$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: nmCVnn8AcxgoEXHYFPWpgBAW4NGqH/TyK8UtpQ2z4vw= Subject key identifier: E5:AE:D1:0B:7E:DC:A3:48:71:A4:4E:24:DB:DA:DE:DD:53:70:A8:43 Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 37A0EBE2358D9D651624CC5F1E163764E8CAC9BC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 02F6 Signing time: Thu 13 Nov 2025 14:32:47 +0000 Manifest this update: Thu 13 Nov 2025 14:27:47 +0000 Manifest next update: Fri 14 Nov 2025 17:26:47 +0000 Files and hashes: 1: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: polxJUQuuGvo82QFQvRtgLcGzpMrITqZaH9JMW5PByU=) 2: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=) 3: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=) 4: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: F6VJOi3vW8ih7gU8rCzD7A7gIu39IHtVGsLlId1ILkM=) 5: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=) 6: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: M4zqLtdUHSAbU4GatESAUlsOQgWU2zpPTfy3/5JmOsg=) 7: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: ZhIUpj5tVPDcWiQ+3SY61ZE9RRhM2AJ7zchpU/cGNbk=) 8: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: Tk4tJu5bvTD5dR9NoM2pYvWxSXCc2/x84lQAlZZqzIs=) 9: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: LIVxcxtvoeze2S46mPqGSXeLOCk0JK2W2QKOiQjUdZQ=) 10: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=) 11: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=) 12: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: 7RQ0gXCWkNwXJyLVMAjMT4ifOZKJ140AG/jnIia+kz4=) 13: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: gq6me54MBqnqosS7iLksDmqAJs8yyfHwMXcZfgP1ijQ=) 14: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 6RxmKyitzJl4tEe1yv4vU5lxANHGsLOEl2k3HSP2ddo=) 15: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=) 16: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: q9kO+XsSTc4IFWwwMoS3SrHApGt02fgZkb8hIL34BJ8=) 17: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 14 Nov 2025 15:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:a0:eb:e2:35:8d:9d:65:16:24:cc:5f:1e:16:37:64:e8:ca:c9:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Nov 13 14:27:47 2025 GMT Not After : Nov 14 17:26:47 2025 GMT Subject: CN=E5AED10B7EDCA34871A44E24DBDADEDD5370A843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3b:09:ef:21:04:2d:2d:f6:84:54:8a:6e:55: 0d:f0:98:ee:83:98:5c:8e:b4:53:d1:f9:4f:bc:12: 74:7d:08:38:40:41:c9:c7:a1:6c:3b:27:17:94:fa: 94:1b:d1:d7:ad:cb:88:8d:8d:ee:86:81:d8:8b:f2: 1b:49:31:18:c6:e4:43:b0:ea:a3:3d:cb:5b:83:2f: 9b:66:39:37:68:07:f8:37:9d:74:18:a0:63:0e:ad: 94:0e:4c:00:30:93:82:40:ba:87:db:a0:35:1b:c0: 