$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft File: 3134EE987E08D8B5583FEEF621A03150C4F35434.mft (raw, json) Hash identifier: AH/p31CjwbY8jQeGIgYppD954bla83t7u/0TtAERKok= Subject key identifier: 2C:7E:85:F7:55:81:8D:4B:43:12:A2:4F:09:4F:A6:BE:CC:54:01:55 Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34 Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434 Certificate serial: 5CCB668196D8815B436BCF1A06A778AE95213FF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft Manifest number: 0357 Signing time: Tue 04 Nov 2025 05:27:13 +0000 Manifest this update: Tue 04 Nov 2025 05:22:13 +0000 Manifest next update: Wed 05 Nov 2025 06:37:13 +0000 Files and hashes: 1: 326131343a316563373a666666633a3a2f34382d3438203d3e20323136333339.roa (hash: Xpu7YHsE9Uu/Z34+AM32q6wFmIndeEkcOzm4kV29gZU=) 2: 326131343a316563373a666666663a3a2f34382d3438203d3e20323030313739.roa (hash: jxX5jejatt6POI8r69/OIdC4tpqjlqDh7/l5cMHt1Lc=) 3: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer (hash: BF/TWOjb2Ii4r0osOdYS/rUG+zOQPpS2tAXbzEo5Wzo=) 4: 2AFACA7F316DBE0CFF394F9D5952E52992F185F1.cer (hash: TzD6pGlBEMmZI/OlLFvK4Q5nKNXovDA7wOkDjfwohQo=) 5: 39312e3139362e362e302f32342d3234203d3e20323135333138.roa (hash: j1BjBA5NyrZGkTgGio3bSgpZw6QFV9sBz2jgQ+DhB30=) 6: 326131343a316563373a666330303a3a2f34302d3438203d3e20323130363435.roa (hash: D0UhxJixjH/6ED4b7asHdvZhN16xQRz9JstOKq1KOMc=) 7: 326131343a316563373a663930303a3a2f34302d3438203d3e20323131363733.roa (hash: eFx1IPRipEBged0ZijUlxcw0OO6jOfnGP3TjandnEEA=) 8: 326131343a316563373a663731303a3a2f34342d3438203d3e20323030303838.roa (hash: AEg6jBnmgaUb2x64BLtcycaY+zMRMacIwLXjCKOp0Kc=) 9: 326131343a316563343a3a2f33322d3430203d3e203535323031.roa (hash: J7TluaWBMRkzmoR+yQUgqy6TY9pp5e+qFllmxawGaBk=) 10: 326131343a316563373a666666643a3a2f34382d3438203d3e20323038343533.roa (hash: cQGzH58GG/5AlClFkvMjXXZFAsalmfdZS0xTjTmJx5Q=) 11: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer (hash: jLV89odZdgTYzYRcumFoTReP+gmmk+raXpcoYf0+wxA=) 12: 326131343a316563373a663830303a3a2f34382d3438203d3e20323131303139.roa (hash: IUL9dWtw0Umsxfs7xwdo1JVZ6ulAsKal+ROC0kpiHgM=) 13: 326131343a316563373a666661303a3a2f34382d3438203d3e20323133353135.roa (hash: uw8e5+V55rs+wlENeJdGRICWtffz7xQmePuL+3U/nIU=) 14: 326131343a316563373a666230303a3a2f34302d3438203d3e20323134373435.roa (hash: 6hKao63oIzBdls8N02e3UeaWWtVa56Xgit+XQJDfjec=) 15: 326131343a316563373a663830313a3a2f34382d3438203d3e20323131303139.roa (hash: q5taedROXWkWDrb/6D/rTI85VzK640g7YzLTCK454po=) 16: 326131343a316563373a323030303a3a2f34302d3438203d3e20323133353135.roa (hash: ei7uKbr21cStunIFD4/+QnxpXX+lUv4yRtUBnFqqQIw=) 17: 326131343a316563373a663530303a3a2f34302d3430203d3e20323038343533.roa (hash: 26SEXU3Pd+BR8SHx6kufhwY94Io89XBTIVQPTTPnVB8=) 