$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft File: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json) Hash identifier: uXueHR+hLp4m8pgD/PLk0srXeS3/rrVunpuvX3rSpa0= Subject key identifier: 56:02:B0:25:A0:37:58:76:87:E4:9A:F4:CA:86:16:31:68:75:FF:83 Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Certificate serial: 3C5102C70447551A23B78BF67CBB05FEC4502C91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft Manifest number: 011F Signing time: Sun 19 Oct 2025 22:11:40 +0000 Manifest this update: Sun 19 Oct 2025 22:06:40 +0000 Manifest next update: Mon 20 Oct 2025 23:25:40 +0000 Files and hashes: 1: 3139342e3132342e3233342e302f32342d3234203d3e20393936.roa (hash: ZoxbCHQMtNZPfbUxrxLpOcXkuKUfw+Blft69mSm2oZk=) 2: 3139342e3132342e3233342e302f32342d3234203d3e203534333339.roa (hash: wdUsagydvVBIUao6PJHWRop4oPMEKXc9pJyNsG4SW9o=) 3: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: hZUNrJfyUHgUntGAqdSVlBaE4wglKTi9y0zmmly1bMY=) 4: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: Bvg0bczZRvr0hNeXj13n0Q8N1O34FXLeiihKmXvd96c=) 5: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: qgpa17rXBGEZyX0zTURKp2TS7HA9WA0LAdj3r9yq+jg=) 6: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: ad3eCylfdMfYW/Id31ooquQQLvZwumdWGj+lszfaEsA=) 7: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: sUFXVk5mJuzGXi+txvF0jHfWX/7COhdmW+wdhnGLLbA=) 8: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: MbX2Jo3+qNy9yJ51qumhhpSA5fjjpKXnL9+Ixdd7q/M=) 9: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: Wt7cVymDfWBwMzR8hqsJLmmyo1G55vHli1MG8ova8P4=) 10: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: E+WPtm+HS9AVsakqcLrBjACoAm/NbChhrd4PG4s+X5o=) 11: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: 0XA7loK9zcLZ4LH8gJRLIhKhFochpbrC40dXD0XEE/8=) 12: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: 4eRihxuyWrFmyrmWNHP+q80BiQuGj/+XTMKJH0kDcVI=) 13: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: bLMKUTu2LDh7TH4JEFo2TwGKCx3JiqqNy6hRd14etMM=) 14: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: yq+hWHhfyocRCOJbnYGyzdHlkfHxXD4gPxuVgEPCc0g=) 15: 3139342e3132342e3233342e302f32342d3234203d3e20343031383338.roa (hash: dg4srvpWF3uIRgfQMdk/wAV5BokR1veRJ6lDUvN1tY0=) 16: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: Vwqd9y65EYe3c7TZIeDmayvcpWynoPR5yAcBSpAooHg=) 17: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: lmVh0tkdqz2ZaktlfIJzzJLuyL6wItEcUEPI+PVNqdo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 23:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:51:02:c7:04:47:55:1a:23:b7:8b:f6:7c:bb:05:fe:c4:50:2c:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Validity Not Before: Oct 19 22:06:40 2025 GMT Not After : Oct 20 23:25:40 2025 GMT Subject: CN=5602B025A037587687E49AF4CA8616316875FF83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ad:8b:93:45:b2:2c:12:38:bd:97:3b:df:c5: 66:bb:18:82:ac:4b:4e:e2:d2:91:59:c4:2b:fb:30: 3d:e5:0f:d7:37:69:3c:4a:b0:3b:78:b5:8b:58:25: f8:ee:a0:ca:19:6a:92:c5:78:2c:99:7f:a3:a4:20: 33:1c:66:34:36:32:1e:b7:b6:b1:44:a1:c4:7a:91: 61:a7:3e:42:dd:06:d4:b3:79:89:2a:9e:e5:7d:75: 11:a1:74:3c:89:2b:1a:bc:54:6a:a2:c9:84:b8:8d: 