$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft File: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft (raw, json) Hash identifier: nuz4YDl9+nJ1EgmJUonwpAEgJaNEXP7llEIAQEfx2JY= Subject key identifier: 07:12:0E:5F:80:B0:19:75:ED:0F:39:62:D5:07:D7:F7:90:AC:75:03 Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Certificate serial: 13564C02E45D6DBCF5D0B290EE230237B29D89BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft Manifest number: 01DE Signing time: Tue 21 Oct 2025 10:07:23 +0000 Manifest this update: Tue 21 Oct 2025 10:02:23 +0000 Manifest next update: Wed 22 Oct 2025 11:49:23 +0000 Files and hashes: 1: 33312e32322e3130372e302f32342d3234203d3e20313337353137.roa (hash: zucU5bamNfYRw/esvivyzaXHMAl8N0xQ+Q3coI+3JvA=) 2: 33312e32322e3131312e302f32342d3234203d3e20323135333535.roa (hash: brok2XUOzC0OAQs7efh1lP/TIOrHW70pJohRfs3tgEM=) 3: 33312e32322e3130392e302f32342d3234203d3e203432383331.roa (hash: iK+yx/VtDctRGDFOE/NGNWTyR4u7o2tFGRI6U0bUYZU=) 4: 3130332e34392e3133302e302f32342d3234203d3e20323036303333.roa (hash: v7D054EN2gERBe7aLvFn0V17UtLvh1fmGSVfmRoK+KQ=) 5: 33312e32322e3130352e302f32342d3234203d3e20323135303236.roa (hash: 4XlIN+3Y2uvivj3jKKbdxnHiR3dRqeJ7/xmTE8uipj8=) 6: 34332e3233302e38342e302f32342d3234203d3e203235313938.roa (hash: D5rxpe/mz9cZbwkoouLs3Io8a9VjYwAhmSHGosd1BJQ=) 7: 33312e32322e3131302e302f32342d3234203d3e2039333034.roa (hash: 4/DyfQef3JM+QDXadF+flhTmwriSDAeEuVFVt/FGtTg=) 8: 3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa (hash: gI3QMk1nxnVJ3ar9nDADeDjafrF5rxSYgoW75rlLkBk=) 9: 33312e32322e3130362e302f32342d3234203d3e20323133353032.roa (hash: jNzQvK975k0nFSky/OYcsFfueNL1XvYeIp3mtR/7WPY=) 10: 3130332e34392e3132382e302f32342d3234203d3e20313534303439.roa (hash: RP7fF4ljaFnG1QBw6wHJTYmQiSzsC+UtOPXQULgrH/c=) 11: 34332e3233302e38362e302f32332d3234203d3e2033343931.roa (hash: BqbUmbythNNYP4WqssroNY2sOPvoyuRgXIRAVuIytpA=) 12: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl (hash: gn2PgOUAtp3uV3e55BZGARUnB4/QHSP3prAzff5Tx34=) 13: 33312e32322e3130382e302f32342d3234203d3e203432383331.roa (hash: y9uevaBeLo1M0NZi4w3HJOyvLkMWIaZEJFCi8snsYYY=) 14: 34332e3233302e38352e302f32342d3234203d3e20323131343430.roa (hash: hoZQSGqkvoyh+Fwe28UicpO6RAJD80P7rklT/Di/mQU=) 15: 33312e32322e3130342e302f32342d3234203d3e20313938303230.roa (hash: yHVodRBAsBlx/8p8lQvX33hmgwPZB9Uj6k/5yqbIyfs=) 16: 3130332e34392e3132392e302f32342d3234203d3e20313530363534.roa (hash: ZmNqb6SQ04nrnt7KP4kUO8EO/zoOBhgAf3oJbSFf7Ys=) 17: 3130332e34392e3132392e302f32342d3234203d3e20313437323631.roa (hash: OkLNRr7sKDDa5HQaSwaNeYF6CO01e+JHe9kYR/VqYg4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 07:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:56:4c:02:e4:5d:6d:bc:f5:d0:b2:90:ee:23:02:37:b2:9d:89:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Validity Not Before: Oct 21 10:02:23 2025 GMT Not After : Oct 22 11:49:23 2025 GMT Subject: CN=07120E5F80B01975ED0F3962D507D7F790AC7503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fa:2c:9f:52:ba:93:6b:b2:36:40:47:5e:e4: ba:d8:b6:c2:5d:d0:27:be:c3:e6:a4:6f:37:55:85: 9b:78:66:1f:3b:d5:ea:2e:25:ed:e9:80:32:0b:47: 