$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft File: B683F2EB50C5999A77456E8826831609D48C7D3E.mft (raw, json) Hash identifier: r7L/cy0TwyhKLe5FVMXrIgYpEQaQIeLzCZrrJ2axl/A= Subject key identifier: BA:F6:ED:B7:D0:85:82:DE:02:A4:6A:A7:DD:33:49:3A:CC:31:16:16 Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e Certificate serial: 3B6182D77D92AB3D575D42DA285344EE942C0442 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft Manifest number: 0630 Signing time: Tue 04 Nov 2025 05:12:06 +0000 Manifest this update: Tue 04 Nov 2025 05:07:06 +0000 Manifest next update: Wed 05 Nov 2025 08:58:06 +0000 Files and hashes: 1: 3231332e3133392e36382e302f32342d3234203d3e2039303039.roa (hash: 3sBgBPhXGekAATE8XJ410DzQWJqVxKjP0XKZZazqwjc=) 2: 3231332e3133392e37302e302f32342d3234203d3e203631333137.roa (hash: imvON1NIsf5RjQ1xycG0mxKjYBudQ7J1/WlKrbcZWA4=) 3: B683F2EB50C5999A77456E8826831609D48C7D3E.crl (hash: 4zEnOqA0CU0051no3zUr/5HZwywbSZvCe7AL47Fic80=) 4: 3231332e3133392e38352e302f32342d3234203d3e2039303039.roa (hash: m9VEyjC6AstkEvUHZu0nndWjDPejGmt2Un1d+bIvwNg=) 5: 3231332e3133392e37362e302f32342d3234203d3e20323132333834.roa (hash: M5KJEFx6ngzgWcWaswPQRo9lko/DzsisbWDI/JPapI0=) 6: 3231332e3133392e36362e302f32342d3234203d3e203136353039.roa (hash: FY200EeTGQqoD9S8sjuLjCwpFp/7NCHvuVTZp+n3GiM=) 7: 3231332e3133392e36362e302f32342d3234203d3e203134363138.roa (hash: D6sys78d1VHUPnQGvPOUfa9pG9olePRUcwiyJ1CBP8Y=) 8: 3231332e3133392e37392e302f32342d3234203d3e20323037333838.roa (hash: ++GZ339S0KrF867J3TV0tr4TdthWz9Doq5ZUIyvykVE=) 9: 3231332e3133392e38362e302f32342d3234203d3e2039303039.roa (hash: FfLZiCS8Nd3284OE5qfthGu+7ch+27qC/k5QS2NyeLA=) 10: 3231332e3133392e39302e302f32342d3234203d3e2039303039.roa (hash: 4HobDf2IR5LvPu11gvXGRRjA/4KYDCBMeX1L5falDQI=) 11: 3231332e3133392e37392e302f32342d3234203d3e20323132313530.roa (hash: 0JPdHuSbHUk0VXaqk6MQ9H7eLXZuOQ1QZwBPgp3LcZ4=) 12: 3231332e3133392e39322e302f32342d3234203d3e20383334.roa (hash: v0tNFH1u/s9uww1+x0zLopoqAlrYrdWeRhsSzqaLV6I=) 13: 3231332e3133392e38382e302f32342d3234203d3e2039303039.roa (hash: FBtJ+MNYwdWO4In9hmlePFb198UWpspP65HhFA9Ht28=) 14: 3231332e3133392e38372e302f32342d3234203d3e2039303039.roa (hash: euqkb79t1OVkqJLV4h0sY2Fb9LyHpO6FssRdPdeta2o=) 15: 3231332e3133392e39332e302f32342d3234203d3e2039303039.roa (hash: 9cktvEdh4jpik+wY0YHKxFgG9OCHki2tIjn/mKo9IKg=) 16: 3231332e3133392e38392e302f32342d3234203d3e2039303039.roa (hash: pjnqIb4dxS7ohemcNICs3/5MSebDeHfZm+o3ScY7Wbs=) 17: 3231332e3133392e38302e302f32332d3234203d3e20383334.roa (hash: qiWvZJxXyA1T8nIVbLoZ99OExdcS5mc15RZxXCZOFJM=) 18: 3231332e3133392e39342e302f32342d3234203d3e2039303039.roa (hash: CZYh6lYb4N4Hi46B2oVp46GIE/gWlkXTwUlUU+TKpIw=) 19: 3231332e3133392e38332e302f32342d3234203d3e2039303039.roa (hash: