$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: 3kobn8hL7+Y1yMI8iAcrVuYAJxs4x8++BeqYUKgaWgk= Subject key identifier: 74:8D:24:AE:48:FE:04:30:D3:F8:1F:52:98:0D:4A:FD:7B:6F:55:70 Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 6141C20B73028062A82667A9E63A6504C8FFD0BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 02E3 Signing time: Thu 30 Oct 2025 11:34:18 +0000 Manifest this update: Thu 30 Oct 2025 11:29:18 +0000 Manifest next update: Fri 31 Oct 2025 14:04:18 +0000 Files and hashes: 1: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: LIVxcxtvoeze2S46mPqGSXeLOCk0JK2W2QKOiQjUdZQ=) 2: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: 8sGClw9XMAxHAYDZE+5kRoOp9i/UF6JL7tw80DrZY+k=) 3: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=) 4: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: gq6me54MBqnqosS7iLksDmqAJs8yyfHwMXcZfgP1ijQ=) 5: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: ZhIUpj5tVPDcWiQ+3SY61ZE9RRhM2AJ7zchpU/cGNbk=) 6: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: M4zqLtdUHSAbU4GatESAUlsOQgWU2zpPTfy3/5JmOsg=) 7: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=) 8: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: 7RQ0gXCWkNwXJyLVMAjMT4ifOZKJ140AG/jnIia+kz4=) 9: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: polxJUQuuGvo82QFQvRtgLcGzpMrITqZaH9JMW5PByU=) 10: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 6RxmKyitzJl4tEe1yv4vU5lxANHGsLOEl2k3HSP2ddo=) 11: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: F6VJOi3vW8ih7gU8rCzD7A7gIu39IHtVGsLlId1ILkM=) 12: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=) 13: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=) 14: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=) 15: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: Tk4tJu5bvTD5dR9NoM2pYvWxSXCc2/x84lQAlZZqzIs=) 16: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=) 17: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 31 Oct 2025 14:04:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:41:c2:0b:73:02:80:62:a8:26:67:a9:e6:3a:65:04:c8:ff:d0:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Oct 30 11:29:18 2025 GMT Not After : Oct 31 14:04:18 2025 GMT Subject: CN=748D24AE48FE0430D3F81F52980D4AFD7B6F5570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2b:c6:4e:64:05:b5:95:7d:51:1f:b7:09:34: 85:eb:6a:2e:08:66:ae:27:06:cf:89:b2:00:7f:da: ba:b5:b5:9e:41:fe:26:41:89:70:10:f0:ff:d5:21: f4:03:40:3d:c4:e9:36:fe:50:a7:80:f1:f8:51:d7: 5c:a4:81:2c:c1:3d:9d:e6:dc:9f:5a:72:e9:5e:d6: 40:a8:d3:df:8c:ff:05:48:59:71:ee:7b:48:d8:57: ad:37:00:71:b2:4f:79:6f:54:99:11:e2:a4:81:05: 