$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft File: 830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft (raw, json) Hash identifier: 9K2dmav0NmVDWOXuNGaICudVSU6bX06C2v1xsenAWdk= Subject key identifier: C2:FD:23:5C:EF:33:2A:7C:DC:0C:8D:FF:22:90:C0:20:9F:38:FC:B6 Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce Certificate serial: 0518A7A0DEA28FF5D66BF9B561A66B5A60F26858 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft Manifest number: 049C Signing time: Tue 04 Nov 2025 06:32:06 +0000 Manifest this update: Tue 04 Nov 2025 06:27:06 +0000 Manifest next update: Wed 05 Nov 2025 08:26:06 +0000 Files and hashes: 1: 34352e3133322e3231372e302f32342d3234203d3e20333935333734.roa (hash: 3xSg64X6b/VGeaW1sbUHbRQvvDa5xSkfsAgZrM/ksog=) 2: 34352e3132382e31322e302f32332d3234203d3e20383334.roa (hash: eLJWCWbxEQgDeE1wotxgC/UVUKhDY5SIchlsKqSoar0=) 3: 34352e3134302e33372e302f32342d3234203d3e20323638363234.roa (hash: FqBzJG7QyS5rhAL6kP0DnaUbBW+1O9qvi1K+fqN47FU=) 4: 34352e3132382e31342e302f32332d3233203d3e20323734373836.roa (hash: V6mtJWR732G/FJGWxHZiLboD66+fB4OqjGMzuHg8F6s=) 5: 3138352e3235302e34302e302f32342d3234203d3e2035303635.roa (hash: vADHpi7lqq2FTz+I44BCLsWOTCezg1eq9mEd669wIuU=) 6: 34352e3134352e3234302e302f32342d3234203d3e20323639303730.roa (hash: ZZTeFnnkmIFoyKByZKAoXkqiW3x9U8bfEnkF0EICwb0=) 7: 34352e38392e3135302e302f32332d3234203d3e20313532313739.roa (hash: hd+a1khpY29A3GDYfNLzWao9yX3aCS4vUId7ZnXPCC4=) 8: 34352e3134302e33392e302f32342d3234203d3e20323132333834.roa (hash: L7EHGwvWSSXWjiN+ge5rSBcePeV6DFnXvflhKIMhGIM=) 9: 34352e3134302e33382e302f32342d3234203d3e203330363434.roa (hash: pgys4dKx+35Hg2BzEkcta2TxxholJ1T4995uIhT8Aeg=) 10: 34352e3133322e3231382e302f32342d3234203d3e20313337323335.roa (hash: wnlcweQWeYqMxoUwgQa77C2ZsrxQiFB/Eeq+98TrzvY=) 11: 34352e39332e3138352e302f32342d3234203d3e203231383539.roa (hash: K2gG1J8xfRteHFLiadMui72WYG2KJyYFSRzS7MOYM+I=) 12: 34352e3132382e31322e302f32342d3234203d3e20313336353537.roa (hash: Og0W7TwDKg18gSOzRskc5OEF19lsnNis615D+7M7BhY=) 13: 34352e3134302e33362e302f32342d3234203d3e203136323736.roa (hash: bbdkgz3gQGx4brckdYck4FKHluP707hNf2aov4e5c2A=) 14: 326130653a666363303a3a2f32392d3239203d3e20323031393633.roa (hash: 8+yPsa43TFpd5bryniVq+R/mS0l3RvJVwdUmjJuuDIk=) 15: 34352e3133322e3231392e302f32342d3234203d3e203536393133.roa (hash: LgxsptwYXiKaAUBWPl2FzHApl9GRPHPCKLBon5Z4Y1I=) 16: 34352e3134352e3234332e302f32342d3234203d3e20313337323335.roa (hash: Vyj6lQsSFmsAqcK6RGLYVMn7iV5vJhAX4GBUoB1+oMo=) 17: 34352e3134352e3234322e302f32342d3234203d3e203631333137.roa (hash: pTg06oxajXpI71ZXI8g/lx5GH1NCIopoua34IGLJlFw=) 18: 