18: 326131343a316563323a3a2f34302d3434203d3e20323135333138.roa (hash: 1f8XyNlehbCOnOttGzyrDosIHnqaI9sKAvrNf1ADCiI=) 19: 326131343a316563373a666666653a3a2f34382d3438203d3e20323135343733.roa (hash: tXMEYMrTa38uR0L+SQ9LimzmDrpxo8zhMIaTp0PKkR0=) 20: 326131343a316563373a663630303a3a2f34302d3438203d3e20323133393938.roa (hash: jfvc4Qyrnftgf9GYsuLUox0bHp6mia0CtR4lMdTVrZY=) 21: 326131343a316563373a313130303a3a2f34302d3438203d3e20323135343337.roa (hash: LSZWA34YwCO9D6JtWEG8LpUQ1o3Anb+MGXWPU43gT4A=) 22: 326131343a316563373a663730303a3a2f34342d3438203d3e20333937343233.roa (hash: 3NaEQ7JEzM4oESWmvkMu3mTAfj7phWpZMjjU4RHfTkQ=) 23: 326131343a316563373a666430303a3a2f34302d3438203d3e20323136323034.roa (hash: s/Nou3yfPszN+70d0fh1KxFGk9lHz9YF1rBNojiEJcI=) 24: 326131343a316563373a663732303a3a2f34342d3438203d3e203139333138.roa (hash: 354DUYTmwYIpJ7s6pAfElMpcSbsG0UySE6atyDydlaw=) 25: 326131343a316563373a663130303a3a2f34302d3438203d3e20323134313838.roa (hash: l6K8Ipuv+LpAjKBvLV7xS+N25xPDi1Q5md9XNlMDt3o=) 26: 326131343a316563373a663733303a3a2f34342d3438203d3e20313336353537.roa (hash: EjYVXtoGI4pKSiTLS0VJX0KMS0fHh7kyk5vR1WUohgI=) 27: 326131343a316563373a313030303a3a2f33362d3438203d3e20323134343831.roa (hash: mAC3tE41nQDojIaT/TKY9BuNdhC77RQ6VPm5O+XWCIE=) 28: 326131343a316563373a666530303a3a2f34302d3438203d3e20323135343637.roa (hash: 8asU86WRYRMPRuHXiCGWb31YsN6wlyGCHOUyjPq08QE=) 29: 326131343a316563373a666130303a3a2f34302d3438203d3e20323134333635.roa (hash: D7vq42LlJ1JkjKrlS8EXaLer6htaFFui19vj1Iz46+0=) 30: 3134EE987E08D8B5583FEEF621A03150C4F35434.crl (hash: AnIUdrUgHy9e/qEQIJfBDXMssfwgvW8M1w+mbNsHZaE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 06:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:cb:66:81:96:d8:81:5b:43:6b:cf:1a:06:a7:78:ae:95:21:3f:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434 Validity Not Before: Nov 4 05:22:13 2025 GMT Not After : Nov 5 06:37:13 2025 GMT Subject: CN=2C7E85F755818D4B4312A24F094FA6BECC540155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e3:1a:d6:80:78:dd:ff:5e:1c:c2:06:1c:08: 5c:9d:87:b9:d4:89:a9:f8:39:7a:4c:49:a2:54:f8: 2f:91:0d:97:42:5a:c3:2e:d1:c2:80:44:cd:16:ea: ed:24:77:a3:e0:9d:de:9e:f0:cf:b8:1f:27:92:31: 7f:dd:96:91:36:7b:12:20:9c:a9:4f:b7:bc:75:c0: c9:5d:27:cc:52:3c:e3:21:4c:3b:f6:8b:c5:89:f1: 29:35:2d:b8:cb:81:63:81:46:53:50:76:7c:79:ed: 9a:8d:9f:f7:27:fb:0a:88:70:dd:ad:b7:67:e6:fc: ec:99:f1:88:89:f8:63:b4:0d:51:39:8e:a2:e6:66: 04:4b:fc:bb:1d:f8:c2:cd:5a:05:80:66:e8:a4:69: 9b:88:f8:50:7d:a3:c7:60:db:26:4f:14:07:26:76: a5:74:39:f4:a9:bc:6a:0e:94:4c:98:f4:41:9d:45: 82:8f:3d:34:ef:85:ea:bc:9d:0a:37:30:75:89:80: 35:f9:16:74:b4:36:19:5c:d3:33:5f:ad:19:cd:cb: 8e:70:c1:d5:f7:e7:d3:e1:2a:60:25:63:43:87:c6: cf:8c:65:aa:09:a0:e4:69:03:1c:b3:b8:71:c1:bb: 