$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft File: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json) Hash identifier: YEc8weJhZ2F9oLEPWmW7n0YAvRhOnKy93zdo7bxEo/U= Subject key identifier: 1C:25:35:1E:10:2E:17:C4:FE:DD:B7:D2:90:84:DE:BE:55:EE:C3:31 Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Certificate serial: 48CA0E9D83F4BD569FE08976CBC2A1FD6F934893 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft Manifest number: 024D Signing time: Tue 04 Nov 2025 07:19:09 +0000 Manifest this update: Tue 04 Nov 2025 07:14:09 +0000 Manifest next update: Wed 05 Nov 2025 08:52:09 +0000 Files and hashes: 1: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: BOfTSY7wWayFslIYZyC++f09YnW0ZvOoQVsy6AzQanA=) 2: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: bYPPd9HcHavTcfcGpM+ulmmDEDFMIVr0C3fR7prPNz4=) 3: 326130643a623238373a656330303a3a2f34302d3430203d3e20323135363634.roa (hash: GOCABvoqojF3U9p5UEyXVqmO5f+8/wyeekfdSPGqQRY=) 4: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: UtcmwgPmmxIsh/ra+btug0leCQZCVTQekME41LiPWtU=) 5: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: w9vG5R+ld04vE5bty6ypULYHqbypPkVYfLs+nuqjo1I=) 6: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: U56VGJcjuLrEYPpG7oABc/1/udX8BKChn+eBmuJZDts=) 7: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: S10o6lJcne+SfvZMZmd0ndSNpfqn8OsjAJw8rNDdBSw=) 8: 326130643a623238373a656230303a3a2f34302d3430203d3e20323133373039.roa (hash: Nk6ANHp8DkJz6kDCL9bvYoWgqeyO4UOw/aVOiTsobgk=) 9: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: m2CiuFBjrlRavusUidV8mkbKXKHzyUUUhDYGNFwtBAs=) 10: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: kmFg1Ubyi8msuCXkZq9wTUwo9VmgSHMiCqLO0oSubS4=) 11: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: Q6Io7mv8dNkJZap1oGvqDaJWxZcBIoRNlU5W1SfkDVo=) 12: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: BJe1bO6YYCEXeriSlULaZwS25Q4hRdnweRF5hyXEuDY=) 13: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: ItyIHbG/IJlKjOf6vhLnjpZ9k/lt97Z65upW37DdGzA=) 14: 326130643a623238373a656363303a3a2f34322d3432203d3e20323135363634.roa (hash: rHhBb1bMQectXohqdqgX13X6ENYXH/z7I15ReI0F4QU=) 15: 326130643a623238373a646164303a3a2f34342d3434203d3e20323038343337.roa (hash: Lh+NThTArglnDdFNJgAbksxydedvZ3VhoYilxW6dgHQ=) 16: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: YeBU5ew7EbaM3M5c2zGWzk0Q7RzGkO4TGKp/4byQ64k=) 17: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: JAmgJM2VGcbQzWkOuFvV1aRU7IhMtvcEw/0vm9hTp3I=) 18: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: V4bF3gDy6FE6zlNg9r0xUvpdAXLZEuLnN1FQtQz0KTM=) 19: 326130643a623238373a646430303a3a2f34302d3430203d3e20323136333039.roa (hash: mpzPSr1CBW6Ka5Te0DE52rLBHWk7ArDQlInbkbsiPzA=) 20: AS41720.asa (hash: R9jFblFZaPwUK6Huk1SWnasBO6ka9sffBE6ldnurUoM=) 21: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: JNRd26hu5UclLm2ralvA5Swgz/zS0HyqV27DJFHZj6c=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 08:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ca:0e:9d:83:f4:bd:56:9f:e0:89:76:cb:c2:a1:fd:6f:93:48:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Validity Not Before: Nov 4 07:14:09 2025 GMT Not After : Nov 5 08:52:09 2025 GMT Subject: CN=1C25351E102E17C4FEDDB7D29084DEBE55EEC331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:78:23:c6:ea:f3:55:3d:c0:c5:8a:3f:85:23: f8:59:2f:4a:4d:6d:ca:cf:d2:ee:50:24:b4:4e:48: 