$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: H7JxmXiXRko8rm3s4PZeHbIZ2DHMwaSKZbAAQq4Irto= Subject key identifier: 35:42:07:30:25:5F:02:77:25:3E:F7:05:7B:DD:AA:9D:42:75:CC:E5 Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 4378E498D23EEE8F9B8C3EA27941E57478945C81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 05BB Signing time: Sun 19 Oct 2025 13:21:39 +0000 Manifest this update: Sun 19 Oct 2025 13:16:39 +0000 Manifest next update: Mon 20 Oct 2025 13:26:39 +0000 Files and hashes: 1: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: RdOuxQjMUqkQryMcrXonWYYeJva5RY8rohAdG2ITJdw=) 2: 3138352e3232392e3230332e302f32342d3234203d3e20323036373335.roa (hash: +12elja/TRgK8YWG00PTJRaGaFKqfWK9R0yIngktuC8=) 3: 33362e3235352e39342e302f32332d3234203d3e2039333034.roa (hash: 1cc4X9svp676iCE0S+Qv+GcmYLNtWmAraR6RoXQl0To=) 4: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: ezbmX/yRe+yRvkLs/8FFZoupwCiBI67aZ+0JqkrMl4Q=) 5: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: L+rO+MXrQK3tGBKkhTiQd3Pp/oT0n0nJ8NfAxPcZ/Ik=) 6: 3138352e3231332e3234302e302f32342d3234203d3e20323135373033.roa (hash: 5U9kh/Q1+pD8ktgLTSH2rTlmtF2qNT/hbi1XnCHITmo=) 7: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: nzc+7vTx0fxusJ8QBUU0nZ0s/13eeYO5i8RfnoHHUhc=) 8: 33362e3235352e39322e302f32332d3234203d3e203230333236.roa (hash: uAr910mpCFzZrOxxImyBVxZ5bzjvqrL8T8981qvKdos=) 9: 3138352e3234342e39352e302f32342d3234203d3e203134363138.roa (hash: BX+afd5v4CnQw1Csb+gERO9bOUf9cjiesQkq05EVznU=) 10: 3138352e3232392e3230302e302f32342d3234203d3e2039333034.roa (hash: 9BQlkuwOuPyXvuvnOIpRrrItcJ412PckV00AOrBJhqk=) 11: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: LqK97diQcFrb4344S9ThgI9qIfk24xWO2D6Fzod4ApM=) 12: 3138352e3234342e39352e302f32342d3234203d3e203230343733.roa (hash: wcPx+O7KmTHA1Z17UF9VIIdo6IS06Ij+d7NLeipHdoU=) 13: 3138352e3133302e36322e302f32342d3234203d3e203239303636.roa (hash: cZvuOTu1xxenEkmS/lv/FbwQZVMqO/d4TmKYvwutnlA=) 14: 33362e3235352e39322e302f32332d3234203d3e203139333138.roa (hash: FthEwpOIKT5rKWCqEXY9gMB5simU3azPQORqXvTeqVo=) 15: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: /OGL5Xocpa/mA4GEutGuQoiWc4p3DBj9VM0kpmdQZxo=) 16: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: 3gksYYhzTbY7YABo3ijEKI7+2pnV7sSl79+ZZlhoIDo=) 17: 3138352e3231332e3234312e302f32342d3234203d3e203631323732.roa (hash: ZRXMJB81EQGqLoTW9rCPLjbdmz5JtoX/ioguz/yH9B4=) 18: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: O475B5YNr+mk4vbByMFVmoqbRTenx4kmx66C3HIfdsg=) 19: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: /82U/4ZCS1l7tEmRqZdiqoHQfHkAV0iGqgAdCf0IY6Q=) 20: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: 2mJFb3j98iS3WwOyYDzT/44zu56P1Mt1+w22nAIK9Eo=) 21: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: 1uKLPQUne0QcXblB3NW5HCIymd03TIpdjdnWqSBKxm8=) 22: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: krs6rxjGgkgxIC0XFsSJIDbJbJTaOxRVYKdhwP98j0o=) 23: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: aTFuiZRKSKlOcP1bFw/QEJGr9kwsAqFvqfR62oNQfMc=) 24: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: NTiGjgrJWtlD9Roa9FRQtbjOAAcPR35U4Ayfj8SpKuI=) 25: 3138352e3234342e39352e302f32342d3234203d3e203136353039.roa (hash: tBBH3ivLD6QCOuz/zDI7JAWzO8l/tRZui9Xrn0qJpA4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:78:e4:98:d2:3e:ee:8f:9b:8c:3e:a2:79:41:e5:74:78:94:5c:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Oct 19 13:16:39 2025 GMT Not After : Oct 20 13:26:39 2025 GMT Subject: CN=35420730255F0277253EF7057BDDAA9D4275CCE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:78:50:3b:6c:07:19:2b:e7:42:0f:35:1a:39: 9f:f8:f1:7b:03:5f:88:35:08:3f:07:96:81:a3:e0: e1:ef:32:0c:51:94:e4:cb:c0:d3:af:8a:ff:e8:da: 06:fc:6c:8b:b9:a5:4e:f9:4f:2e:41:89:6f:11:4c: 7f:27:33:03:3c:79:53:20:a9:b1:35:44:a8:9f:f7: 80:25:73:99:70:74:4b:fd:12:ed:82:64:d4:db:5d: 1f:c5:3d:10:9c:b5:97:3c:46:e8:90:f1:15:4a:11: 24:ba:44:ec:88:97:76:c3:c3:cc:36:23:16:b2:9a: 95:d7:d4:be:c4:26:4b:93:0c:bc:86:f0:48:90:3d: 1e:01:b2:19:43:91:d2:21:fd:78:e1:b9:bc:d8:8c: 0c:12:77:e0:fc:27:9e:05:55:64:54:64:60:e1:5a: d3:b2:b8:f2:2e:a8:85:e6:38:08:24:3c:c4:d9:bf: 05:79:53:c2:03:cd:e3:27:da:04:c4:24:02:8f:16: a8:aa:51:e1:46:08:60:71:25:51:01:44:91:0b:f8: 91:9f:31:b6:83:2f:1d:e4:4c:35:c0:e8:6b:00:27: 48:f8:02:89:d9:34:0b:8a:d8:39:1c:33:7d:e9:5a: 8c:d1:21:a2:a5:69:ab:76:29:4f:69:1d:f8:1a:54: ba:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:42:07:30:25:5F:02:77:25:3E:F7:05:7B:DD:AA:9D:42:75:CC:E5 X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:e1:85:47:10:3f:75:f8:a1:01:1f:0c:d1:f8:4f:f0:b7:de: 54:14:25:f2:55:cf:18:1e:ca:02:f8:b8:63:ac:20:40:28:62: ba:4e:6c:6e:b1:53:7c:83:ae:c0:33:43:27:65:39:23:de:d2: a3:72:6d:9a:ff:11:81:51:11:21:c2:e1:75:5e:4d:f9:4d:47: 45:9a:60:6d:c5:8a:49:40:7e:33:0a:03:2f:62:d6:d6:bf:b6: de:27:d1:a3:3a:27:31:dd:48:d6:31:71:21:59:29:17:1e:2a: 1a:1d:e6:ac:5f:45:dc:ea:96:af:3a:60:88:4e:cb:10:8c:88: 5d:27:fa:00:8c:dd:da:fe:71:5d:76:9f:54:15:8e:6d:62:d9: e8:94:9b:de:e4:5e:f1:ed:d3:41:7b:da:76:96:28:88:ad:25: 74:d1:c6:97:fd:d7:36:a6:29:68:ff:64:e1:c9:55:c4:26:b2: 79:e8:c0:22:bf:48:b5:28:c5:e8:30:de:d5:7a:14:4c:df:1a: 3c:3b:9c:96:fe:c1:8c:1f:70:c1:c6:2a:59:22:e9:b0:07:51: 71:f0:28:3c:41:d1:5b:ff:2b:22:d3:bc:60:b9:ac:24:26:95: d1:8d:94:10:1e:56:60:8e:fa:29:51:95:c3:48:99:fb:14:ef: 9f:93:83:9d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQ3jkmNI+7o+bjD6ieUHldHiUXIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNTEwMTkxMzE2MzlaFw0yNTEwMjAxMzI2MzlaMDMxMTAvBgNV BAMTKDM1NDIwNzMwMjU1RjAyNzcyNTNFRjcwNTdCRERBQTlENDI3NUNDRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCreFA7bAcZK+dCDzUaOZ/48XsD X4g1CD8HloGj4OHvMgxRlOTLwNOviv/o2gb8bIu5pU75Ty5BiW8RTH8nMwM8eVMg qbE1RKif94Alc5lwdEv9Eu2CZNTbXR/FPRCctZc8RuiQ8RVKESS6ROyIl3bDw8w2 IxaympXX1L7EJkuTDLyG8EiQPR4BshlDkdIh/XjhubzYjAwSd+D8J54FVWRUZGDh WtOyuPIuqIXmOAgkPMTZvwV5U8IDzeMn2gTEJAKPFqiqUeFGCGBxJVEBRJEL+JGf MbaDLx3kTDXA6GsAJ0j4AonZNAuK2DkcM33pWozRIaKlaat2KU9pHfgaVLrZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUNUIHMCVfAnclPvcFe92qnUJ1zOUwHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXuGFRxA/dfihAR8M0fhP 8LfeVBQl8lXPGB7KAvi4Y6wgQChiuk5sbrFTfIOuwDNDJ2U5I97So3Jtmv8RgVER IcLhdV5N+U1HRZpgbcWKSUB+MwoDL2LW1r+23ifRozonMd1I1jFxIVkpFx4qGh3m rF9F3OqWrzpgiE7LEIyIXSf6AIzd2v5xXXafVBWObWLZ6JSb3uRe8e3TQXvadpYo iK0ldNHGl/3XNqYpaP9k4clVxCayeejAIr9ItSjF6DDe1XoUTN8aPDuclv7BjB9w wcYqWSLpsAdRcfAoPEHRW/8rItO8YLmsJCaV0Y2UEB5WYI76KVGVw0iZ+xTvn5OD nQ== -----END CERTIFICATE-----Generated at Sun Oct 19 20:06:50 2025 by rpki-client