13:c8:1c:76:0e:3c:eb:78:c0:b4:14:98:f7:a9:1c: cb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:7E:85:F7:55:81:8D:4B:43:12:A2:4F:09:4F:A6:BE:CC:54:01:55 X509v3 Authority Key Identifier: keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:f2:a5:01:27:ab:67:33:14:da:41:48:61:0f:9c:b8:1e:d2: 7e:f0:ca:f0:4a:cf:e9:e6:fa:bc:b8:3b:19:51:96:3b:2b:76: d4:2f:d6:d1:d1:09:47:30:43:14:04:d5:0e:d7:3a:00:2b:5a: 34:e3:24:72:42:53:b6:64:13:3a:91:71:d2:c8:5a:78:f3:e0: e5:b5:17:9c:be:9c:41:e2:90:72:f1:c1:cb:d4:93:73:5d:b8: fc:ff:4c:b0:1d:60:30:80:ed:51:34:97:63:15:53:54:91:9f: 2b:27:e2:de:4a:a2:da:b6:8c:63:e7:11:b8:67:58:bc:32:ef: 9a:3e:47:2d:bc:37:61:87:2f:c2:34:44:93:40:99:b7:d4:76: de:69:27:65:e8:0e:52:3b:aa:76:4f:76:cd:21:48:22:5a:80: b9:f5:d4:49:55:06:c8:6b:3b:60:09:22:5a:10:bb:df:7b:e0: 4b:ac:f3:1d:d0:2c:27:24:99:d3:78:86:a2:75:76:f3:67:b5: 4a:01:b2:86:27:6c:6c:40:7a:a5:7e:80:2d:68:cc:2d:17:71: f5:69:2c:ed:1e:d9:e4:fd:7a:b3:6a:1e:fc:c5:44:68:56:6a: a7:33:f6:89:3c:d9:6e:86:d2:4e:15:ee:5e:c3:83:26:db:fa: d6:9b:57:10 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXMtmgZbYgVtDa88aBqd4rpUhP/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEzNGVlOTg3ZTA4ZDhiNTU4M2ZlZWY2MjFhMDMxNTBj NGYzNTQzNDAeFw0yNTExMDQwNTIyMTNaFw0yNTExMDUwNjM3MTNaMDMxMTAvBgNV BAMTKDJDN0U4NUY3NTU4MThENEI0MzEyQTI0RjA5NEZBNkJFQ0M1NDAxNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq4xrWgHjd/14cwgYcCFydh7nU ian4OXpMSaJU+C+RDZdCWsMu0cKARM0W6u0kd6Pgnd6e8M+4HyeSMX/dlpE2exIg nKlPt7x1wMldJ8xSPOMhTDv2i8WJ8Sk1LbjLgWOBRlNQdnx57ZqNn/cn+wqIcN2t t2fm/OyZ8YiJ+GO0DVE5jqLmZgRL/Lsd+MLNWgWAZuikaZuI+FB9o8dg2yZPFAcm dqV0OfSpvGoOlEyY9EGdRYKPPTTvheq8nQo3MHWJgDX5FnS0Nhlc0zNfrRnNy45w wdX359PhKmAlY0OHxs+MZaoJoORpAxyzuHHBuxPIHHYOPOt4wLQUmPepHMuBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQULH6F91WBjUtDEqJPCU+mvsxUAVUwHwYDVR0j BBgwFoAUMTTumH4I2LVYP+72IaAxUMTzVDQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWEzYmI5M2YtOThhNC00YzdlLWEwZTEtODA1N2E0ZjA4 NmM5LzAvMzEzNEVFOTg3RTA4RDhCNTU4M0ZFRUY2MjFBMDMxNTBDNEYzNTQzNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01UVHVtSDRJMkxWWVAtNzJJYUF4VU1U elZEUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05 OGE0LTRjN2UtYTBlMS04MDU3YTRmMDg2YzkvMC8zMTM0RUU5ODdFMDhEOEI1NTgz RkVFRjYyMUEwMzE1MEM0RjM1NDM0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHfKlASerZzMU2kFIYQ+c uB7SfvDK8ErP6eb6vLg7GVGWOyt21C/W0dEJRzBDFATVDtc6ACtaNOMkckJTtmQT OpFx0shaePPg5bUXnL6cQeKQcvHBy9STc124/P9MsB1gMIDtUTSXYxVTVJGfKyfi 3kqi2raMY+cRuGdYvDLvmj5HLbw3YYcvwjREk0CZt9R23mknZegOUjuqdk92zSFI IlqAufXUSVUGyGs7YAkiWhC733vgS6zzHdAsJySZ03iGonV282e1SgGyhidsbEB6 pX6ALWjMLRdx9Wks7R7Z5P16s2oe/MVEaFZqpzP2iTzZbobSThXuXsODJtv61ptX EA== -----END CERTIFICATE-----Generated at Tue Nov 4 18:14:35 2025 by rpki-client