$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft File: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft (raw, json) Hash identifier: 85fzhkQy3Py/HKb1+rEhFCfLVaONVJ4NhJgFxAWsQYY= Subject key identifier: 4F:7B:62:A2:91:B2:1D:DD:45:56:77:A7:D3:4D:F6:7C:33:52:DF:CD Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Certificate serial: 6A2BFC9F60CC9099D5461F4F74CB19060DDADADC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft Manifest number: 03B6 Signing time: Fri 13 Jun 2025 20:09:20 +0000 Manifest this update: Fri 13 Jun 2025 20:04:20 +0000 Manifest next update: Sat 14 Jun 2025 23:25:20 +0000 Files and hashes: 1: 3138352e3134392e3135332e302f32342d3234203d3e203434373731.roa (hash: 3LQCLtbZ2cAzmsqD8inTKmHS0+b4RIJVefCUUonuvB0=) 2: 38392e3131362e322e302f32332d3233203d3e203135343139.roa (hash: twheygdBU9M/hWK8PwEKS7vel1IBGYLsGKuF6NDPdmA=) 3: 38392e3131362e342e302f32322d3232203d3e203135343139.roa (hash: S7PYQmgyaS+nUukOrNi+7gU0SVsm2vupfOTXwPtPOXM=) 4: 38392e3131362e31392e302f32342d3234203d3e203135343139.roa (hash: 4JL3Gtu7UsX3IaHs3LaQwmdxUfCfFV6YWJerzJoc+wE=) 5: 3138352e3134392e3135332e302f32342d3234203d3e203135343430.roa (hash: ld9bmw/lU5ViE7fFfnUAARe92vzpSXeZ47xTrIGHE2Y=) 6: 38322e3134302e3138392e302f32342d3234203d3e203135343139.roa (hash: q/tmnbq1kdd2hUMwbcuSKcZt7pux1EaGGpLbn7IfofI=) 7: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl (hash: AnhwSGfy6+tsZK0ltqAbobKrn0mNOwhuMv5VkZePs48=) 8: 38322e3134302e3133312e302f32342d3234203d3e203135343139.roa (hash: YcmyLeFBQ+WK9MxW4qT13yT/CsdMqFWcCNcHges7cNY=) 9: 3138352e3134392e3135342e302f32342d3234203d3e203434373731.roa (hash: Pgs5ueHQXHOzRUAnFpUKAel9Ig4WE+HMpXX4wHeR3SY=) 10: 3231372e392e3235342e302f32332d3233203d3e203135343139.roa (hash: iksl6QO5bGAwqBp6Vth9mckUoVZxpFnDxq6gmgw5QDs=) 11: 3138352e3134392e3135332e302f32342d3234203d3e203133313934.roa (hash: DudKC7EbN/x1z3E3UcohZZDxNJCJJwujdDPss+8DrkI=) 12: 38392e3131362e34312e302f32342d3234203d3e203135343139.roa (hash: nrTdofG3QiyT59ifvXqBtX8pF4lYbmqFJc6mO1yyOW0=) 13: 38392e3131362e31352e302f32342d3234203d3e203135343139.roa (hash: /LejqbWiFUxs1DgkjzVItnmcQXCtVjOkQxj/fIk9rAQ=) 14: 326130323a323633303a3a2f32392d3239203d3e203135343139.roa (hash: 8htEN27nXC1XFUYvScmaKLGazPRUUosEipnSlN6XgBk=) 15: 38392e3131362e34322e302f32332d3233203d3e203135343139.roa (hash: dqiC7sfkexEdY4bNAfWo7TkIe5GTWHX5uIAGfupS9Ro=) 16: 3231372e392e3234312e302f32342d3234203d3e203135343139.roa (hash: hFAW06mmhAPSV/HJ4B8aC2PvIR5CrcKx3FcqsTikSiM=) 17: 38392e3131362e3131362e302f32322d3232203d3e203135343139.roa (hash: +6pKiWIr1xfpXpXCXiVMVMi0tFetJIO1JWmpuLH4c10=) 