$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft File: 3134EE987E08D8B5583FEEF621A03150C4F35434.mft (raw, json) Hash identifier: 5WNbBbHlNNlfMyzMNqMMLi+kVt6bB+GLckKN5bA8iNY= Subject key identifier: 72:3E:D0:D2:F3:67:30:48:E0:F3:19:01:8E:51:3F:A7:1A:D6:B5:A0 Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34 Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434 Certificate serial: 21C4A438A2074667BE8AC7247014FF2D571BE8CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft Manifest number: 028C Signing time: Sat 14 Jun 2025 14:56:24 +0000 Manifest this update: Sat 14 Jun 2025 14:51:24 +0000 Manifest next update: Sun 15 Jun 2025 15:57:24 +0000 Files and hashes: 1: 326131343a316563373a666130303a3a2f34302d3438203d3e20323134333635.roa (hash: mfRAEfAM/Ik+prWgDH92jLkjVIcmPRfzo1kMxVmUq4c=) 2: 2AFACA7F316DBE0CFF394F9D5952E52992F185F1.cer (hash: TzD6pGlBEMmZI/OlLFvK4Q5nKNXovDA7wOkDjfwohQo=) 3: 326131343a316563373a666666643a3a2f34382d3438203d3e20323038343533.roa (hash: cQGzH58GG/5AlClFkvMjXXZFAsalmfdZS0xTjTmJx5Q=) 4: 326131343a316563373a666666653a3a2f34382d3438203d3e20323135343733.roa (hash: tXMEYMrTa38uR0L+SQ9LimzmDrpxo8zhMIaTp0PKkR0=) 5: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer (hash: BF/TWOjb2Ii4r0osOdYS/rUG+zOQPpS2tAXbzEo5Wzo=) 6: 326131343a316563373a666661303a3a2f34382d3438203d3e20323133353135.roa (hash: uw8e5+V55rs+wlENeJdGRICWtffz7xQmePuL+3U/nIU=) 7: 326131343a316563373a663130303a3a2f34302d3438203d3e20323134313838.roa (hash: gXY2AMFw8/+rSlIvUcyO+0lq7UArJ6lUsKRFR48Pbdc=) 8: 326131343a316563373a666230303a3a2f34302d3438203d3e20323134373435.roa (hash: nezQHcq4MVb+lW9u+9DC3TKuGQsy0c5l+5+DxrvsPzo=) 9: 326131343a316563373a313130303a3a2f34302d3438203d3e20323135343337.roa (hash: LSZWA34YwCO9D6JtWEG8LpUQ1o3Anb+MGXWPU43gT4A=) 10: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer (hash: jLV89odZdgTYzYRcumFoTReP+gmmk+raXpcoYf0+wxA=) 11: 326131343a316563373a663630303a3a2f34302d3438203d3e20323133393938.roa (hash: svJE9s6z+thIvIbk0ivLw3r/3W8HiAYka1FWVnsnFgw=) 12: 326131343a316563373a666666663a3a2f34382d3438203d3e20323030313739.roa (hash: jxX5jejatt6POI8r69/OIdC4tpqjlqDh7/l5cMHt1Lc=) 13: 3134EE987E08D8B5583FEEF621A03150C4F35434.crl (hash: sfW8szVlAfpOljjqvM5kQwYg+ShG3aNeoD0hAHp4R/4=) 14: 326131343a316563373a323030303a3a2f34302d3438203d3e20323133353135.roa (hash: ei7uKbr21cStunIFD4/+QnxpXX+lUv4yRtUBnFqqQIw=) 15: 326131343a316563373a666530303a3a2f34302d3438203d3e20323135343637.roa (hash: 8asU86WRYRMPRuHXiCGWb31YsN6wlyGCHOUyjPq08QE=) 16: 326131343a316563373a313030303a3a2f33362d3438203d3e20323134343831.roa (hash: mAC3tE41nQDojIaT/TKY9BuNdhC77RQ6VPm5O+XWCIE=) 17: 326131343a316563373a666666633a3a2f34382d3438203d3e20323136333339.roa (hash: Xpu7YHsE9Uu/Z34+AM32q6wFmIndeEkcOzm4kV29gZU=) 18: 326131343a316563373a663530303a3a2f34302d3430203d3e20323038343533.roa (hash: Kuq/T5/58120SUpTorsr1ML70JXySqoRjipE0Min4z0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 10:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c4:a4:38:a2:07:46:67:be:8a:c7:24:70:14:ff:2d:57:1b:e8:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434 Validity Not Before: Jun 14 14:51:24 2025 GMT Not After : Jun 15 15:57:24 2025 GMT Subject: CN=723ED0D2F3673048E0F319018E513FA71AD6B5A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:11:dc:35:59:21:37:cd:a5:de:89:cd:06:95: 78:e9:2d:84:97:9b:c3:56:5e:8f:57:27:92:ff:b2: