$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft File: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft (raw, json) Hash identifier: jYwirKEdQOoE8ZDZLnRlc6ib92Sf2v8Lf8rmXupSDwo= Subject key identifier: 88:04:15:76:7E:30:4F:C0:CB:FD:3C:5C:9F:B5:E2:5B:D5:E8:8C:2E Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Certificate serial: 28BE90D19F14682F7186D8232522DE9CC7983299 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft Manifest number: 01A1 Signing time: Sat 25 Oct 2025 13:24:09 +0000 Manifest this update: Sat 25 Oct 2025 13:19:09 +0000 Manifest next update: Sun 26 Oct 2025 17:23:09 +0000 Files and hashes: 1: 352e3232362e3138392e302f32342d3234203d3e2039333034.roa (hash: KMYDoKnPWH3TUSOlAA/wzDsC66Y3O5PlUt+i9WMB8YA=) 2: 3137382e3133322e3139382e302f32342d3234203d3e20323635393139.roa (hash: uhM+/0v8HioS/qE+KkDqR673YS11oQr5aznZkyp/yx4=) 3: 352e3232362e3138362e302f32342d3234203d3e203633303233.roa (hash: kysMqqfL+cxQFiZ9hx+MYhVVLOWVsGxNP3RzuLn0/y4=) 4: 3137382e3133322e3139362e302f32342d3234203d3e203235313938.roa (hash: 3j8K/Kqcqdvwpx/OlssyZRS1YjevchGxZsOaT54dM7E=) 5: 3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa (hash: pWCIuSrDYwp+tan25QY6TeO9jMNRWP/W0zj94P0620Y=) 6: 352e3232362e3139312e302f32342d3234203d3e20323135323338.roa (hash: UAeHXbW3QhFNKys+iIRYQQp2rK+CbLJVmAbT44zmQ1k=) 7: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl (hash: FS7L5hyXFypWum1P/oEE3TRe2V7gCcITggYRPFq2vGg=) 8: 3130392e3233342e3230392e302f32342d3234203d3e203235313630.roa (hash: 4qmNKGx6VCIK53hbSqHwJPgKKMACqFJu608tkfoDU90=) 9: 3137382e3133322e3139322e302f32342d3234203d3e203136353039.roa (hash: 0XlqzvD5WZeVhzrMIb+ArV6j60KVoqxW88qIB/mg2yk=) 10: 3137382e3133322e3139322e302f32342d3234203d3e203134363138.roa (hash: UgtgsSF4DmUx+FqAs5WV6TWI9fyKhqfkEeJgaHpzYEc=) 11: 352e3232362e3138352e302f32342d3234203d3e2034363337.roa (hash: xGDSj9rMMdhGkci1rj9QS/c2p6IRznTgPF56svMZjZY=) 12: 3137382e3133322e3139342e302f32342d3234203d3e2033333230.roa (hash: fQsEWjsrThcFlJLP0H4ir/IvOeNDAQWZ1RZpyw7wV08=) 13: 352e3232362e3138342e302f32342d3234203d3e20313534303439.roa (hash: H9hlRxAktpjIeT3DJhaD4nFRiEtoUGveoYH/KllFDKE=) 14: 3137382e3133322e3139382e302f32342d3234203d3e203133333335.roa (hash: 6TrR9eiRNzBfJRrubefTFudn86wqW7t6u+0cIxHNR5g=) 15: 3137382e3133322e3139352e302f32342d3234203d3e20313335333931.roa (hash: RVvsf+GbQ+gvRF/WRSFeBmTdyh0atmXnd8DAVmdlYaw=) 16: 3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa (hash: 5LOGXsAFfY8MpN+3dgrjf5uTyIh00nk/J0/MSXxVmy4=) 17: 3137382e3133322e3139332e302f32342d3234203d3e2033333230.roa (hash: oI+z5B0JaicbPoA0ktNCShJBGRgRTGuhGcC7A8+Ru9U=) 