$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: MPSdnA0hka1EpiPDaerbCRxYfLmABbzdSGYdNpDemLY= Subject key identifier: 98:2D:97:5E:5D:AA:24:04:AA:51:37:1A:9F:A6:BB:62:30:AB:51:1D Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 527D5F6389BE76D940D2B0EB7397A529A1D3FBE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 05C4 Signing time: Sat 25 Oct 2025 06:19:07 +0000 Manifest this update: Sat 25 Oct 2025 06:14:07 +0000 Manifest next update: Sun 26 Oct 2025 08:09:07 +0000 Files and hashes: 1: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: WVFno4+HVOZGHyCNtmP1wJ5cskICGQ/XIS/ZVH0DYzk=) 2: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: nzc+7vTx0fxusJ8QBUU0nZ0s/13eeYO5i8RfnoHHUhc=) 3: 3138352e3234342e39352e302f32342d3234203d3e203230343733.roa (hash: wcPx+O7KmTHA1Z17UF9VIIdo6IS06Ij+d7NLeipHdoU=) 4: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: /82U/4ZCS1l7tEmRqZdiqoHQfHkAV0iGqgAdCf0IY6Q=) 5: 3138352e3133302e36322e302f32342d3234203d3e203239303636.roa (hash: cZvuOTu1xxenEkmS/lv/FbwQZVMqO/d4TmKYvwutnlA=) 6: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: LqK97diQcFrb4344S9ThgI9qIfk24xWO2D6Fzod4ApM=) 7: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: L+rO+MXrQK3tGBKkhTiQd3Pp/oT0n0nJ8NfAxPcZ/Ik=) 8: 33362e3235352e39322e302f32332d3234203d3e203139333138.roa (hash: FthEwpOIKT5rKWCqEXY9gMB5simU3azPQORqXvTeqVo=) 9: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: 1uKLPQUne0QcXblB3NW5HCIymd03TIpdjdnWqSBKxm8=) 10: 3138352e3234342e39352e302f32342d3234203d3e203134363138.roa (hash: BX+afd5v4CnQw1Csb+gERO9bOUf9cjiesQkq05EVznU=) 11: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: NTiGjgrJWtlD9Roa9FRQtbjOAAcPR35U4Ayfj8SpKuI=) 12: 3138352e3231332e3234312e302f32342d3234203d3e203631323732.roa (hash: ZRXMJB81EQGqLoTW9rCPLjbdmz5JtoX/ioguz/yH9B4=) 13: 3138352e3231332e3234302e302f32342d3234203d3e20323135373033.roa (hash: 5U9kh/Q1+pD8ktgLTSH2rTlmtF2qNT/hbi1XnCHITmo=) 14: 33362e3235352e39322e302f32332d3234203d3e203230333236.roa (hash: uAr910mpCFzZrOxxImyBVxZ5bzjvqrL8T8981qvKdos=) 15: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: 2mJFb3j98iS3WwOyYDzT/44zu56P1Mt1+w22nAIK9Eo=) 16: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: O475B5YNr+mk4vbByMFVmoqbRTenx4kmx66C3HIfdsg=) 17: 3138352e3232392e3230302e302f32342d3234203d3e2039333034.roa (hash: 9BQlkuwOuPyXvuvnOIpRrrItcJ412PckV00AOrBJhqk=) 18: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: /OGL5Xocpa/mA4GEutGuQoiWc4p3DBj9VM0kpmdQZxo=) 19: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: RdOuxQjMUqkQryMcrXonWYYeJva5RY8rohAdG2ITJdw=) 20: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: ezbmX/yRe+yRvkLs/8FFZoupwCiBI67aZ+0JqkrMl4Q=) 21: 3138352e3234342e39352e302f32342d3234203d3e203136353039.roa (hash: tBBH3ivLD6QCOuz/zDI7JAWzO8l/tRZui9Xrn0qJpA4=) 22: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: aTFuiZRKSKlOcP1bFw/QEJGr9kwsAqFvqfR62oNQfMc=) 23: 3138352e3232392e3230332e302f32342d3234203d3e20383334.roa (hash: UXig/TwCvZA6G46gkMbMCRZRPP6OaLfVARJUIuNH3r0=) 24: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: krs6rxjGgkgxIC0XFsSJIDbJbJTaOxRVYKdhwP98j0o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 08:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:7d:5f:63:89:be:76:d9:40:d2:b0:eb:73:97:a5:29:a1:d3:fb:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Oct 25 06:14:07 2025 GMT Not After : Oct 26 08:09:07 2025 GMT Subject: CN=982D975E5DAA2404AA51371A9FA6BB6230AB511D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7e:65:6a:d5:0c:42:d7:80:cd:45:d4:72:31: c8:65:bb:b1:01:ba:7e:7d:59:96:38:c7:0a:a6:de: 9a:2c:5e:9e:8d:59:b0:14:d7:17:6c:24:ac:a6:0a: 7f:56:ea:36:df:35:7d:a6:0f:11:c1:76:65:e2:eb: 1d:7a:a8:44:89:15:7a:fd:8e:9b:10:b7:56:58:89: 14:51:ce:5f:d2:41:5d:ce:d4:58:e3:98:ab:56:d1: c7:3d:9d:e5:d6:d6:5f:22:7e:ae:17:f4:65:ac:7f: f1:af:1d:08:1b:c6:c8:37:62:ae:64:db:05:0d:ff: 03:00:98:bb:e6:cb:4c:b4:d8:77:37:89:eb:a0:01: 4b:15:f5:0c:6b:a5:d9:1e:ce:c8:19:3e:65:79:4c: c1:58:5a:f6:7b:03:d9:72:c7:0d:68:cd:0e:e4:ac: fe:13:6a:cc:20:18:ba:f7:ac:1b:de:1b:aa:ba:fb: 77:77:1f:43:07:16:a7:04:db:52:92:78:b6:c0:8f: 06:ef:ca:5d:c5:8d:ae:a1:d9:79:9e:6c:fc:12:8f: 96:11:db:09:00:08:f8:b3:75:84:18:c2:01:97:ec: f7:f5:3e:b3:6b:42:73:1b:d5:03:01:8f:ca:f4:69: ef:f5:da:df:77:11:40:66:2a:de:1c:fa:3e:98:50: 80:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:2D:97:5E:5D:AA:24:04:AA:51:37:1A:9F:A6:BB:62:30:AB:51:1D X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:67:7b:e8:e1:98:4e:a9:3b:da:72:79:f3:54:56:ca:6d:66: 22:9f:79:84:ea:84:8c:bb:5b:4d:83:d1:56:30:53:92:76:46: 7c:b9:55:a0:67:10:ea:3d:20:a4:35:c3:43:41:b5:07:ec:96: 5e:c8:03:cb:ea:d2:b4:b3:27:ec:e9:2f:5c:73:27:14:ae:50: 28:30:32:b8:c1:bd:20:ed:45:6e:f0:5a:17:e2:88:6e:09:0b: 90:02:e1:89:1c:9d:ce:7f:e0:af:a9:a3:1e:3e:8b:6d:dc:a9: 50:27:4f:a1:e9:ce:07:81:e9:38:2d:7e:73:ae:e1:60:cb:e0: 9e:6c:c3:c7:87:2f:63:a7:cb:6b:be:f1:d6:ff:bc:35:42:96: 2e:98:9a:4d:59:a3:ea:28:d1:29:f6:dd:70:93:68:88:8f:f8: 04:30:03:fe:7c:44:8a:9d:3e:57:0f:f7:86:9b:ff:f6:d6:9a: f9:fb:e0:57:02:8f:43:6e:db:07:d0:70:c8:b2:0e:9d:25:ce: 4f:0e:20:d3:47:fb:9a:d8:23:dd:57:a1:85:46:ef:c4:ec:75: 07:d9:e4:13:23:e3:42:79:72:96:df:43:55:83:05:d3:63:5d: e0:bf:8a:aa:72:f0:e3:30:5d:ac:cf:b5:17:03:12:ed:b2:13: 8b:db:2c:17 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUn1fY4m+dtlA0rDrc5elKaHT++IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNTEwMjUwNjE0MDdaFw0yNTEwMjYwODA5MDdaMDMxMTAvBgNV BAMTKDk4MkQ5NzVFNURBQTI0MDRBQTUxMzcxQTlGQTZCQjYyMzBBQjUxMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCfmVq1QxC14DNRdRyMchlu7EB un59WZY4xwqm3posXp6NWbAU1xdsJKymCn9W6jbfNX2mDxHBdmXi6x16qESJFXr9 jpsQt1ZYiRRRzl/SQV3O1FjjmKtW0cc9neXW1l8ifq4X9GWsf/GvHQgbxsg3Yq5k 2wUN/wMAmLvmy0y02Hc3ieugAUsV9QxrpdkezsgZPmV5TMFYWvZ7A9lyxw1ozQ7k rP4TaswgGLr3rBveG6q6+3d3H0MHFqcE21KSeLbAjwbvyl3Fja6h2XmebPwSj5YR 2wkACPizdYQYwgGX7Pf1PrNrQnMb1QMBj8r0ae/12t93EUBmKt4c+j6YUIDjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUmC2XXl2qJASqUTcan6a7YjCrUR0wHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGd76OGYTqk72nJ581RW ym1mIp95hOqEjLtbTYPRVjBTknZGfLlVoGcQ6j0gpDXDQ0G1B+yWXsgDy+rStLMn 7OkvXHMnFK5QKDAyuMG9IO1FbvBaF+KIbgkLkALhiRydzn/gr6mjHj6LbdypUCdP oenOB4HpOC1+c67hYMvgnmzDx4cvY6fLa77x1v+8NUKWLpiaTVmj6ijRKfbdcJNo iI/4BDAD/nxEip0+Vw/3hpv/9taa+fvgVwKPQ27bB9BwyLIOnSXOTw4g00f7mtgj 3VehhUbvxOx1B9nkEyPjQnlylt9DVYMF02Nd4L+KqnLw4zBdrM+1FwMS7bITi9ss Fw== -----END CERTIFICATE-----Generated at Sat Oct 25 22:46:30 2025 by rpki-client