$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft File: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft (raw, json) Hash identifier: mvIobFkbzr1648T9FCx96II/OirYTy70Q8aRFL1ZHNk= Subject key identifier: 2C:1A:0C:10:F0:61:F2:C3:8C:8E:CD:61:69:75:DF:FC:19:A9:CB:96 Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Certificate serial: 393FDD682EFDCFB266F3A52C72CC493B89DE8767 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft Manifest number: 01F5 Signing time: Tue 04 Nov 2025 07:52:06 +0000 Manifest this update: Tue 04 Nov 2025 07:47:06 +0000 Manifest next update: Wed 05 Nov 2025 11:50:06 +0000 Files and hashes: 1: 3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa (hash: gI3QMk1nxnVJ3ar9nDADeDjafrF5rxSYgoW75rlLkBk=) 2: 34332e3233302e38352e302f32342d3234203d3e20323131343430.roa (hash: hoZQSGqkvoyh+Fwe28UicpO6RAJD80P7rklT/Di/mQU=) 3: 34332e3233302e38342e302f32342d3234203d3e203235313938.roa (hash: D5rxpe/mz9cZbwkoouLs3Io8a9VjYwAhmSHGosd1BJQ=) 4: 33312e32322e3130352e302f32342d3234203d3e20323135303236.roa (hash: 4XlIN+3Y2uvivj3jKKbdxnHiR3dRqeJ7/xmTE8uipj8=) 5: 33312e32322e3130372e302f32342d3234203d3e20313337353137.roa (hash: zucU5bamNfYRw/esvivyzaXHMAl8N0xQ+Q3coI+3JvA=) 6: 3130332e34392e3132392e302f32342d3234203d3e20313533373836.roa (hash: 8ciOgQf/5f2kkiTl0Q7pGFYfq76YJlE+KlbE9/JeEuM=) 7: 3130332e34392e3132382e302f32342d3234203d3e20313534303439.roa (hash: RP7fF4ljaFnG1QBw6wHJTYmQiSzsC+UtOPXQULgrH/c=) 8: 33312e32322e3131312e302f32342d3234203d3e20323135333535.roa (hash: brok2XUOzC0OAQs7efh1lP/TIOrHW70pJohRfs3tgEM=) 9: 33312e32322e3130382e302f32342d3234203d3e203432383331.roa (hash: y9uevaBeLo1M0NZi4w3HJOyvLkMWIaZEJFCi8snsYYY=) 10: 33312e32322e3131302e302f32342d3234203d3e2039333034.roa (hash: 4/DyfQef3JM+QDXadF+flhTmwriSDAeEuVFVt/FGtTg=) 11: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl (hash: KQ8B2GNVYcX5sg2/Dz+/OwVCDZtZi0lTjCrI9XlTI90=) 12: 34332e3233302e38362e302f32332d3234203d3e2033343931.roa (hash: BqbUmbythNNYP4WqssroNY2sOPvoyuRgXIRAVuIytpA=) 13: 33312e32322e3130392e302f32342d3234203d3e203432383331.roa (hash: iK+yx/VtDctRGDFOE/NGNWTyR4u7o2tFGRI6U0bUYZU=) 14: 33312e32322e3130362e302f32342d3234203d3e20323133353032.roa (hash: jNzQvK975k0nFSky/OYcsFfueNL1XvYeIp3mtR/7WPY=) 15: 33312e32322e3130342e302f32342d3234203d3e20313938303230.roa (hash: yHVodRBAsBlx/8p8lQvX33hmgwPZB9Uj6k/5yqbIyfs=) 16: 3130332e34392e3133302e302f32342d3234203d3e20323036303333.roa (hash: v7D054EN2gERBe7aLvFn0V17UtLvh1fmGSVfmRoK+KQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 11:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:3f:dd:68:2e:fd:cf:b2:66:f3:a5:2c:72:cc:49:3b:89:de:87:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Validity Not Before: Nov 4 07:47:06 2025 GMT Not After : Nov 5 11:50:06 2025 GMT Subject: CN=2C1A0C10F061F2C38C8ECD616975DFFC19A9CB96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c4:b0:07:76:fe:12:51:f0:d9:2b:57:0b:7b: 0e:b8:f9:9f:0f:97:ec:de:b5:16:89:3e:9e:16:a0: 5d:fb:5b:ce:f4:df:a3:f3:af:f7:a4:5c:8c:d6:9f: 28:dd:d1:10:cf:78:03:df:15:db:7d:dc:4a:08:22: ae:cb:a4:4d:55:03:bc:dd:98:c1:b0:28:5d:e5:92: e8:81:b2:73:0c:3f:1c:11:99:18:c5:80:fa:9e:80: fa:82:f7:d2:28:67:37:df:2e:e7:24:2f:39:fa:3b: 29:e9:51:5e:2d:9c:a3:d5:79:12:50:53:0b:ba:7c: cc:fc:ec:85:70:4b:22:ca:22:52:1c:58:5a:6e:d4: 7a:ca:07:69:53:91:de:09:69:6d:ed:8c:98:ae:81: 51:4c:7d:8e:ef:30:4a:f1:c5:aa:77:b5:a5:22:da: 96:68:7b:b2:0c:29:49:46:57:aa:a2:e4:e2:1f:fe: c2:5f:12:55:99:99:e8:62:c7:3b:41:07:54:0a:b7: d1:af:6e:35:18:45:c2:d1:19:85:55:e9:7c:c4:3e: 3d:36:16:87:c8:b6:83:b2:30:9b:1a:a2:93:c0:58: 08:89:ce:a4:e0:67:f1:8b:bc:30:eb:6d:41:ca:15: 3b:12:bb:65:06:52:c0:82:fd:a4:89:12:6e:ff:50: ae:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1A:0C:10:F0:61:F2:C3:8C:8E:CD:61:69:75:DF:FC:19:A9:CB:96 X509v3 Authority Key Identifier: keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:54:c1:19:63:3f:20:c4:ed:06:a4:2b:22:1c:4e:c6:5b:d5: 6e:75:84:f9:7f:48:1c:2d:54:47:c6:87:f6:11:56:93:3c:61: 70:37:aa:96:4b:5e:91:be:65:e9:f2:3d:c1:fe:4a:a0:36:79: 98:26:a8:76:13:36:c6:e9:7f:ad:b7:cb:a4:ba:f4:e8:54:44: fb:01:35:1c:06:c7:4b:73:db:49:e3:63:6d:a5:d3:d8:1b:aa: 55:d2:6e:dc:d4:c4:39:3f:78:8f:21:9f:85:9e:02:cd:bd:d1: 95:9b:70:8c:11:e4:19:ca:50:28:88:fe:84:01:87:b0:27:43: 17:73:17:1f:19:8b:63:78:3d:0f:5a:e2:e9:88:ed:24:53:8b: d4:fb:ec:32:be:8a:95:eb:fd:57:cb:5b:5c:2f:dd:1e:ab:43: c1:b6:22:c3:bb:d8:ce:df:2b:49:cb:c3:d4:90:7d:f0:a6:fa: ae:1f:74:1e:1d:7c:2b:c4:44:c0:d0:a2:e6:32:8b:a7:31:db: a5:c3:47:23:2c:cd:54:77:13:2a:98:4f:28:e1:bb:55:ff:cf: f1:3c:a7:58:e3:28:66:7e:76:da:d3:2c:b9:5e:03:72:e9:8e: 8e:ed:79:b8:90:c0:cb:88:1d:79:89:d8:08:64:08:f7:b8:ae: 10:45:f5:34 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOT/daC79z7Jm86UscsxJO4neh2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw YWVhYjI5ZDAeFw0yNTExMDQwNzQ3MDZaFw0yNTExMDUxMTUwMDZaMDMxMTAvBgNV BAMTKDJDMUEwQzEwRjA2MUYyQzM4QzhFQ0Q2MTY5NzVERkZDMTlBOUNCOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+xLAHdv4SUfDZK1cLew64+Z8P l+zetRaJPp4WoF37W87036Pzr/ekXIzWnyjd0RDPeAPfFdt93EoIIq7LpE1VA7zd mMGwKF3lkuiBsnMMPxwRmRjFgPqegPqC99IoZzffLuckLzn6OynpUV4tnKPVeRJQ Uwu6fMz87IVwSyLKIlIcWFpu1HrKB2lTkd4JaW3tjJiugVFMfY7vMErxxap3taUi 2pZoe7IMKUlGV6qi5OIf/sJfElWZmehixztBB1QKt9GvbjUYRcLRGYVV6XzEPj02 FofItoOyMJsaopPAWAiJzqTgZ/GLvDDrbUHKFTsSu2UGUsCC/aSJEm7/UK55AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQULBoMEPBh8sOMjs1haXXf/Bmpy5YwHwYDVR0j BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2 NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy cXNwMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYWZlYmRiNC02 ZjBiLTQwNGItOThlMi1hMjZiZTk0YTY2MjAvMC9DNzcwRjQzMzU4Qjk3QkEwQUE5 QkRDNjJCQkQ1MTFFOTBBRUFCMjlELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVTBGWM/IMTtBqQrIhxO xlvVbnWE+X9IHC1UR8aH9hFWkzxhcDeqlktekb5l6fI9wf5KoDZ5mCaodhM2xul/ rbfLpLr06FRE+wE1HAbHS3PbSeNjbaXT2BuqVdJu3NTEOT94jyGfhZ4Czb3RlZtw jBHkGcpQKIj+hAGHsCdDF3MXHxmLY3g9D1ri6YjtJFOL1PvsMr6Klev9V8tbXC/d HqtDwbYiw7vYzt8rScvD1JB98Kb6rh90Hh18K8REwNCi5jKLpzHbpcNHIyzNVHcT KphPKOG7Vf/P8TynWOMoZn522tMsuV4DcumOju15uJDAy4gdeYnYCGQI97iuEEX1 NA== -----END CERTIFICATE-----Generated at Tue Nov 4 23:32:34 2025 by rpki-client