$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft File: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft (raw, json) Hash identifier: zF7zvBqxyKbfCvwMyUzzXH3FQBTUnoXympjcIBZ+na0= Subject key identifier: 38:2A:88:6B:93:40:EB:C0:13:B0:F0:01:C2:B8:35:D7:22:43:B5:40 Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB Certificate issuer: /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Certificate serial: 137EC20B5EB9E3D324FE61E7B20F748A8FE5DC18 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft Manifest number: 029E Signing time: Thu 23 Oct 2025 20:06:41 +0000 Manifest this update: Thu 23 Oct 2025 20:01:41 +0000 Manifest next update: Fri 24 Oct 2025 22:31:41 +0000 Files and hashes: 1: 326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa (hash: DvQHKT6M+fkiG6o9KW4wBm0yNbqCXWjg78L/cu4BiJ0=) 2: 326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa (hash: OTYsTfrglFs/JKFj7RJtAXdrMe1OUcjbc3WSXqeD0dk=) 3: 326131343a373538313a643230303a3a2f34302d3430203d3e203533363637.roa (hash: KPVNDBydB4lEOCddQAWiNda/rm6IVb4G2i+sUeOhrYg=) 4: 326131343a373538313a643130303a3a2f34302d3438203d3e203533363637.roa (hash: e+p8+Sw9X8S3Ty3gF9pg+LdvDbV5qMXAYBBthQD4LPE=) 5: 326131343a373538313a643330303a3a2f34302d3430203d3e2037353435.roa (hash: 9phDdz/jhh9vxdEc5WXHXIl+cdnJzAyh/6SdvyVejiI=) 6: 326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa (hash: BL4+PYIdcLs3fiOkkamkg94lgyO9kcRHp6ACoQUQ5y8=) 7: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl (hash: lk/bAw5ddzKsvxCiJ24pmoXq0KCW3tIgK5pp87atWnw=) 8: 326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa (hash: R4oy1L8+rEt1QdmoGVV7PiYt423B/xK5i6kPhc7W9aI=) 9: 326131343a373538313a643130303a3a2f34302d3430203d3e203533363637.roa (hash: M0+yHEN3VX8K+aVDmpusml/7Hx8dbBnadNDMaFbGOzQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 14:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:7e:c2:0b:5e:b9:e3:d3:24:fe:61:e7:b2:0f:74:8a:8f:e5:dc:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Validity Not Before: Oct 23 20:01:41 2025 GMT Not After : Oct 24 22:31:41 2025 GMT Subject: CN=382A886B9340EBC013B0F001C2B835D72243B540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:62:e6:86:6e:a8:39:a9:fe:44:25:77:f2:c2: fb:d3:20:73:12:63:c2:25:13:f3:fe:93:7c:f8:05: 71:88:1b:f6:5e:09:6f:7e:19:86:8e:31:fd:89:03: 80:96:36:5c:28:d2:50:b3:8b:cb:e3:12:c8:1e:27: 72:90:b0:79:6b:be:28:e7:a3:92:12:61:89:6b:de: 57:d5:3f:d6:7b:ce:d0:df:ba:bf:bb:84:35:67:4a: 1e:51:58:8e:cc:32:f2:81:a1:90:0e:d5:b4:f9:a9: 56:7f:52:c8:2a:8a:40:ec:99:94:a1:18:9d:c3:d2: 1a:02:24:85:61:a4:fe:e5:8d:19:52:be:bc:10:59: 63:54:27:4d:04:a9:76:ea:e4:7e:75:4e:eb:c8:f8: d5:18:e3:ff:70:68:26:8a:81:d3:66:6f:a6:eb:c5: df:bc:60:57:14:f2:bd:9a:81:1e:c7:58:38:aa:5d: b7:af:1b:7a:79:ef:08:6e:11:3f:da:d7:3a:4f:00: a6:8b:50:6b:55:e0:ec:4c:84:42:fd:f6:08:a1:e0: 