$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft File: 3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft (raw, json) Hash identifier: EmI6F40hmgsded86vjjnFoiTYMJaR6QlPVkDSefanEk= Subject key identifier: 5B:D2:B4:A5:97:8A:E9:0F:40:A2:D8:E4:B2:94:F5:36:5A:6F:91:9B Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e Certificate serial: 7B33C02C7E403BDEE1C7876EC512495B507572CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft Manifest number: 02BF Signing time: Tue 04 Nov 2025 12:48:51 +0000 Manifest this update: Tue 04 Nov 2025 12:43:51 +0000 Manifest next update: Wed 05 Nov 2025 14:52:51 +0000 Files and hashes: 1: 3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl (hash: XTsU4TWieqrYQZYY8P9PYndI3bq1JieqD15WyjeM95Q=) 2: 326131343a366634343a623030623a3a2f34382d3438203d3e20313937393139.roa (hash: Wi5+YIc762ypl+B2WINgJse4hzMgAIpn5Ywt7Gts2zw=) 3: 326131343a366634343a633064653a3a2f34382d3438203d3e203438343336.roa (hash: bY9e62A4gu/86iUTHSumKPvi2hGZoe5ZTShnEctU4SM=) 4: 326131343a366634303a3a2f32392d3438203d3e20323030323432.roa (hash: x7hOPFZjN7RZHBsYqLnDpQUy2G9KH75g5Bkk7YCqeYo=) 5: 326131343a366634353a633030303a3a2f33362d3438203d3e203438343336.roa (hash: 84yN8GMB2a5DXwGkFW2zsyLvfW/TnY6P5ZHEy29emgk=) 6: 326131343a366634343a323339303a3a2f34342d3438203d3e20323136313135.roa (hash: mVRk7OX5nwehY6QXOhw6587D02FFEQfLM0VwJdYXtak=) 7: 326131343a366634343a623030623a3a2f34382d3438203d3e20323130363637.roa (hash: m8+D+okBVVmTzlPUuDfmEBZbvua+N+sKP5fs6j2S33Y=) 8: 326131343a366634343a343430303a3a2f34302d3438203d3e20323133313336.roa (hash: HawlF8j6AaLKvNQu2aTpKUa6yLzB5NKlnnf7Xm6b/mk=) 9: 326131343a366634323a3a2f33312d3438203d3e20323030323432.roa (hash: ITJiuOJiPhL9zGFnR/kFwwhgRvQux+ehMzGBms69CVM=) 10: 326131343a366634353a633030303a3a2f33362d3438203d3e20313938333432.roa (hash: kj+wMZhCYMt0Z9jhqZmZtaHQjz2obXZ+/J2z1ua51wg=) 11: 326131343a366634343a633066663a3a2f34382d3438203d3e203534363831.roa (hash: dC8rQUoWVp/X7YVAzZ2dHrxEZrdm+LkwjO9CaebKOYE=) 12: 326131343a366634343a353336303a3a2f34342d3438203d3e20323136303338.roa (hash: kV9C6QKeijySZWnfoj92GJUvF6GdpqcT/jUq1YV72FQ=) 13: 326131343a366634343a633064653a3a2f34382d3438203d3e20313938333432.roa (hash: JbFcx8NYIQrxy++ssCWok53ycSawtedKXeTKz2IS1/I=) 14: AS200242.asa (hash: 1AlMG2dsNj+2a3kLp0CpSmy1LKhmLk73ZFr/4CSbD+w=) 15: 04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer (hash: WC2xT6FYiM9dJRxOd1eaHqB3GTC9TL6xOPD7Nd7Wdro=) 16: 326131343a366634343a623030623a3a2f34382d3438203d3e20313939353832.roa (hash: jzgTEml4YLsCpJ5PWa0CjR2ZyZx1iGCX4c7IWy4h9Uw=) 17: 326131343a366634343a65663a3a2f34382d3438203d3e20323136303338.roa (hash: QG09fxLJtKa1Y7d6YZoiVLo1F1ttiuWxvVNqxNhuPNo=) 