$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft File: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft (raw, json) Hash identifier: wPuUQWHTNLcwqbNDHDVQVkBa6QHCwbJVpbiYxTNG7Pw= Subject key identifier: FB:57:BE:0E:7E:98:FE:FD:92:8E:70:52:A4:04:9D:94:2D:AA:8A:EF Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Certificate serial: 22C21C542CCD8FE6A3D6304F68CD94E0B903EB39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft Manifest number: 012A Signing time: Mon 04 Aug 2025 00:01:30 +0000 Manifest this update: Sun 03 Aug 2025 23:56:30 +0000 Manifest next update: Tue 05 Aug 2025 03:24:30 +0000 Files and hashes: 1: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl (hash: Q4hbZBGI9I94L/Y7+47LgLfLvy7xR6fhthyyj1v/5UM=) 2: 3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa (hash: pWCIuSrDYwp+tan25QY6TeO9jMNRWP/W0zj94P0620Y=) 3: 3137382e3133322e3139392e302f32342d3234203d3e203631333137.roa (hash: g03b1IthT7R6emRcKoovUUAfL6xJm+JexZ6oxCLs8E4=) 4: 3137382e3133322e3139352e302f32342d3234203d3e20313335333931.roa (hash: RVvsf+GbQ+gvRF/WRSFeBmTdyh0atmXnd8DAVmdlYaw=) 5: 352e3232362e3138372e302f32342d3234203d3e2039323332.roa (hash: L10rHUQX4TGH4LKEy8+xW98uNY8br3AyCv26QQGltu4=) 6: 3137382e3133322e3139362e302f32342d3234203d3e203432383331.roa (hash: rMB7/8cyQIx/9c3HD2ZadKHLx3HKQvyXwwaVPb+xesA=) 7: 3130392e3233342e3231342e302f32342d3234203d3e203632323430.roa (hash: yJVBSNvtQsHe0PNYzL5JRIv242s6ICu9PWhfIuLAOZQ=) 8: 3130392e3233342e3231302e302f32342d3234203d3e203432383331.roa (hash: XdAkV6zbkuI1AZDLksTC73fyYmD1RaBTy+I3AGFuaxA=) 9: 352e3232362e3138362e302f32342d3234203d3e203633303233.roa (hash: kysMqqfL+cxQFiZ9hx+MYhVVLOWVsGxNP3RzuLn0/y4=) 10: 352e3232362e3138382e302f32342d3234203d3e20313532313739.roa (hash: nFzeEleWTSIYtIbjgNdPg9c+CwbgHF8u+W2VGtxEBpQ=) 11: 3130392e3233342e3231322e302f32342d3234203d3e2039333034.roa (hash: E1rTwoIvXUNDaM0STfVaIqf1sVvsAgpb9o5+zj/sF4M=) 12: 3130392e3233342e3231312e302f32342d3234203d3e203133333335.roa (hash: Ej1HuQzuhYe60A2HNErPZLUdfpH5EaYPpZ+PpBEwVxY=) 13: 3130392e3233342e3231352e302f32342d3234203d3e20393733.roa (hash: 7XlPdZ+5k5dznfPMoT3Ni5uRfyL41Likgo5fplEaDTA=) 14: 3137382e3133322e3139332e302f32342d3234203d3e2033333230.roa (hash: oI+z5B0JaicbPoA0ktNCShJBGRgRTGuhGcC7A8+Ru9U=) 15: 3137382e3133322e3139322e302f32342d3234203d3e203134363138.roa (hash: UgtgsSF4DmUx+FqAs5WV6TWI9fyKhqfkEeJgaHpzYEc=) 16: 352e3232362e3139302e302f32342d3234203d3e203239383032.roa (hash: IcG7713dyebDFbZHRU+x1BJJOLqYlSEgaSMS202odCw=) 17: 3137382e3133322e3139322e302f32342d3234203d3e203136353039.roa (hash: 0XlqzvD5WZeVhzrMIb+ArV6j60KVoqxW88qIB/mg2yk=) 18: 352e3232362e3139312e302f32342d3234203d3e20323135323338.roa (hash: UAeHXbW3QhFNKys+iIRYQQp2rK+CbLJVmAbT44zmQ1k=) 19: 3137382e3133322e3139382e302f32342d3234203d3e203133333335.roa (hash: 6TrR9eiRNzBfJRrubefTFudn86wqW7t6u+0cIxHNR5g=) 20: 3137382e3133322e3139382e302f32342d3234203d3e20323635393139.roa (hash: uhM+/0v8HioS/qE+KkDqR673YS11oQr5aznZkyp/yx4=) 21: 3130392e3233342e3230392e302f32342d3234203d3e203235313630.roa (hash: 4qmNKGx6VCIK53hbSqHwJPgKKMACqFJu608tkfoDU90=) 22: 352e3232362e3138392e302f32342d3234203d3e2039333034.roa (hash: KMYDoKnPWH3TUSOlAA/wzDsC66Y3O5PlUt+i9WMB8YA=) 23: 3137382e3133322e3139342e302f32342d3234203d3e2033333230.roa (hash: fQsEWjsrThcFlJLP0H4ir/IvOeNDAQWZ1RZpyw7wV08=) 24: 3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa (hash: 5LOGXsAFfY8MpN+3dgrjf5uTyIh00nk/J0/MSXxVmy4=) 25: 352e3232362e3138352e302f32342d3234203d3e2034363337.roa (hash: xGDSj9rMMdhGkci1rj9QS/c2p6IRznTgPF56svMZjZY=) 26: 3137382e3133322e3139372e302f32342d3234203d3e2033333230.roa (hash: MuzLKtyseOT68ju0FOjjeN3pxilqG43fi3IvFyF1hyA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 04 Aug 2025 18:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:c2:1c:54:2c:cd:8f:e6:a3:d6:30:4f:68:cd:94:e0:b9:03:eb:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Validity Not Before: Aug 3 23:56:30 2025 GMT Not After : Aug 5 03:24:30 2025 GMT Subject: CN=FB57BE0E7E98FEFD928E7052A4049D942DAA8AEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9a:27:62:b8:30:c3:2b:54:92:f3:21:76:ee: 23:9f:77:06:27:33:ca:d1:b9:73:ff:d1:52:a8:6c: 82:86:87:2b:1e:d0:a6:50:96:54:6b:cd:97:13:df: cd:b2:72:c6:1e:09:8c:64:ae:01:ef:3a:70:b6:33: 73:c3:5f:50:f3:b7:fc:b8:6d:d5:ca:dc:07:9b:6a: 8a:66:59:33:df:ae:db:db:75:bc:0d:67:cb:87:72: 79:48:01:8c:38:cf:b1:ef:bc:82:3f:9c:ce:18:3b: 03:86:4d:f2:57:c9:c4:33:42:9f:e8:03:02:13:6d: c2:9c:33:e6:a5:72:7f:c4:3c:b9:84:5d:a2:f7:58: b9:c0:00:57:8a:fc:55:51:4b:59:36:f2:4e:53:61: 27:37:54:82:94:e4:ac:9d:5f:ba:25:42:09:07:77: 11:ec:0e:eb:0f:89:5d:a6:76:c3:9c:f7:61:0b:38: f6:1e:31:a8:b3:ee:64:23:65:3c:45:21:ca:1b:e8: fe:c1:a9:b9:8d:05:cd:a6:68:3a:a1:01:75:3e:9a: 25:54:ee:f1:d8:6e:c3:57:59:c8:e8:0c:04:8f:0e: e3:21:fc:05:91:8f:93:5c:ba:61:59:00:f4:28:1f: f9:4f:a5:d3:e2:97:99:4b:2c:d4:3f:13:df:1d:bb: 