$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft File: 38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json) Hash identifier: CfqhSocObj4iBYfSHGSdNDxfm2N8ofm8svz+Tcv0v/4= Subject key identifier: C2:23:96:08:2A:A1:E1:D6:12:D5:7B:29:1C:6A:DB:34:1A:94:E8:F6 Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8 Certificate serial: 731BC0771C830C6FEE9FDF7A44016A9E56785E8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft Manifest number: F9 Signing time: Sat 14 Jun 2025 09:07:52 +0000 Manifest this update: Sat 14 Jun 2025 09:02:52 +0000 Manifest next update: Sun 15 Jun 2025 09:28:52 +0000 Files and hashes: 1: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: mN3Qu59H2oC79ZObPpdN6ubuCwdpq+KwMSfQr8+kwt4=) 2: 326130323a323937303a3a2f32392d3239203d3e203433383437.roa (hash: s2Lo9o3m7PNA+VTM8h6HfGJuLE7e0u+GGo764aM9FW4=) 3: 33312e3138352e3130352e302f32342d3234203d3e20313335333931.roa (hash: UHjaYZdaJB6lUIpYnqhxUJeEQvDh7dO7siLVcmgE1HM=) 4: 3138352e35382e3135372e302f32342d3234203d3e2039333034.roa (hash: ecPrVI69N/vnSd3FE9LMlI9j3yoUAyDEH+/p4MpTJaY=) 5: 3138352e35382e3135372e302f32342d3234203d3e2032393134.roa (hash: lpWXt6uFvU2PZ1sNhgr10rMfQuglN6ZjbNveDXRK2tg=) 6: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: jK9tTJ3HWkDECaNJJZCeSwWGUPLGyK3Y5TeyBPZZ8ds=) 7: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: tjhKwoa/z/ms3eL96lf+MyeXfH8SFjq92hWldF9BNCA=) 8: 34362e3138322e31382e302f32332d3233203d3e203433383437.roa (hash: 4Ns+nZIS59tdPTXyzEk/8ZsDfijKL83vY7HPlP7mVB0=) 9: 3138352e35382e3135382e302f32342d3234203d3e203432383331.roa (hash: H0/UOIDOPTZQG2jWBZUuvlV7qmEWppBmDmL+nyn9Jr4=) 10: 33312e3138352e3130372e302f32342d3234203d3e203231383539.roa (hash: qnu9sW/eXhzgLqcliqR873WFuo1En8erdPs6TqliSEg=) 11: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: jGy7NRXxpQ8Adk8KlwvLUXW9fgmGYykhrzR6k8tJHIg=) 12: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: GghWVTfINzno3KxmLyXD34fO23nUyajYkV1RdMCgazs=) 13: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: YFUHOvZUTuDXo1v/ldHHqjI9VjtTCBbJBPcqOziNAKY=) 14: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: DOt+xOMDogaXujbawrGL0U15zCSEQeK/RAeOdZ56ezk=) 15: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: Zxw7HANZ4fSS/h6IwZB62HG+NMCfSONfC+RPVG/FTSE=) 16: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: 01LOWf7MxhRX+2Op4rDN5W7ucn6FteIUTuCGEpIiXqg=) 17: 34362e3138322e31362e302f32332d3233203d3e203433383437.roa (hash: 4YLzigbbgGBlj3P8KPCDpw+y1a9c2DAZLVBVu5lNf4E=) 18: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: bxI8j0Q43fNYwFfEpnx3zZA+WfxxHOFpyLP15cwiRJc=) 19: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: /UuXq/SkWF47gXFnW/T4vEllXZulBrt5hUqt6XmiJns=) 20: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: 2aiAtkkpFlb5J4UKg3KwRnaG7ituhGEa6s/dcTUAgJQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:1b:c0:77:1c:83:0c:6f:ee:9f:df:7a:44:01:6a:9e:56:78:5e:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8 Validity Not Before: Jun 14 09:02:52 2025 GMT Not After : Jun 15 09:28:52 2025 GMT Subject: CN=C22396082AA1E1D612D57B291C6ADB341A94E8F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:38:8c:e4:93:ad:bd:e3:cd:ae:4b:aa:98:af: 78:46:ea:43:22:4f:c2:ae:70:e0:ac:60:20:df:32: d6:dd:b9:8e:26:96:f6:25:ec:74:c6:a7:e2:9f:3a: ae:b4:b1:a2:05:d3:d2:98:87:70:19:b5:fe:70:6f: 