$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft File: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json) Hash identifier: 911DoIb4quyVi9AW2ri0RlssvGF8V+sfUU+qE7SJ5/k= Subject key identifier: A0:5D:86:94:D4:EF:D8:75:22:62:79:DE:1D:E6:90:6E:B2:92:D9:23 Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Certificate serial: 25365B0C773D88FEAE05472A67B7885C1822E20D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft Manifest number: 023A Signing time: Tue 21 Oct 2025 15:53:45 +0000 Manifest this update: Tue 21 Oct 2025 15:48:45 +0000 Manifest next update: Wed 22 Oct 2025 16:00:45 +0000 Files and hashes: 1: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: V4bF3gDy6FE6zlNg9r0xUvpdAXLZEuLnN1FQtQz0KTM=) 2: 326130643a623238373a656363303a3a2f34322d3432203d3e20323135363634.roa (hash: rHhBb1bMQectXohqdqgX13X6ENYXH/z7I15ReI0F4QU=) 3: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: UtcmwgPmmxIsh/ra+btug0leCQZCVTQekME41LiPWtU=) 4: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: m2CiuFBjrlRavusUidV8mkbKXKHzyUUUhDYGNFwtBAs=) 5: 326130643a623238373a646430303a3a2f34302d3430203d3e20323136333039.roa (hash: mpzPSr1CBW6Ka5Te0DE52rLBHWk7ArDQlInbkbsiPzA=) 6: AS41720.asa (hash: R9jFblFZaPwUK6Huk1SWnasBO6ka9sffBE6ldnurUoM=) 7: 326130643a623238373a646164303a3a2f34342d3434203d3e20323038343337.roa (hash: Lh+NThTArglnDdFNJgAbksxydedvZ3VhoYilxW6dgHQ=) 8: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: o5Ji9Nl0S0iVZZtmrV/Dia6lTq3wC3uyRf91AZlTL/E=) 9: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: BOfTSY7wWayFslIYZyC++f09YnW0ZvOoQVsy6AzQanA=) 10: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: JAmgJM2VGcbQzWkOuFvV1aRU7IhMtvcEw/0vm9hTp3I=) 11: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: WCwEBzNgZxfWujB1a3u+wektQucc0+9enpndo6Z5Gjc=) 12: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: Q6Io7mv8dNkJZap1oGvqDaJWxZcBIoRNlU5W1SfkDVo=) 13: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: U56VGJcjuLrEYPpG7oABc/1/udX8BKChn+eBmuJZDts=) 14: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: kmFg1Ubyi8msuCXkZq9wTUwo9VmgSHMiCqLO0oSubS4=) 15: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: YeBU5ew7EbaM3M5c2zGWzk0Q7RzGkO4TGKp/4byQ64k=) 16: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: S10o6lJcne+SfvZMZmd0ndSNpfqn8OsjAJw8rNDdBSw=) 17: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: BJe1bO6YYCEXeriSlULaZwS25Q4hRdnweRF5hyXEuDY=) 18: 326130643a623238373a656330303a3a2f34302d3430203d3e20323135363634.roa (hash: GOCABvoqojF3U9p5UEyXVqmO5f+8/wyeekfdSPGqQRY=) 19: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: bYPPd9HcHavTcfcGpM+ulmmDEDFMIVr0C3fR7prPNz4=) 20: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: ItyIHbG/IJlKjOf6vhLnjpZ9k/lt97Z65upW37DdGzA=) 21: 326130643a623238373a656230303a3a2f34302d3430203d3e20323133373039.roa (hash: Nk6ANHp8DkJz6kDCL9bvYoWgqeyO4UOw/aVOiTsobgk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:36:5b:0c:77:3d:88:fe:ae:05:47:2a:67:b7:88:5c:18:22:e2:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Validity Not Before: Oct 21 15:48:45 2025 GMT Not After : Oct 22 16:00:45 2025 GMT Subject: CN=A05D8694D4EFD875226279DE1DE6906EB292D923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e4:43:23:d7:c8:29:2a:59:1c:7a:b2:d1:11: 2c:ec:e8:75:91:ef:f2:9f:1d:a7:2e:9f:53:3d:15: 65:a0:fe:b3:6f:bb:dd:b9:31:bd:24:86:0c:b0:6c: 