$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft File: 8F4CE7722F99075D94738B7E61070401269EB3D6.mft (raw, json) Hash identifier: ah+8vp2zGO9HcWNl0q9Jd/pahXaGAe9+pCKCsX4N52U= Subject key identifier: 9C:1F:59:D9:2A:58:B2:DF:07:BE:00:51:2A:CD:E6:80:C6:59:C6:9A Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6 Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6 Certificate serial: 2205A10B43450369FE30C2A64BCD1EC684A27EFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft Manifest number: 0536 Signing time: Sun 07 Sep 2025 21:23:57 +0000 Manifest this update: Sun 07 Sep 2025 21:18:57 +0000 Manifest next update: Mon 08 Sep 2025 23:20:57 +0000 Files and hashes: 1: 37372e38332e3235352e302f32342d3234203d3e20333937333733.roa (hash: 1mKwdC2ZIiOIr7Rnoef/+fSq7c6umW7Rd7kmaMzPSt8=) 2: 36322e3139322e3137322e302f32342d3234203d3e20323632323837.roa (hash: 2GimDrI+u19G9USJIxEoIwe+FIkjWzBTs+tdLgZWAyE=) 3: 3231322e3130322e3131342e302f32342d3234203d3e20323132363039.roa (hash: k4QPq18KIVcE3YfXs1geEObswKolsmORhNCPU0jWep8=) 4: 37372e38332e3235342e302f32342d3234203d3e203633303233.roa (hash: 5CqwgOjFFuFV2UfvvpLNhCLDO+4UZEU9TIi9LDwBTT8=) 5: 36322e3139322e3137342e302f32342d3234203d3e20313939303538.roa (hash: 7SPDhEMWd1gl2XtQJzxrngcOVdYu9T7eD0t4enh6w+8=) 6: 3138352e3138312e302e302f32342d3234203d3e2035303635.roa (hash: jKhLBm90tx+Wj64bfhAOaNtyd2IRsOIjohul50fMfmI=) 7: 3138352e3138312e312e302f32342d3234203d3e203232313638.roa (hash: j6aiC8hmqjNX8bvUvtzfL/WZD+CbfD2TNLTq4Vkaxb8=) 8: 38352e3230392e31382e302f32342d3234203d3e20323132343136.roa (hash: J4P/0pJKXXswWDL/U/aSyTpYbnb7RCTWwOsChVTVKX0=) 9: 37372e38332e3235342e302f32342d3234203d3e20313432313131.roa (hash: 5E5ubEnGmxuDRTB/crq4AEPdYVHLSryiOVVydmorIJQ=) 10: 36322e3139322e3137352e302f32342d3234203d3e203332313637.roa (hash: /WAm5dy4jlcwivOnkIFnMuEvBCc6QOLwRlkX4YTGCBc=) 11: 3138352e3138312e322e302f32342d3234203d3e20323132363639.roa (hash: AO/2wQxFVW1dCHNtgSdMO8qdA9TP6KJffP27Y2ywVzk=) 12: 37372e38332e3235342e302f32342d3234203d3e20313532363732.roa (hash: OF3wSP3yuy0C/T5Z9SXU/JklI6k6e/1ZBs+Z/EFeASc=) 13: 37372e38332e3235322e302f32342d3234203d3e20323734383237.roa (hash: 1TkU9CuZNSKSA6n8CCEVJKfR3/eejFvKDG72x42fajA=) 14: 3139332e3136332e3132372e302f32342d3234203d3e20313439393438.roa (hash: 1dKp6xe+eLRTQoCYGUtbaGkzNAIMlS65VuQGc12R6RA=) 15: 38352e3230392e31372e302f32342d3234203d3e2038313030.roa (hash: QDSk8x00L35RICmReakqpkA/56+KGgKX4susJmbToXY=) 16: 