$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft File: E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft (raw, json) Hash identifier: HTSWrvH2ecmWfJvhwbtQDPxZvmOIMavb4vAbz5i6gtk= Subject key identifier: 35:82:D7:0B:4D:B9:1B:C0:A5:EB:89:54:09:A8:A4:25:B0:AB:FE:10 Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4 Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4 Certificate serial: 2D9FD5F3ED8A22CE9D3E1216F3F31745B91DE7CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft Manifest number: E0 Signing time: Sun 19 Oct 2025 20:31:39 +0000 Manifest this update: Sun 19 Oct 2025 20:26:39 +0000 Manifest next update: Mon 20 Oct 2025 23:30:39 +0000 Files and hashes: 1: 3138352e3136322e3137372e302f32342d3234203d3e203634323637.roa (hash: /1m1oguvqlFAZeE/pimTTtaJVN2H8its6YXMEA9yyH0=) 2: 3138352e3136322e3137392e302f32342d3234203d3e203132383734.roa (hash: Oev3T5PHjGnxWqjgwbUH88tHYEWPx4hW7vlkYnxUh4c=) 3: 3138352e3132332e3135362e302f32342d3234203d3e20323133323832.roa (hash: GDvt5K8JvoUItISvzfr5Lq2NAjGhfbtSPK2vmFHq3HY=) 4: 39312e3233312e3132362e302f32342d3234203d3e2035363530.roa (hash: it6kdqtvQIR1fmnyxGg95/2ozlg9ybLYZncNwT8sS4M=) 5: E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl (hash: XUXNc4iB7D9KtaSzLPCXdtslo7NgfR3qv9Rx0VCgD8s=) 6: 3138352e3136322e3137362e302f32342d3234203d3e203537303433.roa (hash: SVrpMsQaq2+Of1pyWLABKDNguVH/um78jdJjsg2PZXk=) 7: 3138352e33332e32362e302f32342d3234203d3e20323132363039.roa (hash: +Uou40uKN3P8LL5yuWZGR768rlaEfbKR2VYxApN71AA=) 8: 3139332e31372e39352e302f32342d3234203d3e2039333034.roa (hash: 9Guine2JQ0PR4yaj3jvnIIIaTUv4lkdQwALSGSbr1I8=) 9: 3138352e3233342e3130302e302f32342d3234203d3e203335363631.roa (hash: 7IoW8V7sYCxYnK3GpV+L+iywqaWF/MSER2M0Aaj+ktk=) 10: 3138352e3132332e3135382e302f32342d3234203d3e203239383032.roa (hash: TLiGnJOFD2b+z4uS2pKNa+Gc2aYGJ4ZFIaexiybn7wo=) 11: 39312e3233322e39392e302f32342d3234203d3e20313937353337.roa (hash: G+mgzv7tRhUfmSaRumVwyhbJ8nNvEA0s859L61Ejv18=) 12: 3138352e3132332e3135372e302f32342d3234203d3e203533333536.roa (hash: lHbHKjkzEHNG8HMgZvfO2b7EsuiOvBYyEIHvvUxLyMU=) 13: 34352e3134392e3135322e302f32342d3234203d3e20323134313433.roa (hash: ZqsnAbwfQsSLAO15y/hQmlAKLget/IE+XAeE4Nr5/8I=) 14: 34352e3134392e3135322e302f32342d3234203d3e203235313630.roa (hash: F5qAcWfgptgKaaDsmY0iSSOR+nBZv9RYAI/0kq8SYl8=) 15: 3138352e3136322e3137382e302f32342d3234203d3e2032393134.roa (hash: s1bbd6LyvYQrZ11FtU3Xa/oNq7QSAV2j6DcxJrrwcV0=) 16: 34352e3134392e3135332e302f32342d3234203d3e20323635393139.roa (hash: kgIiY2hKU4E4tRDz3OnYpx84hUJKrY7sZF8oMbsebok=) 17: 34352e3134392e3135332e302f32342d3234203d3e203133333335.roa (hash: oW4WynaArlYMwXoVGq9L68dOfSrJj8wnnWqrszCEjBM=) 18: 38392e3135302e34392e302f32342d3234203d3e2039333034.roa (hash: q57iXdWw+7j5OH0xE9rwzduA1TqFwwM2jVhXvaojFW4=) 19: 34352e3134392e3135342e302f32342d3234203d3e2039333034.roa (hash: 4wkeXpaub5nHarEFj5V5yRbPz3/jSF6R+paLLX1QL+0=) 20: 34352e3134392e3135342e302f32342d3234203d3e203138383131.roa (hash: 4uff0q80448WswwoPJbFY3idRfw+pxcMp30vGLvVGdk=) 21: 3139342e39392e3135362e302f32342d3234203d3e203232343237.roa (hash: rIB6LZlyDY4ccd8aiBOUspQRAkgz2Qkx5QliZapGW3w=) 22: 3138382e39342e3139312e302f32342d3234203d3e2039333034.roa (hash: kHLj0CCSRey0XdhxSgcTxmLdHvnBUVZqQawwENhkgrs=) 23: 3138352e3132332e3135392e302f32342d3234203d3e20333936333536.roa (hash: 8ymSE6/IZ4mS3/jdg4jdCuqPIOO7MFcCnM1/lcLJutM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:9f:d5:f3:ed:8a:22:ce:9d:3e:12:16:f3:f3:17:45:b9:1d:e7:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4 Validity Not Before: Oct 19 20:26:39 2025 GMT Not After : Oct 20 23:30:39 2025 GMT Subject: CN=3582D70B4DB91BC0A5EB895409A8A425B0ABFE10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:de:c2:d3:45:02:bc:e9:9d:cd:27:3c:24:02: 5c:a3:f5:1d:3e:52:ac:fc:62:6f:44:eb:6b:6c:6e: 00:94:ba:ae:75:3b:3d:a1:88:30:f9:91:c5:e0:df: bb:05:03:53:53:8f:24:12:be:3f:c5:6c:de:6c:c9: 05:a8:42:c5:f2:0f:f8:27:91:d4:12:88:67:79:90: b6:b7:c2:7e:9c:cf:af:77:0e:e8:e7:f8:62:90:92: 2d:a3:e7:f3:c5:e8:47:01:8b:8d:32:c3:3c:b5:ec: 04:73:ba:2b:b9:ef:27:04:f8:4b:77:b0:ec:01:bc: 94:01:a2:5c:a2:d9:86:b8:96:43:fc:24:75:dd:c3: 64:41:c9:74:5e:2c:49:2b:58:11:7e:81:3c:c9:e1: 64:aa:be:29:16:34:bc:43:aa:90:67:f9:a6:4d:5f: 3a:c6:d0:97:3b:42:2f:55:a3:1f:ec:56:c3:e0:b9: a9:f3:aa:14:64:5b:48:08:a0:5a:76:81:24:c8:a2: 22:7c:48:9b:f2:15:0a:67:08:fd:ac:70:6f:7e:e9: 54:7f:bb:60:7e:dd:63:83:05:1d:37:4c:4d:d4:91: 67:ca:77:4d:0b:9e:74:46:7e:f5:64:12:b4:28:1a: cf:7d:f9:b2:45:e9:3a:c9:ce:e3:0a:15:3a:32:ce: 5f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:82:D7:0B:4D:B9:1B:C0:A5:EB:89:54:09:A8:A4:25:B0:AB:FE:10 X509v3 Authority Key Identifier: keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:50:a7:ab:f9:05:4c:be:ea:8f:41:c6:01:d9:4f:ae:d0:75: 86:ea:dd:ee:98:f6:d3:08:4c:90:86:e8:09:26:90:44:d3:2d: 