$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft File: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json) Hash identifier: 1XtCZS/wvk71r8INVSKPANaHSQFl5aDGllaB4nE5l/k= Subject key identifier: 1A:89:84:DB:C3:61:8C:DD:11:2E:E5:99:8D:D2:C4:BE:18:30:87:EB Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Certificate serial: 58D468721E7D8954D4397F2B408F63AEF95C8B22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft Manifest number: 01FC Signing time: Fri 05 Sep 2025 23:03:05 +0000 Manifest this update: Fri 05 Sep 2025 22:58:05 +0000 Manifest next update: Sun 07 Sep 2025 02:15:05 +0000 Files and hashes: 1: 326130643a623238373a646164303a3a2f34342d3434203d3e20323038343337.roa (hash: Lh+NThTArglnDdFNJgAbksxydedvZ3VhoYilxW6dgHQ=) 2: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: rKpxhpqUorqgVtCGKWxs0xClQ15mn6WpR+r/PnSh/P0=) 3: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: S10o6lJcne+SfvZMZmd0ndSNpfqn8OsjAJw8rNDdBSw=) 4: AS41720.asa (hash: +RbH8buX1T5kTWMGsS+k2hctRH6+R8V1cu3+Qe3+/Rs=) 5: 326130643a623238373a646430303a3a2f34302d3430203d3e20323136333039.roa (hash: mpzPSr1CBW6Ka5Te0DE52rLBHWk7ArDQlInbkbsiPzA=) 6: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: YeBU5ew7EbaM3M5c2zGWzk0Q7RzGkO4TGKp/4byQ64k=) 7: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: U56VGJcjuLrEYPpG7oABc/1/udX8BKChn+eBmuJZDts=) 8: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: BJe1bO6YYCEXeriSlULaZwS25Q4hRdnweRF5hyXEuDY=) 9: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: bYPPd9HcHavTcfcGpM+ulmmDEDFMIVr0C3fR7prPNz4=) 10: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: kmFg1Ubyi8msuCXkZq9wTUwo9VmgSHMiCqLO0oSubS4=) 11: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: V4bF3gDy6FE6zlNg9r0xUvpdAXLZEuLnN1FQtQz0KTM=) 12: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: WtqgmDwc3f4nCSOQ8ixLkNx8sXt7FaBWfi7I6des1c8=) 13: 326130643a623238373a656363303a3a2f34322d3432203d3e20323135363634.roa (hash: rHhBb1bMQectXohqdqgX13X6ENYXH/z7I15ReI0F4QU=) 14: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: m2CiuFBjrlRavusUidV8mkbKXKHzyUUUhDYGNFwtBAs=) 15: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: JAmgJM2VGcbQzWkOuFvV1aRU7IhMtvcEw/0vm9hTp3I=) 16: 326130643a623238373a656330303a3a2f34302d3430203d3e20323135363634.roa (hash: GOCABvoqojF3U9p5UEyXVqmO5f+8/wyeekfdSPGqQRY=) 17: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: ItyIHbG/IJlKjOf6vhLnjpZ9k/lt97Z65upW37DdGzA=) 18: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: UtcmwgPmmxIsh/ra+btug0leCQZCVTQekME41LiPWtU=) 19: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: iavCedfpEd5k0rIG/kL5F/xxOAMPmZq43N15rLvPbic=) 20: 326130643a623238373a656230303a3a2f34302d3430203d3e20323133373039.roa (hash: Nk6ANHp8DkJz6kDCL9bvYoWgqeyO4UOw/aVOiTsobgk=) 21: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: o5Ji9Nl0S0iVZZtmrV/Dia6lTq3wC3uyRf91AZlTL/E=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 02:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:d4:68:72:1e:7d:89:54:d4:39:7f:2b:40:8f:63:ae:f9:5c:8b:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Validity Not Before: Sep 5 22:58:05 2025 GMT Not After : Sep 7 02:15:05 2025 GMT Subject: CN=1A8984DBC3618CDD112EE5998DD2C4BE183087EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d8:9c:80:2e:c2:06:38:53:ef:7d:19:94:57: 99:fe:22:d8:0c:29:cb:bb:f1:4f:a1:51:d8:d5:f1: 