18: 326131343a366634343a633730313a3a2f34382d3438203d3e20313938333432.roa (hash: OSQQWXQC8Doo46F92DSw83gpWUJg/I3ZjbHjihzygko=) 19: 326131343a366634343a636166653a3a2f34382d3438203d3e20323035373839.roa (hash: Gh/w94WLUPZNwP3yscIWB0P8fPzMkD8rKLwHE/CiSik=) 20: 326131343a366634343a353630383a3a2f34382d3438203d3e20323030323432.roa (hash: tIzxcCSG/V5QyAqn4lWVGbnRYKGordkU7LLlPvgkHMc=) 21: 326131343a366634353a623030623a3a2f34382d3438203d3e20323134373537.roa (hash: J9QsdPj5DQDhu5mtlU23kktl0EvwgihwetcbiHJN5aI=) 22: 326131343a366634343a623030623a3a2f34382d3438203d3e20323135343733.roa (hash: FmiBX7ObUBJXMx50BEJxB5rcHYX/1xnmOVK+ALpTHJE=) 23: 326131343a366634353a3a2f33362d3438203d3e203530323234.roa (hash: Cm6iG7rXYSmOBRLZv4C/D104nGz4969UDdr1rCKUD0A=) 24: 326131343a366634353a646561643a3a2f34382d3438203d3e203438343336.roa (hash: D8dy67lH7mKpFtKbPMaHWGtbJcZylACehWx+4H0irZc=) 25: 326131343a366634343a656465383a3a2f34382d3438203d3e20323035373839.roa (hash: 37pW5zkUWwecCqjFHAdYxHEZTGOlFK8BvptTevydiHI=) 26: 326131343a366634343a646561643a3a2f34382d3438203d3e203534363831.roa (hash: +RB/H3yC2Zhqk6dbZnb2AoHhKMIePUOM6t4+sjUxfqU=) 27: 326131343a366634353a646561643a3a2f34382d3438203d3e20313938333432.roa (hash: /s9FD+BuCvCOu4sZBij0Yh1eY8Nr8NHCtVi0OvPiCyY=) 28: 326131343a366634343a633730313a3a2f34382d3438203d3e203438343336.roa (hash: kN+6glZZqj1lvl+f3cQSjIHuGxniqs1l2hL+N9PCMXg=) 29: 326131343a366634303a3a2f33322d3438203d3e20323030323432.roa (hash: wghHBUAPyTh1k75qu9+3ST+twxsY88XGIADNiAK2tow=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:33:c0:2c:7e:40:3b:de:e1:c7:87:6e:c5:12:49:5b:50:75:72:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e Validity Not Before: Nov 4 12:43:51 2025 GMT Not After : Nov 5 14:52:51 2025 GMT Subject: CN=5BD2B4A5978AE90F40A2D8E4B294F5365A6F919B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2d:af:2a:ad:4d:cd:56:d8:d4:bb:fb:ba:12: 57:b0:2b:82:32:f9:73:74:87:2b:58:9f:cf:21:6d: 1a:ac:fe:6f:7d:04:62:c3:75:e8:e9:4a:38:5d:da: 53:19:2d:76:df:72:9f:ba:75:c3:7d:3c:5e:bb:52: 8d:71:3e:cd:f9:8f:22:dd:c6:66:96:72:ac:0f:63: 8d:68:79:99:13:0c:0e:14:13:1b:ad:32:bc:0a:5f: 5e:10:2b:ea:ee:db:26:5f:8a:f3:5f:ae:50:d7:81: 9f:db:cc:c3:5b:26:cc:10:df:90:0b:2c:b1:d1:e7: bf:ba:a9:82:87:35:c3:d0:4f:30:72:9c:21:c2:c4: 90:19:00:95:fe:fa:04:61:73:d3:2d:9e:31:be:83: 99:82:53:85:af:d4:3c:5c:b7:0a:a7:28:0c:8c:b2: cb:18:cd:f9:b8:93:c7:ed:74:8d:b6:c4:62:61:22: 4a:53:a3:4f:37:ca:7d:d5:a9:3e:9f:57:f1:92:d6: c4:7b:1c:f8:4d:f8:9f:22:40:83:c0:eb:e6:8a:4f: c3:95:6f:1b:17:8d:d6:ab:30:b9:93:68:3b:3a:65: cf:72:23:6a:77:5f:c4:2e:92:dd:5c:b1:e0:7a:d2: 22:1d:52:39:6b:97:0c:22:00:94:f7:f1:b6:49:ab: 14:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D2:B4:A5:97:8A:E9:0F:40:A2:D8:E4:B2:94:F5:36:5A:6F:91:9B X509v3 Authority Key Identifier: keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:45:fc:11:d4:ce:f2:74:2f:ba:eb:28:cb:c8:9a:e5:ac:72: 78:63:4f:93:6d:a5:73:d4:c8:ff:64:e9:5a:07:3b:50:0b:f0: 65:9e:bf:bf:69:32:7e:d1:91:7b:c1:89:d7:d1:92:f0:e4:2b: 24:ec:f8:5c:52:36:0e:41:38:95:40:39:fa:03:db:a0:c6:21: b0:36:b3:04:7d:c6:24:45:e8:36:a5:d7:7c:7f:18:e6:ef:0c: 0e:b7:6a:8d:4b:9a:54:5a:86:79:c4:06:18:7e:1c:e9:f3:09: 57:93:d7:36:44:66:b2:b2:64:9a:84:1f:ea:3d:9f:1a:5e:42: a0:d2:3c:7b:f4:dd:4b:38:ac:1f:34:92:c1:40:7b:49:cf:c3: 42:54:5f:a7:fd:2a:4d:54:60:20:46:68:79:98:77:70:f0:59: 82:75:98:eb:94:73:6d:ff:e9:e4:09:56:bf:ed:83:e3:b8:db: 9b:58:cf:49:6b:23:83:d0:47:a8:d5:54:fe:4b:59:9b:0c:4b: d1:8d:0e:c2:58:f3:2a:dd:cd:12:8e:57:06:60:30:28:ee:cd: 64:58:c9:c3:92:5b:27:cf:9d:6b:df:33:c8:5f:26:ff:f9:8f: e9:5c:d7:44:77:37:b1:fd:d7:2b:f9:39:f6:27:93:4c:77:3d: 2d:ba:de:a5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUezPALH5AO97hx4duxRJJW1B1cs0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2VlZWJiOTQ2YThkMjFkNDA4M2M5M2RjMDljZWU1NTdi YjJhYzMyZTAeFw0yNTExMDQxMjQzNTFaFw0yNTExMDUxNDUyNTFaMDMxMTAvBgNV BAMTKDVCRDJCNEE1OTc4QUU5MEY0MEEyRDhFNEIyOTRGNTM2NUE2RjkxOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGLa8qrU3NVtjUu/u6ElewK4Iy +XN0hytYn88hbRqs/m99BGLDdejpSjhd2lMZLXbfcp+6dcN9PF67Uo1xPs35jyLd xmaWcqwPY41oeZkTDA4UExutMrwKX14QK+ru2yZfivNfrlDXgZ/bzMNbJswQ35AL LLHR57+6qYKHNcPQTzBynCHCxJAZAJX++gRhc9MtnjG+g5mCU4Wv1DxctwqnKAyM sssYzfm4k8ftdI22xGJhIkpTo083yn3VqT6fV/GS1sR7HPhN+J8iQIPA6+aKT8OV bxsXjdarMLmTaDs6Zc9yI2p3X8Qukt1cseB60iIdUjlrlwwiAJT38bZJqxSrAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUW9K0pZeK6Q9AotjkspT1NlpvkZswHwYDVR0j BBgwFoAUPu67lGqNIdQIPJPcCc7lV7sqwy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5 YjNkLzQvM0VFRUJCOTQ2QThEMjFENDA4M0M5M0RDMDlDRUU1NTdCQjJBQzMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1B1NjdsR3FOSWRRSVBKUGNDYzdsVjdz cXd5NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82ZmY3YTk4OS1l Y2RmLTQzZDYtODZlMS1mNmMzOTM1YjliM2QvNC8zRUVFQkI5NDZBOEQyMUQ0MDgz QzkzREMwOUNFRTU1N0JCMkFDMzJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUX8EdTO8nQvuusoy8ia 5axyeGNPk22lc9TI/2TpWgc7UAvwZZ6/v2kyftGRe8GJ19GS8OQrJOz4XFI2DkE4 lUA5+gPboMYhsDazBH3GJEXoNqXXfH8Y5u8MDrdqjUuaVFqGecQGGH4c6fMJV5PX NkRmsrJkmoQf6j2fGl5CoNI8e/TdSzisHzSSwUB7Sc/DQlRfp/0qTVRgIEZoeZh3 cPBZgnWY65Rzbf/p5AlWv+2D47jbm1jPSWsjg9BHqNVU/ktZmwxL0Y0OwljzKt3N Eo5XBmAwKO7NZFjJw5JbJ8+da98zyF8m//mP6VzXRHc3sf3XK/k59ieTTHc9Lbre pQ== -----END CERTIFICATE-----Generated at Tue Nov 4 15:06:31 2025 by rpki-client