$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json) Hash identifier: +OJYGH2C9xbDxKUb6+EuKpy1RkcM8t/pBuoKowRaXI8= Subject key identifier: C7:39:A2:5A:3D:E5:9A:74:8B:E7:B4:6D:0F:A3:95:C1:91:3D:25:9B Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: 343FB1E4B6EA6FD38886C6B37FE0C8837617458D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft Manifest number: 03AD Signing time: Tue 04 Nov 2025 06:32:06 +0000 Manifest this update: Tue 04 Nov 2025 06:27:06 +0000 Manifest next update: Wed 05 Nov 2025 09:39:06 +0000 Files and hashes: 1: 3138352e31332e3232352e302f32342d3234203d3e203631333137.roa (hash: 8TzKoFnFzYaSWN5mBXGHVTu7YevWpqGi2XUkHCPKssM=) 2: 3135392e3235332e372e302f32342d3234203d3e20323134313433.roa (hash: 8/3XzRXXjmYpSthB/PqRmvioB+R4a98BuFhtWRNYmtk=) 3: 3135392e3235332e362e302f32342d3234203d3e20323134313433.roa (hash: ium02BtB+GfbIHn2YGUt7i7of/NJnXnez2EEtYL+duE=) 4: 3138352e31332e3232342e302f32342d3234203d3e20313335333931.roa (hash: Y4VGjNKxdM1kt8f9/kG9Dub6HzXbG7OXpVqySki/RW4=) 5: 3135392e3235332e342e302f32342d3234203d3e20323134313433.roa (hash: JO9eMRAwPS+hZf1UF8eYFlm1nYrsRkC7Oj1Lhed/bAU=) 6: 3138352e31332e3232372e302f32342d3234203d3e2039333034.roa (hash: K2jdp87W7OWk11i68RJYc6WUM+0fdCVTP9+PN22bU6U=) 7: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: cKnNLC66X19KWTLeS9BLlyG6jkzxqkdJwZjUWCrZPHc=) 8: 3138352e31332e3232362e302f32342d3234203d3e20313532313739.roa (hash: kbUfx2g7/W6xr6BcRBqigrahrWSKqlZaZ80tT5+SQUk=) 9: 3135392e3235332e322e302f32342d3234203d3e20323134313433.roa (hash: qmuf0vkLJtyYNBk6lONse3deUisFPtDCWrL9dDMaewk=) 10: 3135392e3235332e332e302f32342d3234203d3e203533333536.roa (hash: uV5gP669aq0NtuCXuZBm6wWsNYwP/024H/522nPjCx8=) 11: 3135392e3235332e352e302f32342d3234203d3e203533333536.roa (hash: 9QDAlicDZU2dKA/slyHao02LhaPY7/2iCnESN6BbiqA=) 12: 3135392e3235332e312e302f32342d3234203d3e2039333034.roa (hash: dcYXeL7R4SgGVjoaZN9OWp91BkdwHsg557vymFY3FPQ=) 13: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: AVQaOMKUSZK9OGYB6H0rf5Q/XaHETUuSF070JYWHGHU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:3f:b1:e4:b6:ea:6f:d3:88:86:c6:b3:7f:e0:c8:83:76:17:45:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: Nov 4 06:27:06 2025 GMT Not After : Nov 5 09:39:06 2025 GMT Subject: CN=C739A25A3DE59A748BE7B46D0FA395C1913D259B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:77:15:be:88:be:63:e5:1f:bb:bd:47:0a:4d: 73:c1:b5:e6:2f:7e:02:17:cd:ae:12:ae:c3:25:e9: 0a:d8:20:02:8a:ed:67:e4:7b:3d:a2:f6:ef:df:b6: 95:1c:47:29:ec:3a:f9:a5:27:10:1f:52:a9:27:1e: e5:32:bd:d1:6f:48:74:bc:37:84:74:f5:66:39:c9: 20:15:d4:f1:31:2f:92:5b:83:35:e4:e5:92:b6:34: 