44:32:5d:49:8b:41:b0:51:75:cf:36:f5:23:df:2d: 72:4e:6c:9f:52:ca:37:96:62:25:6f:f5:db:56:a2: a8:72:72:4b:24:d2:c4:f3:f2:db:ad:fe:9f:38:f7: 2c:64:99:3b:e5:9f:8c:37:10:79:0b:7a:5d:92:22: 7a:9f:c1:15:d2:47:25:31:1f:a0:2c:07:81:25:2e: c8:04:99:30:26:f5:58:2f:a2:dc:36:14:16:e3:ff: 3a:b0:cb:f9:ef:7c:45:1a:8d:59:ec:0a:49:d6:a5: f0:24:94:15:a4:19:f2:7c:03:b2:d2:a2:15:7f:ef: ed:dc:36:da:4b:23:74:41:c8:93:19:d7:3a:b8:12: af:c6:70:01:14:1a:5e:a7:ae:08:a7:d8:6a:57:a8: 1f:d3:33:f8:c5:58:6a:25:4e:d8:6b:bb:e7:c0:d4: 78:71:37:59:fc:72:1c:1f:1d:50:1c:f8:ee:9c:fd: 9f:8b:d3:8f:3c:db:7a:eb:41:60:66:02:d2:5b:cc: a8:fe:90:4c:65:1b:e9:2a:bd:e2:a0:f7:2d:30:8c: 5e:d6:35:04:a1:79:fb:f5:2c:3a:29:f1:44:4a:e1: dd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:25:35:1E:10:2E:17:C4:FE:DD:B7:D2:90:84:DE:BE:55:EE:C3:31 X509v3 Authority Key Identifier: keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:25:a2:98:90:4c:b7:2a:da:2e:d0:8b:43:71:c9:1c:78:c6: ff:ed:11:ac:ae:4e:f0:2b:7e:25:f9:17:7b:e9:49:50:3a:68: 01:94:66:21:1f:d7:f3:50:aa:67:6b:7a:62:e4:a5:f5:f7:f5: 83:b5:fa:dc:a2:5d:d8:d4:22:84:8f:16:5a:92:b0:dd:56:3b: 5b:f3:36:47:ae:e8:45:fe:45:08:c3:da:64:0b:4d:74:6c:55: ae:12:84:a3:8d:a2:34:e3:7a:f3:f4:5b:29:aa:5f:5a:ba:3e: b4:9a:cd:85:8f:6d:59:32:38:bb:57:55:93:99:56:19:1a:39: a7:91:58:b1:53:a5:9e:c1:1a:a5:fd:68:87:1d:f5:80:58:cd: d2:d8:ff:fb:92:f6:be:c1:8d:ca:b5:6b:a8:79:f9:f0:dd:fc: e0:32:f5:66:23:79:38:5f:28:5c:99:90:ad:69:d4:72:84:fc: 85:6f:d2:69:ac:3a:25:f0:1d:73:ee:ff:b9:57:ba:d5:17:22: d9:5e:e7:12:52:45:91:81:08:23:85:37:ab:6a:61:91:4e:98: 0b:0a:00:c6:ad:bb:80:15:a4:05:0f:a4:1d:50:96:ea:3d:2c: 6f:e3:85:a4:e7:76:16:70:2c:e6:72:5c:b5:8e:f4:c0:4b:23: 24:13:a8:4b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUSMoOnYP0vVaf4Il2y8Kh/W+TSJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjZGQ5YzE5M2RhOTE4NWE0YWMxNWIyYWRlODc1ZmU5 N2I2ZjQ5MTAeFw0yNTExMDQwNzE0MDlaFw0yNTExMDUwODUyMDlaMDMxMTAvBgNV BAMTKDFDMjUzNTFFMTAyRTE3QzRGRUREQjdEMjkwODRERUJFNTVFRUMzMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCveCPG6vNVPcDFij+FI/hZL0pN bcrP0u5QJLROSEQyXUmLQbBRdc829SPfLXJObJ9SyjeWYiVv9dtWoqhycksk0sTz 8tut/p849yxkmTvln4w3EHkLel2SInqfwRXSRyUxH6AsB4ElLsgEmTAm9Vgvotw2 FBbj/zqwy/nvfEUajVnsCknWpfAklBWkGfJ8A7LSohV/7+3cNtpLI3RByJMZ1zq4 Eq/GcAEUGl6nrgin2GpXqB/TM/jFWGolTthru+fA1HhxN1n8chwfHVAc+O6c/Z+L 048823rrQWBmAtJbzKj+kExlG+kqveKg9y0wjF7WNQShefv1LDop8URK4d2/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUHCU1HhAuF8T+3bfSkITevlXuwzEwHwYDVR0j BBgwFoAUiM3ZwZPakYWkrBWyreh1/pe29JEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTZhZmYyMzQtNjFjNS00MjkwLThhNmQtNWYyYjkwMjcz MjJmLzAvODhDREQ5QzE5M0RBOTE4NUE0QUMxNUIyQURFODc1RkU5N0I2RjQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNM1p3WlBha1lXa3JCV3lyZWgxX3Bl MjlKRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lNmFmZjIzNC02 MWM1LTQyOTAtOGE2ZC01ZjJiOTAyNzMyMmYvMC84OENERDlDMTkzREE5MTg1QTRB QzE1QjJBREU4NzVGRTk3QjZGNDkxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPyWimJBMtyraLtCLQ3HJ HHjG/+0RrK5O8Ct+JfkXe+lJUDpoAZRmIR/X81CqZ2t6YuSl9ff1g7X63KJd2NQi hI8WWpKw3VY7W/M2R67oRf5FCMPaZAtNdGxVrhKEo42iNON68/RbKapfWro+tJrN hY9tWTI4u1dVk5lWGRo5p5FYsVOlnsEapf1ohx31gFjN0tj/+5L2vsGNyrVrqHn5 8N384DL1ZiN5OF8oXJmQrWnUcoT8hW/Saaw6JfAdc+7/uVe61Rci2V7nElJFkYEI I4U3q2phkU6YCwoAxq27gBWkBQ+kHVCW6j0sb+OFpOd2FnAs5nJctY70wEsjJBOo Sw== -----END CERTIFICATE-----Generated at Wed Nov 5 00:37:56 2025 by rpki-client