$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft File: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json) Hash identifier: OAfc3rNdJd9u9I5BVaHQhbGdvaNOnDIYzd/c5JDmGGk= Subject key identifier: E0:A5:07:86:E2:1B:3D:3A:75:3E:67:AE:A4:0D:18:A0:58:D5:CB:F1 Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Certificate serial: 04B1ED2860C2E517763BA7C361463912D51C3403 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft Manifest number: 01CF Signing time: Sun 03 Aug 2025 18:42:37 +0000 Manifest this update: Sun 03 Aug 2025 18:37:37 +0000 Manifest next update: Mon 04 Aug 2025 21:46:37 +0000 Files and hashes: 1: 326130643a623238373a646164303a3a2f34342d3434203d3e20323038343337.roa (hash: Lh+NThTArglnDdFNJgAbksxydedvZ3VhoYilxW6dgHQ=) 2: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: JAmgJM2VGcbQzWkOuFvV1aRU7IhMtvcEw/0vm9hTp3I=) 3: 326130643a623238373a656230303a3a2f34302d3430203d3e20323133373039.roa (hash: Nk6ANHp8DkJz6kDCL9bvYoWgqeyO4UOw/aVOiTsobgk=) 4: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: iavCedfpEd5k0rIG/kL5F/xxOAMPmZq43N15rLvPbic=) 5: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: S10o6lJcne+SfvZMZmd0ndSNpfqn8OsjAJw8rNDdBSw=) 6: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: YeBU5ew7EbaM3M5c2zGWzk0Q7RzGkO4TGKp/4byQ64k=) 7: 326130643a623238373a656330303a3a2f34302d3430203d3e20323135363634.roa (hash: GOCABvoqojF3U9p5UEyXVqmO5f+8/wyeekfdSPGqQRY=) 8: AS41720.asa (hash: +RbH8buX1T5kTWMGsS+k2hctRH6+R8V1cu3+Qe3+/Rs=) 9: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: bYPPd9HcHavTcfcGpM+ulmmDEDFMIVr0C3fR7prPNz4=) 10: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: U56VGJcjuLrEYPpG7oABc/1/udX8BKChn+eBmuJZDts=) 11: 326130643a623238373a646430303a3a2f34302d3430203d3e20323136333039.roa (hash: mpzPSr1CBW6Ka5Te0DE52rLBHWk7ArDQlInbkbsiPzA=) 12: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: WtqgmDwc3f4nCSOQ8ixLkNx8sXt7FaBWfi7I6des1c8=) 13: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: V9qbYBKL6tKnrJoE3wEwrRCPOpmYJNNYT95kZWHLlE0=) 14: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: BJe1bO6YYCEXeriSlULaZwS25Q4hRdnweRF5hyXEuDY=) 15: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: ItyIHbG/IJlKjOf6vhLnjpZ9k/lt97Z65upW37DdGzA=) 16: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: UtcmwgPmmxIsh/ra+btug0leCQZCVTQekME41LiPWtU=) 17: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: V4bF3gDy6FE6zlNg9r0xUvpdAXLZEuLnN1FQtQz0KTM=) 18: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: kmFg1Ubyi8msuCXkZq9wTUwo9VmgSHMiCqLO0oSubS4=) 19: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: m2CiuFBjrlRavusUidV8mkbKXKHzyUUUhDYGNFwtBAs=) 20: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: o5Ji9Nl0S0iVZZtmrV/Dia6lTq3wC3uyRf91AZlTL/E=) 21: 326130643a623238373a656363303a3a2f34322d3432203d3e20323135363634.roa (hash: rHhBb1bMQectXohqdqgX13X6ENYXH/z7I15ReI0F4QU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 04 Aug 2025 21:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:b1:ed:28:60:c2:e5:17:76:3b:a7:c3:61:46:39:12:d5:1c:34:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Validity Not Before: Aug 3 18:37:37 2025 GMT Not After : Aug 4 21:46:37 2025 GMT Subject: CN=E0A50786E21B3D3A753E67AEA40D18A058D5CBF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c4:a0:36:2c:fb:51:b9:9b:e1:d3:60:20:b4: 25:96:59:49:d1:ab:e1:70:aa:9e:4d:d8:e0:a1:5f: cd:d3:c2:80:96:ed:c8:96:9f:ec:a4:ad:ce:97:0e: 91:ce:c0:fe:57:89:02:69:ac:3c:e3:d1:23:7a:ad: f7:a4:be:8b:04:28:ec:6b:22:ad:c5:b8:a2:b9:6d: e6:66:7c:5f:9a:08:3d:36:c9:42:99:a4:4c:89:a5: 3e:02:f7:d1:e8:83:4b:02:a2:f4:c0:d7:19:31:ef: bb:3b:bb:aa:b5:38:1b:36:07:a5:b7:89:4b:af:7b: c3:1a:a8:ce:5e:ce:0a:e9:1f:15:11:27:4f:9e:6c: 52:fb:2a:ff:a1:90:92:bd:4b:c5:21:58:92:f3:03: ea:1a:c5:85:2e:7b:ce:37:b2:86:43:68:27:8b:6a: 22:1a:18:da:a5:4e:92:7e:9c:60:38:66:c3:4c:78: e1:35:16:91:d7:8a:0c:b8:ff:22:eb:93:ad:ad:5b: 8e:83:99:e6:a1:31:9e:3b:6a:1e:76:e9:ff:2a:4b: 1a:dd:b8:08:c7:70:49:71:6f:e0:5c:b0:a8:d8:17: 37:1e:46:e0:d4:99:b3:7f:28:d6:4e:7b:4a:2a:13: fd:6a:6c:85:aa:c1:9f:8c:8f:d5:8f:08:8a:91:6b: d3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A5:07:86:E2:1B:3D:3A:75:3E:67:AE:A4:0D:18:A0:58:D5:CB:F1 X509v3 Authority Key Identifier: keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:85:2e:c2:fc:38:7f:e7:c1:6f:23:ab:f0:23:3e:47:66:6d: 9a:75:95:0b:c3:a7:5d:65:fe:68:4c:b0:8f:0a:4f:5d:74:91: 90:00:0b:3d:be:14:de:af:1a:98:23:97:c2:d9:50:0b:f9:9f: cc:f9:00:ac:b7:b7:e4:11:93:b8:4d:d8:51:16:2e:1a:90:95: 08:26:c8:0e:1a:12:4b:de:9a:d6:d3:2e:89:e6:a2:18:b0:04: c6:1e:78:48:97:76:db:25:c5:34:f0:33:15:de:2b:bc:fa:63: 9a:73:63:bc:3a:d1:84:31:12:c8:fd:85:13:9b:18:ff:ff:4b: a4:b5:66:31:68:e7:b3:08:0b:e3:ed:68:2a:ed:c6:4a:1c:6e: fe:fb:9a:25:61:2e:4b:b8:c2:00:de:ea:98:d5:16:0f:49:80: 00:ce:90:f4:48:0c:db:08:2d:a6:aa:87:fb:6e:f0:a9:63:ed: 44:63:fd:5c:85:76:2d:b0:74:01:62:7a:11:03:6f:55:f5:d2: 15:72:78:6e:1b:ff:db:ab:04:6d:5d:b2:d6:54:4d:94:1e:5f: 70:77:d4:79:96:66:78:31:07:0c:08:cb:53:e9:e2:08:03:57: 90:b2:6b:fc:71:d2:ca:f1:b4:3f:66:36:bd:20:42:14:93:f2: 5d:a5:0b:22 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBLHtKGDC5Rd2O6fDYUY5EtUcNAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjZGQ5YzE5M2RhOTE4NWE0YWMxNWIyYWRlODc1ZmU5 N2I2ZjQ5MTAeFw0yNTA4MDMxODM3MzdaFw0yNTA4MDQyMTQ2MzdaMDMxMTAvBgNV BAMTKEUwQTUwNzg2RTIxQjNEM0E3NTNFNjdBRUE0MEQxOEEwNThENUNCRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOxKA2LPtRuZvh02AgtCWWWUnR q+Fwqp5N2OChX83TwoCW7ciWn+ykrc6XDpHOwP5XiQJprDzj0SN6rfekvosEKOxr Iq3FuKK5beZmfF+aCD02yUKZpEyJpT4C99Hog0sCovTA1xkx77s7u6q1OBs2B6W3 iUuve8MaqM5ezgrpHxURJ0+ebFL7Kv+hkJK9S8UhWJLzA+oaxYUue843soZDaCeL aiIaGNqlTpJ+nGA4ZsNMeOE1FpHXigy4/yLrk62tW46DmeahMZ47ah526f8qSxrd uAjHcElxb+BcsKjYFzceRuDUmbN/KNZOe0oqE/1qbIWqwZ+Mj9WPCIqRa9NHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU4KUHhuIbPTp1PmeupA0YoFjVy/EwHwYDVR0j BBgwFoAUiM3ZwZPakYWkrBWyreh1/pe29JEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTZhZmYyMzQtNjFjNS00MjkwLThhNmQtNWYyYjkwMjcz MjJmLzAvODhDREQ5QzE5M0RBOTE4NUE0QUMxNUIyQURFODc1RkU5N0I2RjQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNM1p3WlBha1lXa3JCV3lyZWgxX3Bl MjlKRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lNmFmZjIzNC02 MWM1LTQyOTAtOGE2ZC01ZjJiOTAyNzMyMmYvMC84OENERDlDMTkzREE5MTg1QTRB QzE1QjJBREU4NzVGRTk3QjZGNDkxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVoUuwvw4f+fBbyOr8CM+ R2ZtmnWVC8OnXWX+aEywjwpPXXSRkAALPb4U3q8amCOXwtlQC/mfzPkArLe35BGT uE3YURYuGpCVCCbIDhoSS96a1tMuieaiGLAExh54SJd22yXFNPAzFd4rvPpjmnNj vDrRhDESyP2FE5sY//9LpLVmMWjnswgL4+1oKu3GShxu/vuaJWEuS7jCAN7qmNUW D0mAAM6Q9EgM2wgtpqqH+27wqWPtRGP9XIV2LbB0AWJ6EQNvVfXSFXJ4bhv/26sE bV2y1lRNlB5fcHfUeZZmeDEHDAjLU+niCANXkLJr/HHSyvG0P2Y2vSBCFJPyXaUL Ig== -----END CERTIFICATE-----Generated at Mon Aug 4 11:11:09 2025 by rpki-client