18: 3130392e3233342e3231302e302f32342d3234203d3e203432383331.roa (hash: XdAkV6zbkuI1AZDLksTC73fyYmD1RaBTy+I3AGFuaxA=) 19: 3137382e3133322e3139372e302f32342d3234203d3e2033333230.roa (hash: MuzLKtyseOT68ju0FOjjeN3pxilqG43fi3IvFyF1hyA=) 20: 3130392e3233342e3230392e302f32342d3234203d3e20333935373933.roa (hash: o3GE/oY8MCJAGEjtcPLWPVhOZbFRZAMmde/X42j4j+s=) 21: 3130392e3233342e3230382e302f32342d3234203d3e203331383938.roa (hash: b3VPqm78d32upkRS45HOejDpaZzakM7RvUm8zYxxirQ=) 22: 352e3232362e3139302e302f32342d3234203d3e20313337353137.roa (hash: dSlf5pGXbGsGZE5EEAyZeM/B2DRLa5hIPls1KRkA5S4=) 23: 3137382e3133322e3139362e302f32342d3234203d3e20323035383836.roa (hash: uXr7xv/utv3nrmiA56MIjtPUbX68CjWOqcNFqNQ16UA=) 24: 3137382e3133322e3139392e302f32342d3234203d3e203631333137.roa (hash: g03b1IthT7R6emRcKoovUUAfL6xJm+JexZ6oxCLs8E4=) 25: 3130392e3233342e3231352e302f32342d3234203d3e20393733.roa (hash: 7XlPdZ+5k5dznfPMoT3Ni5uRfyL41Likgo5fplEaDTA=) 26: 3130392e3233342e3231322e302f32342d3234203d3e2039333034.roa (hash: E1rTwoIvXUNDaM0STfVaIqf1sVvsAgpb9o5+zj/sF4M=) 27: 352e3232362e3138382e302f32342d3234203d3e20313532313739.roa (hash: nFzeEleWTSIYtIbjgNdPg9c+CwbgHF8u+W2VGtxEBpQ=) 28: 3130392e3233342e3231312e302f32342d3234203d3e203133333335.roa (hash: Ej1HuQzuhYe60A2HNErPZLUdfpH5EaYPpZ+PpBEwVxY=) 29: 3130392e3233342e3231342e302f32342d3234203d3e203433363431.roa (hash: 6BGcWOFPHM6AYGamfRs+s+1VsWvQIYZ1oxiJHAvfJjg=) 30: 352e3232362e3138372e302f32342d3234203d3e203331383938.roa (hash: kBpq1LEvwgTf4WM51jxpYydvFyszuazgeravGzXETJo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 17:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:be:90:d1:9f:14:68:2f:71:86:d8:23:25:22:de:9c:c7:98:32:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Validity Not Before: Oct 25 13:19:09 2025 GMT Not After : Oct 26 17:23:09 2025 GMT Subject: CN=880415767E304FC0CBFD3C5C9FB5E25BD5E88C2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:63:cd:cd:66:e2:a9:90:39:6b:82:d9:62:e8: 8f:06:f6:dd:6a:96:55:03:30:5f:00:44:c4:ed:75: f5:ef:d9:5e:57:9d:78:32:09:85:a6:98:7f:4d:af: 37:66:d8:0d:46:e6:ad:e0:5a:7c:1a:93:96:fd:3a: 44:a2:a1:7a:a9:35:85:b6:4c:e4:56:24:2b:b1:bd: b8:56:9d:60:36:b8:d3:13:6c:5d:87:1a:33:98:23: 3b:20:85:94:ca:24:c7:ce:93:12:32:35:25:f1:38: c0:ce:99:1c:c6:61:2c:fc:67:cd:d4:a5:f3:7e:24: aa:1b:80:e2:f5:3a:27:77:ee:00:f0:fc:05:eb:c5: d5:d3:9c:d9:fd:05:de:4d:79:2a:82:df:82:f3:d4: 3e:cb:75:8e:c9:f0:6c:4c:35:55:4c:32:21:3f:74: 43:18:14:47:fe:e8:56:47:6b:93:5f:d5:60:67:bc: e0:65:6f:db:57:6b:64:d6:f0:e1:a9:96:ff:47:4b: 41:cf:46:15:66:23:a3:27:04:fa:c8:33:0c:50:f2: a1:f3:76:07:36:aa:7d:dc:d7:6b:62:37:f6:e0:62: 