$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft File: 38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json) Hash identifier: zP70CxpBKInRiGtpas4VxeecVyhyUZBGunshiJVN3oI= Subject key identifier: F4:A0:E4:92:8A:49:21:C2:BF:9A:BC:62:D6:18:62:18:10:5F:03:E8 Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8 Certificate serial: 2967FCA08E50262CE6782FFA885D0243CC9D8951 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft Manifest number: 0184 Signing time: Sat 20 Sep 2025 03:35:36 +0000 Manifest this update: Sat 20 Sep 2025 03:30:36 +0000 Manifest next update: Sun 21 Sep 2025 06:09:36 +0000 Files and hashes: 1: 3138352e35382e3135372e302f32342d3234203d3e2039333034.roa (hash: ecPrVI69N/vnSd3FE9LMlI9j3yoUAyDEH+/p4MpTJaY=) 2: 33312e3138352e3130342e302f32342d3234203d3e203433383437.roa (hash: ooBmQ0XsExl9P6cs22gk7QC3kfjfWk/6TOw3sS2GKWM=) 3: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: Zxw7HANZ4fSS/h6IwZB62HG+NMCfSONfC+RPVG/FTSE=) 4: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: jK9tTJ3HWkDECaNJJZCeSwWGUPLGyK3Y5TeyBPZZ8ds=) 5: 3138352e35382e3135372e302f32342d3234203d3e2032393134.roa (hash: lpWXt6uFvU2PZ1sNhgr10rMfQuglN6ZjbNveDXRK2tg=) 6: 34362e3138322e31382e302f32332d3234203d3e203433383437.roa (hash: Da5w/Bxnka7S5rOrrg5UFoYVO7GdFYJVnpZd9dGl78w=) 7: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: bxI8j0Q43fNYwFfEpnx3zZA+WfxxHOFpyLP15cwiRJc=) 8: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: 2aiAtkkpFlb5J4UKg3KwRnaG7ituhGEa6s/dcTUAgJQ=) 9: 33312e3138352e3130372e302f32342d3234203d3e20323134323038.roa (hash: iqiKl6+YIrHEBq6ZgXjEwpHNvYPhUvsfMc60LM1HGfk=) 10: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: mN3Qu59H2oC79ZObPpdN6ubuCwdpq+KwMSfQr8+kwt4=) 11: 34362e3138322e31362e302f32332d3234203d3e203433383437.roa (hash: vT5tduJXQWPYe55NqnUZ1/bCxXQ97h9LLqUTKt2qn1I=) 12: 326130323a323937303a3a2f32392d3438203d3e203433383437.roa (hash: Kp3fSAxGQhZt59WSUhuk3xyV289hXnpQJ6XN2ox7Plw=) 13: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: /UuXq/SkWF47gXFnW/T4vEllXZulBrt5hUqt6XmiJns=) 14: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: DOt+xOMDogaXujbawrGL0U15zCSEQeK/RAeOdZ56ezk=) 15: 3138352e35382e3135382e302f32342d3234203d3e203537303433.roa (hash: 2rLX+VLjC2xO1KxOS+n2CnvGjfDyy5LLRhtxUy0z5HI=) 16: 33312e3138352e3130352e302f32342d3234203d3e203231383539.roa (hash: a63rT1N28Uv/Le5pLK02Tt+HFr5JVrcUSe5O3d53VJA=) 17: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: tjhKwoa/z/ms3eL96lf+MyeXfH8SFjq92hWldF9BNCA=) 18: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: 01LOWf7MxhRX+2Op4rDN5W7ucn6FteIUTuCGEpIiXqg=) 19: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: jGy7NRXxpQ8Adk8KlwvLUXW9fgmGYykhrzR6k8tJHIg=) 20: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: 8UOhWMcngrkWYQIcCU3SBAgl3I/ZHvxIdTlLkfR0HMQ=) 21: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: YFUHOvZUTuDXo1v/ldHHqjI9VjtTCBbJBPcqOziNAKY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Sep 2025 00:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:67:fc:a0:8e:50:26:2c:e6:78:2f:fa:88:5d:02:43:cc:9d:89:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8 Validity Not Before: Sep 20 03:30:36 2025 GMT Not After : Sep 21 06:09:36 2025 GMT Subject: CN=F4A0E4928A4921C2BF9ABC62D6186218105F03E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c7:b9:14:3c:19:dc:83:43:6b:e8:cf:29:09: 1c:b8:c8:df:f7:73:9c:9f:32:fa:35:d5:7e:c2:7d: 