18: 3138352e3134392e3135322e302f32322d3232203d3e203135343139.roa (hash: yiPh36TU1+o+jLX45pyYr1yhJEOI86BPrMUwrS94mMI=) 19: D34606949D385DB42714FE71274FAC9948EF279C.cer (hash: mr8O2GLITID87EQbUR0mW/IyDelg6k8ezJcKyZbdo9E=) 20: 38392e3131362e312e302f32342d3234203d3e203135343139.roa (hash: QlNtxapPtCDVmKsd/rR7Y2Bq1QIkmg64gwg6mpWc9ZY=) 21: 3138352e3134392e3135352e302f32342d3234203d3e203434373731.roa (hash: W9T8aPnkMAlNbGOA+isd3U8U+YdKRxlDW0/+vHw4iGg=) 22: 38392e3131362e31362e302f32332d3233203d3e203135343139.roa (hash: 7gdiZpTYF4VKwdmEsTHKuwi6oAiZC6mVLx4cpcdl/GE=) 23: 38362e33382e332e302f32342d3234203d3e203135343139.roa (hash: 1jWpw+W9zeIRwNdxwEeWvA1uKZ5XVqeLW/yed0hU+d4=) 24: 38362e33382e382e302f32312d3231203d3e203135343139.roa (hash: uWYPVYjRnhouz2kB1gip220mm9ixJ1+yxtSXIITlxEw=) 25: 3231372e392e3234322e302f32342d3234203d3e203135343139.roa (hash: mOAttZBNx/CTeO/Z3xtwFj9TNAzOHD7wWSzttDopHBY=) 26: 326130323a323633303a3a2f33322d3332203d3e203135343139.roa (hash: qWp9paAJXWyG6T4NlWTD/O+mrcUKf+wb2OOSJ/RUTQM=) 27: 38322e3134302e3137382e302f32342d3234203d3e203135343139.roa (hash: kVZlSJSrWOIFgbVyyqSUiD6jECTpvfhx5mx8hRL1cGE=) 28: 38392e3131362e31322e302f32332d3233203d3e203135343139.roa (hash: vCrLMX0eSFK/WsSjH4NPI6BnYmwIN7ZEFJbozFxO6uE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 23:25:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:2b:fc:9f:60:cc:90:99:d5:46:1f:4f:74:cb:19:06:0d:da:da:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Validity Not Before: Jun 13 20:04:20 2025 GMT Not After : Jun 14 23:25:20 2025 GMT Subject: CN=4F7B62A291B21DDD455677A7D34DF67C3352DFCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4c:f2:a6:48:85:25:f6:ea:48:46:22:09:87: 7b:1a:52:ef:62:e7:91:4b:b8:a5:93:3e:3a:5d:19: 5a:a3:27:63:61:d5:c4:3a:1d:43:c4:1b:a3:99:6d: 9b:2d:30:05:47:ef:17:a1:74:b4:8b:0d:3f:f3:e0: e5:01:95:3b:6d:94:c2:53:cb:f1:90:3a:af:c7:30: 63:72:83:6b:0e:11:00:b3:e8:bd:64:54:3a:30:e2: 92:2f:3d:3b:23:b2:78:88:a3:39:4d:b7:d8:39:4d: fb:e9:3c:68:19:56:39:1c:25:22:8e:25:ec:0b:d1: d9:e2:a6:8d:90:34:d2:15:c3:71:12:25:9f:9c:57: 8f:58:e0:fa:eb:a1:27:8c:c5:71:0f:81:79:ad:52: eb:0f:55:50:ee:96:ea:f5:04:5e:60:a5:05:37:0b: fe:e5:8c:fb:02:92:c9:b4:77:e1:40:af:43:ca:a4: 15:b1:26:75:f0:95:45:ce:c1:fb:44:63:c7:c4:b3: 20:8b:b7:33:bf:1e:13:43:e2:b3:ff:69:a8:a4:4b: 73:55:82:04:2a:51:b5:8a:57:fe:82:8a:41:fd:27: 10:91:b1:33:ee:67:24:0f:fb:be:92:a4:88:84:c2: 61:41:f7:87:dd:11:9c:bd:5b:f8:01:28:dc:f5:8e: 0b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:7B:62:A2:91:B2:1D:DD:45:56:77:A7:D3:4D:F6:7C:33:52:DF:CD X509v3 Authority