34352e3132382e31332e302f32342d3234203d3e20313939393235.roa (hash: s2TQDlDgm+LKEqHBlB2hd8f187DM1tFrRFf93seXSWo=) 19: 34352e39332e3138362e302f32332d3234203d3e2033333230.roa (hash: QsFkBfitbwvpDW+gZ0ARVvjc1k4LIU/KZWDeJAgWITQ=) 20: 3138352e3235302e34312e302f32342d3234203d3e2039333034.roa (hash: PFu1T78Q+AvI8dhQcVWr/K6IctDKZOs0/OYDyrqLd7I=) 21: 34352e3133322e3231362e302f32342d3234203d3e203232343237.roa (hash: tUuPnhV53bW4URPIQtmcdJ9t+c19vj++YF4z51T+ooE=) 22: 34352e38392e3134382e302f32342d3234203d3e203231383539.roa (hash: GFqq19/CRKVG57p967VNieGNBPQF1vXKcxGHEBiFK8M=) 23: 34352e38392e3135302e302f32332d3234203d3e20313338393937.roa (hash: smn3sboQyoA3CPmf3JjoxNaRPhD1ofeV3o7i3x5m8hU=) 24: 830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl (hash: maSsMu1pcRUOJgtpCyE298aMBuaMezwEWlxim/EqxJg=) 25: 34352e38392e3134392e302f32342d3234203d3e20323131333538.roa (hash: 7hEY4PvjevEdogEK3IQfi0ZGG7MoYwNsCNzlxYL+LCw=) 26: 3138352e3235302e34322e302f32332d3233203d3e203338313935.roa (hash: N+mjQzTN9eKn05wWYxGO3ym5VpigEEyuw5Wil2CeqM0=) 27: 34352e38392e3135302e302f32332d3234203d3e20323130353432.roa (hash: Ymdbnf0H8VIDp2h5OwlBLkLPkpG++nC20m+3X7rdp/E=) 28: 34352e39332e3138342e302f32342d3234203d3e20323135333438.roa (hash: WuhjfEGxgnUblhWiSTciY5olX30b9mmfrhJBU4OPYFY=) 29: 34352e3134352e3234312e302f32342d3234203d3e20323134353739.roa (hash: gZ3sbcEda49eqP8zzQ5aQw1ZgTtidp19H6+x37Z0+/c=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 08:26:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:18:a7:a0:de:a2:8f:f5:d6:6b:f9:b5:61:a6:6b:5a:60:f2:68:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce Validity Not Before: Nov 4 06:27:06 2025 GMT Not After : Nov 5 08:26:06 2025 GMT Subject: CN=C2FD235CEF332A7CDC0C8DFF2290C0209F38FCB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2c:c3:30:58:4e:a8:b1:4e:df:82:f4:55:a3: ea:5d:17:7d:cb:e3:25:a3:a7:3d:1f:3d:de:a6:a5: b4:eb:4a:c3:15:0b:1b:05:d2:f5:14:dc:07:05:7a: 75:33:c3:6d:48:ba:b7:ee:01:da:a2:f9:64:f7:7b: 88:57:60:23:ec:6d:a0:91:26:f5:7d:ef:e7:c4:5d: 6c:00:dd:11:ed:9a:69:91:ae:93:c8:ed:bc:0e:8d: 53:b0:ed:2e:e6:d5:62:36:cc:30:44:83:6a:73:16: d0:63:5f:db:21:13:ce:34:09:4c:8f:50:da:21:30: 54:2a:cb:f4:6f:98:bd:59:fa:50:41:1b:9d:67:bd: fa:15:d5:c4:20:cb:6a:fb:31:0c:7a:b9:b9:a1:6d: 43:ec:db:b4:e3:bd:1a:ac:c7:63:82:23:89:21:8f: d6:03:99:7f:01:9f:01:e8:32:6d:20:99:e2:0d:25: 38:b0:92:0f:ac:86:9e:7d:7d:aa:28:86:3b:43:20: 72:44:18:bb:a6:bd:6b:3a:b2:9b:d3:20:34:87:b8: 30:61:30:4b:0e:45:65:ad:14:ef:70:7b:a4:de:60: cf:21:17:56:11:a5:d0:d6:62:a8:5e:bc:5a:38:1b: 6d:b7:0b:ff:0b:23:ae:19:06:70:f9:0d:3d:cb:05: 71:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:FD:23:5C:EF:33:2A:7C:DC:0C:8D:FF:22:90:C0:20:9F:38:FC:B6 