$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft File: 38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json) Hash identifier: hMplQN6sAHjvopMdlCK87LEBILEFawmTld1T2jZLU44= Subject key identifier: 7B:3F:0C:AE:E9:3F:8B:AE:DA:81:CF:A5:BD:63:73:F9:8E:13:EA:4A Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8 Certificate serial: 56DE622993F72147CC9648D724274B55D5CFFFB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft Manifest number: B4 Signing time: Sat 26 Apr 2025 08:19:58 +0000 Manifest this update: Sat 26 Apr 2025 08:14:58 +0000 Manifest next update: Sun 27 Apr 2025 11:30:58 +0000 Files and hashes: 1: 33312e3138352e3130372e302f32342d3234203d3e203231383539.roa (hash: X23TgVm2+OwqELUYhUauYCGCU9YC3xkuQ9JiAV3abPE=) 2: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: DOt+xOMDogaXujbawrGL0U15zCSEQeK/RAeOdZ56ezk=) 3: 33312e3138352e3130352e302f32342d3234203d3e203539343332.roa (hash: 2mW6+LY9N9n7Wo6R3JiZl5gpMQP421EpKKaQNdMN8SQ=) 4: 34362e3138322e31382e302f32332d3233203d3e203433383437.roa (hash: 4Ns+nZIS59tdPTXyzEk/8ZsDfijKL83vY7HPlP7mVB0=) 5: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: tjhKwoa/z/ms3eL96lf+MyeXfH8SFjq92hWldF9BNCA=) 6: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: Zxw7HANZ4fSS/h6IwZB62HG+NMCfSONfC+RPVG/FTSE=) 7: 3138352e35382e3135382e302f32342d3234203d3e203432383331.roa (hash: H0/UOIDOPTZQG2jWBZUuvlV7qmEWppBmDmL+nyn9Jr4=) 8: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: jK9tTJ3HWkDECaNJJZCeSwWGUPLGyK3Y5TeyBPZZ8ds=) 9: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: cChIPTgzv9/pfBOg1mgjw+UKlpC9h291NfJ+3othzuU=) 10: 34362e3138322e31362e302f32332d3233203d3e203433383437.roa (hash: 4YLzigbbgGBlj3P8KPCDpw+y1a9c2DAZLVBVu5lNf4E=) 11: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: 01LOWf7MxhRX+2Op4rDN5W7ucn6FteIUTuCGEpIiXqg=) 12: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: mN3Qu59H2oC79ZObPpdN6ubuCwdpq+KwMSfQr8+kwt4=) 13: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: bxI8j0Q43fNYwFfEpnx3zZA+WfxxHOFpyLP15cwiRJc=) 14: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: 2aiAtkkpFlb5J4UKg3KwRnaG7ituhGEa6s/dcTUAgJQ=) 15: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: YFUHOvZUTuDXo1v/ldHHqjI9VjtTCBbJBPcqOziNAKY=) 16: 326130323a323937303a3a2f32392d3239203d3e203433383437.roa (hash: s2Lo9o3m7PNA+VTM8h6HfGJuLE7e0u+GGo764aM9FW4=) 17: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: jGy7NRXxpQ8Adk8KlwvLUXW9fgmGYykhrzR6k8tJHIg=) 18: 3138352e35382e3135372e302f32342d3234203d3e20323132333438.roa (hash: PJqchqcDu0h0EcPi1D5ya//wXOUcg51LCHqSFB3Qerk=) 19: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: /UuXq/SkWF47gXFnW/T4vEllXZulBrt5hUqt6XmiJns=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:de:62:29:93:f7:21:47:cc:96:48:d7:24:27:4b:55:d5:cf:ff:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8 Validity Not Before: Apr 26 08:14:58 2025 GMT Not After : Apr 27 11:30:58 2025 GMT Subject: CN=7B3F0CAEE93F8BAEDA81CFA5BD6373F98E13EA4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a0:b7:2b:4d:0a:3a:f0:6a:ce:17:c8:ed:d4: db:c5:6d:85:f0:55:5d:28:6a:f1:40:9e:d7:83:ae: 3b:da:f8:57:4f:98:7f:23:ea:7a:71:e7:3e:16:34: 78:04:a7:51:17:24:83:86:43:40:23:e9:e5:35:1a: d4:36:cb:7c:57:ad:03:4e:29:49:1d:bc:8b:b3:4f: 