65:2f:b5:20:d0:ff:0d:7c:7a:a3:84:4d:1a:a2:1b: aa:0c:17:58:7e:80:b3:fa:c6:68:83:c7:0f:77:23: b0:92:cc:b6:81:92:32:16:aa:4c:03:a7:b1:3d:30: 1a:47:f8:c7:10:fa:27:cd:89:59:b5:ff:28:1d:72: bd:76:e0:bd:a0:04:6b:43:5e:90:4a:e2:2e:6e:6d: 86:b0:25:00:e8:48:77:90:1e:b8:e3:04:19:3a:17: fe:5a:32:ae:15:4f:2f:71:cb:ee:b4:ed:e6:27:da: a8:91:58:ea:2c:c8:5c:ae:62:4c:c2:af:a1:9a:48: 20:02:bd:8b:82:d5:23:35:be:4b:b5:2f:c3:30:af: 2e:af:4e:72:53:97:64:a8:a5:84:aa:c1:b1:3d:a3: 56:f3:82:c2:7a:2c:04:5f:a5:5d:63:2c:7e:c8:86: 2b:b9:15:2b:2f:70:aa:56:ec:eb:88:e2:31:fb:8a: db:93:99:39:ed:31:28:c4:73:a3:a8:01:c9:87:5d: 86:a8:14:05:bf:29:38:98:7f:a2:35:b5:6a:66:eb: ba:ee:18:91:f6:19:eb:4b:ce:5a:16:d0:5c:fd:5c: d1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A0:E4:92:8A:49:21:C2:BF:9A:BC:62:D6:18:62:18:10:5F:03:E8 X509v3 Authority Key Identifier: keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:0b:fd:ef:32:a5:39:13:e5:d9:26:94:4d:50:8c:95:9b:5a: 84:c9:da:1e:29:3d:df:59:60:39:67:d6:20:97:9a:a4:e4:2c: 1d:87:0d:f0:c2:11:92:c3:0c:ab:b1:0a:cf:e9:b6:a7:ca:b9: 7f:e8:6a:43:54:34:d5:ed:c0:e4:4c:a8:34:7b:30:a2:7a:f9: de:11:c1:f6:c0:70:25:6a:83:a3:de:03:75:bc:16:32:7f:4d: fd:5b:11:5b:0a:20:50:bb:db:90:eb:10:f0:9b:b3:5f:94:25: 16:31:35:98:06:40:4f:bb:73:34:86:c4:7d:26:6d:53:97:cc: 4f:9c:0c:7f:b1:6a:f6:20:81:1d:35:f2:ed:e2:67:46:9c:3c: b2:e5:c4:9b:13:2d:55:52:07:9d:be:77:fb:db:71:be:ef:d8: 24:69:2b:91:b9:28:eb:5e:4c:9b:21:06:ec:a7:38:1f:c6:b5: 0c:e5:a9:20:13:4a:83:57:ad:f4:b8:43:69:e2:4b:c3:07:58: 2d:88:71:16:98:2b:2e:35:cd:c2:db:4d:9c:1a:84:2d:34:7e: f2:06:50:ac:f9:59:b6:4f:e9:66:d4:c9:ee:f9:f5:2d:4c:94: fc:f6:b2:b8:a7:d8:c5:83:66:7b:be:e2:49:b1:39:bb:2f:c0: ff:33:5e:01 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKWf8oI5QJizmeC/6iF0CQ8ydiVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhhOTNjODFlY2QzMDhlNmE3NjMyNzE3MDQ1YjNkMzUx NTAxMjBmODAeFw0yNTA5MjAwMzMwMzZaFw0yNTA5MjEwNjA5MzZaMDMxMTAvBgNV BAMTKEY0QTBFNDkyOEE0OTIxQzJCRjlBQkM2MkQ2MTg2MjE4MTA1RjAzRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSx7kUPBncg0Nr6M8pCRy4yN/3 c5yfMvo11X7CfWUvtSDQ/w18eqOETRqiG6oMF1h+gLP6xmiDxw93I7CSzLaBkjIW qkwDp7E9MBpH+McQ+ifNiVm1/ygdcr124L2gBGtDXpBK4i5ubYawJQDoSHeQHrjj BBk6F/5aMq4VTy9xy+607eYn2qiRWOosyFyuYkzCr6GaSCACvYuC1SM1vku1L8Mw ry6vTnJTl2SopYSqwbE9o1bzgsJ6LARfpV1jLH7Ihiu5FSsvcKpW7OuI4jH7ituT mTntMSjEc6OoAcmHXYaoFAW/KTiYf6I1tWpm67ruGJH2GetLzloW0Fz9XNFfAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU9KDkkopJIcK/mrxi1hhiGBBfA+gwHwYDVR0j BBgwFoAUOKk8gezTCOanYycXBFs9NRUBIPgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgyYzY1YjktNzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZm OWI4LzAvMzhBOTNDODFFQ0QzMDhFNkE3NjMyNzE3MDQ1QjNEMzUxNTAxMjBGOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09LazhnZXpUQ09hbll5Y1hCRnM5TlJV QklQZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODJjNjViOS03 MjVkLTRiYjAtYTIxNi04ZTc3MTkxZmY5YjgvMC8zOEE5M0M4MUVDRDMwOEU2QTc2 MzI3MTcwNDVCM0QzNTE1MDEyMEY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkQv97zKlORPl2SaUTVCM lZtahMnaHik931lgOWfWIJeapOQsHYcN8MIRksMMq7EKz+m2p8q5f+hqQ1Q01e3A 5EyoNHswonr53hHB9sBwJWqDo94DdbwWMn9N/VsRWwogULvbkOsQ8JuzX5QlFjE1 mAZAT7tzNIbEfSZtU5fMT5wMf7Fq9iCBHTXy7eJnRpw8suXEmxMtVVIHnb53+9tx vu/YJGkrkbko615MmyEG7Kc4H8a1DOWpIBNKg1et9LhDaeJLwwdYLYhxFpgrLjXN wttNnBqELTR+8gZQrPlZtk/pZtTJ7vn1LUyU/PayuKfYxYNme77iSbE5uy/A/zNe AQ== -----END CERTIFICATE-----Generated at Sat Sep 20 06:18:49 2025 by rpki-client