$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft File: A1EE5D09A0F5D0D87611013175C62E35777DA926.mft (raw, json) Hash identifier: W6Eu70OPzLWvrMm7em4wnur5bam4VJqcCWmzUvR5NiY= Subject key identifier: 06:94:CB:2A:E4:0F:CB:2C:FB:43:33:0F:32:9A:ED:9B:E3:DD:D7:24 Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 Certificate issuer: /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Certificate serial: 6E44B018D735A429529BCCD31F406BFD152C82DD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft Manifest number: 0290 Signing time: Thu 23 Oct 2025 11:25:15 +0000 Manifest this update: Thu 23 Oct 2025 11:20:15 +0000 Manifest next update: Fri 24 Oct 2025 13:55:15 +0000 Files and hashes: 1: 326131343a373538313a393130303a3a2f34382d3438203d3e20323134383431.roa (hash: TejNBoLvDqd6zzS1lptpFez+EdbwzXYJ6yM06vDQ9j0=) 2: 326131343a373538313a393130613a3a2f34382d3438203d3e20323135313438.roa (hash: g9TWsQZsTWz7mSDp6Y61gNZDSwAn6dADsEyVm1AJtlU=) 3: 326131343a373538313a393062303a3a2f34342d3438203d3e203134343437.roa (hash: 0s1d24KMFu1kYJPCMrebtn4XcHECqVsweN9wGCszluU=) 4: 326131343a373538313a393230303a3a2f34302d3438203d3e203134343437.roa (hash: kZ5VHXe1kAhX5tvSZsX77jhReBFDdvoZNrdYu896udw=) 5: 326131343a373538313a393230303a3a2f34302d3438203d3e20323039313039.roa (hash: pMn1lmNiSpZ9TgFB+IRiwlTd7+lbxKBF0vBWWTkkXYs=) 6: A1EE5D09A0F5D0D87611013175C62E35777DA926.crl (hash: oo3X8XP0Rd5ZDMfChs5/+x79nf11MccSHVGKUOLZRAs=) 7: 326131343a373538313a6666303a3a2f34382d3438203d3e20323135333634.roa (hash: nCwmmbP9gIjoEy95/v504iaQnyadcB1V8SB+J8/exJE=) 8: 326131343a373538313a393230303a3a2f34302d3430203d3e203134343437.roa (hash: wCZcPZ1Lk7X2Qee1qTSfN0RGP0Z21kPGqT0D7sgtD64=) 9: 326131343a373538313a393165303a3a2f34382d3438203d3e20323135333634.roa (hash: 2aDuD/D+lIpzPYcnGpfR3f4GvH7bzD6tXNlt4SzLv7s=) 10: 326131343a373538313a393061303a3a2f34332d3438203d3e203134343437.roa (hash: jsviVwthOZBlV5+oRRFYDUvQF+OHc4iDYR8PVPHLwkA=) 11: 326131343a373538313a393030303a3a2f34342d3438203d3e20323135333634.roa (hash: a41Xyu+1QM63sJBLjRXDXCMByy5FuK1D59e4kuksRCE=) 12: 326131343a373538313a393330303a3a2f34302d3438203d3e20323039313039.roa (hash: TWxboGw6/lxhoMiWiDnyOg4O9SxsEOXusyizWuah2wo=) 13: 326131343a373538313a393065653a3a2f34382d3438203d3e20323135333634.roa (hash: 5IFSShC1J1DPKr9fgEjy0DHzTqmR8W17B+sGrWUb29Q=) 14: 326131343a373538313a393061303a3a2f34332d3438203d3e20323135333634.roa (hash: imEjvtvCCz1eqwuI8/eFHCFB+WwTlJEDfPXRombfVNU=) 15: 326131343a373538313a393030303a3a2f33382d3338203d3e20323135333634.roa (hash: coziJfcvV7NZzAVbts1JQ6BKxT5yxFwdbwzsra8WCDw=) 16: 326131343a373538313a393063303a3a2f34342d3438203d3e203134343437.roa (hash: 1KwjyQC5mQq96/1cZ1aeVWaWGIQIpF6Ei+ZSWIfd5WM=) 17: 326131343a373538313a393031303a3a2f34342d3438203d3e20313430393135.roa (hash: 34CzDRdWck3x5QdKwY21JLn4ljy5X8PbpWV6VL1UPl8=) 18: 326131343a373538313a393066663a3a2f34382d3438203d3e20323135363137.roa (hash: JYfFIGSSsdhSc4V2wOJu9QFkSSC76MmCAjKsdTBmtQA=) 19: 326131343a373538313a393066653a3a2f34382d3438203d3e20323135333634.roa (hash: MyeYfbLc0//rjwnR8ZJ3TnxqQq4JflTHlrUTLQvk3gU=) 20: 326131343a373538313a393032303a3a2f34342d3438203d3e203339373533.roa (hash: 0nNVfH0UNkgevPAH9ITuwY5tE24LlYCDjFx46F3vtM0=) 21: 326131343a373538313a393165313a3a2f34382d3438203d3e20323135333634.roa (hash: F9b5BNgK8TO7NWcYalz+qyjvcxyYqlq+/TYg6mk1sTI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 13:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:44:b0:18:d7:35:a4:29:52:9b:cc:d3:1f:40:6b:fd:15:2c:82:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Validity Not Before: Oct 23 11:20:15 2025 GMT Not After : Oct 24 13:55:15 2025 GMT Subject: CN=0694CB2AE40FCB2CFB43330F329AED9BE3DDD724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:01:a6:59:bd:b2:10:94:d7:c3:84:5e:a6:8a: 10:71:51:47:fa:e6:a7:3a:dc:45:71:ad:cd:41:57: 35:2d:80:20:b4:04:56:d0:3b:79:ed:a6:aa:5f:20: ec:ef:bb:ea:7b:91:0e:b8:93:1e:f9:bd:80:3b:be: cd:8a:53:f2:97:3e:ca:4d:f3:55:67:63:44:0c:a9: 9a:91:22:5b:26:4a:f7:9e:b3:06:2b:8b:8f:0b:94: 51:2e:51:f8:8a:0e:b2:af:ba:e0:a0:1a:da:cc:fb: 29:eb:94:a5:ff:a8:65:e3:4a:d1:4d:1e:2d:4f:fc: 52:55:ae:e8:92:37:a6:ee:b8:cb:f7:e2:6f:23:d0: 0f:fa:20:f7:a5:8a:40:aa:25:79:07:b7:7c:62:cc: 89:4f:47:4a:92:c9:21:30:87:cf:da:cb:10:e9:ce: 11:8c:8f:7a:6b:dc:fc:bc:5f:4c:c7:d3:c3:c9:e5: ac:a7:88:0e:85:c5:a0:00:0c:15:c8:9d:26:8c:f2: 35:01:f9:a3:d2:fb:fe:ad:1f:62:2e:cf:8d:b9:49: 8e:b9:21:09:08:6d:5b:b2:e4:3b:19:ea:ed:3c:6d: aa:2f:44:69:0f:09:10:72:6a:f8:ac:12:a9:8e:99: bc:37:60:24:1b:69:51:ba:21:a3:e5:d4:ac:c0:d7: 43:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:94:CB:2A:E4:0F:CB:2C:FB:43:33:0F:32:9A:ED:9B:E3:DD:D7:24 X509v3 Authority Key Identifier: keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:86:c2:20:51:e1:6e:50:46:60:f3:f4:af:c5:d7:ad:45:7c: cf:6f:b7:5a:20:e9:ad:e8:50:b3:fa:65:d4:40:45:92:32:74: ff:9e:69:16:2e:ec:cc:eb:9c:b8:3d:07:6a:9a:3f:e3:be:5d: 6b:f0:fe:c1:b7:49:f6:78:ae:02:b3:37:46:57:c6:a8:92:e1: a3:a1:27:7f:03:26:f7:ec:e8:b1:a3:a1:3b:7a:19:88:29:25: 74:79:a2:04:de:47:e8:9b:37:88:5d:5a:5a:be:a8:9f:b4:3d: 3c:2d:64:e2:f1:ba:3d:76:ce:99:1b:83:9c:db:23:f0:10:bf: 30:ff:2d:ab:44:ff:9a:68:86:9f:10:75:8a:a5:74:29:7e:eb: 80:cf:ad:1d:c7:ad:4e:3c:c6:d0:ec:55:84:37:a8:92:c1:5f: 0c:b3:75:33:3a:4c:a3:ef:ef:b0:b1:cb:92:06:34:c0:c8:57: 79:40:29:7a:e7:45:96:e0:7d:d9:58:db:df:90:c2:8a:05:09: a9:b6:a7:65:1d:dc:ad:f9:a2:7a:0d:e4:54:29:6d:fc:ab:aa: 56:cf:c4:70:4c:f9:9f:79:8d:e7:98:54:ff:20:08:48:ff:aa: 69:2a:8b:49:d1:a6:7b:d5:8f:5b:07:de:e3:49:77:ce:95:27: 69:f6:7e:7f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUbkSwGNc1pClSm8zTH0Br/RUsgt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3 NzdEQTkyNjAeFw0yNTEwMjMxMTIwMTVaFw0yNTEwMjQxMzU1MTVaMDMxMTAvBgNV BAMTKDA2OTRDQjJBRTQwRkNCMkNGQjQzMzMwRjMyOUFFRDlCRTNEREQ3MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSAaZZvbIQlNfDhF6mihBxUUf6 5qc63EVxrc1BVzUtgCC0BFbQO3ntpqpfIOzvu+p7kQ64kx75vYA7vs2KU/KXPspN 81VnY0QMqZqRIlsmSveeswYri48LlFEuUfiKDrKvuuCgGtrM+ynrlKX/qGXjStFN Hi1P/FJVruiSN6buuMv34m8j0A/6IPelikCqJXkHt3xizIlPR0qSySEwh8/ayxDp zhGMj3pr3Py8X0zH08PJ5ayniA6FxaAADBXInSaM8jUB+aPS+/6tH2Iuz425SY65 IQkIbVuy5DsZ6u08baovRGkPCRByavisEqmOmbw3YCQbaVG6IaPl1KzA10OHAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUBpTLKuQPyyz7QzMPMprtm+Pd1yQwHwYDVR0j BBgwFoAUoe5dCaD10Nh2EQExdcYuNXd9qSYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODU1YzdkNWEtMTVjNC00NTg5LTg1ZmEtYjQ5MWEwNzEw NDhjLzAvQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3NzdEQTkyNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BMUVFNUQwOUEwRjVEMEQ4NzYxMTAxMzE3 NUM2MkUzNTc3N0RBOTI2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg1NWM3ZDVhLTE1YzQtNDU4OS04NWZhLWI0OTFhMDcxMDQ4Yy8wL0ExRUU1RDA5 QTBGNUQwRDg3NjExMDEzMTc1QzYyRTM1Nzc3REE5MjYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBrhsIg UeFuUEZg8/SvxdetRXzPb7daIOmt6FCz+mXUQEWSMnT/nmkWLuzM65y4PQdqmj/j vl1r8P7Bt0n2eK4CszdGV8aokuGjoSd/Ayb37Oixo6E7ehmIKSV0eaIE3kfomzeI XVpavqiftD08LWTi8bo9ds6ZG4Oc2yPwEL8w/y2rRP+aaIafEHWKpXQpfuuAz60d x61OPMbQ7FWEN6iSwV8Ms3UzOkyj7++wscuSBjTAyFd5QCl650WW4H3ZWNvfkMKK BQmptqdlHdyt+aJ6DeRUKW38q6pWz8RwTPmfeY3nmFT/IAhI/6ppKotJ0aZ71Y9b B97jSXfOlSdp9n5/ -----END CERTIFICATE-----Generated at Fri Oct 24 04:30:02 2025 by rpki-client