$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.mft File: 21291D2963EE74682B10BECBA6060EF246C76881.mft (raw, json) Hash identifier: ZXJVv+WMKF06cmpTaKWMOCIzw4AdJUiFNVBMUj2RbXU= Subject key identifier: 6B:6B:AD:19:7D:ED:DC:9C:E4:2C:BE:43:2F:91:63:58:57:CD:C0:40 Authority key identifier: 21:29:1D:29:63:EE:74:68:2B:10:BE:CB:A6:06:0E:F2:46:C7:68:81 Certificate issuer: /CN=21291D2963EE74682B10BECBA6060EF246C76881 Certificate serial: 50C27DBAABB5E1869ACD14B18E7352122A4D7A7D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21291D2963EE74682B10BECBA6060EF246C76881.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.mft Manifest number: 5A Signing time: Thu 23 Oct 2025 12:05:47 +0000 Manifest this update: Thu 23 Oct 2025 12:00:47 +0000 Manifest next update: Fri 24 Oct 2025 12:07:47 +0000 Files and hashes: 1: 326131343a373538333a326130303a3a2f34302d313238203d3e20323131323831.roa (hash: 7kcvc7XAv56qFVmafM/D1iw7yZ48tgW4TPaORt+OViQ=) 2: 326131343a373538333a323930303a3a2f34302d313238203d3e20323134363339.roa (hash: Ig0MdxpLUWBFH0/Ucxj7iGLUl0RuOHs0CxE43qARgYQ=) 3: 21291D2963EE74682B10BECBA6060EF246C76881.crl (hash: 9vG3vLZRKp2Lk6iwgAJg9ktGsDM4yiSkvv/HskdvYWc=) 4: 326131343a373538333a323038303a3a2f34362d313238203d3e20323035393431.roa (hash: kC7ihYm/R5OERXYsLtyhxzyEmlKI1XwHLSptM6n0vvg=) 5: 326131343a373538333a326663303a3a2f34322d313238203d3e20323035393431.roa (hash: QTSey6Hp5GxpO8W9pZDSl/g5MxHZNI9D5mYgXqg8BF0=) 6: 326131343a373538333a323038343a3a2f34362d313238203d3e20323035393431.roa (hash: PTSU8qGNCimGfVZLMLacuvM/VXxIUmWAazoLI57rq4o=) 7: 326131343a373538333a323030303a3a2f33362d313238203d3e20323035393431.roa (hash: bttdf07pV56EPNWCClejJ5VLezHQTqirYk24CtzpecY=) 8: 326131343a373538333a323030303a3a2f34312d313238203d3e20323133343133.roa (hash: qcv62vhft+CfRefcIljQMYwhTtHw5pqiJA6YzH0JoaE=) 9: 326131343a373538303a666639303a3a2f34342d313238203d3e20323035393431.roa (hash: 5FD/Mehv7v0xNezRDRW9iBPyN5Dfwk8GJ9l323IIqtY=) 10: 326131343a373538333a326230303a3a2f34322d313238203d3e20323134323035.roa (hash: VYyQ9HRup4ddqrcoUKfcEWZA3flgJAKyvMn8Qb2hQCc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21291D2963EE74682B10BECBA6060EF246C76881.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 12:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:c2:7d:ba:ab:b5:e1:86:9a:cd:14:b1:8e:73:52:12:2a:4d:7a:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21291D2963EE74682B10BECBA6060EF246C76881 Validity Not Before: Oct 23 12:00:47 2025 GMT Not After : Oct 24 12:07:47 2025 GMT Subject: CN=6B6BAD197DEDDC9CE42CBE432F91635857CDC040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ad:ce:7a:8d:98:79:ec:8c:89:70:d7:de:c4: 55:43:60:58:bf:14:82:ff:44:23:04:72:66:57:6e: 1f:b8:82:6b:d0:88:de:c5:e1:ff:e7:0b:07:27:b1: ba:db:0a:01:c6:64:1e:7e:b1:4e:e2:0e:a0:2c:22: 4c:44:c6:32:59:86:b5:3d:fc:e6:dc:c1:e3:ad:d8: 06:52:03:6f:6a:bc:c0:74:c9:62:64:e3:41:6b:18: 25:48:8a:27:02:af:6d:cb:4c:35:19:05:a8:89:81: 5d:4b:b7:0a:aa:5f:4d:19:44:fd:f3:68:27:87:44: 00:17:31:0c:7e:d0:ea:a3:73:66:e7:e5:3b:18:e9: c5:a3:33:d9:0d:63:ce:4e:87:7e:05:45:87:0e:2a: d6:ec:a4:32:5f:de:77:9b:2f:3b:89:d5:e6:5f:00: c1:6f:8a:09:6c:c6:23:7c:a0:17:99:30:e3:7b:ba: c7:77:0a:96:37:15:3e:30:14:85:42:a7:86:5d:3d: b0:cc:a7:09:e2:2d:e5:d5:7a:c1:e4:fa:02:f8:30: e9:30:c8:8c:3f:14:99:28:ac:80:2a:85:6e:b5:3a: 93:a1:5c:ae:8d:8a:19:ac:60:9f:e4:cd:05:dd:56: a1:e6:12:64:e1:03:6d:6a:06:ec:0e:b0:07:44:e8: 62:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:6B:AD:19:7D:ED:DC:9C:E4:2C:BE:43:2F:91:63:58:57:CD:C0:40 X509v3 Authority Key Identifier: keyid:21:29:1D:29:63:EE:74:68:2B:10:BE:CB:A6:06:0E:F2:46:C7:68:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21291D2963EE74682B10BECBA6060EF246C76881.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:55:15:e8:65:b9:7d:ff:00:87:22:d2:b1:15:b9:79:2d:80: c5:d5:1f:72:67:cc:5b:56:96:75:28:30:d1:92:ec:9a:26:0e: 3e:e2:1b:e3:a4:88:ff:cc:0a:c9:fb:f0:cc:0a:01:53:eb:fe: d7:35:cf:31:23:12:e9:cf:df:39:0a:22:d4:a5:01:8f:a1:33: 56:fa:e7:30:95:3d:f2:fb:e1:47:1f:36:8f:bd:8d:f0:40:9f: 71:44:88:15:b3:2d:d4:16:b8:54:8d:72:a4:15:8e:85:42:bc: c8:41:3a:da:ae:ad:54:82:59:19:f4:b5:35:cc:ad:28:ba:62: 4f:55:f5:3d:12:ea:12:2b:36:da:81:f2:a7:df:63:38:4f:55: 7d:7d:98:d9:5c:4d:eb:20:d0:5a:aa:e5:5a:47:a7:a2:44:5e: 70:d4:a3:a4:62:d1:bd:b9:e4:23:79:ed:72:15:5d:bf:d6:e5: 91:da:82:c9:e2:e6:b6:41:79:7b:9f:00:99:e8:5b:05:75:55: 14:a1:47:41:35:4f:e9:8a:ee:cb:be:6a:83:10:a8:2b:77:f0: 36:42:c2:57:c2:ff:e1:cb:3c:02:a2:ef:db:87:70:14:d1:e1: 9f:54:55:6d:8a:15:67:58:b5:d7:56:2d:9f:91:44:30:d9:c0: a0:21:44:46 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUUMJ9uqu14YaazRSxjnNSEipNen0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEyOTFEMjk2M0VFNzQ2ODJCMTBCRUNCQTYwNjBFRjI0 NkM3Njg4MTAeFw0yNTEwMjMxMjAwNDdaFw0yNTEwMjQxMjA3NDdaMDMxMTAvBgNV BAMTKDZCNkJBRDE5N0RFRERDOUNFNDJDQkU0MzJGOTE2MzU4NTdDREMwNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7rc56jZh57IyJcNfexFVDYFi/ FIL/RCMEcmZXbh+4gmvQiN7F4f/nCwcnsbrbCgHGZB5+sU7iDqAsIkxExjJZhrU9 /ObcweOt2AZSA29qvMB0yWJk40FrGCVIiicCr23LTDUZBaiJgV1LtwqqX00ZRP3z aCeHRAAXMQx+0Oqjc2bn5TsY6cWjM9kNY85Oh34FRYcOKtbspDJf3nebLzuJ1eZf AMFviglsxiN8oBeZMON7usd3CpY3FT4wFIVCp4ZdPbDMpwniLeXVesHk+gL4MOkw yIw/FJkorIAqhW61OpOhXK6NihmsYJ/kzQXdVqHmEmThA21qBuwOsAdE6GLTAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUa2utGX3t3JzkLL5DL5FjWFfNwEAwHwYDVR0j BBgwFoAUISkdKWPudGgrEL7LpgYO8kbHaIEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzgvMjEyOTFEMjk2M0VFNzQ2ODJCMTBCRUNCQTYwNjBFRjI0NkM3Njg4MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMTI5MUQyOTYzRUU3NDY4MkIxMEJFQ0JB NjA2MEVGMjQ2Qzc2ODgxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY4YWJhYmJiLWYwNDgtNGRlMS05MjA2LThkNDBmMDcxODA4Yi84LzIxMjkxRDI5 NjNFRTc0NjgyQjEwQkVDQkE2MDYwRUYyNDZDNzY4ODEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB9VRXo Zbl9/wCHItKxFbl5LYDF1R9yZ8xbVpZ1KDDRkuyaJg4+4hvjpIj/zArJ+/DMCgFT 6/7XNc8xIxLpz985CiLUpQGPoTNW+ucwlT3y++FHHzaPvY3wQJ9xRIgVsy3UFrhU jXKkFY6FQrzIQTrarq1UglkZ9LU1zK0oumJPVfU9EuoSKzbagfKn32M4T1V9fZjZ XE3rINBaquVaR6eiRF5w1KOkYtG9ueQjee1yFV2/1uWR2oLJ4ua2QXl7nwCZ6FsF dVUUoUdBNU/piu7LvmqDEKgrd/A2QsJXwv/hyzwCou/bh3AU0eGfVFVtihVnWLXX Vi2fkUQw2cCgIURG -----END CERTIFICATE-----Generated at Fri Oct 24 04:31:02 2025 by rpki-client