$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.mft File: 21291D2963EE74682B10BECBA6060EF246C76881.mft (raw, json) Hash identifier: 3eLK8plJwavJDcnulENq7J9UzGlSmZfzSRHzXzRUu1k= Subject key identifier: 97:7A:E4:71:C2:EF:48:E6:0A:D0:6A:E4:B2:78:AE:3D:E0:A4:87:61 Authority key identifier: 21:29:1D:29:63:EE:74:68:2B:10:BE:CB:A6:06:0E:F2:46:C7:68:81 Certificate issuer: /CN=21291D2963EE74682B10BECBA6060EF246C76881 Certificate serial: 0607CAC78C6BAF73955218E5E05FC265D700C831 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21291D2963EE74682B10BECBA6060EF246C76881.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.mft Manifest number: 6E Signing time: Tue 04 Nov 2025 04:19:14 +0000 Manifest this update: Tue 04 Nov 2025 04:14:14 +0000 Manifest next update: Wed 05 Nov 2025 05:54:14 +0000 Files and hashes: 1: 326131343a373538333a326130303a3a2f34302d313238203d3e20323131323831.roa (hash: 7kcvc7XAv56qFVmafM/D1iw7yZ48tgW4TPaORt+OViQ=) 2: 326131343a373538333a326230303a3a2f34322d313238203d3e20323134323035.roa (hash: VYyQ9HRup4ddqrcoUKfcEWZA3flgJAKyvMn8Qb2hQCc=) 3: 326131343a373538333a323030303a3a2f34312d313238203d3e20323133343133.roa (hash: qcv62vhft+CfRefcIljQMYwhTtHw5pqiJA6YzH0JoaE=) 4: 326131343a373538333a323030303a3a2f33362d313238203d3e20323035393431.roa (hash: bttdf07pV56EPNWCClejJ5VLezHQTqirYk24CtzpecY=) 5: 21291D2963EE74682B10BECBA6060EF246C76881.crl (hash: re5JwRUZ8HYQWVD4QsIvYvIICZ0NOR33fG+PG9KDT3c=) 6: 326131343a373538333a326663303a3a2f34322d313238203d3e20323035393431.roa (hash: QTSey6Hp5GxpO8W9pZDSl/g5MxHZNI9D5mYgXqg8BF0=) 7: 326131343a373538303a666639303a3a2f34342d313238203d3e20323035393431.roa (hash: 5FD/Mehv7v0xNezRDRW9iBPyN5Dfwk8GJ9l323IIqtY=) 8: 326131343a373538333a323038303a3a2f34362d313238203d3e20323035393431.roa (hash: kC7ihYm/R5OERXYsLtyhxzyEmlKI1XwHLSptM6n0vvg=) 9: 326131343a373538333a323038343a3a2f34362d313238203d3e20323035393431.roa (hash: PTSU8qGNCimGfVZLMLacuvM/VXxIUmWAazoLI57rq4o=) 10: 326131343a373538333a323930303a3a2f34302d313238203d3e20323134363339.roa (hash: Ig0MdxpLUWBFH0/Ucxj7iGLUl0RuOHs0CxE43qARgYQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21291D2963EE74682B10BECBA6060EF246C76881.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 05:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:07:ca:c7:8c:6b:af:73:95:52:18:e5:e0:5f:c2:65:d7:00:c8:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21291D2963EE74682B10BECBA6060EF246C76881 Validity Not Before: Nov 4 04:14:14 2025 GMT Not After : Nov 5 05:54:14 2025 GMT Subject: CN=977AE471C2EF48E60AD06AE4B278AE3DE0A48761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c0:7e:71:ff:96:45:86:4a:b6:2b:3e:d9:ea: ff:ce:70:57:35:03:6e:cd:19:8e:6a:6d:f0:d5:66: a1:ce:5d:20:06:05:07:e4:a9:3a:c4:89:d4:e2:32: 1f:c5:bd:31:42:7f:19:d4:de:3d:f2:cb:76:69:97: 69:2b:aa:46:95:aa:ba:7c:9c:d6:ed:44:2b:ed:a4: 65:62:30:34:d2:e4:00:63:d8:31:e4:81:56:d3:f6: bc:40:b4:69:f3:31:46:ea:5d:04:5d:e7:38:6e:14: 34:e9:d8:71:e9:bc:c8:25:d1:1a:a7:ee:b5:19:d7: 90:de:bc:04:db:80:8d:50:0e:37:8d:6c:0a:d6:00: b8:13:b6:0a:90:f1:78:72:3a:87:3d:c9:3c:b7:7c: 68:b8:98:ab:9e:f9:37:80:7f:1c:5a:f0:ec:10:9b: 