$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft File: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json) Hash identifier: uem2QdEPFB8qGOmffITgZfF71f7pElH6wpcYH1bIbSo= Subject key identifier: 5C:CF:F3:28:E3:28:E7:61:A0:1D:95:BB:84:E6:30:28:62:53:F0:AB Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Certificate serial: 417D14C9B58B52A4C869F0398FDFB009E02187D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft Manifest number: 0134 Signing time: Tue 04 Nov 2025 18:57:17 +0000 Manifest this update: Tue 04 Nov 2025 18:52:17 +0000 Manifest next update: Wed 05 Nov 2025 21:06:17 +0000 Files and hashes: 1: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: E+WPtm+HS9AVsakqcLrBjACoAm/NbChhrd4PG4s+X5o=) 2: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: 4eRihxuyWrFmyrmWNHP+q80BiQuGj/+XTMKJH0kDcVI=) 3: 3139342e3132342e3233342e302f32342d3234203d3e203534333339.roa (hash: wdUsagydvVBIUao6PJHWRop4oPMEKXc9pJyNsG4SW9o=) 4: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: lmVh0tkdqz2ZaktlfIJzzJLuyL6wItEcUEPI+PVNqdo=) 5: 3139342e3132342e3233342e302f32342d3234203d3e20393936.roa (hash: ZoxbCHQMtNZPfbUxrxLpOcXkuKUfw+Blft69mSm2oZk=) 6: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: ad3eCylfdMfYW/Id31ooquQQLvZwumdWGj+lszfaEsA=) 7: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: Wt7cVymDfWBwMzR8hqsJLmmyo1G55vHli1MG8ova8P4=) 8: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: sUFXVk5mJuzGXi+txvF0jHfWX/7COhdmW+wdhnGLLbA=) 9: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: yq+hWHhfyocRCOJbnYGyzdHlkfHxXD4gPxuVgEPCc0g=) 10: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: Bvg0bczZRvr0hNeXj13n0Q8N1O34FXLeiihKmXvd96c=) 11: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: MbX2Jo3+qNy9yJ51qumhhpSA5fjjpKXnL9+Ixdd7q/M=) 12: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: KeNndSoLCP57wKHE/hpwuUj3GAw7YUIEUb2u8K0BMgg=) 13: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: bLMKUTu2LDh7TH4JEFo2TwGKCx3JiqqNy6hRd14etMM=) 14: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: qgpa17rXBGEZyX0zTURKp2TS7HA9WA0LAdj3r9yq+jg=) 15: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: 0XA7loK9zcLZ4LH8gJRLIhKhFochpbrC40dXD0XEE/8=) 16: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: hZUNrJfyUHgUntGAqdSVlBaE4wglKTi9y0zmmly1bMY=) 17: 3139342e3132342e3233342e302f32342d3234203d3e20343031383338.roa (hash: dg4srvpWF3uIRgfQMdk/wAV5BokR1veRJ6lDUvN1tY0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:7d:14:c9:b5:8b:52:a4:c8:69:f0:39:8f:df:b0:09:e0:21:87:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Validity Not Before: Nov 4 18:52:17 2025 GMT Not After : Nov 5 21:06:17 2025 GMT Subject: CN=5CCFF328E328E761A01D95BB84E630286253F0AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:db:00:85:8b:18:3f:68:2c:be:ed:9e:63:a5: f9:4d:ba:f9:10:40:7f:d0:d8:f1:a8:62:a9:4a:c3: 07:ca:ec:aa:8b:a4:8b:45:86:c7:61:3b:2e:93:ce: 7e:c2:93:dd:66:10:95:ee:7e:c8:13:6c:a9:50:5c: f8:d4:58:08:31:02:7f:c8:fc:3b:b8:aa:e2:dd:30: 60:44:a7:e2:c4:7d:26:29:1d:f4:9c:3b:25:87:bf: ca:bd:37:ba:e7:e5:49:d9:e0:9e:8d:23:ef:90:9d: 02:17:57:03:fc:64:fe:b6:55:de:17:42:58:1e:3c: 