$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft File: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft (raw, json) Hash identifier: k5+W5nsTInIKHwc+qtXT9US2LUke0C2kCeJ4ALcGq/U= Subject key identifier: 1C:A5:16:D0:11:A7:60:74:99:67:F9:BE:88:39:65:E3:5D:EB:2E:4F Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Certificate serial: 48F83B6C4E015556A08F5A5C93B997F954B73BC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft Manifest number: 017F Signing time: Mon 20 Oct 2025 06:58:56 +0000 Manifest this update: Mon 20 Oct 2025 06:53:56 +0000 Manifest next update: Tue 21 Oct 2025 07:42:56 +0000 Files and hashes: 1: 3139342e3131372e36392e302f32342d3234203d3e20323135323438.roa (hash: EqbKHazBpNo/bx4pclFyuqidomfYzdI+MjCRoDSagrM=) 2: 3130332e3134392e3136392e302f32342d3234203d3e203630373831.roa (hash: M972A2zux5bp2vtM/yV/ifXNBlJMRB7g6qDIDzpgNsU=) 3: 326131343a333863303a333a3a2f34382d3438203d3e20333936303634.roa (hash: RQOZ0GeuB2hc8N96mezhBhXKeCrh7X17R4TSsdmASyE=) 4: AS215248.asa (hash: nrWnsup/MJIC3SMKp1zza61PlhYs/6Ueoc+foma4Qbc=) 5: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl (hash: PtEZiduV7qIQYYjQZnKX/GcL63I52HGfTDumgtuA1n4=) 6: 326131343a333863303a323a3a2f34382d3438203d3e20333936303634.roa (hash: b3AvMY9Sl1B0jVsJOJivHhqGlksNlQ/JV9muHKrGSGQ=) 7: 326131343a333863303a323a3a2f34382d3438203d3e20323135323438.roa (hash: e6DNGKmUmYh4KhA4h67tF7nM55oym+8oQ84yYdEmy64=) 8: 326131343a333863303a333a3a2f34382d3438203d3e20323135323438.roa (hash: rQvL6z8yuqUS7v24/Ra9en3S8KmIgkMtv1rcn8o1sfA=) 9: 3130332e3134392e3136382e302f32342d3234203d3e20323135323438.roa (hash: RPFyh+9f4VeLKwhSKFsibkww2V1WrimAJUdSq1OTL10=) 10: 326131343a333863303a3130343a3a2f34382d3438203d3e20323135323438.roa (hash: QZeJi0O4ini6QNF1syA5gZ8HehGzsGo0INWd9T4WodA=) 11: 326131343a333863303a3130343a3a2f34382d3438203d3e20333936303634.roa (hash: uQC+ycpajw6LG1MwmEH2bQGDaDjqft9mY/Ula5mB0Rs=) 12: 3139342e3131372e36392e302f32342d3234203d3e20333936303634.roa (hash: uPzNQdfiTlC1R9B5J33ZDfQAHE+DMHweR/VNt7ogg2k=) 13: 3130332e3134392e3136382e302f32342d3234203d3e20333936303634.roa (hash: +yFHbjFdcl3OkH9bM82B/wbQvRBlEBGqJ0LTOyulC0Q=) 14: 326131343a333863303a3a2f32392d3239203d3e20333936303634.roa (hash: izH2bRAdoHB65ZOfP1RgM/881EkkTABDPPywFSiQ9f4=) 15: 326131343a333863303a3a2f32392d3239203d3e20323135323438.roa (hash: aQBGW4UwEpZw1viUGTiicR7R7bF3eHxKluau3FSxHVQ=) 16: 326131343a333863303a313a3a2f34382d3438203d3e20333936303634.roa (hash: hT2vS1KxZCIrrbIeX36lXo5PB7z3bFiXrMszQcpSghE=) 17: 326131343a333863303a313a3a2f34382d3438203d3e20323135323438.roa (hash: hYvWm7RFlZS1l2LX8NsvpkNf0MsxvPiQn7slmgwssck=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 07:42:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:f8:3b:6c:4e:01:55:56:a0:8f:5a:5c:93:b9:97:f9:54:b7:3b:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Validity Not Before: Oct 20 06:53:56 2025 GMT Not After : Oct 21 07:42:56 2025 GMT Subject: CN=1CA516D011A760749967F9BE883965E35DEB2E4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3e:f1:af:fa:e4:b3:b3:6b:7b:49:35:47:25: a0:ff:1c:41:80:a3:e9:2a:87:95:02:82:e3:08:bf: 12:ec:ca:39:e5:e5:7d:2b:c2:9a:b1:cc:37:1e:b8: 34:e7:da:e7:c3:f8:c3:30:a7:22:50:3c:6e:1f:b7: 5f:e1:d8:39:65:84:34:23:ef:07:72:80:1b:18:53: a4:1a:e8:f1:92:fb:71:0f:77:21:86:9c:d2:92:29: 9b:92:36:e6:64:19:41:aa:de:cd:35:d2:a1:e2:c4: a9:0c:cc:8f:ac:b7:b0:cf:b2:3e:14:0b:93:dc:38: d5:c5:99:89:69:c9:37:68:55:12:d5:3b:41:47:c1: 2c:fe:b4:55:2a:d3:df:b8:bd:40:b5:b3:59:84:b8: 04:a5:b6:3b:9a:be:d3:67:65:0d:d0:a7:58:23:d3: 59:b2:b1:47:a9:c1:ad:0b:6d:56:3a:ad:16:34:3b: 8b:88:43:a1:d8:41:30:95:e6:d2:49:94:fb:cb:83: ff:b5:37:1b:c5:af:b1:dc:b8:c2:d2:a5:a5:99:44: c5:e4:88:64:e3:20:b0:fa:38:16:5c:f1:f2:2c:e3: 11:fd:1f:63:3e:9f:a0:ce:6e:55:0f:57:77:4e:aa: c7:fe:e1:6b:0e:1f:d8:99:27:fe:6a:fc:cd:d2:b8: 84:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A5:16:D0:11:A7:60:74:99:67:F9:BE:88:39:65:E3:5D:EB:2E:4F X509v3 Authority Key Identifier: keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:70:95:f5:c2:7f:cc:71:2a:12:3c:1d:38:4c:16:c8:67:76: ef:ac:a4:cc:0d:c6:2b:1a:cd:74:41:fd:df:cb:93:3b:b2:cc: 6f:3f:70:20:5c:c8:c5:37:ef:df:68:a2:6a:76:1c:b5:d0:4d: af:5a:f2:c1:f9:4f:81:1d:c4:a0:51:87:10:32:2d:94:25:33: b6:5b:08:33:d8:86:40:0f:06:d9:7a:31:94:5c:1d:fa:96:a0: 77:d2:15:ab:86:1e:b0:33:2a:fb:61:fe:b8:57:63:1e:2d:5c: e3:a4:05:6b:14:bd:37:b3:85:5b:2d:b8:47:b2:67:6f:bb:12: bd:8b:d7:df:fa:46:9a:e7:6a:c6:c8:cb:45:b9:70:2f:d2:dc: 8f:f8:cd:b2:48:f2:45:8e:9a:da:6d:a3:fd:4b:c4:20:4d:8f: dc:54:4a:dd:aa:0a:27:78:b6:40:c1:2b:f2:c3:c0:7f:85:63: 86:60:82:66:74:74:cb:79:f5:5c:5f:bb:6e:0c:9f:ce:78:24: de:62:82:78:e7:e3:0e:a9:23:e7:f9:42:53:de:a6:21:49:6c: ad:29:bb:bb:82:9c:d8:64:44:54:89:c1:ac:cb:23:de:3e:39: ec:43:4d:43:ea:f8:99:6b:2a:a8:40:6b:f6:29:21:18:85:41: 41:9d:5a:e2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUSPg7bE4BVVagj1pck7mX+VS3O8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWNkYzA0YmIyM2VhYTRjZWNjNzkxZGZlMDRiYjAyOGI3 ZTc5N2I2ODAeFw0yNTEwMjAwNjUzNTZaFw0yNTEwMjEwNzQyNTZaMDMxMTAvBgNV BAMTKDFDQTUxNkQwMTFBNzYwNzQ5OTY3RjlCRTg4Mzk2NUUzNURFQjJFNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNPvGv+uSzs2t7STVHJaD/HEGA o+kqh5UCguMIvxLsyjnl5X0rwpqxzDceuDTn2ufD+MMwpyJQPG4ft1/h2DllhDQj 7wdygBsYU6Qa6PGS+3EPdyGGnNKSKZuSNuZkGUGq3s010qHixKkMzI+st7DPsj4U C5PcONXFmYlpyTdoVRLVO0FHwSz+tFUq09+4vUC1s1mEuASltjuavtNnZQ3Qp1gj 01mysUepwa0LbVY6rRY0O4uIQ6HYQTCV5tJJlPvLg/+1NxvFr7HcuMLSpaWZRMXk iGTjILD6OBZc8fIs4xH9H2M+n6DOblUPV3dOqsf+4WsOH9iZJ/5q/M3SuIRnAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUHKUW0BGnYHSZZ/m+iDll413rLk8wHwYDVR0j BBgwFoAUXNwEuyPqpM7MeR3+BLsCi355e2gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjli N2M0LzAvNUNEQzA0QkIyM0VBQTRDRUNDNzkxREZFMDRCQjAyOEI3RTc5N0I2OC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hOd0V1eVBxcE03TWVSMy1CTHNDaTM1 NWUyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZDE5ZGIyMC00 NjUzLTQ4ZDQtOGZjNC01ODBkMTM2OWI3YzQvMC81Q0RDMDRCQjIzRUFBNENFQ0M3 OTFERkUwNEJCMDI4QjdFNzk3QjY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARnCV9cJ/zHEqEjwdOEwW yGd276ykzA3GKxrNdEH938uTO7LMbz9wIFzIxTfv32iianYctdBNr1rywflPgR3E oFGHEDItlCUztlsIM9iGQA8G2XoxlFwd+pagd9IVq4YesDMq+2H+uFdjHi1c46QF axS9N7OFWy24R7Jnb7sSvYvX3/pGmudqxsjLRblwL9Lcj/jNskjyRY6a2m2j/UvE IE2P3FRK3aoKJ3i2QMEr8sPAf4VjhmCCZnR0y3n1XF+7bgyfzngk3mKCeOfjDqkj 5/lCU96mIUlsrSm7u4Kc2GREVInBrMsj3j457ENNQ+r4mWsqqEBr9ikhGIVBQZ1a 4g== -----END CERTIFICATE-----Generated at Mon Oct 20 12:40:45 2025 by rpki-client