17:64:45:32:39:8f:e7:b7:6b:55:ac:fd:12:f3:52: ab:2d:bd:05:f2:92:69:ea:47:b4:94:2b:b5:3f:64: 59:87:df:7f:9f:a2:c7:30:00:c4:8d:ca:7c:2a:af: eb:50:b4:ce:37:84:3f:8b:6d:ff:fb:05:58:f0:b1: d4:d9:c6:d0:e7:2e:36:84:b2:f9:07:48:be:31:55: 17:8d:db:34:ac:c8:7c:7f:0f:bc:dc:c0:8a:8f:bf: 1b:5c:b6:cc:3a:0b:00:15:15:2e:ab:63:f7:a9:42: c6:cf:8e:a9:07:d3:a4:2a:08:1b:7d:41:b2:c9:a7: 28:ef:85:34:56:fa:cf:9a:73:c6:a9:92:9d:b4:71: 33:29:a7:63:78:23:5a:36:03:a4:64:1d:e0:e7:ef: 87:dd:44:45:4b:ef:a9:12:93:7d:92:7a:b7:5d:2b: 89:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:39:A2:5A:3D:E5:9A:74:8B:E7:B4:6D:0F:A3:95:C1:91:3D:25:9B X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:19:e6:91:d2:bf:01:98:dd:a9:0e:98:d7:19:89:b1:8b:30: bd:f5:01:f8:14:49:72:86:70:da:2a:f4:90:a2:7c:3c:8d:f1: d5:9f:e3:7b:5a:ca:f6:f6:e8:72:98:65:df:d8:6f:e1:91:ce: 3b:0c:3d:d8:32:53:27:45:93:e2:8d:23:91:ee:78:d4:b1:bd: 67:4e:0e:5f:6c:53:f6:a2:a8:c5:ae:c8:36:f0:3c:e0:20:a8: 7c:95:36:4c:4e:1f:c1:c7:7e:f4:3d:a0:ad:67:d6:43:b7:da: 12:40:1e:be:c8:a9:3b:e3:ec:44:56:9f:f4:22:d4:1d:80:a2: ff:58:c9:d2:35:fa:fb:b9:4a:58:f0:7f:15:f4:4c:10:df:b7: 6d:a0:fe:2c:ea:4b:d9:ef:17:31:ea:b7:55:d6:9c:6e:98:42: 29:55:06:a8:d0:11:81:ef:67:f3:5b:44:ab:85:d2:63:9c:33: 1a:c3:b4:36:0e:ed:98:19:a5:b9:62:2e:ea:04:4a:cc:f7:23: f0:6d:df:fa:69:ed:0a:62:b2:59:31:b3:c0:f4:87:6e:63:84: 69:c6:d6:9d:00:72:6f:85:d9:6f:4d:9d:d7:c4:9d:bc:77:c7: a5:50:49:66:3d:b0:ca:bd:0a:7a:ee:39:ce:b9:7a:58:80:61: 26:8e:90:c3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUND+x5Lbqb9OIhsazf+DIg3YXRY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNTExMDQwNjI3MDZaFw0yNTExMDUwOTM5MDZaMDMxMTAvBgNV BAMTKEM3MzlBMjVBM0RFNTlBNzQ4QkU3QjQ2RDBGQTM5NUMxOTEzRDI1OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBdxW+iL5j5R+7vUcKTXPBteYv fgIXza4SrsMl6QrYIAKK7Wfkez2i9u/ftpUcRynsOvmlJxAfUqknHuUyvdFvSHS8 N4R09WY5ySAV1PExL5JbgzXk5ZK2NBdkRTI5j+e3a1Ws/RLzUqstvQXykmnqR7SU K7U/ZFmH33+foscwAMSNynwqr+tQtM43hD+Lbf/7BVjwsdTZxtDnLjaEsvkHSL4x VReN2zSsyHx/D7zcwIqPvxtctsw6CwAVFS6rY/epQsbPjqkH06QqCBt9QbLJpyjv hTRW+s+ac8apkp20cTMpp2N4I1o2A6RkHeDn74fdREVL76kSk32SerddK4m7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUxzmiWj3lmnSL57RtD6OVwZE9JZswHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdxnmkdK/AZjdqQ6Y1xmJ sYswvfUB+BRJcoZw2ir0kKJ8PI3x1Z/je1rK9vbocphl39hv4ZHOOww92DJTJ0WT 4o0jke541LG9Z04OX2xT9qKoxa7INvA84CCofJU2TE4fwcd+9D2grWfWQ7faEkAe vsipO+PsRFaf9CLUHYCi/1jJ0jX6+7lKWPB/FfRMEN+3baD+LOpL2e8XMeq3Vdac bphCKVUGqNARge9n81tEq4XSY5wzGsO0Ng7tmBmluWIu6gRKzPcj8G3f+mntCmKy WTGzwPSHbmOEacbWnQByb4XZb02d18SdvHfHpVBJZj2wyr0Keu45zrl6WIBhJo6Q ww== -----END CERTIFICATE-----Generated at Tue Nov 4 15:13:42 2025 by rpki-client