$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft File: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json) Hash identifier: n3IMWEzQQMrhLmyj0g9pfmdwnFdgdwFexFSEmYOmrAY= Subject key identifier: 9B:F4:14:7B:38:BA:7F:B6:89:76:33:7F:99:10:75:45:9D:81:27:94 Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Certificate serial: 4EF20BE7079519ABA352CD863C93AF17EE89E531 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft Manifest number: 0237 Signing time: Sun 19 Oct 2025 05:18:43 +0000 Manifest this update: Sun 19 Oct 2025 05:13:43 +0000 Manifest next update: Mon 20 Oct 2025 08:52:43 +0000 Files and hashes: 1: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: m2CiuFBjrlRavusUidV8mkbKXKHzyUUUhDYGNFwtBAs=) 2: 326130643a623238373a656230303a3a2f34302d3430203d3e20323133373039.roa (hash: Nk6ANHp8DkJz6kDCL9bvYoWgqeyO4UOw/aVOiTsobgk=) 3: 326130643a623238373a656363303a3a2f34322d3432203d3e20323135363634.roa (hash: rHhBb1bMQectXohqdqgX13X6ENYXH/z7I15ReI0F4QU=) 4: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: JAmgJM2VGcbQzWkOuFvV1aRU7IhMtvcEw/0vm9hTp3I=) 5: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: V4bF3gDy6FE6zlNg9r0xUvpdAXLZEuLnN1FQtQz0KTM=) 6: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: kmFg1Ubyi8msuCXkZq9wTUwo9VmgSHMiCqLO0oSubS4=) 7: 326130643a623238373a646430303a3a2f34302d3430203d3e20323136333039.roa (hash: mpzPSr1CBW6Ka5Te0DE52rLBHWk7ArDQlInbkbsiPzA=) 8: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: BJe1bO6YYCEXeriSlULaZwS25Q4hRdnweRF5hyXEuDY=) 9: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: bYPPd9HcHavTcfcGpM+ulmmDEDFMIVr0C3fR7prPNz4=) 10: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: U56VGJcjuLrEYPpG7oABc/1/udX8BKChn+eBmuJZDts=) 11: AS41720.asa (hash: R9jFblFZaPwUK6Huk1SWnasBO6ka9sffBE6ldnurUoM=) 12: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: o5Ji9Nl0S0iVZZtmrV/Dia6lTq3wC3uyRf91AZlTL/E=) 13: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: S10o6lJcne+SfvZMZmd0ndSNpfqn8OsjAJw8rNDdBSw=) 14: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: Q6Io7mv8dNkJZap1oGvqDaJWxZcBIoRNlU5W1SfkDVo=) 15: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: BOfTSY7wWayFslIYZyC++f09YnW0ZvOoQVsy6AzQanA=) 16: 326130643a623238373a646164303a3a2f34342d3434203d3e20323038343337.roa (hash: Lh+NThTArglnDdFNJgAbksxydedvZ3VhoYilxW6dgHQ=) 17: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: ItyIHbG/IJlKjOf6vhLnjpZ9k/lt97Z65upW37DdGzA=) 18: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: XkY+CZRB6z8hYjbh5i8XlmIyXGdOxjmUp3N4jZFkIDk=) 19: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: UtcmwgPmmxIsh/ra+btug0leCQZCVTQekME41LiPWtU=) 20: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: YeBU5ew7EbaM3M5c2zGWzk0Q7RzGkO4TGKp/4byQ64k=) 21: 326130643a623238373a656330303a3a2f34302d3430203d3e20323135363634.roa (hash: GOCABvoqojF3U9p5UEyXVqmO5f+8/wyeekfdSPGqQRY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f2:0b:e7:07:95:19:ab:a3:52:cd:86:3c:93:af:17:ee:89:e5:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Validity Not Before: Oct 19 05:13:43 2025 GMT Not After : Oct 20 08:52:43 2025 GMT Subject: CN=9BF4147B38BA7FB68976337F991075459D812794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:53:53:ef:a8:d5:8d:ae:32:8a:c6:72:5e:5a: 3b:42:e0:39:ec:7b:27:92:df:19:24:8f:48:f0:9f: 1b:77:bd:4a:b7:a6:ad:a5:a1:a7:14:1b:ff:1b:9d: