$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft File: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft (raw, json) Hash identifier: QHCmnEWsdm3+81TKEjxnYID5jyJBj7k2iUCwsYJttfQ= Subject key identifier: 32:01:FB:29:CD:E6:9B:2B:37:F5:05:F1:9F:AA:FE:D2:A1:D5:3B:19 Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F Certificate issuer: /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Certificate serial: 72E83DCE8ED668C69E4D8C6F20286433CBDA2A06 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft Manifest number: 36 Signing time: Wed 06 Aug 2025 14:37:55 +0000 Manifest this update: Wed 06 Aug 2025 14:32:55 +0000 Manifest next update: Thu 07 Aug 2025 16:41:55 +0000 Files and hashes: 1: 326131343a373538303a666637323a3a2f34382d3438203d3e20323033393135.roa (hash: h9EOAcugJrwunceFQsvuVh/viiSOkDi6CuOcdJIPWnA=) 2: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl (hash: oY2MYW708tSnUgFGQf5zOj/X0B5JVODNTD1FBj1VCXE=) 3: 326131343a373538303a666637333a3a2f34382d3438203d3e20323033393135.roa (hash: GieRIT3AIgJdp4hafy8WbPzRF4MVeOc7uBzRolQt/Os=) 4: 326131343a373538303a666637373a3a2f34382d3438203d3e20323033393135.roa (hash: F5/aVvIreRBQw19BMcjvtJaH6IAMjMe6w+V1TelngZU=) 5: 326131343a373538303a666637393a3a2f34382d3438203d3e20323033393135.roa (hash: 4JRXyyfbh5S+gtwReXpBVGHg5Hfkr5m0dh1qPG0/BKw=) 6: 326131343a373538303a666637313a3a2f34382d3438203d3e20323033393135.roa (hash: tQOuxzjoO2gOr2+IueULnKw1bzMsp7EoDLzHElEe0zw=) 7: 326131343a373538303a666637633a3a2f34382d3438203d3e20323033393135.roa (hash: o5X2AD19YxTsiyZsqxaO6LcogckEDGsmBlZBOovT7M0=) 8: 326131343a373538303a666637623a3a2f34382d3438203d3e20323033393135.roa (hash: +Dm2JEqaSsfzmcw/vRVxZqJazGgE0R+iZSKdYatTFPI=) 9: 326131343a373538303a666637643a3a2f34382d3438203d3e20323033393135.roa (hash: H+78AH4TYlugOgXjwzDN7rCd3EnIWoVZYuyJbZiEnfs=) 10: 326131343a373538303a666637303a3a2f34382d3438203d3e20323033393135.roa (hash: zyXKXDvOIxNrBW5QrQm19sSxkRDmx9tFlmRCkefYJk4=) 11: 326131343a373538303a666637383a3a2f34382d3438203d3e20323033393135.roa (hash: HnRWSrEpeOmuzTKhKK+Ly8/65pwZBhG8hC56Nip/vA0=) 12: 326131343a373538303a666637663a3a2f34382d3438203d3e20323033393135.roa (hash: AKQUYWOgneoO1qpRyAABoiC4d23AXJsif2Ph8QnUXyw=) 13: 326131343a373538303a666637343a3a2f34382d3438203d3e20323033393135.roa (hash: wat7PE9fGydcz5ayop5kavvbRXomHufzivqvTvbesao=) 14: 326131343a373538303a666637363a3a2f34382d3438203d3e20323033393135.roa (hash: BkHJMnQDPpptXCMBwmodU4zh5ifR8UsDSgAYqmaYZ4U=) 15: 326131343a373538303a666637613a3a2f34382d3438203d3e20313437313831.roa (hash: 5RP7M7zYFqJ8+Jv2ZfpyR8ID3GlBhQWXQs6XRm7WB50=) 16: 326131343a373538303a666637353a3a2f34382d3438203d3e20323033393135.roa (hash: 9QAAhr1wwrheqUnrWa4FkevZ/+WKuCODK+T1ZZmcwl8=) 17: 326131343a373538303a666637653a3a2f34382d3438203d3e20323033393135.roa (hash: U6uqpQVMvicANeE1+RdGwfiUHzScjnhV12wDyDdzXu8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:e8:3d:ce:8e:d6:68:c6:9e:4d:8c:6f:20:28:64:33:cb:da:2a:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Validity Not Before: Aug 6 14:32:55 2025 GMT Not After : Aug 7 16:41:55 2025 GMT Subject: CN=3201FB29CDE69B2B37F505F19FAAFED2A1D53B19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d4:99:4d:99:b9:08:09:d6:8f:e1:ab:47:42: 66:79:5c:54:7d:8e:33:85:64:31:11:38:ed:cb:72: 66:0e:7e:22:01:4c:02:97:e0:24:aa:0f:a3:0f:b3: bd:5e:2b:d1:f1:b7:49:a7:4a:ff:09:c3:38:0f:b2: 66:65:3c:41:69:8e:78:8b:46:1f:1b:4f:91:5e:67: 92:74:0f:54:06:b2:fd:17:f7:28:0c:88:73:b9:a9: 44:87:f6:6d:a2:80:e3:43:dd:ab:9e:70:b7:e2:d2: ae:40:56:ec:60:45:92:0d:5e:10:1f:ef:70:b5:cc: a0:b8:aa:66:2a:30:e7:8d:c9:99:bc:dc:54:20:f3: f4:87:d7:c0:3b:ee:1f:97:f0:a4:ec:db:74:dc:9f: 0b:f0:ab:61:5c:f9:7f:f2:b2:fc:d0:66:2d:d0:be: 67:2a:0d:b4:41:42:6f:a5:ce:05:ca:92:fb:cf:d3: a4:dd:89:2d:7c:ea:1c:e1:29:98:99:64:da:b4:bd: b1:5c:3f:2f:2b:3d:91:b4:bd:ec:bc:78:11:57:30: dc:fd:59:42:78:15:ae:01:58:50:05:63:d2:27:6c: 68:ad:6e:1d:8a:f0:73:82:8a:e5:a1:a8:9d:8d:81: bd:1b:5f:c5:e2:50:5f:de:fe:1f:21:27:e9:30:ea: 3b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:01:FB:29:CD:E6:9B:2B:37:F5:05:F1:9F:AA:FE:D2:A1:D5:3B:19 X509v3 Authority Key Identifier: keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:7b:b0:fd:0a:ab:36:3d:af:44:46:99:18:d9:af:fc:6f:07: 93:34:02:53:59:27:a0:99:4c:aa:26:93:4e:ba:b5:6a:1a:fd: 99:9f:df:9b:66:42:19:e1:13:2a:17:74:90:16:6f:d2:1b:35: 65:81:9e:28:7f:db:b6:f0:5c:46:b5:e8:27:7b:bc:7d:6c:7a: 06:c0:4d:b0:6b:b1:3e:9f:c0:2e:a6:83:48:8e:5e:13:30:f3: 8b:70:29:bb:d5:44:4a:6f:6d:5d:da:aa:ed:4d:24:c9:12:27: f9:d0:11:8d:44:cd:ae:bf:89:78:e5:91:88:f2:bd:76:86:08: 38:38:ab:fd:8a:49:74:83:9f:05:8c:4b:9c:c4:c0:38:55:e1: 9a:14:60:4c:7f:bc:c7:7b:a1:7b:61:4d:76:96:ef:8b:fe:bc: 8f:e2:31:0b:86:cd:8e:29:d4:19:21:ff:43:b7:bf:c1:56:5c: 07:78:c0:7d:03:76:44:fd:95:13:17:aa:98:35:1c:c0:80:b8: 58:f4:56:65:83:f0:06:cc:dd:55:53:15:c4:60:07:8f:0b:eb: 6f:41:00:03:06:a9:1d:9b:4d:17:95:58:d5:49:e1:16:3d:26: 87:5e:d2:a0:a8:ef:87:9b:3d:2c:19:fb:47:32:8a:d0:5e:fa: f1:47:25:db -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUcug9zo7WaMaeTYxvIChkM8vaKgYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlC RjFEMEYyRjAeFw0yNTA4MDYxNDMyNTVaFw0yNTA4MDcxNjQxNTVaMDMxMTAvBgNV BAMTKDMyMDFGQjI5Q0RFNjlCMkIzN0Y1MDVGMTlGQUFGRUQyQTFENTNCMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/1JlNmbkICdaP4atHQmZ5XFR9 jjOFZDEROO3LcmYOfiIBTAKX4CSqD6MPs71eK9Hxt0mnSv8JwzgPsmZlPEFpjniL Rh8bT5FeZ5J0D1QGsv0X9ygMiHO5qUSH9m2igOND3auecLfi0q5AVuxgRZINXhAf 73C1zKC4qmYqMOeNyZm83FQg8/SH18A77h+X8KTs23Tcnwvwq2Fc+X/ysvzQZi3Q vmcqDbRBQm+lzgXKkvvP06TdiS186hzhKZiZZNq0vbFcPy8rPZG0vey8eBFXMNz9 WUJ4Fa4BWFAFY9InbGitbh2K8HOCiuWhqJ2Ngb0bX8XiUF/e/h8hJ+kw6juLAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUMgH7Kc3mmys39QXxn6r+0qHVOxkwHwYDVR0j BBgwFoAUzHkaH1yzuyyvfCg4IRLiab8dDy8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMz N2ZjLzEvQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlCRjFEMEYyRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9DQzc5MUExRjVDQjNCQjJDQUY3QzI4Mzgy MTEyRTI2OUJGMUQwRjJGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I3YTBhYTU2LTRhMWQtNGJhOC1hYjY2LWM1OWZlZDRjMzdmYy8xL0NDNzkxQTFG NUNCM0JCMkNBRjdDMjgzODIxMTJFMjY5QkYxRDBGMkYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDDe7D9 Cqs2Pa9ERpkY2a/8bweTNAJTWSegmUyqJpNOurVqGv2Zn9+bZkIZ4RMqF3SQFm/S GzVlgZ4of9u28FxGtegne7x9bHoGwE2wa7E+n8AupoNIjl4TMPOLcCm71URKb21d 2qrtTSTJEif50BGNRM2uv4l45ZGI8r12hgg4OKv9ikl0g58FjEucxMA4VeGaFGBM f7zHe6F7YU12lu+L/ryP4jELhs2OKdQZIf9Dt7/BVlwHeMB9A3ZE/ZUTF6qYNRzA gLhY9FZlg/AGzN1VUxXEYAePC+tvQQADBqkdm00XlVjVSeEWPSaHXtKgqO+Hmz0s GftHMorQXvrxRyXb -----END CERTIFICATE-----Generated at Thu Aug 7 02:11:18 2025 by rpki-client