63:89:44:f6:3c:e6:29:e4:63:dd:be:7e:f7:11:9f:fa:84:b8: 0c:33:02:ad:f2:0d:dc:35:67:66:bd:33:de:a3:0b:8b:fc:2f: 20:92:3e:d1:01:10:e1:a4:22:11:ef:00:8f:18:89:c0:ab:2a: 1c:89:b7:1b:58:d8:10:4a:0d:cd:c0:a7:d1:90:de:33:7a:7e: 54:9a:9f:65:f2:03:bc:0b:a2:37:9e:8d:db:d3:a0:d3:a7:6a: bf:65:35:34:3e:0a:fb:15:e0:36:ea:0d:a2:24:0c:4c:6e:49: 27:d2:2e:50:a7:e9:7f:3a:ff:83:92:9d:13:98:6e:69:26:6d: 00:cd:f0:b6:7f:7f:11:e7:ac:b9:e0:a9:74:e4:df:ef:fe:82: 20:28:18:25:25:0f:e5:e1:f8:05:92:d5:95:52:b6:47:38:1a: 53:ed:df:c8:be:b9:fe:cd:9d:a3:6a:0a:e0:e5:87:8f:86:99: d5:b1:a7:70:1a:67:4b:21:fa:02:02:fb:39:a8:fd:32:b2:f6: 87:d9:99:4e:48:18:24:6f:26:d0:7f:59:77:95:08:92:f0:45: 74:a3:7c:67 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULZ/V8+2KIs6dPhIW8/MXRbkd58swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTFmMzUxMmY1MWRjNDJiYjllYjEyYWJjMGJiNTI5NjY4 YjJlZGVlNDAeFw0yNTEwMTkyMDI2MzlaFw0yNTEwMjAyMzMwMzlaMDMxMTAvBgNV BAMTKDM1ODJENzBCNERCOTFCQzBBNUVCODk1NDA5QThBNDI1QjBBQkZFMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ3sLTRQK86Z3NJzwkAlyj9R0+ Uqz8Ym9E62tsbgCUuq51Oz2hiDD5kcXg37sFA1NTjyQSvj/FbN5syQWoQsXyD/gn kdQSiGd5kLa3wn6cz693Dujn+GKQki2j5/PF6EcBi40ywzy17ARzuiu57ycE+Et3 sOwBvJQBolyi2Ya4lkP8JHXdw2RByXReLEkrWBF+gTzJ4WSqvikWNLxDqpBn+aZN XzrG0Jc7Qi9Vox/sVsPguanzqhRkW0gIoFp2gSTIoiJ8SJvyFQpnCP2scG9+6VR/ u2B+3WODBR03TE3UkWfKd00LnnRGfvVkErQoGs99+bJF6TrJzuMKFToyzl91AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUNYLXC025G8Cl64lUCaikJbCr/hAwHwYDVR0j BBgwFoAU4fNRL1HcQruesSq8C7UpZosu3uQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgtZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3 OWE3LzAvRTFGMzUxMkY1MURDNDJCQjlFQjEyQUJDMEJCNTI5NjY4QjJFREVFNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmTlJMMUhjUXJ1ZXNTcThDN1VwWm9z dTN1US5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lM2NkYzY0OC1k MjAzLTQ2MmEtYmQwZi1lYzFiNjBkODc5YTcvMC9FMUYzNTEyRjUxREM0MkJCOUVC MTJBQkMwQkI1Mjk2NjhCMkVERUU0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKVCnq/kFTL7qj0HGAdlP rtB1hurd7pj20whMkIboCSaQRNMtY4lE9jzmKeRj3b5+9xGf+oS4DDMCrfIN3DVn Zr0z3qMLi/wvIJI+0QEQ4aQiEe8AjxiJwKsqHIm3G1jYEEoNzcCn0ZDeM3p+VJqf ZfIDvAuiN56N29Og06dqv2U1ND4K+xXgNuoNoiQMTG5JJ9IuUKfpfzr/g5KdE5hu aSZtAM3wtn9/EeesueCpdOTf7/6CICgYJSUP5eH4BZLVlVK2RzgaU+3fyL65/s2d o2oK4OWHj4aZ1bGncBpnSyH6AgL7Oaj9MrL2h9mZTkgYJG8m0H9Zd5UIkvBFdKN8 Zw== -----END CERTIFICATE-----Generated at Mon Oct 20 02:07:10 2025 by rpki-client