$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft File: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json) Hash identifier: JIKPMfz5e9zg83MMP+XrHe9TYn/MTy/0ZnFoWP3W1WM= Subject key identifier: 39:F9:D6:62:F4:91:EF:D6:58:01:CD:CD:12:CE:F1:19:5F:A7:E5:8E Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Certificate serial: 2E1E6FF87F88711EDB38D03CDA04CFFEC79F8154 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft Manifest number: BA Signing time: Tue 05 Aug 2025 12:22:21 +0000 Manifest this update: Tue 05 Aug 2025 12:17:21 +0000 Manifest next update: Wed 06 Aug 2025 12:58:21 +0000 Files and hashes: 1: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: sUFXVk5mJuzGXi+txvF0jHfWX/7COhdmW+wdhnGLLbA=) 2: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: 4eRihxuyWrFmyrmWNHP+q80BiQuGj/+XTMKJH0kDcVI=) 3: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: DtNy+7rU1hOVxMrulSSVT6vDri10fzydAEe873mgMpc=) 4: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: 0XA7loK9zcLZ4LH8gJRLIhKhFochpbrC40dXD0XEE/8=) 5: 3139342e3132342e3233342e302f32342d3234203d3e20393936.roa (hash: ZoxbCHQMtNZPfbUxrxLpOcXkuKUfw+Blft69mSm2oZk=) 6: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: lmVh0tkdqz2ZaktlfIJzzJLuyL6wItEcUEPI+PVNqdo=) 7: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: MbX2Jo3+qNy9yJ51qumhhpSA5fjjpKXnL9+Ixdd7q/M=) 8: 3139342e3132342e3233342e302f32342d3234203d3e203534333339.roa (hash: wdUsagydvVBIUao6PJHWRop4oPMEKXc9pJyNsG4SW9o=) 9: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: Bvg0bczZRvr0hNeXj13n0Q8N1O34FXLeiihKmXvd96c=) 10: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: yq+hWHhfyocRCOJbnYGyzdHlkfHxXD4gPxuVgEPCc0g=) 11: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: Wt7cVymDfWBwMzR8hqsJLmmyo1G55vHli1MG8ova8P4=) 12: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: qgpa17rXBGEZyX0zTURKp2TS7HA9WA0LAdj3r9yq+jg=) 13: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: E+WPtm+HS9AVsakqcLrBjACoAm/NbChhrd4PG4s+X5o=) 14: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: hZUNrJfyUHgUntGAqdSVlBaE4wglKTi9y0zmmly1bMY=) 15: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: ad3eCylfdMfYW/Id31ooquQQLvZwumdWGj+lszfaEsA=) 16: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: bLMKUTu2LDh7TH4JEFo2TwGKCx3JiqqNy6hRd14etMM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 12:58:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:1e:6f:f8:7f:88:71:1e:db:38:d0:3c:da:04:cf:fe:c7:9f:81:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Validity Not Before: Aug 5 12:17:21 2025 GMT Not After : Aug 6 12:58:21 2025 GMT Subject: CN=39F9D662F491EFD65801CDCD12CEF1195FA7E58E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4f:ec:38:06:7b:55:fe:b0:de:5e:94:c9:92: a5:28:72:0d:81:a2:e3:ab:1e:90:25:39:23:7f:ef: 8b:85:db:a1:63:02:e2:c4:0c:26:a6:8c:3b:1b:53: bb:15:e2:44:17:39:ec:f6:5e:c6:95:6d:ca:2e:98: 23:46:88:94:3d:2f:df:b6:db:59:1a:0e:2c:db:c1: 7f:9f:b7:5b:78:01:fc:7a:c0:b6:b0:7f:aa:20:cb: 10:1c:ec:1d:21:75:80:71:05:3f:5a:41:60:af:13: f4:03:f6:67:c2:c6:ea:19:ed:b9:b2:93:fb:9d:49: ff:62:e7:4c:74:72:50:15:ed:2a:04:6b:0a:e8:2d: eb:d2:62:a7:a0:73:8c:d2:8a:80:90:07:38:7a:23: b3:65:3e:76:3a:2a:95:cc:3b:cb:06:3f:ef:db:93: 00:ed:a8:f0:0d:ff:35:b1:be:e1:07:36:af:11:cf: f1:4c:94:a6:e8:24:ac:80:0d:a1:d3:31:8e:78:87: 02:d6:63:c0:5c:e7:25:4d:62:0b:92:0b:71:40:19: 4d:d2:14:a7:6f:d7:38:05:fe:76:6a:f9:33:88:b8: 61:47:5f:6a:1f:d1:c7:fc:ef:2f:e0:af:62:56:44: 1a:4b:5a:8e:a7:42:cb:49:f1:c1:a8:ea:d2:e9:da: ac:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F9:D6:62:F4:91:EF:D6:58:01:CD:CD:12:CE:F1:19:5F:A7:E5:8E X509v3 Authority Key Identifier: keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:bd:d9:8f:ab:9a:77:21:15:1f:d7:1c:cb:17:25:bb:79:73: 26:02:8f:6e:71:a6:b9:48:ad:e0:d1:07:fe:46:2b:08:37:16: 0a:fe:53:02:2c:a7:b3:a6:62:8b:bb:94:39:68:29:43:43:2f: 1e:b6:d8:06:24:34:47:57:de:e3:99:74:bd:4c:03:16:42:2c: e2:3e:3f:c3:a1:bd:8e:c2:45:23:a4:41:61:7c:8c:b7:80:93: a3:fe:18:96:80:2f:81:2f:cc:37:1a:4d:fb:c8:e8:68:84:aa: 89:18:4f:c0:ff:66:28:b2:fe:5f:8a:fd:d9:bf:d9:9d:f4:c5: b7:e1:f9:0d:db:fa:6b:3f:60:83:cb:e2:4b:d1:3f:a8:b7:77: 33:c0:6d:d4:70:3c:44:22:bc:c7:d8:1a:a8:dc:33:23:69:ea: 4b:43:d2:f7:c3:7e:0a:29:76:07:28:8d:53:1a:cd:a2:a2:23: b6:91:db:6e:cf:c8:ab:fe:6b:d6:7c:09:11:08:61:8c:00:7c: d3:11:d2:df:a8:75:3a:09:ba:70:1a:9c:1d:6e:19:3c:f4:6c: c9:db:26:44:ed:32:16:47:8c:a2:68:2d:f5:34:11:47:32:9e: 82:2a:72:2a:43:3f:a1:4c:85:c2:7d:a2:8b:ff:be:57:69:e5: a5:97:d1:42 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULh5v+H+IcR7bONA82gTP/sefgVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2IyOWE3NzY2OWRmNWE3YTVjYjUwNmQ4MzllZThhYTQz MzdjY2FhYzAeFw0yNTA4MDUxMjE3MjFaFw0yNTA4MDYxMjU4MjFaMDMxMTAvBgNV BAMTKDM5RjlENjYyRjQ5MUVGRDY1ODAxQ0RDRDEyQ0VGMTE5NUZBN0U1OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyT+w4BntV/rDeXpTJkqUocg2B ouOrHpAlOSN/74uF26FjAuLEDCamjDsbU7sV4kQXOez2XsaVbcoumCNGiJQ9L9+2 21kaDizbwX+ft1t4Afx6wLawf6ogyxAc7B0hdYBxBT9aQWCvE/QD9mfCxuoZ7bmy k/udSf9i50x0clAV7SoEawroLevSYqegc4zSioCQBzh6I7NlPnY6KpXMO8sGP+/b kwDtqPAN/zWxvuEHNq8Rz/FMlKboJKyADaHTMY54hwLWY8Bc5yVNYguSC3FAGU3S FKdv1zgF/nZq+TOIuGFHX2of0cf87y/gr2JWRBpLWo6nQstJ8cGo6tLp2qwzAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUOfnWYvSR79ZYAc3NEs7xGV+n5Y4wHwYDVR0j BBgwFoAUyymndmnfWnpctQbYOe6KpDN8yqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgtN2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhm MDZlLzAvQ0IyOUE3NzY2OURGNUE3QTVDQjUwNkQ4MzlFRThBQTQzMzdDQ0FBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3l5bW5kbW5mV25wY3RRYllPZTZLcERO OHlxdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iYjI1ZDA2OC03 ZjljLTRiMGUtYTY5NS0xNzc5YjdkOGYwNmUvMC9DQjI5QTc3NjY5REY1QTdBNUNC NTA2RDgzOUVFOEFBNDMzN0NDQUFDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnr3Zj6uadyEVH9ccyxcl u3lzJgKPbnGmuUit4NEH/kYrCDcWCv5TAiyns6Zii7uUOWgpQ0MvHrbYBiQ0R1fe 45l0vUwDFkIs4j4/w6G9jsJFI6RBYXyMt4CTo/4YloAvgS/MNxpN+8joaISqiRhP wP9mKLL+X4r92b/ZnfTFt+H5Ddv6az9gg8viS9E/qLd3M8Bt1HA8RCK8x9gaqNwz I2nqS0PS98N+Cil2ByiNUxrNoqIjtpHbbs/Iq/5r1nwJEQhhjAB80xHS36h1Ogm6 cBqcHW4ZPPRsydsmRO0yFkeMomgt9TQRRzKegipyKkM/oUyFwn2ii/++V2nlpZfR Qg== -----END CERTIFICATE-----Generated at Tue Aug 5 20:13:57 2025 by rpki-client