Key Identifier: keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:41:dc:0d:83:03:72:a3:84:34:97:08:06:e7:4f:01:74:7b: a8:76:1e:6d:34:13:98:9b:cd:e4:7c:7d:a4:17:6f:af:2a:d0: e9:b2:5c:ba:d6:d5:ad:31:cb:55:ef:72:1f:e7:9f:28:72:47: b3:ff:9d:e9:8c:44:dd:3b:10:f9:fe:e5:f8:3d:04:ba:ac:51: c0:bd:86:9f:9a:8c:42:2e:17:ce:b0:6a:9a:d2:09:1d:d7:0e: f6:7e:ba:a3:72:18:d9:98:75:92:b6:dd:2e:a6:aa:20:4c:7e: b9:72:6c:93:ab:ee:84:a0:ad:8b:ea:e8:a0:0e:68:bb:1e:79: f6:80:59:d9:49:76:dc:91:84:c7:12:ea:4c:1f:33:66:f7:c1: 62:88:c5:20:5d:da:4c:31:4f:c6:54:6b:78:a5:7b:75:17:29: a6:10:fc:6f:ac:69:57:71:98:8d:8a:c5:a9:30:c0:59:c3:1b: 2b:b5:63:9d:26:a5:60:70:a5:4a:a2:38:91:05:f8:56:5b:07: 63:f6:72:5a:a8:c7:a4:6a:47:a9:5c:25:5b:0a:60:ac:08:48: 78:a7:45:d4:cd:05:f1:50:2e:19:01:eb:e1:6d:ac:fb:a9:d8: dc:bc:49:e0:b4:75:f4:a9:e3:8f:d1:7a:03:7b:1c:ff:a5:2f: 32:b4:8a:bc -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUaiv8n2DMkJnVRh9PdMsZBg3a2twwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmODU5OTdiMWI5YjM1OGUxYzQzZjM2NzY1YWEwYTRh MDIxNDRhZTAeFw0yNTA2MTMyMDA0MjBaFw0yNTA2MTQyMzI1MjBaMDMxMTAvBgNV BAMTKDRGN0I2MkEyOTFCMjFEREQ0NTU2NzdBN0QzNERGNjdDMzM1MkRGQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZTPKmSIUl9upIRiIJh3saUu9i 55FLuKWTPjpdGVqjJ2Nh1cQ6HUPEG6OZbZstMAVH7xehdLSLDT/z4OUBlTttlMJT y/GQOq/HMGNyg2sOEQCz6L1kVDow4pIvPTsjsniIozlNt9g5TfvpPGgZVjkcJSKO JewL0dnipo2QNNIVw3ESJZ+cV49Y4PrroSeMxXEPgXmtUusPVVDulur1BF5gpQU3 C/7ljPsCksm0d+FAr0PKpBWxJnXwlUXOwftEY8fEsyCLtzO/HhND4rP/aaikS3NV ggQqUbWKV/6CikH9JxCRsTPuZyQP+76SpIiEwmFB94fdEZy9W/gBKNz1jgtbAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUT3tiopGyHd1FVnen0032fDNS380wHwYDVR0j BBgwFoAUnfhZl7G5s1jhxD82dlqgpKAhRK4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDAyZTBiYTMtZmU2MC00NWIxLTkxNjAtODY4YTJmOGE0 M2IxLzMvOURGODU5OTdCMUI5QjM1OEUxQzQzRjM2NzY1QUEwQTRBMDIxNDRBRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25maFpsN0c1czFqaHhEODJkbHFncEtB aFJLNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJlMGJhMy1m ZTYwLTQ1YjEtOTE2MC04NjhhMmY4YTQzYjEvMy85REY4NTk5N0IxQjlCMzU4RTFD NDNGMzY3NjVBQTBBNEEwMjE0NEFFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARUHcDYMDcqOENJcIBudP AXR7qHYebTQTmJvN5Hx9pBdvryrQ6bJcutbVrTHLVe9yH+efKHJHs/+d6YxE3TsQ +f7l+D0EuqxRwL2Gn5qMQi4XzrBqmtIJHdcO9n66o3IY2Zh1krbdLqaqIEx+uXJs k6vuhKCti+rooA5oux559oBZ2Ul23JGExxLqTB8zZvfBYojFIF3aTDFPxlRreKV7 dRcpphD8b6xpV3GYjYrFqTDAWcMbK7VjnSalYHClSqI4kQX4VlsHY/ZyWqjHpGpH qVwlWwpgrAhIeKdF1M0F8VAuGQHr4W2s+6nY3LxJ4LR19Knjj9F6A3sc/6UvMrSK vA== -----END CERTIFICATE-----Generated at Sat Jun 14 10:44:51 2025 by rpki-client