$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft File: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft (raw, json) Hash identifier: 36H4FqUZuxB2TTUDtCuabe3CBQPX5GcM8lu/guNe/+s= Subject key identifier: 7E:01:61:5E:5C:F6:01:53:69:36:BB:5F:42:16:42:C2:D7:21:C8:43 Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F Certificate issuer: /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Certificate serial: 410175D040BAC9B2D61A785831C6B7AA7CEE0D6C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft Manifest number: 63 Signing time: Sun 07 Sep 2025 11:00:44 +0000 Manifest this update: Sun 07 Sep 2025 10:55:44 +0000 Manifest next update: Mon 08 Sep 2025 12:22:44 +0000 Files and hashes: 1: 326131343a373538303a666637333a3a2f34382d3438203d3e20323033393135.roa (hash: GieRIT3AIgJdp4hafy8WbPzRF4MVeOc7uBzRolQt/Os=) 2: 326131343a373538303a666637633a3a2f34382d3438203d3e20323033393135.roa (hash: o5X2AD19YxTsiyZsqxaO6LcogckEDGsmBlZBOovT7M0=) 3: 326131343a373538303a666637623a3a2f34382d3438203d3e20323033393135.roa (hash: +Dm2JEqaSsfzmcw/vRVxZqJazGgE0R+iZSKdYatTFPI=) 4: 326131343a373538303a666637373a3a2f34382d3438203d3e20323033393135.roa (hash: F5/aVvIreRBQw19BMcjvtJaH6IAMjMe6w+V1TelngZU=) 5: 326131343a373538303a666637643a3a2f34382d3438203d3e20323033393135.roa (hash: H+78AH4TYlugOgXjwzDN7rCd3EnIWoVZYuyJbZiEnfs=) 6: 326131343a373538303a666637303a3a2f34382d3438203d3e20323033393135.roa (hash: zyXKXDvOIxNrBW5QrQm19sSxkRDmx9tFlmRCkefYJk4=) 7: 326131343a373538303a666637343a3a2f34382d3438203d3e20323033393135.roa (hash: wat7PE9fGydcz5ayop5kavvbRXomHufzivqvTvbesao=) 8: 326131343a373538303a666637393a3a2f34382d3438203d3e20323033393135.roa (hash: 4JRXyyfbh5S+gtwReXpBVGHg5Hfkr5m0dh1qPG0/BKw=) 9: 326131343a373538303a666637323a3a2f34382d3438203d3e20323033393135.roa (hash: h9EOAcugJrwunceFQsvuVh/viiSOkDi6CuOcdJIPWnA=) 10: 326131343a373538303a666637613a3a2f34382d3438203d3e20323033393135.roa (hash: lVFPEuT+Vv7EHAhCsqJ2Rg8eFP3usNSJ0TffuGmsFKE=) 11: 326131343a373538303a666637353a3a2f34382d3438203d3e20323033393135.roa (hash: 9QAAhr1wwrheqUnrWa4FkevZ/+WKuCODK+T1ZZmcwl8=) 12: 326131343a373538303a666637313a3a2f34382d3438203d3e20323033393135.roa (hash: tQOuxzjoO2gOr2+IueULnKw1bzMsp7EoDLzHElEe0zw=) 13: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl (hash: e8S58F+0SfJX8gXN7oyOOiogpBRYfd+W0Q1e54kj0ao=) 14: 326131343a373538303a666637663a3a2f34382d3438203d3e20323033393135.roa (hash: AKQUYWOgneoO1qpRyAABoiC4d23AXJsif2Ph8QnUXyw=) 15: 326131343a373538303a666637653a3a2f34382d3438203d3e20323033393135.roa (hash: U6uqpQVMvicANeE1+RdGwfiUHzScjnhV12wDyDdzXu8=) 16: 326131343a373538303a666637383a3a2f34382d3438203d3e20323033393135.roa (hash: HnRWSrEpeOmuzTKhKK+Ly8/65pwZBhG8hC56Nip/vA0=) 17: 326131343a373538303a666637363a3a2f34382d3438203d3e20323033393135.roa (hash: BkHJMnQDPpptXCMBwmodU4zh5ifR8UsDSgAYqmaYZ4U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 09:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:01:75:d0:40:ba:c9:b2:d6:1a:78:58:31:c6:b7:aa:7c:ee:0d:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Validity Not Before: Sep 7 10:55:44 2025 GMT Not After : Sep 8 12:22:44 2025 GMT Subject: CN=7E01615E5CF601536936BB5F421642C2D721C843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a9:e2:13:f0:f6:00:de:0e:41:c7:d7:e8:cb: 7e:a3:70:5d:6b:77:fd:cd:9d:40:13:41:3a:d4:de: 