3138352e3138312e332e302f32342d3234203d3e20323030303137.roa (hash: yu4VS8d4SOotNR90wp+Yzh042rOQsTRk/ltNPBkKiBs=) 17: 37372e38332e3235332e302f32342d3234203d3e20333938333835.roa (hash: oAOTNgxw6bYQVCzHD93BNrqwf7e2+dYeRkUxzvhfYNE=) 18: 37372e38332e3235322e302f32342d3234203d3e203533313037.roa (hash: kVRW91gUQQJKDevSNusyEaCMFEQt6idZ9U9pUTvlEwg=) 19: 38352e3230392e31392e302f32342d3234203d3e203131383738.roa (hash: Nx4wSG2k5MsgvkZE/SkqlmuALnm8blh30hh9Mbxj2MU=) 20: 8F4CE7722F99075D94738B7E61070401269EB3D6.crl (hash: QUv9F5xp5/TTLzB9ueixGE7LjQu8bGkDR6tCJOiPbJs=) 21: 38352e3230392e31372e302f32342d3234203d3e203235363933.roa (hash: sfBR34BQfUnBG/Dfs9RgO4NWV6dIYQiGWUQLFQnMRUU=) 22: 36322e3139322e3137332e302f32342d3234203d3e203235363933.roa (hash: 7LxiUpW29bCJDw6ndbnVxwTHPen7XCpx03brWPSWNVo=) 23: 36322e3139322e3137332e302f32342d3234203d3e2038313030.roa (hash: VR4JLJ2ZU8eUzCRER2JzBOvrizo3+I5iCEURL4jUDUs=) 24: 38352e3230392e31362e302f32342d3234203d3e20343030303339.roa (hash: p6Bk0gZf8IBhPL6y8ZeFGMDiI7CTICtCBqH+ui8UNPk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 23:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:05:a1:0b:43:45:03:69:fe:30:c2:a6:4b:cd:1e:c6:84:a2:7e:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6 Validity Not Before: Sep 7 21:18:57 2025 GMT Not After : Sep 8 23:20:57 2025 GMT Subject: CN=9C1F59D92A58B2DF07BE00512ACDE680C659C69A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9c:ab:b7:d6:21:bb:d0:e3:0f:f2:3b:4f:a5: d8:17:48:e2:c9:3e:76:df:33:2e:f7:75:26:c5:e1: ea:7b:73:c0:cd:71:dc:a1:57:5b:21:96:d8:9f:fb: bc:e5:98:e9:b9:a5:9b:b8:94:bb:48:e9:c8:52:6e: 98:a1:c1:f2:15:0d:b6:b5:44:d8:27:87:6a:b1:08: 37:e1:a0:0f:e8:bd:6b:74:51:ec:c8:8b:54:51:4a: 03:e6:c6:26:25:5d:9b:bd:fb:fd:d5:9b:42:b5:8b: 38:0c:4e:24:b1:12:9e:d1:86:5f:7f:fe:64:01:a6: 82:4b:db:20:ea:b9:b8:99:a3:da:05:4e:90:5f:19: 28:92:06:c3:0e:e4:b5:fb:cb:f3:d4:ae:57:42:75: e5:55:73:a7:cc:bb:17:3d:58:33:4c:ac:89:43:dc: be:b6:f4:98:d2:41:82:c3:23:92:d9:bc:71:65:db: 6d:56:3a:53:69:04:7f:3e:7b:1c:11:be:3e:4b:73: 1c:ab:f1:3a:0a:c0:7c:f9:1f:ad:34:9b:c4:05:69: ed:22:be:78:8e:24:23:7c:a6:c8:1e:ed:72:ef:fc: de:0e:bf:e0:e7:3d:fd:7a:69:b0:ff:37:60:a2:27: 2c:5f:84:11:71:38:cd:c1:69:5a:1d:fd:be:34:e8: 89:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:1F:59:D9:2A:58:B2:DF:07:BE:00:51:2A:CD:E6:80:C6:59:C6:9A X509v3 Authority Key Identifier: keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:85:8e:14:b6:c1:fa:15:ec:e8:7c:f3:cd:69:57:d4:74:f7: b0:b6:ad:da:92:3d:d6:bd:93:7f:51:2b:54:8f:1b:58:7c:36: 18:58:e1:0f:6d:ce:9a:30:2c:97:19:0b:75:90:39:91:8b:70: 09:2f:68:2f:9c:1f:10:e9:bc:a6:74:b4:e0:81:dd:88:5d:f4: 42:fc:6b:79:9a:17:2b:f1:3d:bb:55:c5:e2:d5:87:0f:d2:24: 03:8e:b2:62:31:f8:ba:57:a1:ba:89:c8:bc:25:0a:1d:05:2d: dc:29:d8:83:5b:34:bd:6d:7d:1f:9e:57:68:73:4c:6a:86:45: 9d:c7:41:c4:bc:0d:a0:fc:9f:f3:c1:79:1e:25:f3:12:10:f8: 97:c7:87:06:42:c6:17:04:54:5a:9d:cd:60:08:6a:04:70:10: db:b4:e5:64:56:24:91:9a:54:d9:11:38:4f:e2:1a:95:59:70: ad:d4:0e:23:63:1f:32:72:fc:b5:a8:be:0f:b5:f4:47:0a:cb: 2b:1a:10:d9:7b:f2:e2:6f:db:ec:41:56:48:e5:79:e8:76:64: ec:a4:49:7a:fb:5e:7b:0f:bf:33:9a:ff:b3:cf:3e:38:10:2d: 70:fc:b3:69:9c:88:b0:97:35:3b:75:77:9e:00:fc:d3:a7:25: 85:99:e4:93 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIgWhC0NFA2n+MMKmS80exoSifv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGY0Y2U3NzIyZjk5MDc1ZDk0NzM4YjdlNjEwNzA0MDEy NjllYjNkNjAeFw0yNTA5MDcyMTE4NTdaFw0yNTA5MDgyMzIwNTdaMDMxMTAvBgNV BAMTKDlDMUY1OUQ5MkE1OEIyREYwN0JFMDA1MTJBQ0RFNjgwQzY1OUM2OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPnKu31iG70OMP8jtPpdgXSOLJ PnbfMy73dSbF4ep7c8DNcdyhV1shltif+7zlmOm5pZu4lLtI6chSbpihwfIVDba1 RNgnh2qxCDfhoA/ovWt0UezIi1RRSgPmxiYlXZu9+/3Vm0K1izgMTiSxEp7Rhl9/ /mQBpoJL2yDqubiZo9oFTpBfGSiSBsMO5LX7y/PUrldCdeVVc6fMuxc9WDNMrIlD 3L629JjSQYLDI5LZvHFl221WOlNpBH8+exwRvj5Lcxyr8ToKwHz5H600m8QFae0i vniOJCN8psge7XLv/N4Ov+DnPf16abD/N2CiJyxfhBFxOM3BaVod/b406InPAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUnB9Z2SpYst8HvgBRKs3mgMZZxpowHwYDVR0j BBgwFoAUj0znci+ZB12Uc4t+YQcEASaes9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUtNTExMC00MjU3LTk0ZWYtNGQyYjQzODg0 MDQwLzAvOEY0Q0U3NzIyRjk5MDc1RDk0NzM4QjdFNjEwNzA0MDEyNjlFQjNENi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2owem5jaS1aQjEyVWM0dC1ZUWNFQVNh ZXM5WS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTk3NzExNS01 MTEwLTQyNTctOTRlZi00ZDJiNDM4ODQwNDAvMC84RjRDRTc3MjJGOTkwNzVEOTQ3 MzhCN0U2MTA3MDQwMTI2OUVCM0Q2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADIWOFLbB+hXs6HzzzWlX 1HT3sLat2pI91r2Tf1ErVI8bWHw2GFjhD23OmjAslxkLdZA5kYtwCS9oL5wfEOm8 pnS04IHdiF30QvxreZoXK/E9u1XF4tWHD9IkA46yYjH4ulehuonIvCUKHQUt3CnY g1s0vW19H55XaHNMaoZFncdBxLwNoPyf88F5HiXzEhD4l8eHBkLGFwRUWp3NYAhq BHAQ27TlZFYkkZpU2RE4T+IalVlwrdQOI2MfMnL8tai+D7X0RwrLKxoQ2Xvy4m/b 7EFWSOV56HZk7KRJevteew+/M5r/s88+OBAtcPyzaZyIsJc1O3V3ngD806clhZnk kw== -----END CERTIFICATE-----Generated at Mon Sep 8 08:51:12 2025 by rpki-client