$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft File: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft (raw, json) Hash identifier: ndKMWbiGxsS2r4Hu7171tmt9SMmDi4foEvy2J1R9hF4= Subject key identifier: 49:82:E6:DF:2A:70:8A:5C:B5:97:5D:AA:36:5D:3B:D0:E1:2E:2F:CB Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F Certificate issuer: /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Certificate serial: 07B161DD6B5B8C8FC90EB6CC806FEBCC631BE435 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft Manifest number: A1 Signing time: Thu 23 Oct 2025 19:24:44 +0000 Manifest this update: Thu 23 Oct 2025 19:19:44 +0000 Manifest next update: Fri 24 Oct 2025 19:29:44 +0000 Files and hashes: 1: 326131343a373538303a666637383a3a2f34382d3438203d3e20323033393135.roa (hash: HnRWSrEpeOmuzTKhKK+Ly8/65pwZBhG8hC56Nip/vA0=) 2: 326131343a373538303a666637393a3a2f34382d3438203d3e20323033393135.roa (hash: 4JRXyyfbh5S+gtwReXpBVGHg5Hfkr5m0dh1qPG0/BKw=) 3: 326131343a373538303a666637343a3a2f34382d3438203d3e20323033393135.roa (hash: wat7PE9fGydcz5ayop5kavvbRXomHufzivqvTvbesao=) 4: 326131343a373538303a666637373a3a2f34382d3438203d3e20323033393135.roa (hash: F5/aVvIreRBQw19BMcjvtJaH6IAMjMe6w+V1TelngZU=) 5: 326131343a373538303a666637663a3a2f34382d3438203d3e20323033393135.roa (hash: AKQUYWOgneoO1qpRyAABoiC4d23AXJsif2Ph8QnUXyw=) 6: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl (hash: BYrqRvChyTjIoQCH7AGNGRksqpT8es6eOTkWQ6lh6pY=) 7: 326131343a373538303a666637313a3a2f34382d3438203d3e20323033393135.roa (hash: tQOuxzjoO2gOr2+IueULnKw1bzMsp7EoDLzHElEe0zw=) 8: 326131343a373538303a666637333a3a2f34382d3438203d3e20323033393135.roa (hash: GieRIT3AIgJdp4hafy8WbPzRF4MVeOc7uBzRolQt/Os=) 9: 326131343a373538303a666637303a3a2f34382d3438203d3e20323033393135.roa (hash: zyXKXDvOIxNrBW5QrQm19sSxkRDmx9tFlmRCkefYJk4=) 10: 326131343a373538303a666637653a3a2f34382d3438203d3e20323033393135.roa (hash: U6uqpQVMvicANeE1+RdGwfiUHzScjnhV12wDyDdzXu8=) 11: 326131343a373538303a666637353a3a2f34382d3438203d3e20323033393135.roa (hash: 9QAAhr1wwrheqUnrWa4FkevZ/+WKuCODK+T1ZZmcwl8=) 12: 326131343a373538303a666637623a3a2f34382d3438203d3e20323033393135.roa (hash: +Dm2JEqaSsfzmcw/vRVxZqJazGgE0R+iZSKdYatTFPI=) 13: 326131343a373538303a666637613a3a2f34382d3438203d3e20323033393135.roa (hash: lVFPEuT+Vv7EHAhCsqJ2Rg8eFP3usNSJ0TffuGmsFKE=) 14: 326131343a373538303a666637323a3a2f34382d3438203d3e20323033393135.roa (hash: h9EOAcugJrwunceFQsvuVh/viiSOkDi6CuOcdJIPWnA=) 15: 326131343a373538303a666637633a3a2f34382d3438203d3e20323033393135.roa (hash: o5X2AD19YxTsiyZsqxaO6LcogckEDGsmBlZBOovT7M0=) 16: 326131343a373538303a666637643a3a2f34382d3438203d3e20323033393135.roa (hash: H+78AH4TYlugOgXjwzDN7rCd3EnIWoVZYuyJbZiEnfs=) 17: 326131343a373538303a666637363a3a2f34382d3438203d3e20323033393135.roa (hash: BkHJMnQDPpptXCMBwmodU4zh5ifR8UsDSgAYqmaYZ4U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 19:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:b1:61:dd:6b:5b:8c:8f:c9:0e:b6:cc:80:6f:eb:cc:63:1b:e4:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Validity Not Before: Oct 23 19:19:44 2025 GMT Not After : Oct 24 19:29:44 2025 GMT Subject: CN=4982E6DF2A708A5CB5975DAA365D3BD0E12E2FCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a8:fc:b8:52:a2:ab:b7:72:6a:dd:9a:bd:1a: 8d:3d:55:55:12:a4:c1:81:1e:f5:e1:26:7c:61:38: 