$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft File: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json) Hash identifier: AjjdBdl3PBLBTKiiLyTpFdgKhFRO/StzDBMFfpmEiS0= Subject key identifier: 10:52:63:4B:3F:4B:77:A2:8E:32:BB:5C:9E:4D:F1:77:75:B4:00:01 Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Certificate serial: 7B82A86F352B3E8B46D97968AADE41D08278CA89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft Manifest number: 013C Signing time: Mon 10 Nov 2025 21:23:52 +0000 Manifest this update: Mon 10 Nov 2025 21:18:52 +0000 Manifest next update: Tue 11 Nov 2025 23:29:52 +0000 Files and hashes: 1: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: yq+hWHhfyocRCOJbnYGyzdHlkfHxXD4gPxuVgEPCc0g=) 2: 3139342e3132342e3233342e302f32342d3234203d3e20393936.roa (hash: ZoxbCHQMtNZPfbUxrxLpOcXkuKUfw+Blft69mSm2oZk=) 3: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: hZUNrJfyUHgUntGAqdSVlBaE4wglKTi9y0zmmly1bMY=) 4: 3139342e3132342e3233342e302f32342d3234203d3e203534333339.roa (hash: wdUsagydvVBIUao6PJHWRop4oPMEKXc9pJyNsG4SW9o=) 5: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: ad3eCylfdMfYW/Id31ooquQQLvZwumdWGj+lszfaEsA=) 6: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: ltRpXAoAM6WjEBry7tByfvlTgZe9a+960wIIuqHgtUo=) 7: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: lmVh0tkdqz2ZaktlfIJzzJLuyL6wItEcUEPI+PVNqdo=) 8: 3139342e3132342e3233342e302f32342d3234203d3e20343031383338.roa (hash: dg4srvpWF3uIRgfQMdk/wAV5BokR1veRJ6lDUvN1tY0=) 9: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: MbX2Jo3+qNy9yJ51qumhhpSA5fjjpKXnL9+Ixdd7q/M=) 10: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: Wt7cVymDfWBwMzR8hqsJLmmyo1G55vHli1MG8ova8P4=) 11: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: bLMKUTu2LDh7TH4JEFo2TwGKCx3JiqqNy6hRd14etMM=) 12: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: 4eRihxuyWrFmyrmWNHP+q80BiQuGj/+XTMKJH0kDcVI=) 13: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: E+WPtm+HS9AVsakqcLrBjACoAm/NbChhrd4PG4s+X5o=) 14: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: sUFXVk5mJuzGXi+txvF0jHfWX/7COhdmW+wdhnGLLbA=) 15: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: 0XA7loK9zcLZ4LH8gJRLIhKhFochpbrC40dXD0XEE/8=) 16: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: Bvg0bczZRvr0hNeXj13n0Q8N1O34FXLeiihKmXvd96c=) 17: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: qgpa17rXBGEZyX0zTURKp2TS7HA9WA0LAdj3r9yq+jg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 11 Nov 2025 23:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:82:a8:6f:35:2b:3e:8b:46:d9:79:68:aa:de:41:d0:82:78:ca:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Validity Not Before: Nov 10 21:18:52 2025 GMT Not After : Nov 11 23:29:52 2025 GMT Subject: CN=1052634B3F4B77A28E32BB5C9E4DF17775B40001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ae:b0:c4:8c:50:a0:fd:1d:35:20:3a:a4:b3: 68:4a:c1:60:37:bf:eb:04:0e:5a:38:07:03:15:23: eb:bd:64:27:87:47:38:3c:5b:16:0d:26:7d:b7:db: cb:fd:ed:c4:a2:ef:94:09:c5:20:14:61:76:b4:e2: 86:b7:4b:e0:58:62:19:57:2a:f5:48:e8:52:26:4b: 66:bb:1a:68:8a:7b:ba:c3:a9:fd:c2:45:bf:d1:51: 6e:7a:13:b7:bf:0b:2e:6b:4f:57:ba:50:f7:f6:b7: 