$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft File: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft (raw, json) Hash identifier: /coHa57lu7FIzT05X/LaI9AjjpWtlOZyH314tBKANCw= Subject key identifier: 63:47:91:F4:89:A2:94:E1:8F:4A:CA:5D:17:5E:DB:7A:09:06:EE:7B Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Certificate serial: 5BB75129F007DD6EEE90102AE80972ED9CC83A27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft Manifest number: 0183 Signing time: Thu 23 Oct 2025 07:43:56 +0000 Manifest this update: Thu 23 Oct 2025 07:38:56 +0000 Manifest next update: Fri 24 Oct 2025 09:37:56 +0000 Files and hashes: 1: 3130332e3134392e3136392e302f32342d3234203d3e203630373831.roa (hash: M972A2zux5bp2vtM/yV/ifXNBlJMRB7g6qDIDzpgNsU=) 2: 3139342e3131372e36392e302f32342d3234203d3e20323135323438.roa (hash: EqbKHazBpNo/bx4pclFyuqidomfYzdI+MjCRoDSagrM=) 3: 326131343a333863303a333a3a2f34382d3438203d3e20323135323438.roa (hash: rQvL6z8yuqUS7v24/Ra9en3S8KmIgkMtv1rcn8o1sfA=) 4: 326131343a333863303a3130343a3a2f34382d3438203d3e20323135323438.roa (hash: QZeJi0O4ini6QNF1syA5gZ8HehGzsGo0INWd9T4WodA=) 5: 326131343a333863303a323a3a2f34382d3438203d3e20323135323438.roa (hash: e6DNGKmUmYh4KhA4h67tF7nM55oym+8oQ84yYdEmy64=) 6: 326131343a333863303a313a3a2f34382d3438203d3e20333936303634.roa (hash: hT2vS1KxZCIrrbIeX36lXo5PB7z3bFiXrMszQcpSghE=) 7: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl (hash: +83I69rbBG0LSt6XS499ZNf2VRg9gGURbr0w6GUOdDA=) 8: 3130332e3134392e3136382e302f32342d3234203d3e20333936303634.roa (hash: +yFHbjFdcl3OkH9bM82B/wbQvRBlEBGqJ0LTOyulC0Q=) 9: 326131343a333863303a3a2f32392d3239203d3e20333936303634.roa (hash: izH2bRAdoHB65ZOfP1RgM/881EkkTABDPPywFSiQ9f4=) 10: 3139342e3131372e36392e302f32342d3234203d3e20333936303634.roa (hash: uPzNQdfiTlC1R9B5J33ZDfQAHE+DMHweR/VNt7ogg2k=) 11: 3130332e3134392e3136382e302f32342d3234203d3e20323135323438.roa (hash: RPFyh+9f4VeLKwhSKFsibkww2V1WrimAJUdSq1OTL10=) 12: AS215248.asa (hash: nrWnsup/MJIC3SMKp1zza61PlhYs/6Ueoc+foma4Qbc=) 13: 326131343a333863303a3a2f32392d3239203d3e20323135323438.roa (hash: aQBGW4UwEpZw1viUGTiicR7R7bF3eHxKluau3FSxHVQ=) 14: 326131343a333863303a313a3a2f34382d3438203d3e20323135323438.roa (hash: hYvWm7RFlZS1l2LX8NsvpkNf0MsxvPiQn7slmgwssck=) 15: 326131343a333863303a323a3a2f34382d3438203d3e20333936303634.roa (hash: b3AvMY9Sl1B0jVsJOJivHhqGlksNlQ/JV9muHKrGSGQ=) 16: 326131343a333863303a3130343a3a2f34382d3438203d3e20333936303634.roa (hash: uQC+ycpajw6LG1MwmEH2bQGDaDjqft9mY/Ula5mB0Rs=) 17: 326131343a333863303a333a3a2f34382d3438203d3e20333936303634.roa (hash: RQOZ0GeuB2hc8N96mezhBhXKeCrh7X17R4TSsdmASyE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 07:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:b7:51:29:f0:07:dd:6e:ee:90:10:2a:e8:09:72:ed:9c:c8:3a:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Validity Not Before: Oct 23 07:38:56 2025 GMT Not After : Oct 24 09:37:56 2025 GMT Subject: CN=634791F489A294E18F4ACA5D175EDB7A0906EE7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:84:e6:0d:19:10:b4:e3:0a:d1:e3:1b:3e:8a: 39:ff:3f:84:72:ec:80:78:90:11:06:af:8c:b4:ef: bb:b4:2f:eb:88:7a:69:f3:bc:43:85:2d:f1:ee:77: b6:64:b8:7d:27:45:07:8a:7c:ff:12:f0:48:19:6f: 06:f9:a1:3a:fd:13:21:c2:c1:a3:12:5b:66:1b:fb: 