7b:a5:a4:df:a7:c5:c6:33:a6:72:37:0c:93:0f:5d: 0c:39:4e:12:85:7a:9d:fe:ab:dc:cd:82:17:52:e3: cb:c8:da:2c:da:e7:f6:05:5f:a7:a6:66:f7:77:b6: 33:f3:7b:71:cf:41:3b:61:c1:97:af:08:f7:ef:ff: 39:83:32:90:7f:9c:41:fc:37:af:ac:16:ce:8c:e1: e3:87:b5:86:d5:7c:ad:83:f8:78:b8:b1:2f:2e:88: 36:7d:b1:e4:bf:f7:15:29:ef:a0:4e:4a:ee:ca:86: d2:c2:4e:13:40:9f:d2:a2:b9:c2:41:41:88:10:0a: b9:22:47:da:6c:3a:bb:fa:1e:a4:b0:b1:15:89:ed: 53:10:42:d8:f7:da:af:ac:16:4b:46:22:f5:df:a4: 18:b9:87:06:54:e2:14:c3:08:ff:ec:4b:89:8a:c5: 88:f3:6d:59:55:b5:be:fd:3f:05:df:96:9f:c3:6a: b5:d8:00:62:55:ae:9b:3d:d7:29:19:49:6a:f9:d8: 64:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:23:96:08:2A:A1:E1:D6:12:D5:7B:29:1C:6A:DB:34:1A:94:E8:F6 X509v3 Authority Key Identifier: keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:c1:16:6c:0e:86:bc:70:04:6f:b0:70:83:42:6a:fc:9b:25: b4:23:4d:fb:d4:b5:4f:aa:bf:4d:3f:5e:26:87:61:82:cc:3e: ac:0b:58:2c:f3:a9:5b:94:e8:2e:23:82:99:bf:86:12:c0:06: e0:71:ed:f6:5f:21:f9:4e:84:77:e5:d9:74:55:1d:c7:f9:2a: 61:fa:ec:89:dc:72:c1:bc:a2:65:76:d2:d6:14:7a:32:40:9f: df:dc:82:5d:aa:3e:76:85:9e:67:88:01:1b:e8:d2:c6:6a:9f: 52:f7:db:60:38:f0:bb:dc:17:56:75:7e:5f:44:1f:90:75:80: e6:f2:7a:b6:7d:41:fa:b5:7b:43:46:80:3c:bb:40:4b:57:ba: 4f:d8:9c:54:c8:a6:c0:5f:66:37:c9:4b:32:32:3a:70:57:d5: da:72:7a:d9:50:3a:ef:65:4a:2d:1a:63:d8:15:4b:2e:f3:8a: f5:98:84:be:43:6a:8e:02:13:1d:80:32:1e:42:76:c6:d0:0a: 66:1c:00:00:66:df:1c:55:7b:ab:75:99:65:c4:54:1b:d6:bf: db:c0:6d:f6:1e:2b:68:68:fe:73:c8:0c:bc:27:eb:34:2e:a3: dc:db:68:eb:1e:2a:58:06:d3:89:d4:a3:ff:f2:41:03:14:99: 0a:f4:11:c9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUcxvAdxyDDG/un996RAFqnlZ4XowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhhOTNjODFlY2QzMDhlNmE3NjMyNzE3MDQ1YjNkMzUx NTAxMjBmODAeFw0yNTA2MTQwOTAyNTJaFw0yNTA2MTUwOTI4NTJaMDMxMTAvBgNV BAMTKEMyMjM5NjA4MkFBMUUxRDYxMkQ1N0IyOTFDNkFEQjM0MUE5NEU4RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKOIzkk629482uS6qYr3hG6kMi T8KucOCsYCDfMtbduY4mlvYl7HTGp+KfOq60saIF09KYh3AZtf5wb3ulpN+nxcYz pnI3DJMPXQw5ThKFep3+q9zNghdS48vI2iza5/YFX6emZvd3tjPze3HPQTthwZev CPfv/zmDMpB/nEH8N6+sFs6M4eOHtYbVfK2D+Hi4sS8uiDZ9seS/9xUp76BOSu7K htLCThNAn9KiucJBQYgQCrkiR9psOrv6HqSwsRWJ7VMQQtj32q+sFktGIvXfpBi5 hwZU4hTDCP/sS4mKxYjzbVlVtb79PwXflp/DarXYAGJVrps91ykZSWr52GQbAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUwiOWCCqh4dYS1XspHGrbNBqU6PYwHwYDVR0j BBgwFoAUOKk8gezTCOanYycXBFs9NRUBIPgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgyYzY1YjktNzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZm OWI4LzAvMzhBOTNDODFFQ0QzMDhFNkE3NjMyNzE3MDQ1QjNEMzUxNTAxMjBGOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09LazhnZXpUQ09hbll5Y1hCRnM5TlJV QklQZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODJjNjViOS03 MjVkLTRiYjAtYTIxNi04ZTc3MTkxZmY5YjgvMC8zOEE5M0M4MUVDRDMwOEU2QTc2 MzI3MTcwNDVCM0QzNTE1MDEyMEY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAucEWbA6GvHAEb7Bwg0Jq /JsltCNN+9S1T6q/TT9eJodhgsw+rAtYLPOpW5ToLiOCmb+GEsAG4HHt9l8h+U6E d+XZdFUdx/kqYfrsidxywbyiZXbS1hR6MkCf39yCXao+doWeZ4gBG+jSxmqfUvfb YDjwu9wXVnV+X0QfkHWA5vJ6tn1B+rV7Q0aAPLtAS1e6T9icVMimwF9mN8lLMjI6 cFfV2nJ62VA672VKLRpj2BVLLvOK9ZiEvkNqjgITHYAyHkJ2xtAKZhwAAGbfHFV7 q3WZZcRUG9a/28Bt9h4raGj+c8gMvCfrNC6j3Nto6x4qWAbTidSj//JBAxSZCvQR yQ== -----END CERTIFICATE-----Generated at Sat Jun 14 13:01:21 2025 by rpki-client