$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft File: 38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json) Hash identifier: QfeIqthq4eLWvfBowOAoPwALGUY67g4361FWziNjCug= Subject key identifier: DA:89:65:B3:6E:80:23:61:E9:7C:49:4B:06:63:94:67:F8:27:21:E7 Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8 Certificate serial: 5560D3CD024503C0268BA523858E0BF14C046E6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft Manifest number: 013E Signing time: Sun 03 Aug 2025 23:27:16 +0000 Manifest this update: Sun 03 Aug 2025 23:22:16 +0000 Manifest next update: Tue 05 Aug 2025 02:38:16 +0000 Files and hashes: 1: 3138352e35382e3135372e302f32342d3234203d3e2039333034.roa (hash: ecPrVI69N/vnSd3FE9LMlI9j3yoUAyDEH+/p4MpTJaY=) 2: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: /UuXq/SkWF47gXFnW/T4vEllXZulBrt5hUqt6XmiJns=) 3: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: jGy7NRXxpQ8Adk8KlwvLUXW9fgmGYykhrzR6k8tJHIg=) 4: 33312e3138352e3130372e302f32342d3234203d3e20323134323038.roa (hash: iqiKl6+YIrHEBq6ZgXjEwpHNvYPhUvsfMc60LM1HGfk=) 5: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: bxI8j0Q43fNYwFfEpnx3zZA+WfxxHOFpyLP15cwiRJc=) 6: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: YFUHOvZUTuDXo1v/ldHHqjI9VjtTCBbJBPcqOziNAKY=) 7: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: mN3Qu59H2oC79ZObPpdN6ubuCwdpq+KwMSfQr8+kwt4=) 8: 34362e3138322e31382e302f32332d3233203d3e203433383437.roa (hash: 4Ns+nZIS59tdPTXyzEk/8ZsDfijKL83vY7HPlP7mVB0=) 9: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: DOt+xOMDogaXujbawrGL0U15zCSEQeK/RAeOdZ56ezk=) 10: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: 2aiAtkkpFlb5J4UKg3KwRnaG7ituhGEa6s/dcTUAgJQ=) 11: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: 01LOWf7MxhRX+2Op4rDN5W7ucn6FteIUTuCGEpIiXqg=) 12: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: jK9tTJ3HWkDECaNJJZCeSwWGUPLGyK3Y5TeyBPZZ8ds=) 13: 3138352e35382e3135372e302f32342d3234203d3e2032393134.roa (hash: lpWXt6uFvU2PZ1sNhgr10rMfQuglN6ZjbNveDXRK2tg=) 14: 326130323a323937303a3a2f32392d3239203d3e203433383437.roa (hash: s2Lo9o3m7PNA+VTM8h6HfGJuLE7e0u+GGo764aM9FW4=) 15: 33312e3138352e3130352e302f32342d3234203d3e20313335333931.roa (hash: UHjaYZdaJB6lUIpYnqhxUJeEQvDh7dO7siLVcmgE1HM=) 16: 34362e3138322e31362e302f32332d3233203d3e203433383437.roa (hash: 4YLzigbbgGBlj3P8KPCDpw+y1a9c2DAZLVBVu5lNf4E=) 17: 3138352e35382e3135382e302f32342d3234203d3e203432383331.roa (hash: H0/UOIDOPTZQG2jWBZUuvlV7qmEWppBmDmL+nyn9Jr4=) 18: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: Zxw7HANZ4fSS/h6IwZB62HG+NMCfSONfC+RPVG/FTSE=) 19: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: tjhKwoa/z/ms3eL96lf+MyeXfH8SFjq92hWldF9BNCA=) 20: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: vkoHG9YkBqYYFiYFVc6SZ8vdfCqqASWD3OKDeLTlJkQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 04 Aug 2025 18:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:60:d3:cd:02:45:03:c0:26:8b:a5:23:85:8e:0b:f1:4c:04:6e:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8 Validity Not Before: Aug 3 23:22:16 2025 GMT Not After : Aug 5 02:38:16 2025 GMT Subject: CN=DA8965B36E802361E97C494B06639467F82721E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0e:71:a1:32:2b:4f:ab:12:13:e8:c4:bd:06: ee:18:fb:11:fb:2f:34:0b:8c:8b:88:27:54:e8:bf: 6d:76:9f:e6:2a:2c:5e:05:35:2a:99:28:68:d3:06: 