$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft File: 8F4CE7722F99075D94738B7E61070401269EB3D6.mft (raw, json) Hash identifier: xtrPvZarXZHyx+kCIwUC0PUlEIguYL8QeZqWkidLe60= Subject key identifier: 35:AF:A5:95:4A:B7:91:82:61:AB:5E:0D:59:26:96:5F:AC:25:C8:6A Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6 Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6 Certificate serial: 4936C1EA80C2B46CDFFA9FE134B76BE2F2284E0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft Manifest number: 0578 Signing time: Sun 26 Oct 2025 21:54:12 +0000 Manifest this update: Sun 26 Oct 2025 21:49:12 +0000 Manifest next update: Mon 27 Oct 2025 23:30:12 +0000 Files and hashes: 1: 38352e3230392e31362e302f32342d3234203d3e20343030303339.roa (hash: p6Bk0gZf8IBhPL6y8ZeFGMDiI7CTICtCBqH+ui8UNPk=) 2: 3138352e3138312e322e302f32342d3234203d3e20323132363639.roa (hash: AO/2wQxFVW1dCHNtgSdMO8qdA9TP6KJffP27Y2ywVzk=) 3: 38352e3230392e31372e302f32342d3234203d3e203235363933.roa (hash: sfBR34BQfUnBG/Dfs9RgO4NWV6dIYQiGWUQLFQnMRUU=) 4: 37372e38332e3235342e302f32342d3234203d3e203633303233.roa (hash: 5CqwgOjFFuFV2UfvvpLNhCLDO+4UZEU9TIi9LDwBTT8=) 5: 37372e38332e3235342e302f32342d3234203d3e20313432313131.roa (hash: 5E5ubEnGmxuDRTB/crq4AEPdYVHLSryiOVVydmorIJQ=) 6: 3138352e3138312e312e302f32342d3234203d3e203232313638.roa (hash: j6aiC8hmqjNX8bvUvtzfL/WZD+CbfD2TNLTq4Vkaxb8=) 7: 8F4CE7722F99075D94738B7E61070401269EB3D6.crl (hash: bN3UNRPhKXXVGJr1QxM9U0XCshnziHFpnBaUo41JVv4=) 8: 37372e38332e3235342e302f32342d3234203d3e20313532363732.roa (hash: OF3wSP3yuy0C/T5Z9SXU/JklI6k6e/1ZBs+Z/EFeASc=) 9: 36322e3139322e3137342e302f32342d3234203d3e20313939303538.roa (hash: 7SPDhEMWd1gl2XtQJzxrngcOVdYu9T7eD0t4enh6w+8=) 10: 3231322e3130322e3131342e302f32342d3234203d3e20323132363039.roa (hash: k4QPq18KIVcE3YfXs1geEObswKolsmORhNCPU0jWep8=) 11: 36322e3139322e3137332e302f32342d3234203d3e2038313030.roa (hash: VR4JLJ2ZU8eUzCRER2JzBOvrizo3+I5iCEURL4jUDUs=) 12: 37372e38332e3235352e302f32342d3234203d3e20333937333733.roa (hash: 1mKwdC2ZIiOIr7Rnoef/+fSq7c6umW7Rd7kmaMzPSt8=) 13: 37372e38332e3235322e302f32342d3234203d3e203533313037.roa (hash: 3Dh0+QL4Ca7K3/8ZGEgIxNy6qmtIRAGaEkPcZns1GuY=) 14: 3138352e3138312e332e302f32342d3234203d3e20323030303137.roa (hash: yu4VS8d4SOotNR90wp+Yzh042rOQsTRk/ltNPBkKiBs=) 15: 36322e3139322e3137352e302f32342d3234203d3e203332313637.roa (hash: /WAm5dy4jlcwivOnkIFnMuEvBCc6QOLwRlkX4YTGCBc=) 16: 36322e3139322e3137322e302f32342d3234203d3e20323632323837.roa (hash: 2GimDrI+u19G9USJIxEoIwe+FIkjWzBTs+tdLgZWAyE=) 17: 38352e3230392e31392e302f32342d3234203d3e203131383738.roa (hash: Nx4wSG2k5MsgvkZE/SkqlmuALnm8blh30hh9Mbxj2MU=) 18: 38352e3230392e31372e302f32342d3234203d3e2038313030.roa (hash: QDSk8x00L35RICmReakqpkA/56+KGgKX4susJmbToXY=) 19: 38352e3230392e31382e302f32342d3234203d3e20323132343136.roa (hash: J4P/0pJKXXswWDL/U/aSyTpYbnb7RCTWwOsChVTVKX0=) 20: 37372e38332e3235322e302f32342d3234203d3e20323734383237.roa (hash: 1TkU9CuZNSKSA6n8CCEVJKfR3/eejFvKDG72x42fajA=) 21: 3138352e3138312e302e302f32342d3234203d3e2035303635.roa (hash: jKhLBm90tx+Wj64bfhAOaNtyd2IRsOIjohul50fMfmI=) 22: 3139332e3136332e3132372e302f32342d3234203d3e20313439393438.roa (hash: 1dKp6xe+eLRTQoCYGUtbaGkzNAIMlS65VuQGc12R6RA=) 23: 37372e38332e3235332e302f32342d3234203d3e20333938333835.roa (hash: oAOTNgxw6bYQVCzHD93BNrqwf7e2+dYeRkUxzvhfYNE=) 24: 36322e3139322e3137332e302f32342d3234203d3e203235363933.roa (hash: 7LxiUpW29bCJDw6ndbnVxwTHPen7XCpx03brWPSWNVo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 19:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:36:c1:ea:80:c2:b4:6c:df:fa:9f:e1:34:b7:6b:e2:f2:28:4e:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6 Validity Not Before: Oct 26 21:49:12 2025 GMT Not After : Oct 27 23:30:12 2025 GMT Subject: CN=35AFA5954AB7918261AB5E0D5926965FAC25C86A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e9:ed:d5:15:dd:e7:b4:a3:7c:29:5d:6f:af: b3:f8:a1:96:5a:95:c2:3c:93:26:2c:9a:a4:3b:e7: 04:bb:0d:d6:41:84:9e:a8:88:cf:68:af:47:19:fa: 6e:25:30:09:44:9b:69:58:90:69:59:f7:d2:02:58: c0:8e:e2:72:f0:d1:f8:f0:92:cf:97:df:ed:fd:bb: 0f:2a:1a:b7:96:54:51:f7:26:42:cc:54:cf:f9:74: 90:98:da:40:b8:6a:8a:3c:a1:0c:81:56:4f:a7:11: 58:92:79:38:39:28:87:57:93:02:9d:cb:a4:f7:41: 49:a9:39:4e:92:0e:30:81:fe:06:b1:16:c3:72:db: da:09:92:27:31:81:62:5b:b7:7d:88:7b:40:37:3f: 07:32:04:c8:32:ae:5c:34:85:db:7f:97:f5:b5:4b: 94:98:36:00:45:a7:dc:62:d3:9c:d9:54:b9:65:14: f6:d5:ab:81:cf:b9:87:86:06:1e:13:0a:d5:17:cc: 56:49:8c:6e:09:a6:1e:3b:29:32:e6:92:24:5e:5f: 89:2b:aa:fe:47:58:fe:54:ca:b1:f2:dc:f9:88:eb: c6:ee:af:8f:f8:db:b9:98:65:68:11:a6:33:df:10: 10:34:1a:32:61:98:9a:8c:dd:ed:04:55:0b:34:43: b3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:AF:A5:95:4A:B7:91:82:61:AB:5E:0D:59:26:96:5F:AC:25:C8:6A X509v3 Authority Key Identifier: keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d9:d8:a7:5e:fa:29:d1:26:35:8b:1f:a3:87:54:e9:0f:30: f6:1f:96:be:e4:fd:0d:3e:89:e8:92:cf:fb:96:c6:e6:8f:f4: aa:54:15:a9:64:7f:56:1f:52:cf:2c:cb:af:4f:5c:01:84:ed: d4:d4:44:ca:48:6f:96:77:a0:0f:e7:9b:ba:02:48:8a:89:03: db:89:f1:0e:0b:70:87:75:e5:ea:61:e2:95:4b:6b:ff:ba:fd: 2a:90:48:0b:f7:df:19:48:bf:c5:24:a8:e4:d4:67:d3:58:63: 41:55:27:3c:6b:1c:21:61:e6:6a:f1:a2:10:03:a2:42:d8:e3: 2c:90:dd:b2:63:8e:82:50:d3:9b:fb:6a:84:19:83:61:c9:a0: 9b:6a:f1:2c:71:30:d6:5a:ba:7c:30:ce:4e:c1:59:6d:c9:48: ce:f9:0c:eb:0b:74:64:65:73:e2:35:fb:6b:cf:38:10:72:c8: a1:a6:d7:f7:73:49:d1:df:ef:d5:51:35:36:90:56:24:f0:b0: 13:0a:f7:eb:f7:1e:a0:a4:32:f2:23:b8:cf:1a:2d:99:7a:58: 6a:81:b5:97:dd:a1:15:26:18:13:97:6f:65:82:6e:b7:d1:00: 12:25:fd:cb:0c:9c:c6:40:05:73:db:f0:bf:ab:30:72:b5:53: 1c:c9:f9:9c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUSTbB6oDCtGzf+p/hNLdr4vIoTgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGY0Y2U3NzIyZjk5MDc1ZDk0NzM4YjdlNjEwNzA0MDEy NjllYjNkNjAeFw0yNTEwMjYyMTQ5MTJaFw0yNTEwMjcyMzMwMTJaMDMxMTAvBgNV BAMTKDM1QUZBNTk1NEFCNzkxODI2MUFCNUUwRDU5MjY5NjVGQUMyNUM4NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl6e3VFd3ntKN8KV1vr7P4oZZa lcI8kyYsmqQ75wS7DdZBhJ6oiM9or0cZ+m4lMAlEm2lYkGlZ99ICWMCO4nLw0fjw ks+X3+39uw8qGreWVFH3JkLMVM/5dJCY2kC4aoo8oQyBVk+nEViSeTg5KIdXkwKd y6T3QUmpOU6SDjCB/gaxFsNy29oJkicxgWJbt32Ie0A3PwcyBMgyrlw0hdt/l/W1 S5SYNgBFp9xi05zZVLllFPbVq4HPuYeGBh4TCtUXzFZJjG4Jph47KTLmkiReX4kr qv5HWP5UyrHy3PmI68bur4/427mYZWgRpjPfEBA0GjJhmJqM3e0EVQs0Q7NvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUNa+llUq3kYJhq14NWSaWX6wlyGowHwYDVR0j BBgwFoAUj0znci+ZB12Uc4t+YQcEASaes9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUtNTExMC00MjU3LTk0ZWYtNGQyYjQzODg0 MDQwLzAvOEY0Q0U3NzIyRjk5MDc1RDk0NzM4QjdFNjEwNzA0MDEyNjlFQjNENi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2owem5jaS1aQjEyVWM0dC1ZUWNFQVNh ZXM5WS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTk3NzExNS01 MTEwLTQyNTctOTRlZi00ZDJiNDM4ODQwNDAvMC84RjRDRTc3MjJGOTkwNzVEOTQ3 MzhCN0U2MTA3MDQwMTI2OUVCM0Q2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP9nYp176KdEmNYsfo4dU 6Q8w9h+WvuT9DT6J6JLP+5bG5o/0qlQVqWR/Vh9SzyzLr09cAYTt1NREykhvlneg D+ebugJIiokD24nxDgtwh3Xl6mHilUtr/7r9KpBIC/ffGUi/xSSo5NRn01hjQVUn PGscIWHmavGiEAOiQtjjLJDdsmOOglDTm/tqhBmDYcmgm2rxLHEw1lq6fDDOTsFZ bclIzvkM6wt0ZGVz4jX7a884EHLIoabX93NJ0d/v1VE1NpBWJPCwEwr36/ceoKQy 8iO4zxotmXpYaoG1l92hFSYYE5dvZYJut9EAEiX9ywycxkAFc9vwv6swcrVTHMn5 nA== -----END CERTIFICATE-----Generated at Mon Oct 27 01:42:18 2025 by rpki-client