X509v3 Authority Key Identifier: keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:65:e3:0f:72:11:07:d6:b0:8e:3a:92:3e:f8:f1:57:6e:55: 5f:65:83:7d:2c:02:4d:ec:4d:d2:c9:96:e1:88:2a:a3:04:b5: 96:2b:9e:f3:d6:6b:cd:29:62:96:52:10:e4:3b:6b:e7:df:a5: 72:e1:ec:60:43:72:18:3a:8d:ae:fb:1d:2c:1c:a0:49:09:69: 72:7d:48:11:d8:6a:61:49:0e:c4:33:7d:e6:b2:22:28:fc:34: ac:7f:a2:40:9c:5e:a1:ae:26:50:1b:55:0e:b9:66:6b:cd:97: ee:16:c2:09:6b:7d:83:38:6b:cd:03:fb:9e:e6:91:50:06:39: d9:bb:a7:f3:51:97:8b:aa:4a:f6:2d:d2:a5:84:28:9f:1e:6b: d0:d8:01:69:b3:59:b4:f4:dc:38:bf:1f:11:95:c2:a4:85:87: 20:32:9c:f0:65:81:85:29:16:75:ff:45:b9:74:e4:cc:ac:57: 51:d7:4a:6a:d7:02:cc:7a:ce:50:84:99:ee:bd:be:33:bb:39: 57:3c:32:d9:59:46:e6:4e:a4:58:84:45:cb:b0:30:fc:16:98: 4e:6f:6b:00:09:99:d8:6a:b7:4e:07:3e:ba:0e:29:bd:2f:21: 54:d4:a6:91:9d:ca:97:7d:53:b1:d7:76:b0:7e:9f:de:8b:8d: c6:74:1d:ee -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBRinoN6ij/XWa/m1YaZrWmDyaFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMwZTA2NDE5ZmM0NmEyODAyZjZmMDNiNzEzNjhhYzdi YWFmNjRjZTAeFw0yNTExMDQwNjI3MDZaFw0yNTExMDUwODI2MDZaMDMxMTAvBgNV BAMTKEMyRkQyMzVDRUYzMzJBN0NEQzBDOERGRjIyOTBDMDIwOUYzOEZDQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDILMMwWE6osU7fgvRVo+pdF33L 4yWjpz0fPd6mpbTrSsMVCxsF0vUU3AcFenUzw21IurfuAdqi+WT3e4hXYCPsbaCR JvV97+fEXWwA3RHtmmmRrpPI7bwOjVOw7S7m1WI2zDBEg2pzFtBjX9shE840CUyP UNohMFQqy/RvmL1Z+lBBG51nvfoV1cQgy2r7MQx6ubmhbUPs27TjvRqsx2OCI4kh j9YDmX8BnwHoMm0gmeINJTiwkg+shp59faoohjtDIHJEGLumvWs6spvTIDSHuDBh MEsORWWtFO9we6TeYM8hF1YRpdDWYqhevFo4G223C/8LI64ZBnD5DT3LBXHtAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUwv0jXO8zKnzcDI3/IpDAIJ84/LYwHwYDVR0j BBgwFoAUgw4GQZ/EaigC9vA7cTaKx7qvZM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQtYmE2Ny00OTc5LThkMTItMGVkNDc0OGZj ODZlLzAvODMwRTA2NDE5RkM0NkEyODAyRjZGMDNCNzEzNjhBQzdCQUFGNjRDRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2d3NEdRWl9FYWlnQzl2QTdjVGFLeDdx dlpNNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZTBkNmE0ZC1i YTY3LTQ5NzktOGQxMi0wZWQ0NzQ4ZmM4NmUvMC84MzBFMDY0MTlGQzQ2QTI4MDJG NkYwM0I3MTM2OEFDN0JBQUY2NENFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWXjD3IRB9awjjqSPvjx V25VX2WDfSwCTexN0smW4YgqowS1liue89ZrzSlillIQ5Dtr59+lcuHsYENyGDqN rvsdLBygSQlpcn1IEdhqYUkOxDN95rIiKPw0rH+iQJxeoa4mUBtVDrlma82X7hbC CWt9gzhrzQP7nuaRUAY52bun81GXi6pK9i3SpYQonx5r0NgBabNZtPTcOL8fEZXC pIWHIDKc8GWBhSkWdf9FuXTkzKxXUddKatcCzHrOUISZ7r2+M7s5Vzwy2VlG5k6k WIRFy7Aw/BaYTm9rAAmZ2Gq3Tgc+ug4pvS8hVNSmkZ3Kl31Tsdd2sH6f3ouNxnQd 7g== -----END CERTIFICATE-----Generated at Tue Nov 4 19:01:50 2025 by rpki-client