$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft File: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft (raw, json) Hash identifier: 17yd1CcWq7XU2M01TeVrSiL6C/RWQknj0jp94M97T4E= Subject key identifier: 9D:CA:27:87:C3:EC:4D:A8:A7:DB:46:8B:FE:FC:35:64:AD:F7:27:A5 Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Certificate serial: 77C36D7BC4DD4D0D8BF882DCF0B51A2F0FEF3A38 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft Manifest number: 0283 Signing time: Tue 04 Nov 2025 07:53:43 +0000 Manifest this update: Tue 04 Nov 2025 07:48:43 +0000 Manifest next update: Wed 05 Nov 2025 11:13:43 +0000 Files and hashes: 1: 326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa (hash: QP4KPs363lKNvbDMC91nWR64EDb9a5wYXaiiUC4k7Hs=) 2: 326131343a373538313a343831303a3a2f34342d3438203d3e20323135363734.roa (hash: HscFYsQcMtvjpDQJk86+k68Lr7MoMlx0VU02QHyOcGk=) 3: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl (hash: kCBlVpEzxC+o60nEQMHXlPjxCdYHZBIKnWJf9W3koHA=) 4: 326131343a373538313a343835303a3a2f34342d3438203d3e20323135333739.roa (hash: mgbh+id7sfJxNC8FBIA9w2AVClblyfoF7d8LLx0Ph9g=) 5: 326131343a373538313a343834303a3a2f34342d3438203d3e20323135323839.roa (hash: IeK6ZG/g9V25xfR3xKZZdyq5xuMwonnHdhMMCLRMWBo=) 6: 326131343a373538313a343534303a3a2f34342d3438203d3e203434383137.roa (hash: lL21MUDpM3YDFXY+VNPjMEqMt9/EFafQb01ArsWLAjk=) 7: 326131343a373538313a343835653a3a2f34382d3438203d3e20323134363737.roa (hash: iHR6gaBLhEeuJStOmjFzEe4Moo+lPwxxC1xTUcqx6g4=) 8: 326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa (hash: 9VIFUmaELJ+SuXK7+C+ONAUKoDB5ufOLiduhS88tcKE=) 9: 326131343a373538313a343835663a3a2f34382d3438203d3e20323135333739.roa (hash: LiQaiw5undZF8O9ZPrbB+SuBZXPDpvcvnNafAQKgteo=) 10: 326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa (hash: XJo8jS2djpRteJlKSIzBy0GSOcq3Jj/2wBDjV1PmcuQ=) 11: 326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa (hash: 3t/0qmEuc7HUJ6jbuOuPnmd3ve4/XpcLhj4VdVBS4pk=) 12: 326131343a373538313a343731303a3a2f34342d3438203d3e20313439363930.roa (hash: rLVUcUxyRgJtw6VSAGlKyA8uqmBel4P5gDB+BMhpgCc=) 13: 326131343a373538313a343535353a3a2f34382d3438203d3e20323136333735.roa (hash: JVdP0q01IdpmOHNHM/8N7QIeZGO9fY1B0zhs290wioo=) 14: 326131343a373538313a343535303a3a2f34342d3438203d3e20323136333735.roa (hash: 33Hc4k2qb/SFtHgCtF148ZPS40TPUk0mIWne3Kl1fjs=) 15: 326131343a373538313a343332303a3a2f34342d3438203d3e2039343232.roa (hash: gQv5NI8fa+cTBzk0tpepQG6QGKXWkVIlxityrSNAUjQ=) 16: 326131343a373538313a343832303a3a2f34342d3438203d3e20323135323233.roa (hash: 8fwqZHGyIJyFYdJn0gwpv+qKZFLFFwexw2Z/QOknvfY=) 17: 326131343a373538313a343331303a3a2f34342d3438203d3e20323135313731.roa (hash: z2fbMMdTRhRUpcDHMD2rvY/J1s4P2i8N3FhzYltODNc=) 18: 326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa (hash: 7nhFTtPjQhKd1Ac2yjZIA1kYzFwc8dF19rkGkZd+QFk=) 19: 326131343a373538313a343833303a3a2f34342d3438203d3e20323135323231.roa (hash: j14pv+Fih0N85ic38d12TDY0uRhDLdNY7cvkmnI17jw=) 20: 326131343a373538313a343030303a3a2f33362d3438203d3e203434383137.roa (hash: 06Oq8kkXsOv0rKoRYz/dx2UXUSYf9kyOjrjjxWn2c2o=) 21: 326131343a373538313a343934303a3a2f34342d3438203d3e20313335363539.roa (hash: isp+v1bbWY3zX+eoFLAf4eK3r9/zMrMmocZ2PNCW2Rw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:c3:6d:7b:c4:dd:4d:0d:8b:f8:82:dc:f0:b5:1a:2f:0f:ef:3a:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Validity Not Before: Nov 4 07:48:43 2025 GMT Not After : Nov 5 11:13:43 2025 GMT Subject: CN=9DCA2787C3EC4DA8A7DB468BFEFC3564ADF727A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:00:dd:b8:ea:b8:c9:78:2a:e3:2b:fc:91:e8: 5a:6f:9d:54:b0:0d:5c:f4:7a:da:19:1a:c8:21:85: b2:c0:51:9b:ec:c9:8d:a5:aa:42:e5:9b:2a:21:48: ce:44:e3:5c:90:f5:87:4a:48:1f:29:94:c9:72:14: 18:20:d7:8e:17:53:11:f6:fa:51:89:57:02:4b:d2: e1:a7:fc:e5:65:4e:ca:b9:28:8d:59:0b:1f:fa:37: 20:1a:af:20:45:80:0f:fd:34:85:b6:f7:ed:7a:a2: dc:ea:f6:bd:e3:fd:a9:93:58:42:ea:df:b1:fa:7a: 42:d0:00:ce:80:59:8b:0f:9e:b9:40:6e:cb:4b:76: 46:4d:3a:58:e3:32:c2:b6:6b:9b:55:84:db:38:72: 91:43:ce:7b:e5:67:79:cf:25:4c:7c:4c:74:06:01: 48:72:75:60:f2:54:d2:db:14:0b:74:8f:c2:80:d9: e7:93:48:38:70:95:2f:38:ba:35:56:45:21:44:44: ce:b2:2d:d6:1e:34:c4:8e:90:96:e5:0a:cb:bc:ce: 2d:83:30:91:6a:7b:6b:4d:4c:2a:b1:9a:02:be:9a: 2f:0c:05:07:ee:b7:d6:11:a7:3e:21:a4:4c:e2:8b: a9:e5:3a:fa:4b:0a:c4:39:83:28:b1:c7:ba:32:8a: c1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:CA:27:87:C3:EC:4D:A8:A7:DB:46:8B:FE:FC:35:64:AD:F7:27:A5 X509v3 Authority Key Identifier: keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:f2:73:27:17:9d:b6:8c:c6:6c:0d:61:28:c5:8d:17:64:6f: 2d:0f:82:c8:38:f7:f4:4d:3e:0a:e5:f1:39:b8:63:48:b2:d1: 6f:8e:85:93:43:f7:33:2f:07:37:81:d0:d9:dc:97:55:16:13: 74:fc:b9:16:9c:97:4a:6c:db:8d:74:5f:2b:c1:6d:fa:69:c3: 81:9b:d5:39:57:9d:65:3b:4c:0b:b5:c8:6c:2b:e6:ce:9f:cd: aa:04:69:50:db:c5:e2:24:93:a9:0f:9b:80:2c:d5:49:65:8f: 87:58:1b:b7:91:87:de:8b:7c:33:0f:9f:0b:e8:fa:49:36:00: 19:48:cd:9e:2f:fe:d3:e3:6d:f7:1a:26:1a:37:46:39:68:34: b1:8b:7a:b1:16:73:4c:23:7e:f6:a9:e3:28:8f:66:5f:65:4f: c0:c2:97:38:66:bb:bd:a8:f3:49:8c:11:4d:f3:c4:49:81:0e: e9:90:37:6e:01:15:d9:4c:db:cd:34:ae:14:97:82:50:21:76: fb:79:53:cb:c5:6b:66:02:42:ef:08:38:53:ca:fe:96:ef:89: 0e:d4:65:41:4b:59:b3:97:6b:08:49:e8:0f:77:c9:63:dc:95: 49:da:1c:cf:90:11:29:29:b1:9c:7f:52:2c:4b:7f:08:87:d5: d4:8c:42:2f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUd8Nte8TdTQ2L+ILc8LUaLw/vOjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJF MEFGQjM4QzAeFw0yNTExMDQwNzQ4NDNaFw0yNTExMDUxMTEzNDNaMDMxMTAvBgNV BAMTKDlEQ0EyNzg3QzNFQzREQThBN0RCNDY4QkZFRkMzNTY0QURGNzI3QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyAN246rjJeCrjK/yR6FpvnVSw DVz0etoZGsghhbLAUZvsyY2lqkLlmyohSM5E41yQ9YdKSB8plMlyFBgg144XUxH2 +lGJVwJL0uGn/OVlTsq5KI1ZCx/6NyAaryBFgA/9NIW29+16otzq9r3j/amTWELq 37H6ekLQAM6AWYsPnrlAbstLdkZNOljjMsK2a5tVhNs4cpFDznvlZ3nPJUx8THQG AUhydWDyVNLbFAt0j8KA2eeTSDhwlS84ujVWRSFERM6yLdYeNMSOkJblCsu8zi2D MJFqe2tNTCqxmgK+mi8MBQfut9YRpz4hpEzii6nlOvpLCsQ5gyixx7oyisGZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUnconh8PsTain20aL/vw1ZK33J6UwHwYDVR0j BBgwFoAUjgfTHGRS96ayTmPN3EkOEuCvs4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzQvOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJFMEFGQjM4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0RE QzQ5MEUxMkUwQUZCMzhDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMxMWU0N2M0LTAyZjAtNDY1Ny05MDIyLWQyYjgzY2ZmODc1NS80LzhFMDdEMzFD NjQ1MkY3QTZCMjRFNjNDRERDNDkwRTEyRTBBRkIzOEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/8nMn F522jMZsDWEoxY0XZG8tD4LIOPf0TT4K5fE5uGNIstFvjoWTQ/czLwc3gdDZ3JdV FhN0/LkWnJdKbNuNdF8rwW36acOBm9U5V51lO0wLtchsK+bOn82qBGlQ28XiJJOp D5uALNVJZY+HWBu3kYfei3wzD58L6PpJNgAZSM2eL/7T4233GiYaN0Y5aDSxi3qx FnNMI372qeMoj2ZfZU/Awpc4Zru9qPNJjBFN88RJgQ7pkDduARXZTNvNNK4Ul4JQ IXb7eVPLxWtmAkLvCDhTyv6W74kO1GVBS1mzl2sISegPd8lj3JVJ2hzPkBEpKbGc f1IsS38Ih9XUjEIv -----END CERTIFICATE-----Generated at Tue Nov 4 18:01:39 2025 by rpki-client