4a:c8:47:a8:c9:e5:fb:29:ec:3a:5b:48:6c:ed:b1: f5:f0:c0:b4:92:85:ef:16:8f:8e:0b:c9:e0:a5:6c: e7:4c:6d:8a:27:33:39:09:ef:ef:a9:da:31:95:4b: 48:10:03:27:fd:ab:a7:16:55:99:5e:2d:0b:1b:8e: 0a:e8:4a:73:05:d3:8d:86:93:95:fd:9f:90:c3:c7: 4a:29:0b:3a:96:8f:1a:77:a5:dc:74:ad:b5:9d:72: 25:55:e7:71:ea:3c:1f:e2:92:27:36:08:1b:c7:28: 11:54:1c:4c:42:c4:bc:a1:40:ff:7e:e8:ed:fd:fc: ae:92:3c:48:65:f9:2d:95:4f:0c:91:8d:3c:52:25: fa:5d:0f:56:dc:bb:d4:47:e5:c7:42:24:45:f6:76: d0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AE:D1:0B:7E:DC:A3:48:71:A4:4E:24:DB:DA:DE:DD:53:70:A8:43 X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:a5:d0:12:18:57:35:46:f7:a6:67:a8:02:18:dc:af:fb:50: 3c:c4:43:f7:3e:f6:10:e0:82:41:4f:a8:d9:64:24:ff:2c:c7: 10:06:c2:20:6b:51:83:cf:6d:f3:4c:b5:2e:dd:ee:90:e1:bf: ea:6d:42:72:7c:d8:72:5e:8c:43:31:00:73:37:92:5c:d9:62: 20:d1:e3:41:5c:23:6e:87:f4:fe:77:7d:78:be:6e:b0:81:d5: 30:71:ef:10:be:92:8b:4a:5d:d1:8a:98:dc:f0:24:8a:81:d3: bd:14:9d:d9:62:95:de:2c:a5:a5:40:1d:a1:42:93:3d:eb:d1: 9f:74:b0:47:68:a2:4b:b0:71:79:8c:2e:4b:24:1d:cb:ee:75: df:de:98:fb:2e:5e:5e:48:33:c8:0f:b8:5a:1b:4d:c4:aa:57: 0e:0b:ce:ea:b3:4f:ac:29:b3:d0:46:ee:8f:a7:f0:c6:11:6a: 3f:4e:94:58:56:b3:e0:39:14:5e:b1:64:b6:9f:ab:c9:7b:05: 95:2c:5a:62:14:0f:83:6f:82:77:42:85:cc:fe:47:cd:d4:62: 52:ff:50:88:62:34:82:3d:08:7e:1d:fd:d5:16:4f:85:85:85: 99:53:9a:b6:c4:b0:73:f0:f7:7b:32:db:65:d1:ca:76:9b:cd: 56:ff:3b:4c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUN6Dr4jWNnWUWJMxfHhY3ZOjKybwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNTExMTMxNDI3NDdaFw0yNTExMTQxNzI2NDdaMDMxMTAvBgNV BAMTKEU1QUVEMTBCN0VEQ0EzNDg3MUE0NEUyNERCREFERURENTM3MEE4NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJOwnvIQQtLfaEVIpuVQ3wmO6D mFyOtFPR+U+8EnR9CDhAQcnHoWw7JxeU+pQb0dety4iNje6GgdiL8htJMRjG5EOw 6qM9y1uDL5tmOTdoB/g3nXQYoGMOrZQOTAAwk4JAuofboDUbwErIR6jJ5fsp7Dpb SGztsfXwwLSShe8Wj44LyeClbOdMbYonMzkJ7++p2jGVS0gQAyf9q6cWVZleLQsb jgroSnMF042Gk5X9n5DDx0opCzqWjxp3pdx0rbWdciVV53HqPB/ikic2CBvHKBFU HExCxLyhQP9+6O39/K6SPEhl+S2VTwyRjTxSJfpdD1bcu9RH5cdCJEX2dtAfAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU5a7RC37co0hxpE4k29re3VNwqEMwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQANpdAS GFc1RvemZ6gCGNyv+1A8xEP3PvYQ4IJBT6jZZCT/LMcQBsIga1GDz23zTLUu3e6Q 4b/qbUJyfNhyXoxDMQBzN5Jc2WIg0eNBXCNuh/T+d314vm6wgdUwce8QvpKLSl3R ipjc8CSKgdO9FJ3ZYpXeLKWlQB2hQpM969GfdLBHaKJLsHF5jC5LJB3L7nXf3pj7 Ll5eSDPID7haG03EqlcOC87qs0+sKbPQRu6Pp/DGEWo/TpRYVrPgORResWS2n6vJ ewWVLFpiFA+Db4J3QoXM/kfN1GJS/1CIYjSCPQh+Hf3VFk+FhYWZU5q2xLBz8Pd7 Mttl0cp2m81W/ztM -----END CERTIFICATE-----Generated at Thu Nov 13 21:45:34 2025 by rpki-client