39:b4:bc:a5:4d:da:72:ce:27:84:fa:9e:3c:9b:2a: 09:83:34:05:8c:97:50:63:4a:bf:33:b8:87:4e:85: b1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:04:15:76:7E:30:4F:C0:CB:FD:3C:5C:9F:B5:E2:5B:D5:E8:8C:2E X509v3 Authority Key Identifier: keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:35:0f:82:2d:d8:5e:db:96:78:84:ca:f0:1f:b4:da:98:89: 5b:ed:6b:c6:6e:1b:a0:78:f9:82:5f:5d:98:02:f6:a1:fa:61: 83:5f:aa:d2:51:69:8a:2e:5d:b2:43:1c:d6:ea:81:51:87:89: e9:02:0c:a2:9d:db:8f:c7:2b:b3:fa:7f:14:76:a4:be:86:5d: fb:01:c4:85:54:b1:ae:14:10:a5:86:84:da:ce:4d:3e:87:b2: 43:84:d0:62:02:62:40:cc:d8:06:c9:00:c1:cd:7b:fc:66:ab: b7:eb:88:45:77:70:54:77:cb:9c:97:6f:5f:c2:91:c5:77:6d: a7:fc:21:a7:4d:17:40:a5:8f:c0:4b:15:60:9d:0f:fa:6c:32: 85:0c:8a:1e:f9:fe:3b:d9:b6:0c:50:50:cd:12:2b:05:ee:cd: 87:32:27:7c:2b:a6:42:24:14:84:ab:f0:c6:11:ee:20:38:dd: 21:84:01:f4:3f:1b:17:51:52:95:9a:2d:ad:6d:72:1f:a7:cd: 93:11:76:d5:51:2a:fa:f4:2d:79:10:1b:2d:ad:31:87:3b:51: 19:21:b3:93:63:74:5d:02:94:20:f4:0e:93:2e:51:59:65:b0: ce:4a:d9:7a:30:bc:9e:56:c2:65:3c:55:60:da:f1:c9:3a:a3: 95:69:e2:36 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKL6Q0Z8UaC9xhtgjJSLenMeYMpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk MTZjZWVkMzAeFw0yNTEwMjUxMzE5MDlaFw0yNTEwMjYxNzIzMDlaMDMxMTAvBgNV BAMTKDg4MDQxNTc2N0UzMDRGQzBDQkZEM0M1QzlGQjVFMjVCRDVFODhDMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBY83NZuKpkDlrgtli6I8G9t1q llUDMF8ARMTtdfXv2V5XnXgyCYWmmH9Nrzdm2A1G5q3gWnwak5b9OkSioXqpNYW2 TORWJCuxvbhWnWA2uNMTbF2HGjOYIzsghZTKJMfOkxIyNSXxOMDOmRzGYSz8Z83U pfN+JKobgOL1Oid37gDw/AXrxdXTnNn9Bd5NeSqC34Lz1D7LdY7J8GxMNVVMMiE/ dEMYFEf+6FZHa5Nf1WBnvOBlb9tXa2TW8OGplv9HS0HPRhVmI6MnBPrIMwxQ8qHz dgc2qn3c12tiN/bgYjm0vKVN2nLOJ4T6njybKgmDNAWMl1BjSr8zuIdOhbFLAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUiAQVdn4wT8DL/Txcn7XiW9XojC4wHwYDVR0j BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0 NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G czd0TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wY2MwODczNy05 MjY3LTQwMmEtOTlkNC03YWFhZmVhNDQ0ZWQvMC9GNzY4RkY2RTY4MTg1OEMwRUMx OUYzQTkzRkExNzkyQ0QxNkNFRUQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAojUPgi3YXtuWeITK8B+0 2piJW+1rxm4boHj5gl9dmAL2ofphg1+q0lFpii5dskMc1uqBUYeJ6QIMop3bj8cr s/p/FHakvoZd+wHEhVSxrhQQpYaE2s5NPoeyQ4TQYgJiQMzYBskAwc17/Gart+uI RXdwVHfLnJdvX8KRxXdtp/whp00XQKWPwEsVYJ0P+mwyhQyKHvn+O9m2DFBQzRIr Be7NhzInfCumQiQUhKvwxhHuIDjdIYQB9D8bF1FSlZotrW1yH6fNkxF21VEq+vQt eRAbLa0xhztRGSGzk2N0XQKUIPQOky5RWWWwzkrZejC8nlbCZTxVYNrxyTqjlWni Ng== -----END CERTIFICATE-----Generated at Sun Oct 26 02:11:41 2025 by rpki-client