20:8a:54:92:9d:97:cb:cc:cf:58:51:d0:9a:a5:f3: df:bc:10:11:f3:ef:e9:0b:b8:40:0b:b7:28:08:a4: e8:5d:81:9b:24:31:fe:2c:a1:8f:3b:55:2d:30:33: 5d:42:6f:ce:43:ac:1b:fb:7c:68:25:5c:2e:9e:42: 6e:60:a5:92:1b:a9:66:9d:b2:c5:4f:50:ff:18:c3: 39:da:21:9b:b8:17:a3:c1:6d:e0:7f:3f:c9:d3:ba: 28:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:7A:E4:71:C2:EF:48:E6:0A:D0:6A:E4:B2:78:AE:3D:E0:A4:87:61 X509v3 Authority Key Identifier: keyid:21:29:1D:29:63:EE:74:68:2B:10:BE:CB:A6:06:0E:F2:46:C7:68:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21291D2963EE74682B10BECBA6060EF246C76881.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:12:1b:63:7d:cf:fa:75:b0:94:69:27:9d:98:e1:99:59:e6: e6:f7:0a:80:23:6a:ca:b9:6e:8c:c0:99:2e:6e:f5:bb:5e:1c: b3:87:c7:e6:54:14:c5:41:96:c3:4c:23:db:45:44:88:fc:94: fe:e6:0d:55:ad:ea:1d:1f:39:45:6e:db:40:50:68:cb:48:68: a9:c5:55:86:43:4a:08:7d:69:b7:ce:d3:d6:4d:a4:94:00:d8: bd:f7:5b:c0:fe:f7:8e:71:e1:9f:31:88:be:bc:43:36:14:9c: 64:49:e7:f3:43:e0:e4:96:c8:6a:88:67:f4:fc:ed:de:87:9f: 9c:20:9d:cd:7a:60:63:57:54:cd:d8:8c:cf:69:ce:0a:c4:13: da:a6:71:0d:4d:e9:70:46:78:70:fa:94:95:c7:30:26:94:8b: a8:41:57:8a:ac:d0:cc:e6:5b:c8:b6:49:39:81:13:e6:82:af: 0d:f5:4f:9d:4b:60:68:03:49:b8:af:de:5a:13:4d:0f:d9:48: fe:7c:39:15:67:12:b5:d7:e5:c9:0d:24:18:19:f3:40:38:6d: c1:94:3c:d1:2d:96:eb:25:74:b8:68:2c:10:a7:69:f2:a5:5c: fa:0c:74:2a:67:e5:34:16:40:e4:0b:0f:15:e2:3b:21:3b:29: b1:09:6c:6a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUBgfKx4xrr3OVUhjl4F/CZdcAyDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEyOTFEMjk2M0VFNzQ2ODJCMTBCRUNCQTYwNjBFRjI0 NkM3Njg4MTAeFw0yNTExMDQwNDE0MTRaFw0yNTExMDUwNTU0MTRaMDMxMTAvBgNV BAMTKDk3N0FFNDcxQzJFRjQ4RTYwQUQwNkFFNEIyNzhBRTNERTBBNDg3NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwwH5x/5ZFhkq2Kz7Z6v/OcFc1 A27NGY5qbfDVZqHOXSAGBQfkqTrEidTiMh/FvTFCfxnU3j3yy3Zpl2krqkaVqrp8 nNbtRCvtpGViMDTS5ABj2DHkgVbT9rxAtGnzMUbqXQRd5zhuFDTp2HHpvMgl0Rqn 7rUZ15DevATbgI1QDjeNbArWALgTtgqQ8XhyOoc9yTy3fGi4mKue+TeAfxxa8OwQ myCKVJKdl8vMz1hR0Jql89+8EBHz7+kLuEALtygIpOhdgZskMf4soY87VS0wM11C b85DrBv7fGglXC6eQm5gpZIbqWadssVPUP8YwznaIZu4F6PBbeB/P8nTuij3AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUl3rkccLvSOYK0GrksniuPeCkh2EwHwYDVR0j BBgwFoAUISkdKWPudGgrEL7LpgYO8kbHaIEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzgvMjEyOTFEMjk2M0VFNzQ2ODJCMTBCRUNCQTYwNjBFRjI0NkM3Njg4MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMTI5MUQyOTYzRUU3NDY4MkIxMEJFQ0JB NjA2MEVGMjQ2Qzc2ODgxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY4YWJhYmJiLWYwNDgtNGRlMS05MjA2LThkNDBmMDcxODA4Yi84LzIxMjkxRDI5 NjNFRTc0NjgyQjEwQkVDQkE2MDYwRUYyNDZDNzY4ODEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA0Ehtj fc/6dbCUaSedmOGZWebm9wqAI2rKuW6MwJkubvW7Xhyzh8fmVBTFQZbDTCPbRUSI /JT+5g1VreodHzlFbttAUGjLSGipxVWGQ0oIfWm3ztPWTaSUANi991vA/veOceGf MYi+vEM2FJxkSefzQ+DklshqiGf0/O3eh5+cIJ3NemBjV1TN2IzPac4KxBPapnEN TelwRnhw+pSVxzAmlIuoQVeKrNDM5lvItkk5gRPmgq8N9U+dS2BoA0m4r95aE00P 2Uj+fDkVZxK11+XJDSQYGfNAOG3BlDzRLZbrJXS4aCwQp2nypVz6DHQqZ+U0FkDk Cw8V4jshOymxCWxq -----END CERTIFICATE-----Generated at Tue Nov 4 10:55:23 2025 by rpki-client