$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: HlqCK+3Cy8OBrlf7Ou2gA7Ud3Cg/w+Z1NpCCeXfe4XM= Subject key identifier: 21:39:0E:D1:E0:38:92:70:52:ED:EA:97:9B:C2:AC:50:AD:97:8B:0E Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 386A838BD9A007E6DCD5888E7BE3A83193233BF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 05D1 Signing time: Mon 03 Nov 2025 21:41:58 +0000 Manifest this update: Mon 03 Nov 2025 21:36:58 +0000 Manifest next update: Tue 04 Nov 2025 23:38:58 +0000 Files and hashes: 1: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: ezbmX/yRe+yRvkLs/8FFZoupwCiBI67aZ+0JqkrMl4Q=) 2: 3138352e3234342e39352e302f32342d3234203d3e203134363138.roa (hash: BX+afd5v4CnQw1Csb+gERO9bOUf9cjiesQkq05EVznU=) 3: 3138352e3231332e3234302e302f32342d3234203d3e20323135373033.roa (hash: 5U9kh/Q1+pD8ktgLTSH2rTlmtF2qNT/hbi1XnCHITmo=) 4: 3138352e3133302e36322e302f32342d3234203d3e203239303636.roa (hash: cZvuOTu1xxenEkmS/lv/FbwQZVMqO/d4TmKYvwutnlA=) 5: 3138352e3232392e3230332e302f32342d3234203d3e20323034333939.roa (hash: o2s9iRRo/HWpVNV66/X3K8Nx40dZXcSQ+ar/RSKpLZ4=) 6: 3138352e3232392e3230302e302f32342d3234203d3e2039333034.roa (hash: 9BQlkuwOuPyXvuvnOIpRrrItcJ412PckV00AOrBJhqk=) 7: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: NTiGjgrJWtlD9Roa9FRQtbjOAAcPR35U4Ayfj8SpKuI=) 8: 33362e3235352e39322e302f32332d3234203d3e203230333236.roa (hash: uAr910mpCFzZrOxxImyBVxZ5bzjvqrL8T8981qvKdos=) 9: 3138352e3234342e39352e302f32342d3234203d3e203136353039.roa (hash: tBBH3ivLD6QCOuz/zDI7JAWzO8l/tRZui9Xrn0qJpA4=) 10: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: RdOuxQjMUqkQryMcrXonWYYeJva5RY8rohAdG2ITJdw=) 11: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: /OGL5Xocpa/mA4GEutGuQoiWc4p3DBj9VM0kpmdQZxo=) 12: 3138352e3234342e39352e302f32342d3234203d3e203230343733.roa (hash: wcPx+O7KmTHA1Z17UF9VIIdo6IS06Ij+d7NLeipHdoU=) 13: 33362e3235352e39322e302f32332d3234203d3e203139333138.roa (hash: FthEwpOIKT5rKWCqEXY9gMB5simU3azPQORqXvTeqVo=) 14: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: /82U/4ZCS1l7tEmRqZdiqoHQfHkAV0iGqgAdCf0IY6Q=) 15: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: krs6rxjGgkgxIC0XFsSJIDbJbJTaOxRVYKdhwP98j0o=) 16: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: 1uKLPQUne0QcXblB3NW5HCIymd03TIpdjdnWqSBKxm8=) 17: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: nzc+7vTx0fxusJ8QBUU0nZ0s/13eeYO5i8RfnoHHUhc=) 18: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: O475B5YNr+mk4vbByMFVmoqbRTenx4kmx66C3HIfdsg=) 19: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: LqK97diQcFrb4344S9ThgI9qIfk24xWO2D6Fzod4ApM=) 20: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: aTFuiZRKSKlOcP1bFw/QEJGr9kwsAqFvqfR62oNQfMc=) 21: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: AeynREsrj3KPg2FTzHS9GM0Me/rmh1l+UxqlaTS1niI=) 22: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: L+rO+MXrQK3tGBKkhTiQd3Pp/oT0n0nJ8NfAxPcZ/Ik=) 23: 3138352e3231332e3234312e302f32342d3234203d3e203631323732.roa (hash: ZRXMJB81EQGqLoTW9rCPLjbdmz5JtoX/ioguz/yH9B4=) 24: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: 2mJFb3j98iS3WwOyYDzT/44zu56P1Mt1+w22nAIK9Eo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 04 Nov 2025 