3f:f7:31:8a:da:d5:bf:bf:e8:65:ab:cd:63:d4:37: aa:51:32:ea:68:ed:9b:85:fe:4b:c3:8f:84:e4:08: 95:d7:2d:18:3e:5b:08:81:cb:d3:fe:d6:d0:17:41: 70:df:89:d9:10:89:24:b8:bc:05:61:6c:cf:be:4e: d9:87:cc:d6:fd:9b:66:52:13:d1:33:1e:4c:b9:60: 5d:7f:46:ae:e7:b3:12:1f:14:90:e8:03:04:2f:8d: cb:41:50:25:0d:45:23:b3:55:68:97:f6:51:a6:73: 92:fb:4a:1b:ca:92:6b:bc:d8:1e:67:fc:63:4b:fe: 42:64:90:a5:e6:26:78:fa:9f:49:03:ea:8b:45:a5: 72:32:d0:87:b6:33:1c:c5:27:45:c3:41:0b:34:fb: 60:ad:d4:fa:2f:5d:6b:d8:0c:8e:97:1b:b3:b0:d3: 72:32:20:25:51:7c:30:f6:9f:f8:d4:74:97:b3:2c: 44:71:ac:49:7d:7a:da:23:a4:a2:18:b4:f5:7c:5f: f7:fa:b8:d9:59:53:c1:22:c7:32:8d:57:c4:73:25: 2b:44:ee:6d:85:ec:cc:30:03:6a:e3:9c:e3:f7:9c: a9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:89:84:DB:C3:61:8C:DD:11:2E:E5:99:8D:D2:C4:BE:18:30:87:EB X509v3 Authority Key Identifier: keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:4c:07:bb:4f:5b:b9:98:c0:9d:29:19:f6:bb:69:72:79:51: 6e:7c:95:ea:2f:d5:90:6b:8f:27:85:d1:2f:87:33:35:79:fc: 7c:1d:db:f8:59:c1:7b:f7:47:ef:7b:d8:8b:e0:1f:1b:1e:47: 78:48:97:ce:46:b9:bd:4c:bd:c3:52:63:88:11:f7:0d:0f:94: 93:11:89:8d:1a:34:08:ea:79:c3:6c:7e:96:88:3d:5f:99:66: 37:8d:91:9f:11:22:08:11:b4:d6:5e:7d:2e:fa:cf:26:ec:6e: cb:62:58:17:09:13:b1:0b:54:84:ef:98:cd:7d:b7:e2:e1:34: 6a:f8:03:b4:35:1a:d7:9c:60:47:50:27:f0:74:df:a8:7d:c2: 4c:23:c0:2f:a4:03:d6:62:26:1d:44:33:10:3d:17:1b:0c:1e: cf:71:0d:6f:9f:f6:1f:a5:14:9a:37:a3:a5:32:34:70:ed:99: cb:5d:08:d6:fe:a7:0c:a3:92:07:a1:af:fb:08:f9:9a:24:c0: 8c:74:35:03:9a:c2:ae:b0:f6:e7:01:3e:3a:70:3d:f4:2f:de: ef:3e:c1:94:a6:db:f0:b1:a0:fa:95:d5:5b:f6:77:d5:38:70: 6f:0a:ea:86:ba:a6:55:eb:c9:b9:e2:f1:98:f2:3d:12:38:65: 37:d8:0b:8f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWNRoch59iVTUOX8rQI9jrvlciyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjZGQ5YzE5M2RhOTE4NWE0YWMxNWIyYWRlODc1ZmU5 N2I2ZjQ5MTAeFw0yNTA5MDUyMjU4MDVaFw0yNTA5MDcwMjE1MDVaMDMxMTAvBgNV BAMTKDFBODk4NERCQzM2MThDREQxMTJFRTU5OThERDJDNEJFMTgzMDg3RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP2JyALsIGOFPvfRmUV5n+ItgM Kcu78U+hUdjV8T/3MYra1b+/6GWrzWPUN6pRMupo7ZuF/kvDj4TkCJXXLRg+WwiB y9P+1tAXQXDfidkQiSS4vAVhbM++TtmHzNb9m2ZSE9EzHky5YF1/Rq7nsxIfFJDo AwQvjctBUCUNRSOzVWiX9lGmc5L7ShvKkmu82B5n/GNL/kJkkKXmJnj6n0kD6otF pXIy0Ie2MxzFJ0XDQQs0+2Ct1PovXWvYDI6XG7Ow03IyICVRfDD2n/jUdJezLERx rEl9etojpKIYtPV8X/f6uNlZU8EixzKNV8RzJStE7m2F7MwwA2rjnOP3nKlpAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUGomE28NhjN0RLuWZjdLEvhgwh+swHwYDVR0j BBgwFoAUiM3ZwZPakYWkrBWyreh1/pe29JEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTZhZmYyMzQtNjFjNS00MjkwLThhNmQtNWYyYjkwMjcz MjJmLzAvODhDREQ5QzE5M0RBOTE4NUE0QUMxNUIyQURFODc1RkU5N0I2RjQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNM1p3WlBha1lXa3JCV3lyZWgxX3Bl MjlKRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lNmFmZjIzNC02 MWM1LTQyOTAtOGE2ZC01ZjJiOTAyNzMyMmYvMC84OENERDlDMTkzREE5MTg1QTRB QzE1QjJBREU4NzVGRTk3QjZGNDkxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiEwHu09buZjAnSkZ9rtp cnlRbnyV6i/VkGuPJ4XRL4czNXn8fB3b+FnBe/dH73vYi+AfGx5HeEiXzka5vUy9 w1JjiBH3DQ+UkxGJjRo0COp5w2x+log9X5lmN42RnxEiCBG01l59LvrPJuxuy2JY FwkTsQtUhO+YzX234uE0avgDtDUa15xgR1An8HTfqH3CTCPAL6QD1mImHUQzED0X Gwwez3ENb5/2H6UUmjejpTI0cO2Zy10I1v6nDKOSB6Gv+wj5miTAjHQ1A5rCrrD2 5wE+OnA99C/e7z7BlKbb8LGg+pXVW/Z31ThwbwrqhrqmVevJueLxmPI9EjhlN9gL jw== -----END CERTIFICATE-----Generated at Sat Sep 6 09:56:58 2025 by rpki-client