$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft File: B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft (raw, json) Hash identifier: fZMqhact5x2R9rTCsUlVyA2zWxZBfLy52zSaOPbV0EY= Subject key identifier: C3:BB:9A:2B:1D:62:6A:79:28:9F:A5:BA:43:A6:69:2A:99:4C:37:C7 Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0 Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0 Certificate serial: 4021375B725F36A283F8E9E9A84BC389DE787C27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft Manifest number: 03B2 Signing time: Sat 26 Apr 2025 04:44:57 +0000 Manifest this update: Sat 26 Apr 2025 04:39:57 +0000 Manifest next update: Sun 27 Apr 2025 07:18:57 +0000 Files and hashes: 1: 3138352e3135362e3231392e302f32342d3234203d3e203630343538.roa (hash: bhmXA/UCtt1nyQrYM2jVbYPPjvHj1kbq2elTOOXjriw=) 2: 3138352e3136372e32372e302f32342d3234203d3e203630343538.roa (hash: jYdp2N+Ayu3PXO0VISPGDogqUes5huIAg2moFKZXPbs=) 3: 3139352e3231312e35312e302f32342d3234203d3e20343030393039.roa (hash: 0gSBq8V9lU7SHxebbh3UieoZZ+QMrAfR0WkkimNMOGY=) 4: 3138352e3136372e32362e302f32342d3234203d3e203630343538.roa (hash: O69sqtNFc4fPuNyqGjOM4FatZVNxxGea7spNYxzpgA4=) 5: 3139352e382e34382e302f32342d3234203d3e203630343538.roa (hash: RpXb99JBtcXc1SRWEFWQruGINFB9BMjVnVQo59s25bw=) 6: 39312e3139392e3132332e302f32342d3234203d3e203630343538.roa (hash: hfUQxaMIpRyB1Sc5sYZyFYOi5Cav8i4bnTf5DUfjG9Y=) 7: 3138352e3231372e3134302e302f32342d3234203d3e20323133373038.roa (hash: 7NRRwOo56x7r07IHpiB2f4GQNnrYqpmGBE3YfLt7Qh0=) 8: 3138352e3230322e3134362e302f32342d3234203d3e203630343538.roa (hash: y27l7FcbjPrTjnX8z1wdr/al0A0s6C1HocBfG9YczUM=) 9: 3138352e33372e3232382e302f32342d3234203d3e203630343538.roa (hash: JEjxeirDyInWN3pEZSMIMLur5fLEwJSrirEqd4Kbniw=) 10: 3138352e3136372e32342e302f32342d3234203d3e203630343538.roa (hash: SDt985Ss2j95VPPnUftv3k+r40+EetHHWWJxi8YFELg=) 11: 3139342e35392e3232332e302f32342d3234203d3e20313939363134.roa (hash: Q+aTRZ6Bj34jlOI880qva89jcDljlnRfljW0rbqvKUM=) 12: 3138352e33372e3232392e302f32342d3234203d3e203630343538.roa (hash: 3CDHVjkG77lS5G2b6DT2m/fnsghT5i2zxREcxj+wBJM=) 13: 39312e3139392e3130382e302f32342d3234203d3e203630343538.roa (hash: R43tsbjVLczvAv3j/z+nCmDKUWMmLwMhQPzDT12dWfQ=) 14: 3138352e3135362e3231382e302f32342d3234203d3e203630343538.roa (hash: tQ2GarT0Fq/Y4gJCnceY+9Ld6H3jfX5vzTogw0/cXn8=) 15: 3138352e3232362e3135332e302f32342d3234203d3e20323131343430.roa (hash: rGW7/8GB609/SHNrTEWoAaTI5dQHouhe15jjA9R2QwM=) 16: 3139352e382e3131392e302f32342d3234203d3e203630343538.roa (hash: 