23:38:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:6a:83:8b:d9:a0:07:e6:dc:d5:88:8e:7b:e3:a8:31:93:23:3b:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Nov 3 21:36:58 2025 GMT Not After : Nov 4 23:38:58 2025 GMT Subject: CN=21390ED1E038927052EDEA979BC2AC50AD978B0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:be:71:78:04:fe:30:2c:60:e5:8e:13:16:b4: cc:04:04:d9:4c:b0:02:c0:ee:df:40:ea:7f:24:13: 03:a5:25:19:41:2b:a4:47:14:9e:ac:0f:ca:9a:0b: 17:07:08:11:23:d3:97:93:a1:d2:df:bc:3c:be:64: 40:c1:27:cf:8d:d2:be:9d:84:79:03:11:f2:d5:d5: 69:c8:23:60:b3:a9:c6:b9:a6:e8:9f:e9:c8:02:bf: 03:ae:47:e4:71:ca:42:c9:72:db:f6:51:07:76:de: bd:40:ab:29:67:0a:d1:cc:76:0f:78:df:bd:b5:38: e7:0f:18:9c:20:ac:d3:97:92:46:fe:27:41:d4:8a: 64:fd:ba:a0:20:12:2e:dc:a5:27:23:0c:83:84:54: f6:5f:64:ce:5b:11:ff:f9:e2:ce:5b:95:f3:e6:a3: d1:62:45:fb:b4:a1:54:ca:74:f8:04:26:c5:b1:f2: 30:9c:f0:28:92:a8:8d:65:e5:0c:69:a5:94:6b:04: 21:c0:b9:9f:c4:47:80:13:6f:d6:bb:43:24:fb:32: 55:e8:ec:ae:1c:e1:e2:34:19:68:ba:05:70:16:9b: c3:89:5f:a0:7e:0c:fd:a4:4d:2c:bf:b9:63:b4:dd: 0d:35:8f:f3:15:5c:59:7d:6a:c2:e0:94:02:5a:a6: 84:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:39:0E:D1:E0:38:92:70:52:ED:EA:97:9B:C2:AC:50:AD:97:8B:0E X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:46:28:c7:b6:dd:4f:22:9a:d1:1f:3a:d0:fe:c6:b6:f3:f9: 13:66:82:a9:bf:7b:0f:77:be:b5:a4:43:ba:51:e8:73:ad:de: 69:3f:b4:bc:07:32:13:cc:33:7c:4b:c7:15:22:ce:43:e8:e2: a0:0c:6a:20:e9:90:da:de:6b:1f:82:5e:52:49:1c:37:bd:84: 44:b4:47:e7:33:61:b0:6e:7d:ee:0f:5b:77:d8:ae:db:06:b6: dc:22:b8:1f:2c:66:a1:2f:9f:e0:46:a6:23:96:a1:18:86:90: d1:2a:f3:32:73:fa:2d:44:43:23:0b:73:53:20:ff:a6:3d:53: a9:2e:45:de:bc:9b:44:4e:dc:c9:ff:f8:13:4c:18:0d:0f:94: 36:93:8d:1c:b3:92:a5:94:c7:81:91:9a:27:f0:8c:67:59:76: 85:c2:d1:3c:ac:cc:d2:4f:97:da:87:fa:c4:5d:69:35:39:16: db:28:7d:d7:d4:f6:14:e7:9b:47:d9:ed:35:38:50:17:11:4c: 62:79:ba:d3:dd:d1:2c:a7:54:4b:83:43:f7:9d:8a:a1:7d:f5: 38:14:5a:e4:70:d1:16:46:dd:85:29:31:d8:83:e2:46:2c:c6: 84:82:8a:42:f8:99:b3:60:60:a1:8e:f7:8c:f3:d2:f2:9e:9c: fa:81:82:54 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOGqDi9mgB+bc1YiOe+OoMZMjO/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNTExMDMyMTM2NThaFw0yNTExMDQyMzM4NThaMDMxMTAvBgNV BAMTKDIxMzkwRUQxRTAzODkyNzA1MkVERUE5NzlCQzJBQzUwQUQ5NzhCMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzvnF4BP4wLGDljhMWtMwEBNlM sALA7t9A6n8kEwOlJRlBK6RHFJ6sD8qaCxcHCBEj05eTodLfvDy+ZEDBJ8+N0r6d hHkDEfLV1WnII2Czqca5puif6cgCvwOuR+RxykLJctv2UQd23r1AqylnCtHMdg94 3721OOcPGJwgrNOXkkb+J0HUimT9uqAgEi7cpScjDIOEVPZfZM5bEf/54s5blfPm o9FiRfu0oVTKdPgEJsWx8jCc8CiSqI1l5QxppZRrBCHAuZ/ER4ATb9a7QyT7MlXo 7K4c4eI0GWi6BXAWm8OJX6B+DP2kTSy/uWO03Q01j/MVXFl9asLglAJapoQpAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUITkO0eA4knBS7eqXm8KsUK2Xiw4wHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlEYox7bdTyKa0R860P7G tvP5E2aCqb97D3e+taRDulHoc63eaT+0vAcyE8wzfEvHFSLOQ+jioAxqIOmQ2t5r H4JeUkkcN72ERLRH5zNhsG597g9bd9iu2wa23CK4HyxmoS+f4EamI5ahGIaQ0Srz MnP6LURDIwtzUyD/pj1TqS5F3rybRE7cyf/4E0wYDQ+UNpONHLOSpZTHgZGaJ/CM Z1l2hcLRPKzM0k+X2of6xF1pNTkW2yh919T2FOebR9ntNThQFxFMYnm6093RLKdU S4ND952KoX31OBRa5HDRFkbdhSkx2IPiRizGhIKKQviZs2BgoY73jPPS8p6c+oGC VA== -----END CERTIFICATE-----Generated at Tue Nov 4 14:53:06 2025 by rpki-client