20 09:46:58 2025 by rpki-client