$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft File: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft (raw, json) Hash identifier: m/1x3P5xBAxQSziM47yVbKYXGhOscmR4NW7WLgfB8gg= Subject key identifier: 18:CD:FC:F4:8C:53:D6:18:28:75:6F:68:39:AD:B3:AA:11:B1:D9:56 Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Certificate serial: 5B679F0B4FC2F91D5F9D1151E6E0BF9827FD8311 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft Manifest number: 01DB Signing time: Sun 19 Oct 2025 04:46:46 +0000 Manifest this update: Sun 19 Oct 2025 04:41:46 +0000 Manifest next update: Mon 20 Oct 2025 07:31:46 +0000 Files and hashes: 1: 33312e32322e3130352e302f32342d3234203d3e20323135303236.roa (hash: 4XlIN+3Y2uvivj3jKKbdxnHiR3dRqeJ7/xmTE8uipj8=) 2: 33312e32322e3131312e302f32342d3234203d3e20323135333535.roa (hash: brok2XUOzC0OAQs7efh1lP/TIOrHW70pJohRfs3tgEM=) 3: 33312e32322e3130392e302f32342d3234203d3e203432383331.roa (hash: iK+yx/VtDctRGDFOE/NGNWTyR4u7o2tFGRI6U0bUYZU=) 4: 33312e32322e3130382e302f32342d3234203d3e203432383331.roa (hash: y9uevaBeLo1M0NZi4w3HJOyvLkMWIaZEJFCi8snsYYY=) 5: 33312e32322e3131302e302f32342d3234203d3e2039333034.roa (hash: 4/DyfQef3JM+QDXadF+flhTmwriSDAeEuVFVt/FGtTg=) 6: 3130332e34392e3132392e302f32342d3234203d3e20313530363534.roa (hash: ZmNqb6SQ04nrnt7KP4kUO8EO/zoOBhgAf3oJbSFf7Ys=) 7: 34332e3233302e38352e302f32342d3234203d3e20323131343430.roa (hash: hoZQSGqkvoyh+Fwe28UicpO6RAJD80P7rklT/Di/mQU=) 8: 3130332e34392e3132392e302f32342d3234203d3e20313437323631.roa (hash: OkLNRr7sKDDa5HQaSwaNeYF6CO01e+JHe9kYR/VqYg4=) 9: 3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa (hash: gI3QMk1nxnVJ3ar9nDADeDjafrF5rxSYgoW75rlLkBk=) 10: 34332e3233302e38362e302f32332d3234203d3e2033343931.roa (hash: BqbUmbythNNYP4WqssroNY2sOPvoyuRgXIRAVuIytpA=) 11: 33312e32322e3130342e302f32342d3234203d3e20313938303230.roa (hash: yHVodRBAsBlx/8p8lQvX33hmgwPZB9Uj6k/5yqbIyfs=) 12: 3130332e34392e3132382e302f32342d3234203d3e20313534303439.roa (hash: RP7fF4ljaFnG1QBw6wHJTYmQiSzsC+UtOPXQULgrH/c=) 13: 34332e3233302e38342e302f32342d3234203d3e203235313938.roa (hash: D5rxpe/mz9cZbwkoouLs3Io8a9VjYwAhmSHGosd1BJQ=) 14: 33312e32322e3130372e302f32342d3234203d3e20313337353137.roa (hash: zucU5bamNfYRw/esvivyzaXHMAl8N0xQ+Q3coI+3JvA=) 15: 33312e32322e3130362e302f32342d3234203d3e20323133353032.roa (hash: jNzQvK975k0nFSky/OYcsFfueNL1XvYeIp3mtR/7WPY=) 16: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl (hash: nITjK4ne7EeC8QTRLKH6MNdHStySoWw9ugRR+I2Xzvs=) 17: 3130332e34392e3133302e302f32342d3234203d3e20323036303333.roa (hash: v7D054EN2gERBe7aLvFn0V17UtLvh1fmGSVfmRoK+KQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:67:9f:0b:4f:c2:f9:1d:5f:9d:11:51:e6:e0:bf:98:27:fd:83:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Validity Not Before: Oct 19 04:41:46 2025 GMT Not After : Oct 20 07:31:46 2025 GMT Subject: CN=18CDFCF48C53D61828756F6839ADB3AA11B1D956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a6:55:61:16:4b:d3:3f:2b:a3:2e:97:7e:25: fd:09:e9:64:20:b9:dc:6c:49:09:1e:11:ac:81:8e: 41:e6:a3:02:b5:19:59:84:ae:9a:4d:f3:62:ef:90: 6c:ac:c0:a0:f3:86:74:8c:58:27:5b:d6:60:e2:09: 