$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft File: 8F4CE7722F99075D94738B7E61070401269EB3D6.mft (raw, json) Hash identifier: Ofe4u3Y15kFZwVVeRgjTmjHd5SOdUzeTnmK1TJH4qFc= Subject key identifier: C6:7B:4A:D4:AE:3A:1B:7A:45:D6:ED:9E:BE:AD:60:4B:DF:FD:67:CB Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6 Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6 Certificate serial: 7BBD633D5BFBBF486E71F37E17B08E87833B663E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft Manifest number: 0585 Signing time: Tue 04 Nov 2025 09:02:06 +0000 Manifest this update: Tue 04 Nov 2025 08:57:06 +0000 Manifest next update: Wed 05 Nov 2025 10:28:06 +0000 Files and hashes: 1: 36322e3139322e3137332e302f32342d3234203d3e203235363933.roa (hash: 7LxiUpW29bCJDw6ndbnVxwTHPen7XCpx03brWPSWNVo=) 2: 36322e3139322e3137352e302f32342d3234203d3e203332313637.roa (hash: /WAm5dy4jlcwivOnkIFnMuEvBCc6QOLwRlkX4YTGCBc=) 3: 3231322e3130322e3131342e302f32342d3234203d3e20323132363039.roa (hash: k4QPq18KIVcE3YfXs1geEObswKolsmORhNCPU0jWep8=) 4: 36322e3139322e3137342e302f32342d3234203d3e20313939303538.roa (hash: 7SPDhEMWd1gl2XtQJzxrngcOVdYu9T7eD0t4enh6w+8=) 5: 37372e38332e3235322e302f32342d3234203d3e20323734383237.roa (hash: 1TkU9CuZNSKSA6n8CCEVJKfR3/eejFvKDG72x42fajA=) 6: 38352e3230392e31372e302f32342d3234203d3e2038313030.roa (hash: QDSk8x00L35RICmReakqpkA/56+KGgKX4susJmbToXY=) 7: 3138352e3138312e322e302f32342d3234203d3e20323132363639.roa (hash: AO/2wQxFVW1dCHNtgSdMO8qdA9TP6KJffP27Y2ywVzk=) 8: 3139332e3136332e3132372e302f32342d3234203d3e20313439393438.roa (hash: 1dKp6xe+eLRTQoCYGUtbaGkzNAIMlS65VuQGc12R6RA=) 9: 3138352e3138312e332e302f32342d3234203d3e20323030303137.roa (hash: yu4VS8d4SOotNR90wp+Yzh042rOQsTRk/ltNPBkKiBs=) 10: 3138352e3138312e312e302f32342d3234203d3e203232313638.roa (hash: j6aiC8hmqjNX8bvUvtzfL/WZD+CbfD2TNLTq4Vkaxb8=) 11: 8F4CE7722F99075D94738B7E61070401269EB3D6.crl (hash: mUnyPZQg940pxBjalMsKeFG/CnFWQszvr//3HueGOLg=) 12: 38352e3230392e31382e302f32342d3234203d3e20323132343136.roa (hash: J4P/0pJKXXswWDL/U/aSyTpYbnb7RCTWwOsChVTVKX0=) 13: 37372e38332e3235342e302f32342d3234203d3e203432383331.roa (hash: B5BKp3Kt7IC0lBSFIyTVJVOYl/EnjscrkC95vEdRQdg=) 14: 37372e38332e3235332e302f32342d3234203d3e20333938333835.roa (hash: oAOTNgxw6bYQVCzHD93BNrqwf7e2+dYeRkUxzvhfYNE=) 15: 38352e3230392e31362e302f32342d3234203d3e20343030303339.roa (hash: p6Bk0gZf8IBhPL6y8ZeFGMDiI7CTICtCBqH+ui8UNPk=) 16: 36322e3139322e3137332e302f32342d3234203d3e2038313030.roa (hash: VR4JLJ2ZU8eUzCRER2JzBOvrizo3+I5iCEURL4jUDUs=) 17: 37372e38332e3235352e302f32342d3234203d3e20333937333733.roa (hash: 1mKwdC2ZIiOIr7Rnoef/+fSq7c6umW7Rd7kmaMzPSt8=) 18: 37372e38332e3235322e302f32342d3234203d3e203533313037.roa (hash: 3Dh0+QL4Ca7K3/8ZGEgIxNy6qmtIRAGaEkPcZns1GuY=) 19: 38352e3230392e31392e302f32342d3234203d3e203131383738.roa (hash: Nx4wSG2k5MsgvkZE/SkqlmuALnm8blh30hh9Mbxj2MU=) 20: 38352e3230392e31372e302f32342d3234203d3e203235363933.roa (hash: sfBR34BQfUnBG/Dfs9RgO4NWV6dIYQiGWUQLFQnMRUU=) 21: 36322e3139322e3137322e302f32342d3234203d3e20323632323837.roa (hash: 2GimDrI+u19G9USJIxEoIwe+FIkjWzBTs+tdLgZWAyE=) 22: 3138352e3138312e302e302f32342d3234203d3e2035303635.roa (hash: jKhLBm90tx+Wj64bfhAOaNtyd2IRsOIjohul50fMfmI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:bd:63:3d:5b:fb:bf:48:6e:71:f3:7e:17:b0:8e:87:83:3b:66:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6 Validity Not Before: Nov 4 08:57:06 2025 GMT Not After : Nov 5 10:28:06 2025 GMT Subject: CN=C67B4AD4AE3A1B7A45D6ED9EBEAD604BDFFD67CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:86:13:8f:ec:57:1c:b5:92:17:8d:da:c0:fe: 22:d1:63:49:90:c2:25:10:8c:7f:7a:fe:9a:bd:e1: 87:26:dd:12:9f:6e:43:53:92:95:75:5e:2d:6d:a4: 9f:9f:06:41:fc:d4:84:fe:d0:91:58:db:47:c4:ac: 84:6e:46:d5:b3:5e:5d:1f:2f:0d:1a:92:8f:d6:f3: 21:f6:c3:d2:fd:94:0e:50:41:f9:fa:d0:b5:4d:01: 56:c4:11:89:eb:47:a6:09:95:e8:8a:ba:15:4d:ff: 0b:e3:b1:9e:69:94:69:e9:fb:79:73:8a:f4:58:72: 0f:04:19:d5:16:a9:7c:7c:d9:54:b2:91:28:cc:17: 68:c4:fa:ed:bf:57:b3:83:5a:5a:7e:dd:24:65:39: bf:79:98:90:20:dd:60:c3:b3:20:68:fa:ce:00:fc: 6d:17:f7:d0:08:f4:f9:92:12:3c:2e:50:34:09:ad: b6:81:34:cf:15:06:e6:d8:ce:66:8e:07:e0:11:2e: 20:d1:7c:c1:9e:e9:f3:98:c4:a1:89:ad:db:f0:b4: e6:cb:5a:e6:68:00:9e:bf:2f:a9:01:eb:c2:24:7a: 5b:97:67:fb:44:8a:ae:3f:df:de:6f:2b:f9:b0:b7: c0:79:27:74:98:49:53:65:2b:21:94:1f:d3:d1:26: d7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:7B:4A:D4:AE:3A:1B:7A:45:D6:ED:9E:BE:AD:60:4B:DF:FD:67:CB X509v3 Authority Key Identifier: keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:60:5e:2f:b7:bf:61:a3:7d:5a:aa:29:1a:b4:12:ba:02:d8: d2:c5:20:33:31:01:9f:7d:ec:ce:e1:24:5c:a7:f4:7c:22:93: 35:84:d8:c8:aa:4f:f0:9f:20:48:e7:bd:0f:3c:63:0b:0b:ba: f3:fb:25:92:37:18:14:71:bb:c0:ef:84:8b:76:bd:e1:2a:86: d3:7c:e9:23:4d:66:f0:cc:66:34:2e:bc:42:6d:cb:dc:e6:fe: fa:b4:70:fa:9b:07:86:cd:b5:5c:61:55:55:2f:fa:00:24:1a: 3c:fa:5d:66:92:28:6a:49:de:65:a4:14:13:37:6e:e2:25:9d: d0:1d:06:03:39:56:6a:6a:f2:ae:71:70:87:9e:65:47:7f:f8: b3:56:d9:54:84:02:82:b5:c1:22:f3:30:74:bf:98:c3:e2:75: 2c:a7:b4:c3:71:72:60:20:1f:8c:33:fd:0b:b1:12:bb:6b:31: 87:cb:a1:cf:33:cd:5c:2c:2e:4a:11:63:06:ae:66:b9:bf:81: 90:57:23:3a:4c:80:f4:0f:0e:87:32:6e:4a:3e:b8:d5:a6:e7: fe:18:80:74:59:aa:63:c0:71:42:80:42:03:e8:e2:15:98:a9: 8e:3f:92:52:92:76:4e:b3:e7:58:9a:62:31:2b:20:ef:37:7a: c7:b3:3e:91 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUe71jPVv7v0hucfN+F7COh4M7Zj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGY0Y2U3NzIyZjk5MDc1ZDk0NzM4YjdlNjEwNzA0MDEy NjllYjNkNjAeFw0yNTExMDQwODU3MDZaFw0yNTExMDUxMDI4MDZaMDMxMTAvBgNV BAMTKEM2N0I0QUQ0QUUzQTFCN0E0NUQ2RUQ5RUJFQUQ2MDRCREZGRDY3Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyhhOP7FcctZIXjdrA/iLRY0mQ wiUQjH96/pq94Ycm3RKfbkNTkpV1Xi1tpJ+fBkH81IT+0JFY20fErIRuRtWzXl0f Lw0ako/W8yH2w9L9lA5QQfn60LVNAVbEEYnrR6YJleiKuhVN/wvjsZ5plGnp+3lz ivRYcg8EGdUWqXx82VSykSjMF2jE+u2/V7ODWlp+3SRlOb95mJAg3WDDsyBo+s4A /G0X99AI9PmSEjwuUDQJrbaBNM8VBubYzmaOB+ARLiDRfMGe6fOYxKGJrdvwtObL WuZoAJ6/L6kB68IkeluXZ/tEiq4/395vK/mwt8B5J3SYSVNlKyGUH9PRJteNAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUxntK1K46G3pF1u2evq1gS9/9Z8swHwYDVR0j BBgwFoAUj0znci+ZB12Uc4t+YQcEASaes9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUtNTExMC00MjU3LTk0ZWYtNGQyYjQzODg0 MDQwLzAvOEY0Q0U3NzIyRjk5MDc1RDk0NzM4QjdFNjEwNzA0MDEyNjlFQjNENi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2owem5jaS1aQjEyVWM0dC1ZUWNFQVNh ZXM5WS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTk3NzExNS01 MTEwLTQyNTctOTRlZi00ZDJiNDM4ODQwNDAvMC84RjRDRTc3MjJGOTkwNzVEOTQ3 MzhCN0U2MTA3MDQwMTI2OUVCM0Q2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyWBeL7e/YaN9WqopGrQS ugLY0sUgMzEBn33szuEkXKf0fCKTNYTYyKpP8J8gSOe9DzxjCwu68/slkjcYFHG7 wO+Ei3a94SqG03zpI01m8MxmNC68Qm3L3Ob++rRw+psHhs21XGFVVS/6ACQaPPpd ZpIoakneZaQUEzdu4iWd0B0GAzlWamryrnFwh55lR3/4s1bZVIQCgrXBIvMwdL+Y w+J1LKe0w3FyYCAfjDP9C7ESu2sxh8uhzzPNXCwuShFjBq5mub+BkFcjOkyA9A8O hzJuSj641abn/hiAdFmqY8BxQoBCA+jiFZipjj+SUpJ2TrPnWJpiMSsg7zd6x7M+ kQ== -----END CERTIFICATE-----Generated at Tue Nov 4 17:50:54 2025 by rpki-client