7f:0c:e0:72:54:25:e7:72:8a:06:b9:7d:34:b4:1a: 1f:38:68:9f:86:93:0b:30:27:ba:02:07:be:b6:3e: 2e:4f:f6:1f:fb:4a:67:be:d0:84:a8:fd:33:d1:05: ac:3e:a5:cd:ce:1e:96:7f:59:48:f2:c8:f9:37:88: dd:a7:81:68:98:51:a5:3a:14:b3:69:c2:a0:00:8a: b1:dd:98:61:22:04:1f:cf:84:87:1f:e4:20:1b:4e: ad:97:87:15:fa:d9:59:ba:d1:9d:c9:f6:24:bd:7c: 12:a3:14:71:e6:e0:7c:b8:50:72:ad:01:7a:fe:68: b0:02:10:d3:e6:94:2f:bb:96:46:89:14:c6:6b:39: 14:f1:13:b2:a9:5e:6f:25:90:9c:28:4b:eb:fb:1a: 7d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:02:B0:25:A0:37:58:76:87:E4:9A:F4:CA:86:16:31:68:75:FF:83 X509v3 Authority Key Identifier: keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:3b:ea:ad:8a:12:9f:0f:69:45:c5:1b:41:87:0b:e0:52:fa: cb:c4:f8:7b:00:2b:69:5b:99:3a:54:c2:4c:53:b1:34:7e:75: be:7b:3a:39:c3:1b:06:99:4f:2e:52:a7:c8:00:47:7f:e9:90: 04:0a:ff:33:51:b2:5c:6c:72:92:2d:67:6b:35:55:9e:d3:c4: 57:23:a9:c1:08:24:31:39:f7:a0:a8:00:9f:6d:8f:97:a2:dd: b0:01:3a:86:95:fc:b9:f9:ef:24:33:5f:38:b6:cb:7e:54:09: ca:df:83:ed:c4:7f:f8:f2:a9:b9:f8:5a:02:05:c4:20:6a:01: b9:f8:79:92:19:e7:39:59:98:27:1c:86:d1:83:5d:f9:82:fa: ac:2c:10:63:7a:7d:f6:a5:5f:a7:9a:54:bc:b2:65:45:ad:9b: 37:07:a7:b5:2a:12:29:18:f3:59:fe:86:4b:4f:86:cf:fc:72: 2c:34:39:07:69:8f:93:4f:f5:c9:bd:e1:ba:b8:29:ab:d9:eb: e0:0b:10:ec:08:76:f4:6b:4f:fc:ee:5c:28:e5:13:ec:4a:ca: 79:6c:19:66:aa:56:c8:b1:88:1c:77:d4:06:66:e8:db:c7:c7: 38:c8:f5:19:5d:46:f4:cf:9a:41:9d:dd:91:12:25:9d:2d:62: 9f:ea:a5:e2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPFECxwRHVRojt4v2fLsF/sRQLJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2IyOWE3NzY2OWRmNWE3YTVjYjUwNmQ4MzllZThhYTQz MzdjY2FhYzAeFw0yNTEwMTkyMjA2NDBaFw0yNTEwMjAyMzI1NDBaMDMxMTAvBgNV BAMTKDU2MDJCMDI1QTAzNzU4NzY4N0U0OUFGNENBODYxNjMxNjg3NUZGODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1rYuTRbIsEji9lzvfxWa7GIKs S07i0pFZxCv7MD3lD9c3aTxKsDt4tYtYJfjuoMoZapLFeCyZf6OkIDMcZjQ2Mh63 trFEocR6kWGnPkLdBtSzeYkqnuV9dRGhdDyJKxq8VGqiyYS4jX8M4HJUJedyiga5 fTS0Gh84aJ+GkwswJ7oCB762Pi5P9h/7Sme+0ISo/TPRBaw+pc3OHpZ/WUjyyPk3 iN2ngWiYUaU6FLNpwqAAirHdmGEiBB/PhIcf5CAbTq2XhxX62Vm60Z3J9iS9fBKj FHHm4Hy4UHKtAXr+aLACENPmlC+7lkaJFMZrORTxE7KpXm8lkJwoS+v7Gn2tAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUVgKwJaA3WHaH5Jr0yoYWMWh1/4MwHwYDVR0j BBgwFoAUyymndmnfWnpctQbYOe6KpDN8yqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgtN2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhm MDZlLzAvQ0IyOUE3NzY2OURGNUE3QTVDQjUwNkQ4MzlFRThBQTQzMzdDQ0FBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3l5bW5kbW5mV25wY3RRYllPZTZLcERO OHlxdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iYjI1ZDA2OC03 ZjljLTRiMGUtYTY5NS0xNzc5YjdkOGYwNmUvMC9DQjI5QTc3NjY5REY1QTdBNUNC NTA2RDgzOUVFOEFBNDMzN0NDQUFDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZDvqrYoSnw9pRcUbQYcL 4FL6y8T4ewAraVuZOlTCTFOxNH51vns6OcMbBplPLlKnyABHf+mQBAr/M1GyXGxy ki1nazVVntPEVyOpwQgkMTn3oKgAn22Pl6LdsAE6hpX8ufnvJDNfOLbLflQJyt+D 7cR/+PKpufhaAgXEIGoBufh5khnnOVmYJxyG0YNd+YL6rCwQY3p99qVfp5pUvLJl Ra2bNwentSoSKRjzWf6GS0+Gz/xyLDQ5B2mPk0/1yb3hurgpq9nr4AsQ7Ah29GtP /O5cKOUT7ErKeWwZZqpWyLGIHHfUBmbo28fHOMj1GV1G9M+aQZ3dkRIlnS1in+ql 4g== -----END CERTIFICATE-----Generated at Mon Oct 20 09:23:31 2025 by rpki-client