50:f0:b3:d3:a2:7c:19:4f:05:93:5a:d2:50:da:2c: 35:0e:29:f2:74:50:db:42:78:48:cf:27:64:7d:4d: 95:9c:2a:ce:dc:46:c7:c5:5e:81:6a:4b:4b:a5:9f: 40:f5:f3:d7:f4:30:ee:94:17:23:3b:2b:d8:1d:3c: 51:a6:74:a9:52:f6:8d:fb:be:43:34:73:32:1b:31: e3:a7:33:d9:cd:50:bd:ec:10:0a:ac:41:e5:ed:4e: aa:7b:ad:b6:78:31:f9:1e:7a:d6:fd:39:95:fe:ab: 5a:35:b5:cb:b7:1e:1c:0b:83:3b:2a:4d:d4:49:27: 01:70:05:0d:88:e1:51:16:2f:f8:b9:58:1c:e3:78: 36:f7:7b:17:6f:76:7e:6b:c6:fc:89:36:e0:4c:a5: 84:c3:d3:84:67:e1:2c:d6:b9:3c:8a:f8:13:e4:7b: e7:30:02:64:cb:06:04:84:6c:09:06:8c:23:13:19: 65:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:3F:0C:AE:E9:3F:8B:AE:DA:81:CF:A5:BD:63:73:F9:8E:13:EA:4A X509v3 Authority Key Identifier: keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:04:9d:88:e9:bd:73:4c:57:42:9b:bd:53:c1:5e:21:aa:94: 3b:bc:5b:2d:0a:e5:51:1a:af:35:39:7d:86:1f:6b:9a:00:bd: 1a:93:38:b4:e7:97:f7:e5:d7:4e:ae:aa:54:2e:c5:0f:fd:0a: 93:88:e5:55:90:75:96:c0:64:3e:ad:a3:07:9c:ae:64:99:c1: e1:e7:54:49:0b:ce:e6:b6:5a:7f:f7:0d:09:13:16:aa:dd:9b: 34:d0:b1:50:5b:2c:20:75:de:93:de:de:a5:3c:af:68:90:8b: b7:52:eb:ef:52:92:f1:9a:c7:49:96:ae:58:ff:16:dd:df:56: 46:b2:36:f5:fd:d0:e6:d7:b6:d5:22:77:16:2e:8d:f2:eb:04: 38:c0:ac:2a:e0:a5:23:ae:4e:2d:dd:17:00:5a:af:d8:d9:a6: ff:8b:71:1a:dd:9c:c9:fb:ad:61:95:44:49:b4:02:1d:78:87: df:bf:75:be:e1:0e:63:56:d6:89:37:d5:79:c6:78:c6:e7:88: 2e:06:a4:0a:19:30:b4:06:b9:44:e5:7f:2e:03:a7:4f:aa:b4: eb:a9:42:ab:aa:7d:9a:2e:f6:6b:e0:cc:32:54:c0:fb:0f:fb: 73:c8:54:b3:2f:a1:be:50:9a:73:3b:83:46:b1:2e:3e:92:f6: f3:01:64:4e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVt5iKZP3IUfMlkjXJCdLVdXP/7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhhOTNjODFlY2QzMDhlNmE3NjMyNzE3MDQ1YjNkMzUx NTAxMjBmODAeFw0yNTA0MjYwODE0NThaFw0yNTA0MjcxMTMwNThaMDMxMTAvBgNV BAMTKDdCM0YwQ0FFRTkzRjhCQUVEQTgxQ0ZBNUJENjM3M0Y5OEUxM0VBNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvoLcrTQo68GrOF8jt1NvFbYXw VV0oavFAnteDrjva+FdPmH8j6npx5z4WNHgEp1EXJIOGQ0Aj6eU1GtQ2y3xXrQNO KUkdvIuzT1Dws9OifBlPBZNa0lDaLDUOKfJ0UNtCeEjPJ2R9TZWcKs7cRsfFXoFq S0uln0D189f0MO6UFyM7K9gdPFGmdKlS9o37vkM0czIbMeOnM9nNUL3sEAqsQeXt Tqp7rbZ4Mfkeetb9OZX+q1o1tcu3HhwLgzsqTdRJJwFwBQ2I4VEWL/i5WBzjeDb3 exdvdn5rxvyJNuBMpYTD04Rn4SzWuTyK+BPke+cwAmTLBgSEbAkGjCMTGWWJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUez8Mruk/i67agc+lvWNz+Y4T6kowHwYDVR0j BBgwFoAUOKk8gezTCOanYycXBFs9NRUBIPgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgyYzY1YjktNzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZm OWI4LzAvMzhBOTNDODFFQ0QzMDhFNkE3NjMyNzE3MDQ1QjNEMzUxNTAxMjBGOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09LazhnZXpUQ09hbll5Y1hCRnM5TlJV QklQZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODJjNjViOS03 MjVkLTRiYjAtYTIxNi04ZTc3MTkxZmY5YjgvMC8zOEE5M0M4MUVDRDMwOEU2QTc2 MzI3MTcwNDVCM0QzNTE1MDEyMEY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwASdiOm9c0xXQpu9U8Fe IaqUO7xbLQrlURqvNTl9hh9rmgC9GpM4tOeX9+XXTq6qVC7FD/0Kk4jlVZB1lsBk Pq2jB5yuZJnB4edUSQvO5rZaf/cNCRMWqt2bNNCxUFssIHXek97epTyvaJCLt1Lr 71KS8ZrHSZauWP8W3d9WRrI29f3Q5te21SJ3Fi6N8usEOMCsKuClI65OLd0XAFqv 2Nmm/4txGt2cyfutYZVESbQCHXiH3791vuEOY1bWiTfVecZ4xueILgakChkwtAa5 ROV/LgOnT6q066lCq6p9mi72a+DMMlTA+w/7c8hUsy+hvlCaczuDRrEuPpL28wFk Tg== -----END CERTIFICATE-----Generated at Sat Apr 26 19:29:29 2025 by rpki-client