$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft File: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json) Hash identifier: eRn7LWr3/JnVZ+9R2Sb9584wrLTGbBzwIHeBxhsRZEA= Subject key identifier: 2B:AA:28:61:21:FA:39:BE:D4:50:EB:EF:CC:C3:E2:E6:28:01:DB:65 Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Certificate serial: 2DF464F8418A2183821CBAADB8FD7196DA83A653 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft Manifest number: 01BD Signing time: Tue 22 Jul 2025 03:07:37 +0000 Manifest this update: Tue 22 Jul 2025 03:02:37 +0000 Manifest next update: Wed 23 Jul 2025 05:18:37 +0000 Files and hashes: 1: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: bYPPd9HcHavTcfcGpM+ulmmDEDFMIVr0C3fR7prPNz4=) 2: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: U56VGJcjuLrEYPpG7oABc/1/udX8BKChn+eBmuJZDts=) 3: AS41720.asa (hash: +RbH8buX1T5kTWMGsS+k2hctRH6+R8V1cu3+Qe3+/Rs=) 4: 326130643a623238373a646164303a3a2f34342d3434203d3e20323038343337.roa (hash: Lh+NThTArglnDdFNJgAbksxydedvZ3VhoYilxW6dgHQ=) 5: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: YrKMLBs8xCiL955bvB/8G11UYsLmajFWAxqi9VeJEB4=) 6: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: sx/iVfyDskrQoK42os+6TyQoUVUvVUXlGN9RH2id0Fo=) 7: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: o5Ji9Nl0S0iVZZtmrV/Dia6lTq3wC3uyRf91AZlTL/E=) 8: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: WtqgmDwc3f4nCSOQ8ixLkNx8sXt7FaBWfi7I6des1c8=) 9: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: iavCedfpEd5k0rIG/kL5F/xxOAMPmZq43N15rLvPbic=) 10: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: 2ZISUds+5Rx3IaTPMEl1UIM6FctTcjcm49vCHngnwWY=) 11: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: kmFg1Ubyi8msuCXkZq9wTUwo9VmgSHMiCqLO0oSubS4=) 12: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: Wm3IDAOfkV81JSuZK/Na7XnsHjZUJzGcxe64BY1WIhs=) 13: 326130643a623238373a656363303a3a2f34322d3432203d3e20323135363634.roa (hash: GLrga7I6TmqAcqHZCyQLyo7wEkxzFEUlvkIYE9Jlscs=) 14: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: 9fvE/EKZJ0AUA6jRvgotTKUfh3uMQWCtvLablu7TiLY=) 15: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: 5lNL9wmLDlet0KrRB5Z2lMcDOBbA6gqsqoS0zWeKarw=) 16: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: pyzsZjErsKF/r6TDE4GaASJZY8jmD+uruFgv90V9cVg=) 17: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: YeBU5ew7EbaM3M5c2zGWzk0Q7RzGkO4TGKp/4byQ64k=) 18: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: Qv46t81qHTc4uf1Bxldy1f/G+l9sAnh7axBU+G8+9tQ=) 19: 326130643a623238373a656230303a3a2f34302d3430203d3e20323133373039.roa (hash: Nk6ANHp8DkJz6kDCL9bvYoWgqeyO4UOw/aVOiTsobgk=) 20: 326130643a623238373a646430303a3a2f34302d3430203d3e20323136333039.roa (hash: mpzPSr1CBW6Ka5Te0DE52rLBHWk7ArDQlInbkbsiPzA=) 21: 326130643a623238373a656330303a3a2f34302d3430203d3e20323135363634.roa (hash: ZkXNpKW61UGEN6+3Eq/nkumIj3yuGpDt69ocmobqC/8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 05:18:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:f4:64:f8:41:8a:21:83:82:1c:ba:ad:b8:fd:71:96:da:83:a6:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Validity Not Before: Jul 22 03:02:37 2025 GMT Not After : Jul 23 05:18:37 2025 GMT Subject: CN=2BAA286121FA39BED450EBEFCCC3E2E62801DB65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0c:f4:2b:1f:a0:98:ed:05:10:18:ee:72:1a: 8a:0d:12:1e:3d:05:73:ef:ed:15:d7:f7:9b:73:1e: 