77:2c:ae:fb:c9:12:d7:f1:65:ae:49:14:e9:18:b4: a2:0e:ae:e1:74:95:6f:d4:01:c1:1e:73:dc:e3:0b: 1f:bc:bd:a3:64:8b:25:9b:0d:27:d9:e5:53:e7:dd: 4b:91:c1:5f:e7:3f:0a:63:27:d5:9e:91:16:db:53: 21:88:56:24:99:f2:e5:eb:c0:fc:a2:f5:87:bd:3e: f5:b9:0b:0b:e5:83:4f:38:c3:85:bb:c5:fb:4b:7e: 62:5c:e2:40:85:2b:ba:3b:48:9d:ec:19:39:eb:6d: ec:a2:e5:2e:ee:41:98:5e:8c:43:c8:62:2c:c6:3c: 85:d9:45:65:8c:12:b0:23:0e:ea:97:be:28:af:27: 73:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CF:F3:28:E3:28:E7:61:A0:1D:95:BB:84:E6:30:28:62:53:F0:AB X509v3 Authority Key Identifier: keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:21:8a:c0:e0:64:ae:6b:7b:de:b8:c4:53:a9:b4:7d:8f:ed: cb:9b:03:92:39:4f:71:2a:35:79:56:8e:db:db:ae:d1:76:14: fc:ba:f2:f7:5a:a6:0b:97:ea:8b:f6:54:38:6d:c7:3f:62:b0: 37:64:2e:b0:c8:4a:1b:de:fa:70:a7:bd:a1:bc:1e:ce:20:bb: d3:29:06:9c:38:35:3a:07:42:00:80:73:9e:e5:ff:30:b5:05: 28:a6:11:52:4d:51:a7:2c:f8:46:36:20:dc:5a:ee:42:9e:b1: e3:f8:2c:02:30:23:d4:08:a4:d3:77:46:26:e0:a4:ab:86:dc: 43:e8:1e:bc:04:b4:55:c5:b6:c5:0b:9c:73:77:f7:2d:71:bb: 63:e8:ca:24:1b:fc:9f:d1:c6:9b:6d:67:a7:68:9d:fc:e6:96: ae:ec:79:76:2d:ad:3d:b2:d9:8d:3c:09:85:84:e4:fa:8c:29: e0:83:93:d6:ec:ba:c5:85:3c:0a:57:e2:09:6c:4a:e3:91:eb: 3f:b6:fe:49:b0:05:62:9d:75:81:ab:9c:d6:18:8e:8e:e5:dc: f2:57:73:3a:92:70:fb:b1:93:9f:d6:ac:4f:a1:50:9f:a7:06: 5c:5b:cd:e3:e1:5e:c4:fb:f5:b6:db:85:8f:c3:9f:7b:db:8d: 3b:e2:4f:fc -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQX0UybWLUqTIafA5j9+wCeAhh9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2IyOWE3NzY2OWRmNWE3YTVjYjUwNmQ4MzllZThhYTQz MzdjY2FhYzAeFw0yNTExMDQxODUyMTdaFw0yNTExMDUyMTA2MTdaMDMxMTAvBgNV BAMTKDVDQ0ZGMzI4RTMyOEU3NjFBMDFEOTVCQjg0RTYzMDI4NjI1M0YwQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx2wCFixg/aCy+7Z5jpflNuvkQ QH/Q2PGoYqlKwwfK7KqLpItFhsdhOy6Tzn7Ck91mEJXufsgTbKlQXPjUWAgxAn/I /Du4quLdMGBEp+LEfSYpHfScOyWHv8q9N7rn5UnZ4J6NI++QnQIXVwP8ZP62Vd4X QlgePHcsrvvJEtfxZa5JFOkYtKIOruF0lW/UAcEec9zjCx+8vaNkiyWbDSfZ5VPn 3UuRwV/nPwpjJ9WekRbbUyGIViSZ8uXrwPyi9Ye9PvW5Cwvlg084w4W7xftLfmJc 4kCFK7o7SJ3sGTnrbeyi5S7uQZhejEPIYizGPIXZRWWMErAjDuqXviivJ3M1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUXM/zKOMo52GgHZW7hOYwKGJT8KswHwYDVR0j BBgwFoAUyymndmnfWnpctQbYOe6KpDN8yqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgtN2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhm MDZlLzAvQ0IyOUE3NzY2OURGNUE3QTVDQjUwNkQ4MzlFRThBQTQzMzdDQ0FBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3l5bW5kbW5mV25wY3RRYllPZTZLcERO OHlxdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iYjI1ZDA2OC03 ZjljLTRiMGUtYTY5NS0xNzc5YjdkOGYwNmUvMC9DQjI5QTc3NjY5REY1QTdBNUNC NTA2RDgzOUVFOEFBNDMzN0NDQUFDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiSGKwOBkrmt73rjEU6m0 fY/ty5sDkjlPcSo1eVaO29uu0XYU/Lry91qmC5fqi/ZUOG3HP2KwN2QusMhKG976 cKe9obweziC70ykGnDg1OgdCAIBznuX/MLUFKKYRUk1Rpyz4RjYg3FruQp6x4/gs AjAj1Aik03dGJuCkq4bcQ+gevAS0VcW2xQucc3f3LXG7Y+jKJBv8n9HGm21np2id /OaWrux5di2tPbLZjTwJhYTk+owp4IOT1uy6xYU8ClfiCWxK45HrP7b+SbAFYp11 gauc1hiOjuXc8ldzOpJw+7GTn9asT6FQn6cGXFvN4+FexPv1ttuFj8Ofe9uNO+JP /A== -----END CERTIFICATE-----Generated at Wed Nov 5 02:21:49 2025 by rpki-client