$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft File: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json) Hash identifier: exLWs5iu2j0TKZz8l7OoUGV8FhuEpF6Q4j6ihigD8rM= Subject key identifier: F2:C9:A9:1F:79:F4:7C:B2:09:31:71:A6:4F:BA:E6:78:08:AF:4F:C8 Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Certificate serial: 297A52FE22656C6F4E4FD15267E515FDD9ED2B7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft Manifest number: 019E Signing time: Sat 28 Jun 2025 07:57:07 +0000 Manifest this update: Sat 28 Jun 2025 07:52:07 +0000 Manifest next update: Sun 29 Jun 2025 09:55:07 +0000 Files and hashes: 1: 326130643a623238373a656330303a3a2f34302d3430203d3e20323135363634.roa (hash: ZkXNpKW61UGEN6+3Eq/nkumIj3yuGpDt69ocmobqC/8=) 2: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: o5Ji9Nl0S0iVZZtmrV/Dia6lTq3wC3uyRf91AZlTL/E=) 3: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: sx/iVfyDskrQoK42os+6TyQoUVUvVUXlGN9RH2id0Fo=) 4: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: 5lNL9wmLDlet0KrRB5Z2lMcDOBbA6gqsqoS0zWeKarw=) 5: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: iavCedfpEd5k0rIG/kL5F/xxOAMPmZq43N15rLvPbic=) 6: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: Wm3IDAOfkV81JSuZK/Na7XnsHjZUJzGcxe64BY1WIhs=) 7: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: U56VGJcjuLrEYPpG7oABc/1/udX8BKChn+eBmuJZDts=) 8: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: 9fvE/EKZJ0AUA6jRvgotTKUfh3uMQWCtvLablu7TiLY=) 9: 326130643a623238373a656363303a3a2f34322d3432203d3e20323135363634.roa (hash: GLrga7I6TmqAcqHZCyQLyo7wEkxzFEUlvkIYE9Jlscs=) 10: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: pyzsZjErsKF/r6TDE4GaASJZY8jmD+uruFgv90V9cVg=) 11: 326130643a623238373a646430303a3a2f34302d3430203d3e20323136333039.roa (hash: mpzPSr1CBW6Ka5Te0DE52rLBHWk7ArDQlInbkbsiPzA=) 12: AS41720.asa (hash: +RbH8buX1T5kTWMGsS+k2hctRH6+R8V1cu3+Qe3+/Rs=) 13: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: kmFg1Ubyi8msuCXkZq9wTUwo9VmgSHMiCqLO0oSubS4=) 14: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: Qv46t81qHTc4uf1Bxldy1f/G+l9sAnh7axBU+G8+9tQ=) 15: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: WtqgmDwc3f4nCSOQ8ixLkNx8sXt7FaBWfi7I6des1c8=) 16: 326130643a623238373a646164303a3a2f34342d3434203d3e20323038343337.roa (hash: Lh+NThTArglnDdFNJgAbksxydedvZ3VhoYilxW6dgHQ=) 17: 326130643a623238373a656230303a3a2f34302d3430203d3e20323133373039.roa (hash: Nk6ANHp8DkJz6kDCL9bvYoWgqeyO4UOw/aVOiTsobgk=) 18: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: LSx6RoxYLjz+pP1G4gvNPG1fExHr4dkN3hjR0m2QxZg=) 19: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: YeBU5ew7EbaM3M5c2zGWzk0Q7RzGkO4TGKp/4byQ64k=) 20: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: YrKMLBs8xCiL955bvB/8G11UYsLmajFWAxqi9VeJEB4=) 21: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: bYPPd9HcHavTcfcGpM+ulmmDEDFMIVr0C3fR7prPNz4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 09:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:7a:52:fe:22:65:6c:6f:4e:4f:d1:52:67:e5:15:fd:d9:ed:2b:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Validity Not Before: Jun 28 07:52:07 2025 GMT Not After : Jun 29 09:55:07 2025 GMT Subject: CN=F2C9A91F79F47CB2093171A64FBAE67808AF4FC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5f:42:f3:91:b8:82:a0:74:04:a2:91:ad:f2: 6a:2e:46:f9:a3:af:78:7f:6c:47:33:53:bf:63:0c: 