5c:7e:6e:b8:6b:90:79:e9:bf:e2:f2:fe:b7:3f:c1: a7:70:2e:91:1a:09:b3:3b:3d:fa:1b:94:8e:46:24: 21:52:80:11:3f:7a:b5:bf:0e:50:3b:2d:cc:97:c4: e8:c9:6e:81:86:80:b7:ee:42:85:88:6a:7e:7b:52: 6b:bc:08:ce:d0:72:cc:af:60:df:b0:3d:03:90:58: 32:76:de:e2:5a:db:f7:61:db:70:5e:1d:77:0b:74: d9:ec:ef:88:f6:6c:81:c9:2e:f4:b4:d0:4a:93:64: b0:fe:1b:e9:92:8b:44:7e:cd:51:05:6d:91:94:e6: a4:68:2f:ea:ee:08:1e:d1:da:4b:7b:4d:61:b0:27: ff:c1:b6:38:17:93:03:bb:4c:24:87:6d:18:81:ef: 98:bd:fc:ee:8e:3f:1e:f2:51:49:08:82:c3:62:02: 0e:7e:bb:ec:e3:55:59:2f:5f:5f:f5:d4:a9:a4:3c: 38:cb:39:c2:29:21:a8:1c:c7:2f:bb:cb:02:a4:8f: 5d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:CD:FC:F4:8C:53:D6:18:28:75:6F:68:39:AD:B3:AA:11:B1:D9:56 X509v3 Authority Key Identifier: keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:7c:ee:ec:23:5c:b4:a6:0b:7c:53:22:34:55:ce:75:32:ed: 78:97:06:b4:4c:59:a1:d6:c1:c6:2c:85:d0:ee:ec:c0:cc:07: c8:78:61:20:1f:8f:7e:cb:95:b7:3c:02:93:c0:96:59:fe:86: ab:df:32:ce:cd:22:38:b2:8f:f0:6d:5e:39:f3:54:13:d4:e8: cb:2d:d9:a7:b8:e8:6f:2e:d2:29:2d:6d:07:a6:b6:32:b8:9f: 0c:ac:ca:b9:8b:f7:79:c7:c2:43:54:09:8c:61:cd:96:00:5d: ce:55:3e:fb:1b:cf:43:57:df:3d:f5:70:6f:8a:1b:e5:41:58: 31:87:9f:dc:43:dd:cc:c1:1d:a9:47:2a:94:7a:36:d6:fe:d1: 8d:23:23:55:1a:37:7b:02:e3:26:a7:a8:bf:ec:b1:bd:f4:3b: a4:8e:3c:1c:62:3c:9f:9e:67:bd:85:5c:61:d0:58:a5:01:06: bd:a9:00:78:e4:7e:84:38:9b:37:08:3a:1a:10:3d:f9:b3:4a: 01:67:de:59:bc:6f:97:96:49:a3:d5:36:9b:f3:5f:16:55:b9: df:60:dc:b8:84:b7:95:6d:d6:5e:02:4d:24:69:02:6f:9d:c2: ee:a1:d1:3d:6b:c4:da:05:fa:40:bd:74:d7:d7:f8:92:e1:cf: d7:ba:44:bd -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUW2efC0/C+R1fnRFR5uC/mCf9gxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw YWVhYjI5ZDAeFw0yNTEwMTkwNDQxNDZaFw0yNTEwMjAwNzMxNDZaMDMxMTAvBgNV BAMTKDE4Q0RGQ0Y0OEM1M0Q2MTgyODc1NkY2ODM5QURCM0FBMTFCMUQ5NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRplVhFkvTPyujLpd+Jf0J6WQg udxsSQkeEayBjkHmowK1GVmErppN82LvkGyswKDzhnSMWCdb1mDiCVx+brhrkHnp v+Ly/rc/wadwLpEaCbM7PfoblI5GJCFSgBE/erW/DlA7LcyXxOjJboGGgLfuQoWI an57Umu8CM7QcsyvYN+wPQOQWDJ23uJa2/dh23BeHXcLdNns74j2bIHJLvS00EqT ZLD+G+mSi0R+zVEFbZGU5qRoL+ruCB7R2kt7TWGwJ//BtjgXkwO7TCSHbRiB75i9 /O6OPx7yUUkIgsNiAg5+u+zjVVkvX1/11KmkPDjLOcIpIagcxy+7ywKkj10jAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUGM389IxT1hgodW9oOa2zqhGx2VYwHwYDVR0j BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2 NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy cXNwMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYWZlYmRiNC02 ZjBiLTQwNGItOThlMi1hMjZiZTk0YTY2MjAvMC9DNzcwRjQzMzU4Qjk3QkEwQUE5 QkRDNjJCQkQ1MTFFOTBBRUFCMjlELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN3zu7CNctKYLfFMiNFXO dTLteJcGtExZodbBxiyF0O7swMwHyHhhIB+PfsuVtzwCk8CWWf6Gq98yzs0iOLKP 8G1eOfNUE9Toyy3Zp7joby7SKS1tB6a2MrifDKzKuYv3ecfCQ1QJjGHNlgBdzlU+ +xvPQ1ffPfVwb4ob5UFYMYef3EPdzMEdqUcqlHo21v7RjSMjVRo3ewLjJqeov+yx vfQ7pI48HGI8n55nvYVcYdBYpQEGvakAeOR+hDibNwg6GhA9+bNKAWfeWbxvl5ZJ o9U2m/NfFlW532DcuIS3lW3WXgJNJGkCb53C7qHRPWvE2gX6QL1019f4kuHP17pE vQ== -----END CERTIFICATE-----Generated at Sun Oct 19 15:15:05 2025 by rpki-client