$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: xCSgGmjzyL0nFyTB8DmOXQ+a52xGPcjeiyA9uHSFjAU= Subject key identifier: 08:65:58:03:5D:0E:B5:94:22:9B:C0:C2:D2:18:81:18:80:D9:89:BE Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 6CDD7D6C70A5D9E725C8B0FC93972C8F0001EDFE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 02D4 Signing time: Sun 19 Oct 2025 08:59:29 +0000 Manifest this update: Sun 19 Oct 2025 08:54:29 +0000 Manifest next update: Mon 20 Oct 2025 11:28:29 +0000 Files and hashes: 1: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: M4zqLtdUHSAbU4GatESAUlsOQgWU2zpPTfy3/5JmOsg=) 2: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=) 3: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: gq6me54MBqnqosS7iLksDmqAJs8yyfHwMXcZfgP1ijQ=) 4: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=) 5: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: 7RQ0gXCWkNwXJyLVMAjMT4ifOZKJ140AG/jnIia+kz4=) 6: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: polxJUQuuGvo82QFQvRtgLcGzpMrITqZaH9JMW5PByU=) 7: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: ZhIUpj5tVPDcWiQ+3SY61ZE9RRhM2AJ7zchpU/cGNbk=) 8: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 6RxmKyitzJl4tEe1yv4vU5lxANHGsLOEl2k3HSP2ddo=) 9: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=) 10: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=) 11: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=) 12: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: LIVxcxtvoeze2S46mPqGSXeLOCk0JK2W2QKOiQjUdZQ=) 13: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=) 14: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: F6VJOi3vW8ih7gU8rCzD7A7gIu39IHtVGsLlId1ILkM=) 15: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: tSCdgWVojrNjCTZJXx40KHORbGl5Xxqy+ipQo1eneh0=) 16: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=) 17: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: Tk4tJu5bvTD5dR9NoM2pYvWxSXCc2/x84lQAlZZqzIs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:28:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:dd:7d:6c:70:a5:d9:e7:25:c8:b0:fc:93:97:2c:8f:00:01:ed:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Oct 19 08:54:29 2025 GMT Not After : Oct 20 11:28:29 2025 GMT Subject: CN=086558035D0EB594229BC0C2D218811880D989BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:93:34:86:e5:10:4d:3e:c0:2c:ee:2d:e3:c3: 35:30:98:7c:b6:d0:ce:42:d6:e4:7f:1e:0a:9c:94: d2:71:a4:77:f2:6a:c1:74:ad:ac:6b:91:10:7b:15: 35:e4:4f:2b:76:b3:5c:48:d7:6d:7a:bb:e9:12:5d: 78:13:53:fe:ef:b6:b7:d5:9a:f2:e5:b9:0f:b9:08: a5:03:0d:f8:60:82:af:1e:e7:37:2a:f7:c4:7a:dc: 49:a3:7e:40:65:4a:6f:20:aa:55:08:f4:4c:47:be: f3:35:6a:e0:2c:47:78:b1:3d:52:42:0c:0a:06:70: ab:10:d3:b4:05:b5:35:1f:de:ae:00:66:58:94:20: 61:48:97:b1:51:0d:2f:8a:2a:ce:75:9c:0f:8f:df: d9:eb:02:c5:07:fc:41:ea:1a:0d:60:b3:96:54:4e: 4b:53:9a:a4:8b:05:87:d2:5a:90:92:d9:56:e9:da: ba:3f:44:d4:34:0c:37:9f:11:34:5f:54:07:9f:21: f0:2d:00:97:05:b9:a3:17:aa:f6:f9:6a:0c:a1:28: ad:a9:e7:eb:3b:4e:04:ef:22:a9:c0:fd:9f:97:a4: 38:8a:69:a0:ca:fb:4c:8f:df:50:fa:9a:1f:c8:00: 64:60:51:39:9f:90:e6:c6:72:39:21:e9:eb:59:ec: ba:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:65:58:03:5D:0E:B5:94:22:9B:C0:C2:D2:18:81:18:80:D9:89:BE X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:5d:16:0b:e2:02:4d:72:4c:1b:35:a1:07:d0:d4:8b:a2:9f: c2:cc:d8:ef:f9:d4:8a:9b:2b:be:cf:4e:84:60:86:df:86:80: 00:56:5b:ca:b7:2c:2f:78:60:93:08:61:25:d2:ea:99:3f:8d: c2:25:8d:87:b9:b9:1f:67:91:2d:4f:8c:ac:3c:ff:57:04:ad: 36:14:19:84:fb:b2:21:17:00:47:5e:52:cb:92:5d:a2:97:08: 37:a5:26:16:b8:b2:ad:57:de:89:ae:78:c6:fa:26:44:b9:f0: c9:38:10:6c:29:7d:b4:b1:6a:2d:1d:3d:51:90:30:a6:ef:a4: ae:8e:93:5c:57:cd:ed:79:87:7f:17:b7:a2:a3:a1:f8:6f:b9: 86:74:12:4d:04:fc:dd:62:72:70:dc:8f:4f:18:de:58:1d:86: a8:de:6d:d0:d3:d9:c2:ca:d7:0d:27:95:9c:93:18:d2:07:13: 57:c3:84:d8:ad:a8:c2:b5:68:2c:9f:79:90:36:bf:d3:7f:13: 77:42:68:00:ff:20:f6:8e:99:5d:88:5e:91:dd:9a:d4:e5:fa: 28:50:26:e1:77:7a:2c:19:a8:88:7b:63:f8:9c:84:db:0b:de: f9:44:29:af:a1:16:d1:7d:64:fa:94:62:8b:e0:1b:8d:c0:71: 35:b7:36:c6 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUbN19bHCl2eclyLD8k5csjwAB7f4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNTEwMTkwODU0MjlaFw0yNTEwMjAxMTI4MjlaMDMxMTAvBgNV BAMTKDA4NjU1ODAzNUQwRUI1OTQyMjlCQzBDMkQyMTg4MTE4ODBEOTg5QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnkzSG5RBNPsAs7i3jwzUwmHy2 0M5C1uR/HgqclNJxpHfyasF0raxrkRB7FTXkTyt2s1xI1216u+kSXXgTU/7vtrfV mvLluQ+5CKUDDfhggq8e5zcq98R63EmjfkBlSm8gqlUI9ExHvvM1auAsR3ixPVJC DAoGcKsQ07QFtTUf3q4AZliUIGFIl7FRDS+KKs51nA+P39nrAsUH/EHqGg1gs5ZU TktTmqSLBYfSWpCS2Vbp2ro/RNQ0DDefETRfVAefIfAtAJcFuaMXqvb5agyhKK2p 5+s7TgTvIqnA/Z+XpDiKaaDK+0yP31D6mh/IAGRgUTmfkObGcjkh6etZ7LqJAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUCGVYA10OtZQim8DC0hiBGIDZib4wHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQChXRYL 4gJNckwbNaEH0NSLop/CzNjv+dSKmyu+z06EYIbfhoAAVlvKtywveGCTCGEl0uqZ P43CJY2HubkfZ5EtT4ysPP9XBK02FBmE+7IhFwBHXlLLkl2ilwg3pSYWuLKtV96J rnjG+iZEufDJOBBsKX20sWotHT1RkDCm76SujpNcV83teYd/F7eio6H4b7mGdBJN BPzdYnJw3I9PGN5YHYao3m3Q09nCytcNJ5WckxjSBxNXw4TYrajCtWgsn3mQNr/T fxN3QmgA/yD2jpldiF6R3ZrU5fooUCbhd3osGaiIe2P4nITbC975RCmvoRbRfWT6 lGKL4BuNwHE1tzbG -----END CERTIFICATE-----Generated at Mon Oct 20 04:58:33 2025 by rpki-client