2a:c0:27:8a:c3:48:72:e4:9b:d9:0e:ff:03:91:16: c5:8f:2e:ea:f6:77:2a:39:d7:b0:47:db:ce:19:a9: 20:13:40:94:a0:f8:c8:3a:0b:fa:17:cb:56:e4:9b: 82:a8:ab:5d:fe:bc:6e:ce:ac:9a:b4:a0:0d:7f:61: e5:0e:c8:e0:40:d2:b7:cc:ab:c7:35:37:47:08:4f: e3:db:36:de:97:fd:bc:6b:0a:4a:56:bf:15:7a:8d: f1:83:95:ae:a5:cb:96:4e:22:ce:16:6b:45:59:3d: 08:80:57:e1:45:81:03:87:8c:56:ef:83:98:17:2b: be:41:3b:29:2b:2b:c3:09:77:13:e2:cc:3a:aa:9c: fb:19:0a:74:81:0e:03:2e:ba:c7:37:f2:cc:f0:78: 55:34:63:ff:ef:42:85:22:c7:b9:65:41:61:ff:64: 47:4f:57:a8:1b:d9:58:98:3b:f8:6c:de:57:02:c3: 89:d5:65:01:1e:32:a2:8f:68:65:99:0e:d0:86:e6: 93:98:17:95:f5:f5:9e:cb:72:4f:79:ad:ba:bc:ad: 1c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:5D:86:94:D4:EF:D8:75:22:62:79:DE:1D:E6:90:6E:B2:92:D9:23 X509v3 Authority Key Identifier: keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:a2:76:3b:6a:86:f7:c7:c4:9d:d5:6c:bb:7d:d6:44:1d:8b: ae:05:9f:b0:52:55:c3:7f:ed:7f:bc:e4:d2:2d:e8:bf:3d:a0: 69:84:21:70:da:99:04:45:8a:d6:cb:2b:04:e5:8c:98:eb:d1: 85:ce:1b:cc:5d:51:02:25:27:5c:2c:84:1b:68:7c:0b:5c:79: 87:db:38:74:7e:65:63:f1:6e:0d:1b:45:7e:94:83:f2:a9:0d: e3:e8:54:99:79:d5:3c:01:14:c5:14:be:81:7e:1c:36:7a:8c: e4:d4:84:4a:58:6d:7d:24:49:c7:14:6a:46:a6:f9:cc:d0:0a: 62:24:c7:c5:8a:2f:1b:84:29:45:c8:dd:28:36:7d:67:c7:7d: 61:17:f1:48:85:79:55:e5:2d:8f:9e:2f:13:61:55:7d:8c:0d: 13:27:8d:d6:9f:60:29:63:fc:c3:7a:d6:f1:ee:9b:81:52:c6: 1f:56:e7:39:ce:6b:9b:db:d3:95:1e:03:b0:0e:a0:bb:71:c3: 75:93:fb:8f:21:82:df:83:1a:7b:30:5c:31:e2:8d:ee:99:85: cc:bd:9e:5a:15:30:c3:79:19:6c:aa:fa:fb:df:ba:5a:a0:96: f7:91:41:5d:91:23:b8:4f:f5:28:53:8c:0b:95:b5:84:0b:c1: 61:6d:a7:ab -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJTZbDHc9iP6uBUcqZ7eIXBgi4g0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjZGQ5YzE5M2RhOTE4NWE0YWMxNWIyYWRlODc1ZmU5 N2I2ZjQ5MTAeFw0yNTEwMjExNTQ4NDVaFw0yNTEwMjIxNjAwNDVaMDMxMTAvBgNV BAMTKEEwNUQ4Njk0RDRFRkQ4NzUyMjYyNzlERTFERTY5MDZFQjI5MkQ5MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo5EMj18gpKlkcerLRESzs6HWR 7/KfHacun1M9FWWg/rNvu925Mb0khgywbCrAJ4rDSHLkm9kO/wORFsWPLur2dyo5 17BH284ZqSATQJSg+Mg6C/oXy1bkm4Koq13+vG7OrJq0oA1/YeUOyOBA0rfMq8c1 N0cIT+PbNt6X/bxrCkpWvxV6jfGDla6ly5ZOIs4Wa0VZPQiAV+FFgQOHjFbvg5gX K75BOykrK8MJdxPizDqqnPsZCnSBDgMuusc38szweFU0Y//vQoUix7llQWH/ZEdP V6gb2ViYO/hs3lcCw4nVZQEeMqKPaGWZDtCG5pOYF5X19Z7Lck95rbq8rRwNAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUoF2GlNTv2HUiYnneHeaQbrKS2SMwHwYDVR0j BBgwFoAUiM3ZwZPakYWkrBWyreh1/pe29JEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTZhZmYyMzQtNjFjNS00MjkwLThhNmQtNWYyYjkwMjcz MjJmLzAvODhDREQ5QzE5M0RBOTE4NUE0QUMxNUIyQURFODc1RkU5N0I2RjQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNM1p3WlBha1lXa3JCV3lyZWgxX3Bl MjlKRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lNmFmZjIzNC02 MWM1LTQyOTAtOGE2ZC01ZjJiOTAyNzMyMmYvMC84OENERDlDMTkzREE5MTg1QTRB QzE1QjJBREU4NzVGRTk3QjZGNDkxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADqJ2O2qG98fEndVsu33W RB2LrgWfsFJVw3/tf7zk0i3ovz2gaYQhcNqZBEWK1ssrBOWMmOvRhc4bzF1RAiUn XCyEG2h8C1x5h9s4dH5lY/FuDRtFfpSD8qkN4+hUmXnVPAEUxRS+gX4cNnqM5NSE SlhtfSRJxxRqRqb5zNAKYiTHxYovG4QpRcjdKDZ9Z8d9YRfxSIV5VeUtj54vE2FV fYwNEyeN1p9gKWP8w3rW8e6bgVLGH1bnOc5rm9vTlR4DsA6gu3HDdZP7jyGC34Ma ezBcMeKN7pmFzL2eWhUww3kZbKr6+9+6WqCW95FBXZEjuE/1KFOMC5W1hAvBYW2n qw== -----END CERTIFICATE-----Generated at Wed Oct 22 06:16:09 2025 by rpki-client