IdSy9DI41okmJzC8kiYhvPIkxbhT29hGtDcstol94Gs=) 20: 3231332e3133392e37372e302f32342d3234203d3e20333938323536.roa (hash: AAU8mMA/8qMP5OVFvU4ND40XGDRIHcFw5zTvG37HSds=) 21: 3231332e3133392e37322e302f32342d3234203d3e203230383630.roa (hash: NjWmld7in/C2wyn6DXt7Xnv7mQPq1jiHpZcTZuGeBQ0=) 22: 3231332e3133392e37332e302f32342d3234203d3e20323132323338.roa (hash: Dtv0Rk3S6CYGgeyc9Utp8OCStFSnf/fyoGbb6uGogTI=) 23: 3231332e3133392e37312e302f32342d3234203d3e203631333137.roa (hash: DZpFNtIJlcLHmoaMDeodOmCa2IVlyKcWWOjWi093JRY=) 24: 3231332e3133392e38322e302f32342d3234203d3e2039303039.roa (hash: zOTGboIZBsrY2C4wOPiGbp4YdGPWL/CIf9OR+DPh8lw=) 25: 3231332e3133392e37392e302f32342d3234203d3e2033333230.roa (hash: PtRMyKTdbfZGfPE5XdhdhFh3qhxKx8+kxVjMWXNcsWU=) 26: 3231332e3133392e36342e302f32342d3234203d3e2039303039.roa (hash: r1pjD687zCx4FmCuXlGB5h73ScKoFYopGKhXlE6KUfY=) 27: 3231332e3133392e37382e302f32342d3234203d3e20323036343436.roa (hash: LCM/dunTFfsiENo1u3oy0PNFVtxRWwm9bEHFaBempdc=) 28: 3231332e3133392e36352e302f32342d3234203d3e20383334.roa (hash: yiUWywuAePvSWKx/Dh0v780qdOPcjeajPeWQA6yzZeY=) 29: 3231332e3133392e37352e302f32342d3234203d3e20323731393837.roa (hash: qsm72iRYseRLkO/eaTDbU1ka1enp1cU6d6BLc+o+lFc=) 30: 3231332e3133392e36392e302f32342d3234203d3e20313337353137.roa (hash: HH3jqYI0MpU2yLi9Hw8yJjtic3EBakXCP+g63lrfqjg=) 31: 3231332e3133392e36372e302f32342d3234203d3e2039333034.roa (hash: 18Z/kr0BOMbrD7s6WTSNdpCR4gQ+ao7oXZdueQ4RROc=) 32: 3231332e3133392e37342e302f32342d3234203d3e203239383032.roa (hash: aplL4eWGO1854T22hYUsUkBTP8Rpw5inKqfwVoAi4uA=) 33: 3231332e3133392e39312e302f32342d3234203d3e2039303039.roa (hash: iHrVGYqO0jEnmhXvt0u+E3Fi7EyKrYFB7bEQzlX2suw=) 34: 3231332e3133392e39352e302f32342d3234203d3e2039303039.roa (hash: CLzyfVEPAwKX3mhx3cFkDV2A+7c3eW1iEPnVFN3/un0=) 35: 3231332e3133392e38342e302f32342d3234203d3e2039303039.roa (hash: recgwGLHRmHMtvRRJVUhe6BWHyw6Djaciag4FXuYftw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 08:58:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:61:82:d7:7d:92:ab:3d:57:5d:42:da:28:53:44:ee:94:2c:04:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e Validity Not Before: Nov 4 05:07:06 2025 GMT Not After : Nov 5 08:58:06 2025 GMT Subject: CN=BAF6EDB7D08582DE02A46AA7DD33493ACC311616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:eb:7e:ec:17:f4:8e:57:10:a2:97:1a:1b:94: 15:63:f2:04:07:67:12:c0:6c:14:25:b2:f3:a1:ce: e7:2c:72:0a:ec:6d:e4:fe:8b:db:07:46:0f:41:d8: 4f:b8:2f:6e:47:e6:fc:e7:49:9c:8c:eb:a3:2b:6e: 3e:fc:92:ec:29:8b:d8:8f:9f:16:15:2c:ec:5a:d7: 19:44:24:30:b6:4f:d3:48:9b:52:a7:a3:28:38:f0: 1e:fe:5e:bb:8a:80:51:04:50:fb:5a:42:c5:5e:c2: 3a:e1:a4:01:1d:e5:26:56:10:98:92:84:11:e9:ed: ba:bc:fb:78:62:8b:5b:9c:c8:06:27:dc:27:68:db: 87:47:22:c9:f3:57:c2:09:60:50:42:4e:6c:84:0b: ac:2e:91:6b:89:e9:2b:bf:6d:13:bb:a6:7c:28:bb: b2:9e:d3:d8:45:7a:d1:2b:c7:37:31:01:56:40:b7: 76:12:3b:46:01:07:a1:0c:fa:15:cc:ad:96:b2:d3: 8b:a4:2c:4b:fd:ff:76:c7:eb:cc:e2:77:90:9b:3d: 2c:3b:be:9f:53:78:90:3e:6e:1e:8d:dd:be:c2:6e: 5c:91:b4:bf:b0:b4:ad:d7:47:d9:d1:b2:70:c5:1b: e2:47:ee:31:e7:18:a7:04:d5:13:1f:e9:79:b8:f5: c4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F6:ED:B7:D0:85:82:DE:02:A4:6A:A7:DD:33:49:3A:CC:31:16:16 X509v3 Authority Key Identifier: keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:f3:6e:64:44:da:73:86:f0:02:1f:dc:d1:85:bc:e2:da:bd: b9:ce:fb:71:19:17:4c:9d:37:a3:9d:0b:77:04:ea:ad:62:9d: 9b:cc:86:bb:c3:d0:33:9d:46:db:69:61:fd:2b:88:e1:41:6a: f7:60:26:ac:0a:bd:9f:e3:d0:40:ad:20:65:a9:07:10:29:17: f6:22:95:63:ee:88:73:c0:29:5d:fd:f5:30:16:45:8e:db:9b: 89:83:e4:e5:62:17:a2:5c:01:8a:01:3f:8e:b6:bb:23:92:18: fb:31:92:38:95:df:7f:80:40:18:a6:19:f3:fd:d7:c0:6d:7f: 2e:11:89:96:17:97:f1:cc:aa:b5:ee:76:e5:6c:65:81:d1:83: a8:48:44:4a:fb:c5:29:c6:14:55:ee:bd:e9:23:e6:03:7b:f5: 50:44:4e:9a:f5:6c:cf:2f:3a:ec:d6:2c:b2:7b:62:ee:53:ce: b3:1e:0c:b1:5b:18:62:10:e4:c6:11:33:c0:46:51:f8:d2:8f: be:00:e3:d2:1f:f1:31:f0:ec:a6:0f:71:20:14:11:f2:bc:eb: da:9f:09:c7:19:5c:ed:6b:4e:78:6c:e8:68:d2:26:a3:ff:96: 96:04:a3:93:0b:13:c4:96:79:af:70:c4:33:d5:6e:b2:40:47: 1d:18:3d:62 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUO2GC132Sqz1XXULaKFNE7pQsBEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk NDhjN2QzZTAeFw0yNTExMDQwNTA3MDZaFw0yNTExMDUwODU4MDZaMDMxMTAvBgNV BAMTKEJBRjZFREI3RDA4NTgyREUwMkE0NkFBN0REMzM0OTNBQ0MzMTE2MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM637sF/SOVxCilxoblBVj8gQH ZxLAbBQlsvOhzucscgrsbeT+i9sHRg9B2E+4L25H5vznSZyM66Mrbj78kuwpi9iP nxYVLOxa1xlEJDC2T9NIm1Knoyg48B7+XruKgFEEUPtaQsVewjrhpAEd5SZWEJiS hBHp7bq8+3hii1ucyAYn3Cdo24dHIsnzV8IJYFBCTmyEC6wukWuJ6Su/bRO7pnwo u7Ke09hFetErxzcxAVZAt3YSO0YBB6EM+hXMrZay04ukLEv9/3bH68zid5CbPSw7 vp9TeJA+bh6N3b7CblyRtL+wtK3XR9nRsnDFG+JH7jHnGKcE1RMf6Xm49cQ/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUuvbtt9CFgt4CpGqn3TNJOswxFhYwHwYDVR0j BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT TWZUNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hMDFjMTRmYi1i NjYwLTQ4OWQtOWU5Zi05NDAyZTllMmMyZTIvMC9CNjgzRjJFQjUwQzU5OTlBNzc0 NTZFODgyNjgzMTYwOUQ0OEM3RDNFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvNuZETac4bwAh/c0YW8 4tq9uc77cRkXTJ03o50LdwTqrWKdm8yGu8PQM51G22lh/SuI4UFq92AmrAq9n+PQ QK0gZakHECkX9iKVY+6Ic8ApXf31MBZFjtubiYPk5WIXolwBigE/jra7I5IY+zGS OJXff4BAGKYZ8/3XwG1/LhGJlheX8cyqte525WxlgdGDqEhESvvFKcYUVe696SPm A3v1UEROmvVszy867NYssnti7lPOsx4MsVsYYhDkxhEzwEZR+NKPvgDj0h/xMfDs pg9xIBQR8rzr2p8Jxxlc7WtOeGzoaNImo/+WlgSjkwsTxJZ5r3DEM9VuskBHHRg9 Yg== -----END CERTIFICATE-----Generated at Tue Nov 4 10:51:13 2025 by rpki-client