7rmEBzCcKzytpb74duJg1saj5hIb4quQZTOE5453MEI=) 17: 3138352e3230322e3134342e302f32342d3234203d3e203630343538.roa (hash: wMbONWZYzoFpIJkzzGLtbCPOiclU0tDOMOsZQEZWQ2c=) 18: 3138352e3135362e3231362e302f32342d3234203d3e203630343538.roa (hash: ALtE4rA0qkakD26O1pKsp2Bxp6wYcZcO5dyC1MXQvMI=) 19: 3138352e3130302e37322e302f32322d3232203d3e203630343538.roa (hash: AbGpHoY1Iwp7hjUY4kwLV7IvmjI6O5sTwEf9p60eEDQ=) 20: 3138352e3136322e3136382e302f32332d3233203d3e203630343538.roa (hash: uukrgDj0e2sDc9yoJUQCOwA8MTnflTfxiRJx5xhrfKA=) 21: 39312e3139392e39302e302f32342d3234203d3e203630343538.roa (hash: ZCLM9BGFu9emToJAxACCzDurumlwiFHCnv29VgHNHUw=) 22: 3138352e3132352e37382e302f32342d3234203d3e203630343538.roa (hash: lDEAOfAo+aSO61ip7Vb5wkz89CDmAucKNaZCSqyyfQg=) 23: 3138352e33372e3232382e302f32332d3233203d3e203630343538.roa (hash: peErcXlsbgfgsqewrSXZu5B3J55p3gwflAU5kOjFoMo=) 24: 3138352e3232362e3135342e302f32342d3234203d3e20323030303139.roa (hash: 96QSwOxwyYqTqJ3XjUWn9gHjbPepDDirLYFilwesJ0U=) 25: 3138352e3230322e3134372e302f32342d3234203d3e203630343538.roa (hash: PHUCS8BTbDObAnUZclrhwWptBZTxV794GCvmFvLScak=) 26: B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl (hash: ieb06lXubv88VvSICgAvOkqq6uwlPz4PuG9TOfC1m/g=) 27: 3138352e3136322e3137312e302f32342d3234203d3e203630343538.roa (hash: 90y99P9qHniaFbGtU9mUaKbMcuKr4zjh7sttYrxcBYY=) 28: 3138352e33372e3233302e302f32342d3234203d3e203630343538.roa (hash: xiVqSDY/g7ABR4IDbjuy1kX50SfNeC3pbMfBYX2QvI4=) 29: 3138352e3231352e3131342e302f32342d3234203d3e203631333137.roa (hash: xXyOVH/36PSoLLnN/ttYaRQNeWh9XvGmEpunILoiF1M=) 30: 3138352e3232362e3135352e302f32342d3234203d3e203634323637.roa (hash: BphaL/Q+MmU9qXxX06J/d3Yz3MPwKV/7sGiY2uy2MYY=) 31: 34352e3135312e3139322e302f32322d3232203d3e203630343538.roa (hash: CEZxSxxvxgHXiygJrJrmo/X3ZqGVn22GyG4HL64UAdQ=) 32: 3138352e3136372e32352e302f32342d3234203d3e203630343538.roa (hash: VnpNuWI2I8KmFIWMJWyePxJLR3+QOvzrDMMohIFeAkU=) 33: 3138352e3135362e3231372e302f32342d3234203d3e203630343538.roa (hash: ZT/oBDlYNLwYFsF/odJ1jCFIoujKbQWe8wN6FQ6/vMs=) 34: 3138352e3132352e37392e302f32342d3234203d3e203630343538.roa (hash: 6bMsKitOUdBcqK+DC0Q6Ki6fqYFRE4NfOkuepLu+524=) 35: 36322e3132322e3138392e302f32342d3234203d3e2033313730.roa (hash: mbpZXZK/fM7vaFZ5y82xMnQ6rCPjr7XSXm9Q6bD78C4=) 36: 39312e3139392e3130322e302f32342d3234203d3e203630343538.roa (hash: hoVGz6we0idfmbwuMYKFqPErm+0++GkzBotqgp1S6/c=) 37: 3138352e3132352e37362e302f32342d3234203d3e203630343538.roa (hash: egjTlvN5yYyFC7HQ1Q/cM4qZ9xghCxDEcQUM+WHhv0s=) 38: 