19:93:2f:89:5c:31:79:b9:b7:c6:04:27:04:93:8b: 7e:2d:25:9b:7d:4e:b6:51:4e:17:b9:5e:07:e6:21: 92:2a:2b:6c:1a:46:c5:32:f6:ea:ca:bf:90:a5:7a: 0b:fa:89:fc:b8:da:b4:45:41:2b:a2:77:ae:32:2b: 83:b1:2b:4e:9b:34:49:05:b1:5b:f2:e2:b0:bf:4b: f6:1d:8d:36:ac:01:38:f9:30:8a:15:4b:66:b4:ec: d0:41:8d:47:05:d2:2f:f8:f6:d3:69:aa:76:df:a3: 95:2d:e1:d8:8e:90:2e:32:14:8c:66:22:2d:29:6d: 6e:c3:cb:bb:73:41:d9:45:fa:2f:49:84:b0:cc:88: af:8c:d4:b7:56:d1:df:6b:78:63:2e:e4:bf:04:16: f0:dc:dd:ef:38:18:4d:6c:c5:e5:d4:fb:96:64:5b: 83:9a:e3:cb:5e:fb:87:09:ca:91:79:71:76:cf:88: db:18:44:df:5c:62:ee:f2:6b:0a:15:80:ba:aa:78: 09:76:7d:a4:db:2b:42:c3:c7:89:fc:c2:7a:cb:e7: d5:81:89:e6:d8:60:6b:8a:6f:76:f0:ce:7f:6e:f3: c0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:01:61:5E:5C:F6:01:53:69:36:BB:5F:42:16:42:C2:D7:21:C8:43 X509v3 Authority Key Identifier: keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:66:bc:49:54:52:c6:49:ee:4e:f9:9e:b1:fd:f6:8b:cc:54: 1c:c0:bc:ee:85:1d:77:5c:25:8c:26:89:a9:47:92:7d:8a:53: ae:2a:9f:85:ae:bf:a0:04:43:72:28:9a:ab:ed:e3:32:fa:bc: 47:87:d9:88:e0:e2:47:2c:53:9e:a5:20:a8:e3:ce:6f:4f:7b: 4c:bf:34:c7:eb:d5:bd:18:91:12:6a:26:00:78:0f:28:42:ae: 7e:16:30:64:f0:13:af:b2:ba:45:cc:f8:ee:14:13:8d:89:0a: 1b:29:0b:ff:9b:3b:36:22:20:c0:aa:d1:5e:de:9a:35:b6:96: 30:7a:5a:71:34:09:aa:e5:8f:82:92:19:02:f9:6f:af:fa:1d: 41:d3:44:41:a9:a7:1d:48:68:25:52:05:46:aa:ae:52:31:7a: dc:35:41:a6:67:d7:64:80:43:6c:fd:5e:ed:9d:cc:a2:20:01: 63:ad:79:3e:74:ac:c3:63:a9:1c:29:cb:0a:d2:13:95:2b:0b: b3:b9:3f:46:38:a2:57:b6:94:e8:07:16:7d:eb:01:52:eb:45: 35:e5:3e:b7:c1:83:29:61:5b:ce:46:ad:98:24:85:e3:f8:47: 04:e9:b3:22:3a:09:25:17:d4:05:58:ac:98:22:da:a2:a5:a3: cc:1d:71:0d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUQQF10EC6ybLWGnhYMca3qnzuDWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlC RjFEMEYyRjAeFw0yNTA5MDcxMDU1NDRaFw0yNTA5MDgxMjIyNDRaMDMxMTAvBgNV BAMTKDdFMDE2MTVFNUNGNjAxNTM2OTM2QkI1RjQyMTY0MkMyRDcyMUM4NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiqeIT8PYA3g5Bx9foy36jcF1r d/3NnUATQTrU3hmTL4lcMXm5t8YEJwSTi34tJZt9TrZRThe5XgfmIZIqK2waRsUy 9urKv5Clegv6ify42rRFQSuid64yK4OxK06bNEkFsVvy4rC/S/YdjTasATj5MIoV S2a07NBBjUcF0i/49tNpqnbfo5Ut4diOkC4yFIxmIi0pbW7Dy7tzQdlF+i9JhLDM iK+M1LdW0d9reGMu5L8EFvDc3e84GE1sxeXU+5ZkW4Oa48te+4cJypF5cXbPiNsY RN9cYu7yawoVgLqqeAl2faTbK0LDx4n8wnrL59WBiebYYGuKb3bwzn9u88BbAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUfgFhXlz2AVNpNrtfQhZCwtchyEMwHwYDVR0j BBgwFoAUzHkaH1yzuyyvfCg4IRLiab8dDy8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMz N2ZjLzEvQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlCRjFEMEYyRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9DQzc5MUExRjVDQjNCQjJDQUY3QzI4Mzgy MTEyRTI2OUJGMUQwRjJGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I3YTBhYTU2LTRhMWQtNGJhOC1hYjY2LWM1OWZlZDRjMzdmYy8xL0NDNzkxQTFG NUNCM0JCMkNBRjdDMjgzODIxMTJFMjY5QkYxRDBGMkYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBQZrxJ VFLGSe5O+Z6x/faLzFQcwLzuhR13XCWMJompR5J9ilOuKp+Frr+gBENyKJqr7eMy +rxHh9mI4OJHLFOepSCo485vT3tMvzTH69W9GJESaiYAeA8oQq5+FjBk8BOvsrpF zPjuFBONiQobKQv/mzs2IiDAqtFe3po1tpYwelpxNAmq5Y+CkhkC+W+v+h1B00RB qacdSGglUgVGqq5SMXrcNUGmZ9dkgENs/V7tncyiIAFjrXk+dKzDY6kcKcsK0hOV KwuzuT9GOKJXtpToBxZ96wFS60U15T63wYMpYVvORq2YJIXj+EcE6bMiOgklF9QF WKyYItqipaPMHXEN -----END CERTIFICATE-----Generated at Sun Sep 7 23:32:26 2025 by rpki-client