$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft File: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft (raw, json) Hash identifier: nWvoNtyuZ/yq6+fI1kbWHu905lFZcZUF1LrXOIZcOHE= Subject key identifier: C0:08:1D:C1:97:9B:BA:C7:D4:79:E8:44:FD:B4:67:6A:F9:46:07:4F Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Certificate serial: 25EE380D131A34C9292EF08BB15AAB6FBCA706C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft Manifest number: 0143 Signing time: Sat 06 Sep 2025 18:14:37 +0000 Manifest this update: Sat 06 Sep 2025 18:09:37 +0000 Manifest next update: Sun 07 Sep 2025 20:07:37 +0000 Files and hashes: 1: 326131343a333863303a313a3a2f34382d3438203d3e20323135323438.roa (hash: hYvWm7RFlZS1l2LX8NsvpkNf0MsxvPiQn7slmgwssck=) 2: 3130332e3134392e3136392e302f32342d3234203d3e203630373831.roa (hash: M972A2zux5bp2vtM/yV/ifXNBlJMRB7g6qDIDzpgNsU=) 3: 326131343a333863303a323a3a2f34382d3438203d3e20323135323438.roa (hash: e6DNGKmUmYh4KhA4h67tF7nM55oym+8oQ84yYdEmy64=) 4: 326131343a333863303a333a3a2f34382d3438203d3e20333936303634.roa (hash: RQOZ0GeuB2hc8N96mezhBhXKeCrh7X17R4TSsdmASyE=) 5: 326131343a333863303a3130343a3a2f34382d3438203d3e20323135323438.roa (hash: QZeJi0O4ini6QNF1syA5gZ8HehGzsGo0INWd9T4WodA=) 6: AS215248.asa (hash: nrWnsup/MJIC3SMKp1zza61PlhYs/6Ueoc+foma4Qbc=) 7: 326131343a333863303a3130343a3a2f34382d3438203d3e20333936303634.roa (hash: uQC+ycpajw6LG1MwmEH2bQGDaDjqft9mY/Ula5mB0Rs=) 8: 326131343a333863303a323a3a2f34382d3438203d3e20333936303634.roa (hash: b3AvMY9Sl1B0jVsJOJivHhqGlksNlQ/JV9muHKrGSGQ=) 9: 326131343a333863303a313a3a2f34382d3438203d3e20333936303634.roa (hash: hT2vS1KxZCIrrbIeX36lXo5PB7z3bFiXrMszQcpSghE=) 10: 3130332e3134392e3136382e302f32342d3234203d3e20333936303634.roa (hash: +yFHbjFdcl3OkH9bM82B/wbQvRBlEBGqJ0LTOyulC0Q=) 11: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl (hash: giFHgUFZFQ2cUVz9geh6Bc9enT00f1CQKhnVEA2ltpU=) 12: 326131343a333863303a3a2f32392d3239203d3e20323135323438.roa (hash: aQBGW4UwEpZw1viUGTiicR7R7bF3eHxKluau3FSxHVQ=) 13: 3130332e3134392e3136382e302f32342d3234203d3e20323135323438.roa (hash: RPFyh+9f4VeLKwhSKFsibkww2V1WrimAJUdSq1OTL10=) 14: 326131343a333863303a3a2f32392d3239203d3e20333936303634.roa (hash: izH2bRAdoHB65ZOfP1RgM/881EkkTABDPPywFSiQ9f4=) 15: 326131343a333863303a333a3a2f34382d3438203d3e20323135323438.roa (hash: rQvL6z8yuqUS7v24/Ra9en3S8KmIgkMtv1rcn8o1sfA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 20:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ee:38:0d:13:1a:34:c9:29:2e:f0:8b:b1:5a:ab:6f:bc:a7:06:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Validity Not Before: Sep 6 18:09:37 2025 GMT Not After : Sep 7 20:07:37 2025 GMT Subject: CN=C0081DC1979BBAC7D479E844FDB4676AF946074F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a1:26:2d:ad:c4:92:5a:c1:a6:52:99:5d:f0: 70:8c:0d:67:cd:d0:a0:03:87:d0:0b:ff:51:18:a5: 87:f9:51:ef:a0:cd:2e:f7:ec:d8:35:56:7d:53:6c: e9:2c:74:36:35:65:3d:41:bf:44:93:05:c3:f1:29: 44:ca:6a:b4:4b:f4:9e:06:c4:05:5f:98:c2:cf:3e: 45:4d:f2:29:87:19:6a:d5:db:8f:bf:4e:72:df:cc: 5e:71:da:3f:25:4e:ce:f5:d9:ec:15:7c:94:3b:8f: a1:af:49:6e:d8:23:2b:65:2c:15:08:88:68:ff:fe: 42:0a:a5:b5:de:ff:4c:e5:89:7b:14:9b:22:55:a1: fc:d7:0e:23:f4:fa:54:0b:7a:13:31:03:a1:00:14: bd:75:58:b5:3b:2d:47:4e:51:06:e4:4e:45:47:f8: 93:20:d1:1e:ba:7c:e5:64:81:b8:a1:e9:10:74:2c: 5a:d0:1f:d3:86:55:44:97:7e:9b:03:b0:bd:42:fc: cc:85:ae:37:b4:a6:d8:e1:9d:e2:93:55:93:e5:88: 44:c6:1d:47:7b:57:19:52:b9:8f:64:ba:72:5d:f9: 8b:41:33:6b:8a:59:b4:85:84:4c:0b:5f:ea:c9:7d: 11:5c:b6:16:55:ad:ab:ec:da:e9:f1:8b:73:e1:26: 4c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:08:1D:C1:97:9B:BA:C7:D4:79:E8:44:FD:B4:67:6A:F9:46:07:4F X509v3 Authority Key Identifier: keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:30:31:e0:bc:43:44:6d:27:82:89:91:da:e9:62:de:7a:62: c0:f0:3f:d9:77:4a:f2:d3:7b:7b:ac:a8:46:04:0e:a9:12:db: f1:86:f2:68:8b:12:5f:ad:e3:8f:fa:3a:40:ab:4d:28:95:09: f6:9c:12:29:34:b3:d8:9a:86:8b:69:4c:0b:00:3c:8f:a1:61: 76:bb:05:49:e7:5c:eb:48:3b:a6:a8:66:04:ac:eb:f3:46:aa: fd:34:38:98:7f:a3:d9:82:6d:f6:10:7f:63:f4:3c:fb:1e:8a: 16:ed:fa:27:47:06:b1:55:c3:41:c3:3d:3b:92:a3:11:f9:6e: 03:11:da:8c:0f:16:de:5a:a8:7d:28:a7:9d:27:07:8d:1a:f8: c8:c8:a3:da:87:9c:d5:06:0a:32:d8:d9:56:c9:34:40:e7:a0: a6:b0:ea:2a:0b:0c:3a:60:57:ce:12:e2:37:c0:cb:22:a1:f0: db:3c:c5:40:89:42:2b:01:bc:37:5f:35:be:c8:fb:2b:16:50: 87:e5:84:8b:65:08:bf:5e:ab:9b:d3:f0:b2:96:0b:0d:77:91: 8e:a0:05:95:28:aa:77:6d:8a:80:65:e7:a2:be:43:0a:a1:c9: 46:f9:4f:d0:72:26:e7:a3:37:23:8f:e4:fc:fc:a4:0b:70:d1: 25:18:b0:7d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJe44DRMaNMkpLvCLsVqrb7ynBskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWNkYzA0YmIyM2VhYTRjZWNjNzkxZGZlMDRiYjAyOGI3 ZTc5N2I2ODAeFw0yNTA5MDYxODA5MzdaFw0yNTA5MDcyMDA3MzdaMDMxMTAvBgNV BAMTKEMwMDgxREMxOTc5QkJBQzdENDc5RTg0NEZEQjQ2NzZBRjk0NjA3NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6oSYtrcSSWsGmUpld8HCMDWfN 0KADh9AL/1EYpYf5Ue+gzS737Ng1Vn1TbOksdDY1ZT1Bv0STBcPxKUTKarRL9J4G xAVfmMLPPkVN8imHGWrV24+/TnLfzF5x2j8lTs712ewVfJQ7j6GvSW7YIytlLBUI iGj//kIKpbXe/0zliXsUmyJVofzXDiP0+lQLehMxA6EAFL11WLU7LUdOUQbkTkVH +JMg0R66fOVkgbih6RB0LFrQH9OGVUSXfpsDsL1C/MyFrje0ptjhneKTVZPliETG HUd7VxlSuY9kunJd+YtBM2uKWbSFhEwLX+rJfRFcthZVravs2unxi3PhJkxVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUwAgdwZebusfUeehE/bRnavlGB08wHwYDVR0j BBgwFoAUXNwEuyPqpM7MeR3+BLsCi355e2gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjli N2M0LzAvNUNEQzA0QkIyM0VBQTRDRUNDNzkxREZFMDRCQjAyOEI3RTc5N0I2OC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hOd0V1eVBxcE03TWVSMy1CTHNDaTM1 NWUyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZDE5ZGIyMC00 NjUzLTQ4ZDQtOGZjNC01ODBkMTM2OWI3YzQvMC81Q0RDMDRCQjIzRUFBNENFQ0M3 OTFERkUwNEJCMDI4QjdFNzk3QjY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAADAx4LxDRG0ngomR2uli 3npiwPA/2XdK8tN7e6yoRgQOqRLb8YbyaIsSX63jj/o6QKtNKJUJ9pwSKTSz2JqG i2lMCwA8j6FhdrsFSedc60g7pqhmBKzr80aq/TQ4mH+j2YJt9hB/Y/Q8+x6KFu36 J0cGsVXDQcM9O5KjEfluAxHajA8W3lqofSinnScHjRr4yMij2oec1QYKMtjZVsk0 QOegprDqKgsMOmBXzhLiN8DLIqHw2zzFQIlCKwG8N181vsj7KxZQh+WEi2UIv16r m9PwspYLDXeRjqAFlSiqd22KgGXnor5DCqHJRvlP0HIm56M3I4/k/PykC3DRJRiw fQ== -----END CERTIFICATE-----Generated at Sun Sep 7 10:15:04 2025 by rpki-client