88:f7:fe:7f:ac:df:db:f2:cd:7e:28:de:f3:8e:0c: 93:97:19:eb:a9:80:6a:34:18:35:92:0c:32:cc:f5: e6:d7:e9:17:9a:20:5d:f3:60:e1:09:70:e2:be:36: c7:56:ea:95:84:61:26:9e:7a:e3:33:88:d1:57:7c: b1:e5:1d:6f:5e:81:57:12:16:72:f8:c0:42:2f:b1: e0:b9:aa:69:ac:cf:37:ee:c3:3e:25:f1:e6:65:62: 13:3f:74:d0:fc:96:f5:e4:95:be:86:de:18:a7:0d: 75:5d:08:24:35:02:b1:a8:d2:3c:96:70:5a:2c:ed: e2:4a:0f:3b:a9:bc:1d:22:a4:8c:1f:b5:55:d0:e9: bb:c2:df:39:79:6d:23:a2:fb:0d:76:8a:c9:7e:f6: 5c:fa:3d:15:b9:d8:b7:e5:9f:fa:50:dd:d3:db:f8: 38:6f:56:bd:8d:2c:dc:53:a0:d5:72:48:fe:26:0c: 2b:53:2b:be:0c:70:c4:cd:8c:fb:ee:9d:60:af:8a: ce:24:82:55:a9:7b:98:15:b9:3c:76:a9:23:37:0e: bf:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:12:0E:5F:80:B0:19:75:ED:0F:39:62:D5:07:D7:F7:90:AC:75:03 X509v3 Authority Key Identifier: keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:e6:73:30:78:be:be:aa:0d:a8:45:0f:c3:39:81:28:e6:05: 11:73:b1:ea:1c:e5:c4:56:9e:d1:4c:0b:83:e0:aa:b5:25:c3: 8e:df:ac:dd:57:f8:9f:51:72:0f:05:ac:74:3c:4b:7e:26:e9: a7:74:b0:df:dd:f8:38:67:7d:84:6a:41:fd:d7:76:61:ac:de: 0f:ca:23:a3:04:c4:cf:fb:78:89:f4:90:3f:d9:ea:fb:cc:36: fa:12:83:7e:06:99:d7:af:7f:f5:f5:b6:30:f8:2a:1c:72:fa: 9e:22:d1:54:b3:bc:b9:02:71:a1:77:25:ea:d0:c2:8d:1c:48: f5:03:ea:a7:65:8a:d7:e5:8d:9f:cb:5a:9b:79:ff:1f:3a:e6: 9b:91:d6:b1:6a:87:66:b6:0c:a3:ed:a1:a0:f0:61:76:48:4c: dc:4c:6b:ae:42:9b:9c:be:64:a1:97:98:11:20:d5:2e:44:34: f9:19:b1:40:d8:bf:8d:f3:62:6b:ca:31:ab:1d:1e:b9:b5:40: 4f:9a:ae:f4:ad:e2:59:73:44:3f:98:7b:f4:9d:b3:d7:5e:ea: 41:36:f8:94:74:d4:ed:4d:1e:42:16:50:3f:d7:51:03:b3:dc: cd:c9:6f:fd:68:c2:ff:f1:d7:b9:72:55:2b:07:66:a1:72:9f: b9:6e:a4:0f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUE1ZMAuRdbbz10LKQ7iMCN7KdibowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw YWVhYjI5ZDAeFw0yNTEwMjExMDAyMjNaFw0yNTEwMjIxMTQ5MjNaMDMxMTAvBgNV BAMTKDA3MTIwRTVGODBCMDE5NzVFRDBGMzk2MkQ1MDdEN0Y3OTBBQzc1MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh+iyfUrqTa7I2QEde5LrYtsJd 0Ce+w+akbzdVhZt4Zh871eouJe3pgDILR4j3/n+s39vyzX4o3vOODJOXGeupgGo0 GDWSDDLM9ebX6ReaIF3zYOEJcOK+NsdW6pWEYSaeeuMziNFXfLHlHW9egVcSFnL4 wEIvseC5qmmszzfuwz4l8eZlYhM/dND8lvXklb6G3hinDXVdCCQ1ArGo0jyWcFos 7eJKDzupvB0ipIwftVXQ6bvC3zl5bSOi+w12isl+9lz6PRW52Lfln/pQ3dPb+Dhv Vr2NLNxToNVySP4mDCtTK74McMTNjPvunWCvis4kglWpe5gVuTx2qSM3Dr81AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUBxIOX4CwGXXtDzli1QfX95CsdQMwHwYDVR0j BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2 NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy cXNwMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYWZlYmRiNC02 ZjBiLTQwNGItOThlMi1hMjZiZTk0YTY2MjAvMC9DNzcwRjQzMzU4Qjk3QkEwQUE5 QkRDNjJCQkQ1MTFFOTBBRUFCMjlELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkeZzMHi+vqoNqEUPwzmB KOYFEXOx6hzlxFae0UwLg+CqtSXDjt+s3Vf4n1FyDwWsdDxLfibpp3Sw3934OGd9 hGpB/dd2YazeD8ojowTEz/t4ifSQP9nq+8w2+hKDfgaZ169/9fW2MPgqHHL6niLR VLO8uQJxoXcl6tDCjRxI9QPqp2WK1+WNn8tam3n/Hzrmm5HWsWqHZrYMo+2hoPBh dkhM3ExrrkKbnL5koZeYESDVLkQ0+RmxQNi/jfNia8oxqx0eubVAT5qu9K3iWXNE P5h79J2z117qQTb4lHTU7U0eQhZQP9dRA7Pczclv/WjC//HXuXJVKwdmoXKfuW6k Dw== -----END CERTIFICATE-----Generated at Tue Oct 21 13:48:36 2025 by rpki-client