$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft File: 3134EE987E08D8B5583FEEF621A03150C4F35434.mft (raw, json) Hash identifier: FcA7D1KOFX0Ph55nTHpry/36nFuVP+M1qH42tFIX3qI= Subject key identifier: 61:B1:B3:2B:C6:6E:16:B3:2F:A4:C3:5B:7C:2B:42:FF:2A:63:9C:6C Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34 Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434 Certificate serial: 0795A3BDD5893FEF5D2918C2C4104C01515410F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft Manifest number: 0344 Signing time: Tue 21 Oct 2025 11:02:00 +0000 Manifest this update: Tue 21 Oct 2025 10:57:00 +0000 Manifest next update: Wed 22 Oct 2025 13:32:00 +0000 Files and hashes: 1: 326131343a316563373a663130303a3a2f34302d3438203d3e20323134313838.roa (hash: l6K8Ipuv+LpAjKBvLV7xS+N25xPDi1Q5md9XNlMDt3o=) 2: 326131343a316563373a666430303a3a2f34302d3438203d3e20323136323034.roa (hash: s/Nou3yfPszN+70d0fh1KxFGk9lHz9YF1rBNojiEJcI=) 3: 326131343a316563373a663730303a3a2f34342d3438203d3e20333937343233.roa (hash: 3NaEQ7JEzM4oESWmvkMu3mTAfj7phWpZMjjU4RHfTkQ=) 4: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer (hash: jLV89odZdgTYzYRcumFoTReP+gmmk+raXpcoYf0+wxA=) 5: 326131343a316563373a313030303a3a2f33362d3438203d3e20323134343831.roa (hash: mAC3tE41nQDojIaT/TKY9BuNdhC77RQ6VPm5O+XWCIE=) 6: 326131343a316563373a663930303a3a2f34302d3438203d3e20323131363733.roa (hash: eFx1IPRipEBged0ZijUlxcw0OO6jOfnGP3TjandnEEA=) 7: 326131343a316563373a663732303a3a2f34342d3438203d3e203139333138.roa (hash: 354DUYTmwYIpJ7s6pAfElMpcSbsG0UySE6atyDydlaw=) 8: 326131343a316563373a666330303a3a2f34302d3438203d3e20323130363435.roa (hash: D0UhxJixjH/6ED4b7asHdvZhN16xQRz9JstOKq1KOMc=) 9: 326131343a316563373a666530303a3a2f34302d3438203d3e20323135343637.roa (hash: 8asU86WRYRMPRuHXiCGWb31YsN6wlyGCHOUyjPq08QE=) 10: 2AFACA7F316DBE0CFF394F9D5952E52992F185F1.cer (hash: TzD6pGlBEMmZI/OlLFvK4Q5nKNXovDA7wOkDjfwohQo=) 11: 326131343a316563323a3a2f34302d3434203d3e20323135333138.roa (hash: 1f8XyNlehbCOnOttGzyrDosIHnqaI9sKAvrNf1ADCiI=) 12: 326131343a316563373a666230303a3a2f34302d3438203d3e20323134373435.roa (hash: 6hKao63oIzBdls8N02e3UeaWWtVa56Xgit+XQJDfjec=) 13: 39312e3139362e362e302f32342d3234203d3e20323135333138.roa (hash: j1BjBA5NyrZGkTgGio3bSgpZw6QFV9sBz2jgQ+DhB30=) 14: 326131343a316563373a666130303a3a2f34302d3438203d3e20323134333635.roa (hash: D7vq42LlJ1JkjKrlS8EXaLer6htaFFui19vj1Iz46+0=) 15: 326131343a316563373a666666633a3a2f34382d3438203d3e20323136333339.roa (hash: Xpu7YHsE9Uu/Z34+AM32q6wFmIndeEkcOzm4kV29gZU=) 16: 326131343a316563373a666661303a3a2f34382d3438203d3e20323133353135.roa (hash: uw8e5+V55rs+wlENeJdGRICWtffz7xQmePuL+3U/nIU=) 17: 326131343a316563373a663830303a3a2f34382d3438203d3e20323131303139.roa (hash: IUL9dWtw0Umsxfs7xwdo1JVZ6ulAsKal+ROC0kpiHgM=) 18: 326131343a316563373a666666653a3a2f34382d3438203d3e20323135343733.roa (hash: tXMEYMrTa38uR0L+SQ9LimzmDrpxo8zhMIaTp0PKkR0=) 19: 326131343a316563373a666666663a3a2f34382d3438203d3e20323030313739.roa (hash: jxX5jejatt6POI8r69/OIdC4tpqjlqDh7/l5cMHt1Lc=) 20: 326131343a316563373a313130303a3a2f34302d3438203d3e20323135343337.roa (hash: LSZWA34YwCO9D6JtWEG8LpUQ1o3Anb+MGXWPU43gT4A=) 21: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer (hash: BF/TWOjb2Ii4r0osOdYS/rUG+zOQPpS2tAXbzEo5Wzo=) 22: 326131343a316563343a3a2f33322d3430203d3e203535323031.roa (hash: J7TluaWBMRkzmoR+yQUgqy6TY9pp5e+qFllmxawGaBk=) 23: 326131343a316563373a666666643a3a2f34382d3438203d3e20323038343533.roa (hash: cQGzH58GG/5AlClFkvMjXXZFAsalmfdZS0xTjTmJx5Q=) 24: 326131343a316563373a663630303a3a2f34302d3438203d3e20323133393938.roa (hash: jfvc4Qyrnftgf9GYsuLUox0bHp6mia0CtR4lMdTVrZY=) 25: 326131343a316563373a323030303a3a2f34302d3438203d3e20323133353135.roa (hash: ei7uKbr21cStunIFD4/+QnxpXX+lUv4yRtUBnFqqQIw=) 26: 326131343a316563373a663731303a3a2f34342d3438203d3e20323030303838.roa (hash: AEg6jBnmgaUb2x64BLtcycaY+zMRMacIwLXjCKOp0Kc=) 27: 3134EE987E08D8B5583FEEF621A03150C4F35434.crl (hash: OogLbWPt6UZMWo2DxrZlfo2RXx/4+5jnY/mpagefYnk=) 28: 326131343a316563373a663530303a3a2f34302d3430203d3e20323038343533.roa (hash: 26SEXU3Pd+BR8SHx6kufhwY94Io89XBTIVQPTTPnVB8=) 29: 326131343a316563373a663830313a3a2f34382d3438203d3e20323131303139.roa (hash: q5taedROXWkWDrb/6D/rTI85VzK640g7YzLTCK454po=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 13:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:95:a3:bd:d5:89:3f:ef:5d:29:18:c2:c4:10:4c:01:51:54:10:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434 Validity Not Before: Oct 21 10:57:00 2025 GMT Not After : Oct 22 13:32:00 2025 GMT Subject: CN=61B1B32BC66E16B32FA4C35B7C2B42FF2A639C6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:68:17:9d:c9:73:90:19:45:04:0c:8a:87:a2: 81:53:1d:ba:57:d5:16:dc:cb:d1:71:17:c4:ad:f3: d1:1f:f8:18:f4:7e:ef:f8:72:1f:7c:86:0e:16:9a: 6b:4c:24:bb:d7:36:5e:de:29:dc:d9:20:78:99:09: 64:2f:10:32:31:14:e3:6c:fc:af:8e:88:0a:d5:6f: c2:2f:0c:5d:b4:9a:c8:a9:6c:c1:cd:1e:90:62:1e: bc:d9:6c:bd:6c:14:09:2e:41:9a:82:0d:8d:fc:07: 9c:3b:a1:11:eb:91:40:a2:12:2d:d9:d4:e1:6e:65: 4b:bf:f8:91:2a:7f:90:09:80:4b:da:e3:0b:fc:ee: b5:6e:9e:de:83:f8:74:a0:b2:0f:77:d3:8a:97:9d: b4:de:77:7c:9e:8e:87:8c:39:d5:64:ff:4a:c8:94: 5a:2d:2b:76:7d:93:84:f2:b3:a0:f5:60:54:f5:16: eb:88:6b:40:20:77:6d:11:21:f7:b2:93:cb:e4:e9: df:d8:ca:de:05:cc:d6:e5:e6:c9:ea:9a:24:6e:c2: e0:58:6c:f0:b6:c4:1d:7d:04:41:da:40:86:29:66: fe:1b:db:71:10:f3:83:05:35:ad:d7:ac:50:d8:ea: 0e:59:1a:93:b4:79:3d:35:cb:e1:64:60:c7:99:8b: 14:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B1:B3:2B:C6:6E:16:B3:2F:A4:C3:5B:7C:2B:42:FF:2A:63:9C:6C X509v3 Authority Key Identifier: keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:25:8c:5a:bc:fc:c6:64:6b:3b:2f:05:58:e1:02:8f:58:28: f7:ae:3e:a6:ee:e8:bd:80:c1:19:64:e7:2a:36:0a:4f:4c:c2: 0b:91:5c:70:45:ad:65:0d:64:9f:27:ed:ff:bd:fc:51:36:5f: dd:84:71:2e:cb:ea:0c:d1:21:3d:5b:83:2e:47:c7:4a:da:df: ca:e9:61:65:95:48:60:57:97:39:7c:9e:72:5d:e9:7a:64:9f: 5d:5c:00:af:c1:c5:15:0b:89:56:3a:3b:66:b2:46:4f:25:7f: 80:a6:7b:98:aa:ee:09:b4:7b:82:97:ee:06:b8:4e:01:ac:bc: 6e:a5:7b:dd:7c:2b:1f:3f:7e:79:61:17:44:05:a5:bb:72:18: dc:3a:e1:50:0e:9f:69:81:98:fe:2a:a6:20:16:ef:40:8f:fb: e0:9e:8e:c6:fa:0c:45:08:53:e2:2d:74:dc:ed:ef:db:00:ed: 5b:c2:a6:07:5e:cf:ec:86:61:7c:ed:f4:1d:37:67:bf:bc:3c: 4d:0d:02:41:3c:33:f4:39:01:87:02:41:88:7f:64:93:0c:69: 33:a4:50:bd:b6:41:6b:7a:fd:58:42:e3:21:e5:fc:f9:af:6c: 6f:09:10:fe:87:73:1b:01:a1:bf:79:98:14:3d:ec:b8:ef:03: b5:c4:54:af -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUB5WjvdWJP+9dKRjCxBBMAVFUEPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEzNGVlOTg3ZTA4ZDhiNTU4M2ZlZWY2MjFhMDMxNTBj NGYzNTQzNDAeFw0yNTEwMjExMDU3MDBaFw0yNTEwMjIxMzMyMDBaMDMxMTAvBgNV BAMTKDYxQjFCMzJCQzY2RTE2QjMyRkE0QzM1QjdDMkI0MkZGMkE2MzlDNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdaBedyXOQGUUEDIqHooFTHbpX 1Rbcy9FxF8St89Ef+Bj0fu/4ch98hg4WmmtMJLvXNl7eKdzZIHiZCWQvEDIxFONs /K+OiArVb8IvDF20msipbMHNHpBiHrzZbL1sFAkuQZqCDY38B5w7oRHrkUCiEi3Z 1OFuZUu/+JEqf5AJgEva4wv87rVunt6D+HSgsg9304qXnbTed3yejoeMOdVk/0rI lFotK3Z9k4Tys6D1YFT1FuuIa0Agd20RIfeyk8vk6d/Yyt4FzNbl5snqmiRuwuBY bPC2xB19BEHaQIYpZv4b23EQ84MFNa3XrFDY6g5ZGpO0eT01y+FkYMeZixSjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUYbGzK8ZuFrMvpMNbfCtC/ypjnGwwHwYDVR0j BBgwFoAUMTTumH4I2LVYP+72IaAxUMTzVDQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWEzYmI5M2YtOThhNC00YzdlLWEwZTEtODA1N2E0ZjA4 NmM5LzAvMzEzNEVFOTg3RTA4RDhCNTU4M0ZFRUY2MjFBMDMxNTBDNEYzNTQzNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01UVHVtSDRJMkxWWVAtNzJJYUF4VU1U elZEUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05 OGE0LTRjN2UtYTBlMS04MDU3YTRmMDg2YzkvMC8zMTM0RUU5ODdFMDhEOEI1NTgz RkVFRjYyMUEwMzE1MEM0RjM1NDM0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyWMWrz8xmRrOy8FWOEC j1go964+pu7ovYDBGWTnKjYKT0zCC5FccEWtZQ1knyft/738UTZf3YRxLsvqDNEh PVuDLkfHStrfyulhZZVIYFeXOXyecl3pemSfXVwAr8HFFQuJVjo7ZrJGTyV/gKZ7 mKruCbR7gpfuBrhOAay8bqV73XwrHz9+eWEXRAWlu3IY3DrhUA6faYGY/iqmIBbv QI/74J6OxvoMRQhT4i103O3v2wDtW8KmB17P7IZhfO30HTdnv7w8TQ0CQTwz9DkB hwJBiH9kkwxpM6RQvbZBa3r9WELjIeX8+a9sbwkQ/odzGwGhv3mYFD3suO8DtcRU rw== -----END CERTIFICATE-----Generated at Tue Oct 21 22:58:35 2025 by rpki-client