$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft File: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft (raw, json) Hash identifier: lmYp1CQUKWxKHMX5wh2gTh13gPL7N1bIcQgL0QyY7Iw= Subject key identifier: 24:AA:CB:71:A0:BF:4E:9D:BF:34:AE:48:7C:5D:BF:81:A9:88:28:12 Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Certificate serial: 38110FDEDF2FE06FEB4AD817C6435DD278F7CC42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft Manifest number: 0376 Signing time: Fri 25 Apr 2025 23:50:00 +0000 Manifest this update: Fri 25 Apr 2025 23:45:00 +0000 Manifest next update: Sun 27 Apr 2025 01:58:00 +0000 Files and hashes: 1: 38392e3131362e31352e302f32342d3234203d3e203135343139.roa (hash: DRa+aO7PfiWNiVUAYWYYHBzJhLs+CludiMSn8iGHVjs=) 2: 3231372e392e3234312e302f32342d3234203d3e203135343139.roa (hash: p4ZDdtK86rJtR1Yy0U4pqQrkMy9Mt2wV6blAzKoSX2U=) 3: 38392e3131362e31322e302f32332d3233203d3e203135343139.roa (hash: +Vx7cPWX17QUm5q4oEHBBrGiQvI6E8LOHxd5Tzb+tsE=) 4: 3138352e3134392e3135352e302f32342d3234203d3e203434373731.roa (hash: 0IPNooT5QWBhGrICiMetYy7pCF+C6k7B4M0htQlo2Og=) 5: 326130323a323633303a3a2f32392d3239203d3e203135343139.roa (hash: USXMXzOV5ANsNLdkdDGh+aelwmgR1a255Z8q4twzCv0=) 6: 3231372e392e3234322e302f32342d3234203d3e203135343139.roa (hash: LIxp+Yx66SN3S5aAmVFOSGb98XSFAyI0SpT0sQdYaJk=) 7: 3138352e3134392e3135332e302f32342d3234203d3e203434373731.roa (hash: ce0p5l8EbnIlkfTcKoQYlCwW/M5epxY2k2J2uChkpXk=) 8: D34606949D385DB42714FE71274FAC9948EF279C.cer (hash: mr8O2GLITID87EQbUR0mW/IyDelg6k8ezJcKyZbdo9E=) 9: 38392e3131362e34312e302f32342d3234203d3e203135343139.roa (hash: LKcPnvBQTsCR4w5Kx2YxxQoR+f2G/pvTMjh3hci1fU0=) 10: 38392e3131362e31362e302f32332d3233203d3e203135343139.roa (hash: My3yqf8SZAlUZtlcB3JmnWpb3SRX7htkUcZxm6LuIxA=) 11: 38362e33382e382e302f32312d3231203d3e203135343139.roa (hash: Jy9FfpiRqJjeQijv4Je6SENUeGndVONxelwvwfNNzXI=) 12: 3138352e3134392e3135342e302f32342d3234203d3e203434373731.roa (hash: kAy+abXsJb9Q4kp22IeSWppW6m8I+XeaZMYUvXUunLw=) 13: 38322e3134302e3138392e302f32342d3234203d3e203135343139.roa (hash: /R73oyZwtycfOIardsCBqBElyZyLAge3FIVtq7MzkqA=) 14: 38392e3131362e342e302f32322d3232203d3e203135343139.roa (hash: oRFKCFxJGvX68QWJfvbA6xvAXbsbAtUy8eErblPaedQ=) 15: 38392e3131362e322e302f32332d3233203d3e203135343139.roa (hash: yJ3jgTP5ms7vVZ9OOIspuE+dSGOdGl3B8e0eCPkkuvo=) 16: 3138352e3134392e3135332e302f32342d3234203d3e203135343430.roa (hash: jwteD3hkzVMFXXEJSc8k23qf/90xvhdj/VD3gj2Catk=) 17: 38392e3131362e3131362e302f32322d3232203d3e203135343139.roa (hash: fHsDulc+1xp80jqhKPKtHjI+D1+Glp+svd8TMxrbCTU=) 