85:6c:d8:02:8f:9f:0c:72:d2:6d:68:8a:19:a4:bd: 69:7b:05:41:85:8d:18:fe:b1:86:d8:09:85:db:5d: eb:92:9c:97:ea:d1:17:8b:01:f9:44:8b:49:ea:7a: fd:97:07:f5:6d:ec:95:01:35:b6:93:52:12:b5:15: 82:e8:62:9b:90:73:98:fa:70:1b:cf:0e:d4:12:ea: 54:4c:25:e4:0e:14:14:b1:26:9a:0e:a3:8c:9f:d2: 06:4e:1d:23:d1:02:af:85:e9:a5:11:b8:b9:5f:d6: fa:84:7d:b3:08:49:26:96:4e:ac:4b:2e:04:40:ea: 4e:23:56:27:c0:e3:5a:ec:5d:65:f4:85:7f:96:a5: db:70:19:4a:0c:5c:7d:51:55:cc:da:29:2a:c5:cd: 91:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:8D:24:AE:48:FE:04:30:D3:F8:1F:52:98:0D:4A:FD:7B:6F:55:70 X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:c1:26:bc:41:59:42:82:66:24:b0:3f:fe:23:df:43:7f:64: c2:e7:95:4f:cf:96:73:74:e9:29:7f:19:ad:2e:ff:d4:0d:07: 30:b0:50:3b:7b:a4:58:69:12:dd:d2:6e:b9:67:97:9c:1a:28: fe:dd:f9:76:1b:5e:5d:2a:25:07:e0:4d:b5:24:4d:2f:b2:1e: 4d:8e:17:bd:e8:b4:d2:98:85:51:b3:87:36:11:6c:d2:6a:30: b2:cf:c5:34:1a:03:e5:dc:9a:65:92:ce:30:52:62:77:94:87: 11:35:de:75:f9:8a:3e:78:5e:44:b0:0a:ef:86:9a:02:cb:3e: da:38:5b:0a:b5:07:1a:27:24:fe:3d:3f:9e:51:0d:5b:29:80: 1f:77:d0:e1:1c:87:59:ec:d5:e0:38:95:8c:1d:44:17:d9:86: e2:b4:31:86:d4:f2:16:45:e4:8c:af:8c:a1:32:8d:16:93:8a: bb:e4:12:ff:49:22:ea:7b:6a:07:70:42:a2:39:92:5c:b9:43: c0:c8:f6:55:3d:4a:7f:61:14:62:e8:f3:c7:3e:28:74:d3:e0: 39:08:f7:cc:a5:07:a6:a9:4a:c4:33:0c:48:96:29:ae:7a:98: 2e:20:18:f5:cd:31:07:30:d4:f6:ba:a5:f7:b2:85:c9:af:0f: 7b:8b:b1:90 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUYUHCC3MCgGKoJmep5jplBMj/0L4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNTEwMzAxMTI5MThaFw0yNTEwMzExNDA0MThaMDMxMTAvBgNV BAMTKDc0OEQyNEFFNDhGRTA0MzBEM0Y4MUY1Mjk4MEQ0QUZEN0I2RjU1NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBK8ZOZAW1lX1RH7cJNIXrai4I Zq4nBs+JsgB/2rq1tZ5B/iZBiXAQ8P/VIfQDQD3E6Tb+UKeA8fhR11ykgSzBPZ3m 3J9acule1kCo09+M/wVIWXHue0jYV603AHGyT3lvVJkR4qSBBYVs2AKPnwxy0m1o ihmkvWl7BUGFjRj+sYbYCYXbXeuSnJfq0ReLAflEi0nqev2XB/Vt7JUBNbaTUhK1 FYLoYpuQc5j6cBvPDtQS6lRMJeQOFBSxJpoOo4yf0gZOHSPRAq+F6aURuLlf1vqE fbMISSaWTqxLLgRA6k4jVifA41rsXWX0hX+WpdtwGUoMXH1RVczaKSrFzZFrAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUdI0krkj+BDDT+B9SmA1K/XtvVXAwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCLwSa8 QVlCgmYksD/+I99Df2TC55VPz5ZzdOkpfxmtLv/UDQcwsFA7e6RYaRLd0m65Z5ec Gij+3fl2G15dKiUH4E21JE0vsh5Njhe96LTSmIVRs4c2EWzSajCyz8U0GgPl3Jpl ks4wUmJ3lIcRNd51+Yo+eF5EsArvhpoCyz7aOFsKtQcaJyT+PT+eUQ1bKYAfd9Dh HIdZ7NXgOJWMHUQX2YbitDGG1PIWReSMr4yhMo0Wk4q75BL/SSLqe2oHcEKiOZJc uUPAyPZVPUp/YRRi6PPHPih00+A5CPfMpQemqUrEMwxIlimuepguIBj1zTEHMNT2 uqX3soXJrw97i7GQ -----END CERTIFICATE-----Generated at Thu Oct 30 21:59:43 2025 by rpki-client