3138352e3230322e3134352e302f32342d3234203d3e203630343538.roa (hash: nDXO7yXyC/Nn/Xe6lPY2ju2y9VL6B45N2Dn5QCb1Pe8=) 39: 3138352e3232362e3135322e302f32342d3234203d3e203432383331.roa (hash: 2iZuFtoo8q53yETNgCmRHTR4lUa6RiA7X1J8o6k1GHg=) 40: 3138352e3132352e37372e302f32342d3234203d3e203630343538.roa (hash: bqfeFQaMEXB2Lw5GXYSD+HwlBKqljGw12CUthQ7HMiU=) 41: 3139352e382e34392e302f32342d3234203d3e203630343538.roa (hash: GdGJgvYNNoZ/kupnHkCEn3oqTJ2JjJlQIIvW1S8EcMM=) 42: 33312e3231372e3235302e302f32342d3234203d3e2039303039.roa (hash: L+538BnpKcoPw9UMvgnBDsovbAC1nWxPwoO/WNMOxrE=) 43: 34352e3134332e3134382e302f32322d3232203d3e203630343538.roa (hash: bpYF5qZdYO0DbZt3Xk0T28CUCnoM69JvudASJUo7nz4=) 44: 3138352e3136322e3137302e302f32342d3234203d3e203630343538.roa (hash: YOkgdfN6930njLnoIF3o5vYeuFYyl2ovNNQOIYyrjCk=) 45: 34352e3134362e3138382e302f32322d3232203d3e203630343538.roa (hash: UpdRjVxL0CaDRe6pjsA4a0Pm9cl+EKxsLppBEtm6yHY=) 46: 3138352e33372e3233312e302f32342d3234203d3e203630343538.roa (hash: WFSRZuechNzxJnaZPrUrgZDg9C0etUbZt9I5ZFL6HD4=) 47: 34352e3133312e38302e302f32322d3232203d3e203630343538.roa (hash: Fc0zqUS/qMbsckb7qCmxgSMI5r1LVb7mk51C1/rR8H4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 07:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:21:37:5b:72:5f:36:a2:83:f8:e9:e9:a8:4b:c3:89:de:78:7c:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0 Validity Not Before: Apr 26 04:39:57 2025 GMT Not After : Apr 27 07:18:57 2025 GMT Subject: CN=C3BB9A2B1D626A79289FA5BA43A6692A994C37C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d2:6c:68:3e:d0:cb:de:c2:4b:4b:47:60:b4: 20:c1:19:49:5f:ab:e2:53:ab:44:f3:60:4e:89:6e: 02:b9:15:39:c9:cc:c8:b3:a6:88:12:fe:70:f1:c4: 38:92:b3:fa:00:aa:f9:eb:13:86:4f:ac:c5:37:4f: d8:24:0d:2b:fd:2c:d0:1a:a1:5d:e0:15:65:dc:34: 25:8f:6c:98:0b:a9:25:2d:7b:0f:19:25:56:30:69: 8a:08:81:63:30:ac:eb:11:7c:72:03:a9:ee:9e:26: af:1e:7a:f1:a1:e6:cb:33:35:2b:51:a5:30:fe:4f: f7:f1:e8:7d:a5:53:af:32:86:fe:1e:af:79:92:7b: e3:95:17:06:37:58:25:bf:25:76:0f:be:b7:eb:3d: f7:0e:db:75:20:3a:c7:d2:9a:7a:04:83:d3:10:b2: 9e:08:16:7d:34:a2:64:43:57:06:09:7c:ea:2a:39: 88:9f:73:43:3b:9d:92:13:9f:43:02:ff:bc:c0:17: e6:c9:e3:ba:ad:85:14:e5:4c:7a:81:d7:98:a0:68: a5:a9:80:d9:81:62:88:96:d3:c6:06:04:a6:8d:b4: 3f:98:61:1b:46:ee:cb:15:f7:25:a9:4f:a9:e4:b5: 4b:08:68:98:64:72:e5:f2:c2:ca:c5:86:20:d9:44: 11:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:BB:9A:2B:1D:62:6A:79:28:9F:A5:BA:43:A6:69:2A:99:4C:37:C7 X509v3 Authority Key Identifier: keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:b2:4d:0f:e5:9e:56:e0:ef:eb:41:f5:15:a9:e2:7b:ba:0a: 2f:45:12:89:ae:3a:92:fd:18:ef:c9:d8:43:ab:31:23:4d:a1: 4b:37:dc:6b:4b:fb:ab:74:10:ac:db:49:1b:15:5e:51:4b:21: c3:a0:77:da:1f:01:16:f2:41:4d:38:c7:ae:bc:86:e8:90:3b: 6d:f4:f7:e9:af:92:bb:07:ea:95:51:58:ed:0c:0c:72:e0:8c: a0:1e:dd:6f:ad:1e:f5:47:c3:5b:f1:4a:36:05:2f:73:8f:3c: 18:88:40:dd:8a:3d:c1:73:d5:a6:6f:29:15:1b:20:d6:ec:70: d4:60:5b:22:e2:4f:5d:05:82:50:6e:2d:8e:05:7e:c2:f9:d1: 0f:31:e4:2e:4a:19:3e:0d:f5:b0:02:57:ea:51:b8:17:f5:54: a1:b6:84:da:fa:8a:24:e5:dd:e4:90:d4:a4:a2:22:6b:be:6a: ec:90:b1:ab:d4:6a:b5:83:ad:c9:18:89:74:23:d5:ad:f4:0d: 03:95:a2:87:7d:43:99:b5:c9:1d:98:34:47:14:54:82:86:e5: dd:7b:b2:0f:96:67:44:a3:b0:d4:86:5d:72:92:de:06:d5:73: ad:75:f0:fd:e4:b0:e0:ee:5b:0f:de:d3:2c:43:64:09:dc:ed: 19:68:ea:43 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQCE3W3JfNqKD+OnpqEvDid54fCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjAxNzBhYmRjOTU1YWExNzZiZTJhZjI2Mjk5Njc4ZjJm N2M5YWNhMDAeFw0yNTA0MjYwNDM5NTdaFw0yNTA0MjcwNzE4NTdaMDMxMTAvBgNV BAMTKEMzQkI5QTJCMUQ2MjZBNzkyODlGQTVCQTQzQTY2OTJBOTk0QzM3QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD0mxoPtDL3sJLS0dgtCDBGUlf q+JTq0TzYE6JbgK5FTnJzMizpogS/nDxxDiSs/oAqvnrE4ZPrMU3T9gkDSv9LNAa oV3gFWXcNCWPbJgLqSUtew8ZJVYwaYoIgWMwrOsRfHIDqe6eJq8eevGh5sszNStR pTD+T/fx6H2lU68yhv4er3mSe+OVFwY3WCW/JXYPvrfrPfcO23UgOsfSmnoEg9MQ sp4IFn00omRDVwYJfOoqOYifc0M7nZITn0MC/7zAF+bJ47qthRTlTHqB15igaKWp gNmBYoiW08YGBKaNtD+YYRtG7ssV9yWpT6nktUsIaJhkcuXywsrFhiDZRBHdAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUw7uaKx1iankon6W6Q6ZpKplMN8cwHwYDVR0j BBgwFoAUsBcKvclVqhdr4q8mKZZ48vfJrKAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2E3ODllODctZjQ4NC00MjNkLWExZDctMmMyZDU4NjBk MmVjLzAvQjAxNzBBQkRDOTU1QUExNzZCRTJBRjI2Mjk5Njc4RjJGN0M5QUNBMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NCY0t2Y2xWcWhkcjRxOG1LWlo0OHZm SnJLQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83YTc4OWU4Ny1m NDg0LTQyM2QtYTFkNy0yYzJkNTg2MGQyZWMvMC9CMDE3MEFCREM5NTVBQTE3NkJF MkFGMjYyOTk2NzhGMkY3QzlBQ0EwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ7JND+WeVuDv60H1Fani e7oKL0USia46kv0Y78nYQ6sxI02hSzfca0v7q3QQrNtJGxVeUUshw6B32h8BFvJB TTjHrryG6JA7bfT36a+SuwfqlVFY7QwMcuCMoB7db60e9UfDW/FKNgUvc488GIhA 3Yo9wXPVpm8pFRsg1uxw1GBbIuJPXQWCUG4tjgV+wvnRDzHkLkoZPg31sAJX6lG4 F/VUobaE2vqKJOXd5JDUpKIia75q7JCxq9RqtYOtyRiJdCPVrfQNA5Wih31DmbXJ HZg0RxRUgobl3XuyD5ZnRKOw1IZdcpLeBtVzrXXw/eSw4O5bD97TLENkCdztGWjq Qw== -----END CERTIFICATE-----Generated at Sat Apr 26 16:21:16 2025 by rpki-client