18: 3138352e3134392e3135322e302f32322d3232203d3e203135343139.roa (hash: T3/+meO0E6Kscbv4zABgR7LjWbA9HZkY2ThRNjT1/ho=) 19: 38392e3131362e34322e302f32332d3233203d3e203135343139.roa (hash: LQgVQ1MyyeW/dmCTdxbfNRo0tK6PErHXDmnl/WHeT/0=) 20: 326130323a323633303a3a2f33322d3332203d3e203135343139.roa (hash: bRN9WIaNgBfL6hWP8Q0NfsbEb+S5Yh1ES6lsal3H0uY=) 21: 38362e33382e332e302f32342d3234203d3e203135343139.roa (hash: toTKmAJJ2uBqBLv6BkPz07R/jbWOIzBv8SNZxzfQ2BE=) 22: 3231372e392e3235342e302f32332d3233203d3e203135343139.roa (hash: 8EdY1bwfX2htrpnhHvYT4yLsf3n4DjnGjUcl+BBMtxU=) 23: 38392e3131362e31392e302f32342d3234203d3e203135343139.roa (hash: bGoZmuVAEB87yvgYuC6xqdUZRj5nlGp3K0afR23g6e0=) 24: 3138352e3134392e3135332e302f32342d3234203d3e203133313934.roa (hash: obdRgrAlbArOEzRq2MdJUp0vE/IGIUgpRkpTPsHnYpw=) 25: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl (hash: gYWb4EGaO/jG1J1mQUAgG0DM3DJcxJBqZbIhPhaKhZE=) 26: 38392e3131362e312e302f32342d3234203d3e203135343139.roa (hash: LoPTcBT12GlxJeGQytlP+87jwAVqXsZ20yC+f2z0XAE=) 27: 38322e3134302e3133312e302f32342d3234203d3e203135343139.roa (hash: qupft+yfIDkLB2YnMTYFZT4P6Bv9II0x6lbxw2SsutA=) 28: 38322e3134302e3137382e302f32342d3234203d3e203135343139.roa (hash: SxwKmFdaPow3guK7NvONFCZ6G0PoorcTxWmZaoSvQiM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 01:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:11:0f:de:df:2f:e0:6f:eb:4a:d8:17:c6:43:5d:d2:78:f7:cc:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Validity Not Before: Apr 25 23:45:00 2025 GMT Not After : Apr 27 01:58:00 2025 GMT Subject: CN=24AACB71A0BF4E9DBF34AE487C5DBF81A9882812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:94:09:ab:69:69:5a:6b:55:01:75:5c:5a:a5: 93:8f:9a:1d:e5:97:54:6d:b2:4b:ec:31:e9:f6:9e: e9:e7:0d:16:c5:77:b8:76:82:db:ad:b3:bd:40:b2: 1c:8f:39:8a:81:13:b6:dc:87:c8:8e:7c:58:87:87: 9c:8a:15:c6:f9:2e:8a:1c:0a:07:5f:7b:63:a5:6d: 6c:91:69:d0:3a:67:19:4e:f3:41:80:58:57:b3:14: 6e:a1:58:05:da:4f:7e:e2:9f:3d:8a:ee:bc:95:3a: ba:da:ec:96:1c:be:3b:1f:9f:07:83:5a:ec:ca:ac: 50:e9:fe:98:e8:fb:f5:8d:36:40:f0:82:c0:6b:15: 44:58:60:0d:55:78:08:25:96:3e:27:66:bb:e8:ae: 53:69:16:68:51:db:25:0d:bd:9f:66:ac:4d:ae:ca: 5e:f8:9c:06:57:f1:6c:be:66:55:d8:86:81:21:40: b2:52:7e:af:4c:76:90:66:bf:34:b8:6d:70:76:2d: be:ce:fe:57:8b:ec:fb:f8:ad:d8:8b:ae:7c:1e:e9: 4d:bc:ae:54:98:98:38:e0:04:3c:bb:48:8b:d3:df: d6:f2:18:8b:db:da:31:6c:02:66:bd:8f:1f:f0:f3: 20:c5:ed:34:d9:a5:68:fb:24:08:64:f1:71:07:a5: 4b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AA:CB:71:A0:BF:4E:9D:BF:34:AE:48:7C:5D:BF:81:A9:88:28:12 X509v3 