26:a3:3c:18:2c:61:a5:35:1f:fb:e7:bb:87:75:c2: 4e:d0:13:e4:46:88:03:86:13:e5:1f:59:cf:c8:33: 5b:f6:bc:59:c1:67:4d:e8:9c:ef:36:0b:a6:48:5a: 6f:b1:39:2d:eb:53:33:e8:80:0b:3d:58:a2:da:32: 32:6c:09:a4:18:0e:83:dd:2e:6d:b1:35:49:cb:1d: b7:c2:3c:9c:a9:23:19:33:fb:08:45:b3:08:5e:8b: 6a:4e:75:20:33:92:3b:01:c7:e4:10:d6:e9:d6:ec: a0:83:4b:67:8f:da:90:b6:72:c8:19:94:7c:81:60: 0d:2c:b6:2c:6f:fc:b7:a0:bd:21:39:1b:92:ea:bc: 22:45:eb:7b:ce:71:6a:35:2f:2f:c4:cc:a5:9c:14: a5:da:93:4b:5a:6b:8c:00:36:a3:ef:0e:0e:24:b2: 7f:5b:26:4c:f0:1a:dd:25:36:94:46:01:cb:e7:39: f0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:47:91:F4:89:A2:94:E1:8F:4A:CA:5D:17:5E:DB:7A:09:06:EE:7B X509v3 Authority Key Identifier: keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:09:19:66:a1:65:f3:e7:4c:5f:0d:98:bc:0d:58:56:23:34: 29:f0:77:b9:35:77:14:78:cb:19:92:b3:90:2f:71:1e:44:93: a6:57:3f:c5:23:10:e4:86:39:22:a6:c5:64:68:41:16:ea:4a: 19:a0:e3:3c:c8:2e:a6:a9:0a:01:36:75:93:3c:5a:3f:de:6e: 2e:a0:08:d4:49:2c:2c:9c:0c:f1:d7:17:03:d8:fc:0e:80:79: 88:96:b7:eb:c8:d7:3e:09:54:d1:2d:07:09:f3:47:38:2e:d9: c2:1e:80:74:57:eb:4e:f5:0e:da:d7:03:0b:bd:74:9b:30:82: f1:bc:43:a9:fe:f1:f0:39:19:95:25:d4:7b:da:0d:c6:83:a3: e1:1f:d8:15:75:7d:a5:17:a3:c4:2b:27:02:f0:f9:71:bd:f5: bd:89:30:91:68:49:38:56:5c:fe:ce:e2:7d:55:00:0b:44:86: 31:85:cc:d9:ba:da:c9:83:e7:1c:c2:5b:0b:cf:40:e8:5e:0d: 78:15:79:b0:45:df:d3:3f:a2:c1:77:e1:8b:6c:f0:94:9c:03: ea:c1:0d:a5:d0:52:2a:db:e0:34:89:b9:f2:7b:3b:39:b3:86: 9a:1e:79:86:cd:df:b7:fc:11:8c:40:ab:c0:67:15:c7:6e:88: 71:c4:ce:95 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUW7dRKfAH3W7ukBAq6Aly7ZzIOicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWNkYzA0YmIyM2VhYTRjZWNjNzkxZGZlMDRiYjAyOGI3 ZTc5N2I2ODAeFw0yNTEwMjMwNzM4NTZaFw0yNTEwMjQwOTM3NTZaMDMxMTAvBgNV BAMTKDYzNDc5MUY0ODlBMjk0RTE4RjRBQ0E1RDE3NUVEQjdBMDkwNkVFN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGhOYNGRC04wrR4xs+ijn/P4Ry 7IB4kBEGr4y077u0L+uIemnzvEOFLfHud7ZkuH0nRQeKfP8S8EgZbwb5oTr9EyHC waMSW2Yb+yajPBgsYaU1H/vnu4d1wk7QE+RGiAOGE+UfWc/IM1v2vFnBZ03onO82 C6ZIWm+xOS3rUzPogAs9WKLaMjJsCaQYDoPdLm2xNUnLHbfCPJypIxkz+whFswhe i2pOdSAzkjsBx+QQ1unW7KCDS2eP2pC2csgZlHyBYA0stixv/LegvSE5G5LqvCJF 63vOcWo1Ly/EzKWcFKXak0taa4wANqPvDg4ksn9bJkzwGt0lNpRGAcvnOfBVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUY0eR9ImilOGPSspdF17begkG7nswHwYDVR0j BBgwFoAUXNwEuyPqpM7MeR3+BLsCi355e2gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjli N2M0LzAvNUNEQzA0QkIyM0VBQTRDRUNDNzkxREZFMDRCQjAyOEI3RTc5N0I2OC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hOd0V1eVBxcE03TWVSMy1CTHNDaTM1 NWUyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZDE5ZGIyMC00 NjUzLTQ4ZDQtOGZjNC01ODBkMTM2OWI3YzQvMC81Q0RDMDRCQjIzRUFBNENFQ0M3 OTFERkUwNEJCMDI4QjdFNzk3QjY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQkZZqFl8+dMXw2YvA1Y ViM0KfB3uTV3FHjLGZKzkC9xHkSTplc/xSMQ5IY5IqbFZGhBFupKGaDjPMgupqkK ATZ1kzxaP95uLqAI1EksLJwM8dcXA9j8DoB5iJa368jXPglU0S0HCfNHOC7Zwh6A dFfrTvUO2tcDC710mzCC8bxDqf7x8DkZlSXUe9oNxoOj4R/YFXV9pRejxCsnAvD5 cb31vYkwkWhJOFZc/s7ifVUAC0SGMYXM2brayYPnHMJbC89A6F4NeBV5sEXf0z+i wXfhi2zwlJwD6sENpdBSKtvgNIm58ns7ObOGmh55hs3ft/wRjECrwGcVx26IccTO lQ== -----END CERTIFICATE-----Generated at Thu Oct 23 12:15:21 2025 by rpki-client