3b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:57:BE:0E:7E:98:FE:FD:92:8E:70:52:A4:04:9D:94:2D:AA:8A:EF X509v3 Authority Key Identifier: keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:81:81:5e:5c:87:9e:fb:ac:0f:a6:b4:d0:e2:4e:5b:48:f4: 5e:22:d4:27:44:94:7e:fb:60:57:40:ce:14:2b:c2:0b:8b:d4: 6a:f1:2f:2b:2f:4b:9e:98:8d:ac:98:e5:eb:e9:71:76:7d:a1: 8c:d4:e5:f1:43:6d:84:f1:90:06:21:7e:e2:f2:b7:82:3f:20: 3c:2b:68:49:84:26:ca:39:d8:c5:e5:b3:bd:d6:3a:99:5f:2b: 21:62:20:b1:b6:3b:bc:43:fd:24:82:90:24:b1:f5:b1:5c:e1: 9b:ea:1a:b3:b0:96:65:f5:d3:33:f4:e6:03:2e:b3:17:01:39: 01:f2:6d:b2:fd:68:c0:77:39:4f:44:eb:5e:f3:11:53:5f:f6: 65:a7:63:99:bf:6f:de:fc:fe:29:2c:45:66:36:22:56:2d:2a: d2:4b:2f:f5:5d:04:51:1b:6c:5f:2d:68:d1:f9:69:38:fc:f3: 09:d8:42:fb:e7:ea:ba:6e:a8:e2:58:2a:84:8f:86:40:7e:93: e2:5a:59:ca:d5:1c:9d:6c:bc:2b:d3:1e:ef:3d:a9:a6:2f:59: 55:1a:2c:c6:65:27:66:b5:1b:30:b5:1b:39:f7:4a:2d:8e:75: 4f:77:65:02:92:65:d7:ff:51:7d:d1:b0:f6:e2:d5:0b:17:38: 5c:49:65:52 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIsIcVCzNj+aj1jBPaM2U4LkD6zkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk MTZjZWVkMzAeFw0yNTA4MDMyMzU2MzBaFw0yNTA4MDUwMzI0MzBaMDMxMTAvBgNV BAMTKEZCNTdCRTBFN0U5OEZFRkQ5MjhFNzA1MkE0MDQ5RDk0MkRBQThBRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6midiuDDDK1SS8yF27iOfdwYn M8rRuXP/0VKobIKGhyse0KZQllRrzZcT382ycsYeCYxkrgHvOnC2M3PDX1Dzt/y4 bdXK3AebaopmWTPfrtvbdbwNZ8uHcnlIAYw4z7HvvII/nM4YOwOGTfJXycQzQp/o AwITbcKcM+alcn/EPLmEXaL3WLnAAFeK/FVRS1k28k5TYSc3VIKU5KydX7olQgkH dxHsDusPiV2mdsOc92ELOPYeMaiz7mQjZTxFIcob6P7BqbmNBc2maDqhAXU+miVU 7vHYbsNXWcjoDASPDuMh/AWRj5NcumFZAPQoH/lPpdPil5lLLNQ/E98duztLAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU+1e+Dn6Y/v2SjnBSpASdlC2qiu8wHwYDVR0j BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0 NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G czd0TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wY2MwODczNy05 MjY3LTQwMmEtOTlkNC03YWFhZmVhNDQ0ZWQvMC9GNzY4RkY2RTY4MTg1OEMwRUMx OUYzQTkzRkExNzkyQ0QxNkNFRUQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK4GBXlyHnvusD6a00OJO W0j0XiLUJ0SUfvtgV0DOFCvCC4vUavEvKy9LnpiNrJjl6+lxdn2hjNTl8UNthPGQ BiF+4vK3gj8gPCtoSYQmyjnYxeWzvdY6mV8rIWIgsbY7vEP9JIKQJLH1sVzhm+oa s7CWZfXTM/TmAy6zFwE5AfJtsv1owHc5T0TrXvMRU1/2Zadjmb9v3vz+KSxFZjYi Vi0q0ksv9V0EURtsXy1o0flpOPzzCdhC++fqum6o4lgqhI+GQH6T4lpZytUcnWy8 K9Me7z2ppi9ZVRosxmUnZrUbMLUbOfdKLY51T3dlApJl1/9RfdGw9uLVCxc4XEll Ug== -----END CERTIFICATE-----Generated at Mon Aug 4 03:57:54 2025 by rpki-client