$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft File: 6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft (raw, json) Hash identifier: z9rZblwUbjJjYIgJ1c34g06Mjih4GMehkWTGLvMnank= Subject key identifier: EC:98:E6:B7:56:95:D6:74:2E:33:88:D7:30:20:58:1C:C5:9D:F6:D4 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 42B1ABE660BB28CA5C16608489774A19BE51ACC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft Manifest number: 6C Signing time: Tue 04 Nov 2025 15:28:25 +0000 Manifest this update: Tue 04 Nov 2025 15:23:25 +0000 Manifest next update: Wed 05 Nov 2025 16:08:25 +0000 Files and hashes: 1: 3134372e3132352e3234322e302f32342d3234203d3e2039333138.roa (hash: 25peyHxCzpVy8vbkJ52FO0ImUfED4/UMUvDXlZozOPQ=) 2: 3134372e3132352e3234382e302f32332d3234203d3e20383334.roa (hash: 8ZZYgwjWYnNaXh1Q31FdOyqv7hmIasPhcyhTN5Y23Ho=) 3: 3134372e3132352e3132382e302f31382d3234203d3e20383334.roa (hash: MXQQAdZ8/q0SSX+7EZEMmeULL4t51ObUNh0wwFo4T1Y=) 4: 3134372e3132352e3231362e302f32312d3231203d3e2035363530.roa (hash: wmk3ncAGwLgiz5ppWQMR8PFphqaJJeyXyrPsI6t4nFA=) 5: 6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl (hash: EomGmOARs8nlH43sD52TdGoGNt7iuM4J4QtYFLHLCp8=) 6: 3134372e3132352e3230382e302f32312d3234203d3e20383334.roa (hash: i1MlYDyZthDox3t9GTaYfp478joSZhMXf8NBAusdJGg=) 7: 323030313a3637633a316237303a3a2f34382d3438203d3e2032343838.roa (hash: nLc6b+BJhcWqteWvSt4lz7/51CfameMyZ399v4d2P0c=) 8: 3134372e3132352e3234342e302f32322d3234203d3e20383334.roa (hash: 6tNux8+XOyEdLqNzYEDq+Ycb1y0PXrQe5pK+U+Drx2g=) 9: 3134372e3132352e3232382e302f32322d3234203d3e2034373636.roa (hash: PVVcyUK2P5//ata0jnwAz9lNNY70RdkLtJoVoUxLuN0=) 10: 3134372e3132352e3234332e302f32342d3234203d3e20383334.roa (hash: 1y0AkZznPILm6svGcLp/o5c4ouKlPQn1DeozpLXDkWU=) 11: 3134372e3132352e3233322e302f32312d3231203d3e2035363530.roa (hash: BrRlkcgHyo7KgPTsVzr+D2SwT/C7jGoqSUs+OVNb7/c=) 12: 3134372e3132352e3234302e302f32342d3234203d3e2039333138.roa (hash: v/Kn0B7Oh/Q5oI1VtHfYyG4dvY7WY0h9CWSKGOK1/6g=) 13: 3134372e3132352e3235322e302f32322d3234203d3e20383334.roa (hash: QxO4sqXPc5JgUBoxAhE8et4gmglt/jfevZu2gtyAb0I=) 14: 3134372e3132352e3232342e302f32322d3234203d3e20383334.roa (hash: 4q9wY92apDF4pLWeDKEJA6I8JdBD3iVNqhvPg6ExKdY=) 15: 3134372e3132352e302e302f31372d3137203d3e2032343838.roa (hash: EoI+/sdnscPf0nnBKFSXR5qMiqWVqm1nNdIQnTkhnSs=) 16: 3134372e3132352e3139322e302f32302d3234203d3e20383334.roa (hash: rjNs1Jt7KoXHdQmCwWkcrv/x4cVvHgt5YSgbu9nSOh4=) 17: 3134372e3132352e3234312e302f32342d3234203d3e20383334.roa (hash: ex8cQt4eWgzNHyWAxsRZeEX6oigYIe3q9CFBTval4yU=) 18: 3134372e3132352e3235302e302f32332d3234203d3e2034373636.roa (hash: JnjdW5zSEHH9cRKXo+YrZ+m75+isMdzrTHr55fls/hw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 16:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:b1:ab:e6:60:bb:28:ca:5c:16:60:84:89:77:4a:19:be:51:ac:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 4 15:23:25 2025 GMT Not After : Nov 5 16:08:25 2025 GMT Subject: CN=EC98E6B75695D6742E3388D73020581CC59DF6D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8d:de:68:87:71:0e:9c:d0:a0:7a:e9:07:5b: