$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft File: B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft (raw, json) Hash identifier: y2O8hi0S6xFo932SMMe/Aoh2FNbUIm7bi1MPbhslhSQ= Subject key identifier: CD:38:70:DF:74:42:D4:66:08:19:ED:30:52:44:D7:C4:C9:3A:4F:B5 Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0 Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0 Certificate serial: 4FEA75C9D52EB62CAFD10B0DBFA6E009C526332D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft Manifest number: 04A4 Signing time: Tue 21 Oct 2025 00:07:05 +0000 Manifest this update: Tue 21 Oct 2025 00:02:05 +0000 Manifest next update: Wed 22 Oct 2025 02:23:05 +0000 Files and hashes: 1: 3138352e3136372e32372e302f32342d3234203d3e203630343538.roa (hash: qmcJVcdT4rmfgLdWbchNjQUjUr84q4fznJ3O5A3Ac6k=) 2: 3138352e3230322e3134372e302f32342d3234203d3e203630343538.roa (hash: 4WWLNzVcecuIV7DQH3TBRPk5m1a8bolBgWM4/XkK+mA=) 3: 36322e3132322e3138392e302f32342d3234203d3e2033313730.roa (hash: mbpZXZK/fM7vaFZ5y82xMnQ6rCPjr7XSXm9Q6bD78C4=) 4: 3138352e3135362e3231382e302f32342d3234203d3e203630343538.roa (hash: IhLfWMdp3wfBoJIgMf1dZQYIiVjH+IC6uyZDFZApUo0=) 5: 3138352e33372e3232392e302f32342d3234203d3e203630343538.roa (hash: HYaWDlREHWbcyxGyqKTrHitDp9vR4XbaPjWC/NS6hv0=) 6: 3138352e3230322e3134362e302f32342d3234203d3e203630343538.roa (hash: RGdxLEzytt0V9LWy9RSfzKHfvGrjEh/8BhnnQWUWyk0=) 7: 3139352e382e3131392e302f32342d3234203d3e203630343538.roa (hash: uYf/vuY3IMzkKnywh+WrIJi9K5kM4HORH0NByn4xLTY=) 8: 3138352e33372e3232382e302f32332d3233203d3e203630343538.roa (hash: vZ0xeNj44WIw/+zpqjsYVz/OQXDqqT3PO1sgTbLjyjI=) 9: 3138352e3135362e3231372e302f32342d3234203d3e203630343538.roa (hash: rjDp5tr7Ibp1svXb6aTy1VUyxTkkVlR9zj5PgrnqiGs=) 10: 3138352e33372e3233302e302f32342d3234203d3e203630343538.roa (hash: IY6mHaJKET6LoAapCaxdFKM5n9LWTpQVBjwiMh+lOuI=) 11: 3138352e3130302e37322e302f32322d3232203d3e203630343538.roa (hash: tt+7v33pgcfL/OR4IEoj2XRjnG0uMYFwUsQyGd/wSJQ=) 12: 3139352e382e34382e302f32342d3234203d3e203630343538.roa (hash: 0QQ/atSVhgxbxnMmZi2CZaSsjgioOzPYv64es6L7MGQ=) 13: 39312e3139392e3130382e302f32342d3234203d3e203630343538.roa (hash: Ltqzgt94mzKk47x8Q+jGxz5JrNySG/Y0tzlAfjYhG0M=) 14: 3138352e3136372e32362e302f32342d3234203d3e203630343538.roa (hash: AU1XTzixRsIIk2ZdZN58IrYKd8IFItgt7vU8fJub8+o=) 15: 3138352e3132352e37382e302f32342d3234203d3e203630343538.roa (hash: p8VAezPiQ82kk+zpMKLkJeAo6bWXq8DJwyiOE3M0QAE=) 16: 3138352e3230322e3134352e302f32342d3234203d3e203630343538.roa (hash: W83bzJQhGHobYnfM1tmulNDtSSyNf73jimSZ1AGOpI0=) 17: 3138352e3232362e3135342e302f32342d3234203d3e20393834.roa (hash: OnyMDDjhfbjBWnmH/O9nK3hLulu4nf9Z9u4/z8prRCw=) 18: 34352e3135312e3139322e302f32322d3232203d3e203630343538.roa (hash: MsQjsESlTuEcbjS9mONurH+MDUvuc4E1Aq8WiShITro=) 19: 3138352e3232362e3135332e302f32342d3234203d3e20323131343430.roa (hash: rGW7/8GB609/SHNrTEWoAaTI5dQHouhe15jjA9R2QwM=) 20: 39312e3139392e3130322e302f32342d3234203d3e203630343538.roa (hash: RopopLlJOVRjGz4avSxfYPvo0OC9G/eDY75KWGAV/aw=) 21: 3138352e33372e3233312e302f32342d3234203d3e203630343538.roa (hash: fMMz/NMrWe4m6FBXtQw+qCDaXqsRssd0JOLvgwTj808=) 22: 3138352e3230322e3134342e302f32342d3234203d3e203630343538.roa (hash: wz4+Z748yPCelmg+RPJx6JGtTSzenzKPpdD84rUDauM=) 23: 3138352e3135362e3231362e302f32342d3234203d3e203630343538.roa (hash: EvCO85+TEFrCa3fyF2Hvn+tlr4Nv9RYk07bI6yFMPvw=) 24: 3139352e382e34392e302f32342d3234203d3e203630343538.roa (hash: 4nPeE4WDot0aQzE1E2AL4UC2dMhv5fMNvAbvgkN5zUQ=) 25: 34352e3134332e3134382e302f32322d3232203d3e203630343538.roa (hash: Sww7+LIBcy25xOjBNTHS8houn90nQJV29QTFkg33x0A=) 26: 3138352e3136372e32352e302f32342d3234203d3e203630343538.roa (hash: PR56mJAfACxvVOTWCWLvFZ+zDPcod8MGy8q5KeWDe1I=) 27: 3138352e3132352e37362e302f32342d3234203d3e203630343538.roa (hash: E1EBzi/x9bAqWwU2+c2DtydupdQVlQih+ZQ9KG5XJM8=) 28: 3139352e3231312e35312e302f32342d3234203d3e20343030393039.roa (hash: 0gSBq8V9lU7SHxebbh3UieoZZ+QMrAfR0WkkimNMOGY=) 29: 3138352e3231372e3134302e302f32342d3234203d3e20323131333733.roa (hash: hNnRgizTxivmocfPjGcdnyRRZ7RF0OREZEdxCth7bFY=) 30: 3138352e3136322e3137312e302f32342d3234203d3e203630343538.roa (hash: dIPcyVrIf7ut3mplg6I+FaMP77/taZ1uyGrgWAEtw1I=) 31: 3138352e3132352e37392e302f32342d3234203d3e203630343538.roa (hash: chFrGzVrsGDgHbR9U302S1vgNYtyu8hjjwKJPtAYWHA=) 32: 3139342e35392e3232332e302f32342d3234203d3e20313939363134.roa (hash: Q+aTRZ6Bj34jlOI880qva89jcDljlnRfljW0rbqvKUM=) 33: 39312e3139392e39302e302f32342d3234203d3e203630343538.roa (hash: 24Wi6BO1o+rN9DTXADpFgbBkLMPIwcsuYBHhIDkNNJk=) 34: 33312e3231372e3235302e302f32342d3234203d3e2039303039.roa (hash: L+538BnpKcoPw9UMvgnBDsovbAC1nWxPwoO/WNMOxrE=) 35: 34352e3134362e3138382e302f32322d3232203d3e203630343538.roa (hash: oKJ0nojLfMNgIC0ZVHO9adCFA5GxNLUlSGYZ+ppZl7U=) 36: 3138352e3232362e3135352e302f32342d3234203d3e203634323637.roa (hash: BphaL/Q+MmU9qXxX06J/d3Yz3MPwKV/7sGiY2uy2MYY=) 37: 3138352e3136322e3136382e302f32332d3233203d3e203630343538.roa (hash: FhpX/C9zk9FVjj10PImD/wKS/RfpAC0kUdP0bDZAwyg=) 38: B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl (hash: rnlTR4SNHTLQRWX1LgFgvabMJOZWrMT4DdkRzwGkyGw=) 39: 3138352e3135362e3231392e302f32342d3234203d3e203630343538.roa (hash: 8XkoDAvNeGNoBWLohtYrD/bWj0oa0HEtFyjdhTJh8rk=) 40: 3138352e3136372e32342e302f32342d3234203d3e203630343538.roa (hash: bOe+V/bSkHZWJOaV1Qj2XTs/2xeIT/LkKzSKku71Icc=) 41: 3138352e3232362e3135322e302f32342d3234203d3e203432383331.roa (hash: HpM8i92Nx8n+PHLNcWeurSiekKwVSUI6F0Ofn+tlEDo=) 42: 3138352e33372e3232382e302f32342d3234203d3e203630343538.roa (hash: mw435AXz9xHWhN238pBrnHfvo9tx+w0yMNZcNgIAnFw=) 43: 39312e3139392e3132332e302f32342d3234203d3e203630343538.roa (hash: BatNReK7gXNaqXPa5VRtj5h++zM7ew2F8IoAg/I/2U8=) 44: 34352e3133312e38302e302f32322d3232203d3e203630343538.roa (hash: oqXmbxyjeaOX95W9eJVEUG/807pdk0CrvL0gbJu3djk=) 45: 3138352e3136322e3137302e302f32342d3234203d3e203630343538.roa (hash: v9yukWrQuv+5l5wy9/dUA6cYOeUvX0B8QwsY9W2Wlgk=) 46: 3138352e3132352e37372e302f32342d3234203d3e203630343538.roa (hash: iBX/+QeuXYuSCTlJT7cmF+tQX/4HCmniMjyG8lOqUWA=) 47: 3138352e3231352e3131342e302f32342d3234203d3e203631333137.roa (hash: R9WhNu2MdPr1NOFjMmZeGBiIE2nwtlE4Jo64OX4u4HA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 02:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ea:75:c9:d5:2e:b6:2c:af:d1:0b:0d:bf:a6:e0:09:c5:26:33:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0 Validity Not Before: Oct 21 00:02:05 2025 GMT Not After : Oct 22 02:23:05 2025 GMT Subject: CN=CD3870DF7442D4660819ED305244D7C4C93A4FB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:50:f3:04:bc:1a:fc:66:dd:cc:15:fb:02:f1: 1b:23:86:e0:bb:ec:17:12:a8:9c:ae:ac:d5:04:51: c5:dc:da:78:f7:51:82:cd:e8:01:1e:5b:7b:40:c3: f0:3b:11:bd:34:d5:78:b5:ef:5e:86:54:ed:d6:15: c6:3c:ea:17:ca:c4:a9:b2:a9:fc:e4:2c:a2:a6:d6: 62:4a:83:0e:4c:b9:c1:32:ae:29:b1:5b:e4:d0:e6: 81:eb:43:92:2b:d7:26:4f:43:d1:d2:fb:d0:cd:63: 44:15:c3:5c:71:05:96:dd:c1:7c:4f:2e:4c:96:a5: cc:0e:78:a7:3d:97:2c:a1:5b:e5:c8:08:59:87:c4: 8a:c7:86:e6:46:3b:19:35:38:cb:5c:96:92:8b:ce: 96:c4:a2:52:1b:cb:9a:ef:41:1e:f1:06:df:3e:7b: cf:8b:73:ec:df:18:fd:22:60:00:ca:3e:19:a2:bf: fe:a9:6b:6d:50:31:ff:db:eb:d6:c1:1b:4a:b0:17: 88:97:69:d0:48:41:a4:e1:e2:87:cd:b3:e2:35:62: 23:46:0b:89:3a:db:48:c2:d1:b4:33:ff:da:0e:7e: a1:bf:5c:44:c3:c8:79:75:bd:3f:c0:97:e4:5c:1c: f7:e6:00:a1:dd:b4:96:bd:fb:d6:6d:b3:8b:0e:0c: 29:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:38:70:DF:74:42:D4:66:08:19:ED:30:52:44:D7:C4:C9:3A:4F:B5 X509v3 Authority Key Identifier: keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:d4:55:9f:ee:97:7a:98:cb:99:b0:b2:01:91:1c:34:be:85: a3:e6:d1:0b:d1:cb:67:b9:70:e7:97:1a:11:a5:37:6d:e0:a4: 6f:79:d9:8e:12:b7:0f:cf:fd:75:f5:bc:4b:e3:6b:00:c1:98: e6:6a:c2:a5:c5:ce:26:bb:b2:ef:87:c1:93:92:39:8d:d1:3f: 38:30:88:de:c1:17:08:a2:3e:d1:7d:08:7f:b6:91:36:6f:bc: 89:8b:54:8b:76:37:db:49:f3:2c:71:09:a6:92:69:80:eb:43: 08:ab:b0:d5:1c:1b:55:7d:87:c1:b6:4b:29:b3:3e:e4:b4:b6: b5:9e:31:d6:5d:3f:53:f1:13:6e:54:ee:b7:2f:d0:eb:af:1a: ec:01:ae:1e:20:46:73:50:d9:d8:f2:c2:23:eb:1e:50:05:e9: 88:da:1f:7f:73:45:58:06:34:d2:8c:9a:14:e0:1e:31:28:4d: cf:e1:cb:23:4b:eb:1f:50:56:e1:bb:0f:90:43:90:ee:37:1b: 02:66:e4:d0:b6:cd:13:f2:e7:85:08:68:b0:9c:17:ac:a2:50: fa:57:25:2a:ff:fd:4f:32:26:d5:63:a5:0f:77:a0:68:66:35: 94:c9:7e:6f:93:c9:5e:86:2a:e3:9a:ff:99:7f:8e:5d:8a:59: 27:4c:d4:08 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUT+p1ydUutiyv0QsNv6bgCcUmMy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjAxNzBhYmRjOTU1YWExNzZiZTJhZjI2Mjk5Njc4ZjJm N2M5YWNhMDAeFw0yNTEwMjEwMDAyMDVaFw0yNTEwMjIwMjIzMDVaMDMxMTAvBgNV BAMTKENEMzg3MERGNzQ0MkQ0NjYwODE5RUQzMDUyNDREN0M0QzkzQTRGQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxUPMEvBr8Zt3MFfsC8RsjhuC7 7BcSqJyurNUEUcXc2nj3UYLN6AEeW3tAw/A7Eb001Xi1716GVO3WFcY86hfKxKmy qfzkLKKm1mJKgw5MucEyrimxW+TQ5oHrQ5Ir1yZPQ9HS+9DNY0QVw1xxBZbdwXxP LkyWpcwOeKc9lyyhW+XICFmHxIrHhuZGOxk1OMtclpKLzpbEolIby5rvQR7xBt8+ e8+Lc+zfGP0iYADKPhmiv/6pa21QMf/b69bBG0qwF4iXadBIQaTh4ofNs+I1YiNG C4k620jC0bQz/9oOfqG/XETDyHl1vT/Al+RcHPfmAKHdtJa9+9Zts4sODCmdAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUzThw33RC1GYIGe0wUkTXxMk6T7UwHwYDVR0j BBgwFoAUsBcKvclVqhdr4q8mKZZ48vfJrKAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2E3ODllODctZjQ4NC00MjNkLWExZDctMmMyZDU4NjBk MmVjLzAvQjAxNzBBQkRDOTU1QUExNzZCRTJBRjI2Mjk5Njc4RjJGN0M5QUNBMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NCY0t2Y2xWcWhkcjRxOG1LWlo0OHZm SnJLQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83YTc4OWU4Ny1m NDg0LTQyM2QtYTFkNy0yYzJkNTg2MGQyZWMvMC9CMDE3MEFCREM5NTVBQTE3NkJF MkFGMjYyOTk2NzhGMkY3QzlBQ0EwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAutRVn+6XepjLmbCyAZEc NL6Fo+bRC9HLZ7lw55caEaU3beCkb3nZjhK3D8/9dfW8S+NrAMGY5mrCpcXOJruy 74fBk5I5jdE/ODCI3sEXCKI+0X0If7aRNm+8iYtUi3Y320nzLHEJppJpgOtDCKuw 1RwbVX2HwbZLKbM+5LS2tZ4x1l0/U/ETblTuty/Q668a7AGuHiBGc1DZ2PLCI+se UAXpiNoff3NFWAY00oyaFOAeMShNz+HLI0vrH1BW4bsPkEOQ7jcbAmbk0LbNE/Ln hQhosJwXrKJQ+lclKv/9TzIm1WOlD3egaGY1lMl+b5PJXoYq45r/mX+OXYpZJ0zU CA== -----END CERTIFICATE-----Generated at Tue Oct 21 13:22:59 2025 by rpki-client