80:4e:b7:fc:d6:28:ad:72:34:8c:50:64:a0:10:43: a3:1f:47:75:3e:89:f8:c5:c2:35:22:83:81:a7:1e: 8e:68:7d:d7:ae:71:2f:d4:94:19:a4:d6:cf:35:1c: a8:25:b5:aa:db:3b:df:1d:08:89:65:2e:dc:6d:c9: 5e:52:12:25:c1:43:8b:5f:66:b0:5e:7d:44:2d:b3: 0e:07:53:40:fc:81:1e:14:0b:02:65:56:ec:1f:fa: 19:c2:c6:97:3d:2b:2a:22:9e:69:33:57:04:0f:11: 19:36:bc:de:f4:4a:b7:b0:1c:69:35:9a:0b:20:99: fb:e2:a4:fc:09:9b:a1:4d:52:67:eb:dd:c1:cb:3b: 2b:8d:4c:d9:cf:ee:20:55:00:10:6e:79:3b:cd:08: c8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:52:63:4B:3F:4B:77:A2:8E:32:BB:5C:9E:4D:F1:77:75:B4:00:01 X509v3 Authority Key Identifier: keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:e1:80:de:ea:40:2d:36:3c:e4:0d:69:07:3e:75:27:3a:6c: 84:44:ff:ad:e8:63:f0:79:e2:3c:56:26:1e:fa:a4:f0:bc:4f: 32:0f:54:bf:01:f3:69:3f:1d:ff:f3:36:0e:80:7e:d9:30:18: e3:3e:f9:e1:76:cb:30:ab:4c:6d:ba:ea:6c:b4:f5:cd:79:21: 0e:da:ae:f3:1e:01:c2:ea:63:97:fb:43:c0:14:07:06:1f:cc: 40:84:9d:1d:1e:b2:8b:ae:dd:79:e9:2a:73:db:cb:b2:74:c9: 36:5e:95:ec:73:47:ea:13:94:1d:58:0f:c4:6e:4c:b2:10:13: 58:fb:98:cd:ae:1c:ce:2b:78:40:e0:0e:02:62:a1:ea:63:4a: 9f:2d:6b:b9:43:85:4c:58:b5:c9:91:02:43:59:d9:b1:ae:8c: e5:a3:9d:bc:96:c2:e3:c1:c0:2f:7d:a9:57:00:af:b7:15:a0: 9b:7a:9f:35:e9:fb:0e:c9:4d:1a:04:f8:a7:8a:d2:9e:a1:18: 4f:64:6d:25:81:d7:bf:dd:2d:58:19:5a:ef:48:5a:93:8b:0c: ec:3b:a9:9d:28:62:91:3a:c3:3a:00:87:6c:72:c9:6a:0b:77: 15:20:11:86:48:79:c8:b1:7c:5b:52:0c:cb:a3:44:b0:1f:19: 18:51:ef:10 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUe4KobzUrPotG2Xloqt5B0IJ4yokwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2IyOWE3NzY2OWRmNWE3YTVjYjUwNmQ4MzllZThhYTQz MzdjY2FhYzAeFw0yNTExMTAyMTE4NTJaFw0yNTExMTEyMzI5NTJaMDMxMTAvBgNV BAMTKDEwNTI2MzRCM0Y0Qjc3QTI4RTMyQkI1QzlFNERGMTc3NzVCNDAwMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRrrDEjFCg/R01IDqks2hKwWA3 v+sEDlo4BwMVI+u9ZCeHRzg8WxYNJn2328v97cSi75QJxSAUYXa04oa3S+BYYhlX KvVI6FImS2a7GmiKe7rDqf3CRb/RUW56E7e/Cy5rT1e6UPf2t4BOt/zWKK1yNIxQ ZKAQQ6MfR3U+ifjFwjUig4GnHo5ofdeucS/UlBmk1s81HKgltarbO98dCIllLtxt yV5SEiXBQ4tfZrBefUQtsw4HU0D8gR4UCwJlVuwf+hnCxpc9KyoinmkzVwQPERk2 vN70SrewHGk1mgsgmfvipPwJm6FNUmfr3cHLOyuNTNnP7iBVABBueTvNCMjXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUEFJjSz9Ld6KOMrtcnk3xd3W0AAEwHwYDVR0j BBgwFoAUyymndmnfWnpctQbYOe6KpDN8yqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgtN2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhm MDZlLzAvQ0IyOUE3NzY2OURGNUE3QTVDQjUwNkQ4MzlFRThBQTQzMzdDQ0FBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3l5bW5kbW5mV25wY3RRYllPZTZLcERO OHlxdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iYjI1ZDA2OC03 ZjljLTRiMGUtYTY5NS0xNzc5YjdkOGYwNmUvMC9DQjI5QTc3NjY5REY1QTdBNUNC NTA2RDgzOUVFOEFBNDMzN0NDQUFDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAquGA3upALTY85A1pBz51 JzpshET/rehj8HniPFYmHvqk8LxPMg9UvwHzaT8d//M2DoB+2TAY4z754XbLMKtM bbrqbLT1zXkhDtqu8x4Bwupjl/tDwBQHBh/MQISdHR6yi67deekqc9vLsnTJNl6V 7HNH6hOUHVgPxG5MshATWPuYza4czit4QOAOAmKh6mNKny1ruUOFTFi1yZECQ1nZ sa6M5aOdvJbC48HAL32pVwCvtxWgm3qfNen7DslNGgT4p4rSnqEYT2RtJYHXv90t WBla70hak4sM7DupnShikTrDOgCHbHLJagt3FSARhkh5yLF8W1IMy6NEsB8ZGFHv EA== -----END CERTIFICATE-----Generated at Tue Nov 11 15:56:40 2025 by rpki-client