Authority Key Identifier: keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:85:35:9a:e9:5e:10:58:86:1e:47:2c:08:ad:a9:f0:2f:4a: 54:64:ba:52:00:e0:cd:9b:26:82:d4:4c:99:8c:3d:e7:dd:d8: 6d:5a:5d:9e:f6:db:e3:22:57:8d:16:73:88:44:ea:68:27:4d: 5e:49:82:25:43:e7:95:de:53:6f:0a:fd:8e:ca:b9:c3:55:5f: 02:30:fa:8c:0e:ba:5f:9b:bb:3c:30:3a:8e:d2:45:af:e5:95: 98:a3:23:12:93:91:63:46:2d:d1:a3:4b:f2:95:21:dd:e1:f8: a7:50:f8:94:c7:b6:32:87:e1:90:0e:08:00:3e:03:26:bc:76: 30:9b:20:75:32:b1:4b:54:49:30:09:fe:67:c9:48:15:38:96: d6:52:18:62:86:c8:59:1b:d5:61:75:8d:09:91:14:c2:e0:4d: 0f:50:6e:5f:e9:d2:8e:0f:55:92:24:0b:4d:d5:f0:05:66:06: 7e:4a:70:19:66:85:9f:5c:af:e0:c6:10:18:62:ba:f1:5b:bb: 11:05:50:d1:a9:02:cb:f1:e4:50:9c:16:b0:ac:f3:5d:15:7f: 9f:49:bc:4e:cc:2f:f5:fc:5b:2f:81:99:c9:a3:45:c0:a4:f0: 7c:5b:da:d8:5b:8b:00:7c:bd:c0:45:3c:93:84:28:ae:fd:b6: 8f:4f:43:1f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOBEP3t8v4G/rStgXxkNd0nj3zEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmODU5OTdiMWI5YjM1OGUxYzQzZjM2NzY1YWEwYTRh MDIxNDRhZTAeFw0yNTA0MjUyMzQ1MDBaFw0yNTA0MjcwMTU4MDBaMDMxMTAvBgNV BAMTKDI0QUFDQjcxQTBCRjRFOURCRjM0QUU0ODdDNURCRjgxQTk4ODI4MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCilAmraWlaa1UBdVxapZOPmh3l l1RtskvsMen2nunnDRbFd7h2gtuts71AshyPOYqBE7bch8iOfFiHh5yKFcb5Looc Cgdfe2OlbWyRadA6ZxlO80GAWFezFG6hWAXaT37inz2K7ryVOrra7JYcvjsfnweD WuzKrFDp/pjo+/WNNkDwgsBrFURYYA1VeAgllj4nZrvorlNpFmhR2yUNvZ9mrE2u yl74nAZX8Wy+ZlXYhoEhQLJSfq9MdpBmvzS4bXB2Lb7O/leL7Pv4rdiLrnwe6U28 rlSYmDjgBDy7SIvT39byGIvb2jFsAma9jx/w8yDF7TTZpWj7JAhk8XEHpUtPAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUJKrLcaC/Tp2/NK5IfF2/gamIKBIwHwYDVR0j BBgwFoAUnfhZl7G5s1jhxD82dlqgpKAhRK4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDAyZTBiYTMtZmU2MC00NWIxLTkxNjAtODY4YTJmOGE0 M2IxLzMvOURGODU5OTdCMUI5QjM1OEUxQzQzRjM2NzY1QUEwQTRBMDIxNDRBRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25maFpsN0c1czFqaHhEODJkbHFncEtB aFJLNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJlMGJhMy1m ZTYwLTQ1YjEtOTE2MC04NjhhMmY4YTQzYjEvMy85REY4NTk5N0IxQjlCMzU4RTFD NDNGMzY3NjVBQTBBNEEwMjE0NEFFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYU1muleEFiGHkcsCK2p 8C9KVGS6UgDgzZsmgtRMmYw9593YbVpdnvbb4yJXjRZziETqaCdNXkmCJUPnld5T bwr9jsq5w1VfAjD6jA66X5u7PDA6jtJFr+WVmKMjEpORY0Yt0aNL8pUh3eH4p1D4 lMe2MofhkA4IAD4DJrx2MJsgdTKxS1RJMAn+Z8lIFTiW1lIYYobIWRvVYXWNCZEU wuBND1BuX+nSjg9VkiQLTdXwBWYGfkpwGWaFn1yv4MYQGGK68Vu7EQVQ0akCy/Hk UJwWsKzzXRV/n0m8Tswv9fxbL4GZyaNFwKTwfFva2FuLAHy9wEU8k4Qorv22j09D Hw== -----END CERTIFICATE-----Generated at Sat Apr 26 18:15:06 2025 by rpki-client