3d:e9:6b:69:c5:3b:dc:2e:06:98:03:e6:31:90:a6: 27:b0:54:3c:c5:ba:45:02:27:30:28:dd:77:40:d1: de:e8:01:6f:37:05:e2:7c:ad:be:72:33:2f:47:9a: 8d:38:a8:55:ba:27:4d:a2:43:05:db:4c:b7:02:4a: d3:67:e2:64:97:3d:7c:8a:5c:5d:6b:5a:57:e0:e2: 8e:be:de:db:cb:59:85:ae:85:5a:9f:a2:65:c8:8e: 4c:51:9d:b8:d0:9b:e3:18:54:c8:18:68:28:4d:3e: a0:59:d0:b9:42:85:25:7a:2b:28:94:6d:b4:06:5d: b9:a6:23:25:07:54:9b:11:a0:dd:58:08:20:d8:70: 7f:a1:2e:71:26:2e:d7:88:68:9c:d7:33:3b:38:5a: 12:41:51:1b:99:ba:f2:30:ea:1d:aa:20:64:ff:9c: 45:01:6c:74:4c:c5:31:8f:2a:b7:ae:33:99:d9:b3: 20:19:2b:31:20:c9:8c:a3:96:ec:cb:b4:d1:ba:3e: 07:cd:9c:aa:60:78:a1:20:c7:dc:07:72:d6:00:c9: 05:43:b8:7a:87:db:b2:19:6e:53:37:8b:57:da:0f: df:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C9:A9:1F:79:F4:7C:B2:09:31:71:A6:4F:BA:E6:78:08:AF:4F:C8 X509v3 Authority Key Identifier: keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:ce:ab:1a:cd:b5:b3:da:bf:ac:85:03:cc:e7:06:49:de:18: f8:55:35:1c:6a:e7:d3:45:06:67:c3:de:dc:5b:27:ae:5a:ad: 2c:c1:5c:53:78:58:02:3d:36:dc:f7:44:c0:76:36:76:39:ef: e0:cd:40:07:32:7d:40:9f:15:bf:a5:d3:8b:e1:28:32:b7:d4: 19:c0:19:f6:71:bf:e8:03:62:23:b8:6e:70:be:9f:6c:dc:45: 64:47:74:5d:ef:2d:2f:96:74:43:90:2f:2b:82:c4:5d:34:47: 70:11:62:2d:a9:bc:84:2b:6e:de:02:ff:05:56:f8:61:69:db: 6e:94:ec:09:99:9a:2b:bc:26:f1:4a:0d:08:6e:d2:d4:15:54: 37:37:0b:bf:b7:d2:b9:09:27:21:11:03:98:17:7d:ba:7d:0c: d1:73:46:fa:d4:ec:2c:fb:46:d6:18:90:96:ef:7a:f9:bd:48: 7d:ba:ab:31:d3:cb:e9:6f:02:fc:31:e9:8d:00:97:67:eb:a2: 8c:b5:fa:63:d7:db:82:e0:22:e3:02:44:19:de:41:17:ee:35: a3:a7:b5:a4:b7:d6:0b:83:ad:05:99:16:f4:6b:70:ab:aa:0b: d0:f7:f7:cd:53:6b:ca:d3:0e:eb:6a:cb:cd:ee:d4:e4:01:44: 98:8a:a0:d4 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKXpS/iJlbG9OT9FSZ+UV/dntK3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjZGQ5YzE5M2RhOTE4NWE0YWMxNWIyYWRlODc1ZmU5 N2I2ZjQ5MTAeFw0yNTA2MjgwNzUyMDdaFw0yNTA2MjkwOTU1MDdaMDMxMTAvBgNV BAMTKEYyQzlBOTFGNzlGNDdDQjIwOTMxNzFBNjRGQkFFNjc4MDhBRjRGQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8X0LzkbiCoHQEopGt8mouRvmj r3h/bEczU79jDD3pa2nFO9wuBpgD5jGQpiewVDzFukUCJzAo3XdA0d7oAW83BeJ8 rb5yMy9Hmo04qFW6J02iQwXbTLcCStNn4mSXPXyKXF1rWlfg4o6+3tvLWYWuhVqf omXIjkxRnbjQm+MYVMgYaChNPqBZ0LlChSV6KyiUbbQGXbmmIyUHVJsRoN1YCCDY cH+hLnEmLteIaJzXMzs4WhJBURuZuvIw6h2qIGT/nEUBbHRMxTGPKreuM5nZsyAZ KzEgyYyjluzLtNG6PgfNnKpgeKEgx9wHctYAyQVDuHqH27IZblM3i1faD99fAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU8smpH3n0fLIJMXGmT7rmeAivT8gwHwYDVR0j BBgwFoAUiM3ZwZPakYWkrBWyreh1/pe29JEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTZhZmYyMzQtNjFjNS00MjkwLThhNmQtNWYyYjkwMjcz MjJmLzAvODhDREQ5QzE5M0RBOTE4NUE0QUMxNUIyQURFODc1RkU5N0I2RjQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNM1p3WlBha1lXa3JCV3lyZWgxX3Bl MjlKRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lNmFmZjIzNC02 MWM1LTQyOTAtOGE2ZC01ZjJiOTAyNzMyMmYvMC84OENERDlDMTkzREE5MTg1QTRB QzE1QjJBREU4NzVGRTk3QjZGNDkxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZc6rGs21s9q/rIUDzOcG Sd4Y+FU1HGrn00UGZ8Pe3FsnrlqtLMFcU3hYAj023PdEwHY2djnv4M1ABzJ9QJ8V v6XTi+EoMrfUGcAZ9nG/6ANiI7hucL6fbNxFZEd0Xe8tL5Z0Q5AvK4LEXTRHcBFi Lam8hCtu3gL/BVb4YWnbbpTsCZmaK7wm8UoNCG7S1BVUNzcLv7fSuQknIREDmBd9 un0M0XNG+tTsLPtG1hiQlu96+b1IfbqrMdPL6W8C/DHpjQCXZ+uijLX6Y9fbguAi 4wJEGd5BF+41o6e1pLfWC4OtBZkW9Gtwq6oL0Pf3zVNrytMO62rLze7U5AFEmIqg 1A== -----END CERTIFICATE-----Generated at Sat Jun 28 21:56:57 2025 by rpki-client