3d:e0:8f:55:2c:21:9d:cd:b8:be:22:08:e1:5f:79: d2:3d:75:ff:2c:bd:2b:8d:36:b0:47:ed:c0:59:ab: 25:b9:98:86:ca:62:ec:16:49:2a:d4:3c:90:b0:57: 7f:6d:e6:da:28:10:06:f9:ef:81:9f:25:a1:a0:8e: 34:07:3c:7a:75:52:e2:45:5d:df:2f:36:ee:6e:7d: 1b:1c:10:c9:6c:8f:9d:8f:f1:cc:7a:9b:9e:44:f4: d0:77:c3:00:28:42:c4:b9:4b:6b:9e:c0:bf:2a:62: 32:d5:db:f0:7e:41:59:85:d3:d0:d2:e5:ec:9b:25: 63:25:d1:95:80:2b:95:1d:02:92:39:da:f7:f6:24: 7f:31:3f:45:11:9b:e7:82:b3:0b:88:bd:a6:fe:c8: e8:41:a9:d9:0d:fb:14:3a:0a:49:06:f2:9b:35:2d: 67:7a:1e:8c:90:96:f1:be:5b:66:9d:7c:d5:d9:41: e2:89:04:a3:8c:2c:5a:cb:d3:92:0d:3a:12:93:79: 36:b5:eb:21:91:3d:de:52:c2:f8:5a:17:ad:bb:bd: cd:69:8b:39:08:f0:6c:98:dd:f5:80:d1:b3:a9:bc: 8f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:82:E6:DF:2A:70:8A:5C:B5:97:5D:AA:36:5D:3B:D0:E1:2E:2F:CB X509v3 Authority Key Identifier: keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:c1:fa:6b:4a:c5:48:40:97:6b:d2:e6:6c:fe:43:c9:79:70: eb:33:dd:bd:07:10:59:e9:87:e5:63:4f:7e:2b:f3:ae:df:5a: 68:00:88:6e:6b:0b:46:cd:cc:c6:60:4b:c4:0d:88:a0:eb:2f: a3:0b:f0:3a:a8:68:45:e0:1e:23:aa:0d:73:03:4a:f8:a7:db: cc:53:af:42:d9:e2:a3:d3:00:3b:31:ac:df:e7:6c:87:fa:66: a4:f3:d3:99:ce:f4:e5:ad:90:7b:ad:d5:08:bc:91:a4:12:54: 5a:80:3f:72:66:0c:32:95:53:82:c7:4a:f9:11:a9:65:fe:9c: 17:4d:d3:ba:1c:bd:ef:64:f3:4c:14:3a:92:f2:27:af:20:f6: 27:40:1e:75:1d:89:6d:e5:6b:b1:f7:2f:0f:9a:59:a3:12:ec: c4:9d:26:eb:26:a7:9d:0b:81:09:5a:4f:04:f5:f0:9b:ed:24: 6d:3c:8f:5f:ec:4d:e9:f8:1c:30:b3:df:95:ee:32:fa:da:07: 0a:56:1d:25:be:13:47:2d:99:8e:b8:5d:a0:31:03:22:0a:9e: 2c:3f:96:07:04:05:2f:b0:fb:02:d7:53:ef:8b:ec:61:12:73: d5:d5:39:a5:99:ff:32:ba:98:2f:03:a0:31:65:be:3e:4e:7c: 26:88:74:b2 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUB7Fh3WtbjI/JDrbMgG/rzGMb5DUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlC RjFEMEYyRjAeFw0yNTEwMjMxOTE5NDRaFw0yNTEwMjQxOTI5NDRaMDMxMTAvBgNV BAMTKDQ5ODJFNkRGMkE3MDhBNUNCNTk3NURBQTM2NUQzQkQwRTEyRTJGQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIqPy4UqKrt3Jq3Zq9Go09VVUS pMGBHvXhJnxhOD3gj1UsIZ3NuL4iCOFfedI9df8svSuNNrBH7cBZqyW5mIbKYuwW SSrUPJCwV39t5tooEAb574GfJaGgjjQHPHp1UuJFXd8vNu5ufRscEMlsj52P8cx6 m55E9NB3wwAoQsS5S2uewL8qYjLV2/B+QVmF09DS5eybJWMl0ZWAK5UdApI52vf2 JH8xP0URm+eCswuIvab+yOhBqdkN+xQ6CkkG8ps1LWd6HoyQlvG+W2adfNXZQeKJ BKOMLFrL05INOhKTeTa16yGRPd5SwvhaF627vc1pizkI8GyY3fWA0bOpvI91AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUSYLm3ypwily1l12qNl070OEuL8swHwYDVR0j BBgwFoAUzHkaH1yzuyyvfCg4IRLiab8dDy8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMz N2ZjLzEvQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlCRjFEMEYyRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9DQzc5MUExRjVDQjNCQjJDQUY3QzI4Mzgy MTEyRTI2OUJGMUQwRjJGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I3YTBhYTU2LTRhMWQtNGJhOC1hYjY2LWM1OWZlZDRjMzdmYy8xL0NDNzkxQTFG NUNCM0JCMkNBRjdDMjgzODIxMTJFMjY5QkYxRDBGMkYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBZwfpr SsVIQJdr0uZs/kPJeXDrM929BxBZ6YflY09+K/Ou31poAIhuawtGzczGYEvEDYig 6y+jC/A6qGhF4B4jqg1zA0r4p9vMU69C2eKj0wA7Mazf52yH+mak89OZzvTlrZB7 rdUIvJGkElRagD9yZgwylVOCx0r5Eall/pwXTdO6HL3vZPNMFDqS8ievIPYnQB51 HYlt5Wux9y8PmlmjEuzEnSbrJqedC4EJWk8E9fCb7SRtPI9f7E3p+Bwws9+V7jL6 2gcKVh0lvhNHLZmOuF2gMQMiCp4sP5YHBAUvsPsC11Pvi+xhEnPV1Tmlmf8yupgv A6AxZb4+TnwmiHSy -----END CERTIFICATE-----Generated at Fri Oct 24 04:36:30 2025 by rpki-client