cc:1e:bb:b5:f0:5d:aa:a2:c0:ca:39:4b:f6:63:63: 7e:45:47:88:cb:33:8c:75:39:72:ec:92:7b:2b:e2: 22:87:cf:e4:ca:b6:c4:9d:bc:55:04:bb:ab:2e:31: 99:52:52:d6:16:78:86:91:1c:1a:c2:6f:57:f5:15: b3:91:05:04:e6:ca:35:56:36:01:bf:6c:d7:79:0c: d4:13:92:fb:75:4c:be:7b:d4:3d:62:cc:1d:88:a6: 22:00:f4:12:d6:2b:5c:af:bc:a4:70:ee:a8:6b:87: 1c:5a:5f:2d:db:1e:12:6e:32:e7:09:ac:a6:39:ff: 89:65:f2:60:6b:f3:c2:ea:69:70:13:35:16:28:e1: 10:07:0f:24:51:67:65:bb:c4:8c:ad:e1:0c:c5:a1: a9:54:ee:b3:f7:68:11:88:3e:12:33:f9:46:ed:48: 7c:b6:69:69:84:a1:c1:6f:d5:d7:21:02:98:3a:a9: bf:05:c6:f1:e4:e7:0c:9b:26:b1:16:c9:6d:ff:1a: e4:7c:3a:b8:22:69:6a:54:47:45:a8:26:03:c7:16: ef:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F4:14:7B:38:BA:7F:B6:89:76:33:7F:99:10:75:45:9D:81:27:94 X509v3 Authority Key Identifier: keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:88:2d:34:d2:e3:2f:89:1f:f8:4b:86:fe:d6:cb:a2:5c:c0: fb:f2:30:c5:e5:9e:37:69:2c:39:32:f1:fd:e0:5f:08:ac:9a: d4:b1:af:02:db:fa:65:84:b6:e4:5f:24:cc:e7:fb:d5:76:a3: d9:98:57:a0:59:38:59:22:84:f7:63:63:dd:eb:74:b1:4b:8b: 13:4d:34:b2:a1:f2:c0:29:19:61:24:44:83:b2:11:50:74:19: 54:43:b6:f7:d4:04:45:34:d6:b7:4f:ba:d8:73:d9:09:3e:83: 19:71:01:b4:f8:10:69:bb:5d:98:bb:20:49:32:e0:ad:c6:59: 8e:ce:83:f7:d6:a2:9f:1d:42:29:d4:a9:2d:91:57:3a:d6:82: 7c:f7:d8:3b:1f:c2:16:0c:34:15:70:cf:c9:d4:b4:0d:bd:85: d9:09:ac:0e:6f:48:2b:e0:00:fe:ec:a8:bc:0f:3d:1e:c1:56: a7:dc:2e:ee:fd:56:52:42:35:81:4d:22:6c:d6:9f:bd:85:47: e8:f8:1c:aa:bd:82:46:ec:bb:18:f6:87:5e:3a:d9:a5:fd:45: 8d:6b:69:e7:c3:f5:16:dd:6c:13:81:f8:ff:22:b8:ad:49:50: 10:b0:2e:6a:ae:4a:77:7e:db:1f:aa:fd:bf:13:61:e6:89:ab: 60:b6:e5:ed -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTvIL5weVGaujUs2GPJOvF+6J5TEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjZGQ5YzE5M2RhOTE4NWE0YWMxNWIyYWRlODc1ZmU5 N2I2ZjQ5MTAeFw0yNTEwMTkwNTEzNDNaFw0yNTEwMjAwODUyNDNaMDMxMTAvBgNV BAMTKDlCRjQxNDdCMzhCQTdGQjY4OTc2MzM3Rjk5MTA3NTQ1OUQ4MTI3OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwU1PvqNWNrjKKxnJeWjtC4Dns eyeS3xkkj0jwnxt3vUq3pq2loacUG/8bncweu7XwXaqiwMo5S/ZjY35FR4jLM4x1 OXLsknsr4iKHz+TKtsSdvFUEu6suMZlSUtYWeIaRHBrCb1f1FbORBQTmyjVWNgG/ bNd5DNQTkvt1TL571D1izB2IpiIA9BLWK1yvvKRw7qhrhxxaXy3bHhJuMucJrKY5 /4ll8mBr88LqaXATNRYo4RAHDyRRZ2W7xIyt4QzFoalU7rP3aBGIPhIz+UbtSHy2 aWmEocFv1dchApg6qb8FxvHk5wybJrEWyW3/GuR8OrgiaWpUR0WoJgPHFu+/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUm/QUezi6f7aJdjN/mRB1RZ2BJ5QwHwYDVR0j BBgwFoAUiM3ZwZPakYWkrBWyreh1/pe29JEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTZhZmYyMzQtNjFjNS00MjkwLThhNmQtNWYyYjkwMjcz MjJmLzAvODhDREQ5QzE5M0RBOTE4NUE0QUMxNUIyQURFODc1RkU5N0I2RjQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNM1p3WlBha1lXa3JCV3lyZWgxX3Bl MjlKRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lNmFmZjIzNC02 MWM1LTQyOTAtOGE2ZC01ZjJiOTAyNzMyMmYvMC84OENERDlDMTkzREE5MTg1QTRB QzE1QjJBREU4NzVGRTk3QjZGNDkxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYgtNNLjL4kf+EuG/tbL olzA+/IwxeWeN2ksOTLx/eBfCKya1LGvAtv6ZYS25F8kzOf71Xaj2ZhXoFk4WSKE 92Nj3et0sUuLE000sqHywCkZYSREg7IRUHQZVEO299QERTTWt0+62HPZCT6DGXEB tPgQabtdmLsgSTLgrcZZjs6D99ainx1CKdSpLZFXOtaCfPfYOx/CFgw0FXDPydS0 Db2F2QmsDm9IK+AA/uyovA89HsFWp9wu7v1WUkI1gU0ibNafvYVH6Pgcqr2CRuy7 GPaHXjrZpf1FjWtp58P1Ft1sE4H4/yK4rUlQELAuaq5Kd37bH6r9vxNh5omrYLbl 7Q== -----END CERTIFICATE-----Generated at Sun Oct 19 15:19:04 2025 by rpki-client