$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft File: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft (raw, json) Hash identifier: lVo+qbpam7YdZ5+CQudBtxywrKC4BgDFsOPz/xCJvu8= Subject key identifier: 78:5D:E7:36:1C:37:BB:07:07:BD:EC:58:D3:41:BE:1F:C4:F2:4B:20 Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F Certificate issuer: /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Certificate serial: 56CE01A18E514DFBDC627FC854312019D12087FB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft Manifest number: B1 Signing time: Tue 04 Nov 2025 22:13:23 +0000 Manifest this update: Tue 04 Nov 2025 22:08:23 +0000 Manifest next update: Wed 05 Nov 2025 22:21:23 +0000 Files and hashes: 1: 326131343a373538303a666637383a3a2f34382d3438203d3e20323033393135.roa (hash: HnRWSrEpeOmuzTKhKK+Ly8/65pwZBhG8hC56Nip/vA0=) 2: 326131343a373538303a666637303a3a2f34382d3438203d3e20323033393135.roa (hash: zyXKXDvOIxNrBW5QrQm19sSxkRDmx9tFlmRCkefYJk4=) 3: 326131343a373538303a666637643a3a2f34382d3438203d3e20323033393135.roa (hash: H+78AH4TYlugOgXjwzDN7rCd3EnIWoVZYuyJbZiEnfs=) 4: 326131343a373538303a666637313a3a2f34382d3438203d3e20323033393135.roa (hash: tQOuxzjoO2gOr2+IueULnKw1bzMsp7EoDLzHElEe0zw=) 5: 326131343a373538303a666637663a3a2f34382d3438203d3e20323033393135.roa (hash: AKQUYWOgneoO1qpRyAABoiC4d23AXJsif2Ph8QnUXyw=) 6: 326131343a373538303a666637653a3a2f34382d3438203d3e20323033393135.roa (hash: U6uqpQVMvicANeE1+RdGwfiUHzScjnhV12wDyDdzXu8=) 7: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl (hash: sbWbmInVSqNauRCMspREbykbPzPwsAfLgQ7bnBtcQAg=) 8: 326131343a373538303a666637623a3a2f34382d3438203d3e20323033393135.roa (hash: +Dm2JEqaSsfzmcw/vRVxZqJazGgE0R+iZSKdYatTFPI=) 9: 326131343a373538303a666637333a3a2f34382d3438203d3e20323033393135.roa (hash: GieRIT3AIgJdp4hafy8WbPzRF4MVeOc7uBzRolQt/Os=) 10: 326131343a373538303a666637373a3a2f34382d3438203d3e20323033393135.roa (hash: F5/aVvIreRBQw19BMcjvtJaH6IAMjMe6w+V1TelngZU=) 11: 326131343a373538303a666637323a3a2f34382d3438203d3e20323033393135.roa (hash: h9EOAcugJrwunceFQsvuVh/viiSOkDi6CuOcdJIPWnA=) 12: 326131343a373538303a666637613a3a2f34382d3438203d3e20323033393135.roa (hash: lVFPEuT+Vv7EHAhCsqJ2Rg8eFP3usNSJ0TffuGmsFKE=) 13: 326131343a373538303a666637393a3a2f34382d3438203d3e20323033393135.roa (hash: 4JRXyyfbh5S+gtwReXpBVGHg5Hfkr5m0dh1qPG0/BKw=) 14: 326131343a373538303a666637363a3a2f34382d3438203d3e20323033393135.roa (hash: BkHJMnQDPpptXCMBwmodU4zh5ifR8UsDSgAYqmaYZ4U=) 15: 326131343a373538303a666637343a3a2f34382d3438203d3e20323033393135.roa (hash: wat7PE9fGydcz5ayop5kavvbRXomHufzivqvTvbesao=) 16: 326131343a373538303a666637633a3a2f34382d3438203d3e20323033393135.roa (hash: o5X2AD19YxTsiyZsqxaO6LcogckEDGsmBlZBOovT7M0=) 17: 326131343a373538303a666637353a3a2f34382d3438203d3e20323033393135.roa (hash: 9QAAhr1wwrheqUnrWa4FkevZ/+WKuCODK+T1ZZmcwl8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:21:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:ce:01:a1:8e:51:4d:fb:dc:62:7f:c8:54:31:20:19:d1:20:87:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Validity Not Before: Nov 4 22:08:23 2025 GMT Not After : Nov 5 22:21:23 2025 GMT Subject: CN=785DE7361C37BB0707BDEC58D341BE1FC4F24B20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ff:d2:0a:31:26:4d:22:30:0b:93:02:aa:da: cb:60:5b:3d:a7:44:83:65:6b:4f:c4:b4:50:2d:91: e9:c6:de:c0:bc:97:40:50:01:14:fd:6a:e0:29:07: 50:30:d9:03:89:44:2c:41:b8:7f:99:98:14:98:c3: cf:83:d4:14:a5:12:a3:a2:c2:6e:5c:c6:f5:d9:fe: 7b:d3:5b:b2:a7:a2:99:3e:c4:b9:37:64:9a:84:be: 1c:c8:79:75:86:6e:47:b1:29:0e:be:d9:c9:6d:c6: 80:c2:ae:82:eb:60:2e:49:65:76:cf:ac:7b:d2:13: 00:45:81:98:d1:10:1f:40:65:37:a4:d1:1d:37:1d: 18:6d:33:d4:02:93:ab:e8:ec:ef:d8:43:dc:0e:b8: 7c:d4:8e:1e:8f:04:17:39:f3:24:5a:a9:96:94:c6: 48:83:c4:4f:de:17:a0:5e:8a:30:92:69:ef:bc:ed: ed:d1:1f:a7:1e:fc:e5:b4:85:fb:47:c0:b8:59:55: 46:53:2d:c2:a5:c0:c2:3b:66:78:1c:c5:2f:80:38: 77:d1:20:69:89:7c:68:01:da:6d:6a:73:61:58:12: ce:90:62:34:45:c5:7b:de:27:84:21:33:8c:09:49: 43:64:5e:cb:5e:9d:f5:c6:c3:00:7b:64:46:65:7a: ac:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5D:E7:36:1C:37:BB:07:07:BD:EC:58:D3:41:BE:1F:C4:F2:4B:20 X509v3 Authority Key Identifier: keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:f0:ec:10:29:0a:a5:47:85:0e:1a:e1:e6:10:4a:cd:90:5b: ea:cf:48:b4:1d:6c:54:8b:cd:2f:3c:6b:35:9b:4f:d3:5a:2e: eb:4f:1f:5c:c7:e7:ca:a4:a6:f7:d4:4d:20:f7:80:72:5c:e6: 70:e3:dc:86:73:0e:8a:92:da:d2:94:fa:5c:ed:89:b3:65:f0: 43:1e:a8:89:9d:cc:3f:1c:3a:39:06:47:1a:ac:a8:86:b7:86: cf:7c:f2:14:b7:c2:01:2a:4c:e8:69:e0:49:49:02:07:a5:02: c6:22:ff:5c:62:f7:ab:27:32:22:38:fa:a8:d8:29:95:6f:bb: e7:93:c9:b8:a6:98:02:04:a6:89:71:f0:54:90:51:5f:09:30: f8:c6:84:8e:c9:49:df:26:6c:41:92:c5:47:87:bb:9a:a7:d0: 9e:0f:d4:4e:0a:9e:cb:7f:2f:43:05:55:73:d8:96:b1:ef:d6: b3:05:46:aa:3f:77:0d:c1:62:04:02:f2:b2:85:73:66:3d:f7: c6:45:24:fc:a4:2c:99:82:9b:e2:db:c9:17:7d:1d:50:43:a3: 51:64:19:b6:d3:e5:41:b5:50:9a:05:7d:c1:94:c5:f2:3f:4f: a7:f5:3b:8d:81:fd:29:d4:6f:c5:6f:6d:54:ca:bf:aa:63:60: d4:92:c1:f8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUVs4BoY5RTfvcYn/IVDEgGdEgh/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlC RjFEMEYyRjAeFw0yNTExMDQyMjA4MjNaFw0yNTExMDUyMjIxMjNaMDMxMTAvBgNV BAMTKDc4NURFNzM2MUMzN0JCMDcwN0JERUM1OEQzNDFCRTFGQzRGMjRCMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq/9IKMSZNIjALkwKq2stgWz2n RINla0/EtFAtkenG3sC8l0BQART9auApB1Aw2QOJRCxBuH+ZmBSYw8+D1BSlEqOi wm5cxvXZ/nvTW7Knopk+xLk3ZJqEvhzIeXWGbkexKQ6+2cltxoDCroLrYC5JZXbP rHvSEwBFgZjREB9AZTek0R03HRhtM9QCk6vo7O/YQ9wOuHzUjh6PBBc58yRaqZaU xkiDxE/eF6BeijCSae+87e3RH6ce/OW0hftHwLhZVUZTLcKlwMI7ZngcxS+AOHfR IGmJfGgB2m1qc2FYEs6QYjRFxXveJ4QhM4wJSUNkXstenfXGwwB7ZEZleqxpAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUeF3nNhw3uwcHvexY00G+H8TySyAwHwYDVR0j BBgwFoAUzHkaH1yzuyyvfCg4IRLiab8dDy8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMz N2ZjLzEvQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlCRjFEMEYyRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9DQzc5MUExRjVDQjNCQjJDQUY3QzI4Mzgy MTEyRTI2OUJGMUQwRjJGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I3YTBhYTU2LTRhMWQtNGJhOC1hYjY2LWM1OWZlZDRjMzdmYy8xL0NDNzkxQTFG NUNCM0JCMkNBRjdDMjgzODIxMTJFMjY5QkYxRDBGMkYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBk8OwQ KQqlR4UOGuHmEErNkFvqz0i0HWxUi80vPGs1m0/TWi7rTx9cx+fKpKb31E0g94By XOZw49yGcw6KktrSlPpc7YmzZfBDHqiJncw/HDo5BkcarKiGt4bPfPIUt8IBKkzo aeBJSQIHpQLGIv9cYverJzIiOPqo2CmVb7vnk8m4ppgCBKaJcfBUkFFfCTD4xoSO yUnfJmxBksVHh7uap9CeD9ROCp7Lfy9DBVVz2Jax79azBUaqP3cNwWIEAvKyhXNm PffGRST8pCyZgpvi28kXfR1QQ6NRZBm20+VBtVCaBX3BlMXyP0+n9TuNgf0p1G/F b21Uyr+qY2DUksH4 -----END CERTIFICATE-----Generated at Wed Nov 5 09:32:57 2025 by rpki-client