e0:7e:ed:e8:05:e3:83:25:8c:a4:c3:70:03:96:0b: 72:40:bd:a7:51:dd:c1:73:dd:44:ba:e2:62:43:74: da:88:46:a4:ba:85:76:9c:9f:c9:b8:f4:19:84:57: e2:d2:5b:a0:2e:11:3a:03:98:b3:89:9b:75:71:c6: dd:09:3a:26:02:85:ca:07:a1:92:97:b1:17:64:0b: dc:8f:51:61:e4:d7:7c:b4:83:92:b2:fb:26:5e:b2: da:9c:11:e8:53:3a:6c:c4:05:5b:e0:06:1f:04:d8: 79:f8:99:74:2c:ad:e0:24:5b:7a:8f:cf:73:66:77: 64:f2:8b:b4:1b:cc:1f:de:19:af:b5:11:8f:cc:17: 5a:e1:5f:b1:98:28:6b:cc:e2:a3:bb:ff:b3:ae:dd: 13:83:ad:9f:f4:4e:a0:42:e9:d7:74:c3:cc:0b:7e: 57:d2:b9:4a:1a:a5:6a:7b:ee:27:04:56:08:42:26: bc:dd:84:70:7d:56:f0:c3:c5:7e:ab:c4:80:33:9c: 1e:f5:62:11:b1:8d:8e:ee:50:b6:dc:3f:fd:af:70: 91:a9:e9:c6:89:6a:8c:28:7d:8b:6d:c5:7f:c6:08: b8:ef:93:3a:c3:39:c6:45:ae:a3:0d:2c:09:4b:1f: b3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:98:E6:B7:56:95:D6:74:2E:33:88:D7:30:20:58:1C:C5:9D:F6:D4 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:ab:9e:48:f4:cb:9f:40:0f:93:6a:58:63:74:1b:03:b6:aa: d7:ca:26:2e:a1:f7:df:96:ad:14:34:73:b9:df:b2:9f:e8:7d: 33:69:7e:5b:11:dd:5a:31:04:25:84:f1:dc:82:ce:94:0a:a9: f5:38:b1:a7:6c:51:b0:77:56:2b:62:77:4e:83:79:50:9e:c7: 55:65:55:b1:6c:0d:23:45:df:ba:77:87:ac:a0:d7:97:c1:36: e4:2a:53:49:b0:a3:f7:ec:ef:e7:ab:f8:90:5c:df:ce:2f:d1: fa:f7:9f:6a:2d:b6:76:ee:2f:32:ad:a1:24:d9:3b:78:19:5f: f5:1f:39:35:90:75:84:59:06:92:cd:be:10:bf:26:3a:da:21: 46:47:ed:1f:4b:6c:4c:69:7c:7f:e3:db:af:b6:82:2b:a5:78: 87:81:3a:a6:d3:30:db:28:5c:33:1c:2a:c1:f0:89:f1:67:76: 50:b4:18:97:9f:2c:6a:a5:6f:58:76:bd:a2:dc:9a:6a:44:0c: 7c:37:31:28:dd:da:fc:2c:8a:6f:95:11:b5:d1:e9:72:f4:eb: a1:8a:af:e2:5c:87:ea:9e:53:25:34:b5:c4:a1:a0:2a:38:0c: 9f:4c:fb:05:c5:4a:53:63:82:ab:f0:11:9b:23:17:9c:b9:c7: 39:2f:90:b4 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQrGr5mC7KMpcFmCEiXdKGb5RrMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMDQxNTIzMjVaFw0yNTExMDUxNjA4MjVaMDMxMTAvBgNV BAMTKEVDOThFNkI3NTY5NUQ2NzQyRTMzODhENzMwMjA1ODFDQzU5REY2RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQjd5oh3EOnNCgeukHW+B+7egF 44MljKTDcAOWC3JAvadR3cFz3US64mJDdNqIRqS6hXacn8m49BmEV+LSW6AuEToD mLOJm3Vxxt0JOiYChcoHoZKXsRdkC9yPUWHk13y0g5Ky+yZestqcEehTOmzEBVvg Bh8E2Hn4mXQsreAkW3qPz3Nmd2Tyi7QbzB/eGa+1EY/MF1rhX7GYKGvM4qO7/7Ou 3RODrZ/0TqBC6dd0w8wLflfSuUoapWp77icEVghCJrzdhHB9VvDDxX6rxIAznB71 YhGxjY7uULbcP/2vcJGp6caJaowofYttxX/GCLjvkzrDOcZFrqMNLAlLH7OXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU7Jjmt1aV1nQuM4jXMCBYHMWd9tQwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jY2QzODg0YS1j Mzg1LTRiNjUtOTg2Ni00ZjYzODMxNzI2NzIvMC82Q0NEQzgyQkFFNzgwMEY3RDUw N0M3Mzc5MjQ4NjlCREVCNUE3NkVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlKueSPTLn0APk2pYY3Qb A7aq18omLqH335atFDRzud+yn+h9M2l+WxHdWjEEJYTx3ILOlAqp9Tixp2xRsHdW K2J3ToN5UJ7HVWVVsWwNI0XfuneHrKDXl8E25CpTSbCj9+zv56v4kFzfzi/R+vef ai22du4vMq2hJNk7eBlf9R85NZB1hFkGks2+EL8mOtohRkftH0tsTGl8f+Pbr7aC K6V4h4E6ptMw2yhcMxwqwfCJ8Wd2ULQYl58saqVvWHa9otyaakQMfDcxKN3a/CyK b5URtdHpcvTroYqv4lyH6p5TJTS1xKGgKjgMn0z7BcVKU2OCq/ARmyMXnLnHOS+Q tA== -----END CERTIFICATE-----Generated at Tue Nov 4 23:21:56 2025 by rpki-client