$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json) Hash identifier: 1ZuLRAS4F7dZlefjG0laO43cYIQ9cZsqD/IMKViJ5FA= Subject key identifier: A1:9B:37:2A:07:7C:E4:19:28:4F:44:F4:21:BC:78:1D:ED:00:4D:FA Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: 3D67E6D2A20D3B6702112A808C5AEBE1C91738A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft Manifest number: 0397 Signing time: Sun 19 Oct 2025 07:26:36 +0000 Manifest this update: Sun 19 Oct 2025 07:21:36 +0000 Manifest next update: Mon 20 Oct 2025 11:14:36 +0000 Files and hashes: 1: 3135392e3235332e342e302f32342d3234203d3e20323134313433.roa (hash: JO9eMRAwPS+hZf1UF8eYFlm1nYrsRkC7Oj1Lhed/bAU=) 2: 3138352e31332e3232352e302f32342d3234203d3e203631333137.roa (hash: 8TzKoFnFzYaSWN5mBXGHVTu7YevWpqGi2XUkHCPKssM=) 3: 3135392e3235332e322e302f32342d3234203d3e20323134313433.roa (hash: qmuf0vkLJtyYNBk6lONse3deUisFPtDCWrL9dDMaewk=) 4: 3138352e31332e3232342e302f32342d3234203d3e20313335333931.roa (hash: Y4VGjNKxdM1kt8f9/kG9Dub6HzXbG7OXpVqySki/RW4=) 5: 3135392e3235332e372e302f32342d3234203d3e20323134313433.roa (hash: 8/3XzRXXjmYpSthB/PqRmvioB+R4a98BuFhtWRNYmtk=) 6: 3135392e3235332e332e302f32342d3234203d3e203533333536.roa (hash: uV5gP669aq0NtuCXuZBm6wWsNYwP/024H/522nPjCx8=) 7: 3135392e3235332e362e302f32342d3234203d3e20323134313433.roa (hash: ium02BtB+GfbIHn2YGUt7i7of/NJnXnez2EEtYL+duE=) 8: 3135392e3235332e312e302f32342d3234203d3e2039333034.roa (hash: dcYXeL7R4SgGVjoaZN9OWp91BkdwHsg557vymFY3FPQ=) 9: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: cKnNLC66X19KWTLeS9BLlyG6jkzxqkdJwZjUWCrZPHc=) 10: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: Lju62N9UZHAqbXzgPzlLyoInX3QxRc9ENPKGQRZULHY=) 11: 3138352e31332e3232362e302f32342d3234203d3e20313532313739.roa (hash: kbUfx2g7/W6xr6BcRBqigrahrWSKqlZaZ80tT5+SQUk=) 12: 3135392e3235332e352e302f32342d3234203d3e203533333536.roa (hash: 9QDAlicDZU2dKA/slyHao02LhaPY7/2iCnESN6BbiqA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:14:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:67:e6:d2:a2:0d:3b:67:02:11:2a:80:8c:5a:eb:e1:c9:17:38:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: Oct 19 07:21:36 2025 GMT Not After : Oct 20 11:14:36 2025 GMT Subject: CN=A19B372A077CE419284F44F421BC781DED004DFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:69:40:20:81:2d:92:e1:76:c5:d1:97:76:e3: f8:09:da:af:17:ae:64:52:fd:3e:3c:4b:08:e0:a2: 88:70:c6:69:a7:e0:a6:77:14:1e:52:ed:42:a2:02: 55:1b:46:51:2c:25:7b:83:54:8f:7a:e5:2f:5c:e1: d3:8f:78:96:67:41:79:c0:9f:ad:a8:5a:25:e6:fe: 5b:32:de:21:4f:6e:5b:d8:e6:68:dd:97:da:6a:8a: 37:97:0f:d6:18:23:01:55:d2:19:a1:b7:3b:35:2c: ce:5b:59:60:2f:b7:d3:d0:f4:f4:21:c3:82:41:88: dc:4f:c8:33:f2:0b:cf:23:4f:c6:8d:cc:58:13:29: 70:f2:ef:8c:87:58:89:fc:94:29:a0:ec:41:1c:28: 90:47:10:f4:c4:17:7e:07:dc:6d:64:75:f4:11:18: ad:00:41:2b:49:24:7e:05:3a:1c:34:a4:c8:9b:e1: 53:6e:80:b1:16:54:c6:bf:67:18:1d:05:1f:09:58: 31:d4:80:4d:77:ee:63:93:d8:ab:27:8a:ab:90:a3: 37:45:14:05:e3:81:d9:04:ed:99:71:54:79:a0:d8: 92:c8:4f:4d:ca:3c:e9:22:33:bb:8b:d3:c0:cc:60: 4f:3e:40:aa:5b:b2:b5:f3:a2:aa:82:33:1d:1a:a5: 7e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9B:37:2A:07:7C:E4:19:28:4F:44:F4:21:BC:78:1D:ED:00:4D:FA X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:00:6c:35:2f:0f:7f:98:9a:cc:43:64:63:72:d3:8d:36:c1: 0e:6f:35:ba:3e:4c:7c:28:13:1d:9f:04:aa:9d:4b:d3:00:f4: 4d:6b:fc:e6:f0:64:1c:28:ba:66:da:4d:ae:c2:1c:f0:c2:49: 2d:86:3c:19:b8:23:ea:7b:3c:e3:57:ea:9f:26:9e:ba:30:d3: 93:02:49:97:b5:b5:a0:ff:5a:f1:06:6d:f1:66:9b:3e:34:b9: 12:ce:a8:eb:1e:cb:4d:93:bc:f2:3c:0b:f6:59:3f:32:e3:ae: 5d:e3:75:d1:49:11:ff:a8:d2:80:7a:b1:6a:6c:b1:20:86:48: 74:bf:b4:6e:65:6f:ff:ce:ff:6f:c1:a5:e9:23:d3:78:d4:cd: b2:5a:15:b7:34:1d:39:cf:73:72:71:66:04:ad:e1:d7:ca:0c: 5f:78:d5:70:c1:81:48:5b:25:ab:76:09:85:63:a5:2f:68:8b: cd:47:5d:36:43:19:da:fe:7f:82:88:1c:ea:85:79:84:76:f6: 8b:99:db:ce:db:b6:ef:22:53:92:4f:47:2c:aa:bc:06:91:bd: d1:65:74:80:9d:f6:4b:04:c5:48:7a:3a:a5:08:99:12:71:4e: 45:1e:6c:38:b2:fd:d0:f9:22:f6:7f:7c:56:eb:5a:c7:76:69: b7:20:65:61 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPWfm0qINO2cCESqAjFrr4ckXOKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNTEwMTkwNzIxMzZaFw0yNTEwMjAxMTE0MzZaMDMxMTAvBgNV BAMTKEExOUIzNzJBMDc3Q0U0MTkyODRGNDRGNDIxQkM3ODFERUQwMDRERkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2aUAggS2S4XbF0Zd24/gJ2q8X rmRS/T48Swjgoohwxmmn4KZ3FB5S7UKiAlUbRlEsJXuDVI965S9c4dOPeJZnQXnA n62oWiXm/lsy3iFPblvY5mjdl9pqijeXD9YYIwFV0hmhtzs1LM5bWWAvt9PQ9PQh w4JBiNxPyDPyC88jT8aNzFgTKXDy74yHWIn8lCmg7EEcKJBHEPTEF34H3G1kdfQR GK0AQStJJH4FOhw0pMib4VNugLEWVMa/ZxgdBR8JWDHUgE137mOT2KsniquQozdF FAXjgdkE7ZlxVHmg2JLIT03KPOkiM7uL08DMYE8+QKpbsrXzoqqCMx0apX5TAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUoZs3Kgd85BkoT0T0Ibx4He0ATfowHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZwBsNS8Pf5iazENkY3LT jTbBDm81uj5MfCgTHZ8Eqp1L0wD0TWv85vBkHCi6ZtpNrsIc8MJJLYY8Gbgj6ns8 41fqnyaeujDTkwJJl7W1oP9a8QZt8WabPjS5Es6o6x7LTZO88jwL9lk/MuOuXeN1 0UkR/6jSgHqxamyxIIZIdL+0bmVv/87/b8Gl6SPTeNTNsloVtzQdOc9zcnFmBK3h 18oMX3jVcMGBSFslq3YJhWOlL2iLzUddNkMZ2v5/gogc6oV5hHb2i5nbztu27yJT kk9HLKq8BpG90WV0gJ32SwTFSHo6pQiZEnFORR5sOLL90Pki9n98Vutax3ZptyBl YQ== -----END CERTIFICATE-----Generated at Sun Oct 19 22:31:31 2025 by rpki-client