57:10:e8:28:ed:26:bb:5b:a8:d0:9a:02:d6:f5:c8: 72:7d:7a:5b:e4:4b:2f:68:7d:15:c6:9b:b2:58:86: 02:59:e5:f8:fc:00:7a:1f:87:77:9e:40:69:b9:5c: ad:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2A:88:6B:93:40:EB:C0:13:B0:F0:01:C2:B8:35:D7:22:43:B5:40 X509v3 Authority Key Identifier: keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:73:1e:a6:98:41:bb:a8:0a:27:ef:26:db:7a:78:e8:90:34: 65:81:4f:f4:32:d8:58:21:4b:5b:3f:1c:48:4a:9e:e2:66:64: f9:3d:7f:41:ca:a6:0f:8c:82:6e:9a:5e:33:4c:45:b2:44:00: 38:c3:3c:5e:e0:0c:31:12:64:14:eb:9c:00:71:d8:70:14:38: 8f:ac:26:dc:b5:6f:68:3f:e4:c8:4e:71:c0:4e:14:3c:75:be: 86:7e:fd:73:44:de:5e:50:41:7f:da:2e:2f:f6:ef:a9:c1:4a: ab:c9:b4:c3:90:53:9b:be:bb:3a:f0:e5:c8:5b:ab:57:f0:a7: 87:73:7f:e6:0d:0f:d8:94:eb:7a:6e:a9:db:15:2f:2d:10:b7: eb:c0:27:95:da:d8:bb:35:27:d7:ca:b2:29:59:8f:a5:d8:fe: a0:6b:a5:f6:61:7b:8e:21:d2:3d:62:97:75:3f:a6:cb:39:c4: cd:47:54:4a:f9:3f:40:df:e7:9c:94:2f:cd:01:64:dc:be:ab: 00:88:0a:29:97:0f:e3:2a:88:db:6c:10:ba:3c:9b:7c:1e:1a: b0:c3:e3:59:78:83:65:81:8a:c6:0b:f9:9e:51:93:a9:b3:64: 10:a1:a2:5f:61:31:93:3f:1d:86:45:78:4a:5b:c2:92:10:f5: 18:b9:dc:23 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUE37CC16549Mk/mHnsg90io/l3BgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFC RUM4OTBCQjAeFw0yNTEwMjMyMDAxNDFaFw0yNTEwMjQyMjMxNDFaMDMxMTAvBgNV BAMTKDM4MkE4ODZCOTM0MEVCQzAxM0IwRjAwMUMyQjgzNUQ3MjI0M0I1NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQYuaGbqg5qf5EJXfywvvTIHMS Y8IlE/P+k3z4BXGIG/ZeCW9+GYaOMf2JA4CWNlwo0lCzi8vjEsgeJ3KQsHlrvijn o5ISYYlr3lfVP9Z7ztDfur+7hDVnSh5RWI7MMvKBoZAO1bT5qVZ/UsgqikDsmZSh GJ3D0hoCJIVhpP7ljRlSvrwQWWNUJ00EqXbq5H51TuvI+NUY4/9waCaKgdNmb6br xd+8YFcU8r2agR7HWDiqXbevG3p57whuET/a1zpPAKaLUGtV4OxMhEL99gih4FcQ 6CjtJrtbqNCaAtb1yHJ9elvkSy9ofRXGm7JYhgJZ5fj8AHofh3eeQGm5XK1xAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUOCqIa5NA68ATsPABwrg11yJDtUAwHwYDVR0j BBgwFoAUH0yCgnaplmhlqytZUz0csb7IkLswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjU5YzEwNmMtNTNiNC00ZTkyLTlmYmEtZDYwODI3YjVi ZGI4LzAvMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFCRUM4OTBCQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xRjRDODI4Mjc2QTk5NjY4NjVBQjJCNTk1 MzNEMUNCMUJFQzg5MEJCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I1OWMxMDZjLTUzYjQtNGU5Mi05ZmJhLWQ2MDgyN2I1YmRiOC8wLzFGNEM4Mjgy NzZBOTk2Njg2NUFCMkI1OTUzM0QxQ0IxQkVDODkwQkIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBMcx6m mEG7qAon7ybbenjokDRlgU/0MthYIUtbPxxISp7iZmT5PX9ByqYPjIJuml4zTEWy RAA4wzxe4AwxEmQU65wAcdhwFDiPrCbctW9oP+TITnHAThQ8db6Gfv1zRN5eUEF/ 2i4v9u+pwUqrybTDkFObvrs68OXIW6tX8KeHc3/mDQ/YlOt6bqnbFS8tELfrwCeV 2ti7NSfXyrIpWY+l2P6ga6X2YXuOIdI9Ypd1P6bLOcTNR1RK+T9A3+eclC/NAWTc vqsAiAoplw/jKojbbBC6PJt8Hhqww+NZeINlgYrGC/meUZOps2QQoaJfYTGTPx2G RXhKW8KSEPUYudwj -----END CERTIFICATE-----Generated at Thu Oct 23 23:46:18 2025 by rpki-client