42:c2:e6:02:e6:a2:34:d7:e0:75:62:3d:2f:9e:d3: 3d:88:a9:89:46:d9:22:9c:49:a5:d7:b7:d5:e1:4c: 0e:e1:7b:ef:24:6f:da:b1:50:6a:99:84:70:32:68: 9c:47:e7:98:03:b5:c7:65:87:7b:ad:44:8f:43:2c: 9e:58:f2:41:3c:9b:15:25:6d:3c:0f:66:c7:e6:25: be:cb:d9:d5:d6:32:e6:f9:7e:80:41:a8:a6:10:49: a9:b4:9c:7c:3d:94:79:35:ca:99:65:6c:b2:c5:56: 6d:af:64:10:85:8a:4a:13:35:71:1e:c0:bb:a3:60: ed:84:3d:26:83:64:ff:87:3e:ec:79:fa:f7:4a:aa: 27:d5:62:b2:57:a6:67:1a:38:31:83:d4:fe:77:7f: 2a:75:ce:d3:2f:79:db:99:90:00:ec:f9:fb:e7:94: 9f:e3:a6:f0:4a:42:9b:e6:d9:f0:a6:db:a4:07:d0: c5:6e:23:db:d9:ec:99:89:f7:f8:38:66:cd:75:2b: 24:ec:8a:48:14:8d:9b:eb:b3:a0:b1:25:69:ed:36: 03:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:89:65:B3:6E:80:23:61:E9:7C:49:4B:06:63:94:67:F8:27:21:E7 X509v3 Authority Key Identifier: keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:86:bb:4d:cd:ca:45:70:df:6c:0d:eb:46:5b:00:e9:bc:15: 45:b6:6b:84:43:f6:a8:27:fc:fb:96:d7:05:8e:39:6d:01:c3: 61:d7:eb:de:7b:38:ad:51:b2:17:20:d3:d7:db:aa:37:aa:39: b5:42:3f:0d:2f:0a:0b:2b:93:c2:4b:0b:7c:50:d7:5d:92:ac: 14:fd:2d:14:33:70:71:f2:05:2e:b2:71:6b:a8:fe:15:82:8a: e4:d0:f8:4d:1d:35:12:0f:b7:b4:0b:e2:61:6b:cb:b8:67:17: cf:59:ee:01:4b:bd:1e:8a:48:63:73:c9:ea:3b:4b:47:0e:79: 35:41:b3:74:98:a8:33:89:b7:e9:ce:2b:2f:2f:53:85:65:15: ec:0d:ef:1f:6f:0b:aa:8e:e0:45:ff:a6:78:2e:59:d5:84:73: f5:82:0a:72:1b:02:8d:54:81:cf:e0:ad:04:dd:34:48:4a:fc: b0:09:61:6e:de:0a:2c:17:e5:0b:f4:52:bf:1a:47:a0:03:62: 1f:25:f4:bf:cc:fb:f2:56:1b:da:dd:cb:54:7b:6d:b3:29:e1: e9:45:f6:6a:85:39:89:f1:d0:41:67:70:e2:17:64:13:42:da: 96:88:61:e8:a9:53:d8:d0:9f:6b:45:bf:96:79:b9:60:03:6d: 1a:93:96:fe -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVWDTzQJFA8Ami6UjhY4L8UwEbm8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhhOTNjODFlY2QzMDhlNmE3NjMyNzE3MDQ1YjNkMzUx NTAxMjBmODAeFw0yNTA4MDMyMzIyMTZaFw0yNTA4MDUwMjM4MTZaMDMxMTAvBgNV BAMTKERBODk2NUIzNkU4MDIzNjFFOTdDNDk0QjA2NjM5NDY3RjgyNzIxRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/DnGhMitPqxIT6MS9Bu4Y+xH7 LzQLjIuIJ1Tov212n+YqLF4FNSqZKGjTBkLC5gLmojTX4HViPS+e0z2IqYlG2SKc SaXXt9XhTA7he+8kb9qxUGqZhHAyaJxH55gDtcdlh3utRI9DLJ5Y8kE8mxUlbTwP ZsfmJb7L2dXWMub5foBBqKYQSam0nHw9lHk1ypllbLLFVm2vZBCFikoTNXEewLuj YO2EPSaDZP+HPux5+vdKqifVYrJXpmcaODGD1P53fyp1ztMveduZkADs+fvnlJ/j pvBKQpvm2fCm26QH0MVuI9vZ7JmJ9/g4Zs11KyTsikgUjZvrs6CxJWntNgOnAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU2olls26AI2HpfElLBmOUZ/gnIecwHwYDVR0j BBgwFoAUOKk8gezTCOanYycXBFs9NRUBIPgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgyYzY1YjktNzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZm OWI4LzAvMzhBOTNDODFFQ0QzMDhFNkE3NjMyNzE3MDQ1QjNEMzUxNTAxMjBGOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09LazhnZXpUQ09hbll5Y1hCRnM5TlJV QklQZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODJjNjViOS03 MjVkLTRiYjAtYTIxNi04ZTc3MTkxZmY5YjgvMC8zOEE5M0M4MUVDRDMwOEU2QTc2 MzI3MTcwNDVCM0QzNTE1MDEyMEY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo4a7Tc3KRXDfbA3rRlsA 6bwVRbZrhEP2qCf8+5bXBY45bQHDYdfr3ns4rVGyFyDT19uqN6o5tUI/DS8KCyuT wksLfFDXXZKsFP0tFDNwcfIFLrJxa6j+FYKK5ND4TR01Eg+3tAviYWvLuGcXz1nu AUu9HopIY3PJ6jtLRw55NUGzdJioM4m36c4rLy9ThWUV7A3vH28Lqo7gRf+meC5Z 1YRz9YIKchsCjVSBz+CtBN00SEr8sAlhbt4KLBflC/RSvxpHoANiHyX0v8z78lYb 2t3LVHttsynh6UX2aoU5ifHQQWdw4hdkE0Lalohh6KlT2NCfa0W/lnm5YANtGpOW /g== -----END CERTIFICATE-----Generated at Mon Aug 4 03:36:19 2025 by rpki-client