79:fc:96:60:c8:cc:23:7a:9c:8f:fe:b2:4b:e9:8a: d1:ff:93:8b:95:d5:57:44:ef:7e:1d:b5:56:85:d8: 41:e5:a7:a8:ec:cc:ad:90:41:cc:7a:6b:05:a4:3c: 50:21:2a:03:01:9f:05:6f:5f:d3:92:03:3f:25:67: e0:d8:df:6f:90:c1:0d:bd:f0:16:15:31:a0:37:9d: 05:1b:da:a2:cc:ee:eb:d5:48:06:70:a9:03:67:73: f4:35:02:d8:6c:93:8d:8a:6e:98:76:d5:cb:be:f6: bc:ac:7a:62:7e:18:e6:ce:f4:7e:35:44:4e:fe:43: 8b:09:b3:4d:08:a1:d1:03:d0:4d:1a:f8:06:30:15: 52:76:ba:bb:dc:33:3f:e6:61:0c:ec:a0:b2:6e:83: 0a:a4:80:e0:2e:db:81:8e:90:28:43:c4:7f:40:1e: 09:68:87:a1:39:c3:92:47:37:2a:51:8c:f0:ce:14: e6:7b:c1:75:dc:37:3b:f9:ad:9a:e2:94:e2:81:d3: 0c:86:cf:80:a2:76:9b:28:77:72:51:c6:c7:5b:20: e5:c5:c6:b9:a7:12:6a:ef:26:d0:2e:71:56:4b:07: 5f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:AA:28:61:21:FA:39:BE:D4:50:EB:EF:CC:C3:E2:E6:28:01:DB:65 X509v3 Authority Key Identifier: keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:bc:04:8a:fc:a5:ce:26:06:c6:7d:8d:5e:54:06:35:f5:b9: 72:5c:34:67:7b:73:3b:d8:a2:fe:5e:55:57:2f:98:dd:83:cf: 03:0a:cb:e2:8b:d2:f1:a4:c4:4d:55:ce:80:78:ae:26:7c:f0: 8d:5a:7a:61:ac:dc:f2:ac:02:bb:5e:ad:e2:fa:b0:2b:3b:35: 62:a4:ca:76:2b:1a:96:62:20:10:91:c9:59:14:e7:26:73:e9: 9c:00:86:77:20:0e:0b:90:ef:e4:0e:0b:b2:12:b3:58:cb:cd: 56:e6:20:41:f1:ef:15:cb:59:02:af:96:8a:e3:1b:1f:16:33: 49:e9:39:cd:65:77:ad:16:22:16:83:a5:50:90:71:05:b6:a2: 91:53:b3:fe:d5:36:5b:99:b4:53:81:13:59:d4:9b:f5:a3:bf: 53:68:9f:2e:26:c6:6d:a0:c7:e9:32:c7:a9:d5:84:00:b8:f3: f5:78:e3:8f:57:67:29:8e:11:cf:a1:4b:4d:47:99:ac:1a:b0: 23:82:b5:72:0a:db:95:5d:3d:97:01:ea:94:67:7d:5b:c5:2a: 86:9c:5f:13:44:7a:7c:d0:8e:da:6e:d5:85:53:5f:b4:45:7b: 44:cb:ee:c1:aa:00:88:cc:3a:cd:27:a6:1d:bc:58:0b:31:32: 7b:8a:70:46 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULfRk+EGKIYOCHLqtuP1xltqDplMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjZGQ5YzE5M2RhOTE4NWE0YWMxNWIyYWRlODc1ZmU5 N2I2ZjQ5MTAeFw0yNTA3MjIwMzAyMzdaFw0yNTA3MjMwNTE4MzdaMDMxMTAvBgNV BAMTKDJCQUEyODYxMjFGQTM5QkVENDUwRUJFRkNDQzNFMkU2MjgwMURCNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkDPQrH6CY7QUQGO5yGooNEh49 BXPv7RXX95tzHnn8lmDIzCN6nI/+skvpitH/k4uV1VdE734dtVaF2EHlp6jszK2Q Qcx6awWkPFAhKgMBnwVvX9OSAz8lZ+DY32+QwQ298BYVMaA3nQUb2qLM7uvVSAZw qQNnc/Q1Athsk42Kbph21cu+9rysemJ+GObO9H41RE7+Q4sJs00IodED0E0a+AYw FVJ2urvcMz/mYQzsoLJugwqkgOAu24GOkChDxH9AHgloh6E5w5JHNypRjPDOFOZ7 wXXcNzv5rZrilOKB0wyGz4Cidpsod3JRxsdbIOXFxrmnEmrvJtAucVZLB1/NAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUK6ooYSH6Ob7UUOvvzMPi5igB22UwHwYDVR0j BBgwFoAUiM3ZwZPakYWkrBWyreh1/pe29JEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTZhZmYyMzQtNjFjNS00MjkwLThhNmQtNWYyYjkwMjcz MjJmLzAvODhDREQ5QzE5M0RBOTE4NUE0QUMxNUIyQURFODc1RkU5N0I2RjQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNM1p3WlBha1lXa3JCV3lyZWgxX3Bl MjlKRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lNmFmZjIzNC02 MWM1LTQyOTAtOGE2ZC01ZjJiOTAyNzMyMmYvMC84OENERDlDMTkzREE5MTg1QTRB QzE1QjJBREU4NzVGRTk3QjZGNDkxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo7wEivylziYGxn2NXlQG NfW5clw0Z3tzO9ii/l5VVy+Y3YPPAwrL4ovS8aTETVXOgHiuJnzwjVp6Yazc8qwC u16t4vqwKzs1YqTKdisalmIgEJHJWRTnJnPpnACGdyAOC5Dv5A4LshKzWMvNVuYg QfHvFctZAq+WiuMbHxYzSek5zWV3rRYiFoOlUJBxBbaikVOz/tU2W5m0U4ETWdSb 9aO/U2ifLibGbaDH6TLHqdWEALjz9Xjjj1dnKY4Rz6FLTUeZrBqwI4K1cgrblV09 lwHqlGd9W8UqhpxfE0R6fNCO2m7VhVNftEV7RMvuwaoAiMw6zSemHbxYCzEye4pw Rg== -----END CERTIFICATE-----Generated at Tue Jul 22 19:34:17 2025 by rpki-client