d9:15:9f:b2:97:80:e2:f5:1e:a9:ae:2b:51:f9:2f: 5d:ce:f9:17:5b:d0:16:2b:8a:03:5e:02:b1:03:19: 5d:76:35:ea:8b:64:52:cf:2b:e1:93:06:22:49:11: 42:6d:29:f3:07:cd:bc:78:d6:48:c0:d5:e1:3e:d1: 89:de:ea:81:60:f8:7c:d7:1e:5a:65:45:43:2e:50: 45:f5:3f:a0:35:d4:90:ca:af:4f:af:eb:e6:8a:32: a8:a1:8a:c8:8d:29:87:8a:7c:93:6c:da:81:f6:b5: e6:c3:4a:20:9c:b2:b5:4c:aa:3d:38:26:04:14:1d: 6a:94:c0:77:54:91:7a:87:ea:08:e9:41:45:c0:c6: bf:8b:74:b6:23:4f:18:25:bb:15:40:bd:55:8a:79: 17:b8:4c:9c:e4:05:2e:8c:77:10:6d:79:63:a7:28: 19:d6:a1:72:e4:76:de:d9:15:80:16:36:3c:00:4a: 27:b2:80:19:83:9f:34:82:83:ed:07:3e:e3:f5:4b: 79:79:82:98:a3:5a:42:0a:fc:b8:17:60:98:68:15: 0a:21:7a:12:63:d0:84:fb:31:54:00:3a:94:52:54: fa:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:3E:D0:D2:F3:67:30:48:E0:F3:19:01:8E:51:3F:A7:1A:D6:B5:A0 X509v3 Authority Key Identifier: keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:e4:76:e6:8e:84:ba:82:c8:22:ef:22:36:ff:b9:54:e3:12: b2:a2:57:82:6e:9e:1e:66:7a:f5:3e:07:a4:26:3c:a9:df:11: 4f:aa:84:e2:9c:75:cb:95:62:25:ab:b2:e6:2f:d1:34:68:9c: 26:a8:de:9f:69:02:0e:bf:41:86:de:76:51:db:9d:8b:3a:cb: 34:2f:a2:14:59:c4:5e:7f:69:87:d6:3c:36:6f:bf:4a:98:1c: d5:d2:3e:31:2e:7e:34:b5:c9:22:8b:46:33:7c:ee:9e:4e:44: 00:76:25:e6:be:9d:e8:5b:9b:1a:65:29:9f:68:ae:92:b4:e3: c4:8c:fc:2f:10:bb:2d:b4:bf:66:36:f3:36:16:40:57:ac:f9: 8b:ad:1e:d1:ec:e5:21:70:e6:41:62:db:cf:ee:6c:4b:ef:28: ef:2a:31:96:65:0d:8b:92:99:d4:d7:4e:27:92:84:86:81:48: 06:b5:23:34:71:cc:12:2f:63:c1:6d:75:6e:78:8b:65:41:34: 96:b3:69:f0:72:fd:71:b2:4b:67:63:fc:d0:81:c5:9e:9f:41: 58:3b:33:ad:7a:e9:2c:58:5d:b0:7c:c2:c5:65:23:b9:38:fa: 00:c0:d8:c0:c6:7e:e2:e9:fb:be:bd:40:f9:6d:0b:48:7f:18: 65:b3:52:60 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIcSkOKIHRme+isckcBT/LVcb6M0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEzNGVlOTg3ZTA4ZDhiNTU4M2ZlZWY2MjFhMDMxNTBj NGYzNTQzNDAeFw0yNTA2MTQxNDUxMjRaFw0yNTA2MTUxNTU3MjRaMDMxMTAvBgNV BAMTKDcyM0VEMEQyRjM2NzMwNDhFMEYzMTkwMThFNTEzRkE3MUFENkI1QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeEdw1WSE3zaXeic0GlXjpLYSX m8NWXo9XJ5L/stkVn7KXgOL1HqmuK1H5L13O+Rdb0BYrigNeArEDGV12NeqLZFLP K+GTBiJJEUJtKfMHzbx41kjA1eE+0Yne6oFg+HzXHlplRUMuUEX1P6A11JDKr0+v 6+aKMqihisiNKYeKfJNs2oH2tebDSiCcsrVMqj04JgQUHWqUwHdUkXqH6gjpQUXA xr+LdLYjTxgluxVAvVWKeRe4TJzkBS6MdxBteWOnKBnWoXLkdt7ZFYAWNjwASiey gBmDnzSCg+0HPuP1S3l5gpijWkIK/LgXYJhoFQohehJj0IT7MVQAOpRSVPoHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUcj7Q0vNnMEjg8xkBjlE/pxrWtaAwHwYDVR0j BBgwFoAUMTTumH4I2LVYP+72IaAxUMTzVDQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWEzYmI5M2YtOThhNC00YzdlLWEwZTEtODA1N2E0ZjA4 NmM5LzAvMzEzNEVFOTg3RTA4RDhCNTU4M0ZFRUY2MjFBMDMxNTBDNEYzNTQzNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01UVHVtSDRJMkxWWVAtNzJJYUF4VU1U elZEUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05 OGE0LTRjN2UtYTBlMS04MDU3YTRmMDg2YzkvMC8zMTM0RUU5ODdFMDhEOEI1NTgz RkVFRjYyMUEwMzE1MEM0RjM1NDM0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc+R25o6EuoLIIu8iNv+5 VOMSsqJXgm6eHmZ69T4HpCY8qd8RT6qE4px1y5ViJauy5i/RNGicJqjen2kCDr9B ht52UdudizrLNC+iFFnEXn9ph9Y8Nm+/Spgc1dI+MS5+NLXJIotGM3zunk5EAHYl 5r6d6FubGmUpn2iukrTjxIz8LxC7LbS/ZjbzNhZAV6z5i60e0ezlIXDmQWLbz+5s S+8o7yoxlmUNi5KZ1NdOJ5KEhoFIBrUjNHHMEi9jwW11bniLZUE0lrNp8HL9cbJL Z2P80IHFnp9BWDszrXrpLFhdsHzCxWUjuTj6AMDYwMZ+4un7vr1A+W0LSH8YZbNS YA== -----END CERTIFICATE-----Generated at Sat Jun 14 18:37:39 2025 by rpki-client